Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Frame

Protocol field name: frame

Versions: 1.0.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
commentCommentCharacter string1.8.0 to 1.8.15
frame.bblogBlack Box LogCharacter string3.6.0 to 4.6.0
frame.bblog.dupacksDuplicate AcknowledgementsUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.errnoError NumberSigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.event_flagsEvent FlagsUnsigned integer (16 bits)4.2.0 to 4.6.0
frame.bblog.event_flags_hdrTCP headerBoolean4.2.0 to 4.6.0
frame.bblog.event_flags_rxbufReceive buffer informationBoolean4.2.0 to 4.6.0
frame.bblog.event_flags_stackStack specific informationBoolean4.2.0 to 4.6.0
frame.bblog.event_flags_txbufSend buffer informationBoolean4.2.0 to 4.6.0
frame.bblog.event_flags_verboseAdditional informationBoolean4.2.0 to 4.6.0
frame.bblog.event_idEvent IdentifierUnsigned integer (8 bits)4.2.0 to 4.6.0
frame.bblog.first_byte_inTime of First Byte InUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.first_byte_outTime of First Byte OutUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.flex_1Flex 1Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.flex_2Flex 2Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.issInitial Sending Sequence Number (ISS)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.pad_1PaddingUnsigned integer (8 bits)4.2.0 to 4.6.0
frame.bblog.pad_2PaddingUnsigned integer (8 bits)4.2.0 to 4.6.0
frame.bblog.pad_3PaddingUnsigned integer (8 bits)4.2.0 to 4.6.0
frame.bblog.payload_lengthTCP Payload LengthUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rcv_advReceive Advanced (RCV.ADV)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rcv_nxtReceive Next (RCV.NXT)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rcv_shiftRcv.Wind.ShiftUnsigned integer (8 bits)4.2.0 to 4.6.0
frame.bblog.rcv_upReceive Urgent Pointer (RCV.UP)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rcv_wndReceive Window (RCV.WND)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rttvarRound Trip Timer Variance (RTTVAR)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rxb_accReceive Buffer ACCUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rxb_cccReceive Buffer CCCUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.rxb_spareReceive Buffer SpareUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.seg_qlenSegment Queue LengthUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.serial_nrSerial NumberUnsigned integer (32 bits)3.6.0 to 4.6.0
frame.bblog.snd_cwndCongestion WindowUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_maxNewest Sequence Number Sent (SND.MAX)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_num_holesNumber of HolesUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_nxtNext Sequence Number (SND.NXT)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_recoverRecovery Sequence Number (SND.RECOVER)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_shiftSnd.Wind.ShiftUnsigned integer (8 bits)4.2.0 to 4.6.0
frame.bblog.snd_ssthreshSlowstart Threshold (SSTHREASH)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_unaOldest Unacknowledged Sequence Number (SND.UNA)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.snd_wndSend Window (SND.WND)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.srttSmoothed Round Trip Time (SRTT)Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.starttimeStarttimeUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.stateTCP StateUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.t_flagsTCB FlagsUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.t_flags2TCB Flags2Unsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.t_flags2_ace_permitAccurate ECN modeBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_drop_after_dataDrop connection after all data has been acknowledgedBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_ecn_permitECNBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_ecn_snd_cwrECN CWR queuedBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_ecn_snd_eceECN ECE queuedBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_first_bytes_completeFirst bytes in/outBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_log_autoConnection auto-loggingBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_plpmtu_blackholePMTU blackhole detectionBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_plpmtu_maxsegsntLast segment sent was a full segmentBoolean4.2.0 to 4.6.0
