We're now a non-profit! Support open source packet analysis by making a donation.

Display Filter Reference: Black Box Log

Protocol field name: bblog

Versions: 3.6.0 to 4.2.0

Back to Display Filter Reference

Field name Description Type Versions
bblog.dupacksDuplicate AcknowledgementsUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.errnoError NumberSigned integer (32 bits)3.6.0 to 4.2.0
bblog.event_flagsEvent FlagsUnsigned integer (16 bits)3.6.0 to 4.2.0
bblog.event_flags_hdrTCP headerBoolean3.6.0 to 4.2.0
bblog.event_flags_rxbufReceive buffer informationBoolean3.6.0 to 4.2.0
bblog.event_flags_stackStack specific informationBoolean3.6.0 to 4.2.0
bblog.event_flags_txbufSend buffer informationBoolean3.6.0 to 4.2.0
bblog.event_flags_verboseAdditional informationBoolean3.6.0 to 4.2.0
bblog.event_idEvent IdentifierUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.first_byte_inTime of First Byte InUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.first_byte_outTime of First Byte OutUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.flex_1Flex 1Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.flex_2Flex 2Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.issInitial Sending Sequence Number (ISS)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.pad_1PaddingUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.pad_2PaddingUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.pad_3PaddingUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.payload_lengthTCP Payload LengthUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rcv_advReceive Advanced (RCV.ADV)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rcv_nxtReceive Next (RCV.NXT)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rcv_shiftRcv.Wind.ShiftUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.rcv_upReceive Urgent Pointer (RCV.UP)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rcv_wndReceive Window (RCV.WND)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rttvarRound Trip Timer Variance (RTTVAR)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rxb_accReceive Buffer ACCUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rxb_cccReceive Buffer CCCUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.rxb_spareReceive Buffer SpareUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.seg_qlenSegment Queue LengthSigned integer (32 bits)3.6.0 to 4.2.0
bblog.serial_nrSerial NumberUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_cwndCongestion WindowUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_maxNewest Sequence Number Sent (SND.MAX)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_num_holesNumber of HolesSigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_nxtNext Sequence Number (SND.NXT)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_recoverRecovery Sequence Number (SND.RECOVER)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_shiftSnd.Wind.ShiftUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.snd_ssthreshSlowstart Threshold (SSTHREASH)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_unaOldest Unacknowledged Sequence Number (SND.UNA)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.snd_wndSend Window (SND.WND)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.srttSmoothed Round Trip Time (SRTT)Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.stack_idStack IdentifierUnsigned integer (8 bits)3.6.0 to 4.2.0
bblog.starttimeStarttimeUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.stateTCP StateUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.t_flagsTCB FlagsUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.t_flags2TCB Flags2Unsigned integer (32 bits)3.6.0 to 4.2.0
bblog.t_flags2_ace_permitAccurate ECN modeBoolean3.6.0 to 4.2.0
bblog.t_flags2_drop_after_dataDrop connection after all data has been acknowledgedBoolean3.6.0 to 4.2.0
bblog.t_flags2_ecn_permitECNBoolean3.6.0 to 4.2.0
bblog.t_flags2_ecn_snd_cwrECN CWR queuedBoolean3.6.0 to 4.2.0
bblog.t_flags2_ecn_snd_eceECN ECE queuedBoolean3.6.0 to 4.2.0
bblog.t_flags2_first_bytes_completeFirst bytes in/outBoolean3.6.0 to 4.2.0
bblog.t_flags2_log_autoConnection auto-loggingBoolean3.6.0 to 4.2.0
bblog.t_flags2_plpmtu_blackholePMTU blackhole detectionBoolean3.6.0 to 4.2.0
bblog.t_flags2_plpmtu_maxsegsntLast segment sent was a full segmentBoolean3.6.0 to 4.2.0
bblog.t_flags2_plpmtu_pmtudPath MTU discoveryBoolean3.6.0 to 4.2.0
bblog.t_flags_ack_nowAck nowBoolean3.6.0 to 4.2.0
bblog.t_flags_be_in_cong_recoveryCurrently in congestion avoidanceBoolean3.6.0 to 4.2.0
bblog.t_flags_be_in_fast_recoveryCurrently in fast recoveryBoolean3.6.0 to 4.2.0
bblog.t_flags_delayed_ackDelayed ackBoolean3.6.0 to 4.2.0
bblog.t_flags_force_dataForce dataBoolean3.6.0 to 4.2.0
bblog.t_flags_goodput_in_progressGoodput measurement in progressBoolean3.6.0 to 4.2.0
bblog.t_flags_last_idleConnection was previously idleBoolean3.6.0 to 4.2.0
bblog.t_flags_listen_queue_overflowListen queue overflowBoolean3.6.0 to 4.2.0
bblog.t_flags_lost_rtx_detectionLost retransmission detectionBoolean3.6.0 to 4.2.0
bblog.t_flags_more_to_comeMore to comeBoolean3.6.0 to 4.2.0
bblog.t_flags_need_finNeed FINBoolean3.6.0 to 4.2.0
bblog.t_flags_need_synNeed SYNBoolean3.6.0 to 4.2.0
bblog.t_flags_no_delayNo delayBoolean3.6.0 to 4.2.0
bblog.t_flags_no_optNo optionsBoolean3.6.0 to 4.2.0
bblog.t_flags_no_pushNo pushBoolean3.6.0 to 4.2.0
bblog.t_flags_prev_validSaved values for bad retransmission validBoolean3.6.0 to 4.2.0
bblog.t_flags_received_timestampPeer has requested TimestampBoolean3.6.0 to 4.2.0
bblog.t_flags_received_window_scalePeer has requested Window ScalingBoolean3.6.0 to 4.2.0
bblog.t_flags_request_timestampHave or will request TimestampsBoolean3.6.0 to 4.2.0
bblog.t_flags_request_window_scaleHave or will request Window ScalingBoolean3.6.0 to 4.2.0
bblog.t_flags_sack_permittedSACK permittedBoolean3.6.0 to 4.2.0
bblog.t_flags_sent_finSent FINBoolean3.6.0 to 4.2.0
bblog.t_flags_signatureMD5 signature requiredBoolean3.6.0 to 4.2.0
bblog.t_flags_tfoTFOBoolean3.6.0 to 4.2.0
bblog.t_flags_toeTOEBoolean3.6.0 to 4.2.0
bblog.t_flags_tsoTSOBoolean3.6.0 to 4.2.0
bblog.t_flags_unused_0Unused 1Boolean3.6.0 to 4.0.11
bblog.t_flags_unused_1Unused 1Boolean3.6.0 to 4.2.0
bblog.t_flags_unused_2Unused 2Boolean4.2.0
bblog.t_flags_wake_socke_receiveWakeup receive socketBoolean3.6.0 to 3.6.18
bblog.t_flags_wake_socket_receiveWakeup receive socketBoolean4.0.0 to 4.2.0
bblog.t_flags_was_in_cong_recoveryWas in congestion avoidanceBoolean3.6.0 to 4.2.0
bblog.t_flags_was_in_fast_recoveryWas in fast recoveryBoolean3.6.0 to 4.2.0
bblog.t_flags_zero_recv_window_sentSent a RCV.WND = 0 in responseBoolean3.6.0 to 4.2.0
bblog.ticksTicksUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.txb_accSend Buffer ACCUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.txb_accsSend Buffer CCCUnsigned integer (32 bits)3.6.0 to 4.2.0
bblog.txb_spareSend Buffer SpareUnsigned integer (32 bits)3.6.0 to 4.2.0