Display Filter Reference: Session Initiation Protocol

Protocol field name: sip

Versions: 1.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
raw_sip.line Raw SIP Line Character string 1.0.0 to 1.0.16
sip.Accept Accept Character string 1.0.0 to 2.6.5
sip.Accept-Contact Accept-Contact Character string 1.0.0 to 2.6.5
sip.Accept-Encoding Accept-Encoding Character string 1.0.0 to 2.6.5
sip.Accept-Language Accept-Language Character string 1.0.0 to 2.6.5
sip.Accept-Resource-Priority Accept-Resource-Priority Character string 1.0.0 to 2.6.5
sip.Alert-Info Alert-Info Character string 1.0.0 to 2.6.5
sip.Allow Allow Character string 1.0.0 to 2.6.5
sip.Allow-Events Allow-Events Character string 1.0.0 to 2.6.5
sip.Answer-Mode Answer-Mode Character string 1.2.0 to 2.6.5
sip.auth Authentication Character string 1.0.0 to 2.6.5
sip.auth.algorithm Algorithm Character string 1.0.0 to 2.6.5
sip.auth.auts Authentication Token Character string 1.0.0 to 2.6.5
sip.auth.ck Cyphering Key Character string 1.0.0 to 2.6.5
sip.auth.cnonce CNonce Value Character string 1.0.0 to 2.6.5
sip.auth.digest.response Digest Authentication Response Character string 1.0.0 to 2.6.5
sip.auth.domain Authentication Domain Character string 1.0.0 to 2.6.5
sip.auth.ik Integrity Key Character string 1.0.0 to 2.6.5
sip.auth.nc Nonce Count Character string 1.0.0 to 2.6.5
sip.auth.nextnonce Next Nonce Character string 1.0.0 to 2.6.5
sip.auth.nonce Nonce Value Character string 1.0.0 to 2.6.5
sip.auth.opaque Opaque Value Character string 1.0.0 to 2.6.5
sip.auth.qop QOP Character string 1.0.0 to 2.6.5
sip.auth.realm Realm Character string 1.0.0 to 2.6.5
sip.auth.rspauth Response auth Character string 1.0.0 to 2.6.5
sip.auth.scheme Authentication Scheme Character string 1.0.0 to 2.6.5
sip.auth.stale Stale Flag Character string 1.0.0 to 2.6.5
sip.auth.uri Authentication URI Character string 1.0.0 to 2.6.5
sip.auth.username Username Character string 1.0.0 to 2.6.5
sip.Authentication-Info Authentication-Info Character string 1.0.0 to 2.6.5
sip.Authorization Authorization Character string 1.0.0 to 2.6.5
sip.authorization.invalid Invalid authorization response for known credentials Label 2.4.0 to 2.6.5
sip.Call-ID Call-ID Character string 1.0.0 to 2.6.5
sip.Call-Info Call-Info Character string 1.0.0 to 2.6.5
sip.Contact Contact Character string 1.0.0 to 2.6.5
sip.contact.addr SIP contact address Character string 1.0.0 to 1.2.18
sip.contact.binding Contact Binding Character string 1.0.0 to 1.2.18
sip.contact.host Contact URI Host Part Character string 1.4.0 to 2.6.5
sip.contact.param Contact URI parameter Character string 1.8.0 to 2.6.5
sip.contact.parameter Contact parameter Character string 1.4.0 to 2.6.5
sip.contact.port Contact URI Host Port Character string 1.4.0 to 2.6.5
sip.contact.uri Contact URI Character string 1.4.0 to 2.6.5
sip.contact.user Contact URI User Part Character string 1.4.0 to 2.6.5
sip.Content-Disposition Content-Disposition Character string 1.0.0 to 2.6.5
sip.Content-Encoding Content-Encoding Character string 1.0.0 to 2.6.5
sip.Content-Language Content-Language Character string 1.0.0 to 2.6.5
sip.Content-Length Content-Length Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.Content-Type Content-Type Character string 1.0.0 to 2.6.5
sip.content_length.invalid Invalid content_length Label 2.4.0 to 2.6.5
sip.continuation Continuation data Sequence of bytes 2.0.0 to 2.6.5
sip.CSeq CSeq Character string 1.0.0 to 2.6.5
sip.CSeq.method Method Character string 1.0.0 to 2.6.5
sip.CSeq.seq Sequence Number Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.Date Date Character string 1.0.0 to 2.6.5
