Display Filter Reference: Sinec H1 Protocol

Protocol field name: h1

Versions: 1.0.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
h1.block_len Block length Unsigned integer, 1 byte 2.0.0 to 2.6.1
h1.block_type Block type Unsigned integer, 1 byte 2.0.0 to 2.6.1
h1.dbnr Memory block number Unsigned integer, 1 byte 1.0.0 to 2.6.1
h1.dlen Length in words Signed integer, 2 bytes 1.0.0 to 2.6.1
h1.dwnr Address within memory block Unsigned integer, 2 bytes 1.0.0 to 2.6.1
h1.empty Empty field Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.empty_len Empty field length Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.header H1-Header Unsigned integer, 2 bytes 1.0.0 to 2.6.1
h1.len Length indicator Unsigned integer, 2 bytes 1.0.0 to 2.6.1
h1.opcode Opcode Unsigned integer, 1 byte 1.0.0 to 2.6.1
h1.opfield Operation identifier Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.oplen Operation length Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.org Memory type Unsigned integer, 1 byte 1.0.0 to 2.6.1
h1.reqlen Request length Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.request Request identifier Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.reslen Response length Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.response Response identifier Unsigned integer, 1 byte 1.0.0 to 1.12.13
h1.resvalue Response value Unsigned integer, 1 byte 1.0.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More