frame.bblog.t_flags2_plpmtu_pmtudPath MTU discoveryBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_ack_nowAck nowBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_be_in_cong_recoveryCurrently in congestion avoidanceBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_be_in_fast_recoveryCurrently in fast recoveryBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_delayed_ackDelayed ackBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_force_dataForce dataBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_goodput_in_progressGoodput measurement in progressBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_last_idleConnection was previously idleBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_listen_queue_overflowListen queue overflowBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_lost_rtx_detectionLost retransmission detectionBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_more_to_comeMore to comeBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_need_finNeed FINBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_need_synNeed SYNBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_no_delayNo delayBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_no_optNo optionsBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_no_pushNo pushBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_prev_validSaved values for bad retransmission validBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_received_timestampPeer has requested TimestampBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_received_window_scalePeer has requested Window ScalingBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_request_timestampHave or will request TimestampsBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_request_window_scaleHave or will request Window ScalingBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_sack_permittedSACK permittedBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_sent_finSent FINBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_signatureMD5 signature requiredBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_tfoTFOBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_toeTOEBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_tsoTSOBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_unused_0Unused 1Boolean4.2.0 to 4.6.0
frame.bblog.t_flags_unused_1Unused 2Boolean4.2.0 to 4.6.0
frame.bblog.t_flags_wake_socket_receiveWakeup receive socketBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_was_in_cong_recoveryWas in congestion avoidanceBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_was_in_fast_recoveryWas in fast recoveryBoolean4.2.0 to 4.6.0
frame.bblog.t_flags_zero_recv_window_sentSent a RCV.WND = 0 in responseBoolean4.2.0 to 4.6.0
frame.bblog.ticksTicksUnsigned integer (32 bits)3.6.0 to 4.6.0
frame.bblog.txb_accSend Buffer ACCUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.txb_cccSend Buffer CCCUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.bblog.txb_spareSend Buffer SpareUnsigned integer (32 bits)4.2.0 to 4.6.0
frame.cap_lenCapture LengthUnsigned integer (32 bits)1.0.0 to 4.6.0
frame.cb_copyCopyingBoolean3.6.0 to 4.6.0
frame.cb_penPrivate Enterprise NumberUnsigned integer (32 bits)3.6.0 to 4.6.0
frame.coloring_rule.nameColoring Rule NameCharacter string1.0.0 to 4.6.0
frame.coloring_rule.stringColoring Rule StringCharacter string1.0.0 to 4.6.0
frame.commentCommentCharacter string1.10.0 to 4.6.0
frame.comment.expertFormatted commentLabel1.12.0 to 4.6.0
frame.darwinDarwin MDBoolean4.6.0
frame.darwin.dropPacket Dropped By KernelBoolean4.6.0
frame.darwin.drop.componentComponentCharacter string4.6.0
frame.darwin.drop.domainDomainCharacter string4.6.0
frame.darwin.drop.funcDrop FuncCharacter string4.6.0
frame.darwin.drop.lineDrop LineUnsigned integer (32 bits)4.6.0
frame.darwin.drop.reasonDrop ReasonCharacter string4.6.0
frame.darwin.drop.reason_codeDrop Reason CodeUnsigned integer (32 bits)4.6.0
frame.darwin.flagsFlagsUnsigned integer (32 bits)4.6.0
frame.darwin.flags.chNexus Channel(ch)Boolean4.6.0
frame.darwin.flags.kaKeep Alive(ka)Boolean4.6.0
frame.darwin.flags.nfNew Flow(nf)Boolean4.6.0
frame.darwin.flags.reReXmit(re)Boolean4.6.0
frame.darwin.flags.reservedReservedBoolean4.6.0
frame.darwin.flags.soSocket(so)Boolean4.6.0
frame.darwin.flags.wkWake Packet(wk)Boolean4.6.0
