Display Filter Reference: BLF File Format
Protocol field name: file-blf
Versions: 3.6.0 to 4.0.3
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| blf.file_header | File Header | Label | 3.6.0 to 4.0.3 |
| blf.file_header.api | API Version | Byte sequence | 3.6.0 to 4.0.3 |
| blf.file_header.application | Application | Unsigned integer (1 byte) | 3.6.0 to 4.0.3 |
| blf.file_header.application_build | Application Build | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.file_header.application_major | Application Major Version | Unsigned integer (1 byte) | 3.6.0 to 4.0.3 |
| blf.file_header.application_minor | Application Minor Version | Unsigned integer (1 byte) | 3.6.0 to 4.0.3 |
| blf.file_header.compression_level | Compression Level | Unsigned integer (1 byte) | 3.6.0 to 4.0.3 |
| blf.file_header.end_date | End Date | Byte sequence | 3.6.0 to 4.0.3 |
| blf.file_header.length | Header Length | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.file_header.length_compressed | Length (compressed) | Unsigned integer (8 bytes) | 3.6.0 to 4.0.3 |
| blf.file_header.length_uncompressed | Length (uncompressed) | Unsigned integer (8 bytes) | 3.6.0 to 4.0.3 |
| blf.file_header.magic | Magic | Byte sequence | 3.6.0 to 4.0.3 |
| blf.file_header.object_count | Object Count | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.file_header.restore_point_offset | Restore Point Offset | Unsigned integer (8 bytes) | 3.6.0 to 4.0.3 |
| blf.file_header.start_date | Start Date | Byte sequence | 3.6.0 to 4.0.3 |
| blf.object | Object | Label | 3.6.0 to 4.0.3 |
| blf.object.header | Object Header | Label | 3.6.0 to 4.0.3 |
| blf.object.header.header_length | Header Length | Unsigned integer (2 bytes) | 3.6.0 to 4.0.3 |
| blf.object.header.header_type | Header Type | Unsigned integer (2 bytes) | 3.6.0 to 4.0.3 |
| blf.object.header.magic | Magic | Byte sequence | 3.6.0 to 4.0.3 |
| blf.object.header.object_length | Object Length | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.object.header.object_type | Object Type | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.object.header.unparsed | Header unparsed | Byte sequence | 3.6.0 to 4.0.3 |
| blf.object.logcontainer.compression_method | Compression Method | Unsigned integer (2 bytes) | 3.6.0 to 4.0.3 |
| blf.object.logcontainer.payload | Payload | Byte sequence | 3.6.0 to 4.0.3 |
| blf.object.logcontainer.res1 | Reserved | Unsigned integer (2 bytes) | 3.6.0 to 4.0.3 |
| blf.object.logcontainer.res2 | Reserved | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.object.logcontainer.res4 | Reserved | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.object.logcontainer.uncompressed_length | Uncompressed Length | Unsigned integer (4 bytes) | 3.6.0 to 4.0.3 |
| blf.object.payload | Payload | Byte sequence | 3.6.0 to 4.0.3 |