sip.display.info SIP Display info Character string 1.0.0 to 2.6.5
sip.Diversion Diversion Character string 1.6.0 to 2.6.5
sip.Error-Info Error-Info Character string 1.0.0 to 2.6.5
sip.ETag ETag Character string 1.0.0 to 2.6.5
sip.Event Event Character string 1.0.0 to 2.6.5
sip.Expires Expires Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.feature_cap Feature Cap Character string 2.4.0 to 2.6.5
sip.feature_caps Feature-Caps Character string 1.10.0 to 2.6.5
sip.Flow-Timer Flow-Timer Character string 1.6.0 to 2.6.5
sip.From From Character string 1.0.0 to 2.6.5
sip.from.addr SIP from address Character string 1.0.0 to 2.6.5
sip.from.host SIP from address Host Part Character string 1.2.0 to 2.6.5
sip.from.param SIP From URI parameter Character string 1.8.0 to 2.6.5
sip.from.port SIP from address Host Port Character string 1.2.0 to 2.6.5
sip.from.tag SIP from tag Character string 1.8.0 to 2.6.5
sip.from.user SIP from address User Part Character string 1.2.0 to 2.6.5
sip.Geolocation Geolocation Character string 1.10.0 to 2.6.5
sip.Geolocation_Routing Geolocation-Routing Character string 1.10.0 to 2.6.5
sip.header_no_colon Header has no colon after the name Label 2.0.0 to 2.6.5
sip.header_not_terminated Header not terminated by empty line (CRLF) Label 1.12.0 to 2.6.5
sip.History-Info History-Info Character string 1.0.0 to 2.6.5
sip.icid_gen_addr icid-gen-addr Character string 2.6.0 to 2.6.5
sip.icid_value icid-value Character string 2.6.0 to 2.6.5
sip.Identity Identity Character string 1.0.0 to 2.6.5
sip.Identity-info Identity-info Character string 1.0.0 to 2.6.5
sip.If_Match If_Match Character string 1.0.0 to 2.6.5
sip.In-Reply-To In-Reply-To Character string 1.0.0 to 2.6.5
sip.Info-Package Info-Package Character string 1.6.0 to 2.6.5
sip.Join Join Character string 1.0.0 to 2.6.5
sip.Max-Breadth Max-Breadth Unsigned integer, 4 bytes 1.2.0 to 2.6.5
sip.Max-Forwards Max-Forwards Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.Method Method Character string 1.0.0 to 2.6.5
sip.MIME-Version MIME-Version Character string 1.0.0 to 2.6.5
sip.Min-Expires Min-Expires Character string 1.0.0 to 2.6.5
sip.Min-SE Min-SE Character string 1.0.0 to 2.6.5
sip.msg_body Message Body Label 1.0.0 to 2.6.5
sip.msg_hdr Message Header Character string 1.0.0 to 2.6.5
sip.Organization Organization Character string 1.0.0 to 2.6.5
sip.P-Access-Network-Info P-Access-Network-Info Character string 1.0.0 to 2.6.5
sip.P-Access-Network-Info.access-type access-type Character string 2.2.0 to 2.6.5
sip.P-Access-Network-Info.utran-cell-id-3gpp utran-cell-id-3gpp Character string 2.2.0 to 2.6.5
sip.P-Answer-State P-Answer-State Character string 1.0.0 to 2.6.5
sip.P-Asserted-Identity P-Asserted-Identity Character string 1.0.0 to 2.6.5
sip.P-Asserted-Service P-Asserted-Service Character string 1.6.0 to 2.6.5
sip.P-Associated-URI P-Associated-URI Character string 1.0.0 to 2.6.5
sip.P-Called-Party-ID P-Called-Party-ID Character string 1.0.0 to 2.6.5
sip.P-Charging-Function-Addresses P-Charging-Function-Addresses Character string 1.0.0 to 2.6.5
sip.P-Charging-Vector P-Charging-Vector Character string 1.0.0 to 2.6.5
sip.P-DCS-Billing-Info P-DCS-Billing-Info Character string 1.0.0 to 2.6.5
sip.P-DCS-LAES P-DCS-LAES Character string 1.0.0 to 2.6.5
sip.P-DCS-OSPS P-DCS-OSPS Character string 1.0.0 to 2.6.5
sip.P-DCS-Redirect P-DCS-Redirect Character string 1.0.0 to 2.6.5
sip.P-DCS-Trace-Party-ID P-DCS-Trace-Party-ID Character string 1.0.0 to 2.6.5
sip.P-Early-Media P-Early-Media Character string 1.0.0 to 2.6.5
sip.P-Media-Authorization P-Media-Authorization Character string 1.0.0 to 2.6.5
sip.P-Preferred-Identity P-Preferred-Identity Character string 1.0.0 to 2.6.5
sip.P-Preferred-Service P-Preferred-Service Character string 1.6.0 to 2.6.5
sip.P-Profile-Key P-Profile-Key Character string 1.0.0 to 2.6.5
sip.P-Refused-URI-List P-Refused-URI-List Character string 1.4.0 to 2.6.5
sip.P-Served-User P-Served-User Character string 1.4.0 to 2.6.5
sip.P-User-Database P-User-Database Character string 1.0.0 to 2.6.5
sip.P-Visited-Network-ID P-Visited-Network-ID Character string 1.0.0 to 2.6.5
sip.pai.addr SIP PAI Address Character string 1.2.0 to 2.6.5
sip.pai.host SIP PAI Host Part Character string 1.2.0 to 2.6.5
sip.pai.param SIP PAI URI parameter Character string 1.8.0 to 2.6.5
sip.pai.port SIP PAI Host Port Character string 1.2.0 to 2.6.5
sip.pai.user SIP PAI User Part Character string 1.2.0 to 2.6.5
sip.Path Path Character string 1.0.0 to 2.6.5
sip.Path.host Path Host Part Character string 2.0.0 to 2.6.5
sip.Path.param Path URI parameter Character string 2.0.0 to 2.6.5
sip.Path.port Path Host Port Character string 2.0.0 to 2.6.5
sip.Path.uri Path URI Character string 2.0.0 to 2.6.5
sip.Path.user Path Userinfo Character string 2.0.0 to 2.6.5
sip.Permission-Missing Permission-Missing Character string 1.2.0 to 2.6.5
sip.pmiss.addr SIP PMISS Address Character string 1.2.0 to 2.6.5
sip.pmiss.host SIP PMISS Host Part Character string 1.2.0 to 2.6.5
sip.pmiss.param SIP PMISS URI parameter Character string 1.8.0 to 2.6.5
sip.pmiss.port SIP PMISS Host Port Character string 1.2.0 to 2.6.5
sip.pmiss.user SIP PMISS User Part Character string 1.2.0 to 2.6.5
sip.Policy_Contact Policy-Contact Character string 1.10.0 to 2.6.5
sip.Policy_ID Policy-ID Character string 1.10.0 to 2.6.5
sip.ppi.addr SIP PPI Address Character string 1.2.0 to 2.6.5
sip.ppi.host SIP PPI Host Part Character string 1.2.0 to 2.6.5
sip.ppi.param SIP PPI URI parameter Character string 1.8.0 to 2.6.5
sip.ppi.port SIP PPI Host Port Character string 1.2.0 to 2.6.5
sip.ppi.user SIP PPI User Part Character string 1.2.0 to 2.6.5
sip.Priority Priority Character string 1.0.0 to 2.6.5
sip.Priv-Answer-mode Priv-Answer-mode Character string 1.2.0 to 2.6.5
sip.Privacy Privacy Character string 1.0.0 to 2.6.5
sip.Proxy-Authenticate Proxy-Authenticate Character string 1.0.0 to 2.6.5
sip.Proxy-Authorization Proxy-Authorization Character string 1.0.0 to 2.6.5
sip.Proxy-Require Proxy-Require Character string 1.0.0 to 2.6.5
sip.r-uri Request-URI Character string 1.2.0 to 2.6.5
sip.r-uri.host Request-URI Host Part Character string 1.2.0 to 2.6.5
sip.r-uri.param Request URI parameter Character string 1.8.0 to 2.6.5
sip.r-uri.port Request-URI Host Port Character string 1.2.0 to 2.6.5
sip.r-uri.user Request-URI User Part Character string 1.2.0 to 2.6.5
sip.RAck RAck Character string 1.0.0 to 2.6.5
sip.RAck.CSeq.method CSeq Method Character string 1.0.0 to 2.6.5
sip.RAck.CSeq.seq CSeq Sequence Number Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.RAck.RSeq.seq RSeq Sequence Number Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.Reason Reason Character string 1.0.0 to 2.6.5
sip.Reason-Phrase Reason-Phrase Character string 1.10.0 to 2.6.5
sip.reason_cause Cause Unsigned integer, 4 bytes 2.0.0 to 2.2.17
sip.reason_cause_other Cause Unsigned integer, 4 bytes 2.4.0 to 2.6.5
sip.reason_cause_q850 Cause Unsigned integer, 4 bytes 2.4.0 to 2.6.5
sip.reason_cause_sip Cause Unsigned integer, 4 bytes 2.4.0 to 2.6.5
sip.reason_protocols Reason protocols Character string 2.0.0 to 2.6.5
sip.reason_text Text Character string 2.4.0 to 2.6.5
sip.Record-Route Record-Route Character string 1.0.0 to 2.6.5
sip.Record-Route.host Record-Route Host Part Character string 1.8.0 to 2.6.5
sip.Record-Route.param Record-Route URI parameter Character string 1.8.0 to 2.6.5
sip.Record-Route.port Record-Route Host Port Character string 1.8.0 to 2.6.5
sip.Record-Route.uri Record-Route URI Character string 1.8.0 to 2.6.5
sip.Record-Route.user Record-Route Userinfo Character string 1.8.0 to 2.6.5
sip.Recv-Info Recv-Info Character string 1.6.0 to 2.6.5
sip.Refer-Sub Refer-Sub Character string 1.0.0 to 2.6.5
sip.Refer-To Refer-To Character string 1.0.0 to 2.6.5
sip.Refered-by Refered By Character string 1.0.0 to 2.6.5
sip.Reject-Contact Reject-Contact Character string 1.0.0 to 2.6.5
sip.release-time Release Time (ms) Unsigned integer, 4 bytes 1.2.0 to 2.6.5
sip.Replaces Replaces Character string 1.0.0 to 2.6.5
sip.Reply-To Reply-To Character string 1.0.0 to 2.6.5
sip.Request-Disposition Request-Disposition Character string 1.0.0 to 2.6.5
sip.Request-Line Request-Line Character string 1.0.0 to 2.6.5
sip.Require Require Character string 1.0.0 to 2.6.5
sip.resend Resent Packet Boolean 1.0.0 to 2.6.5
sip.resend-original Suspected resend of frame Frame number 1.0.0 to 2.6.5
sip.Resource-Priority Resource-Priority Character string 1.0.0 to 2.6.5
sip.response-request Request Frame Frame number 1.2.0 to 2.6.5
sip.response-time Response Time (ms) Unsigned integer, 4 bytes 1.2.0 to 2.6.5
sip.response.unusual Expert Info Label 1.12.0 to 2.0.16
sip.Retry-After Retry-After Character string 1.0.0 to 2.6.5
sip.Route Route Character string 1.0.0 to 2.6.5
sip.Route.host Route Host Part Character string 1.8.0 to 2.6.5
sip.Route.param Route URI parameter Character string 1.8.0 to 2.6.5
sip.Route.port Route Host Port Character string 1.8.0 to 2.6.5
sip.Route.uri Route URI Character string 1.8.0 to 2.6.5
sip.Route.user Route Userinfo Character string 1.8.0 to 2.6.5
sip.RSeq RSeq Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.sec_mechanism [Security-mechanism] Character string 1.12.0 to 2.6.5
sip.sec_mechanism.alg alg Character string 1.12.0 to 2.6.5
sip.sec_mechanism.ealg ealg Character string 1.12.0 to 2.6.5
sip.sec_mechanism.malformed SIP Security-mechanism header malformed Label 1.12.0 to 2.6.5
sip.sec_mechanism.port1 port1 Unsigned integer, 2 bytes 1.12.0 to 2.6.5
sip.sec_mechanism.port2 port2 Unsigned integer, 2 bytes 1.12.0 to 2.6.5
sip.sec_mechanism.port_c port-c Unsigned integer, 2 bytes 1.12.0 to 2.6.5
sip.sec_mechanism.port_s port-s Unsigned integer, 2 bytes 1.12.0 to 2.6.5
sip.sec_mechanism.prot prot Character string 1.12.0 to 2.6.5
sip.sec_mechanism.spi_c spi-c Unsigned integer, 4 bytes 1.12.0 to 2.6.5
sip.sec_mechanism.spi_s spi-s Unsigned integer, 4 bytes 1.12.0 to 2.6.5
sip.Security-Client Security-Client Character string 1.0.0 to 2.6.5
sip.Security-Server Security-Server Character string 1.0.0 to 2.6.5
sip.Security-Verify Security-Verify Character string 1.0.0 to 2.6.5
sip.Server Server Character string 1.0.0 to 2.6.5
sip.Service-Route Service-Route Character string 1.0.0 to 2.6.5
sip.Service-Route.host Service-Route Host Part Character string 2.0.0 to 2.6.5
sip.Service-Route.param Service-Route URI parameter Character string 2.0.0 to 2.6.5
sip.Service-Route.port Service-Route Host Port Character string 2.0.0 to 2.6.5
sip.Service-Route.uri Service-Route URI Character string 2.0.0 to 2.6.5
sip.Service-Route.user Service-Route Userinfo Character string 2.0.0 to 2.6.5
