Display Filter Reference: QUIC (Quick UDP Internet Connections)

Protocol field name: quic

Versions: 1.12.0 to 2.2.7

Back to Display Filter Reference

Field name Description Type Versions
quic.cid CID Unsigned integer, 8 bytes 1.12.0 to 2.2.7
quic.data_len Data Length Unsigned integer, 4 bytes 2.2.0 to 2.2.7
quic.diversification_nonce Diversification nonce Sequence of bytes 2.2.0 to 2.2.7
quic.frame Frame Label 2.2.0 to 2.2.7
quic.frame_type Frame Type Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack ACK Boolean 2.0.0 to 2.2.7
quic.frame_type.ack.ack_block_length Ack block length Unsigned integer, 8 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.ack_delay_time Ack Delay time Unsigned integer, 2 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.delta_largest_acked Delta Largest Observed Unsigned integer, 1 byte 2.2.0 to 2.2.7
quic.frame_type.ack.delta_largest_observed Delta Largest Observed Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.first_ack_block_length First Ack block length Unsigned integer, 8 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.first_timestamp First Timestamp Unsigned integer, 4 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.gap_to_next_block Gap to next block Unsigned integer, 1 byte 2.2.0 to 2.2.7
quic.frame_type.ack.largest_acked Largest Acked Unsigned integer, 8 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.largest_acked_delta_time Largest Acked Delta Time Unsigned integer, 2 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.largest_observed Largest Observed Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.frame_type.ack.largest_observed_delta_time Largest Observed Delta time Unsigned integer, 2 bytes 2.0.0 to 2.0.13
quic.frame_type.ack.ll Largest Observed Length Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.missing_packet Missing Packet Packet Number Delta Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.frame_type.ack.mm Missing Packet Length Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.n NACK Boolean 2.0.0 to 2.2.7
quic.frame_type.ack.num_blocks Num blocks Unsigned integer, 1 byte 2.2.0 to 2.2.7
quic.frame_type.ack.num_ranges Num Ranges Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.num_revived Num Revived Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.num_timestamp Num Timestamp Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.range_length Range Length Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.received_entropy Received Entropy Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.ack.revived_packet Revived Packet Packet Number Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.frame_type.ack.t Truncated Boolean 2.0.0 to 2.2.7
quic.frame_type.ack.time_since_largest_acked Time Since Largest Acked Unsigned integer, 4 bytes 2.2.0 to 2.2.7
quic.frame_type.ack.time_since_largest_observed Time since Largest Observed Unsigned integer, 4 bytes 2.0.0 to 2.0.13
quic.frame_type.ack.time_since_previous_timestamp Time since Previous timestamp Unsigned integer, 2 bytes 2.0.0 to 2.2.7
quic.frame_type.ack.u Unused Boolean 2.2.0 to 2.2.7
quic.frame_type.blocked.stream_id Stream ID Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.frame_type.cc.error_code Error code Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.frame_type.cc.reason_phrase Reason phrase Character string 2.0.0 to 2.2.7
quic.frame_type.cc.reason_phrase.length Reason phrase Length Unsigned integer, 2 bytes 2.0.0 to 2.2.7
quic.frame_type.goaway.error_code Error code Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.frame_type.goaway.last_good_stream_id Last Good Stream ID Unsigned integer, 4 bytes 2.2.0 to 2.2.7
quic.frame_type.goaway.reason_phrase Reason phrase Character string 2.0.0 to 2.2.7
quic.frame_type.goaway.reason_phrase.length Reason phrase Length Unsigned integer, 2 bytes 2.0.0 to 2.2.7
quic.frame_type.padding Padding Sequence of bytes 2.0.0 to 2.2.7
quic.frame_type.padding.length Padding Length Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.frame_type.rsts.byte_offset Byte offset Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.frame_type.rsts.error_code Error code Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.frame_type.rsts.stream_id Stream ID Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.frame_type.stream Stream Boolean 2.0.0 to 2.2.7
quic.frame_type.stream.d Data Length Boolean 2.0.0 to 2.2.7
quic.frame_type.stream.f FIN Boolean 2.0.0 to 2.2.7
quic.frame_type.stream.ooo Offset Length Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.stream.ss Stream Length Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.sw.least_unacked_delta Least unacked delta Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.frame_type.sw.send_entropy Send Entropy Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.frame_type.wu.byte_offset Byte offset Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.frame_type.wu.stream_id Stream ID Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.message_authentication_hash Message Authentication Hash Sequence of bytes 2.0.0 to 2.2.7
quic.offset_len Offset Length Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.packet_number Packet Number Unsigned integer, 8 bytes 2.2.0 to 2.2.7
quic.padding Padding Sequence of bytes 2.0.0 to 2.2.7
quic.payload Payload Sequence of bytes 1.12.0 to 2.2.7
quic.prflags Private Flags Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.prflags.entropy Entropy Boolean 2.0.0 to 2.2.7
quic.prflags.fec FEC Boolean 2.0.0 to 2.2.7
quic.prflags.fecg FEC Group Boolean 2.0.0 to 2.2.7
quic.prflags.rsv Reserved Unsigned integer, 1 byte 2.0.0 to 2.2.7
quic.puflags Public Flags Unsigned integer, 1 byte 1.12.0 to 2.2.7
quic.puflags.cid CID Length Boolean 1.12.0 to 2.2.7
quic.puflags.cid.old CID Length Unsigned integer, 1 byte 2.2.0 to 2.2.7
quic.puflags.mpth Multipath Boolean 2.2.0 to 2.2.7
quic.puflags.nonce Diversification nonce Boolean 2.2.0 to 2.2.7
quic.puflags.pkn Packet Number Length Unsigned integer, 1 byte 2.2.0 to 2.2.7
quic.puflags.reset Reset Boolean 1.12.0 to 2.2.7
quic.puflags.rsv Reserved Unsigned integer, 1 byte 1.12.0 to 2.2.7
quic.puflags.seq Sequence Length Unsigned integer, 1 byte 1.12.0 to 2.0.13
quic.puflags.version Version Boolean 1.12.0 to 2.2.7
quic.sequence Sequence Unsigned integer, 8 bytes 1.12.0 to 2.0.13
quic.stream_id Stream ID Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag Tag Character string 2.0.0 to 2.2.7
quic.tag.aead Authenticated encryption algorithms Character string 2.0.0 to 2.2.7
quic.tag.caddr.addr Client IP Address Sequence of bytes 2.2.0 to 2.2.7
quic.tag.caddr.addr.ipv4 Client IP Address IPv4 address 2.2.0 to 2.2.7
quic.tag.caddr.addr.ipv6 Client IP Address IPv6 address 2.2.0 to 2.2.7
quic.tag.caddr.addr.type Client IP Address Type Unsigned integer, 2 bytes 2.2.0 to 2.2.7
quic.tag.caddr.port Client Port (Source) Unsigned integer, 2 bytes 2.2.0 to 2.2.7
quic.tag.ccrt Cached certificates Sequence of bytes 2.0.0 to 2.2.7
quic.tag.ccs Common certificate sets Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.tag.cetv Client encrypted tag-value Sequence of bytes 2.0.0 to 2.2.7
quic.tag.cfcw Initial session/connection Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.copt Connection options Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.crt Certificate chain Sequence of bytes 2.0.0 to 2.2.7
quic.tag.csct Signed cert timestamp Sequence of bytes 2.2.0 to 2.2.7
quic.tag.ctim Client Timestamp Date and time 2.2.0 to 2.2.7
quic.tag.expy Expiry Unsigned integer, 8 bytes 2.0.0 to 2.2.7
quic.tag.icsl Idle connection state Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.irtt Estimated initial RTT Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.kexs Key exchange algorithms Character string 2.0.0 to 2.2.7
quic.tag.length.truncated Expert Info Label 2.0.0 to 2.2.7
quic.tag.mspc Max streams per connection Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.nonc Client nonce Sequence of bytes 2.0.0 to 2.2.7
quic.tag.nonp Client Proof nonce Sequence of bytes 2.2.0 to 2.2.7
quic.tag.obit Server orbit Sequence of bytes 2.0.0 to 2.2.7
quic.tag.pad Padding Sequence of bytes 2.0.0 to 2.2.7
quic.tag.pdmd Proof demand Character string 2.0.0 to 2.2.7
quic.tag.prof Proof (Signature) Sequence of bytes 2.0.0 to 2.2.7
quic.tag.pubs Public value Unsigned integer, 3 bytes 2.0.0 to 2.2.7
quic.tag.rnon Public reset nonce proof Unsigned integer, 8 bytes 2.2.0 to 2.2.7
quic.tag.rrej Reasons for server sending Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.rseq Rejected Packet Number Unsigned integer, 8 bytes 2.2.0 to 2.2.7
quic.tag.scfg Server Config Tag Character string 2.0.0 to 2.2.7
quic.tag.scfg.number Number Server Config Tag Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.scid Server Config ID Sequence of bytes 2.0.0 to 2.2.7
quic.tag.scls Silently close on timeout Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.sfcw Initial stream flow control Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.sni Server Name Indication Character string 2.0.0 to 2.2.7
quic.tag.sno Server nonce Sequence of bytes 2.0.0 to 2.2.7
quic.tag.srbf Socket receive buffer Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.stk Source-address token Sequence of bytes 2.0.0 to 2.2.7
quic.tag.tcid Connection ID truncation Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag.uaid Client\'s User Agent ID Character string 2.0.0 to 2.2.7
quic.tag.undecoded Expert Info Label 2.0.0 to 2.2.7
quic.tag.unknown Unknown tag Sequence of bytes 2.0.0 to 2.2.7
quic.tag.unknown.data Expert Info Label 2.2.0 to 2.2.7
quic.tag.version Version Character string 2.0.0 to 2.2.7
quic.tag.xlct Expected leaf certificate Sequence of bytes 2.2.0 to 2.2.7
quic.tag_number Tag Number Unsigned integer, 2 bytes 2.0.0 to 2.2.7
quic.tag_offset_end Tag offset end Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag_offset_length Tag length Unsigned integer, 4 bytes 2.0.0 to 2.2.7
quic.tag_type Tag Type Character string 2.0.0 to 2.2.7
quic.tag_value Tag/value Sequence of bytes 2.0.0 to 2.2.7
quic.tags Tag/value Label 2.0.0 to 2.2.7
quic.version Version Character string 1.12.0 to 2.2.7
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More

I need to capture wireless traffic...

ANSWER: AirPcap™ 802.11 Packet Capture
  • • WLAN packet capture and transmission
  • • Full 802.11 a/b/g/n support
  • • View management, control and data frames
  • • Multi-channel aggregation (with multiple adapters)
Learn More Buy Now