Display Filter Reference: Network Time Protocol

Protocol field name: ntp

Versions: 1.0.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
ntp.ctrl.associd AssociationID Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.clock_status.code Clock Event Code Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.clock_status.status Clock Status Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.configuration Configuration Character string 2.6.0 to 2.6.3
ntp.ctrl.count Count Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.data Data Label 1.8.0 to 2.6.3
ntp.ctrl.err_status Error Status Word Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.flags2 Flags 2 Unsigned integer, 1 byte 1.8.0 to 2.6.3
ntp.ctrl.flags2.error Error bit Unsigned integer, 1 byte 1.8.0 to 2.6.3
ntp.ctrl.flags2.more More bit Unsigned integer, 1 byte 1.8.0 to 2.6.3
ntp.ctrl.flags2.opcode Opcode Unsigned integer, 1 byte 1.8.0 to 2.6.3
ntp.ctrl.flags2.r Response bit Unsigned integer, 1 byte 1.8.0 to 2.6.3
ntp.ctrl.item Item Label 1.8.0 to 2.6.3
ntp.ctrl.mru MRU Character string 2.6.0 to 2.6.3
ntp.ctrl.nonce Nonce Character string 2.6.0 to 2.6.3
ntp.ctrl.offset Offset Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.ordlist Ordered List Character string 2.6.0 to 2.6.3
ntp.ctrl.peer_status.authenable Peer Status Boolean 1.8.0 to 2.6.3
ntp.ctrl.peer_status.authentic Peer Status Boolean 1.8.0 to 2.6.3
ntp.ctrl.peer_status.bcast Peer Status broadcast association Boolean 2.6.0 to 2.6.3
ntp.ctrl.peer_status.code Peer Event Code Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.peer_status.config Peer Status Boolean 1.8.0 to 2.6.3
ntp.ctrl.peer_status.count Peer Event Counter Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.peer_status.reach Peer Status Boolean 1.8.0 to 2.6.3
ntp.ctrl.peer_status.reserved Peer Status: reserved Unsigned integer, 2 bytes 1.8.0 to 2.4.9
ntp.ctrl.peer_status.selection Peer Selection Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.sequence Sequence Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.status Status Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.sys_status.clksrc Clock Source Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.sys_status.code System Event Code Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.sys_status.count System Event Counter Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.sys_status.li Leap Indicator Unsigned integer, 2 bytes 1.8.0 to 2.6.3
ntp.ctrl.trapmsg Trap message Character string 1.8.0 to 2.6.3
ntp.ext Extension Label 1.0.0 to 2.6.3
ntp.ext.associd Association ID Unsigned integer, 4 bytes 1.0.0 to 2.6.3
ntp.ext.flags Flags Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.ext.flags.error Error bit Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.ext.flags.r Response bit Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.ext.flags.vn Version Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.ext.fstamp File Timestamp Unsigned integer, 4 bytes 1.0.0 to 2.6.3
ntp.ext.invalid_length Extension invalid length Label 2.0.0 to 2.6.3
ntp.ext.len Extension length Unsigned integer, 2 bytes 1.0.0 to 2.6.3
ntp.ext.op Opcode Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.ext.sig Signature Sequence of bytes 1.0.0 to 2.6.3
ntp.ext.siglen Signature length Unsigned integer, 4 bytes 1.0.0 to 2.6.3
ntp.ext.tstamp Timestamp Unsigned integer, 4 bytes 1.0.0 to 2.6.3
ntp.ext.val Value Sequence of bytes 1.0.0 to 2.6.3
ntp.ext.vallen Value length Unsigned integer, 4 bytes 1.0.0 to 2.6.3
ntp.flags Flags Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.flags.li Leap Indicator Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.flags.mode Mode Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.flags.vn Version number Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.key_index KeyIndex Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.key_signature Signature Sequence of bytes 2.0.0 to 2.6.3
ntp.key_type Key type Unsigned integer, 1 byte 2.0.0 to 2.6.3
ntp.keyid Key ID Sequence of bytes 1.0.0 to 2.6.3
ntp.mac Message Authentication Code Sequence of bytes 1.0.0 to 2.6.3
ntp.org Origin Timestamp Date and time 1.0.0 to 2.6.3
ntp.padding Padding Sequence of bytes 2.2.12 to 2.2.17, 2.4.4 to 2.6.3
ntp.ppoll Peer Polling Interval Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.precision Peer Clock Precision Signed integer, 1 byte 1.0.0 to 2.6.3
ntp.priv.auth Auth bit Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.priv.auth_seq Auth, sequence Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.priv.err Err Unsigned integer, 1 byte 2.0.0 to 2.6.3
