WIRESHARK-FILTER(4) The Wireshark Network Analyzer WIRESHARK-FILTER(4)
NAME
wireshark-filter - Wireshark filter syntax and reference
SYNOPSYS
wireshark [other options] [ -R "filter expression" ]
tshark [other options] [ -R "filter expression" ]
DESCRIPTION
Wireshark and TShark share a powerful filter engine that helps remove
the noise from a packet trace and lets you see only the packets that
interest you. If a packet meets the requirements expressed in your
filter, then it is displayed in the list of packets. Display filters
let you compare the fields within a protocol against a specific value,
compare fields against fields, and check the existence of specified
fields or protocols.
Filters are also used by other features such as statistics generation
and packet list colorization (the latter is only available to Wire-
shark). This manual page describes their syntax and provides a compre-
hensive reference of filter fields.
FILTER SYNTAX
Check whether a field or protocol exists
The simplest filter allows you to check for the existence of a protocol
or field. If you want to see all packets which contain the IP proto-
col, the filter would be "ip" (without the quotation marks). To see all
packets that contain a Token-Ring RIF field, use "tr.rif".
Think of a protocol or field in a filter as implicitly having the
"exists" operator.
Note: all protocol and field names that are available in Wireshark and
TShark filters are listed in the comprehensive FILTER PROTOCOL REFER-
ENCE (see below).
Comparison operators
Fields can also be compared against values. The comparison operators
can be expressed either through English-like abbreviations or through
C-like symbols:
eq, == Equal
ne, != Not Equal
gt, > Greater Than
lt, < Less Than
ge, >= Greater than or Equal to
le, <= Less than or Equal to
Search and match operators
Additional operators exist expressed only in English, not C-like syn-
tax:
contains Does the protocol, field or slice contain a value
matches Does the protocol or text string match the given Perl
regular expression
The "contains" operator allows a filter to search for a sequence of
characters, expressed as a string (quoted or unquoted), or bytes,
expressed as a byte array. For example, to search for a given HTTP URL
in a capture, the following filter can be used:
http contains "http://www.wireshark.org"
The "contains" operator cannot be used on atomic fields, such as num-
bers or IP addresses.
The "matches" operator allows a filter to apply to a specified Perl-
compatible regular expression (PCRE). The "matches" operator is only
implemented for protocols and for protocol fields with a text string
representation. For example, to search for a given WAP WSP User-Agent,
you can write:
wsp.user_agent matches "(?i)cldc"
This example shows an interesting PCRE feature: pattern match options
have to be specified with the (?option) construct. For instance, (?i)
performs a case-insensitive pattern match. More information on PCRE can
be found in the pcrepattern(3) man page (Perl Regular Expressions are
explained in <http://www.perldoc.com/perl5.8.0/pod/perlre.html>).
Note: the "matches" operator is only available if Wireshark or TShark
have been compiled with the PCRE library. This can be checked by run-
ning:
wireshark -v
tshark -v
or selecting the "About Wireshark" item from the "Help" menu in Wire-
shark.
Functions
The filter language has the following functions:
upper(string-field) - converts a string field to uppercase
lower(string-field) - converts a string field to lowercase
upper() and lower() are useful for performing case-insensitive string
comparisons. For example:
upper(ncp.nds_stream_name) contains "MACRO"
lower(mount.dump.hostname) == "angel"
Protocol field types
Each protocol field is typed. The types are:
Unsigned integer (8-bit, 16-bit, 24-bit, or 32-bit)
Signed integer (8-bit, 16-bit, 24-bit, or 32-bit)
Boolean
Ethernet address (6 bytes)
Byte array
IPv4 address
IPv6 address
IPX network number
Text string
Double-precision floating point number
An integer may be expressed in decimal, octal, or hexadecimal notation.
The following three display filters are equivalent:
frame.pkt_len > 10
frame.pkt_len > 012
frame.pkt_len > 0xa
Boolean values are either true or false. In a display filter expres-
sion testing the value of a Boolean field, "true" is expressed as 1 or
any other non-zero value, and "false" is expressed as zero. For exam-
ple, a token-ring packet's source route field is Boolean. To find any
source-routed packets, a display filter would be:
tr.sr == 1
Non source-routed packets can be found with:
tr.sr == 0
Ethernet addresses and byte arrays are represented by hex digits. The
hex digits may be separated by colons, periods, or hyphens:
eth.dst eq ff:ff:ff:ff:ff:ff
aim.data == 0.1.0.d
fddi.src == aa-aa-aa-aa-aa-aa
echo.data == 7a
IPv4 addresses can be represented in either dotted decimal notation or
by using the hostname:
ip.dst eq www.mit.edu
ip.src == 192.168.1.1
IPv4 addresses can be compared with the same logical relations as num-
bers: eq, ne, gt, ge, lt, and le. The IPv4 address is stored in host
order, so you do not have to worry about the endianness of an IPv4
address when using it in a display filter.
