ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Display Filter Reference: Linux cooked-mode capture

Protocol field name: sll

Versions: 1.0.0 to 4.2.5

Back to Display Filter Reference

Field name Description Type Versions
sll.etypeProtocolUnsigned integer (16 bits)1.0.0 to 4.2.5
sll.gretypeProtocolUnsigned integer (16 bits)1.0.0 to 4.2.5
sll.halenLink-layer address lengthUnsigned integer (16 bits)1.0.0 to 4.2.5
sll.hatypeLink-layer address typeUnsigned integer (16 bits)1.0.0 to 4.2.5
sll.ifindexInterface indexUnsigned integer (32 bits)3.4.0 to 4.2.5
sll.ltypeProtocolUnsigned integer (16 bits)1.0.0 to 4.2.5
sll.pkttypePacket typeUnsigned integer (16 bits)1.0.0 to 4.2.5
sll.src.ethSourceEthernet or other MAC address1.0.0 to 4.2.5
sll.src.ipv4SourceIPv4 address1.0.0 to 4.2.5
sll.src.otherSourceByte sequence1.0.0 to 4.2.5
sll.trailerTrailerByte sequence1.0.0 to 4.2.5
sll.unusedUnusedByte sequence2.4.0 to 4.2.5