ntp.priv.flags.more More bit Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.priv.flags.r Response bit Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.priv.impl Implementation Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.priv.monlist.addr6 ipv6 remote addr IPv6 address 2.0.0 to 2.6.3
ntp.priv.monlist.avgint avgint Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.count count Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.daddr6 ipv6 local addr IPv6 address 2.0.0 to 2.6.3
ntp.priv.monlist.flags flags Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.ipv6 ipv6 Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.item Monlist item Character string 2.0.0 to 2.6.3
ntp.priv.monlist.itemsize Size of data item Unsigned integer, 2 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.local_address local address IPv4 address 2.0.0 to 2.6.3
ntp.priv.monlist.lsint lsint Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.mode mode Unsigned integer, 1 byte 2.0.0 to 2.6.3
ntp.priv.monlist.port port Unsigned integer, 2 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.remote_address remote address IPv4 address 2.0.0 to 2.6.3
ntp.priv.monlist.restr restr Unsigned integer, 4 bytes 2.0.0 to 2.6.3
ntp.priv.monlist.version version Unsigned integer, 1 byte 2.0.0 to 2.6.3
ntp.priv.numitems Number of data items Unsigned integer, 2 bytes 2.0.0 to 2.6.3
ntp.priv.reqcode Request code Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.priv.reserved Reserved Unsigned integer, 1 byte 2.0.0 to 2.6.3
ntp.priv.seq Sequence number Unsigned integer, 1 byte 1.10.0 to 2.6.3
ntp.rec Receive Timestamp Date and time 1.0.0 to 2.6.3
ntp.refid Reference ID Sequence of bytes 1.0.0 to 2.6.3
ntp.reftime Reference Timestamp Date and time 1.0.0 to 2.6.3
ntp.rootdelay Root Delay Floating point (double-precision) 1.0.0 to 2.6.3
ntp.rootdispersion Root Dispersion Floating point (double-precision) 1.0.0 to 2.6.3
ntp.stratum Peer Clock Stratum Unsigned integer, 1 byte 1.0.0 to 2.6.3
ntp.xmt Transmit Timestamp Date and time 1.0.0 to 2.6.3
ntpctrl.associd AssociationID Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.clock_status.code Clock Event Code Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.clock_status.status Clock Status Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.count Count Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.data Data Label 1.4.0 to 1.6.16
ntpctrl.err_status Error Status Word Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.flags2 Flags 2 Unsigned integer, 1 byte 1.0.0 to 1.6.16
ntpctrl.flags2.error Error bit Unsigned integer, 1 byte 1.0.0 to 1.6.16
ntpctrl.flags2.more More bit Unsigned integer, 1 byte 1.0.0 to 1.6.16
ntpctrl.flags2.opcode Opcode Unsigned integer, 1 byte 1.0.0 to 1.6.16
ntpctrl.flags2.r Response bit Unsigned integer, 1 byte 1.0.0 to 1.6.16
ntpctrl.item Item Label 1.4.0 to 1.6.16
ntpctrl.offset Offset Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.authenable Peer Status Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.authentic Peer Status Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.code Peer Event Code Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.config Peer Status Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.count Peer Event Counter Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.reach Peer Status Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.reserved Peer Status: reserved Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.peer_status.selection Peer Selection Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.sequence Sequence Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.status Status Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.sys_status.clksrc Clock Source Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.sys_status.code System Event Code Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.sys_status.count System Event Counter Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.sys_status.li Leap Indicator Unsigned integer, 2 bytes 1.4.0 to 1.6.16
ntpctrl.trapmsg Trap message Character string 1.4.0 to 1.6.16
ntppriv.auth Auth bit Unsigned integer, 1 byte 1.0.0 to 1.8.15
ntppriv.auth_seq Auth, sequence Unsigned integer, 1 byte 1.0.0 to 1.8.15
ntppriv.flags.more More bit Unsigned integer, 1 byte 1.0.0 to 1.8.15
ntppriv.flags.r Response bit Unsigned integer, 1 byte 1.0.0 to 1.8.15
ntppriv.impl Implementation Unsigned integer, 1 byte 1.0.0 to 1.8.15
ntppriv.reqcode Request code Unsigned integer, 1 byte 1.0.0 to 1.8.15
ntppriv.seq Sequence number Unsigned integer, 1 byte 1.0.0 to 1.8.15
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More