Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.
Wireshark logo

Display Filter Reference: Linux cooked-mode capture

Protocol field name: sll

Versions: 1.0.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
sll.etypeProtocolUnsigned integer (16 bits)1.0.0 to 4.2.4
sll.gretypeProtocolUnsigned integer (16 bits)1.0.0 to 4.2.4
sll.halenLink-layer address lengthUnsigned integer (16 bits)1.0.0 to 4.2.4
sll.hatypeLink-layer address typeUnsigned integer (16 bits)1.0.0 to 4.2.4
sll.ifindexInterface indexUnsigned integer (32 bits)3.4.0 to 4.2.4
sll.ltypeProtocolUnsigned integer (16 bits)1.0.0 to 4.2.4
sll.pkttypePacket typeUnsigned integer (16 bits)1.0.0 to 4.2.4
sll.src.ethSourceEthernet or other MAC address1.0.0 to 4.2.4
sll.src.ipv4SourceIPv4 address1.0.0 to 4.2.4
sll.src.otherSourceByte sequence1.0.0 to 4.2.4
sll.trailerTrailerByte sequence1.0.0 to 4.2.4
sll.unusedUnusedByte sequence2.4.0 to 4.2.4

Wireshark logo footer

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube