Display Filter Reference

Wireshark's most powerful feature is its vast array of display filters (over 206000 fields in 2000 protocols as of version 2.2.0). They let you drill down to the exact traffic you want to see and are the basis of many of Wireshark's other features, such as the coloring rules.

This is a reference. For general help using display filters, please see the wireshark-filter manual page or the User's Guide.

Index

1 · 2 · 3 · 4 · 6 · 9 · _ · A · B · C · D · E · F · G · H · I · J · K · L · M · N · O · P · Q · R · S · T · U · V · W · X · Y · Z

1

104apci: IEC 60870-5-104-Apci (1.2.0 to 2.2.0, 6 fields)
104asdu: IEC 60870-5-104-Asdu (1.2.0 to 2.2.0, 78 fields)
1722a: IEEE 1722a Protocol (1.12.0 to 2.0.5, 26 fields)

2

2dparityfec: Pro-MPEG Code of Practice #3 release 2 FEC Protocol (1.0.0 to 2.2.0, 14 fields)

3

3comxns: 3Com XNS Encapsulation (1.0.0 to 2.2.0, 1 field)

4

4607: STANAG 4607 (GMTI Format) (1.12.0 to 1.12.1, 106 fields)

6

61883: IEC 61883 Protocol (2.2.0, 35 fields)
6lowpan: IPv6 over IEEE 802.15.4 (1.4.0 to 2.2.0, 76 fields)

9

9p: Plan 9 (1.0.0 to 2.2.0, 138 fields)

_

_ws.expert: Expert Info (1.12.0 to 2.2.0, 3 fields)
_ws.lua: Lua Dissection (1.12.0 to 2.2.0, 8 fields)
_ws.malformed: Malformed Packet (1.12.0 to 2.2.0, 3 fields)
_ws.number_string.decoding_error: Number-String Decoding Error (1.12.0 to 2.2.0, 2 fields)
_ws.type_length: Type Length Mismatch (1.12.0 to 2.2.0, 1 field)

A

a11: 3GPP2 A11 (1.0.0 to 2.2.0, 127 fields)
a21: A21 Protocol (1.12.0 to 2.2.0, 50 fields)
aaf: AVTP Audio Format (2.2.0, 18 fields)
aarp: Appletalk Address Resolution Protocol (1.0.0 to 2.2.0, 13 fields)
aasp: Aastra Signalling Protocol (1.8.0 to 2.2.0, 18 fields)
acap: Application Configuration Access Protocol (1.0.0 to 2.2.0, 6 fields)
acn: Architecture for Control Networks (1.0.0 to 2.2.0, 74 fields)
acp133: ACP133 Attribute Syntaxes (1.0.0 to 2.2.0, 107 fields)
acr122: Advanced Card Systems ACR122 (1.12.0 to 2.2.0, 52 fields)
acse: ISO 8650-1 OSI Association Control Service (1.0.0 to 2.2.0, 121 fields)
actrace: AudioCodes Trunk Trace (1.0.0 to 2.2.0, 15 fields)
adb: Android Debug Bridge (2.0.0 to 2.2.0, 25 fields)
adb_cs: Android Debug Bridge Client-Server (1.12.0 to 2.2.0, 35 fields)
adb_service: Android Debug Bridge Service (2.0.0 to 2.2.0, 39 fields)
adp: Aruba Discovery Protocol (1.0.0 to 2.2.0, 5 fields)
adwin: ADwin communication protocol (1.6.0 to 2.2.0, 47 fields)
adwin_config: ADwin configuration protocol (1.6.0 to 2.2.0, 48 fields)
aeron: Aeron Protocol (2.0.0 to 2.2.0, 108 fields)
afp: Apple Filing Protocol (1.0.0 to 2.2.0, 362 fields)
afs: Andrew File System (AFS) (1.0.0 to 2.2.0, 264 fields)
agentx: AgentX (1.0.0 to 2.2.0, 36 fields)
ah: Authentication Header (1.0.0 to 2.2.0, 6 fields)
aim: AOL Instant Messenger (1.0.0 to 2.2.0, 69 fields)
aim_admin: AIM Administrative (1.0.0 to 2.2.0, 4 fields)
aim_bos: AIM Privacy Management Service (1.0.0 to 2.2.0, 2 fields)
aim_buddylist: AIM Buddylist Service (1.0.0 to 2.2.0, 1 field)
aim_chat: AIM Chat Service (1.0.0 to 2.2.0, 1 field)
aim_generic: AIM Generic Service (1.0.0 to 2.2.0, 33 fields)
aim_icq: AIM ICQ (1.0.0 to 2.2.0, 6 fields)
aim_location: AIM Location (1.0.0 to 2.2.0, 4 fields)
aim_lookup: AIM User Lookup (1.0.0 to 2.2.0, 1 field)
aim_messaging: AIM Messaging (1.0.0 to 2.2.0, 39 fields)
aim_signon: AIM Signon (1.0.0 to 2.2.0, 3 fields)
aim_ssi: AIM Server Side Info (1.0.0 to 2.2.0, 15 fields)
aim_sst: AIM Server Side Themes (1.0.0 to 2.2.0, 6 fields)
airopeek: AiroPeek 802.11 radio information (1.0.0 to 2.0.5, 10 fields)
aj: AllJoyn Message Protocol (1.12.0 to 2.2.0, 1 field)
ajns: AllJoyn Name Service Protocol (1.12.0 to 2.2.0, 119 fields)
ajp13: Apache JServ Protocol v1.3 (1.0.0 to 2.2.0, 58 fields)
alc: Asynchronous Layered Coding (1.0.0 to 2.2.0, 34 fields)
alcap: AAL type 2 signalling protocol (Q.2630) (1.0.0 to 2.2.0, 156 fields)
amf: Action Message Format (1.10.0 to 2.2.0, 41 fields)
amqp: Advanced Message Queueing Protocol (1.0.0 to 2.2.0, 469 fields)
amr: Adaptive Multi-Rate (1.0.0 to 2.2.0, 31 fields)
ams: AMS (1.0.0 to 2.2.0, 65 fields)
ancp: Access Node Control Protocol (1.4.0 to 2.2.0, 36 fields)
ans: Intel ANS probe (1.0.0 to 2.2.0, 5 fields)
ansi_637_tele: ANSI IS-637-A (SMS) Teleservice Layer (1.0.0 to 2.2.0, 89 fields)
ansi_637_trans: ANSI IS-637-A (SMS) Transport Layer (1.0.0 to 2.2.0, 29 fields)
ansi_683: ANSI IS-683 (OTA (Mobile)) (1.0.0 to 2.2.0, 112 fields)
ansi_801: ANSI IS-801 (Location Services (PLD)) (1.0.0 to 2.2.0, 110 fields)
ansi_a_bsmap: ANSI A-I/F BSMAP (1.0.0 to 2.2.0, 372 fields)
ansi_map: ANSI Mobile Application Part (1.0.0 to 2.2.0, 979 fields)
ansi_tcap: ANSI Transaction Capabilities Application Part (1.0.0 to 2.2.0, 73 fields)
aodv: Ad hoc On-demand Distance Vector Routing Protocol (1.0.0 to 2.2.0, 30 fields)
aoe: ATAoverEthernet (1.0.0 to 2.2.0, 20 fields)
aol: America Online (1.10.0 to 2.2.0, 38 fields)
ap1394: Apple IP-over-IEEE 1394 (1.0.0 to 2.2.0, 3 fields)
apap: Printer Access Protocol (1.0.0 to 1.8.15, 11 fields)
applemidi: Apple Network-MIDI Session Protocol (1.4.0 to 2.2.0, 16 fields)
aprs: Automatic Position Reporting System (1.10.0 to 2.2.0, 88 fields)
ar_drone: AR Drone Packet (1.10.0 to 2.2.0, 30 fields)
arcnet: ARCNET (1.0.0 to 2.2.0, 8 fields)
armagetronad: The Armagetron Advanced OpenGL Tron clone (1.0.0 to 2.2.0, 6 fields)
arp: Address Resolution Protocol (1.0.0 to 2.2.0, 49 fields)
artnet: Art-Net (1.0.0 to 2.2.0, 250 fields)
aruba_erm: Aruba Networks encapsulated remote mirroring (1.4.0 to 2.2.0, 9 fields)
aruba_iap: Aruba Instant AP Protocol (1.12.0 to 2.2.0, 12 fields)
asap: Aggregate Server Access Protocol (1.0.0 to 2.2.0, 54 fields)
ascend: Lucent/Ascend debug output (1.0.0 to 2.2.0, 6 fields)
asf: Alert Standard Forum (1.0.0 to 2.2.0, 15 fields)
asp: AppleTalk Session Protocol (1.0.0 to 2.2.0, 34 fields)
asterix: ASTERIX packet (1.12.0 to 2.2.0, 1305 fields)
at: AT Command (1.6.0 to 2.2.0, 1 field)
ath: Apache Tribes Heartbeat Protocol (2.0.0 to 2.2.0, 20 fields)
atm: Asynchronous Transfer Mode (1.0.0 to 2.2.0, 72 fields)
atmtcp: ATM over TCP (1.6.0 to 2.2.0, 3 fields)
atn-cm: ICAO Doc9705 CM (1.12.0 to 2.2.0, 38 fields)
atn-cpdlc: ICAO Doc9705 CPDLC (1.12.0 to 2.2.0, 576 fields)
atn-ulcs: ICAO Doc9705 ULCS (1.12.0 to 2.2.0, 71 fields)
atp: AppleTalk Transaction Protocol packet (1.0.0 to 2.2.0, 19 fields)
atsvc: Microsoft AT-Scheduler Service (1.0.0 to 2.2.0, 127 fields)
auto_rp: Cisco Auto-RP (1.0.0 to 2.2.0, 12 fields)
ax25: Amateur Radio AX.25 (1.10.0 to 2.2.0, 21 fields)
ax25_kiss: AX.25 KISS (1.10.0 to 2.2.0, 10 fields)
ax4000: AX/4000 Test Block (1.0.0 to 2.2.0, 7 fields)
ayiya: Anything in Anything Protocol (1.2.0 to 2.2.0, 10 fields)

B

babel: Babel Routing Protocol (1.6.0 to 2.2.0, 18 fields)
bacapp: Building Automation and Control Network APDU (1.0.0 to 2.2.0, 58 fields)
bacnet: Building Automation and Control Network NPDU (1.0.0 to 2.2.0, 30 fields)
bacp: PPP Bandwidth Allocation Control Protocol (1.0.0 to 2.2.0, 3 fields)
banana: Twisted Banana (1.4.0 to 2.2.0, 13 fields)
bap: PPP Bandwidth Allocation Protocol (1.0.0 to 2.2.0, 15 fields)
basicxid: Logical-Link Control Basic Format XID (1.0.0 to 2.2.0, 3 fields)
bat: B.A.T.M.A.N. Layer 3 Protocol (1.2.0 to 2.2.0, 26 fields)
batadv: B.A.T.M.A.N. Advanced Protocol (1.4.0 to 2.2.0, 157 fields)
bcp: PPP Bridging Control Protocol (1.0.0 to 2.0.5, 7 fields)
bcp_bpdu: PPP Bridging Control Protocol Bridged PDU (2.2.0, 7 fields)
bcp_ncp: PPP Bridging Control Protocol Network Control Protocol (2.2.0, 10 fields)
bctp: BCTP Q.1990 (1.0.0 to 2.2.0, 4 fields)
beep: Blocks Extensible Exchange Protocol (1.0.0 to 2.2.0, 30 fields)
bencode: Bencode (1.12.0 to 2.2.0, 14 fields)
ber: Basic Encoding Rules (ASN.1 X.690) (1.0.0 to 2.2.0, 93 fields)
bfcp: Binary Floor Control Protocol (1.8.0 to 2.2.0, 31 fields)
bfd: Bidirectional Forwarding Detection Control Message (1.0.0 to 2.2.0, 48 fields)
bgp: Border Gateway Protocol (1.0.0 to 2.2.0, 509 fields)
bicc: Bearer Independent Call Control (1.0.0 to 2.2.0, 1 field)
bitcoin: Bitcoin protocol (1.10.0 to 2.2.0, 126 fields)
bittorrent: BitTorrent (1.0.0 to 2.2.0, 32 fields)
bjnp: Canon BJNP (1.2.0 to 2.2.0, 7 fields)
bluecom: bluecom Protocol (2.2.0, 54 fields)
bluetooth: Bluetooth (2.0.0 to 2.2.0, 6 fields)
bmc: Broadcast/Multicast Control (1.6.0 to 2.2.0, 15 fields)
bmp: BGP Monitoring Protocol (2.0.0 to 2.2.0, 37 fields)
bofl: Wellfleet Breath of Life (1.0.0 to 2.2.0, 3 fields)
bootp: Bootstrap Protocol (1.0.0 to 2.2.0, 499 fields)
bootparams: Boot Parameters (1.0.0 to 2.2.0, 8 fields)
bossvr: DCE DFS Basic Overseer Server (1.0.0 to 2.2.0, 1 field)
bpq: Amateur Radio BPQ (1.10.0 to 2.2.0, 1 field)
brdwlk: Boardwalk (1.0.0 to 2.2.0, 15 fields)
browser: Microsoft Windows Browser Protocol (1.0.0 to 2.2.0, 64 fields)
brp: BRP Protocol (1.8.0 to 2.2.0, 14 fields)
bssap: BSSAP/BSAP (1.0.0 to 2.2.0, 71 fields)
bssgp: Base Station Subsystem GPRS Protocol (1.0.0 to 2.2.0, 132 fields)
bsslap: BSS LCS Assistance Protocol (1.2.0 to 2.2.0, 14 fields)
bt-dht: BitTorrent DHT Protocol (1.8.0 to 2.2.0, 14 fields)
bt-utp: uTorrent Transport Protocol (1.6.0 to 2.2.0, 16 fields)
bt3ds: Bluetooth 3DS Profile (1.12.0 to 2.2.0, 9 fields)
bta2dp: Bluetooth A2DP Profile (1.10.0 to 2.2.0, 18 fields)
bta2dp_content_protection_header_scms_t: Bluetooth A2DP Content Protection Header SCMS-T (1.12.0 to 2.2.0, 3 fields)
btamp: Bluetooth AMP Packet (1.4.0 to 2.2.0, 26 fields)
btatt: Bluetooth Attribute Protocol (1.10.0 to 2.2.0, 924 fields)
btavctp: Bluetooth AVCTP Protocol (1.10.0 to 2.2.0, 9 fields)
btavdtp: Bluetooth AVDTP Protocol (1.10.0 to 2.2.0, 138 fields)
btavrcp: Bluetooth AVRCP Profile (1.10.0 to 2.2.0, 155 fields)
btbnep: Bluetooth BNEP Protocol (1.10.0 to 2.2.0, 28 fields)
btbredr_rf: Bluetooth Pseudoheader for BR/EDR (2.2.0, 50 fields)
btcommon: Bluetooth Common (1.12.0 to 2.2.0, 150 fields)
btdun: Bluetooth DUN Packet (1.6.0 to 2.2.0, 1 field)
btgatt: Bluetooth GATT Attribute Protocol (2.2.0, 10 fields)
btgnss: Bluetooth GNSS Profile (1.10.0 to 2.2.0, 1 field)
bthci_acl: Bluetooth HCI ACL Packet (1.0.0 to 2.2.0, 27 fields)
bthci_cmd: Bluetooth HCI Command (1.0.0 to 2.2.0, 318 fields)
bthci_evt: Bluetooth HCI Event (1.0.0 to 2.2.0, 326 fields)
bthci_sco: Bluetooth HCI SCO Packet (1.0.0 to 2.2.0, 11 fields)
bthci_vendor.broadcom: Bluetooth Broadcom HCI (2.0.0 to 2.2.0, 94 fields)
bthcrp: Bluetooth HCRP Profile (1.10.0 to 2.2.0, 26 fields)
bthf: Bluetooth Handsfree Packet (1.6.0 to 1.8.15, 2 fields)
bthfp: Bluetooth HFP Profile (1.10.0 to 2.2.0, 178 fields)
bthid: Bluetooth HID Profile (1.10.0 to 2.2.0, 50 fields)
bthsp: Bluetooth HSP Profile (1.12.0 to 2.2.0, 23 fields)
btl2cap: Bluetooth L2CAP Protocol (1.0.0 to 2.2.0, 95 fields)
btle: Bluetooth Low Energy Link Layer (1.12.0 to 2.2.0, 80 fields)
btle_rf: Bluetooth Low Energy RF Info (1.12.0 to 2.2.0, 22 fields)
btmcap: Bluetooth MCAP Protocol (1.10.0 to 2.2.0, 19 fields)
btobex: Bluetooth OBEX Protocol (1.4.0 to 2.0.5, 235 fields)
btrfcomm: Bluetooth RFCOMM Protocol (1.0.0 to 2.2.0, 39 fields)
btsap: Bluetooth SAP Profile (1.10.0 to 2.2.0, 23 fields)
btsdp: Bluetooth SDP Protocol (1.0.0 to 2.2.0, 353 fields)
btsmp: Bluetooth Security Manager Protocol (1.10.0 to 2.2.0, 21 fields)
btsnoop: Symbian OS BTSNOOP File Format (2.0.0 to 2.2.0, 21 fields)
btspp: Bluetooth SPP Packet (1.6.0 to 2.2.0, 1 field)
btvdp: Bluetooth VDP Profile (1.10.0 to 2.2.0, 3 fields)
btvdp_content_protection_header_scms_t: Bluetooth VDP Content Protection Header SCMS-T (1.12.0 to 2.2.0, 3 fields)
budb: DCE/DFS BUDB (1.0.0 to 2.2.0, 214 fields)
bundle: Bundle Protocol (1.4.0 to 2.2.0, 132 fields)
butc: DCE/RPC BUTC (1.0.0 to 2.2.0, 122 fields)
bvlc: BACnet Virtual Link Control (1.0.0 to 2.2.0, 14 fields)
bzr: Bazaar Smart Protocol (1.8.0 to 2.2.0, 9 fields)

C

c1222: ANSI C12.22 (1.8.0 to 2.2.0, 78 fields)
c15: C15 Call History Protocol (2.0.0 to 2.2.0, 451 fields)
c15.ch: C15 Call History Common Header Protocol (2.0.0 to 2.2.0, 12 fields)
c15.inc_gwe: C15 Incoming GWE (2.0.0 to 2.2.0, 136 fields)
c15.out_gwe: C15 Outgoing GWE (2.0.0 to 2.2.0, 97 fields)
c15.tone: C15 Tone (2.0.0 to 2.2.0, 38 fields)
c15hbeat: C15 Call History Heartbeat Protocol (2.0.0 to 2.2.0, 4 fields)
calcappprotocol: Calculation Application Protocol (1.0.0 to 2.2.0, 6 fields)
camel: Camel (1.0.0 to 2.2.0, 668 fields)
can: Controller Area Network (1.4.0 to 2.2.0, 5 fields)
canopen: CANopen (1.8.0 to 2.2.0, 52 fields)
capwap: Control And Provisioning of Wireless Access Points - Control (1.4.0 to 2.2.0, 453 fields)
carp: Common Address Redundancy Protocol (1.12.0 to 2.2.0, 11 fields)
cast: Cast Client Control Protocol (1.0.0 to 2.2.0, 100 fields)
cattp: ETSI Card Application Toolkit Transport Protocol (2.0.0 to 2.2.0, 25 fields)
cba_acco_cb: ICBAAccoCallback (1.0.0 to 2.2.0, 14 fields)
cba_acco_mgt: ICBAAccoMgt (1.0.0 to 2.2.0, 52 fields)
cba_acco_server: ICBAAccoServer (1.0.0 to 2.2.0, 14 fields)
cba_browse: ICBABrowse (1.0.0 to 2.2.0, 20 fields)
cba_pdev: ICBAPhysicalDevice (1.0.0 to 2.2.0, 18 fields)
cbcp: PPP Callback Control Protocol (1.0.0 to 2.2.0, 5 fields)
cbor: Concise Binary Object Representation (2.0.0 to 2.2.0, 25 fields)
ccp: PPP Compression Control Protocol (1.0.0 to 2.2.0, 34 fields)
ccsds: CCSDS (1.0.0 to 2.2.0, 33 fields)
ccsrl: H.324/CCSRL (1.0.0 to 2.2.0, 1 field)
cdp: Cisco Discovery Protocol (1.0.0 to 2.2.0, 85 fields)
cds_clerkserver: CDS Clerk Server Calls (1.0.0 to 2.2.0, 1 field)
cds_solicit: DCE/RPC CDS Solicitation (1.0.0 to 2.2.0, 1 field)
cdt: Compressed Data Type (1.0.0 to 2.2.0, 13 fields)
ceph: Ceph (2.0.0 to 2.2.0, 650 fields)
cfdp: CFDP (1.12.0 to 2.2.0, 72 fields)
cflow: Cisco NetFlow/IPFIX (1.0.0 to 2.2.0, 794 fields)
cfm: CFM EOAM 802.1ag/ITU Protocol (1.0.0 to 2.2.0, 130 fields)
cfp: Cisco FabricPath (1.8.0 to 2.2.0, 12 fields)
cgmp: Cisco Group Management Protocol (1.0.0 to 2.2.0, 6 fields)
chap: PPP Challenge Handshake Authentication Protocol (1.0.0 to 2.2.0, 9 fields)
chargen: Character Generator Protocol (2.0.0 to 2.2.0, 1 field)
chargingase: Charging ASE (1.2.0 to 2.2.0, 82 fields)
chdlc: Cisco HDLC (1.0.0 to 2.2.0, 4 fields)
cigi: Common Image Generator Interface (1.0.0 to 2.2.0, 834 fields)
cimd: Computer Interface to Message Distribution (1.0.0 to 2.2.0, 48 fields)
cimetrics: Cimetrics MS/TP (1.2.0 to 2.2.0, 4 fields)
cip: Common Industrial Protocol (1.0.0 to 2.2.0, 330 fields)
cipcco: CIP Connection Configuration Object (1.4.0 to 2.2.0, 49 fields)
cipcm: CIP Connection Manager (1.4.0 to 2.2.0, 55 fields)
cipm: Common Industrial Protocol, Motion (1.8.0 to 2.2.0, 190 fields)
cipmb: CIP Modbus Object (1.8.0 to 2.2.0, 22 fields)
cipsafety: Common Industrial Protocol, Safety (1.8.0 to 2.2.0, 49 fields)
cipssupervisor: CIP Safety Supervisor (1.8.0 to 2.2.0, 127 fields)
cipsvalidator: CIP Safety Validator (1.8.0 to 2.2.0, 29 fields)
cisco-erspan3-marker: CISCO ERSPAN3 Marker Packet (2.2.0, 12 fields)
classicstun: Simple Traversal of UDP Through NAT (1.4.0 to 2.2.0, 29 fields)
clearcase: Clearcase NFS (1.0.0 to 2.2.0, 1 field)
clip: Classical IP frame (2.0.0 to 2.2.0, 1 field)
clique-rm: Clique Reliable Multicast Protocol (1.10.0 to 2.2.0, 22 fields)
clnp: ISO 8473/X.233 CLNP ConnectionLess Network Protocol (1.0.0 to 2.2.0, 31 fields)
cltp: ISO 8602/X.234 CLTP ConnectionLess Transport Protocol (1.0.0 to 2.2.0, 2 fields)
cmctrl_tlv: DOCSIS CM-CTRL TLV's (1.6.0 to 2.2.0, 11 fields)
cmd: Cisco MetaData (1.12.0 to 2.2.0, 6 fields)
cmip: X711 CMIP (1.0.0 to 2.2.0, 334 fields)
cmp: Certificate Management Protocol (1.0.0 to 2.2.0, 221 fields)
cmpp: China Mobile Point to Point Protocol (1.0.0 to 2.2.0, 47 fields)
cms: Cryptographic Message Syntax (1.0.0 to 2.2.0, 173 fields)
cnip: Component Network over IP (1.8.0 to 2.2.0, 12 fields)
coap: Constrained Application Protocol (1.6.0 to 2.2.0, 49 fields)
collectd: collectd network data (1.4.0 to 2.2.0, 28 fields)
componentstatusprotocol: Component Status Protocol (1.0.0 to 2.2.0, 18 fields)
conv: DCE/RPC Conversation Manager (1.0.0 to 2.2.0, 9 fields)
cops: Common Open Policy Service (1.0.0 to 2.2.0, 207 fields)
corosync_totemnet: Totemnet Layer of Corosync Cluster Engine (2.0.0 to 2.2.0, 4 fields)
corosync_totemsrp: Totem Single Ring Protocol implemented in Corosync Cluster Engine (2.0.0 to 2.2.0, 46 fields)
cosine: CoSine IPNOS L2 debug output (1.0.0 to 2.2.0, 7 fields)
cotp: ISO 8073/X.224 COTP Connection-Oriented Transport Protocol (1.0.0 to 2.2.0, 67 fields)
couchbase: Couchbase Protocol (2.0.0 to 2.2.0, 92 fields)
cp2179: CP2179 Protocol (2.0.0 to 2.2.0, 55 fields)
cpfi: Cross Point Frame Injector (1.0.0 to 2.2.0, 21 fields)
cpha: Check Point High Availability Protocol (1.0.0 to 2.2.0, 34 fields)
cprpc_server: DNS Control Program Server (1.0.0 to 2.2.0, 1 field)
cql: Cassandra CQL Protocol (2.2.0, 46 fields)
credssp: Credential Security Support Provider (1.8.0 to 2.2.0, 27 fields)
crf: Clock Reference Format (2.2.0, 14 fields)
crmf: Certificate Request Message Format (1.0.0 to 2.2.0, 114 fields)
crtp: CRTP (1.0.0 to 2.2.0, 15 fields)
csm_encaps: CSM_ENCAPS (1.0.0 to 2.2.0, 54 fields)
csn1: CSN.1 (2.0.0 to 2.2.0, 8 fields)
ctdb: Cluster TDB (1.0.0 to 2.2.0, 39 fields)
cups: Common Unix Printing System (CUPS) Browsing Protocol (1.0.0 to 2.2.0, 24 fields)
cwids: Cisco Wireless IDS Captures (1.0.0 to 2.2.0, 9 fields)

D

daap: Digital Audio Access Protocol (1.0.0 to 2.2.0, 12 fields)
dap: X.519 Directory Access Protocol (1.0.0 to 2.2.0, 501 fields)
data: Data (1.0.0 to 2.2.0, 4 fields)
daytime: Daytime Protocol (1.0.0 to 2.2.0, 2 fields)
db-lsp: Dropbox LAN sync Protocol (1.4.0 to 2.2.0, 7 fields)
dbus: D-Bus (1.10.0 to 2.2.0, 21 fields)
dc: Dublin Core Metadata (DC) (1.0.0 to 2.2.0, 16 fields)
dcc: Distributed Checksum Clearinghouse protocol (1.0.0 to 2.2.0, 36 fields)
dccp: Datagram Congestion Control Protocol (1.0.0 to 2.2.0, 46 fields)
dce_update: DCE/RPC UpServer (1.0.0 to 2.2.0, 1 field)
dcerpc: Distributed Computing Environment / Remote Procedure Call (DCE/RPC) (1.0.0 to 2.2.0, 239 fields)
dcm: DICOM (1.0.0 to 1.0.16, 16 fields)
dcom: DCOM (1.0.0 to 2.2.0, 95 fields)
dcp-af: DCP Application Framing Layer (1.0.0 to 2.2.0, 8 fields)
dcp-etsi: ETSI Distribution & Communication Protocol (for DRM) (1.0.0 to 2.2.0, 3 fields)
dcp-pft: DCP Protection, Fragmentation & Transport Layer (1.0.0 to 2.2.0, 28 fields)
dcp-tpl: DCP Tag Packet Layer (1.0.0 to 2.2.0, 2 fields)
dct2000: Catapult DCT2000 packet (1.0.0 to 2.2.0, 70 fields)
ddp: Datagram Delivery Protocol (1.0.0 to 2.2.0, 12 fields)
ddtp: Dynamic DNS Tools Protocol (1.0.0 to 2.2.0, 9 fields)
dec_dna: DEC DNA Routing Protocol (1.0.0 to 2.2.0, 59 fields)
dec_stp: DEC Spanning Tree Protocol (1.0.0 to 2.2.0, 17 fields)
dect: DECT Protocol (1.2.0 to 2.2.0, 126 fields)
devicenet: DeviceNet Protocol (1.12.0 to 2.2.0, 40 fields)
dhcpfo: DHCP Failover (1.0.0 to 2.2.0, 39 fields)
dhcpv6: DHCPv6 (1.0.0 to 2.2.0, 154 fields)
dhcpv6.bulk_leasequery: DHCPv6 Bulk Leasequery (1.10.0 to 2.2.0, 7 fields)
diameter: Diameter Protocol (1.0.0 to 2.2.0, 2414 fields)
diameter.3gpp: Diameter 3GPP (1.10.0 to 2.2.0, 237 fields)
diameter3gpp: Diameter 3GPP (1.0.0 to 1.8.15, 63 fields)
dicom: DICOM (1.2.0 to 2.2.0, 75 fields)
dis: Distributed Interactive Simulation (1.0.0 to 2.2.0, 418 fields)
disp: X.519 Directory Information Shadowing Protocol (1.0.0 to 2.2.0, 161 fields)
dispatch: DCOM IDispatch (1.0.0 to 2.2.0, 64 fields)
distcc: Distcc Distributed Compiler (1.0.0 to 2.2.0, 9 fields)
djiuav: DJI UAV Drone Control Protocol (2.0.0 to 2.2.0, 13 fields)
dlm3: Distributed Lock Manager (1.0.0 to 2.2.0, 131 fields)
dlr: Device Level Ring (1.4.0 to 2.2.0, 36 fields)
dlsw: Data Link SWitching (1.0.0 to 2.2.0, 71 fields)
dmp: Direct Message Profile (1.0.0 to 2.2.0, 194 fields)
dmx: DMX (1.8.0 to 2.2.0, 2 fields)
dmx-chan: DMX Channels (1.8.0 to 2.0.5, 2 fields)
dmx-sip: DMX SIP (1.8.0 to 2.0.5, 19 fields)
dmx-test: DMX Test Frame (1.8.0 to 2.0.5, 3 fields)
dmx-text: DMX Text Frame (1.8.0 to 2.0.5, 3 fields)
dmx_chan: DMX Channels (2.2.0, 2 fields)
dmx_sip: DMX SIP (2.2.0, 18 fields)
dmx_test: DMX Test Frame (2.2.0, 3 fields)
dmx_text: DMX Text Frame (2.2.0, 3 fields)
dnp3: Distributed Network Protocol 3.0 (1.0.0 to 2.2.0, 162 fields)
dns: Domain Name System (1.0.0 to 2.2.0, 309 fields)
dnsserver: DNS Server (1.0.0 to 2.2.0, 142 fields)
docsis: DOCSIS 1.1 (1.0.0 to 2.2.0, 37 fields)
docsis_bintrngreq: DOCSIS Bonded Initial Ranging Message (1.4.0 to 2.2.0, 6 fields)
docsis_bpkmattr: DOCSIS Baseline Privacy Key Management Attributes (1.0.0 to 2.2.0, 28 fields)
docsis_bpkmreq: DOCSIS Baseline Privacy Key Management Request (1.0.0 to 2.2.0, 3 fields)
docsis_bpkmrsp: DOCSIS Baseline Privacy Key Management Response (1.0.0 to 2.2.0, 3 fields)
docsis_cmctrlreq: DOCSIS CM Control Request (1.6.0 to 2.2.0, 1 field)
docsis_cmctrlrsp: DOCSIS CM Control Response (1.6.0 to 2.2.0, 1 field)
docsis_cmstatus: DOCSIS CM-STATUS Report (1.6.0 to 2.2.0, 15 fields)
docsis_dbcack: DOCSIS Dynamic Bonding Change Acknowledge (1.6.0 to 2.2.0, 1 field)
docsis_dbcreq: DOCSIS Dynamic Bonding Change Request (1.6.0 to 2.2.0, 3 fields)
docsis_dbcrsp: DOCSIS Dynamic Bonding Change Response (1.6.0 to 2.2.0, 2 fields)
docsis_dccack: DOCSIS Downstream Channel Change Acknowledge (1.0.0 to 2.2.0, 3 fields)
docsis_dccreq: DOCSIS Downstream Channel Change Request (1.0.0 to 2.2.0, 21 fields)
docsis_dccrsp: DOCSIS Downstream Channel Change Response (1.0.0 to 2.2.0, 6 fields)
docsis_dcd: DOCSIS Downstream Channel Descriptor (1.0.0 to 2.2.0, 29 fields)
docsis_dpd: DOCSIS Downstream Profile Descriptor (2.2.0, 16 fields)
docsis_dpvreq: DOCSIS Path Verify Request (1.6.0 to 2.2.0, 9 fields)
docsis_dpvrsp: DOCSIS Path Verify Response (1.6.0 to 2.2.0, 9 fields)
docsis_dsaack: DOCSIS Dynamic Service Addition Acknowledge (1.0.0 to 2.2.0, 2 fields)
docsis_dsareq: DOCSIS Dynamic Service Addition Request (1.0.0 to 2.2.0, 1 field)
docsis_dsarsp: DOCSIS Dynamic Service Addition Response (1.0.0 to 2.2.0, 2 fields)
docsis_dscack: DOCSIS Dynamic Service Change Acknowledgement (1.0.0 to 2.2.0, 2 fields)
docsis_dscreq: DOCSIS Dynamic Service Change Request (1.0.0 to 2.2.0, 1 field)
docsis_dscrsp: DOCSIS Dynamic Service Change Response (1.0.0 to 2.2.0, 2 fields)
docsis_dsdreq: DOCSIS Dynamic Service Delete Request (1.0.0 to 2.2.0, 3 fields)
docsis_dsdrsp: DOCSIS Dynamic Service Delete Response (1.0.0 to 2.2.0, 3 fields)
docsis_intrngreq: DOCSIS Initial Ranging Message (1.0.0 to 2.2.0, 3 fields)
docsis_map: DOCSIS Upstream Bandwidth Allocation (1.0.0 to 2.2.0, 14 fields)
docsis_mdd: DOCSIS Mac Domain Description (1.2.0 to 2.2.0, 42 fields)
docsis_mgmt: DOCSIS Mac Management (1.0.0 to 2.2.0, 9 fields)
docsis_ocd: DOCSIS OFDM Channel Descriptor (2.2.0, 17 fields)
docsis_regack: DOCSIS Registration Acknowledge (1.0.0 to 2.2.0, 2 fields)
docsis_regreq: DOCSIS Registration Requests (1.0.0 to 2.2.0, 1 field)
docsis_regreqmp: DOCSIS Registration Request Multipart (1.2.0 to 2.2.0, 3 fields)
docsis_regrsp: DOCSIS Registration Responses (1.0.0 to 2.2.0, 2 fields)
docsis_regrspmp: DOCSIS Registration Response Multipart (1.2.0 to 2.2.0, 4 fields)
docsis_rngreq: DOCSIS Range Request Message (1.0.0 to 2.2.0, 3 fields)
docsis_rngrsp: DOCSIS Ranging Response (1.0.0 to 2.2.0, 11 fields)
docsis_sync: DOCSIS Synchronisation Message (1.2.0 to 2.2.0, 1 field)
docsis_tlv: DOCSIS Appendix C TLV's (1.0.0 to 2.2.0, 306 fields)
docsis_type29ucd: DOCSIS Upstream Channel Descriptor Type 29 (1.0.0 to 2.2.0, 56 fields)
docsis_type35ucd: DOCSIS Upstream Channel Descriptor Type 35 (2.2.0, 60 fields)
docsis_uccreq: DOCSIS Upstream Channel Change Request (1.0.0 to 2.2.0, 1 field)
docsis_uccrsp: DOCSIS Upstream Channel Change Response (1.0.0 to 2.2.0, 1 field)
docsis_ucd: DOCSIS Upstream Channel Descriptor (1.0.0 to 2.2.0, 48 fields)
docsis_vsif: DOCSIS Vendor Specific Encodings (1.0.0 to 2.2.0, 7 fields)
dof: DOF Protocol Stack (2.2.0, 49 fields)
dof.ccm: DOF CCM Security Mode of Operation (2.2.0, 12 fields)
dof.ccm.app: DOF CCM Security Mode App (2.2.0, 1 field)
dof.ccm.dsp: DOF CCM Security Mode DSP Options (2.2.0, 7 fields)
dof.dnp: DOF Network Protocol (2.2.0, 2 fields)
dof.dnp.v0: DOF Network Protocol V0 (2.2.0, 2 fields)
dof.dnp.v1: DOF Network Protocol V1 (2.2.0, 8 fields)
dof.dpp: DOF Presentation Protocol (2.2.0, 12 fields)
dof.dpp.v0: DOF Presentation Protocol V0 (2.2.0, 1 field)
dof.dpp.v2: DOF Presentation Protocol V2 (2.2.0, 26 fields)
dof.esp: DOF Session Protocol (2.2.0, 6 fields)
dof.oap: DOF Object Access Protocol (2.2.0, 27 fields)
dof.oap.dsp: DOF Object Access Protocol DSP Options (2.2.0, 1 field)
dof.oid: DOF Object Identifier (2.2.0, 13 fields)
dof.sgmp: DOF Secure Group Management Protocol (2.2.0, 13 fields)
dof.tep1: DOF Ticket Exchange Protocol Version 1 (2.2.0, 18 fields)
dof.tep1.dsp: DOF Ticket Exchange Protocol DSP Options (2.2.0, 1 field)
dof.trp: DOF Ticket Request Protocol (2.2.0, 25 fields)
dof.trp.dsp: DOF Ticket Request Protocol DSP Options (2.2.0, 1 field)
dop: X.501 Directory Operational Binding Management Protocol (1.0.0 to 2.2.0, 256 fields)
dplay: DirectPlay Protocol (1.0.0 to 2.2.0, 164 fields)
dpnss: Digital Private Signalling System No 1 (1.0.0 to 2.2.0, 32 fields)
dpnss_link: Digital Private Signalling System No 1 Link Layer (1.2.0 to 2.2.0, 8 fields)
drda: DRDA (1.0.0 to 2.2.0, 18 fields)
drsuapi: DRSUAPI (1.0.0 to 2.2.0, 415 fields)
dsi: Data Stream Interface (1.0.0 to 2.2.0, 45 fields)
dsp: X.519 Directory System Protocol (1.0.0 to 2.2.0, 214 fields)
dsr: Dynamic Source Routing (2.0.0 to 2.2.0, 38 fields)
dssetup: Active Directory Setup (1.0.0 to 2.2.0, 20 fields)
dtcp-ip: Digital Transmission Content Protection over IP (1.10.0 to 2.2.0, 15 fields)
dtls: Datagram Transport Layer Security (1.0.0 to 2.2.0, 147 fields)
dtp: Dynamic Trunk Protocol (1.0.0 to 2.2.0, 14 fields)
dtpt: DeskTop PassThrough Protocol (1.0.0 to 2.2.0, 74 fields)
dtsprovider: DCE Distributed Time Service Provider (1.0.0 to 2.2.0, 2 fields)
dtsstime_req: DCE Distributed Time Service Local Server (1.0.0 to 2.2.0, 1 field)
dua: DPNSS/DASS2-User Adaptation Layer (1.0.0 to 2.2.0, 30 fields)
dvb-ci: DVB Common Interface (1.6.0 to 2.2.0, 327 fields)
dvb-s2_bb: DVB-S2 Baseband Frame (1.10.0 to 2.2.0, 13 fields)
dvb-s2_gse: DVB-S2 GSE Packet (1.10.0 to 2.2.0, 13 fields)
dvb-s2_modeadapt: DVB-S2 Modeadaption Header (1.10.0 to 2.2.0, 7 fields)
dvb_ait: DVB Application Information Table (1.8.0 to 2.2.0, 35 fields)
dvb_bat: DVB Bouquet Association Table (1.8.0 to 2.2.0, 15 fields)
dvb_data_mpe: DVB-DATA MultiProtocol Encapsulation (1.8.0 to 2.2.0, 8 fields)
dvb_eit: DVB Event Information Table (1.8.0 to 2.2.0, 16 fields)
dvb_ipdc: ETSI IPDC Bootstrap (1.8.0 to 2.2.0, 1 field)
dvb_nit: DVB Network Information Table (1.8.0 to 2.2.0, 14 fields)
dvb_sdt: DVB Service Description Table (1.8.0 to 2.2.0, 15 fields)
dvb_tdt: DVB Time and Date Table (1.8.0 to 2.2.0, 1 field)
dvb_tot: DVB Time Offset Table (1.8.0 to 2.2.0, 3 fields)
dvmrp: Distance Vector Multicast Routing Protocol (1.0.0 to 2.2.0, 44 fields)
dx: DX cluster (1.10.0 to 2.2.0, 1 field)

E

e.212: ITU-T E.212 number (1.0.0 to 1.0.16, 3 fields)
e100: E100 Encapsulation (1.2.0 to 2.2.0, 8 fields)
e164: ITU-T E.164 number (1.0.0 to 2.2.0, 7 fields)
e212: ITU-T E.212 number (1.2.0 to 2.2.0, 12 fields)
eap: Extensible Authentication Protocol (1.0.0 to 2.2.0, 76 fields)
eapol: 802.1X Authentication (1.0.0 to 2.2.0, 37 fields)
ecat: EtherCAT datagram(s) (1.0.0 to 2.2.0, 486 fields)
ecat_mailbox: EtherCAT Mailbox Protocol (1.0.0 to 2.2.0, 151 fields)
ecatf: EtherCAT frame header (2.2.0, 3 fields)
echo: Echo (1.0.0 to 2.2.0, 3 fields)
ecmp: ECMP (2.2.0, 172 fields)
ecp: ECP Protocol (1.8.0 to 2.2.0, 15 fields)
ecp21: Edge Control Protocol (2.2.0, 4 fields)
edonkey: eDonkey Protocol (1.0.0 to 2.2.0, 119 fields)
edp: Extreme Discovery Protocol (1.0.0 to 2.2.0, 86 fields)
efs: EFS (pidl) (1.0.0 to 2.2.0, 32 fields)
egd: Ethernet Global Data (1.2.0 to 2.2.0, 10 fields)
ehdlc: Ericsson HDLC (1.8.0 to 2.2.0, 14 fields)
ehs: EHS (1.2.0 to 2.2.0, 142 fields)
eigrp: Enhanced Interior Gateway Routing Protocol (1.0.0 to 2.2.0, 262 fields)
eiss: ETV-AM EISS Section (1.8.0 to 2.2.0, 41 fields)
elasticsearch: Elasticsearch (2.0.0 to 2.2.0, 27 fields)
elcom: ELCOM Communication Protocol (1.8.0 to 2.2.0, 33 fields)
elf: Executable and Linkable Format (1.12.0 to 2.2.0, 132 fields)
elmi: Ethernet Local Management Interface (1.12.0 to 2.2.0, 41 fields)
enc: OpenBSD Encapsulating device (1.0.0 to 2.2.0, 7 fields)
enip: EtherNet/IP (Industrial Protocol) (1.0.0 to 2.2.0, 236 fields)
enrp: Endpoint Handlespace Redundancy Protocol (1.0.0 to 2.2.0, 50 fields)
enttec: ENTTEC (1.0.0 to 2.2.0, 17 fields)
epl: Ethernet POWERLINK (1.0.0 to 2.2.0, 199 fields)
epl_v1: ETHERNET Powerlink V1.0 (1.0.0 to 2.2.0, 33 fields)
epm: DCE/RPC Endpoint Mapper (1.0.0 to 2.2.0, 32 fields)
epmd: Erlang Port Mapper Daemon (1.0.0 to 2.2.0, 15 fields)
epon: IEEE 802.3 EPON Preamble (1.12.0 to 2.2.0, 12 fields)
erf: Extensible Record Format (1.0.0 to 2.2.0, 2858 fields)
erldp: Erlang Distribution Protocol (1.6.0 to 2.2.0, 31 fields)
erspan: Encapsulated Remote Switch Packet ANalysis (1.0.0 to 2.2.0, 25 fields)
esio: SAIA Ether-S-I/O protocol (1.6.0 to 2.2.0, 19 fields)
esis: ISO 9542 ESIS Routeing Information Exchange Protocol (1.0.0 to 2.2.0, 19 fields)
esl: EtherCAT Switch Link (1.4.0 to 2.2.0, 4 fields)
esp: Encapsulating Security Payload (1.0.0 to 2.2.0, 12 fields)
ess: Extended Security Services (1.0.0 to 2.2.0, 94 fields)
etag: 802.1BR E-Tag (2.2.0, 10 fields)
etch: Apache Etch Protocol (1.6.0 to 2.2.0, 20 fields)
eth: Ethernet (1.0.0 to 2.2.0, 25 fields)
ethercat: EtherCAT frame header (1.0.0 to 2.0.5, 3 fields)
etheric: Etheric (1.0.0 to 1.2.18, 27 fields)
etherip: Ethernet over IP (1.0.0 to 2.2.0, 4 fields)
etsi_cat: Card Application Tookit ETSI TS 102.223 (1.8.0 to 2.2.0, 118 fields)
etv-ddb: ETV-AM DDB Section (1.8.0 to 2.2.0, 6 fields)
etv-dii: ETV-AM DII Section (1.8.0 to 2.2.0, 6 fields)
eventlog: Event Logger (1.0.0 to 2.2.0, 96 fields)
evrc: Enhanced Variable Rate Codec (1.2.0 to 2.2.0, 20 fields)
exec: Remote Process Execution (1.0.0 to 2.2.0, 6 fields)
expert: Expert Info (1.2.0 to 1.10.14, 3 fields)
exported_pdu: EXPORTED_PDU (1.12.0 to 2.2.0, 21 fields)

F

fc: Fibre Channel (1.0.0 to 2.2.0, 52 fields)
fcct: Fibre Channel Common Transport (1.0.0 to 2.2.0, 11 fields)
fcdns: Fibre Channel Name Server (1.0.0 to 2.2.0, 68 fields)
fcels: FC Extended Link Svc (1.0.0 to 2.2.0, 182 fields)
fcfzs: Fibre Channel Fabric Zone Server (1.0.0 to 2.2.0, 32 fields)
fcgi: FastCGI (1.6.0 to 2.2.0, 13 fields)
fcip: FCIP (1.0.0 to 2.2.0, 26 fields)
fcoe: Fibre Channel over Ethernet (1.0.0 to 2.2.0, 9 fields)
fcoib: Fibre Channel over Infiniband (1.6.0 to 2.2.0, 9 fields)
fcp: Fibre Channel Protocol for SCSI (1.0.0 to 2.2.0, 44 fields)
fcs: FC Fabric Configuration Server (1.0.0 to 2.2.0, 42 fields)
fcsb3: Fibre Channel Single Byte Command (1.10.0 to 2.2.0, 69 fields)
fcsof: Fibre Channel Delimiters (1.4.0 to 2.2.0, 3 fields)
fcsp: Fibre Channel Security Protocol (1.0.0 to 2.2.0, 31 fields)
fddi: Fiber Distributed Data Interface (1.0.0 to 2.2.0, 8 fields)
fdp: Foundry Discovery Protocol (1.10.0 to 2.2.0, 21 fields)
fefd: Far End Failure Detection (1.2.0 to 2.2.0, 11 fields)
felica: Sony FeliCa (1.8.0 to 2.2.0, 14 fields)
ff: FOUNDATION Fieldbus (1.0.0 to 2.2.0, 704 fields)
file: File (1.12.0 to 2.2.0, 10 fields)
file-pcap: PCAP File Format (2.0.0 to 2.2.0, 20 fields)
file-pcapng: PCAPNG File Format (2.0.0 to 2.2.0, 86 fields)
fileexp: DCE DFS File Exporter (1.0.0 to 2.2.0, 160 fields)
finger: finger (1.12.0 to 2.2.0, 6 fields)
fip: FCoE Initialization Protocol (1.2.0 to 2.2.0, 45 fields)
fix: Financial Information eXchange Protocol (1.0.0 to 2.2.0, 1636 fields)
fldb: DCE DFS Fileset Location Server (1.0.0 to 2.2.0, 123 fields)
flexnet: FlexNet (1.10.0 to 2.2.0, 3 fields)
flexray: FlexRay Protocol (2.2.0, 25 fields)
flip: NSN FLIP (1.4.0 to 2.2.0, 9 fields)
fmp: File Mapping Protocol (1.0.0 to 2.2.0, 87 fields)
fmp_notify: File Mapping Protocol Nofity (1.0.0 to 2.2.0, 19 fields)
fmtp: Flight Message Transfer Protocol (FMTP) (1.8.0 to 2.2.0, 4 fields)
forces: Forwarding and Control Element Separation Protocol (1.10.0 to 2.2.0, 45 fields)
fp: FP (1.0.0 to 2.2.0, 155 fields)
fp_hint: FP Hint (1.4.0 to 2.2.0, 25 fields)
fr: Frame Relay (1.0.0 to 2.2.0, 32 fields)
fractalgeneratorprotocol: Fractal Generator Protocol (1.0.0 to 2.2.0, 16 fields)
frame: Frame (1.0.0 to 2.2.0, 42 fields)
frsapi: Microsoft File Replication Service API (1.0.0 to 2.2.0, 1 field)
frsrpc: File Replication Service (1.0.0 to 2.2.0, 181 fields)
frstrans: File Replication Service DFS-R (1.4.0 to 2.2.0, 98 fields)
ftam: ISO 8571 FTAM (1.0.0 to 2.2.0, 504 fields)
ftp: File Transfer Protocol (FTP) (1.0.0 to 2.2.0, 21 fields)
ftserver: FTServer Operations (1.0.0 to 2.2.0, 1 field)
fw1: Checkpoint FW-1 (1.0.0 to 2.2.0, 6 fields)

G

g723: G.723 (1.0.0 to 2.2.0, 2 fields)
gadu-gadu: Gadu-Gadu Protocol (1.8.0 to 2.2.0, 59 fields)
gdb: GDB Remote Serial Protocol (2.0.0 to 2.2.0, 5 fields)
gdsdb: Firebird SQL Database Remote Protocol (1.0.0 to 2.2.0, 115 fields)
gearman: Gearman Protocol (1.10.0 to 2.2.0, 26 fields)
ged125: Cisco GED-125 Protocol (1.10.0 to 2.2.0, 93 fields)
geneve: Generic Network Virtualization Encapsulation (2.0.0 to 2.2.0, 20 fields)
gfp: Generic Framing Procedure (2.2.0, 26 fields)
gift: giFT Internet File Transfer (1.0.0 to 2.2.0, 6 fields)
giop: General Inter-ORB Protocol (1.0.0 to 2.2.0, 103 fields)
giop-coseventcomm: Coseventcomm Dissector Using GIOP API (1.0.0 to 2.2.0, 6 fields)
giop-cosnaming: Cosnaming Dissector Using GIOP API (1.0.0 to 2.2.0, 37 fields)
giop-gias: Gias Dissector Using GIOP API (2.0.0 to 2.2.0, 325 fields)
giop-parlay: Parlay Dissector Using GIOP API (1.0.0 to 2.2.0, 2872 fields)
giop-tango: Tango Dissector Using GIOP API (1.0.0 to 2.2.0, 211 fields)
git: Git Smart Protocol (1.4.0 to 2.2.0, 3 fields)
glbp: Gateway Load Balancing Protocol (1.4.0 to 2.2.0, 42 fields)
gluster.cli: Gluster CLI (1.8.0 to 2.2.0, 11 fields)
gluster.dump: Gluster Dump (1.8.0 to 2.2.0, 5 fields)
gluster.pmap: Gluster Portmap (1.8.0 to 2.2.0, 4 fields)
glusterd: Gluster Daemon (1.8.0 to 2.2.0, 14 fields)
glusterfs: GlusterFS (1.8.0 to 2.2.0, 132 fields)
glusterfs.cbk: GlusterFS Callback (1.8.0 to 2.2.0, 9 fields)
glusterfs.hndsk: GlusterFS Handshake (1.8.0 to 2.2.0, 8 fields)
gmhdr: Gigamon Header (1.4.0 to 2.2.0, 20 fields)
gmr1.bcch: GEO-Mobile Radio (1) BCCH (1.10.0 to 2.2.0, 92 fields)
gmr1.common: GEO-Mobile Radio (1) Common (1.10.0 to 2.2.0, 19 fields)
gmr1.dtap: GEO-Mobile Radio (1) DTAP (1.10.0 to 2.2.0, 2 fields)
gmr1.rach: GEO-Mobile Radio (1) RACH (1.10.0 to 2.2.0, 45 fields)
gmr1.rr: GEO-Mobile Radio (1) RR (1.10.0 to 2.2.0, 102 fields)
gmr1_bcch: GEO-Mobile Radio (1) BCCH (1.8.0 to 1.8.15, 66 fields)
gmr1_ccch: GEO-Mobile Radio (1) CCCH (1.8.0 to 1.8.15, 99 fields)
gmr1_common: GEO-Mobile Radio (1) Common (1.8.0 to 1.8.15, 18 fields)
gmrp: GARP Multicast Registration Protocol (1.0.0 to 2.2.0, 8 fields)
gmtrailer: Gigamon Trailer (1.10.0 to 2.2.0, 3 fields)
gnm: ITU M.3100 Generic Network Information Model (1.0.0 to 1.10.14, 180 fields)
gnutella: Gnutella Protocol (1.0.0 to 2.2.0, 32 fields)
goose: GOOSE (1.2.0 to 2.2.0, 66 fields)
gopher: Gopher (1.6.0 to 2.2.0, 8 fields)
gpef: GPEF (1.2.0 to 2.2.0, 8 fields)
gprs-ns: GPRS Network Service (1.4.0 to 2.2.0, 31 fields)
gprs_ns: GPRS Network service (1.0.0 to 1.2.18, 8 fields)
gprscdr: GPRS CDR (1.6.0 to 2.2.0, 349 fields)
gre: Generic Routing Encapsulation (1.0.0 to 2.2.0, 39 fields)
gryphon: DG Gryphon Protocol (1.0.0 to 2.2.0, 193 fields)
gsm-sms-ud: GSM Short Message Service User Data (1.0.0 to 1.8.15, 19 fields)
gsm_a: GSM A-I/F COMMON (1.10.0 to 2.2.0, 190 fields)
gsm_a.bssmap: GSM A-I/F BSSMAP (1.10.0 to 2.2.0, 190 fields)
gsm_a.dtap: GSM A-I/F DTAP (1.10.0 to 2.2.0, 243 fields)
gsm_a.gm: GSM A-I/F GPRS Mobility and Session Management (1.10.0 to 2.2.0, 284 fields)
gsm_a.rp: GSM A-I/F RP (1.10.0 to 2.2.0, 9 fields)
gsm_a.rr: GSM A-I/F Radio Resource Management (1.8.5 to 2.2.0, 700 fields)
gsm_a.sacch: GSM SACCH (1.8.5 to 2.2.0, 3 fields)
gsm_a_bssmap: GSM A-I/F BSSMAP (1.0.0 to 1.8.15, 225 fields)
gsm_a_ccch: GSM CCCH (1.0.0 to 1.8.4, 351 fields)
gsm_a_common: GSM A-I/F COMMON (1.2.0 to 1.8.15, 157 fields)
gsm_a_dtap: GSM A-I/F DTAP (1.0.0 to 1.8.15, 87 fields)
gsm_a_gm: GSM A-I/F GPRS Mobility and Session Management (1.2.0 to 1.8.15, 205 fields)
gsm_a_rp: GSM A-I/F RP (1.0.0 to 1.8.15, 3 fields)
gsm_a_sacch: GSM SACCH (1.2.0 to 1.8.4, 4 fields)
gsm_abis_om2000: Ericsson A-bis OML (1.8.0 to 2.2.0, 141 fields)
gsm_abis_oml: GSM A-bis OML (1.8.0 to 2.2.0, 127 fields)
gsm_abis_rsl: Radio Signalling Link (RSL) (1.10.0 to 2.2.0, 101 fields)
gsm_bssmap_le: Lb-I/F BSSMAP LE (1.2.0 to 2.2.0, 48 fields)
gsm_cbch: GSM Cell Broadcast Channel (1.8.0 to 2.2.0, 30 fields)
gsm_cbs: GSM Cell Broadcast Service (1.10.0 to 2.2.0, 21 fields)
gsm_cell_broadcast: GSM Cell Broadcast Service (1.8.0 to 1.8.15, 19 fields)
gsm_ipa: GSM over IP protocol as used by ip.access (1.4.0 to 2.2.0, 10 fields)
gsm_map: GSM Mobile Application (1.0.0 to 2.2.0, 2248 fields)
gsm_rlcmac: Radio Link Control, Medium Access Control, 3GPP TS44.060 (1.6.0 to 2.2.0, 2334 fields)
gsm_sim: GSM SIM 11.11 (1.8.0 to 2.2.0, 356 fields)
gsm_sms: GSM SMS TPDU (GSM 03.40) (1.0.0 to 2.2.0, 152 fields)
gsm_sms_ud: GSM Short Message Service User Data (1.10.0 to 2.2.0, 20 fields)
gsm_um: GSM Um Interface (1.2.0 to 2.2.0, 10 fields)
gsmtap: GSM Radiotap (1.4.0 to 2.2.0, 18 fields)
gss-api: GSS-API Generic Security Service Application Program Interface (1.0.0 to 2.2.0, 15 fields)
gtp: GPRS Tunneling Protocol (1.0.0 to 2.2.0, 283 fields)
gtpv2: GPRS Tunneling Protocol V2 (1.2.0 to 2.2.0, 459 fields)
gvcp: GigE Vision Control Protocol (1.4.0 to 2.2.0, 221 fields)
gvrp: GARP VLAN Registration Protocol (1.0.0 to 2.2.0, 7 fields)
gvsp: GigE Vision Streaming Protocol (2.0.0 to 2.2.0, 92 fields)

H

h1: Sinec H1 Protocol (1.0.0 to 2.2.0, 18 fields)
h221nonstd: H221NonStandard (1.0.0 to 2.2.0, 2 fields)
h223: ITU-T Recommendation H.223 (1.0.0 to 2.2.0, 42 fields)
h225: H323-MESSAGES (1.0.0 to 2.2.0, 1056 fields)
h235: H235-SECURITY-MESSAGES (1.0.0 to 2.2.0, 144 fields)
h245: MULTIMEDIA-SYSTEM-CONTROL (1.0.0 to 2.2.0, 1815 fields)
h248: H.248 MEGACO (1.0.0 to 2.2.0, 429 fields)
h248.2: H.248.2 (1.10.0 to 2.2.0, 2 fields)
h248.3gpp: H.248 3GPP (1.10.0 to 2.2.0, 26 fields)
h248.an: H.248.7 (1.10.0 to 2.2.0, 13 fields)
h248.annexc: H.248 Annex C (2.0.0 to 2.2.0, 124 fields)
h248.chp: H.248.10 (1.10.0 to 2.2.0, 2 fields)
h2483gpp: H.248 3GPP (1.0.0 to 1.8.15, 24 fields)
h248_2: H.248.2 (1.8.0 to 1.8.15, 2 fields)
h248an: H.248.7 (1.0.0 to 1.8.15, 13 fields)
h248c: H.248 Annex C (1.0.0 to 1.12.13, 124 fields)
h248chp: H.248.10 (1.0.0 to 1.8.15, 2 fields)
h248e: H.248 Annex E (1.0.0 to 2.2.0, 151 fields)
h248q1950: H.248 Q.1950 Annex A (1.0.0 to 2.2.0, 62 fields)
h261: ITU-T Recommendation H.261 (1.0.0 to 2.2.0, 10 fields)
h263: ITU-T Recommendation H.263 (1.0.0 to 2.2.0, 45 fields)
h263p: ITU-T Recommendation H.263 RTP Payload header (RFC4629) (1.0.0 to 2.2.0, 12 fields)
h264: H.264 (1.0.0 to 2.2.0, 198 fields)
h323: H.323 (1.0.0 to 2.2.0, 42 fields)
h450: H.450 Supplementary Services (1.0.0 to 2.2.0, 448 fields)
h450.ros: H.450 Remote Operations Apdus (1.0.0 to 2.2.0, 21 fields)
h460: H.460 Supplementary Services (1.0.0 to 2.2.0, 252 fields)
h501: H.501 Mobility (1.0.0 to 2.2.0, 376 fields)
hart_ip: HART_IP Protocol (1.8.0 to 2.2.0, 103 fields)
hci_h1: Bluetooth HCI H1 (1.0.0 to 2.2.0, 2 fields)
hci_h4: Bluetooth HCI H4 (1.0.0 to 2.2.0, 2 fields)
hci_mon: Bluetooth Linux Monitor Transport (1.12.0 to 2.2.0, 7 fields)
hci_usb: Bluetooth HCI USB Transport (1.10.0 to 2.2.0, 18 fields)
hclnfsd: Hummingbird NFS Daemon (1.0.0 to 2.2.0, 42 fields)
hcrt: Hotline Command-Response Transaction protocol (2.0.0 to 2.2.0, 17 fields)
hdcp: High bandwidth Digital Content Protection (1.8.0 to 2.2.0, 35 fields)
hdcp2: High bandwidth Digital Content Protection version 2 (1.8.0 to 2.2.0, 18 fields)
hdfs: HDFS Protocol (1.8.0 to 2.2.0, 52 fields)
hdfsdata: HDFSDATA Protocol (1.8.0 to 2.2.0, 34 fields)
hdmi: High-Definition Multimedia Interface (1.12.0 to 2.2.0, 10 fields)
hi2operations: HI2Operations (1.4.0 to 2.2.0, 387 fields)
hilscher: Hilscher analyzer dissector (1.0.0 to 1.6.16, 3 fields)
hip: Host Identity Protocol (1.4.0 to 2.2.0, 102 fields)
hiqnet: Harman HiQnet (2.0.0 to 2.2.0, 110 fields)
hislip: High-Speed LAN Instrument Protocol (1.12.0 to 2.2.0, 30 fields)
hnbap: UTRAN Iuh interface HNBAP signalling (1.4.0 to 2.2.0, 168 fields)
homeplug: HomePlug protocol (1.0.0 to 2.2.0, 151 fields)
homeplug-av: HomePlug AV protocol (1.8.0 to 2.2.0, 344 fields)
hp_erm: HP encapsulated remote mirroring (1.4.0 to 2.2.0, 7 fields)
hpext: HP Extended Local-Link Control (1.0.0 to 2.2.0, 3 fields)
hpfeeds: HPFEEDS HoneyPot Feeds Protocol (1.10.0 to 2.2.0, 13 fields)
hpsw: HP Switch Protocol (1.0.0 to 2.2.0, 21 fields)
hpteam: HP NIC Teaming Heartbeat (1.4.0 to 2.2.0, 1 field)
hsr: High-availability Seamless Redundancy (IEC62439 Part 3 Chapter 5) (1.8.0 to 2.2.0, 7 fields)
hsr_prp_supervision: HSR/PRP Supervision (IEC62439 Part 3) (1.8.0 to 2.2.0, 10 fields)
hsrp: Cisco Hot Standby Router Protocol (1.0.0 to 2.2.0, 44 fields)
http: Hypertext Transfer Protocol (1.0.0 to 2.2.0, 74 fields)
http2: HyperText Transfer Protocol 2 (1.12.0 to 2.2.0, 79 fields)
hyperscsi: HyperSCSI (1.0.0 to 2.2.0, 6 fields)
hzlcst: Hazelcast Wire Protocol (1.8.0 to 2.2.0, 33 fields)

I

i2c: Inter-Integrated Circuit (1.2.0 to 2.2.0, 4 fields)
iap: Information Access Protocol (1.0.0 to 2.2.0, 18 fields)
iapp: Inter-Access-Point Protocol (1.0.0 to 2.2.0, 16 fields)
iax2: Inter-Asterisk eXchange v2 (1.0.0 to 2.2.0, 134 fields)
ib_sdp: Infiniband Sockets Direct Protocol (1.6.0 to 1.8.15, 36 fields)
icap: Internet Content Adaptation Protocol (1.0.0 to 2.2.0, 5 fields)
icep: Internet Communications Engine Protocol (1.0.0 to 2.2.0, 37 fields)
icl_rpc: DCE DFS ICL RPC (1.0.0 to 2.2.0, 1 field)
icmp: Internet Control Message Protocol (1.0.0 to 2.2.0, 89 fields)
icmpv6: Internet Control Message Protocol v6 (1.0.0 to 2.2.0, 412 fields)
icp: Internet Cache Protocol (1.0.0 to 2.2.0, 13 fields)
icq: ICQ Protocol (1.0.0 to 2.2.0, 77 fields)
idmp: X.519 Internet Directly Mapped Protocol (1.6.0 to 2.2.0, 52 fields)
idp: Internetwork Datagram Protocol (1.0.0 to 2.2.0, 12 fields)
idrp: ISO/IEC 10747 (1993): Inter Domain Routing Protocol (1.12.0 to 2.2.0, 68 fields)
ieee1722: IEEE 1722 Protocol (1.4.0 to 2.2.0, 30 fields)
ieee17221: IEEE 1722.1 Protocol (1.8.0 to 2.2.0, 568 fields)
ieee8021ad: IEEE 802.1ad (1.0.0 to 2.2.0, 5 fields)
ieee8021ah: IEEE 802.1ah (1.0.0 to 2.2.0, 11 fields)
ieee802a: IEEE802a OUI Extended Ethertype (1.0.0 to 2.2.0, 3 fields)
ifcp: iFCP (1.0.0 to 2.2.0, 30 fields)
igap: Internet Group membership Authentication Protocol (1.0.0 to 2.2.0, 18 fields)
igmp: Internet Group Management Protocol (1.0.0 to 2.2.0, 44 fields)
igrp: Cisco Interior Gateway Routing Protocol (1.0.0 to 2.2.0, 16 fields)
ilp: OMA Internal Location Protocol (1.12.0 to 2.2.0, 352 fields)
image-gif: Compuserve GIF (1.0.0 to 2.2.0, 25 fields)
image-jfif: JPEG File Interchange Format (1.0.0 to 2.2.0, 51 fields)
imap: Internet Message Access Protocol (1.0.0 to 2.2.0, 10 fields)
imf: Internet Message Format (1.0.0 to 2.2.0, 84 fields)
inap: Intelligent Network Application Protocol (1.0.0 to 2.2.0, 766 fields)
infiniband: InfiniBand (1.0.0 to 2.2.0, 492 fields)
infiniband_link: InfiniBand Link (1.4.0 to 2.2.0, 5 fields)
infiniband_sdp: Infiniband Sockets Direct Protocol (1.10.0 to 2.2.0, 34 fields)
initshutdown: Init shutdown service (1.0.0 to 2.2.0, 23 fields)
interlink: Interlink Protocol (1.4.0 to 1.6.16, 1.8.3 to 2.2.0, 10 fields)
ioraw: TwinCAT IO-RAW (1.0.0 to 2.2.0, 3 fields)
ip: Internet Protocol Version 4 (1.0.0 to 2.2.0, 132 fields)
ipaccess: GSM over IP ip.access CCM sub-protocol (1.4.0 to 2.2.0, 4 fields)
ipcomp: IP Payload Compression (1.0.0 to 2.2.0, 3 fields)
ipcp: PPP IP Control Protocol (1.0.0 to 2.2.0, 27 fields)
ipdc: IP Device Control (SS7 over IP) (1.0.0 to 2.2.0, 17 fields)
ipdr: IPDR (2.0.0 to 2.2.0, 30 fields)
ipfc: IP Over FC (1.0.0 to 2.2.0, 2 fields)
ipmi: Intelligent Platform Management Interface (1.0.0 to 2.2.0, 1706 fields)
ipmi-session: Intelligent Platform Management Interface (Session Wrapper) (1.2.0 to 1.8.15, 11 fields)
ipmi-trace: IPMI Trace Data Collection (1.12.0 to 1.12.13, 16 fields)
ipmi.trace: IPMI Trace Data Collection (2.0.0 to 2.2.0, 16 fields)
ipmi_session: Intelligent Platform Management Interface (Session Wrapper) (1.10.0 to 2.2.0, 11 fields)
ipnet: Solaris IPNET (1.4.0 to 2.2.0, 8 fields)
ipoib: IP over Infiniband (1.8.0 to 2.2.0, 11 fields)
ipos: IPOS Kernel Packet Protocol (2.2.0, 4 fields)
ipp: Internet Printing Protocol (1.0.0 to 2.2.0, 15 fields)
ipsictl: IPSICTL (1.2.0 to 2.2.0, 7 fields)
ipv6: Internet Protocol Version 6 (1.0.0 to 2.2.0, 250 fields)
ipv6.dstopts: Destination Options for IPv6 (2.0.0 to 2.2.0, 3 fields)
ipv6.fraghdr: Fragment Header for IPv6 (2.2.0, 6 fields)
ipv6.hopopts: IPv6 Hop-by-Hop Option (2.0.0 to 2.2.0, 4 fields)
ipv6.routing: Routing Header for IPv6 (2.0.0 to 2.2.0, 37 fields)
ipv6cp: PPP IPv6 Control Protocol (1.0.0 to 2.2.0, 1 field)
ipvs: IP Virtual Services Sync Daemon (1.0.0 to 2.2.0, 26 fields)
ipx: Internetwork Packet eXchange (1.0.0 to 2.2.0, 16 fields)
ipxmsg: IPX Message (1.0.0 to 2.2.0, 2 fields)
ipxrip: IPX Routing Information Protocol (1.0.0 to 2.2.0, 6 fields)
ipxsap: Service Advertisement Protocol (1.0.0 to 2.2.0, 9 fields)
ipxwan: IPX WAN (1.0.0 to 2.2.0, 25 fields)
irc: Internet Relay Chat (1.0.0 to 2.2.0, 18 fields)
ircomm: IrCOMM Protocol (1.0.0 to 2.2.0, 6 fields)
irlap: IrDA Link Access Protocol (1.0.0 to 2.2.0, 30 fields)
irlmp: IrDA Link Management Protocol (1.0.0 to 2.2.0, 15 fields)
isakmp: Internet Security Association and Key Management Protocol (1.0.0 to 2.2.0, 290 fields)
iscsi: iSCSI (1.0.0 to 2.2.0, 105 fields)
isdn: ISDN (1.0.0 to 2.2.0, 1 field)
isdn_sup: ISDN supplementary services (1.10.0 to 2.2.0, 166 fields)
iser: iSCSI Extensions for RDMA (2.0.0 to 2.2.0, 11 fields)
isi: Intelligent Service Interface (2.2.0, 105 fields)
isis: ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol (1.0.0 to 2.2.0, 51 fields)
isis.csnp: ISO 10589 ISIS Complete Sequence Numbers Protocol Data Unit (1.12.0 to 2.2.0, 19 fields)
isis.hello: ISIS HELLO (1.12.0 to 2.2.0, 76 fields)
isis.lsp: ISO 10589 ISIS Link State Protocol Data Unit (1.12.0 to 2.2.0, 275 fields)
isis.psnp: ISO 10589 ISIS Partial Sequence Numbers Protocol Data Unit (1.12.0 to 2.2.0, 7 fields)
isl: Cisco ISL (1.0.0 to 2.2.0, 23 fields)
ismacryp: ISMACryp Protocol (1.2.0 to 2.2.0, 31 fields)
ismp: InterSwitch Message Protocol (1.0.0 to 2.2.0, 68 fields)
isns: iSNS (1.0.0 to 2.2.0, 105 fields)
iso14443: ISO/IEC 14443 (2.2.0, 79 fields)
iso7816: ISO/IEC 7816 (1.8.0 to 2.2.0, 37 fields)
iso8583: ISO 8583-1 (2.2.0, 133 fields)
isup: ISDN User Part (1.0.0 to 2.2.0, 362 fields)
isup_thin: ISUP Thin Protocol (1.0.0 to 1.2.18, 15 fields)
isystemactivator: ISystemActivator ISystemActivator Resolver (1.0.0 to 2.2.0, 62 fields)
itdm: Internal TDM (1.2.0 to 2.2.0, 23 fields)
itunes: iTunes podCast rss elements (1.0.0 to 2.2.0, 10 fields)
iua: ISDN Q.921-User Adaptation Layer (1.0.0 to 2.2.0, 31 fields)
iuup: IuUP (1.0.0 to 2.2.0, 1333 fields)
iwarp_ddp_rdmap: iWARP Direct Data Placement and Remote Direct Memory Access Protocol (1.2.0 to 2.2.0, 47 fields)
iwarp_mpa: iWARP Marker Protocol data unit Aligned framing (1.2.0 to 2.2.0, 23 fields)
ixiatrailer: Ixia Trailer (1.10.0 to 2.2.0, 4 fields)
ixveriwave: ixveriwave (1.8.0 to 2.2.0, 96 fields)

J

j1939: SAE J1939 (1.12.0 to 2.2.0, 11 fields)
jabber: Jabber XML Messaging (1.0.0 to 1.6.16, 2 fields)
jmirror: Juniper Packet Mirror (1.4.0 to 2.2.0, 2 fields)
jpeg: RFC 2435 JPEG (1.0.0 to 2.2.0, 18 fields)
json: JavaScript Object Notation (1.6.0 to 2.2.0, 9 fields)
juniper: Juniper (1.0.0 to 2.2.0, 36 fields)
jxta: JXTA P2P (1.0.0 to 2.2.0, 53 fields)

K

k12: K12xx (1.0.0 to 2.2.0, 8 fields)
kadm5: Kerberos Administration (1.0.0 to 2.2.0, 1 field)
kafka: Kafka (1.12.0 to 2.2.0, 43 fields)
kdp: Kontiki Delivery Protocol (1.2.0 to 2.2.0, 31 fields)
kdsp: Kismet Drone/Server Protocol (1.8.0 to 2.2.0, 94 fields)
kerberos: Kerberos (1.0.0 to 2.2.0, 294 fields)
kf: Kingfisher (1.0.0 to 2.2.0, 10 fields)
kif: QNX6 QNET KIF protocol (2.0.0 to 2.2.0, 243 fields)
kink: Kerberized Internet Negotiation of Key (1.0.0 to 2.2.0, 24 fields)
kismet: Kismet Client/Server Protocol (1.0.0 to 2.2.0, 9 fields)
klm: Kernel Lock Manager (1.0.0 to 2.2.0, 10 fields)
knx: KNXnet/IP (2.0.0 to 2.2.0, 138 fields)
kpasswd: MS Kpasswd (1.0.0 to 2.2.0, 9 fields)
krb4: Kerberos v4 (1.0.0 to 2.2.0, 21 fields)
krb5rpc: DCE/RPC Kerberos V (1.0.0 to 2.2.0, 18 fields)
kt: Kyoto Tycoon Protocol (1.12.0 to 2.2.0, 21 fields)

L

l2tp: Layer 2 Tunneling Protocol (1.0.0 to 2.2.0, 199 fields)
lacp: LACP (2.0.0 to 2.2.0, 43 fields)
lanforge: LANforge Traffic Generator (1.2.0 to 2.2.0, 12 fields)
lanman: Microsoft Windows Lanman Remote API Protocol (1.0.0 to 2.2.0, 87 fields)
lapb: Link Access Procedure Balanced (LAPB) (1.0.0 to 2.2.0, 10 fields)
lapbether: Link Access Procedure Balanced Ethernet (LAPBETHER) (1.0.0 to 2.2.0, 1 field)
lapd: Link Access Procedure, Channel D (LAPD) (1.0.0 to 2.2.0, 23 fields)
lapdm: Link Access Procedure, Channel Dm (LAPDm) (1.2.0 to 2.2.0, 29 fields)
laplink: Laplink (1.0.0 to 2.2.0, 5 fields)
lapsat: Link Access Procedure, Satellite channel (LAPSat) (1.8.0 to 2.2.0, 30 fields)
lat: Local Area Transport (2.2.0, 133 fields)
lbmc: LBMC Protocol (1.12.0 to 2.2.0, 1203 fields)
lbmpdm: LBMPDM Protocol (1.12.0 to 2.2.0, 68 fields)
lbmpdm_tcp: LBMPDM over TCP Protocol (1.12.0 to 2.2.0, 2 fields)
lbmr: LBM Topic Resolution Protocol (1.12.0 to 2.2.0, 449 fields)
lbtrm: LBT Reliable Multicast Protocol (1.12.0 to 2.2.0, 75 fields)
lbtru: LBT Reliable Unicast Protocol (1.12.0 to 2.2.0, 103 fields)
lbttcp: LBT TCP Protocol (1.12.0 to 2.2.0, 4 fields)
lcp: PPP Link Control Protocol (1.0.0 to 2.2.0, 78 fields)
lcsap: LCS Application Protocol (1.8.0 to 2.2.0, 143 fields)
lct: H.283 Logical Channel Transport (1.0.0 to 2.2.0, 45 fields)
ldap: Lightweight Directory Access Protocol (1.0.0 to 2.2.0, 264 fields)
ldp: Label Distribution Protocol (1.0.0 to 2.2.0, 262 fields)
ldss: Local Download Sharing Service (1.2.0 to 2.2.0, 23 fields)
lg8979: Landis & Gyr Telegyr 8979 (1.12.0 to 2.2.0, 109 fields)
lge_monitor: LGE Monitor (1.0.0 to 2.2.0, 4 fields)
link16: Link 16 (1.12.0 to 2.2.0, 5 fields)
linx: ENEA LINX (1.0.0 to 2.2.0, 50 fields)
linxtcp: ENEA LINX over TCP (1.8.0 to 2.2.0, 35 fields)
lisp: Locator/ID Separation Protocol (1.6.0 to 2.2.0, 219 fields)
lisp-data: Locator/ID Separation Protocol (Data) (1.6.0 to 2.2.0, 16 fields)
lisp-tcp: Locator/ID Separation Protocol (Reliable Transport) (2.0.0 to 2.2.0, 16 fields)
list: Event Notification for Resource Lists (RFC 4662) (1.0.0 to 2.2.0, 21 fields)
llap: LocalTalk Link Access Protocol (1.0.0 to 2.2.0, 3 fields)
llb: DCE/RPC NCS 1.5.1 Local Location Broker (1.0.0 to 2.2.0, 1 field)
llc: Logical-Link Control (1.0.0 to 2.2.0, 29 fields)
llcgprs: Logical Link Control GPRS (1.0.0 to 2.2.0, 48 fields)
lldp: Link Layer Discovery Protocol (1.0.0 to 2.2.0, 312 fields)
llrp: Low Level Reader Protocol (1.8.0 to 2.2.0, 263 fields)
llt: Veritas Low Latency Transport (LLT) (1.0.0 to 2.2.0, 5 fields)
lltd: Link Layer Topology Discovery (2.0.0 to 2.2.0, 103 fields)
lmi: Local Management Interface (1.0.0 to 2.2.0, 11 fields)
lmp: Link Management Protocol (LMP) (1.0.0 to 2.2.0, 212 fields)
log: Log Message (1.0.0 to 2.2.0, 2 fields)
logcat: Android Logcat (1.12.0 to 2.2.0, 14 fields)
logcat_text: Android Logcat Text (2.0.0 to 2.2.0, 8 fields)
logotypecertextn: Logotype Certificate Extensions (1.0.0 to 2.2.0, 58 fields)
lon: Local Operating Network (1.8.0 to 2.2.0, 43 fields)
loop: Configuration Test Protocol (loopback) (1.0.0 to 2.2.0, 5 fields)
lpd: Line Printer Daemon Protocol (1.0.0 to 2.2.0, 5 fields)
lpp: LTE Positioning Protocol (LPP) (1.8.0 to 2.2.0, 1119 fields)
lppa: LTE Positioning Protocol A (LPPa) (1.8.0 to 2.2.0, 155 fields)
lppe: LTE Positioning Protocol Extensions (LLPe) (1.10.0 to 2.2.0, 1955 fields)
lr: QNX6 QNET LR protocol (2.0.0 to 2.2.0, 23 fields)
lsa: Microsoft Local Security Architecture (1.0.0 to 1.0.16, 93 fields)
lsarpc: Local Security Authority (1.2.0 to 2.2.0, 418 fields)
lsc: Pegasus Lightweight Stream Control (1.0.0 to 2.2.0, 11 fields)
lte_rrc: LTE Radio Resource Control (RRC) protocol (1.2.0 to 2.2.0, 4577 fields)
ltp: Licklider Transmission Protocol (1.4.0 to 2.2.0, 45 fields)
lwapp: LWAPP Encapsulated Packet (1.0.0 to 2.2.0, 15 fields)
lwl4: QNX6 QNET LWL4 protocol (2.0.0 to 2.2.0, 19 fields)
lwm: Lightweight Mesh (v1.1.1) (1.12.0 to 2.2.0, 31 fields)
lwm2mtlv: Lightweight M2M TLV (2.2.0, 15 fields)
lwres: Light Weight DNS RESolver (BIND9) (1.0.0 to 2.2.0, 37 fields)

M

m2m: WiMax Mac to Mac Packet (1.0.0 to 2.2.0, 23 fields)
m2pa: MTP2 Peer Adaptation Layer (1.0.0 to 2.2.0, 26 fields)
m2tp: MTP 2 Transparent Proxy (1.0.0 to 2.2.0, 17 fields)
m2ua: MTP 2 User Adaptation Layer (1.0.0 to 2.2.0, 37 fields)
m3ap: M3 Application Protocol (1.8.0 to 2.2.0, 128 fields)
m3ua: MTP 3 User Adaptation Layer (1.0.0 to 2.2.0, 61 fields)
maap: IEEE 1722 MAAP Protocol (1.8.0 to 2.2.0, 8 fields)
mac: MAC (1.4.0 to 2.2.0, 27 fields)
mac-lte: MAC-LTE (1.2.0 to 2.2.0, 298 fields)
macc: MAC Control (1.0.0 to 2.2.0, 51 fields)
macsec: 802.1AE Secure tag (1.12.0 to 2.2.0, 13 fields)
mactelnet: MikroTik MAC-Telnet Protocol (1.6.0 to 2.2.0, 17 fields)
mailslot: SMB MailSlot Protocol (1.0.0 to 2.2.0, 5 fields)
manolito: Blubster/Piolet MANOLITO Protocol (1.0.0 to 2.2.0, 8 fields)
mapi: Exchange 5.5 EMSMDB (1.0.0 to 2.2.0, 124 fields)
marker: Marker (2.0.0 to 2.2.0, 6 fields)
mate: Meta Analysis Tracing Engine (1.0.0 to 2.2.0, 6 fields)
mausb: Media Agnostic USB (1.12.0 to 2.2.0, 100 fields)
mbim: Mobile Broadband Interface Model (1.12.0 to 2.2.0, 649 fields)
mbrtu: Modbus RTU (1.10.0 to 2.2.0, 3 fields)
mbtcp: Modbus/TCP (1.0.0 to 2.2.0, 65 fields)
mcpe: Minecraft Pocket Edition (2.0.0 to 2.2.0, 8 fields)
mdshdr: MDS Header (1.0.0 to 2.2.0, 9 fields)
mdssvc: Spotlight metadata search service (1.12.0 to 2.2.0, 37 fields)
media: Media Type (1.0.0 to 2.2.0, 1 field)
megaco: MEGACO (1.0.0 to 2.2.0, 71 fields)
memcache: Memcache Protocol (1.2.0 to 2.2.0, 41 fields)
mesh: Mesh Header (1.2.0 to 2.2.0, 2 fields)
messenger: Microsoft Messenger Service (1.0.0 to 2.2.0, 5 fields)
meta: Metadata (1.4.0 to 2.2.0, 34 fields)
metamako: Metamako ethernet trailer (2.2.0, 8 fields)
mgcp: Media Gateway Control Protocol (1.0.0 to 2.2.0, 86 fields)
mgmt: DCE/RPC Remote Management (1.0.0 to 2.2.0, 5 fields)
mibs: MIBs (1.0.3 to 1.0.5, 1.0.9 to 1.0.16, 1.2.1 to 1.2.18, 759 fields)
mifare: NXP MiFare (1.8.0 to 2.2.0, 7 fields)
mih: Media-Independent Handover (1.10.0 to 2.2.0, 213 fields)
mikey: Multimedia Internet KEYing (1.0.0 to 2.2.0, 108 fields)
mime_multipart: MIME Multipart Media Encapsulation (1.0.0 to 2.2.0, 20 fields)
mint: Media independent Network Transport (1.12.0 to 2.2.0, 33 fields)
miop: Unreliable Multicast Inter-ORB Protocol (1.2.0 to 2.2.0, 10 fields)
mip: Mobile IP (1.0.0 to 2.2.0, 87 fields)
mipv6: Mobile IPv6 (1.0.0 to 2.2.0, 238 fields)
misc: MISC (pidl) (1.12.0 to 2.2.0, 18 fields)
mka: MACsec Key Agreement (2.0.0 to 2.2.0, 44 fields)
mms: MMS (1.0.0 to 2.2.0, 591 fields)
mmse: MMS Message Encapsulation (1.0.0 to 2.2.0, 47 fields)
mndp: Mikrotik Neighbor Discovery Protocol (1.6.0 to 2.2.0, 15 fields)
modbus: Modbus (1.8.0 to 2.2.0, 64 fields)
mojito: Mojito DHT (1.10.0 to 2.2.0, 40 fields)
moldudp: MoldUDP (1.8.0 to 2.2.0, 9 fields)
moldudp64: MoldUDP64 (1.8.0 to 2.2.0, 11 fields)
mongo: Mongo Wire Protocol (1.6.0 to 2.2.0, 69 fields)
mount: Mount Service (1.0.0 to 2.2.0, 54 fields)
mp: PPP Multilink Protocol (1.0.0 to 2.2.0, 7 fields)
mp2t: ISO/IEC 13818-1 (1.0.0 to 2.2.0, 73 fields)
mp4: MP4 / ISOBMFF file format (1.12.0 to 2.2.0, 32 fields)
mp4v-es: MP4V-ES (1.2.0 to 2.2.0, 19 fields)
mpeg-audio: Moving Picture Experts Group Audio (1.10.0 to 2.2.0, 28 fields)
mpeg-dsmcc: MPEG DSM-CC (1.8.0 to 1.8.15, 55 fields)
mpeg-pes: Packetized Elementary Stream (1.0.0 to 2.2.0, 83 fields)
mpeg.audio: Moving Picture Experts Group Audio (1.0.0 to 1.8.15, 26 fields)
mpeg1: RFC 2250 MPEG1 (1.0.0 to 2.2.0, 14 fields)
mpeg_ca: MPEG2 Conditional Access Table (1.8.0 to 2.2.0, 5 fields)
mpeg_descr: MPEG2 Descriptors (1.8.0 to 2.2.0, 280 fields)
mpeg_dsmcc: MPEG DSM-CC (1.10.0 to 2.2.0, 64 fields)
mpeg_pat: MPEG2 Program Association Table (1.8.0 to 2.2.0, 9 fields)
mpeg_pmt: MPEG2 Program Map Table (1.8.0 to 2.2.0, 15 fields)
mpeg_sect: MPEG2 Section (1.8.0 to 2.2.0, 4 fields)
mpls: MultiProtocol Label Switching Header (1.0.0 to 2.2.0, 23 fields)
mpls-echo: Multiprotocol Label Switching Echo (1.0.0 to 2.2.0, 195 fields)
mpls_psc: PSC (1.10.0 to 2.2.0, 7 fields)
mpls_y1711: MPLS ITU-T Y.1711 OAM (1.10.0 to 2.2.0, 17 fields)
mplspmdlm: MPLS Direct Loss Measurement (DLM) (1.8.0 to 2.2.0, 88 fields)
mplspsc: PSC (1.8.0 to 1.8.15, 7 fields)
mplspwatm11_or_aal5pdu: MPLS PW ATM One-to-One or AAL5 PDU encapsulation (1.4.0 to 2.2.0, 4 fields)
mplspwatmaal5sdu: MPLS PW ATM AAL5 CPCS-SDU mode encapsulation (1.4.0 to 2.2.0, 1 field)
mplspwatmcell: ATM Cell (1.4.0 to 2.2.0, 13 fields)
mplspwatmcellheader: MPLS PW ATM Cell Header (1.4.0 to 2.2.0, 7 fields)
mplspwatmcontrolword: MPLS PW ATM Control Word (1.4.0 to 2.2.0, 9 fields)
mplspwatmn1cw: MPLS PW ATM N-to-One encapsulation, with CW (1.4.0 to 2.2.0, 2 fields)
mplspwatmn1nocw: MPLS PW ATM N-to-One encapsulation, no CW (1.4.0 to 2.2.0, 3 fields)
mplstp_fm: MPLS-TP Fault-Management (1.10.0 to 2.2.0, 14 fields)
mplstp_lock: MPLS-TP Lock-Instruct (1.10.0 to 2.2.0, 3 fields)
mplsy1711: MPLS ITU-T Y.1711 OAM (1.8.0 to 1.8.15, 6 fields)
mptcp: Multipath Transmission Control Protocol (2.0.0 to 2.2.0, 15 fields)
mq: WebSphere MQ (1.0.0 to 2.2.0, 544 fields)
mqpcf: WebSphere MQ Programmable Command Formats (1.0.0 to 2.2.0, 31 fields)
mqtt: MQ Telemetry Transport Protocol (1.12.0 to 2.2.0, 27 fields)
mqttsn: MQ Telemetry Transport Protocol for Sensor Networks (2.0.0 to 2.2.0, 27 fields)
mrcpv2: Media Resource Control Protocol Version 2 (MRCPv2) (1.10.0 to 2.2.0, 110 fields)
mrdisc: Multicast Router DISCovery protocol (1.0.0 to 2.2.0, 12 fields)
mrp-mmrp: Multiple Mac Registration Protocol (1.6.0 to 2.2.0, 13 fields)
mrp-msrp: Multiple Stream Reservation Protocol (1.4.0 to 2.2.0, 30 fields)
mrp-mvrp: Multiple VLAN Registration Protocol (1.8.0 to 2.2.0, 13 fields)
mscml: Media Server Control Markup Language - draft 07 (1.0.0 to 2.2.0, 719 fields)
msdp: Multicast Source Discovery Protocol (1.0.0 to 2.2.0, 24 fields)
msmms: Microsoft Media Server (1.0.0 to 2.2.0, 57 fields)
msnip: MSNIP: Multicast Source Notification of Interest Protocol (1.0.0 to 2.2.0, 12 fields)
msnlb: MS Network Load Balancing (1.0.0 to 2.2.0, 49 fields)
msproxy: MS Proxy Protocol (1.0.0 to 2.2.0, 34 fields)
msrp: Message Session Relay Protocol (1.0.0 to 2.2.0, 28 fields)
mstp: BACnet MS/TP (1.2.0 to 2.2.0, 14 fields)
mswsp: Windows Search Protocol (2.0.0 to 2.2.0, 218 fields)
mtp2: Message Transfer Part Level 2 (1.0.0 to 2.2.0, 11 fields)
mtp3: Message Transfer Part Level 3 (1.0.0 to 2.2.0, 17 fields)
mtp3mg: Message Transfer Part Level 3 Management (1.0.0 to 2.2.0, 28 fields)
mux27010: MUX27010 Protocol (1.6.0 to 2.2.0, 84 fields)
mysql: MySQL Protocol (1.0.0 to 2.2.0, 182 fields)

N

nas-eps: Non-Access-Stratum (NAS)PDU (1.2.0 to 2.2.0, 231 fields)
nasdaq_itch: Nasdaq TotalView-ITCH (1.2.0 to 2.2.0, 25 fields)
nasdaq_soup: Nasdaq-SoupTCP version 2.0 (1.2.0 to 2.2.0, 9 fields)
nat-pmp: NAT Port Mapping Protocol (1.2.0 to 2.2.0, 10 fields)
nb_rtpmux: 3GPP Nb Interface RTP Multiplex (1.4.0 to 2.2.0, 9 fields)
nbap: UTRAN Iub interface NBAP signalling (1.0.0 to 2.2.0, 4319 fields)
nbd: Network Block Device (1.0.0 to 2.2.0, 10 fields)
nbdgm: NetBIOS Datagram Service (1.0.0 to 2.2.0, 12 fields)
nbifom: Network-Based IP Flow Mobility (2.2.0, 47 fields)
nbipx: NetBIOS over IPX (1.0.0 to 2.2.0, 25 fields)
nbns: NetBIOS Name Service (1.0.0 to 2.2.0, 52 fields)
nbp: Name Binding Protocol (1.0.0 to 2.2.0, 11 fields)
nbss: NetBIOS Session Service (1.0.0 to 2.2.0, 10 fields)
ncp: NetWare Core Protocol (1.0.0 to 2.2.0, 2436 fields)
ncs: Novell Cluster Services (1.0.0 to 2.2.0, 2 fields)
ndmp: Network Data Management Protocol (1.0.0 to 2.2.0, 200 fields)
ndp: Nortel Discovery Protocol (1.6.0 to 2.2.0, 6 fields)
ndps: Novell Distributed Print System (1.0.0 to 2.2.0, 377 fields)
negoex: SPNEGO Extended Negotiation Security Mechanism (1.10.0 to 2.2.0, 28 fields)
netanalyzer: netANALYZER (1.8.0 to 2.2.0, 18 fields)
netbios: NetBIOS (1.0.0 to 2.2.0, 53 fields)
netdfs: Settings for Microsoft Distributed File System (1.0.0 to 2.2.0, 169 fields)
netdump: Netdump Protocol (1.2.0 to 2.2.0, 9 fields)
netlink: Linux netlink protocol (1.12.0 to 2.2.0, 19 fields)
netlink-netfilter: Linux netlink netfilter protocol (1.12.0 to 2.2.0, 3 fields)
netlink-route: Linux rtnetlink (route netlink) protocol (1.12.0 to 2.2.0, 35 fields)
netlink-sock_diag: Linux netlink sock diag protocol (1.12.0 to 2.2.0, 49 fields)
netmon_802_11: NetMon 802.11 capture header (1.4.0 to 2.2.0, 14 fields)
netrom: Amateur Radio NET/ROM (1.10.0 to 2.2.0, 19 fields)
netsync: Monotone Netsync (1.0.0 to 2.2.0, 39 fields)
nettl: HP-UX Network Tracing and Logging (1.0.0 to 2.2.0, 5 fields)
newmail: Microsoft Exchange New Mail Notification (1.0.0 to 2.2.0, 1 field)
nflog: Linux Netfilter NFLOG (1.8.0 to 2.2.0, 12 fields)
nfs: Network File System (1.0.0 to 2.2.0, 612 fields)
nfsacl: NFSACL (1.0.0 to 2.2.0, 19 fields)
nfsauth: NFSAUTH (1.0.0 to 2.2.0, 1 field)
nhrp: NBMA Next Hop Resolution Protocol (1.0.0 to 2.2.0, 80 fields)
nisplus: NIS+ (1.0.0 to 2.2.0, 118 fields)
nispluscb: NIS+ Callback (1.0.0 to 2.2.0, 3 fields)
njack: 3com Network Jack (1.0.0 to 2.2.0, 23 fields)
nlm: Network Lock Manager Protocol (1.0.0 to 2.2.0, 29 fields)
nlsp: NetWare Link Services Protocol (1.0.0 to 2.2.0, 80 fields)
nmas: Novell Modular Authentication Service (1.0.0 to 2.2.0, 33 fields)
nntp: Network News Transfer Protocol (1.0.0 to 2.2.0, 2 fields)
noe: NOE Protocol (1.8.0 to 2.2.0, 21 fields)
norm: Negative-acknowledgment Oriented Reliable Multicast (1.0.0 to 2.2.0, 65 fields)
novell_pkis: Novell PKIS ASN.1 type (1.12.0 to 2.2.0, 45 fields)
npmp: NetPerfMeter Protocol (1.4.0 to 2.2.0, 56 fields)
nr: QNX6 QNET Network Resolver protocol (2.0.0 to 2.2.0, 8 fields)
ns: NetScaler Trace (1.4.0 to 2.2.0, 61 fields)
ns_cert_exts: NetScape Certificate Extensions (1.0.0 to 2.2.0, 19 fields)
nsh: Network Service Header (2.2.0, 15 fields)
nsip: Network Service Over IP (1.0.0 to 1.2.18, 21 fields)
nspi: Exchange 5.5 Name Service Provider (1.0.0 to 2.2.0, 110 fields)
nsrp: Juniper Netscreen Redundant Protocol (1.0.0 to 2.2.0, 26 fields)
ntlmssp: NTLM Secure Service Provider (1.0.0 to 2.2.0, 159 fields)
ntp: Network Time Protocol (1.0.0 to 2.2.0, 122 fields)
null: Null/Loopback (1.0.0 to 2.2.0, 2 fields)
nw_mtp: NexusWare C7 MTP (1.4.0 to 2.2.0, 5 fields)
nw_serial: NetWare Serialization Protocol (1.0.0 to 2.2.0, 1 field)
nwp: Neighborhood Watch Protocol (2.0.0 to 2.2.0, 13 fields)

O

oampdu: OAMPDU (2.0.0 to 2.2.0, 100 fields)
obex: OBEX Protocol (2.2.0, 228 fields)
ocfs2: OCFS2 Networking (2.0.0 to 2.2.0, 82 fields)
ocsp: Online Certificate Status Protocol (1.0.0 to 2.2.0, 75 fields)
oicq: OICQ - IM software, popular in China (1.0.0 to 2.2.0, 6 fields)
oipf.ciplus: Open IPTV Forum CSPG-CI+ (1.8.0 to 2.2.0, 7 fields)
olsr: Optimized Link State Routing Protocol (1.0.0 to 2.2.0, 42 fields)
omapi: ISC Object Management API (1.0.0 to 2.2.0, 21 fields)
omron: OMRON FINS Protocol (1.4.0 to 2.2.0, 309 fields)
opa: Intel Omni-Path (2.2.0, 93 fields)
opa.fe: Intel Omni-Path FE Header - Omni-Path Fabric Excutive Header (2.2.0, 5 fields)
opa.mad: Intel Omni-Path MAD (2.2.0, 1172 fields)
opa.snc: Intel Omni-Path SnC - Omni-Path Snoop and Capture MetaData Header (2.2.0, 37 fields)
opcua: OpcUa Binary Protocol (1.0.0 to 2.2.0, 615 fields)
openflow: OpenFlow (1.12.0 to 2.2.0, 2 fields)
openflow_v1: OpenFlow 1.0 (1.12.0 to 2.2.0, 99 fields)
openflow_v4: OpenFlow 1.3 (1.12.0 to 2.2.0, 565 fields)
openflow_v5: OpenFlow 1.4 (1.12.0 to 2.2.0, 682 fields)
opensafety: openSAFETY (1.6.0 to 2.2.0, 111 fields)
openvpn: OpenVPN Protocol (1.10.0 to 2.2.0, 25 fields)
openwire: OpenWire (1.8.0 to 2.2.0, 186 fields)
opsi: Open Policy Service Interface (1.0.0 to 2.2.0, 45 fields)
optommp: OptoMMP (2.0.0 to 2.2.0, 11 fields)
osc: Open Sound Control Encoding (1.12.0 to 2.2.0, 40 fields)
osi: OSI (1.0.0 to 2.2.0, 28 fields)
osinlcp: PPP OSI Network Layer Control Protocol (1.8.0 to 2.2.0, 3 fields)
ospf: Open Shortest Path First (1.0.0 to 2.2.0, 246 fields)
ossp: OSSP (2.0.0 to 2.2.0, 23 fields)
ouch: OUCH (1.10.0 to 2.2.0, 37 fields)
oxid: DCOM OXID Resolver (1.0.0 to 2.2.0, 30 fields)

P

p1: X.411 Message Transfer Service (1.6.0 to 2.2.0, 711 fields)
p22: X.420 Information Object (1.6.0 to 2.2.0, 449 fields)
p7: X.413 Message Store Service (1.0.0 to 2.2.0, 461 fields)
p772: STANAG 4406 Message (1.6.0 to 2.2.0, 96 fields)
p_mul: P_Mul (ACP142) (1.0.0 to 2.2.0, 76 fields)
packetbb: PacketBB Protocol (1.4.0 to 2.2.0, 60 fields)
packetcable_avps: PacketCable AVPs (1.10.0 to 2.2.0, 77 fields)
packetlogger: PacketLogger (1.2.0 to 2.2.0, 2 fields)
pagp: Port Aggregation Protocol (1.0.0 to 2.2.0, 28 fields)
paketcable_avps: PacketCable AVPs (1.0.0 to 1.8.15, 66 fields)
paltalk: Paltalk Messenger Protocol (1.2.0 to 2.2.0, 4 fields)
pana: Protocol for carrying Authentication for Network Access (1.0.0 to 2.2.0, 30 fields)
pap: PPP Password Authentication Protocol (1.0.0 to 2.2.0, 11 fields)
papi: Aruba PAPI (1.6.0 to 2.2.0, 32 fields)
pathport: Pathport Protocol (1.12.0 to 2.2.0, 25 fields)
pcap: UTRAN Iupc interface Positioning Calculation Application Part (PCAP) (1.0.0 to 2.2.0, 1369 fields)
pcap_pktdata: pcap/pcapng packet data (2.2.0, 5 fields)
pcep: Path Computation Element communication Protocol (1.0.0 to 2.2.0, 300 fields)
pcli: Packet Cable Lawful Intercept (1.0.0 to 2.2.0, 4 fields)
pcnfsd: PC NFS (1.0.0 to 2.2.0, 17 fields)
pcp: Performance Co-Pilot (1.8.0 to 2.2.0, 100 fields)
pdc: PDC Protocol (1.12.0 to 2.2.0, 21 fields)
pdcp-lte: PDCP-LTE (1.2.0 to 2.2.0, 138 fields)
peekremote: AiroPeek/OmniPeek encapsulated IEEE 802.11 (1.8.0 to 2.2.0, 63 fields)
per: Packed Encoding Rules (ASN.1 X.691) (1.0.0 to 2.2.0, 44 fields)
pflog: OpenBSD Packet Filter log file (1.0.0 to 2.2.0, 21 fields)
pflog-old: OpenBSD Packet Filter log file, pre 3.4 (1.0.0 to 2.2.0, 6 fields)
pgm: Pragmatic General Multicast (1.0.0 to 2.2.0, 92 fields)
pgsql: PostgreSQL (1.0.0 to 2.2.0, 47 fields)
pim: Protocol Independent Multicast (1.0.0 to 2.2.0, 82 fields)
pingpongprotocol: Ping Pong Protocol (1.0.0 to 2.2.0, 8 fields)
pipe: SMB Pipe Protocol (1.0.0 to 1.10.14, 23 fields)
pkcs-1: PKCS#1 (1.0.0 to 2.2.0, 37 fields)
pkcs12: PKCS#12: Personal Information Exchange (1.0.0 to 2.2.0, 90 fields)
pkinit: PKINIT (1.0.0 to 2.2.0, 41 fields)
pkix-cert: PKIX CERT File Format (1.0.0 to 2.2.0, 2 fields)
pkix1explicit: PKIX1Explicit (1.0.0 to 2.2.0, 57 fields)
pkix1implicit: PKIX1Implitit (1.0.0 to 2.2.0, 22 fields)
pkixac: PKIX Attribute Certificate (1.4.0 to 2.2.0, 61 fields)
pkixproxy: PKIXProxy (RFC3820) (1.0.0 to 2.2.0, 7 fields)
pkixqualified: PKIX Qualified (1.0.0 to 2.2.0, 28 fields)
pkixtsp: PKIX Time Stamp Protocol (1.0.0 to 2.2.0, 35 fields)
pkt_ccc: PacketCable Call Content Connection (1.0.0 to 2.2.0, 2 fields)
pktap: PKTAP packet header (1.12.0 to 2.2.0, 16 fields)
pktc: PacketCable (1.0.0 to 2.2.0, 35 fields)
pktc.mtafqdn: PacketCable MTA FQDN (2.0.0 to 2.2.0, 11 fields)
pktgen: Linux Kernel Packet Generator (1.0.0 to 2.2.0, 5 fields)
pmproxy: Performance Co-Pilot Proxy (2.0.0 to 2.2.0, 4 fields)
pn532: NXP PN532 (1.8.0 to 2.2.0, 186 fields)
pn532_hci: NXP PN532 HCI (1.12.0 to 2.2.0, 12 fields)
pn_dcp: PROFINET DCP (1.0.0 to 2.2.0, 41 fields)
pn_io: PROFINET IO (1.0.0 to 2.2.0, 532 fields)
pn_mrp: PROFINET MRP (1.0.0 to 2.2.0, 16 fields)
pn_mrrt: PROFINET MRRT (1.0.0 to 2.2.0, 6 fields)
pn_ptcp: PROFINET PTCP (1.0.0 to 2.2.0, 35 fields)
pn_rt: PROFINET Real-Time Protocol (1.0.0 to 2.2.0, 39 fields)
png: Portable Network Graphics (1.0.0 to 2.2.0, 42 fields)
pnp: Microsoft Plug and Play service (1.0.0 to 2.2.0, 1 field)
pnrp: Peer Name Resolution Protocol (1.4.0 to 2.2.0, 113 fields)
poc-settings: poc-settings XML doc (RFC 4354) (1.0.0 to 2.2.0, 32 fields)
pop: Post Office Protocol (1.0.0 to 2.2.0, 18 fields)
portcontrol: Port Control Protocol (1.10.0 to 2.2.0, 48 fields)
portmap: Portmap (1.0.0 to 2.2.0, 19 fields)
ppcap: Proprietary PCAP (1.8.0 to 2.2.0, 25 fields)
ppi: PPI Packet Header (1.0.0 to 2.2.0, 123 fields)
ppi_antenna: PPI antenna decoder (1.6.0 to 2.2.0, 37 fields)
ppi_gps: PPI Geotagging GPS tag decoder (1.6.0 to 2.2.0, 43 fields)
ppi_sensor: PPI sensor decoder (1.8.0 to 2.2.0, 28 fields)
ppi_vector: PPI vector decoder (1.6.0 to 2.2.0, 74 fields)
ppp: Point-to-Point Protocol (1.0.0 to 2.2.0, 18 fields)
ppp_hdlc: PPP In HDLC-Like Framing (1.0.0 to 2.2.0, 2 fields)
pppmux: PPP Multiplexing (1.0.0 to 2.2.0, 1 field)
pppmuxcp: PPPMux Control Protocol (1.0.0 to 2.2.0, 5 fields)
pppoe: PPP-over-Ethernet (1.2.0 to 2.2.0, 7 fields)
pppoed: PPP-over-Ethernet Discovery (1.0.0 to 2.2.0, 60 fields)
pppoes: PPP-over-Ethernet Session (1.0.0 to 2.2.0, 5 fields)
pptp: Point-to-Point Tunnelling Protocol (1.0.0 to 2.2.0, 50 fields)
prap: Printer Access Protocol (1.10.0 to 2.2.0, 10 fields)
pres: ISO 8823 OSI Presentation Protocol (1.0.0 to 2.2.0, 95 fields)
presence: presence XML doc (RFC 3863) (1.0.0 to 2.2.0, 19 fields)
prism: Prism capture header (1.0.0 to 2.2.0, 25 fields)
prp: Parallel Redundancy Protocol (IEC62439 Part 3) (1.0.0 to 2.2.0, 14 fields)
ptp: Precision Time Protocol (IEEE1588) (1.0.0 to 2.2.0, 429 fields)
ptpip: Picture Transfer Protocol Over IP (1.12.0 to 2.2.0, 13 fields)
pulse: PULSE protocol for Linux Virtual Server redundancy (1.10.0 to 2.2.0, 1 field)
pvfs: Parallel Virtual File System (1.0.0 to 2.2.0, 124 fields)
pw.padding: Pseudowire Padding (2.0.0 to 2.2.0, 1 field)
pw_atm_n2o_cw: ATM PW, N-to-one Cell Mode Control Word (1.2.0 to 1.2.18, 3 fields)
pw_hdlc_nocw_fr: HDLC PW, FR port mode (no CW) (1.2.0 to 2.2.0, 8 fields)
pw_oam: Pseudo-Wire OAM (1.10.0 to 2.2.0, 8 fields)
pwcesopsn: CESoPSN basic NxDS0 mode (no RTP support) (1.2.0 to 2.2.0, 18 fields)
pwethcw: PW Ethernet Control Word (1.2.0 to 2.2.0, 3 fields)
pwfr: PW Frame Relay DLCI Control Word (1.2.0 to 2.2.0, 11 fields)
pwpadding: Pseudowire Padding (1.4.0 to 1.12.13, 1 field)
pwsatopcw: SAToP (no RTP support) (1.2.0 to 2.2.0, 18 fields)

Q

q2931: Q.2931 (1.0.0 to 2.2.0, 112 fields)
q708: ITU-T Q.708 ISPC Analysis (1.4.0 to 2.2.0, 3 fields)
q931: Q.931 (1.0.0 to 2.2.0, 156 fields)
q932: Q.932 (1.0.0 to 2.2.0, 55 fields)
q932.ros: Q.932 Operations Service Element (1.0.0 to 2.2.0, 26 fields)
q933: Q.933 (1.0.0 to 2.2.0, 101 fields)
qllc: Qualified Logical Link Control (1.0.0 to 2.2.0, 2 fields)
qos: QNX6 QNET QOS protocol (2.0.0 to 2.2.0, 8 fields)
qsig: QSIG (1.0.0 to 2.2.0, 1004 fields)
quake: Quake Network Protocol (1.0.0 to 2.2.0, 32 fields)
quake2: Quake II Network Protocol (1.0.0 to 2.2.0, 24 fields)
quake3: Quake III Arena Network Protocol (1.0.0 to 2.2.0, 13 fields)
quakeworld: QuakeWorld Network Protocol (1.0.0 to 2.2.0, 22 fields)
quic: QUIC (Quick UDP Internet Connections) (1.12.0 to 2.2.0, 131 fields)

R

r-stp: Retix Spanning Tree Protocol (1.0.0 to 2.2.0, 10 fields)
r3: Assa Abloy R3 (1.4.0 to 2.2.0, 648 fields)
radio: 802.11 radio information (1.0.0 to 1.12.13, 3 fields)
radiotap: IEEE 802.11 Radiotap Capture header (1.0.0 to 2.2.0, 188 fields)
radius: RADIUS Protocol (1.0.0 to 2.2.0, 11864 fields)
raknet: RAKNET game libs (2.0.0 to 2.2.0, 14 fields)
ranap: Radio Access Network Application Part (1.0.0 to 2.2.0, 920 fields)
raw_sip: Session Initiation Protocol (SIP as raw text) (1.0.0 to 2.2.0, 1 field)
rdaclif: DCE/RPC Directory Acl Interface (1.0.0 to 2.2.0, 1 field)
rdc: H.282 Remote Device Control (1.0.0 to 2.2.0, 646 fields)
rdm: Remote Device Management (1.0.0 to 2.2.0, 129 fields)
rdp: Remote Desktop Protocol (1.8.0 to 2.2.0, 240 fields)
rdt: Real Data Transport (1.0.0 to 2.2.0, 69 fields)
redback: Redback (1.0.0 to 2.2.0, 10 fields)
redbackli: Redback Lawful Intercept (1.0.0 to 2.2.0, 10 fields)
reginfo: Reginfo XML doc (RFC 3680) (1.0.0 to 2.2.0, 42 fields)
reload: REsource LOcation And Discovery (1.6.0 to 2.2.0, 309 fields)
reload-framing: REsource LOcation And Discovery Framing (1.6.0 to 2.2.0, 13 fields)
remact: DCOM IRemoteActivation (1.0.0 to 2.2.0, 22 fields)
remunk: IRemUnknown (1.0.0 to 2.2.0, 18 fields)
rep_proc: DCE DFS Replication Server (1.0.0 to 2.2.0, 1 field)
rfc2190: H.263 RTP Payload header (RFC2190) (1.2.0 to 2.2.0, 21 fields)
rfr: Exchange 2003 Directory Request For Response (1.2.0 to 2.2.0, 10 fields)
rgmp: Router-port Group Management Protocol (1.0.0 to 2.2.0, 6 fields)
riemann: Riemann (2.0.0 to 2.2.0, 30 fields)
rip: Routing Information Protocol (1.0.0 to 2.2.0, 18 fields)
ripng: RIPng (1.0.0 to 2.2.0, 8 fields)
rlc: Radio Link Control (1.4.0 to 2.2.0, 59 fields)
rlc-lte: RLC-LTE (1.2.0 to 2.2.0, 92 fields)
rlm: Redundant Link Management Protocol (1.0.0 to 2.2.0, 5 fields)
rlogin: Rlogin Protocol (1.0.0 to 2.2.0, 16 fields)
rmcp: Remote Management Control Protocol (1.0.0 to 2.2.0, 5 fields)
rmi: Java RMI (1.0.0 to 2.2.0, 12 fields)
rmp: HP Remote Maintenance Protocol (1.0.0 to 2.2.0, 10 fields)
rmt-fec: Forward Error Correction (FEC) (1.12.0 to 2.2.0, 13 fields)
rmt-lct: Layered Coding Transport (1.12.0 to 2.2.0, 33 fields)
rnsap: UTRAN Iur interface Radio Network Subsystem Application Part (1.0.0 to 2.2.0, 3860 fields)
rohc: RObust Header Compression (ROHC) (1.6.0 to 2.2.0, 118 fields)
roofnet: Roofnet Protocol (1.0.0 to 2.2.0, 19 fields)
ros: X.880 OSI Remote Operations Service (1.0.0 to 2.2.0, 42 fields)
roverride: Remote Override interface (1.0.0 to 2.2.0, 1 field)
rpc: Remote Procedure Call (1.0.0 to 2.2.0, 79 fields)
rpc_browser: RPC Browser (1.0.0 to 2.2.0, 6 fields)
rpc_netlogon: Microsoft Network Logon (1.0.0 to 2.2.0, 315 fields)
rpcap: Remote Packet Capture (1.2.0 to 2.2.0, 81 fields)
rpcordma: RPC over RDMA (2.0.0 to 2.2.0, 16 fields)
rpkirtr: RPKI-Router Protocol (1.10.0 to 2.2.0, 25 fields)
rpl: Remote Program Load (1.0.0 to 2.2.0, 21 fields)
rpriv: Privilege Server operations (1.0.0 to 2.2.0, 8 fields)
rquota: Remote Quota (1.0.0 to 2.2.0, 18 fields)
rras: Microsoft Routing and Remote Access Service (1.0.0 to 2.2.0, 1 field)
rrc: Radio Resource Control (RRC) protocol (1.0.0 to 2.2.0, 8604 fields)
rrlp: Radio Resource LCS Protocol (RRLP) (1.0.0 to 2.2.0, 994 fields)
rs_acct: DCE/RPC RS_ACCT (1.0.0 to 2.2.0, 8 fields)
rs_attr: Registry Server Attributes Manipulation Interface (1.0.0 to 2.2.0, 1 field)
rs_attr_schema: DCE/RPC Registry Server Attributes Schema (1.0.0 to 2.2.0, 1 field)
rs_bind: DCE/RPC RS_BIND (1.0.0 to 2.2.0, 1 field)
rs_misc: DCE/RPC RS_MISC (1.0.0 to 2.2.0, 5 fields)
rs_pgo: DCE Name Service (1.0.0 to 2.2.0, 67 fields)
rs_plcy: RS Interface properties (1.0.0 to 2.2.0, 1 field)
rs_prop_acct: DCE/RPC RS_PROP_ACCT (1.0.0 to 2.2.0, 1 field)
rs_prop_acl: DCE/RPC Registry server propagation interface - ACLs (1.0.0 to 2.2.0, 1 field)
rs_prop_attr: DCE/RPC Prop Attr (1.0.0 to 2.2.0, 1 field)
rs_prop_pgo: DCE/RPC Registry server propagation interface - PGO items (1.0.0 to 2.2.0, 1 field)
rs_prop_plcy: DCE/RPC Registry server propagation interface - properties and policies (1.0.0 to 2.2.0, 1 field)
rs_pwd_mgmt: DCE/RPC Registry Password Management (1.0.0 to 2.2.0, 1 field)
rs_repadm: Registry server administration operations. (1.0.0 to 2.2.0, 2 fields)
rs_replist: DCE/RPC Repserver Calls (1.0.0 to 2.2.0, 1 field)
rs_repmgr: DCE/RPC Operations between registry server replicas (1.0.0 to 2.2.0, 1 field)
rs_unix: DCE/RPC RS_UNIX (1.0.0 to 2.2.0, 1 field)
rsec_login: Remote sec_login preauth interface. (1.0.0 to 2.2.0, 1 field)
rsh: Remote Shell (1.0.0 to 2.2.0, 8 fields)
rsip: Realm Specific IP Protocol (1.6.0 to 2.2.0, 28 fields)
rsl: Radio Signalling Link (RSL) (1.0.0 to 1.8.15, 86 fields)
rsp: RMCP Security-extensions Protocol (1.0.0 to 2.2.0, 2 fields)
rss: rss (1.0.0 to 2.2.0, 122 fields)
rstat: RSTAT (1.0.0 to 2.2.0, 4 fields)
rsvd: Remote Shared Virtual Disk (2.0.0 to 2.2.0, 44 fields)
rsvp: Resource ReserVation Protocol (RSVP) (1.0.0 to 2.2.0, 541 fields)
rsync: RSYNC File Synchroniser (1.0.0 to 2.2.0, 8 fields)
rtacser: RTAC Serial (1.12.0 to 2.2.0, 11 fields)
rtcdc: WebRTC Datachannel Protocol (1.10.0 to 2.2.0, 18 fields)
rtcfg: RTcfg (1.0.0 to 2.2.0, 24 fields)
rtcp: Real-time Transport Control Protocol (1.0.0 to 2.2.0, 250 fields)
rtitcp: RTI TCP Transport Protocol (2.2.0, 24 fields)
rtls: Real Time Location System (2.2.0, 62 fields)
rtmac: Real-Time Media Access Control (1.0.0 to 2.2.0, 38 fields)
rtmp: Routing Table Maintenance Protocol (1.0.0 to 2.2.0, 8 fields)
rtmpt: Real Time Messaging Protocol (1.0.0 to 2.2.0, 57 fields)
rtp: Real-Time Transport Protocol (1.0.0 to 2.2.0, 74 fields)
rtpevent: RFC 2833 RTP Event (1.0.0 to 2.2.0, 5 fields)
rtpmidi: RFC 4695/6295 RTP-MIDI (1.8.0 to 2.2.0, 299 fields)
rtpproxy: Sippy RTPproxy Protocol (1.12.0 to 2.2.0, 42 fields)
rtps: Real-Time Publish-Subscribe Wire Protocol (1.0.0 to 2.2.0, 313 fields)
rtps2: Real-Time Publish-Subscribe Wire Protocol 2.x (1.2.0 to 1.8.15, 47 fields)
rtse: X.228 OSI Reliable Transfer Service (1.0.0 to 2.2.0, 46 fields)
rtsp: Real Time Streaming Protocol (1.0.0 to 2.2.0, 20 fields)
rua: UTRAN Iuh interface RUA signalling (1.4.0 to 2.2.0, 89 fields)
rudp: Reliable UDP (1.0.0 to 2.2.0, 13 fields)
rwall: Remote Wall protocol (1.0.0 to 2.2.0, 2 fields)
rx: RX Protocol (1.0.0 to 2.2.0, 41 fields)

S

s1ap: S1 Application Protocol (1.0.0 to 2.2.0, 819 fields)
s4406: STANAG 4406 Message (1.0.0 to 1.4.15, 87 fields)
s4607: STANAG 4607 (GMTI Format) (1.12.2 to 2.2.0, 106 fields)
s5066: STANAG 5066 (SIS layer) (1.0.0 to 1.10.14, 98 fields)
s5066dts: STANAG 5066(DTS layer) (1.12.0 to 2.2.0, 103 fields)
s5066sis: STANAG 5066 (SIS layer) (1.12.0 to 2.2.0, 105 fields)
s7comm: S7 Communication (2.0.0 to 2.2.0, 726 fields)
sabp: UTRAN IuBC interface SABP signaling (1.0.0 to 2.2.0, 111 fields)
sadmind: SADMIND (1.0.0 to 2.2.0, 3 fields)
sametime: Sametime Protocol (1.6.0 to 2.2.0, 28 fields)
samr: SAMR (pidl) (1.0.0 to 2.2.0, 648 fields)
sap: Session Announcement Protocol (1.0.0 to 2.2.0, 24 fields)
sasp: Server/Application State Protocol (1.4.0 to 2.2.0, 68 fields)
sb3: Fibre Channel Single Byte Command (1.0.0 to 1.8.15, 68 fields)
sbc: Bluetooth SBC Codec (1.10.0 to 2.2.0, 25 fields)
sbcap: SBc Application Part (1.8.0 to 2.2.0, 66 fields)
sbus: SAIA S-Bus (1.0.0 to 2.2.0, 73 fields)
sccp: Signalling Connection Control Part (1.0.0 to 2.2.0, 101 fields)
sccpmg: Signalling Connection Control Part Management (1.0.0 to 2.2.0, 11 fields)
scop: ZigBee SCoP (1.6.0 to 2.2.0, 6 fields)
scsi: SCSI (1.0.0 to 2.2.0, 659 fields)
scsi_mmc: SCSI_MMC (1.0.0 to 2.2.0, 319 fields)
scsi_osd: SCSI_OSD (1.0.0 to 2.2.0, 199 fields)
scsi_sbc: SCSI_SBC (1.0.0 to 2.2.0, 185 fields)
scsi_smc: SCSI_SMC (1.0.0 to 2.2.0, 70 fields)
scsi_ssc: SCSI_SSC (1.0.0 to 2.2.0, 107 fields)
sctp: Stream Control Transmission Protocol (1.0.0 to 2.2.0, 170 fields)
sdh: SDH/SONET Protocol (1.8.0 to 2.2.0, 28 fields)
sdlc: Synchronous Data Link Control (SDLC) (1.0.0 to 2.2.0, 10 fields)
sdp: Session Description Protocol (1.0.0 to 2.2.0, 83 fields)
sebek: SEBEK - Kernel Data Capture (1.0.0 to 2.2.0, 19 fields)
secidmap: DCE Security ID Mapper (1.0.0 to 2.2.0, 1 field)
selfm: SEL Protocol (1.10.0 to 2.2.0, 219 fields)
sercosiii: SERCOS III V1.1 (1.2.0 to 1.6.16, 53 fields)
ses: ISO 8327-1 OSI Session Protocol (1.0.0 to 2.2.0, 76 fields)
sflow: InMon sFlow (1.0.0 to 2.2.0, 368 fields)
sgsap: SGs Application Part (SGsAP) (1.6.0 to 2.2.0, 20 fields)
shim6: Shim6 Protocol (2.2.0, 41 fields)
sigcomp: Signaling Compression (1.0.0 to 2.2.0, 107 fields)
siii: SERCOS III V1.1 (1.8.0 to 2.2.0, 65 fields)
simple: Standard Interface for Multiple Platform Link Evaluation (2.2.0, 56 fields)
simulcrypt: SIMULCRYPT Protocol (1.2.0 to 2.2.0, 85 fields)
sip: Session Initiation Protocol (1.0.0 to 2.2.0, 253 fields)
sipfrag: Sipfrag (1.0.0 to 2.2.0, 1 field)
sir: Serial Infrared (1.0.0 to 2.2.0, 8 fields)
sita: Societe Internationale de Telecommunications Aeronautiques (1.0.0 to 2.2.0, 27 fields)
skinny: Skinny Client Control Protocol (1.0.0 to 2.2.0, 556 fields)
skype: SKYPE (1.10.0 to 2.2.0, 19 fields)
slarp: Cisco SLARP (1.0.0 to 2.2.0, 7 fields)
slimp3: SliMP3 Communication Protocol (1.0.0 to 2.2.0, 37 fields)
sll: Linux cooked-mode capture (1.0.0 to 2.2.0, 10 fields)
slow: Slow Protocols (1.0.0 to 2.2.0, 173 fields)
slsk: SoulSeek Protocol (1.0.0 to 2.2.0, 64 fields)
sm: Cisco Session Management (1.0.0 to 2.2.0, 20 fields)
smb: SMB (Server Message Block Protocol) (1.0.0 to 2.2.0, 733 fields)
smb2: SMB2 (Server Message Block Protocol version 2) (1.0.0 to 2.2.0, 429 fields)
smb_direct: SMB-Direct (SMB RDMA Transport) (1.12.0 to 2.2.0, 29 fields)
smb_netlogon: Microsoft Windows Logon Protocol (Old) (1.0.0 to 2.2.0, 49 fields)
smb_pipe: SMB Pipe Protocol (1.12.0 to 2.2.0, 30 fields)
smil: Synchronized Multimedia Integration Language (1.0.0 to 2.2.0, 256 fields)
sml: Smart Message Language (1.10.0 to 2.2.0, 85 fields)
smpp: Short Message Peer to Peer (1.0.0 to 2.2.0, 151 fields)
smrse: Short Message Relaying Service (1.0.0 to 2.2.0, 37 fields)
smtp: Simple Mail Transfer Protocol (1.0.0 to 2.2.0, 24 fields)
smux: SNMP Multiplex Protocol (1.0.0 to 2.2.0, 2 fields)
sna: Systems Network Architecture (1.0.0 to 2.2.0, 209 fields)
snaeth: SNA-over-Ethernet (1.0.0 to 2.2.0, 3 fields)
sndcp: Subnetwork Dependent Convergence Protocol (1.0.0 to 2.2.0, 31 fields)
sndcpxid: Subnetwork Dependent Convergence Protocol XID (1.2.0 to 2.2.0, 52 fields)
snmp: Simple Network Management Protocol (1.0.0 to 2.2.0, 146 fields)
socks: Socks Protocol (1.0.0 to 2.2.0, 28 fields)
sonmp: Nortel SONMP (1.0.0 to 1.4.15, 6 fields)
soupbintcp: SoupBinTCP (1.10.0 to 2.2.0, 11 fields)
spdy: SPDY (1.12.0 to 2.2.0, 36 fields)
spice: Spice protocol (1.8.0 to 2.2.0, 272 fields)
spnego: Simple Protected Negotiation (1.0.0 to 2.2.0, 46 fields)
spoolss: Microsoft Spool Subsystem (1.0.0 to 2.2.0, 355 fields)
spp: Sequenced Packet Protocol (1.0.0 to 2.2.0, 12 fields)
spray: SPRAY (1.0.0 to 2.2.0, 6 fields)
sprt: Simple Packet Relay Transport (1.10.0 to 2.2.0, 153 fields)
spx: Sequenced Packet eXchange (1.0.0 to 2.2.0, 18 fields)
srp: H.324/SRP (1.0.0 to 2.2.0, 4 fields)
srvloc: Service Location Protocol (1.0.0 to 2.2.0, 112 fields)
srvsvc: Server Service (1.0.0 to 2.2.0, 751 fields)
sscf-nni: SSCF-NNI (1.0.0 to 2.2.0, 2 fields)
sscop: SSCOP (1.0.0 to 2.2.0, 10 fields)
ssh: SSH Protocol (1.0.0 to 2.2.0, 51 fields)
ssl: Secure Sockets Layer (1.0.0 to 2.2.0, 230 fields)
ssp: Scripting Service Protocol (1.0.0 to 2.2.0, 18 fields)
sss: Novell SecretStore Services (1.0.0 to 2.2.0, 46 fields)
sstp: Secure Socket Tunneling Protocol (2.0.0 to 2.2.0, 20 fields)
starteam: StarTeam (1.0.0 to 2.2.0, 17 fields)
stat: Network Status Monitor Protocol (1.0.0 to 2.2.0, 15 fields)
statnotify: Network Status Monitor CallBack Protocol (1.0.0 to 2.2.0, 4 fields)
stp: Spanning Tree Protocol (1.0.0 to 2.2.0, 68 fields)
stt: Stateless Transport Tunneling (2.0.0 to 2.2.0, 56 fields)
stun: Session Traversal Utilities for NAT (1.0.0 to 2.2.0, 86 fields)
stun2: Session Traversal Utilities for NAT (1.0.0 to 1.2.18, 55 fields)
sua: SS7 SCCP-User Adaptation Layer (1.0.0 to 2.2.0, 137 fields)
sv: IEC61850 Sampled Values (1.4.0 to 2.2.0, 36 fields)
svcctl: Microsoft Service Control (1.0.0 to 2.2.0, 41 fields)
swils: Fibre Channel SW_ILS (1.0.0 to 2.2.0, 153 fields)
swipe: swIPe IP Security Protocol (1.12.0 to 2.2.0, 5 fields)
symantec: Symantec Enterprise Firewall (1.0.0 to 2.2.0, 2 fields)
sync: MBMS synchronisation protocol (1.8.0 to 2.2.0, 12 fields)
synergy: Synergy (1.0.0 to 2.2.0, 61 fields)
synphasor: IEEE C37.118 Synchrophasor Protocol (1.2.0 to 2.2.0, 48 fields)
sysdig: Sysdig System Call (2.0.0 to 2.2.0, 151 fields)
sysex: MIDI System Exclusive (1.10.0 to 2.2.0, 30 fields)
syslog: Syslog message (1.0.0 to 2.2.0, 4 fields)

T

t124: GENERIC-CONFERENCE-CONTROL T.124 (1.8.0 to 2.2.0, 291 fields)
t125: MULTIPOINT-COMMUNICATION-SERVICE T.125 (1.0.0 to 2.2.0, 125 fields)
t30: T.30 (1.0.0 to 2.2.0, 109 fields)
t38: T.38 (1.0.0 to 2.2.0, 46 fields)
tacacs: TACACS (1.0.0 to 2.2.0, 15 fields)
tacplus: TACACS+ (1.0.0 to 2.2.0, 69 fields)
tali: Transport Adapter Layer Interface v1.0, RFC 3094 (1.0.0 to 2.2.0, 3 fields)
tapa: Trapeze Access Point Access Protocol (1.0.0 to 2.2.0, 28 fields)
tapi: Microsoft Telephony API Service (1.0.0 to 2.2.0, 6 fields)
tc_nv: TwinCAT NV (1.0.0 to 2.2.0, 12 fields)
tcap: Transaction Capabilities Application Part (1.0.0 to 2.2.0, 151 fields)
tcp: Transmission Control Protocol (1.0.0 to 2.2.0, 234 fields)
tcpcl: DTN TCP Convergence Layer Protocol (1.4.0 to 2.2.0, 23 fields)
tcpencap: TCP Encapsulation of IPsec Packets (1.0.0 to 2.2.0, 8 fields)
tcpros: TCP based Robot Operating System protocol (TCPROS) (2.0.0 to 2.2.0, 20 fields)
tdmoe: Digium TDMoE Protocol (1.6.0 to 2.2.0, 8 fields)
tdmop: TDMoP protocol (2.0.0 to 2.2.0, 15 fields)
tds: Tabular Data Stream (1.0.0 to 2.2.0, 268 fields)
tei_management: TEI Management Procedure, Channel D (LAPD) (1.0.0 to 2.2.0, 5 fields)
teklink: TEKLINK (1.6.0 to 2.2.0, 18 fields)
telkonet: Telkonet powerline (1.0.0 to 2.2.0, 1 field)
telnet: Telnet (1.0.0 to 2.2.0, 58 fields)
teredo: Teredo IPv6 over UDP tunneling (1.0.0 to 2.2.0, 10 fields)
tetra: TETRA Protocol (1.6.0 to 2.2.0, 578 fields)
tfp: Tinkerforge Protocol (1.12.0 to 2.2.0, 11 fields)
tftp: Trivial File Transfer Protocol (1.0.0 to 2.2.0, 11 fields)
thrift: Thrift Protocol (2.0.0 to 2.2.0, 17 fields)
time: Time Protocol (1.0.0 to 2.2.0, 2 fields)
tipc: Transparent Inter Process Communication(TIPC) (1.0.0 to 2.2.0, 128 fields)
tivoconnect: TiVoConnect Discovery Protocol (1.0.0 to 2.2.0, 7 fields)
tkn4int: DCE DFS Token Server (1.0.0 to 2.2.0, 1 field)
tn3270: TN3270 Protocol (1.4.0 to 2.2.0, 362 fields)
tn5250: TN5250 Protocol (1.4.0 to 2.2.0, 551 fields)
tnef: Transport-Neutral Encapsulation Format (1.0.0 to 2.2.0, 61 fields)
tns: Transparent Network Substrate Protocol (1.0.0 to 2.2.0, 91 fields)
tpcp: Alteon - Transparent Proxy Cache Protocol (1.0.0 to 2.2.0, 14 fields)
tpkt: TPKT - ISO on TCP - RFC1006 (1.0.0 to 2.2.0, 4 fields)
tpncp: AudioCodes TPNCP (TrunkPack Network Control Protocol) (1.0.0 to 2.2.0, 11416 fields)
tr: Token-Ring (1.0.0 to 2.2.0, 22 fields)
trill: TRILL (1.4.0 to 2.2.0, 8 fields)
trksvr: Microsoft Distributed Link Tracking Server Service (1.0.0 to 2.2.0, 2 fields)
trmac: Token-Ring Media Access Control (1.0.0 to 2.2.0, 46 fields)
ts2: Teamspeak2 Protocol (1.2.0 to 2.2.0, 62 fields)
tsp: Time Synchronization Protocol (1.0.0 to 2.2.0, 7 fields)
ttag: Cisco ttag (2.2.0, 2 fields)
tte: TTEthernet (1.2.0 to 2.2.0, 6 fields)
tte_pcf: TTEthernet Protocol Control Frame (1.2.0 to 2.2.0, 15 fields)
ttp: Tiny Transport Protocol (1.0.0 to 2.2.0, 4 fields)
turbocell: Turbocell Header (1.2.0 to 2.2.0, 10 fields)
turbocell_aggregate: Turbocell Aggregate Data (1.2.0 to 2.2.0, 5 fields)
turnchannel: TURN Channel (1.2.0 to 2.2.0, 2 fields)
tuxedo: BEA Tuxedo (1.0.0 to 2.2.0, 2 fields)
tzsp: Tazmen Sniffer Protocol (1.0.0 to 2.2.0, 19 fields)

U

u3v: USB 3 Vision (2.2.0, 118 fields)
ua3g: UA3G Message (1.8.0 to 2.2.0, 330 fields)
uasip: UA/SIP Protocol (1.8.0 to 2.2.0, 12 fields)
uaudp: UA/UDP Encapsulation Protocol (1.8.0 to 2.2.0, 12 fields)
ubertooth: Ubertooth (1.12.0 to 2.2.0, 288 fields)
ubikdisk: DCE DFS FLDB UBIK TRANSFER (1.0.0 to 2.2.0, 1 field)
ubikvote: DCE DFS FLDB UBIKVOTE (1.0.0 to 2.2.0, 1 field)
ucp: Universal Computer Protocol (1.0.0 to 2.2.0, 112 fields)
udld: Unidirectional Link Detection (1.0.0 to 2.2.0, 12 fields)
udp: User Datagram Protocol (1.0.0 to 2.2.0, 27 fields)
udpencap: UDP Encapsulation of IPsec Packets (1.0.0 to 2.2.0, 2 fields)
udplite: Lightweight User Datagram Protocol (1.0.0 to 2.2.0, 2 fields)
udt: UDT Protocol (1.12.0 to 2.2.0, 26 fields)
uftp: UDP based FTP w/ multicast (2.2.0, 167 fields)
uftp4: UDP based FTP w/ multicast V4 (2.2.0, 228 fields)
uhd: UHD (1.10.0 to 2.2.0, 17 fields)
ulp: OMA UserPlane Location Protocol (1.0.0 to 2.2.0, 747 fields)
uma: Unlicensed Mobile Access (1.0.0 to 2.2.0, 118 fields)
unistim: UNISTIM Protocol (1.0.0 to 2.2.0, 328 fields)
urlencoded-form: HTML Form URL Encoded (1.12.0 to 2.2.0, 2 fields)
usb: USB (1.0.0 to 2.2.0, 170 fields)
usbaudio: USB Audio (1.10.0 to 2.2.0, 98 fields)
usbccid: USB CCID (1.8.0 to 2.2.0, 57 fields)
usbcom: USB Communications and CDC Control (1.12.0 to 2.2.0, 96 fields)
usbdfu: USB Device Firmware Upgrade (1.12.0 to 2.2.0, 27 fields)
usbhid: USB HID (1.4.0 to 2.2.0, 93 fields)
usbhub: USB HUB (1.4.0 to 2.2.0, 31 fields)
usbip: USBIP Protocol (2.2.0, 41 fields)
usbms: USB Mass Storage (1.0.0 to 2.2.0, 15 fields)
usbvideo: USB Video (1.10.0 to 2.2.0, 174 fields)
user_dlt: DLT User (1.0.0 to 2.2.0, 1 field)
userlog: UserLog Protocol (2.2.0, 26 fields)
uts: Unisys Transmittal System (1.0.0 to 2.2.0, 11 fields)

V

v120: Async data over ISDN (V.120) (1.0.0 to 2.2.0, 24 fields)
v150fw: v150fw State Signaling Event (1.10.0 to 2.2.0, 31 fields)
v52: V5.2 (1.4.0 to 2.2.0, 67 fields)
v5dl: V5 Data Link Layer (1.8.0 to 2.2.0, 20 fields)
v5ef: V5 Envelope Function (v5ef) (1.8.0 to 2.2.0, 6 fields)
v5ua: V5.2-User Adaptation Layer (1.0.0 to 2.2.0, 82 fields)
vcdu: VCDU (1.2.0 to 2.2.0, 51 fields)
vdp21: VSI protocol (2.2.0, 26 fields)
vicp: LeCroy VICP (1.2.0 to 2.2.0, 6 fields)
vines_echo: Banyan Vines Echo (1.0.0 to 2.2.0, 1 field)
vines_icp: Banyan Vines ICP (1.0.0 to 2.2.0, 3 fields)
vines_ip: Banyan Vines IP (1.0.0 to 2.2.0, 13 fields)
vines_ipc: Banyan Vines IPC (1.0.0 to 2.2.0, 14 fields)
vines_rtp: Banyan Vines RTP (1.0.0 to 2.2.0, 50 fields)
vines_spp: Banyan Vines SPP (1.0.0 to 2.2.0, 13 fields)
vj: PPP VJ Compression (1.0.0 to 1.10.14, 15 fields)
vlan: 802.1Q Virtual LAN (1.0.0 to 1.4.15, 1.6.3 to 2.2.0, 8 fields)
vmlab: VMware Lab Manager (1.4.0 to 2.2.0, 9 fields)
vnc: Virtual Network Computing (1.0.0 to 2.2.0, 242 fields)
vntag: VN-Tag (1.10.0 to 2.2.0, 10 fields)
vp8: VP8 (1.12.0 to 2.2.0, 29 fields)
vrrp: Virtual Router Redundancy Protocol (1.0.0 to 2.2.0, 18 fields)
vrt: VITA 49 radio transport protocol (1.10.0 to 2.2.0, 47 fields)
vsip: Video Services over IP (2.0.0 to 2.2.0, 118 fields)
vsncp: Vendor Specific Control Protocol (1.4.0 to 2.2.0, 17 fields)
vsnp: Vendor Specific Network Protocol (1.4.0 to 2.2.0, 3 fields)
vssmonitoring: VSS-Monitoring ethernet trailer (1.8.0 to 2.2.0, 3 fields)
vtp: VLAN Trunking Protocol (1.0.0 to 2.2.0, 37 fields)
vuze-dht: Vuze DHT Protocol (1.8.0 to 2.2.0, 68 fields)
vxi11_async: VXI-11 Asynchronous Abort (1.10.0 to 2.2.0, 1 field)
vxi11_core: VXI-11 Core Protocol (1.10.0 to 2.2.0, 31 fields)
vxi11_intr: VXI-11 Interrupt (1.10.0 to 2.2.0, 2 fields)
vxi11async: VXI-11 Asynchronous Abort (1.4.0 to 1.8.15, 1 field)
vxi11core: VXI-11 Core Protocol (1.4.0 to 1.8.15, 31 fields)
vxi11intr: VXI-11 Interrupt (1.4.0 to 1.8.15, 2 fields)
vxlan: Virtual eXtensible Local Area Network (1.8.0 to 2.2.0, 23 fields)

W

wai: WAI Protocol (1.6.0 to 2.2.0, 73 fields)
wap-sir: WAP Session Initiation Request (1.0.0 to 2.2.0, 14 fields)
wassp: Wireless Access Station Session Protocol (1.2.0 to 2.2.0, 266 fields)
watcherinfo: watcherinfo XML doc (RFC 3858) (1.0.0 to 2.2.0, 20 fields)
waveagent: WaveAgent (1.8.0 to 2.2.0, 122 fields)
wbxml: WAP Binary XML (1.0.0 to 2.2.0, 35 fields)
wccp: Web Cache Communication Protocol (1.0.0 to 2.2.0, 256 fields)
wcp: Wellfleet Compression (1.0.0 to 2.2.0, 30 fields)
websocket: WebSocket (1.8.0 to 2.2.0, 31 fields)
whdlc: Wellfleet HDLC (1.0.0 to 2.2.0, 2 fields)
who: Who (1.0.0 to 2.2.0, 15 fields)
whois: whois (1.12.0 to 2.2.0, 6 fields)
wifi_display: Wi-Fi Display (1.12.0 to 2.2.0, 49 fields)
wifi_p2p: Wi-Fi Peer-to-Peer (1.6.0 to 2.2.0, 144 fields)
wimaxasncp: WiMAX ASN Control Plane Protocol (1.0.0 to 2.2.0, 777 fields)
wimaxmacphy: WiMAX MAC-PHY over Ethernet (1.10.0 to 2.2.0, 216 fields)
winreg: Remote Registry Service (1.0.0 to 2.2.0, 161 fields)
winsrepl: WINS (Windows Internet Name Service) Replication (1.0.0 to 2.2.0, 29 fields)
witness: SMB Witness Service (2.2.0, 56 fields)
wkssvc: Workstation Service (1.0.0 to 2.2.0, 376 fields)
wlan: IEEE 802.11 wireless LAN (1.0.0 to 2.2.0, 491 fields)
wlan_aggregate: IEEE 802.11 wireless LAN aggregate frame (1.0.0 to 2.2.0, 3 fields)
wlan_mgt: IEEE 802.11 wireless LAN management frame (1.0.0 to 2.2.0, 1240 fields)
wlan_radio: 802.11 radio information (2.0.0 to 2.2.0, 47 fields)
wlan_rsna_eapol: IEEE 802.11 RSNA EAPOL key (1.12.0 to 2.2.0, 18 fields)
wlancap: AVS WLAN Capture header (1.0.0 to 2.2.0, 40 fields)
wlancertextn: Wlan Certificate Extension (1.0.0 to 2.2.0, 3 fields)
wlccp: Cisco Wireless LAN Context Control Protocol (1.0.0 to 2.2.0, 159 fields)
wmx: WiMax Protocol (1.0.0 to 2.2.0, 171 fields)
wmx.aas: WiMax AAS-FEEDBACK Messages (1.0.0 to 2.2.0, 29 fields)
wmx.aas_beam: WiMax AAS-BEAM Messages (1.12.0 to 2.2.0, 11 fields)
wmx.arq: WiMax ARQ Feedback/Discard/Reset Messages (1.0.0 to 2.2.0, 21 fields)
wmx.cd: WiMax DCD/UCD Messages (1.0.0 to 1.10.14, 129 fields)
wmx.cdma: WiMax CDMA Code Attribute (1.12.0 to 2.2.0, 3 fields)
wmx.clk: WiMax CLK-CMP Message (1.0.0 to 2.2.0, 7 fields)
wmx.dcd: WiMax DCD Messages (1.12.0 to 2.2.0, 65 fields)
wmx.dlmap: WiMax DLMAP Messages (1.12.0 to 2.2.0, 333 fields)
wmx.dreg: WiMax DREG-REQ/CMD Messages (1.0.0 to 1.10.14, 24 fields)
wmx.dreg_req: WiMax DREG-REQ Messages (1.12.0 to 2.2.0, 21 fields)
wmx.ds: WiMax DSA/C/D Messages (1.0.0 to 1.10.14, 17 fields)
wmx.dsa: WiMax DSA Messages (1.12.0 to 2.2.0, 2 fields)
wmx.dsc: WiMax DSC Messages (1.12.0 to 2.2.0, 2 fields)
wmx.dsd: WiMax DSD Messages (1.12.0 to 2.2.0, 5 fields)
wmx.dsx: WiMax DSX-RVD Message (1.0.0 to 1.10.14, 3 fields)
wmx.dsx_rvd: WiMax DSX-RVD Message (1.12.0 to 2.2.0, 2 fields)
wmx.fpc: WiMax FPC Message (1.0.0 to 2.2.0, 6 fields)
wmx.hdr: WiMax Generic/Type1/Type2 MAC Header Messages (1.0.0 to 2.2.0, 176 fields)
wmx.map: WiMax DLMAP/ULMAP Messages (1.0.0 to 1.10.14, 97 fields)
wmx.mgmt: WiMax MAC Management Message (1.12.0 to 2.2.0, 3 fields)
wmx.pkm: WiMax PKM-REQ/RSP Messages (1.0.0 to 2.2.0, 4 fields)
wmx.pmc: WiMax PMC-REQ/RSP Messages (1.0.0 to 1.10.14, 9 fields)
wmx.pmc_req: WiMax PMC-REQ Messages (1.12.0 to 2.2.0, 7 fields)
wmx.prc: WiMax PRC-LT-CTRL Message (1.0.0 to 2.2.0, 4 fields)
wmx.reg: WiMax REG-REQ/RSP Messages (1.0.0 to 1.10.14, 162 fields)
wmx.reg_req: WiMax REG-REQ Messages (1.12.0 to 2.2.0, 96 fields)
wmx.reg_rsp: WiMax REG-RSP Messages (1.12.0 to 2.2.0, 8 fields)
wmx.rep: WiMax REP-REQ/RSP Messages (1.0.0 to 2.2.0, 100 fields)
wmx.res: WiMax RES-CMD Message (1.0.0 to 2.2.0, 3 fields)
wmx.rng: WiMax RNG-REQ/RSP Messages (1.0.0 to 1.10.14, 88 fields)
wmx.rng_req: WiMax RNG-REQ Messages (1.12.0 to 2.2.0, 37 fields)
wmx.rng_rsp: WiMax RNG-RSP Messages (1.12.0 to 2.2.0, 52 fields)
wmx.sbc: WiMax SBC-REQ/RSP Messages (1.0.0 to 2.2.0, 227 fields)
wmx.sub: WiMax Sub-TLV Messages (1.0.0 to 2.2.0, 212 fields)
wmx.ucd: WiMax UCD Messages (1.12.0 to 2.2.0, 70 fields)
wmx.ulmap: WiMax ULMAP Messages (1.12.0 to 2.2.0, 324 fields)
wol: Wake On LAN (1.0.0 to 2.2.0, 3 fields)
wow: World of Warcraft (1.2.0 to 2.2.0, 35 fields)
wpan: IEEE 802.15.4 Low-Rate Wireless PAN (1.0.0 to 2.2.0, 138 fields)
wps: Wifi Protected Setup (1.0.0 to 2.2.0, 170 fields)
wreth: WSE remote ethernet (1.8.0 to 2.2.0, 105 fields)
wsmp: Wave Short Message Protocol(IEEE P1609.3) (1.2.0 to 2.2.0, 12 fields)
wsp: Wireless Session Protocol (1.0.0 to 2.2.0, 200 fields)
wtls: Wireless Transport Layer Security (1.0.0 to 2.2.0, 69 fields)
wtp: Wireless Transaction Protocol (1.0.0 to 2.2.0, 36 fields)
wzcsvc: Wireless Configuration Service (1.0.0 to 2.2.0, 1 field)

X

x.25: X.25 (1.0.0 to 1.0.16, 17 fields)
x.29: X.29 (1.0.0 to 1.0.16, 3 fields)
x11: X11 (1.0.0 to 2.2.0, 9376 fields)
x224: ITU-T Rec X.224 (1.0.0 to 2.0.5, 8 fields)
x25: X.25 (1.2.0 to 2.2.0, 99 fields)
x29: X.29 (1.2.0 to 2.2.0, 12 fields)
x2ap: EUTRAN X2 Application Protocol (X2AP) (1.0.0 to 2.2.0, 496 fields)
x411: X.411 Message Transfer Service (1.0.0 to 1.4.15, 531 fields)
x420: X.420 Information Object (1.0.0 to 1.4.15, 357 fields)
x509af: X.509 Authentication Framework (1.0.0 to 2.2.0, 96 fields)
x509ce: X.509 Certificate Extensions (1.0.0 to 2.2.0, 245 fields)
x509if: X.509 Information Framework (1.0.0 to 2.2.0, 166 fields)
x509sat: X.509 Selected Attribute Types (1.0.0 to 2.2.0, 184 fields)
xcap-caps: XML Configuration Access Protocol Server Capabilities (1.0.0 to 2.2.0, 3 fields)
xcap-error: XCAP Error XML doc (RFC 4825) (1.0.0 to 2.2.0, 30 fields)
xcsl: Call Specification Language (Xcsl) (1.0.0 to 2.2.0, 6 fields)
xdmcp: X Display Manager Control Protocol (1.0.0 to 2.2.0, 30 fields)
xip: eXpressive Internet Protocol (2.0.0 to 2.2.0, 15 fields)
xipserval: XIP Serval (2.0.0 to 2.2.0, 20 fields)
xmcp: eXtensible Messaging Client Protocol (1.8.0 to 2.2.0, 71 fields)
xml: eXtensible Markup Language (1.0.0 to 2.2.0, 16 fields)
xmpp: XMPP Protocol (1.8.0 to 2.2.0, 162 fields)
xot: X.25 over TCP (1.0.0 to 2.2.0, 17 fields)
xtp: Xpress Transport Protocol (1.2.0 to 2.2.0, 62 fields)
xyplex: Xyplex (1.0.0 to 2.2.0, 7 fields)

Y

yami: YAMI Protocol (1.8.0 to 2.2.0, 17 fields)
yhoo: Yahoo Messenger Protocol (1.0.0 to 2.2.0, 10 fields)
ymsg: Yahoo YMSG Messenger Protocol (1.0.0 to 2.2.0, 10 fields)
ypbind: Yellow Pages Bind (1.0.0 to 2.2.0, 8 fields)
yppasswd: Yellow Pages Passwd (1.0.0 to 2.2.0, 11 fields)
ypserv: Yellow Pages Service (1.0.0 to 2.2.0, 16 fields)
ypxfr: Yellow Pages Transfer (1.0.0 to 2.2.0, 1 field)

Z

zbee.apf: ZigBee Application Framework (1.2.0 to 1.8.15, 2 fields)
zbee.aps: ZigBee Application Support Layer (1.2.0 to 1.8.15, 43 fields)
zbee.nwk: ZigBee Network Layer (1.2.0 to 1.8.15, 75 fields)
zbee.zcl: ZigBee Cluster Library (1.4.0 to 1.8.15, 44 fields)
zbee.zdp: ZigBee Device Profile (1.2.0 to 1.8.15, 78 fields)
zbee_apf: ZigBee Application Framework (1.10.0 to 2.2.0, 2 fields)
zbee_aps: ZigBee Application Support Layer (1.10.0 to 2.2.0, 62 fields)
zbee_nwk: ZigBee Network Layer (1.10.0 to 2.2.0, 113 fields)
zbee_nwk_gp: ZigBee Green Power Profile (1.12.0 to 2.2.0, 62 fields)
zbee_zcl: ZigBee Cluster Library (1.10.0 to 2.2.0, 101 fields)
zbee_zcl_closures.door_lock: ZigBee ZCL Door Lock (2.2.0, 8 fields)
zbee_zcl_closures.shade_config: ZigBee ZCL Shade Configuration (2.2.0, 7 fields)
zbee_zcl_general.alarms: ZigBee ZCL Alarms (2.2.0, 7 fields)
zbee_zcl_general.analog.input.basic: ZigBee ZCL Analog Input Basic (2.2.0, 7 fields)
zbee_zcl_general.analog.output.basic: ZigBee ZCL Analog Output Basic (2.2.0, 11 fields)
zbee_zcl_general.analog.value.basic: ZigBee ZCL Analog Value Basic (2.2.0, 11 fields)
zbee_zcl_general.applctrl: ZigBee ZCL Appliance Control (1.12.0 to 2.2.0, 16 fields)
zbee_zcl_general.basic: ZigBee ZCL Basic (1.12.0 to 2.2.0, 12 fields)
zbee_zcl_general.binary_input_basic: ZigBee ZCL Binary Input Basic (2.2.0, 8 fields)
zbee_zcl_general.binary_output_basic: ZigBee ZCL Binary Output Basic (2.2.0, 12 fields)
zbee_zcl_general.binary_value_basic: ZigBee ZCL Binary Value Basic (2.2.0, 11 fields)
zbee_zcl_general.commissioning: ZigBee ZCL Commissioning (2.2.0, 19 fields)
zbee_zcl_general.device_temperature_config: ZigBee ZCL Device Temperature Configuration (2.2.0, 5 fields)
zbee_zcl_general.gp: ZigBee ZCL Green Power (2.2.0, 98 fields)
zbee_zcl_general.groups: ZigBee ZCL Groups (2.2.0, 11 fields)
zbee_zcl_general.identify: ZigBee ZCL Identify (1.12.0 to 2.2.0, 5 fields)
zbee_zcl_general.level_control: ZigBee ZCL Level Control (2.2.0, 8 fields)
zbee_zcl_general.multistate.input.basic: ZigBee ZCL Multistate Input Basic (2.2.0, 7 fields)
zbee_zcl_general.multistate.output.basic: ZigBee ZCL Multistate Output Basic (2.2.0, 11 fields)
zbee_zcl_general.multistate.value.basic: ZigBee ZCL Multistate Value Basic (2.2.0, 11 fields)
zbee_zcl_general.onoff: ZigBee ZCL OnOff (1.12.0 to 2.2.0, 3 fields)
zbee_zcl_general.onoff.switch.configuration: ZigBee ZCL OnOff Switch Configuration (2.2.0, 3 fields)
zbee_zcl_general.ota: ZigBee ZCL OTA (1.12.0 to 2.2.0, 30 fields)
zbee_zcl_general.part: ZigBee ZCL Partition (1.12.0 to 2.2.0, 16 fields)
zbee_zcl_general.poll: ZigBee ZCL Poll Control (2.0.0 to 2.2.0, 7 fields)
zbee_zcl_general.power_config: ZigBee ZCL Power Configuration (2.0.0 to 2.2.0, 18 fields)
zbee_zcl_general.pwrprof: ZigBee ZCL Power Profile (1.12.0 to 2.2.0, 36 fields)
zbee_zcl_general.rssi_location: ZigBee ZCL RSSI Location (2.2.0, 36 fields)
zbee_zcl_general.scenes: ZigBee ZCL Scenes (2.2.0, 15 fields)
zbee_zcl_general.time: ZigBee ZCL Time (2.2.0, 6 fields)
zbee_zcl_ha.applevtalt: ZigBee ZCL Appliance Events & Alert (1.12.0 to 2.2.0, 11 fields)
zbee_zcl_ha.applident: ZigBee ZCL Appliance Identification (1.12.0 to 2.2.0, 7 fields)
zbee_zcl_ha.applstats: ZigBee ZCL Appliance Statistics (1.12.0 to 2.2.0, 8 fields)
zbee_zcl_ha.metidt: ZigBee ZCL Meter Identification (1.12.0 to 2.2.0, 3 fields)
zbee_zcl_hvac.dehum_ctrl: ZigBee ZCL Dehumidification Control (2.2.0, 4 fields)
zbee_zcl_hvac.fan_ctrl: ZigBee ZCL Fan Control (2.2.0, 3 fields)
zbee_zcl_hvac.pump_config_ctrl: ZigBee ZCL Pump Configuration and Control (2.2.0, 29 fields)
zbee_zcl_hvac.thermo_ui_config: ZigBee ZCL Thermostat User Interface Configuration (2.2.0, 3 fields)
zbee_zcl_hvac.thermostat: ZigBee ZCL Thermostat (2.0.0 to 2.2.0, 21 fields)
zbee_zcl_ias.ace: ZigBee ZCL IAS ACE (2.2.0, 10 fields)
zbee_zcl_ias.wd: ZigBee ZCL IAS WD (2.2.0, 7 fields)
zbee_zcl_ias.zone: ZigBee ZCL IAS Zone (2.0.0 to 2.2.0, 18 fields)
zbee_zcl_lighting.ballast_ctrl: ZigBee ZCL Ballast Configuration (2.2.0, 6 fields)
zbee_zcl_lighting.color_ctrl: ZigBee ZCL Color Control (2.2.0, 20 fields)
zbee_zcl_meas_sensing.flowmeas: ZigBee ZCL Flow Meas. (2.2.0, 5 fields)
zbee_zcl_meas_sensing.illumlevelsen: ZigBee ZCL Illuminance Level Sensing (2.2.0, 4 fields)
zbee_zcl_meas_sensing.illummeas: ZigBee ZCL Illuminance Meas. (1.12.0 to 2.2.0, 6 fields)
zbee_zcl_meas_sensing.occsen: ZigBee ZCL Occupancy Sensing (2.2.0, 3 fields)
zbee_zcl_meas_sensing.pressmeas: ZigBee ZCL Pressure Meas. (1.12.0 to 2.2.0, 10 fields)
zbee_zcl_meas_sensing.relhummeas: ZigBee ZCL Rel. Humidity Meas. (1.12.0 to 2.2.0, 5 fields)
zbee_zcl_meas_sensing.tempmeas: ZigBee ZCL Temperature Meas. (1.12.0 to 2.2.0, 5 fields)
zbee_zcl_se.ke: ZigBee ZCL Key Establishment (2.0.0 to 2.2.0, 24 fields)
zbee_zcl_se.msg: ZigBee ZCL Messaging (1.12.0 to 2.2.0, 22 fields)
zbee_zcl_se.tun: ZigBee ZCL Tunneling (2.0.0 to 2.2.0, 17 fields)
zbee_zdp: ZigBee Device Profile (1.10.0 to 2.2.0, 119 fields)
zebra: Zebra Protocol (1.0.0 to 2.2.0, 37 fields)
zep: ZigBee Encapsulation Protocol (1.2.0 to 2.2.0, 11 fields)
ziop: Zipped Inter-ORB Protocol (1.2.0 to 2.2.0, 9 fields)
zip: Zone Information Protocol (1.0.0 to 2.2.0, 18 fields)
zrtp: ZRTP (1.2.0 to 2.2.0, 45 fields)
zvt: ZVT Kassenschnittstelle (2.0.0 to 2.2.0, 21 fields)
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE $29.95/yr
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Buy $29.95 Annual Subscription Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More

I need to capture wireless traffic...

ANSWER: AirPcap™ 802.11 Packet Capture
  • • WLAN packet capture and transmission
  • • Full 802.11 a/b/g/n support
  • • View management, control and data frames
  • • Multi-channel aggregation (with multiple adapters)
Learn More Buy Now