Display Filter Reference: Plan 9

Protocol field name: 9p

Versions: 1.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
9p.afid Afid Unsigned integer, 4 bytes 1.8.0 to 2.6.5
9p.aname Aname Character string 1.0.0 to 2.6.5
9p.atime Atime Date and time 1.0.0 to 2.6.5
9p.bavail bavail Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.bfree bfree Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.blksize Blksize Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.blocks Blocks Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.btime Btime Date and time 1.12.0 to 2.6.5
9p.count Count Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.ctime Ctime Date and time 1.12.0 to 2.6.5
9p.dataversion Dataversion Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.dev Dev Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.dfid Directory fid Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.dm.append Append only Boolean 1.10.0 to 2.6.5
9p.dm.auth_file Authentication file Boolean 1.10.0 to 2.6.5
9p.dm.dir Directory Boolean 1.10.0 to 2.6.5
9p.dm.exclusive Exclusive use Boolean 1.10.0 to 2.6.5
9p.dm.exec_group Execute permission for group Boolean 1.10.0 to 2.6.5
9p.dm.exec_others Execute permission for others Boolean 1.10.0 to 2.6.5
9p.dm.exec_owner Execute permission for owner Boolean 1.10.0 to 2.6.5
9p.dm.mount Mounted channel Boolean 1.10.0 to 2.6.5
9p.dm.read_group Read permission for group Boolean 1.10.0 to 2.6.5
9p.dm.read_others Read permission for others Boolean 1.10.0 to 2.6.5
9p.dm.read_owner Read permission for owner Boolean 1.10.0 to 2.6.5
9p.dm.temp_file Temporary file (not backed up) Boolean 1.10.0 to 2.6.5
9p.dm.write_group Write permission for group Boolean 1.10.0 to 2.6.5
9p.dm.write_others Write permission for others Boolean 1.10.0 to 2.6.5
9p.dm.write_owner Write permission for owner Boolean 1.10.0 to 2.6.5
9p.ename Ename Character string 1.0.0 to 2.6.5
9p.enum Enum Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.extension Extension string Character string 2.0.0 to 2.6.5
9p.ffree ffree Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.fid Fid Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.filename File name Character string 1.0.0 to 2.6.5
9p.files files Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.first_250 Only first 250 items shown Label 2.0.0 to 2.6.5
9p.fsid fsid Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.fstype fstype Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.gen Gen Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.getattr.atime Atime Boolean 1.12.0 to 2.6.5
9p.getattr.blocks Blocks Boolean 1.12.0 to 2.6.5
9p.getattr.btime Btime Boolean 1.12.0 to 2.6.5
9p.getattr.ctime Ctime Boolean 1.12.0 to 2.6.5
9p.getattr.dataversion Data version Boolean 1.12.0 to 2.6.5
9p.getattr.flags getattr_flags Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.getattr.gen Gen Boolean 1.12.0 to 2.6.5
9p.getattr.gid GID Boolean 1.12.0 to 2.6.5
9p.getattr.inode Inode Boolean 1.12.0 to 2.6.5
9p.getattr.mode Mode Boolean 1.12.0 to 2.6.5
9p.getattr.mtime Mtime Boolean 1.12.0 to 2.6.5
9p.getattr.nlink Nlink Boolean 1.12.0 to 2.6.5
9p.getattr.rdev Rdev Boolean 1.12.0 to 2.6.5
9p.getattr.size Size Boolean 1.12.0 to 2.6.5
9p.getattr.uid UID Boolean 1.12.0 to 2.6.5
9p.gid Gid Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.group Group Character string 1.12.0 to 2.6.5
9p.iounit I/O Unit Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.lcreate.flags lflags Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.length Length Unsigned integer, 8 bytes 1.0.0 to 2.6.5
9p.lflags.append Append Boolean 1.12.0 to 2.6.5
9p.lflags.cloexec cloexec Boolean 1.12.0 to 2.6.5
9p.lflags.create Create Boolean 1.12.0 to 2.6.5
9p.lflags.direct Direct Boolean 1.12.0 to 2.6.5
9p.lflags.directory Directory Boolean 1.12.0 to 2.6.5
9p.lflags.dsync dsync Boolean 1.12.0 to 2.6.5
9p.lflags.excl Exclusive Boolean 1.12.0 to 2.6.5
9p.lflags.fasync fasync Boolean 1.12.0 to 2.6.5
9p.lflags.largefile Large File Boolean 1.12.0 to 2.6.5
9p.lflags.noatime No atime Boolean 1.12.0 to 2.6.5
9p.lflags.noctty noctty Boolean 1.12.0 to 2.6.5
