Display Filter Reference: Slow Protocols

Protocol field name: slow

Versions: 1.0.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
slow.esmc.event_flag Event Flag Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.itu_oui ITU-OUI Sequence of bytes 1.4.0 to 1.4.15
slow.esmc.itu_subtype ITU Subtype Unsigned integer, 2 bytes 1.4.0 to 1.4.15
slow.esmc.padding Padding Sequence of bytes 1.4.0 to 1.12.13
slow.esmc.ql SSM Code Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.ql.invalid Expert Info Label 1.12.0 to 1.12.13
slow.esmc.reserved Reserved Unsigned integer, 4 bytes 1.4.0 to 1.12.13
slow.esmc.timestamp Timestamp (ns) Signed integer, 4 bytes 1.4.0 to 1.12.13
slow.esmc.timestamp_valid_flag Timestamp Valid Flag Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.tlv ESMC TLV Label 1.4.0 to 1.12.13
slow.esmc.tlv_length TLV Length Unsigned integer, 2 bytes 1.4.0 to 1.12.13
slow.esmc.tlv_length.bad Expert Info Label 1.12.0 to 1.12.13
slow.esmc.tlv_ql_unused Unused Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.tlv_ql_unused.not_zero Expert Info Label 1.12.0 to 1.12.13
slow.esmc.tlv_ts_reserved Reserved Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.tlv_type TLV Type Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.tlv_type.decoded_as_ql_type Expert Info Label 1.12.0 to 1.12.13
slow.esmc.tlv_type.decoded_as_timestamp Expert Info Label 1.12.0 to 1.12.13
slow.esmc.tlv_type.not_timestamp Expert Info Label 1.12.0 to 1.12.13
slow.esmc.tlv_type.ql_type_not_first Expert Info Label 1.12.0 to 1.12.13
slow.esmc.version Version Unsigned integer, 1 byte 1.4.0 to 1.12.13
slow.esmc.version.compliance Expert Info Label 1.12.0 to 1.12.13
slow.lacp.actorInfo Actor Information Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.actorInfoLen Actor Information Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.actorKey Actor Key Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.actorPort Actor Port Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.actorPortPriority Actor Port Priority Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.actorState Actor State Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.actorState.activity LACP Activity Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.aggregation Aggregation Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.collecting Collecting Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.defaulted Defaulted Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.distributing Distributing Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.expired Expired Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.synchronization Synchronization Boolean 1.0.0 to 1.12.13
slow.lacp.actorState.timeout LACP Timeout Boolean 1.0.0 to 1.12.13
slow.lacp.actorSysPriority Actor System Priority Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.actorSystem Actor System Ethernet or other MAC address 1.0.0 to 1.12.13
slow.lacp.coll_reserved Reserved Sequence of bytes 1.0.0 to 1.12.13
slow.lacp.collectorInfo Collector Information Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.collectorInfoLen Collector Information Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.collectorMaxDelay Collector Max Delay Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.partnerInfo Partner Information Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.partnerInfoLen Partner Information Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.partnerKey Partner Key Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.partnerPort Partner Port Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.partnerPortPriority Partner Port Priority Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.partnerState Partner State Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.partnerState.activity LACP Activity Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.aggregation Aggregation Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.collecting Collecting Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.defaulted Defaulted Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.distributing Distributing Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.expired Expired Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.synchronization Synchronization Boolean 1.0.0 to 1.12.13
slow.lacp.partnerState.timeout LACP Timeout Boolean 1.0.0 to 1.12.13
slow.lacp.partnerSysPriority Partner System Priority Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.lacp.partnerSystem Partner System Ethernet or other MAC address 1.0.0 to 1.12.13
slow.lacp.reserved Reserved Sequence of bytes 1.0.0 to 1.12.13
slow.lacp.term_reserved Reserved Sequence of bytes 1.0.0 to 1.12.13
slow.lacp.termInfo Terminator Information Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.termLen Terminator Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.lacp.version LACP Version Number Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.marker.requesterPort Requester Port Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.marker.requesterSystem Requester System Ethernet or other MAC address 1.0.0 to 1.12.13
slow.marker.requesterTransId Requester Transaction ID Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.marker.tlvLen TLV Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.marker.tlvType TLV Type Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.marker.version Version Number Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.code OAMPDU code Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.event.efeErrors Errored Frames Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efeThreshold Errored Frame Threshold Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efeTotalErrors Error Running Total Unsigned integer, 8 bytes 1.0.0 to 1.12.13
slow.oam.event.efeTotalEvents Event Running Total Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efeWindow Errored Frame Window Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.event.efpeThreshold Errored Frame Threshold Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efpeTotalErrors Error Running Total Unsigned integer, 8 bytes 1.0.0 to 1.12.13
slow.oam.event.efpeTotalEvents Event Running Total Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efpeWindow Errored Frame Window Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efsseThreshold Errored Frame Threshold Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.event.efsseTotalErrors Error Running Total Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efsseTotalEvents Event Running Total Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.efsseWindow Errored Frame Window Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.event.espeErrors Errored Symbols Unsigned integer, 8 bytes 1.0.0 to 1.12.13
slow.oam.event.espeThreshold Errored Symbol Threshold Unsigned integer, 8 bytes 1.0.0 to 1.12.13
slow.oam.event.espeTotalErrors Error Running Total Unsigned integer, 8 bytes 1.0.0 to 1.12.13
slow.oam.event.espeTotalEvents Event Running Total Unsigned integer, 4 bytes 1.0.0 to 1.12.13
slow.oam.event.espeWindow Errored Symbol Window Unsigned integer, 8 bytes 1.0.0 to 1.12.13
slow.oam.event.length Event Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.event.length.bad Expert Info Label 1.12.0 to 1.12.13
slow.oam.event.sequence Sequence Number Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.event.timestamp Event Timestamp (100ms) Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.event.type Event Type Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.flags Flags Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.flags.criticalEvent Critical Event Boolean 1.0.0 to 1.12.13
slow.oam.flags.dyingGasp Dying Gasp Boolean 1.0.0 to 1.12.13
slow.oam.flags.linkFault Link Fault Boolean 1.0.0 to 1.12.13
slow.oam.flags.localEvaluating Local Evaluating Boolean 1.0.0 to 1.12.13
slow.oam.flags.localStable Local Stable Boolean 1.0.0 to 1.12.13
slow.oam.flags.remoteEvaluating Remote Evaluating Boolean 1.0.0 to 1.12.13
slow.oam.flags.remoteStable Remote Stable Boolean 1.0.0 to 1.12.13
slow.oam.frame.rate.max Minimum OAM Rate Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.frame.rate.min Maximum OAM Rate Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.info.length TLV Length Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.info.oamConfig OAM Configuration Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.info.oamConfig.mode OAM Mode Boolean 1.0.0 to 1.12.13
slow.oam.info.oampduConfig Max OAMPDU Size Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.info.oui Organizationally Unique Identifier Sequence of bytes 1.0.0 to 1.12.13
slow.oam.info.revision TLV Revision Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.info.state OAM DTE States Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.info.state.muxiplexer Muxiplexer Action Boolean 1.0.0 to 1.12.13
slow.oam.info.state.parser Parser Action Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.info.type Type Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.info.vendor Vendor Specific Information Sequence of bytes 1.0.0 to 1.12.13
slow.oam.info.version TLV Version Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.lpbk.commands Commands Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.lpbk.commands.disable Disable Remote Loopback Boolean 1.0.0 to 1.12.13
slow.oam.lpbk.commands.enable Enable Remote Loopback Boolean 1.0.0 to 1.12.13
slow.oam.mll.b Bidirectional Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.mll.do Downstream-only Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.queue_configuration.logical_links.upstream Upstream Logical Links Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.queue_configuration.ports.downstream Downstream Ports Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.queue_configuration.queues Number of queues Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.queue_configuration.size Queue size (in 4KB units) Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.report.threshold Report Threshold Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.report.threshold.queue Number of Queue Sets Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.report.threshold.queue.values Report Values Per Queue Set Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.response.eth OAM Response Value Ethernet or other MAC address 1.12.0 to 1.12.13
slow.oam.response.int OAM Response Value Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.s1.autoneg Auto-Negotiation Capability Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.s1.autoneg.10 10 Mbps Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.100 100 Mbps Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.1000 1000 Mbps Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.10000 10Gbps Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.fc Flow Control Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.fd Full Duplex Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.hd Half Duplex Boolean 1.12.0 to 1.12.13
slow.oam.s1.autoneg.mdi Auto MDI/MDI-X Boolean 1.12.0 to 1.12.13
slow.oam.user.port.object UNI Number Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.fc Field Code Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.fi Field Instance Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.lsbm LSB Mask Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.msbm MSB Mask Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.mv Match Value Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.mvl Match Value Length Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.clause.operator Operator Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.header.precedence Precedence Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr Rule Result Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.cd Field Code not to delete Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.ci Field Code not to insert Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.copy Field Code to set from field used in last clause of rule Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.delete Field Code to remove from frame Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.insert Field Code to insert into frame Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.queue {port type, port instance, link, queue} Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.replace Field Code to replace Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.set.fc Field Code Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.result.rr.set.fi Field Instance Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.user.port.object.subtype Subtype Unsigned integer, 2 bytes 1.12.0 to 1.12.13
slow.oam.variable.attribute Leaf Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.variable.binding Leaf Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.variable.branch Branch Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.variable.descriptor Variable Descriptor Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.variable.indication Variable indication Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.variable.object Leaf Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.variable.package Leaf Unsigned integer, 2 bytes 1.0.0 to 1.12.13
slow.oam.variable.response.code Response Code Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.oam.variable.value Variable Value Sequence of bytes 1.0.0 to 1.12.13
slow.oam.variable.width Variable Width Unsigned integer, 1 byte 1.0.0 to 1.12.13
slow.oam.vendor.specific.opcode DPoE Opcode Unsigned integer, 1 byte 1.12.0 to 1.12.13
slow.ossp.itu.subtype ITU-T OSSP Subtype Unsigned integer, 2 bytes 1.6.0 to 1.12.13
slow.ossp.oui OUI Sequence of bytes 1.6.0 to 1.12.13
slow.reserved_bits_must_be_set_to_all_zero Expert Info Label 1.12.0 to 1.12.13
slow.subtype Slow Protocols subtype Unsigned integer, 1 byte 1.0.0 to 2.6.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More