Display Filter Reference: TCP Encapsulation of IPsec Packets

Protocol field name: tcpencap

Versions: 1.0.0 to 3.6.8

Back to Display Filter Reference

Field name Description Type Versions
tcpencap.espzero ESP zero Unsigned integer (2 bytes) 1.0.0 to 3.6.8
tcpencap.ikedirection ISAKMP traffic direction Unsigned integer (2 bytes) 1.0.0 to 3.6.8
tcpencap.magic Magic number Byte sequence 1.0.0 to 3.6.8
tcpencap.magic2 Magic 2 Byte sequence 1.0.0 to 3.6.8
tcpencap.proto Protocol Unsigned integer (1 byte) 1.0.0 to 3.6.8
tcpencap.seq Sequence number Unsigned integer (2 bytes) 1.0.0 to 3.6.8
tcpencap.unknown Unknown trailer Byte sequence 1.0.0 to 3.6.8
tcpencap.zero All zero Byte sequence 1.0.0 to 3.6.8