frame.darwin.flow_idFlow IdUnsigned integer (32 bits)4.6.0
frame.darwin.gencntCompression gencntUnsigned integer (32 bits)4.6.0
frame.darwin.process_infoProcess InformationLabel4.6.0
frame.darwin.process_info.epidEffective IdUnsigned integer (32 bits)4.6.0
frame.darwin.process_info.epnameEffective NameCharacter string4.6.0
frame.darwin.process_info.pidIdUnsigned integer (32 bits)4.6.0
frame.darwin.process_info.pnameNameCharacter string4.6.0
frame.darwin.scService ClassUnsigned integer (32 bits)4.6.0
frame.darwin.trace_tagTrace TagUnsigned integer (32 bits)4.6.0
frame.dltWTAP_ENCAPSigned integer (16 bits)1.8.0 to 1.8.15
frame.drop_countDrop CountUnsigned integer (64 bits)3.6.0 to 4.6.0
frame.encap_typeEncapsulation typeSigned integer (16 bits)1.10.0 to 4.6.0
frame.encodingCharacter encodingUnsigned integer (32 bits)4.6.0
frame.file_offFile OffsetSigned integer (64 bits)1.0.0 to 4.6.0
frame.hashHash AlgorithmCharacter string4.2.0 to 4.6.0
frame.hash.valueHash ValueByte sequence4.2.0 to 4.6.0
frame.ignoredFrame is ignoredBoolean1.4.0 to 4.6.0
frame.incompleteIncomplete dissectorLabel2.0.0 to 4.6.0
frame.interface_descriptionInterface descriptionCharacter string2.4.0 to 4.6.0
frame.interface_idInterface idUnsigned integer (32 bits)1.8.0 to 4.6.0
frame.interface_nameInterface nameCharacter string2.4.0 to 4.6.0
frame.interface_queueInterface queueUnsigned integer (32 bits)3.4.0 to 4.6.0
frame.lenFrame LengthUnsigned integer (32 bits)1.0.0 to 4.6.0
frame.len_lt_caplenFrame length is less than captured lengthLabel3.4.16, 3.6.8 to 4.6.0
frame.markedFrame is markedBoolean1.0.0 to 4.6.0
frame.md5_hashFrame MD5 HashCharacter string1.2.0 to 4.6.0
frame.numberFrame NumberUnsigned integer (32 bits)1.0.0 to 4.6.0
frame.offset_shiftTime shift for this packetTime offset1.8.0 to 4.6.0
frame.p2p_dirPoint-to-Point DirectionSigned integer (8 bits)1.0.0 to 4.6.0
frame.p_prot_dataNumber of per-protocol-dataUnsigned integer (32 bits)1.10.0 to 1.12.13
frame.packet_flagsPacket flagsUnsigned integer (32 bits)1.10.0 to 4.6.0
frame.packet_flags_crc_errorCRC errorBoolean1.10.0 to 4.6.0
frame.packet_flags_directionDirectionUnsigned integer (32 bits)1.10.0 to 4.6.0
frame.packet_flags_fcs_lengthFCS lengthUnsigned integer (32 bits)1.10.0 to 4.6.0
frame.packet_flags_packet_too_errorPacket too long errorBoolean1.10.0 to 4.6.0
frame.packet_flags_packet_too_short_errorPacket too short errorBoolean1.10.0 to 4.6.0
frame.packet_flags_preamble_errorPreamble errorBoolean1.10.0 to 4.6.0
frame.packet_flags_reception_typeReception typeUnsigned integer (32 bits)1.10.0 to 4.6.0
frame.packet_flags_reservedReservedUnsigned integer (32 bits)1.10.0 to 4.6.0
frame.packet_flags_start_frame_delimiter_errorStart frame delimiter errorBoolean1.10.0 to 4.6.0
frame.packet_flags_symbol_errorSymbol errorBoolean1.10.0 to 4.6.0
frame.packet_flags_unaligned_frame_errorUnaligned frame errorBoolean1.10.0 to 4.6.0
frame.packet_flags_wrong_inter_frame_gap_errorWrong interframe gap errorBoolean1.10.0 to 4.6.0
frame.packet_idPacket idUnsigned integer (64 bits)3.4.0 to 4.6.0
frame.pcaplog.dataDataByte sequence4.0.0 to 4.2.14
frame.pcaplog.data_lengthData LengthUnsigned integer (32 bits)4.0.0 to 4.2.14
frame.pcaplog.data_typeDate TypeUnsigned integer (32 bits)4.0.0 to 4.2.14
frame.pkt_lenFrame length on the wireUnsigned integer (32 bits)1.0.0 to 1.0.16
frame.protocolsProtocols in frameCharacter string1.0.0 to 4.6.0
frame.ref_timeThis is a Time Reference frameLabel1.0.0 to 4.6.0
frame.section_numberSection numberUnsigned integer (32 bits)4.0.0 to 4.6.0
frame.timeArrival TimeDate and time1.0.0 to 4.6.0
frame.time_deltaTime delta from previous captured frameTime offset1.0.0 to 4.6.0
frame.time_delta_displayedTime delta from previous displayed frameTime offset1.0.0 to 4.6.0
frame.time_epochEpoch Arrival TimeDate and time1.4.0 to 4.6.0
frame.time_invalidArrival Time: Fractional second out of range (0-999999999)Label1.0.0 to 4.6.0
frame.time_relativeTime since reference or first frameTime offset1.0.0 to 4.6.0
frame.time_relative_capture_startTime since start of capturingTime offset4.2.0 to 4.6.0
frame.time_utcUTC Arrival TimeDate and time4.2.0 to 4.6.0
frame.verdictVerdictCharacter string3.4.0 to 4.6.0
frame.verdict.ebpf_tceBPF TCSigned integer (64 bits)3.4.0 to 4.6.0
frame.verdict.ebpf_xdpeBPF XDPSigned integer (64 bits)3.4.0 to 4.6.0
frame.verdict.hwHardwareByte sequence3.4.0 to 4.6.0
frame.verdict.unknownUnknownByte sequence3.4.0 to 4.6.0