Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Simple Mail Transfer Protocol
Protocol field name: smtp
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| smtp.data.fragment | Frame number | DATA fragment | 1.0.0 to 1.6.5 |
| smtp.data.fragment.count | Unsigned integer, 4 bytes | DATA fragment count | 1.6.0 to 1.6.5 |
| smtp.data.fragment.error | Frame number | DATA defragmentation error | 1.0.0 to 1.6.5 |
| smtp.data.fragment.multiple_tails | Boolean | DATA has multiple tail fragments | 1.0.0 to 1.6.5 |
| smtp.data.fragment.overlap | Boolean | DATA fragment overlap | 1.0.0 to 1.6.5 |
| smtp.data.fragment.overlap.conflicts | Boolean | DATA fragment overlapping with conflicting data | 1.0.0 to 1.6.5 |
| smtp.data.fragment.too_long_fragment | Boolean | DATA fragment too long | 1.0.0 to 1.6.5 |
| smtp.data.fragments | Label | DATA fragments | 1.0.0 to 1.6.5 |
| smtp.data.reassembled.in | Frame number | Reassembled DATA in frame | 1.0.0 to 1.6.5 |
| smtp.data.reassembled.length | Unsigned integer, 4 bytes | Reassembled DATA length | 1.4.0 to 1.6.5 |
| smtp.req | Boolean | Request | 1.0.0 to 1.6.5 |
| smtp.req.command | Character string | Command | 1.0.0 to 1.6.5 |
| smtp.req.parameter | Character string | Request parameter | 1.0.0 to 1.6.5 |
| smtp.response.code | Unsigned integer, 4 bytes | Response code | 1.0.0 to 1.6.5 |
| smtp.rsp | Boolean | Response | 1.0.0 to 1.6.5 |
| smtp.rsp.parameter | Character string | Response parameter | 1.0.0 to 1.6.5 |