Display Filter Reference: B.A.T.M.A.N. Advanced Protocol

Protocol field name: batadv

Versions: 1.4.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
batadv.batman.addr Address Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.batman.flags Flags Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.batman.flags.directlink DirectLink Boolean 1.4.0 to 2.6.1
batadv.batman.flags.not_best_next_hop NOT_BEST_NEXT_HOP Boolean 1.10.0 to 2.6.1
batadv.batman.flags.primaries_first_hop PRIMARIES_FIRST_HOP Boolean 1.4.0 to 2.6.1
batadv.batman.flags.vis_server VIS_SERVER Boolean 1.4.0 to 2.6.1
batadv.batman.gwflags Gateway Flags Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.batman.gwflags.dl_speed Download Speed Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.batman.gwflags.ul_speed Upload Speed Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.batman.hna Host Network Announcement Ethernet or other MAC address 1.4.0 to 1.6.16
batadv.batman.num_hna Number of HNAs Unsigned integer, 1 byte 1.4.0 to 1.6.16
batadv.batman.num_tt Number of TTs Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.batman.orig Originator Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.batman.packet_type Packet Type Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.batman.pad Padding Unsigned integer, 1 byte 1.4.0 to 1.6.16
batadv.batman.prev_sender Received from Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.batman.seq Sequence number Unsigned integer, 2 bytes 1.4.0 to 2.6.1
batadv.batman.tq Transmission Quality Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.batman.tt Translation Table Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.batman.tt_crc CRC of TT Unsigned integer, 2 bytes 1.8.0 to 2.6.1
batadv.batman.tt_num_changes Number of TT Changes Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.batman.ttl Time to Live Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.batman.ttvn TT Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.batman.version Version Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.bcast.orig Originator Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.bcast.pad Padding Unsigned integer, 1 byte 1.4.0 to 1.6.16
batadv.bcast.seq Sequence number Unsigned integer, 2 bytes 1.4.0 to 2.6.1
batadv.bcast.ttl Time to Live Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.bcast.version Version Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.coded.first_crc CRC (First) Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.coded.first_orig_dst Original Destination (First) Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.coded.first_src Source (First) Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.coded.first_ttvn TT Version (First) Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.coded.length Length Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.coded.second_crc CRC (Second) Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.coded.second_dst Destination (Second) Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.coded.second_orig_dst Original Destination (Second) Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.coded.second_src Source (Second) Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.coded.second_ttl Time to Live (Second) Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.coded.second_ttvn TT Version (Second) Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.coded.ttl Time to Live Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.coded.version Version Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.error.tvlv_version_unknown BATADV Error: unknown TVLV version Label 2.0.0 to 2.6.1
batadv.icmp.dst Destination Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.icmp.msg_type Message Type Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.icmp.orig Originator Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.icmp.rr_ether RR MAC Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.icmp.rr_pointer Pointer Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.icmp.seq Sequence number Unsigned integer, 2 bytes 1.4.0 to 2.6.1
batadv.icmp.ttl Time to Live Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.icmp.uid UID Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.icmp.version Version Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.iv_ogm.flags Flags Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.iv_ogm.flags.directlink DirectLink Boolean 2.0.0 to 2.6.1
batadv.iv_ogm.flags.not_best_next_hop NOT_BEST_NEXT_HOP Boolean 2.0.0 to 2.6.1
batadv.iv_ogm.flags.primaries_first_hop PRIMARIES_FIRST_HOP Boolean 2.0.0 to 2.6.1
batadv.iv_ogm.orig Originator Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.iv_ogm.prev_sender Received from Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.iv_ogm.seq Sequence number Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.iv_ogm.tq Transmission Quality Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.iv_ogm.ttl Time to Live Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.iv_ogm.tvlv_len Length of TVLV Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.iv_ogm.version Version Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.msg.reassembled.in Reassembled in Frame number 1.8.0 to 2.6.1
batadv.msg.reassembled.length Reassembled length Unsigned integer, 4 bytes 1.8.0 to 2.6.1
batadv.roam_adv.client Client Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.roam_adv.dst Destination Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.roam_adv.src Source Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.roam_adv.ttl Time to Live Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.roam_adv.version Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tt_entry.entry Entry Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.tt_entry.flags Flags Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tt_entry.flags.change_del Delete Boolean 1.8.0 to 2.6.1
batadv.tt_entry.flags.client_roam Client Roam Boolean 1.8.0 to 2.6.1
batadv.tt_query.dst Destination Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.tt_query.entries Entries Unsigned integer, 2 bytes 1.8.0 to 2.6.1
batadv.tt_query.flags Flags Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tt_query.flags.full_table Full Table Boolean 1.8.0 to 2.6.1
