Display Filter Reference: Locator/ID Separation Protocol (Reliable Transport)

Protocol field name: lisp-tcp

Versions: 2.0.0 to 3.2.1

Back to Display Filter Reference

Field name Description Type Versions
lisp-tcp.invalid_length Invalid message length Label 3.0.0 to 3.2.1
lisp-tcp.invalid_marker Invalid message end marker Label 2.0.0 to 3.2.1
lisp-tcp.message.data Message Data Sequence of bytes 2.0.0 to 3.2.1
lisp-tcp.message.eid.afi EID AFI Unsigned integer, 2 bytes 2.0.0 to 3.2.1
lisp-tcp.message.eid.ipv4 Address IPv4 address 3.0.0 to 3.2.1
lisp-tcp.message.eid.ipv6 Address IPv6 address 3.0.0 to 3.2.1
lisp-tcp.message.eid.mac Address Ethernet or other MAC address 3.0.0 to 3.2.1
lisp-tcp.message.eid.prefix.afi Prefix AFI Unsigned integer, 2 bytes 3.0.0 to 3.2.1
lisp-tcp.message.eid.prefix.length Prefix Length Unsigned integer, 1 byte 3.0.0 to 3.2.1
lisp-tcp.message.end_marker Message End Marker Unsigned integer, 4 bytes 2.0.0 to 3.2.1
lisp-tcp.message.err Error code Unsigned integer, 1 byte 2.0.0 to 3.2.1
lisp-tcp.message.err.code Error code Unsigned integer, 1 byte 3.0.0 to 3.2.1
lisp-tcp.message.err.offending_msg.data Offending message data Sequence of bytes 3.0.0 to 3.2.1
lisp-tcp.message.err.offending_msg.id Offending message ID Unsigned integer, 4 bytes 3.0.0 to 3.2.1
lisp-tcp.message.err.offending_msg.len Offending message length Unsigned integer, 2 bytes 3.0.0 to 3.2.1
lisp-tcp.message.err.offending_msg.type Offending message type Unsigned integer, 2 bytes 3.0.0 to 3.2.1
lisp-tcp.message.err.reserved Error code Unsigned integer, 3 bytes 3.0.0 to 3.2.1
lisp-tcp.message.id Message ID Unsigned integer, 4 bytes 2.0.0 to 3.2.1
lisp-tcp.message.iid Instance ID Unsigned integer, 4 bytes 2.0.0 to 3.2.1
lisp-tcp.message.length Length Unsigned integer, 2 bytes 2.0.0 to 3.2.1
lisp-tcp.message.registration_refresh.flags.rejected Rejected only Boolean 3.0.0 to 3.2.1
lisp-tcp.message.registration_refresh.res Reserved Unsigned integer, 2 bytes 3.0.0 to 3.2.1
lisp-tcp.message.registration_refresh.scope Registration refresh scope Unsigned integer, 1 byte 3.0.0 to 3.2.1
lisp-tcp.message.registration_reject.reason Registration reject reason Unsigned integer, 1 byte 3.0.0 to 3.2.1
lisp-tcp.message.registration_reject.res Reserved bits Unsigned integer, 2 bytes 3.0.0 to 3.2.1
lisp-tcp.message.rid Request Message ID Unsigned integer, 4 bytes 2.0.0 to 3.2.1
lisp-tcp.message.rloc.afi RLOC AFI Unsigned integer, 2 bytes 2.0.0 to 3.2.1
lisp-tcp.message.rloc.ipv4 RLOC IPv4 address 2.0.0 to 3.2.1
lisp-tcp.message.rloc.ipv6 RLOC IPv6 address 2.0.0 to 3.2.1
lisp-tcp.message.sid Subscribe Message ID Unsigned integer, 4 bytes 2.0.0 to 3.2.1
lisp-tcp.message.site_id Site-ID Unsigned integer, 8 bytes 2.0.0 to 2.6.14
lisp-tcp.message.siteid Site-ID Sequence of bytes 3.0.0 to 3.2.1
lisp-tcp.message.type Type Unsigned integer, 2 bytes 2.0.0 to 3.2.1
lisp-tcp.message.xtrid xTR-ID Sequence of bytes 3.0.0 to 3.2.1
lisp-tcp.undecoded Not dissected yet (report to wireshark.org) Label 2.0.0 to 3.2.1
lisp-tcp.unexpected_afi Unexpected AFI Label 3.0.0 to 3.2.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More