Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: 802.1AE Security Tag

Protocol field name: macsec

Versions: 1.12.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
macsec.ANANUnsigned integer (8 bits)1.12.0 to 4.6.0
macsec.auth_statusFrame authentication statusUnsigned integer (8 bits)4.4.0 to 4.4.10
macsec.decrypted_dataDecrypted DataByte sequence4.4.0 to 4.6.0
macsec.eth_paddingPaddingByte sequence4.2.0 to 4.6.0
macsec.etypeEthertypeUnsigned integer (16 bits)3.4.0 to 4.6.0
macsec.ICVICVByte sequence1.12.0 to 4.6.0
macsec.PNPacket numberUnsigned integer (32 bits)1.12.0 to 4.6.0
macsec.SCI.port_identifierPort IdentifierUnsigned integer (16 bits)2.4.0 to 4.6.0
macsec.SCI.port_numberPort numberUnsigned integer (16 bits)1.12.0 to 2.2.17
macsec.SCI.system_identifierSystem IdentifierEthernet or other MAC address2.4.0 to 4.6.0
macsec.SCI.SytemIdentifierSystem IdentifierEthernet or other MAC address1.12.0 to 2.2.17
macsec.SLShort lengthUnsigned integer (8 bits)1.12.0 to 4.6.0
macsec.TCITCIUnsigned integer (8 bits)1.12.0 to 4.6.0
macsec.TCI.CCBoolean1.12.0 to 4.6.0
macsec.TCI.EEBoolean1.12.0 to 4.6.0
macsec.TCI.ESESBoolean1.12.0 to 4.6.0
macsec.TCI.SCSCBoolean1.12.0 to 4.6.0
macsec.TCI.SCBSCBBoolean1.12.0 to 4.6.0
macsec.TCI.VVERUnsigned integer (8 bits)1.12.0 to 4.6.0
macsec.verify_infoVerification InfoLabel4.6.0
macsec.verify_info.cak_name.indexCKN Table IndexSigned integer (16 bits)4.6.0
macsec.verify_info.cak_name.infoCAK Name InfoCharacter string4.6.0
macsec.verify_info.pskPSKByte sequence4.6.0
macsec.verify_info.psk_name.indexPSK Table IndexSigned integer (16 bits)4.6.0
macsec.verify_info.psk_name.infoPSK Name InfoCharacter string4.6.0
macsec.verify_info.sakSAKByte sequence4.6.0
macsec.verify_info.verifiedFrame Verification SuccessfulBoolean4.6.0