sip.service_priority Service Priority Character string 2.4.0 to 2.6.5
sip.Session-Expires Session-Expires Character string 1.0.0 to 2.6.5
sip.Session-ID Session-ID Character string 2.0.0 to 2.6.5
sip.Session-ID.local_uuid local-uuid Globally Unique Identifier 2.0.0 to 2.6.5
sip.Session-ID.param param Character string 2.0.0 to 2.6.5
sip.Session-ID.remote_uuid remote-uuid Globally Unique Identifier 2.0.0 to 2.6.5
sip.Session-ID.sess_id sess-id Sequence of bytes 2.0.0 to 2.6.5
sip.Status-Code Status-Code Unsigned integer, 4 bytes 1.0.0 to 2.6.5
sip.Status-Code.invalid Invalid Status-Code Label 2.4.0 to 2.6.5
sip.Status-Line Status-Line Character string 1.0.0 to 2.6.5
sip.Subject Subject Character string 1.0.0 to 2.6.5
sip.Subscription-State Subscription-State Character string 1.0.0 to 2.6.5
sip.Supported Supported Character string 1.0.0 to 2.6.5
sip.Suppress_If_Match Suppress-If-Match Character string 1.10.0 to 2.6.5
sip.tag SIP tag Character string 1.0.0 to 2.6.5
sip.Target-Dialog Target-Dialog Character string 1.0.0 to 2.6.5
sip.tc.addr SIP TC Address Character string 1.2.0 to 2.6.5
sip.tc.host SIP TC Host Part Character string 1.2.0 to 2.6.5
sip.tc.param SIP TC URI parameter Character string 1.8.0 to 2.6.5
sip.tc.port SIP TC Host Port Character string 1.2.0 to 2.6.5
sip.tc.target-uri SIP TC Target URI Character string 1.2.0 to 2.6.5
sip.tc.user SIP TC User Part Character string 1.2.0 to 2.6.5
sip.Timestamp Timestamp Character string 1.0.0 to 2.6.5
sip.To To Character string 1.0.0 to 2.6.5
sip.to.addr SIP to address Character string 1.0.0 to 2.6.5
sip.to.host SIP to address Host Part Character string 1.2.0 to 2.6.5
sip.to.param SIP To URI parameter Character string 1.8.0 to 2.6.5
sip.to.port SIP to address Host Port Character string 1.2.0 to 2.6.5
sip.to.tag SIP to tag Character string 1.8.0 to 2.6.5
sip.to.user SIP to address User Part Character string 1.2.0 to 2.6.5
sip.Trigger-Consent Trigger-Consent Character string 1.2.0 to 2.6.5
sip.unrecognized_header Unrecognised SIP header Label 1.12.0 to 2.6.5
sip.Unsupported Unsupported Character string 1.0.0 to 2.6.5
sip.uri URI Character string 1.0.0 to 1.2.18
sip.User-Agent User-Agent Character string 1.0.0 to 2.6.5
sip.uui User-to-User Character string 1.8.0 to 2.6.5
sip.Via Via Character string 1.0.0 to 2.6.5
sip.Via.branch Branch Character string 1.0.0 to 2.6.5
sip.Via.comp Comp Character string 1.0.0 to 2.6.5
sip.Via.maddr Maddr Character string 1.0.0 to 2.6.5
sip.Via.oc Overload Control Character string 2.4.0 to 2.6.5
sip.Via.oc_algo Overload Control Algorithm Character string 2.4.0 to 2.6.5
sip.Via.oc_seq Overload Control Sequence Character string 2.4.0 to 2.6.5
sip.Via.oc_seq.ts Overload Control Sequence Time Stamp Date and time 2.6.0 to 2.6.5
sip.Via.oc_val Overload Control Value Unsigned integer, 4 bytes 2.6.0 to 2.6.5
sip.Via.oc_validity Overload Control Validity Character string 2.4.0 to 2.6.5
sip.Via.received Received Character string 1.0.0 to 2.6.5
sip.Via.rport RPort Character string 1.0.0 to 2.6.5
sip.Via.sent-by.address Sent-by Address Character string 1.0.0 to 2.6.5
sip.Via.sent-by.port Sent-by port Unsigned integer, 2 bytes 1.0.0 to 2.6.5
sip.Via.sent-by.port.invalid Invalid SIP Via sent-by-port Label 2.4.0 to 2.6.5
sip.Via.sigcomp-id Sigcomp identifier Character string 1.0.0 to 2.6.5
sip.Via.transport Transport Character string 1.0.0 to 2.6.5
sip.Via.ttl TTL Character string 1.0.0 to 2.6.5
sip.Warning Warning Character string 1.0.0 to 2.6.5
sip.WWW-Authenticate WWW-Authenticate Character string 1.0.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More