Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Secure Socket Tunneling Protocol

Protocol field name: sstp

Versions: 2.0.0 to 4.4.7

Back to Display Filter Reference

Field name Description Type Versions
sstp.attribidIDUnsigned integer (8 bits)2.0.0 to 4.4.7
sstp.attriblengthLengthUnsigned integer (16 bits)2.0.0 to 4.4.7
sstp.attriblengthreservedReservedUnsigned integer (16 bits)2.0.0 to 4.4.7
sstp.attribreservedReservedUnsigned integer (8 bits)2.0.0 to 4.4.7
sstp.attribvalueAttribute ValueByte sequence2.0.0 to 4.4.7
sstp.cert_hashCert HashByte sequence2.0.0 to 4.4.7
sstp.compoundmacCompound MacByte sequence2.0.0 to 4.4.7
sstp.dataunknownUnknown DataByte sequence2.0.0 to 4.4.7
sstp.encapsulatedprotocolEncapsulated ProtocolUnsigned integer (16 bits)2.0.0 to 4.4.7
sstp.hashHash ProtocolUnsigned integer (8 bits)2.0.0 to 4.4.7
sstp.iscontrolControl PacketBoolean2.0.0 to 4.4.7
sstp.lengthLength-PacketUnsigned integer (16 bits)2.0.0 to 4.4.7
sstp.majorversionMajor VersionUnsigned integer (8 bits)2.0.0 to 4.4.7
sstp.messagetypeMessage TypeUnsigned integer (16 bits)2.0.0 to 4.4.7
sstp.minorversionMinor VersionUnsigned integer (8 bits)2.0.0 to 4.4.7
sstp.nonceNonceByte sequence2.0.0 to 4.4.7
sstp.numattribNumber of AttributesUnsigned integer (16 bits)2.0.0 to 4.4.7
sstp.paddingPaddingByte sequence2.0.0 to 4.4.7
sstp.reservedReservedByte sequence2.0.0 to 4.4.7
sstp.statusStatusUnsigned integer (32 bits)2.0.0 to 4.4.7