Display Filter Reference: 802.1AE Security tag

Protocol field name: macsec

Versions: 1.12.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
macsec.AN AN Unsigned integer, 1 byte 1.12.0 to 2.6.1
macsec.ICV ICV Sequence of bytes 1.12.0 to 2.6.1
macsec.PN Packet number Unsigned integer, 4 bytes 1.12.0 to 2.6.1
macsec.SCI.port_identifier Port Identifier Unsigned integer, 2 bytes 2.4.0 to 2.6.1
macsec.SCI.port_number Port number Unsigned integer, 2 bytes 1.12.0 to 2.2.15
macsec.SCI.system_identifier System Identifier Ethernet or other MAC address 2.4.0 to 2.6.1
macsec.SCI.SytemIdentifier System Identifier Ethernet or other MAC address 1.12.0 to 2.2.15
macsec.SL Short length Unsigned integer, 1 byte 1.12.0 to 2.6.1
macsec.TCI TCI Unsigned integer, 1 byte 1.12.0 to 2.6.1
macsec.TCI.C C Boolean 1.12.0 to 2.6.1
macsec.TCI.E E Boolean 1.12.0 to 2.6.1
macsec.TCI.ES ES Boolean 1.12.0 to 2.6.1
macsec.TCI.SC SC Boolean 1.12.0 to 2.6.1
macsec.TCI.SCB SCB Boolean 1.12.0 to 2.6.1
macsec.TCI.V VER Unsigned integer, 1 byte 1.12.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More