Classless InterDomain Routing (CIDR) notation can be used to test if an
IPv4 address is in a certain subnet. For example, this display filter
will find all packets in the 129.111 Class-B network:
ip.addr == 129.111.0.0/16
Remember, the number after the slash represents the number of bits used
to represent the network. CIDR notation can also be used with host-
names, as in this example of finding IP addresses on the same Class C
network as 'sneezy':
ip.addr eq sneezy/24
The CIDR notation can only be used on IP addresses or hostnames, not in
variable names. So, a display filter like "ip.src/24 == ip.dst/24" is
not valid (yet).
IPX networks are represented by unsigned 32-bit integers. Most likely
you will be using hexadecimal when testing IPX network values:
ipx.src.net == 0xc0a82c00
Strings are enclosed in double quotes:
http.request.method == "POST"
Inside double quotes, you may use a backslash to embed a double quote
or an arbitrary byte represented in either octal or hexadecimal.
browser.comment == "An embedded \" double-quote"
Use of hexadecimal to look for "HEAD":
http.request.method == "\x48EAD"
Use of octal to look for "HEAD":
http.request.method == "\110EAD"
This means that you must escape backslashes with backslashes inside
double quotes.
smb.path contains "\\\\SERVER\\SHARE"
looks for \\SERVER\SHARE in "smb.path".
The slice operator
You can take a slice of a field if the field is a text string or a byte
array. For example, you can filter on the vendor portion of an ether-
net address (the first three bytes) like this:
eth.src[0:3] == 00:00:83
Another example is:
http.content_type[0:4] == "text"
You can use the slice operator on a protocol name, too. The "frame"
protocol can be useful, encompassing all the data captured by Wireshark
or TShark.
token[0:5] ne 0.0.0.1.1
llc[0] eq aa
frame[100-199] contains "wireshark"
The following syntax governs slices:
[i:j] i = start_offset, j = length
[i-j] i = start_offset, j = end_offset, inclusive.
[i] i = start_offset, length = 1
[:j] start_offset = 0, length = j
[i:] start_offset = i, end_offset = end_of_field
Offsets can be negative, in which case they indicate the offset from
the end of the field. The last byte of the field is at offset -1, the
last but one byte is at offset -2, and so on. Here's how to check the
last four bytes of a frame:
frame[-4:4] == 0.1.2.3
or
frame[-4:] == 0.1.2.3
You can concatenate slices using the comma operator:
ftp[1,3-5,9:] == 01:03:04:05:09:0a:0b
This concatenates offset 1, offsets 3-5, and offset 9 to the end of the
ftp data.
Type conversions
If a field is a text string or a byte array, it can be expressed in
whichever way is most convenient.
So, for instance, the following filters are equivalent:
http.request.method == "GET"
http.request.method == 47.45.54
A range can also be expressed in either way:
frame[60:2] gt 50.51
frame[60:2] gt "PQ"
Bit field operations
It is also possible to define tests with bit field operations. Cur-
rently the following bit field operation is supported:
bitwise_and, & Bitwise AND
The bitwise AND operation allows testing to see if one or more bits are
set. Bitwise AND operates on integer protocol fields and slices.
When testing for TCP SYN packets, you can write:
tcp.flags & 0x02
That expression will match all packets that contain a "tcp.flags" field
with the 0x02 bit, i.e. the SYN bit, set.
Similarly, filtering for all WSP GET and extended GET methods is
achieved with:
wsp.pdu_type & 0x40
When using slices, the bit mask must be specified as a byte string, and
it must have the same number of bytes as the slice itself, as in:
ip[42:2] & 40:ff
Logical expressions
Tests can be combined using logical expressions. These too are
expressable in C-like syntax or with English-like abbreviations:
and, && Logical AND
or, || Logical OR
not, ! Logical NOT
Expressions can be grouped by parentheses as well. The following are
all valid display filter expressions:
tcp.port == 80 and ip.src == 192.168.2.1
not llc
http and frame[100-199] contains "wireshark"
(ipx.src.net == 0xbad && ipx.src.node == 0.0.0.0.0.1) || ip
Remember that whenever a protocol or field name occurs in an expres-
sion, the "exists" operator is implicitly called. The "exists" operator
has the highest priority. This means that the first filter expression
must be read as "show me the packets for which tcp.port exists and
equals 80, and ip.src exists and equals 192.168.2.1". The second filter
expression means "show me the packets where not (llc exists)", or in
other words "where llc does not exist" and hence will match all packets
that do not contain the llc protocol. The third filter expression
includes the constraint that offset 199 in the frame exists, in other
words the length of the frame is at least 200.
A special caveat must be given regarding fields that occur more than
once per packet. "ip.addr" occurs twice per IP packet, once for the
source address, and once for the destination address. Likewise,
"tr.rif.ring" fields can occur more than once per packet. The follow-
ing two expressions are not equivalent:
ip.addr ne 192.168.4.1
not ip.addr eq 192.168.4.1
The first filter says "show me packets where an ip.addr exists that
does not equal 192.168.4.1". That is, as long as one ip.addr in the
packet does not equal 192.168.4.1, the packet passes the display fil-
ter. The other ip.addr could equal 192.168.4.1 and the packet would
still be displayed. The second filter says "don't show me any packets
that have an ip.addr field equal to 192.168.4.1". If one ip.addr is
192.168.4.1, the packet does not pass. If neither ip.addr field is
192.168.4.1, then the packet is displayed.
It is easy to think of the 'ne' and 'eq' operators as having an implict
"exists" modifier when dealing with multiply-recurring fields.
"ip.addr ne 192.168.4.1" can be thought of as "there exists an ip.addr
that does not equal 192.168.4.1". "not ip.addr eq 192.168.4.1" can be
thought of as "there does not exist an ip.addr equal to 192.168.4.1".
Be careful with multiply-recurring fields; they can be confusing.
Care must also be taken when using the display filter to remove noise
from the packet trace. If, for example, you want to filter out all IP
multicast packets to address 224.1.2.3, then using:
ip.dst ne 224.1.2.3
may be too restrictive. Filtering with "ip.dst" selects only those IP
packets that satisfy the rule. Any other packets, including all non-IP
packets, will not be displayed. To display the non-IP packets as well,
you can use one of the following two expressions:
not ip or ip.dst ne 224.1.2.3
not ip.addr eq 224.1.2.3
The first filter uses "not ip" to include all non-IP packets and then
lets "ip.dst ne 224.1.2.3" filter out the unwanted IP packets. The sec-
ond filter has already been explained above where filtering with multi-
ply occuring fields was discussed.
FILTER PROTOCOL REFERENCE
Each entry below provides an abbreviated protocol or field name. Every
one of these fields can be used in a display filter. The type of the
field is also given.
3Com XNS Encapsulation (3comxns)
xnsllc.type Type
Unsigned 16-bit integer
3GPP2 A11 (a11)
a11.ackstat Reply Status
Unsigned 8-bit integer
A11 Registration Ack Status.
a11.auth.auth Authenticator
Byte array
Authenticator.
a11.auth.spi SPI
Unsigned 32-bit integer
Authentication Header Security Parameter Index.
a11.b Broadcast Datagrams
Boolean
Broadcast Datagrams requested
a11.coa Care of Address
IPv4 address
Care of Address.
a11.code Reply Code
Unsigned 8-bit integer
A11 Registration Reply code.
a11.d Co-located Care-of Address
Boolean
MN using Co-located Care-of address
a11.ext.apptype Application Type
Unsigned 8-bit integer
Application Type.
a11.ext.ase.key GRE Key
Unsigned 32-bit integer
GRE Key.
a11.ext.ase.len Entry Length
Unsigned 8-bit integer
Entry Length.
a11.ext.ase.pcfip PCF IP Address
IPv4 address
PCF IP Address.
a11.ext.ase.ptype GRE Protocol Type
Unsigned 16-bit integer
GRE Protocol Type.
a11.ext.ase.srid Service Reference ID (SRID)
Unsigned 8-bit integer
Service Reference ID (SRID).
a11.ext.ase.srvopt Service Option
Unsigned 16-bit integer
Service Option.
a11.ext.auth.subtype Gen Auth Ext SubType
Unsigned 8-bit integer
Mobile IP Auth Extension Sub Type.
a11.ext.canid CANID
Byte array
CANID
a11.ext.code Reply Code
Unsigned 8-bit integer
PDSN Code.
a11.ext.dormant All Dormant Indicator
Unsigned 16-bit integer
All Dormant Indicator.
a11.ext.fqi.dscp Forward DSCP
Unsigned 8-bit integer
Forward Flow DSCP.
