Display Filter Reference: Frame
Protocol field name: frame
Versions: 1.0.0 to 2.6.3
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| comment | Comment | Character string | 1.8.0 to 1.8.15 |
| frame.cap_len | Frame length stored into the capture file | Unsigned integer, 4 bytes | 1.0.0 to 2.6.3 |
| frame.coloring_rule.name | Coloring Rule Name | Character string | 1.0.0 to 2.6.3 |
| frame.coloring_rule.string | Coloring Rule String | Character string | 1.0.0 to 2.6.3 |
| frame.comment | Comment | Character string | 1.10.0 to 2.6.3 |
| frame.comment.expert | Formatted comment | Label | 1.12.0 to 2.6.3 |
| frame.dlt | WTAP_ENCAP | Signed integer, 2 bytes | 1.8.0 to 1.8.15 |
| frame.encap_type | Encapsulation type | Signed integer, 2 bytes | 1.10.0 to 2.6.3 |
| frame.file_off | File Offset | Signed integer, 8 bytes | 1.0.0 to 2.6.3 |
| frame.ignored | Frame is ignored | Boolean | 1.4.0 to 2.6.3 |
| frame.incomplete | Incomplete dissector | Label | 2.0.0 to 2.6.3 |
| frame.interface_description | Interface description | Character string | 2.4.0 to 2.6.3 |
| frame.interface_id | Interface id | Unsigned integer, 4 bytes | 1.8.0 to 2.6.3 |
| frame.interface_name | Interface name | Character string | 2.4.0 to 2.6.3 |
| frame.len | Frame length on the wire | Unsigned integer, 4 bytes | 1.0.0 to 2.6.3 |
| frame.link_nr | Link Number | Unsigned integer, 2 bytes | 1.0.0 to 2.6.3 |
| frame.marked | Frame is marked | Boolean | 1.0.0 to 2.6.3 |
| frame.md5_hash | Frame MD5 Hash | Character string | 1.2.0 to 2.6.3 |
| frame.number | Frame Number | Unsigned integer, 4 bytes | 1.0.0 to 2.6.3 |
| frame.offset_shift | Time shift for this packet | Time offset | 1.8.0 to 2.6.3 |
| frame.p2p_dir | Point-to-Point Direction | Signed integer, 1 byte | 1.0.0 to 2.6.3 |
| frame.p_prot_data | Number of per-protocol-data | Unsigned integer, 4 bytes | 1.10.0 to 1.12.13 |
| frame.packet_flags | Packet flags | Unsigned integer, 4 bytes | 1.10.0 to 2.6.3 |
| frame.packet_flags_crc_error | CRC error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_direction | Direction | Unsigned integer, 4 bytes | 1.10.0 to 2.6.3 |
| frame.packet_flags_fcs_length | FCS length | Unsigned integer, 4 bytes | 1.10.0 to 2.6.3 |
| frame.packet_flags_packet_too_error | Packet too long error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_packet_too_short_error | Packet too short error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_preamble_error | Preamble error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_reception_type | Reception type | Unsigned integer, 4 bytes | 1.10.0 to 2.6.3 |
| frame.packet_flags_reserved | Reserved | Unsigned integer, 4 bytes | 1.10.0 to 2.6.3 |
| frame.packet_flags_start_frame_delimiter_error | Start frame delimiter error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_symbol_error | Symbol error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_unaligned_frame_error | Unaligned frame error | Boolean | 1.10.0 to 2.6.3 |
| frame.packet_flags_wrong_inter_frame_gap_error | Wrong interframe gap error | Boolean | 1.10.0 to 2.6.3 |
| frame.pkt_len | Frame length on the wire | Unsigned integer, 4 bytes | 1.0.0 to 1.0.16 |
| frame.protocols | Protocols in frame | Character string | 1.0.0 to 2.6.3 |
| frame.ref_time | This is a Time Reference frame | Label | 1.0.0 to 2.6.3 |
| frame.time | Arrival Time | Date and time | 1.0.0 to 2.6.3 |
| frame.time_delta | Time delta from previous captured frame | Time offset | 1.0.0 to 2.6.3 |
| frame.time_delta_displayed | Time delta from previous displayed frame | Time offset | 1.0.0 to 2.6.3 |
| frame.time_epoch | Epoch Time | Time offset | 1.4.0 to 2.6.3 |
| frame.time_invalid | Arrival Time: Fractional second out of range (0-1000000000) | Label | 1.0.0 to 2.6.3 |
| frame.time_relative | Time since reference or first frame | Time offset | 1.0.0 to 2.6.3 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance