Display Filter Reference: Stateless Transport Tunneling

Protocol field name: stt

Versions: 2.0.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
stt.checksum Checksum Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.checksum.bad Bad Checksum Boolean 2.0.0 to 2.0.16
stt.checksum.calculated Calculated Checksum Unsigned integer, 2 bytes 2.0.0 to 2.0.16
stt.checksum.good Good Checksum Boolean 2.0.0 to 2.0.16
stt.checksum.status Checksum Status Unsigned integer, 1 byte 2.2.0 to 2.6.3
stt.checksum_bad.expert Bad checksum Label 2.0.0 to 2.6.3
stt.context_id Context ID Unsigned integer, 8 bytes 2.0.0 to 2.6.3
stt.data_offset_bad.expert TCP Data Offset should be 20 bytes Label 2.0.0 to 2.6.3
stt.dport Destination Port Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.flags Flags Unsigned integer, 1 byte 2.0.0 to 2.6.3
stt.flags.csum_partial Checksum partial Boolean 2.0.0 to 2.6.3
stt.flags.csum_verified Checksum verified Boolean 2.0.0 to 2.6.3
stt.flags.ipv4 IPv4 packet Boolean 2.0.0 to 2.6.3
stt.flags.rsvd Reserved Boolean 2.0.0 to 2.6.3
stt.flags.tcp TCP payload Boolean 2.0.0 to 2.6.3
stt.l4offset L4 Offset Unsigned integer, 1 byte 2.0.0 to 2.6.3
stt.l4offset_bad.expert Bad L4 Offset Label 2.0.0 to 2.6.3
stt.mss Max Segment Size Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.mss_bad.expert Bad MSS Label 2.0.0 to 2.6.3
stt.padding Padding Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.pkt_id Packet ID Unsigned integer, 4 bytes 2.0.0 to 2.6.3
stt.pkt_len Packet Length Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.reassembled.length Reassembled STT length Unsigned integer, 4 bytes 2.0.0 to 2.6.3
stt.reassembled_in Reassembled PDU in frame Frame number 2.0.0 to 2.6.3
stt.reserved Reserved Unsigned integer, 1 byte 2.0.0 to 2.6.3
stt.seg_off Segment Offset Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.segment STT Segment Frame number 2.0.0 to 2.6.3
stt.segment.count Segment count Unsigned integer, 4 bytes 2.0.0 to 2.6.3
stt.segment.error Reassembling error Frame number 2.0.0 to 2.6.3
stt.segment.multipletails Multiple tail segments found Boolean 2.0.0 to 2.6.3
stt.segment.overlap Segment overlap Boolean 2.0.0 to 2.6.3
stt.segment.overlap.conflict Conflicting data in segment overlap Boolean 2.0.0 to 2.6.3
stt.segment.toolongfragment Segment too long Boolean 2.0.0 to 2.6.3
stt.segments Reassembled STT Segments Label 2.0.0 to 2.6.3
stt.stream_id Stream ID Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.tcp TCP Data Sequence of bytes 2.0.0 to 2.6.3
stt.tcp.data_offset Data Offset Unsigned integer, 1 byte 2.0.0 to 2.6.3
stt.tcp.flags Flags Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.tcp.flags.ack Acknowledgement Boolean 2.0.0 to 2.6.3
stt.tcp.flags.cwr Congestion Window Reduced (CWR) Boolean 2.0.0 to 2.6.3
stt.tcp.flags.ece ECN-Echo Boolean 2.0.0 to 2.6.3
stt.tcp.flags.fin Fin Boolean 2.0.0 to 2.6.3
stt.tcp.flags.ns Nonce Boolean 2.0.0 to 2.6.3
stt.tcp.flags.psh Push Boolean 2.0.0 to 2.6.3
stt.tcp.flags.rst Reset Boolean 2.0.0 to 2.6.3
stt.tcp.flags.rsvd Reserved Boolean 2.0.0 to 2.6.3
stt.tcp.flags.syn Syn Boolean 2.0.0 to 2.6.3
stt.tcp.flags.urg Urgent Boolean 2.0.0 to 2.6.3
stt.tcp.urg_ptr Urgent Pointer Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.tcp.window Window Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.version Version Unsigned integer, 1 byte 2.0.0 to 2.6.3
stt.version_unknown.expert Unknown version Label 2.0.0 to 2.6.3
stt.vlan VLAN Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.vlan.id VLAN ID Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.vlan.pcp PCP Unsigned integer, 2 bytes 2.0.0 to 2.6.3
stt.vlan.v V flag Unsigned integer, 2 bytes 2.0.0 to 2.6.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More