9p.lflags.nofollow No follow Boolean 1.12.0 to 2.6.5
9p.lflags.nonblock Nonblock Boolean 1.12.0 to 2.6.5
9p.lflags.rdonly Read only Boolean 1.12.0 to 2.6.5
9p.lflags.rdwr Read Write Boolean 1.12.0 to 2.6.5
9p.lflags.sync Sync Boolean 1.12.0 to 2.6.5
9p.lflags.trunc Truncate Boolean 1.12.0 to 2.6.5
9p.lflags.wronly Write only Boolean 1.12.0 to 2.6.5
9p.lock.flag lock_flag Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.lock.length lock_length Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.lock.procid lock_procid Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.lock.start lock_start Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.lock.status lock_status Unsigned integer, 1 byte 1.12.0 to 2.6.5
9p.lock.type lock_type Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.maxsize Max msg size Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.message_data Message data Sequence of bytes 2.0.0 to 2.6.5
9p.mknod.major mknod_major Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.mknod.minor mknod_minor Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.mode Mode Unsigned integer, 1 byte 1.0.0 to 2.6.5
9p.mode.orclose Remove on close Boolean 1.0.0 to 2.6.5
9p.mode.rwx Open/Create Mode Unsigned integer, 1 byte 1.0.0 to 2.6.5
9p.mode.trunc Trunc Boolean 1.0.0 to 2.6.5
9p.msglen Msg length Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.msgtype Msg Type Unsigned integer, 1 byte 1.0.0 to 2.6.5
9p.msgtype.unknown This message type should not happen Label 2.0.0 to 2.6.5
9p.mtime Mtime Date and time 1.0.0 to 2.6.5
9p.muid Muid Character string 1.0.0 to 2.6.5
9p.name Name Character string 1.0.0 to 1.12.13
9p.namelen namelen Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.newfid New fid Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.nlink nlink Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.nqid Nr Qids Unsigned integer, 2 bytes 1.0.0 to 2.6.5
9p.nwalk Nr Walks Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.offset Offset Unsigned integer, 8 bytes 1.0.0 to 2.6.5
9p.oldtag Old tag Unsigned integer, 2 bytes 1.0.0 to 2.6.5
9p.paramsz Param length Unsigned integer, 2 bytes 1.0.0 to 2.6.5
9p.perm Permissions Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.qidpath Qid path Unsigned integer, 8 bytes 1.0.0 to 2.6.5
9p.qidtype Qid type Unsigned integer, 1 byte 1.0.0 to 2.6.5
9p.qidtype.append Append only Boolean 1.10.0 to 2.6.5
9p.qidtype.auth_file Authentication file Boolean 1.10.0 to 2.6.5
9p.qidtype.dir Directory Boolean 1.10.0 to 2.6.5
9p.qidtype.exclusive Exclusive use Boolean 1.10.0 to 2.6.5
9p.qidtype.mount Mounted channel Boolean 1.10.0 to 2.6.5
9p.qidtype.temp_file Temporary file (not backed up) Boolean 1.10.0 to 2.6.5
9p.qidvers Qid version Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.rdev rdev Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.sdlen Stat data length Unsigned integer, 2 bytes 1.0.0 to 2.6.5
9p.setattr.atime Atime Boolean 1.12.0 to 2.6.5
9p.setattr.atimeset Atime set Boolean 1.12.0 to 2.6.5
9p.setattr.ctime Ctime Boolean 1.12.0 to 2.6.5
9p.setattr.flags setattr_flags Unsigned integer, 4 bytes 1.12.0 to 2.6.5
9p.setattr.gid GID Boolean 1.12.0 to 2.6.5
9p.setattr.mode Mode Boolean 1.12.0 to 2.6.5
9p.setattr.mtime Mtime Boolean 1.12.0 to 2.6.5
9p.setattr.mtimeset Mtime set Boolean 1.12.0 to 2.6.5
9p.setattr.size Size Boolean 1.12.0 to 2.6.5
9p.setattr.uid UID Boolean 1.12.0 to 2.6.5
9p.size Size Unsigned integer, 8 bytes 1.12.0 to 2.6.5
9p.statmode Mode Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.stattype Type Unsigned integer, 2 bytes 1.0.0 to 2.6.5
9p.tag Tag Unsigned integer, 2 bytes 1.0.0 to 2.6.5
9p.uid Uid Unsigned integer, 4 bytes 1.0.0 to 2.6.5
9p.uname Uname Character string 1.0.0 to 2.6.5
9p.unlinkat.flags unlinkat flags Unsigned integer, 4 bytes 2.0.0 to 2.6.5
9p.user User Character string 1.12.0 to 2.6.5
9p.version Version Character string 1.0.0 to 2.6.5
9p.wname Wname Character string 1.0.0 to 2.6.5
9p.xattr.flag xattr_flag Unsigned integer, 4 bytes 1.12.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More