batadv.tt_query.flags.type Query Type Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tt_query.src Source Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.tt_query.tt_crc CRC of TT Unsigned integer, 2 bytes 1.8.0 to 2.6.1
batadv.tt_query.ttl Time to Live Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tt_query.ttvn TT Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tt_query.version Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.tvlv.gw.dl_speed Download Speed Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.tvlv.gw.ul_speed Upload Speed Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.tvlv.len Length Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.tvlv.length Type Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.tvlv.mcast.flags.ipv4 IPv4 Boolean 2.0.0 to 2.6.1
batadv.tvlv.mcast.flags.ipv6 IPv6 Boolean 2.0.0 to 2.6.1
batadv.tvlv.mcast.flags.unsnoopables Unsnoopables Boolean 2.0.0 to 2.6.1
batadv.tvlv.roam.vid VID Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.tvlv.tt.change.addr Address Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.tvlv.tt.change.flags Flags Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.tvlv.tt.change.flags.del Delete Boolean 2.0.0 to 2.6.1
batadv.tvlv.tt.change.flags.isolate Isolate Boolean 2.0.0 to 2.6.1
batadv.tvlv.tt.change.flags.roam Client Roam Boolean 2.0.0 to 2.6.1
batadv.tvlv.tt.change.flags.wifi Wifi Client Boolean 2.0.0 to 2.6.1
batadv.tvlv.tt.change.vid VID Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.tvlv.tt.flags Flags Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.tvlv.tt.flags.full_table Full Table Boolean 2.0.0 to 2.6.1
batadv.tvlv.tt.flags.type Query Type Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.tvlv.tt.num_vlan VLAN Entries Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.tvlv.tt.ttvn TT Version Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.tvlv.tt.vlan.crc CRC Unsigned integer, 4 bytes 2.0.0 to 2.6.1
batadv.tvlv.tt.vlan.vid VID Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.tvlv.vid_tagged VLAN Tagged Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.tvlv.vid_vlan VLAN ID Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.unicast.dst Destination Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.unicast.ttl Time to Live Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.unicast.ttvn TT Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.unicast.version Version Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.unicast_4addr.dst Destination Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.unicast_4addr.src Source Ethernet or other MAC address 1.8.0 to 2.6.1
batadv.unicast_4addr.subtype Subtype Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.unicast_4addr.ttl Time to Live Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.unicast_4addr.ttvn TT Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.unicast_4addr.version Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.unicast_frag.dst Destination Ethernet or other MAC address 1.6.0 to 2.6.1
batadv.unicast_frag.flags Flags Unsigned integer, 1 byte 1.6.0 to 2.6.1
batadv.unicast_frag.flags.head Head Boolean 1.6.0 to 2.6.1
batadv.unicast_frag.flags.largetail Largetail Boolean 1.6.0 to 2.6.1
batadv.unicast_frag.fragment Message fragment Frame number 1.6.0 to 2.6.1
batadv.unicast_frag.fragment.count Message fragment count Unsigned integer, 4 bytes 1.6.0 to 2.6.1
batadv.unicast_frag.fragment.error Message defragmentation error Frame number 1.6.0 to 2.6.1
batadv.unicast_frag.fragment.multiple_tails Message has multiple tail fragments Boolean 1.6.0 to 2.6.1
batadv.unicast_frag.fragment.overlap Message fragment overlap Boolean 1.6.0 to 2.6.1
batadv.unicast_frag.fragment.overlap.conflicts Message fragment overlapping with conflicting data Boolean 1.6.0 to 2.6.1
batadv.unicast_frag.fragment.too_long_fragment Message fragment too long Boolean 1.6.0 to 2.6.1
batadv.unicast_frag.fragments Message fragments Label 1.6.0 to 2.6.1
batadv.unicast_frag.no Fragment number Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.unicast_frag.orig Originator Ethernet or other MAC address 1.6.0 to 2.6.1
batadv.unicast_frag.seq Sequence number Unsigned integer, 2 bytes 1.6.0 to 2.6.1
batadv.unicast_frag.total_size Complete Size Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.unicast_frag.ttl Time to Live Unsigned integer, 1 byte 1.6.0 to 2.6.1
batadv.unicast_frag.ttvn TT Version Unsigned integer, 1 byte 1.8.0 to 2.6.1
batadv.unicast_frag.version Version Unsigned integer, 1 byte 1.6.0 to 2.6.1
batadv.unicast_tvlv.dst Destination Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.unicast_tvlv.len Length of TVLV Unsigned integer, 2 bytes 2.0.0 to 2.6.1
batadv.unicast_tvlv.src Source Ethernet or other MAC address 2.0.0 to 2.6.1
batadv.unicast_tvlv.ttl Time to Live Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.unicast_tvlv.version Version Unsigned integer, 1 byte 2.0.0 to 2.6.1
batadv.vis.dst Destination Ethernet or other MAC address 1.6.0 to 2.6.1
batadv.vis.entries Entries Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.vis.quality Quality Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.vis.sender_orig Forwarding Originator Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.vis.seq Sequence number Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.vis.src Source Ethernet or other MAC address 1.6.0 to 2.6.1
batadv.vis.target_orig Target Originator Ethernet or other MAC address 1.4.0 to 2.6.1
batadv.vis.ttl Time to Live Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.vis.type Type Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.vis.version Version Unsigned integer, 1 byte 1.4.0 to 2.6.1
batadv.vis.vis_orig Originator Ethernet or other MAC address 1.4.0 to 2.6.1
hf_batadv_vis_entry.dst Destination Ethernet or other MAC address 1.4.0 to 1.4.15
hf_batadv_vis_entry.src Source Ethernet or other MAC address 1.4.0 to 1.4.15
msg.reassembled.in Reassembled in Frame number 1.6.0 to 1.6.16
msg.reassembled.length Reassembled length Unsigned integer, 4 bytes 1.6.0 to 1.6.16
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More