ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Display Filter Reference: Simple Mail Transfer Protocol

Protocol field name: smtp

Versions: 1.0.0 to 4.2.5

Back to Display Filter Reference

Field name Description Type Versions
smtp.auth.passwordPasswordCharacter string1.10.0 to 4.2.5
smtp.auth.usernameUsernameCharacter string1.10.0 to 4.2.5
smtp.auth.username_passwordUsername/PasswordCharacter string2.0.1 to 4.2.5
smtp.base64_decodebase64 decode failed or is not enabled (check SMTP preferences)Label2.0.1 to 4.2.5
smtp.command_lineCommand LineCharacter string1.8.0 to 4.2.5 fragmentFrame number1.0.0 to 4.2.5 fragment countUnsigned integer (32 bits)1.6.0 to 4.2.5 defragmentation errorFrame number1.0.0 to 4.2.5 has multiple tail fragmentsBoolean1.0.0 to 4.2.5 fragment overlapBoolean1.0.0 to 4.2.5 fragment overlapping with conflicting dataBoolean1.0.0 to 4.2.5 fragment too longBoolean1.0.0 to 4.2.5 fragmentsLabel1.0.0 to 4.2.5 DATA in frameFrame number1.0.0 to 4.2.5 DATA lengthUnsigned integer (32 bits)1.4.0 to 4.2.5
smtp.eomEOMLabel2.0.0 to 4.2.5
smtp.messageMessageCharacter string1.8.0 to 4.2.5
smtp.reqRequestBoolean1.0.0 to 4.2.5
smtp.req.commandCommandCharacter string1.0.0 to 4.2.5
smtp.req.parameterRequest parameterCharacter string1.0.0 to 4.2.5
smtp.responseResponseCharacter string1.8.0 to 4.2.5
smtp.response.codeResponse codeUnsigned integer (32 bits)1.0.0 to 4.2.5
smtp.response.code.unexpectedUnexpected response code in multiline responseLabel3.2.0 to 4.2.5
smtp.rspResponseBoolean1.0.0 to 4.2.5
smtp.rsp.parameterResponse parameterCharacter string1.0.0 to 4.2.5