Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Display Filter Reference: PKTAP packet header

Protocol field name: pktap

Versions: 1.12.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
pktap.cmdnameCommand nameCharacter string1.12.0 to 4.2.4
pktap.dltDLTUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.ecmdnameEffective command nameCharacter string1.12.0 to 4.2.4
pktap.epidEffective process IDUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.flagsFlagsUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.hdrlenHeader lengthUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.hdrlen_too_shortHeader length is too shortLabel1.12.0 to 4.2.4
pktap.ifnameInterface nameCharacter string1.12.0 to 4.2.4
pktap.iftypeInterface typeUnsigned integer (16 bits)1.12.0 to 4.2.4
pktap.ifunitInterface unitUnsigned integer (16 bits)1.12.0 to 4.2.4
pktap.llhdrlenLink-layer header lengthUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.lltrlrlenLink-layer trailer lengthUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.pfamilyProtocol familyUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.pidProcess IDUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.rectypeRecord typeUnsigned integer (32 bits)1.12.0 to 4.2.4
pktap.svc_classService classUnsigned integer (32 bits)1.12.0 to 4.2.4