Wireshark · Display Filter Reference: Secure Socket Tunneling Protocol

Display Filter Reference: Secure Socket Tunneling Protocol

Protocol field name: sstp

Versions: 2.0.0 to 4.2.5

Field name	Description	Type	Versions
sstp.attribid	ID	Unsigned integer (8 bits)	2.0.0 to 4.2.5
sstp.attriblength	Length	Unsigned integer (16 bits)	2.0.0 to 4.2.5
sstp.attriblengthreserved	Reserved	Unsigned integer (16 bits)	2.0.0 to 4.2.5
sstp.attribreserved	Reserved	Unsigned integer (8 bits)	2.0.0 to 4.2.5
sstp.attribvalue	Attribute Value	Byte sequence	2.0.0 to 4.2.5
sstp.cert_hash	Cert Hash	Byte sequence	2.0.0 to 4.2.5
sstp.compoundmac	Compound Mac	Byte sequence	2.0.0 to 4.2.5
sstp.dataunknown	Unknown Data	Byte sequence	2.0.0 to 4.2.5
sstp.encapsulatedprotocol	Encapsulated Protocol	Unsigned integer (16 bits)	2.0.0 to 4.2.5
sstp.hash	Hash Protocol	Unsigned integer (8 bits)	2.0.0 to 4.2.5
sstp.iscontrol	Control Packet	Boolean	2.0.0 to 4.2.5
sstp.length	Length-Packet	Unsigned integer (16 bits)	2.0.0 to 4.2.5
sstp.majorversion	Major Version	Unsigned integer (8 bits)	2.0.0 to 4.2.5
sstp.messagetype	Message Type	Unsigned integer (16 bits)	2.0.0 to 4.2.5
sstp.minorversion	Minor Version	Unsigned integer (8 bits)	2.0.0 to 4.2.5
sstp.nonce	Nonce	Byte sequence	2.0.0 to 4.2.5
sstp.numattrib	Number of Attributes	Unsigned integer (16 bits)	2.0.0 to 4.2.5
sstp.padding	Padding	Byte sequence	2.0.0 to 4.2.5
sstp.reserved	Reserved	Byte sequence	2.0.0 to 4.2.5
sstp.status	Status	Unsigned integer (32 bits)	2.0.0 to 4.2.5