Display Filter Reference: Simple Mail Transfer Protocol

Protocol field name: smtp

Versions: 1.0.0 to 1.2.6

Field name	Type	Description	Versions
smtp.data.fragment	Frame number	DATA fragment	1.0.0 to 1.2.6
smtp.data.fragment.error	Frame number	DATA defragmentation error	1.0.0 to 1.2.6
smtp.data.fragment.multiple_tails	Boolean	DATA has multiple tail fragments	1.0.0 to 1.2.6
smtp.data.fragment.overlap	Boolean	DATA fragment overlap	1.0.0 to 1.2.6
smtp.data.fragment.overlap.conflicts	Boolean	DATA fragment overlapping with conflicting data	1.0.0 to 1.2.6
smtp.data.fragment.too_long_fragment	Boolean	DATA fragment too long	1.0.0 to 1.2.6
smtp.data.fragments	None	DATA fragments	1.0.0 to 1.2.6
smtp.data.reassembled.in	Frame number	Reassembled DATA in frame	1.0.0 to 1.2.6
smtp.req	Boolean	Request	1.0.0 to 1.2.6
smtp.req.command	String	Command	1.0.0 to 1.2.6
smtp.req.parameter	String	Request parameter	1.0.0 to 1.2.6
smtp.response.code	Unsigned 32-bit integer	Response code	1.0.0 to 1.2.6
smtp.rsp	Boolean	Response	1.0.0 to 1.2.6
smtp.rsp.parameter	String	Response parameter	1.0.0 to 1.2.6

Wireshark