Display Filter Reference: Session Announcement Protocol
Protocol field name: sap
Versions: 1.0.0 to 2.6.1
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| sap.auth | Authentication data | Label | 1.0.0 to 2.6.1 |
| sap.auth.data_padding | Authentication data padding | Sequence of bytes | 1.12.0 to 2.6.1 |
| sap.auth.data_padding.len | Authentication data pad count (bytes) | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| sap.auth.flags | Authentication data flags | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| sap.auth.flags.p | Padding Bit | Boolean | 1.0.0 to 2.6.1 |
| sap.auth.flags.t | Authentication Type | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| sap.auth.flags.v | Version Number | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| sap.auth.len | Authentication Length | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| sap.auth.subheader | Authentication subheader | Sequence of bytes | 1.12.0 to 2.6.1 |
| sap.bogus_authentication_or_pad_length | Bogus authentication length | Label | 1.12.0 to 2.6.1 |
| sap.compressed | The rest of the packet is compressed | Label | 1.12.0 to 2.6.1 |
| sap.compressed_and_encrypted | The rest of the packet is compressed and encrypted | Label | 1.12.0 to 2.6.1 |
| sap.encrypted | The rest of the packet is encrypted | Label | 1.12.0 to 2.6.1 |
| sap.flags | Flags | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| sap.flags.a | Address Type | Boolean | 1.0.0 to 2.6.1 |
| sap.flags.c | Compression Bit | Boolean | 1.0.0 to 2.6.1 |
| sap.flags.e | Encryption Bit | Boolean | 1.0.0 to 2.6.1 |
| sap.flags.r | Reserved | Boolean | 1.0.0 to 2.6.1 |
| sap.flags.t | Message Type | Boolean | 1.0.0 to 2.6.1 |
| sap.flags.v | Version Number | Unsigned integer, 1 byte | 1.0.0 to 2.6.1 |
| sap.message_identifier_hash | Message Identifier Hash | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| sap.originating_source | Originating Source | IPv4 address | 1.12.0 to 2.6.1 |
| sap.originating_source.ipv6 | Originating Source | IPv6 address | 2.2.0 to 2.6.1 |
| sap.payload_type | Payload type | Character string | 1.12.0 to 2.6.1 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ NetShark appliance
- • Troubleshoot problems faster
- • Quickly identify the applications running on your network
- • Monitor your virtual machine traffic