Display Filter Reference: Linux cooked-mode capture
Protocol field name: sll
Versions: 1.0.0 to 3.2.1
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| sll.etype | Protocol | Unsigned integer, 2 bytes | 1.0.0 to 3.2.1 |
| sll.gretype | Protocol | Unsigned integer, 2 bytes | 1.0.0 to 3.2.1 |
| sll.halen | Link-layer address length | Unsigned integer, 2 bytes | 1.0.0 to 3.2.1 |
| sll.hatype | Link-layer address type | Unsigned integer, 2 bytes | 1.0.0 to 3.2.1 |
| sll.ltype | Protocol | Unsigned integer, 2 bytes | 1.0.0 to 3.2.1 |
| sll.pkttype | Packet type | Unsigned integer, 2 bytes | 1.0.0 to 3.2.1 |
| sll.src.eth | Source | Ethernet or other MAC address | 1.0.0 to 3.2.1 |
| sll.src.ipv4 | Source | IPv4 address | 1.0.0 to 3.2.1 |
| sll.src.other | Source | Sequence of bytes | 1.0.0 to 3.2.1 |
| sll.trailer | Trailer | Sequence of bytes | 1.0.0 to 3.2.1 |
| sll.unused | Unused | Sequence of bytes | 2.4.0 to 3.2.1 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance