Display Filter Reference: DoIP (ISO13400) Protocol

Protocol field name: doip

Versions: 3.0.0 to 3.0.7

Back to Display Filter Reference

Field name Description Type Versions
doip.activation_type Activation type Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.activation_type_v1 Activation type Unsigned integer, 2 bytes 3.0.0 to 3.0.7
doip.data User data Sequence of bytes 3.0.0 to 3.0.7
doip.diag_ack_code ACK code Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.diag_nack_code NACK code Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.eid EID Sequence of bytes 3.0.0 to 3.0.7
doip.futher_action Further action required Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.gid GID Sequence of bytes 3.0.0 to 3.0.7
doip.inverse Inverse version Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.length Length Unsigned integer, 4 bytes 3.0.0 to 3.0.7
doip.logical_address Logical Address Unsigned integer, 2 bytes 3.0.0 to 3.0.7
doip.max_data_size Max data size Unsigned integer, 4 bytes 3.0.0 to 3.0.7
doip.max_sockets Max concurrent sockets Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.nack_code DoIP Header NACK code Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.node_type Node type Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.power_mode Diagnostic power mode Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.previous Previous message Sequence of bytes 3.0.0 to 3.0.7
doip.reserved_iso Reserved by ISO Unsigned integer, 4 bytes 3.0.0 to 3.0.7
doip.reserved_oem Reserved by OEM Unsigned integer, 4 bytes 3.0.0 to 3.0.7
doip.response_code Routing activation response code Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.sockets Currently open sockets Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.source_address Source Address Unsigned integer, 2 bytes 3.0.0 to 3.0.7
doip.sync_status VIN/GID sync. status Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.target_address Target Address Unsigned integer, 2 bytes 3.0.0 to 3.0.7
doip.tester_logical_address Logical address of external tester Unsigned integer, 2 bytes 3.0.0 to 3.0.7
doip.type Type Unsigned integer, 2 bytes 3.0.0 to 3.0.7
doip.version Version Unsigned integer, 1 byte 3.0.0 to 3.0.7
doip.vin VIN Character string 3.0.0 to 3.0.7
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More