Display Filter Reference: MP4 / ISOBMFF file format

Protocol field name: mp4

Versions: 1.12.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
mp4.box.largesize Box size (largesize) Unsigned integer, 8 bytes 1.12.0 to 2.6.3
mp4.box.size Box size Unsigned integer, 4 bytes 1.12.0 to 2.6.3
mp4.box.type_str Box type Character string 1.12.0 to 2.6.3
mp4.box_too_large box size too large, dissection of this box is not supported Label 1.12.0 to 2.6.3
mp4.dref.entry_count Number of entries Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.ftyp.additional_brand Additional brand Character string 1.12.0 to 2.6.3
mp4.ftyp.brand Brand Character string 1.12.0 to 2.6.3
mp4.ftyp.version Version Unsigned integer, 4 bytes 1.12.0 to 2.6.3
mp4.full_box.flags Flags Unsigned integer, 3 bytes 2.0.0 to 2.6.3
mp4.full_box.flags.media_data_location Media data location is defined in the movie box Boolean 2.0.0 to 2.6.3
mp4.full_box.version Box version Unsigned integer, 1 byte 1.12.0 to 2.6.3
mp4.hdlr.name Handler name Character string 2.0.0 to 2.6.3
mp4.hdlr.type Handler type Character string 2.0.0 to 2.6.3
mp4.mfhd.sequence_number Sequence number Unsigned integer, 4 bytes 1.12.0 to 2.6.3
mp4.mvhd.creation_time Creation time Unsigned integer, 8 bytes 2.0.0 to 2.6.3
mp4.mvhd.duration Duration Unsigned integer, 8 bytes 2.0.0 to 2.6.3
mp4.mvhd.modification_time Modification time Unsigned integer, 8 bytes 2.0.0 to 2.6.3
mp4.mvhd.next_tid_unknown Next track ID is unknown. Search for an unused track ID if you want to insert a new track. Label 2.0.0 to 2.6.3
mp4.mvhd.next_track_id Next Track ID Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.mvhd.rate Rate Floating point (double-precision) 2.0.0 to 2.6.3
mp4.mvhd.timescale Timescale Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.mvhd.volume Volume Floating point (double-precision) 2.0.0 to 2.6.3
mp4.stsd.entry_count Number of entries Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.stsz.entry_size Entry size Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.stsz.sample_count Sample count Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.stsz.sample_size Sample size Unsigned integer, 4 bytes 2.0.0 to 2.6.3
mp4.tkhd.creation_time Creation time Unsigned integer, 8 bytes 1.12.0 to 2.6.3
mp4.tkhd.duration Duration Unsigned integer, 8 bytes 1.12.0 to 2.6.3
mp4.tkhd.height Height Floating point (double-precision) 1.12.0 to 2.6.3
mp4.tkhd.modification_time Modification time Unsigned integer, 8 bytes 1.12.0 to 2.6.3
mp4.tkhd.track_id Track ID Unsigned integer, 4 bytes 1.12.0 to 2.6.3
mp4.tkhd.width Width Floating point (double-precision) 1.12.0 to 2.6.3
mp4.too_many_levels too many recursion levels Label 2.2.14 to 2.2.17, 2.4.6 to 2.6.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More