a11.ext.fqi.entrylen Entry Length
Unsigned 8-bit integer
Forward Entry Length.
a11.ext.fqi.flags Flags
Unsigned 8-bit integer
Forward Flow Entry Flags.
a11.ext.fqi.flowcount Forward Flow Count
Unsigned 8-bit integer
Forward Flow Count.
a11.ext.fqi.flowid Forward Flow Id
Unsigned 8-bit integer
Forward Flow Id.
a11.ext.fqi.flowstate Forward Flow State
Unsigned 8-bit integer
Forward Flow State.
a11.ext.fqi.graqos Granted QoS
Byte array
Forward Granted QoS.
a11.ext.fqi.graqoslen Granted QoS Length
Unsigned 8-bit integer
Forward Granted QoS Length.
a11.ext.fqi.reqqos Requested QoS
Byte array
Forward Requested QoS.
a11.ext.fqi.reqqoslen Requested QoS Length
Unsigned 8-bit integer
Forward Requested QoS Length.
a11.ext.fqi.srid SRID
Unsigned 8-bit integer
Forward Flow Entry SRID.
a11.ext.fqui.flowcount Forward QoS Update Flow Count
Unsigned 8-bit integer
Forward QoS Update Flow Count.
a11.ext.fqui.updatedqos Foward Updated QoS Sub-Blob
Byte array
Foward Updated QoS Sub-Blob.
a11.ext.fqui.updatedqoslen Foward Updated QoS Sub-Blob Length
Unsigned 8-bit integer
Foward Updated QoS Sub-Blob Length.
a11.ext.key Key
Unsigned 32-bit integer
Session Key.
a11.ext.len Extension Length
Unsigned 16-bit integer
Mobile IP Extension Length.
a11.ext.mnsrid MNSR-ID
Unsigned 16-bit integer
MNSR-ID
a11.ext.msid MSID(BCD)
String
MSID(BCD).
a11.ext.msid_len MSID Length
Unsigned 8-bit integer
MSID Length.
a11.ext.msid_type MSID Type
Unsigned 16-bit integer
MSID Type.
a11.ext.panid PANID
Byte array
PANID
a11.ext.ppaddr Anchor P-P Address
IPv4 address
Anchor P-P Address.
a11.ext.ptype Protocol Type
Unsigned 16-bit integer
Protocol Type.
a11.ext.qosmode QoS Mode
Unsigned 8-bit integer
QoS Mode.
a11.ext.rqi.entrylen Entry Length
Unsigned 8-bit integer
Reverse Flow Entry Length.
a11.ext.rqi.flowcount Reverse Flow Count
Unsigned 8-bit integer
Reverse Flow Count.
a11.ext.rqi.flowid Reverse Flow Id
Unsigned 8-bit integer
Reverse Flow Id.
a11.ext.rqi.flowstate Flow State
Unsigned 8-bit integer
Reverse Flow State.
a11.ext.rqi.graqos Granted QoS
Byte array
Reverse Granted QoS.
a11.ext.rqi.graqoslen Granted QoS Length
Unsigned 8-bit integer
Reverse Granted QoS Length.
a11.ext.rqi.reqqos Requested QoS
Byte array
Reverse Requested QoS.
a11.ext.rqi.reqqoslen Requested QoS Length
Unsigned 8-bit integer
Reverse Requested QoS Length.
a11.ext.rqi.srid SRID
Unsigned 8-bit integer
Reverse Flow Entry SRID.
a11.ext.rqui.flowcount Reverse QoS Update Flow Count
Unsigned 8-bit integer
Reverse QoS Update Flow Count.
a11.ext.rqui.updatedqos Reverse Updated QoS Sub-Blob
Byte array
Reverse Updated QoS Sub-Blob.
a11.ext.rqui.updatedqoslen Reverse Updated QoS Sub-Blob Length
Unsigned 8-bit integer
Reverse Updated QoS Sub-Blob Length.
a11.ext.sidver Session ID Version
Unsigned 8-bit integer
Session ID Version
a11.ext.sqp.profile Subscriber QoS Profile
Byte array
Subscriber QoS Profile.
a11.ext.sqp.profilelen Subscriber QoS Profile Length
Byte array
Subscriber QoS Profile Length.
a11.ext.srvopt Service Option
Unsigned 16-bit integer
Service Option.
a11.ext.type Extension Type
Unsigned 8-bit integer
Mobile IP Extension Type.
a11.ext.vid Vendor ID
Unsigned 32-bit integer
Vendor ID.
a11.extension Extension
Byte array
Extension
a11.flags Flags
Unsigned 8-bit integer
a11.g GRE
Boolean
MN wants GRE encapsulation
a11.haaddr Home Agent
IPv4 address
Home agent IP Address.
a11.homeaddr Home Address
IPv4 address
Mobile Node's home address.
a11.ident Identification
Byte array
MN Identification.
a11.life Lifetime
Unsigned 16-bit integer
A11 Registration Lifetime.
a11.m Minimal Encapsulation
Boolean
MN wants Minimal encapsulation
a11.nai NAI
String
NAI
a11.s Simultaneous Bindings
Boolean
Simultaneous Bindings Allowed
a11.t Reverse Tunneling
Boolean
Reverse tunneling requested
a11.type Message Type
Unsigned 8-bit integer
A11 Message type.
a11.v Van Jacobson
Boolean
Van Jacobson
3com Network Jack (njack)
njack.getresp.unknown1 Unknown1
Unsigned 8-bit integer
njack.magic Magic
String
njack.set.length SetLength
Unsigned 16-bit integer
njack.set.salt Salt
Unsigned 32-bit integer
njack.setresult SetResult
Unsigned 8-bit integer
njack.tlv.addtagscheme TlvAddTagScheme
Unsigned 8-bit integer
njack.tlv.authdata Authdata
Byte array
njack.tlv.contermode TlvTypeCountermode
Unsigned 8-bit integer
njack.tlv.data TlvData
Byte array
njack.tlv.devicemac TlvTypeDeviceMAC
6-byte Hardware (MAC) Address
njack.tlv.dhcpcontrol TlvTypeDhcpControl
Unsigned 8-bit integer
njack.tlv.length TlvLength
Unsigned 8-bit integer
njack.tlv.maxframesize TlvTypeMaxframesize
Unsigned 8-bit integer
njack.tlv.portingressmode TlvTypePortingressmode
Unsigned 8-bit integer
njack.tlv.powerforwarding TlvTypePowerforwarding
Unsigned 8-bit integer
njack.tlv.scheduling TlvTypeScheduling
Unsigned 8-bit integer
njack.tlv.snmpwrite TlvTypeSnmpwrite
Unsigned 8-bit integer
njack.tlv.type TlvType
Unsigned 8-bit integer
njack.tlv.typeip TlvTypeIP
IPv4 address
njack.tlv.typestring TlvTypeString
String
njack.tlv.version TlvFwVersion
IPv4 address
njack.type Type
Unsigned 8-bit integer
802.1Q Virtual LAN (vlan)
vlan.cfi CFI
Unsigned 16-bit integer
CFI
vlan.etype Type
Unsigned 16-bit integer
Type
vlan.id ID
Unsigned 16-bit integer
ID
vlan.len Length
Unsigned 16-bit integer
Length
vlan.priority Priority
Unsigned 16-bit integer
Priority
vlan.trailer Trailer
Byte array
VLAN Trailer
802.1X Authentication (eapol)
eapol.keydes.data WPA Key
Byte array
WPA Key Data
eapol.keydes.datalen WPA Key Length
Unsigned 16-bit integer
WPA Key Data Length
eapol.keydes.id WPA Key ID
Byte array
WPA Key ID(RSN Reserved)
eapol.keydes.index.indexnum Index Number
Unsigned 8-bit integer
Key Index number
eapol.keydes.index.keytype Key Type
Boolean
Key Type (unicast/broadcast)
eapol.keydes.key Key
Byte array
Key
eapol.keydes.key_info Key Information
Unsigned 16-bit integer
WPA key info
eapol.keydes.key_info.encr_key_data Encrypted Key Data flag
Boolean
Encrypted Key Data flag
eapol.keydes.key_info.error Error flag
Boolean
Error flag
eapol.keydes.key_info.install Install flag
Boolean
Install flag
eapol.keydes.key_info.key_ack Key Ack flag
Boolean
Key Ack flag
eapol.keydes.key_info.key_index Key Index
Unsigned 16-bit integer
Key Index (0-3) (RSN: Reserved)
eapol.keydes.key_info.key_mic Key MIC flag
Boolean
Key MIC flag
eapol.keydes.key_info.key_type Key Type
Boolean
Key Type (Pairwise or Group)
eapol.keydes.key_info.keydes_ver Key Descriptor Version
Unsigned 16-bit integer
Key Descriptor Version Type
eapol.keydes.key_info.request Request flag
Boolean
Request flag
eapol.keydes.key_info.secure Secure flag
Boolean
Secure flag
eapol.keydes.key_iv Key IV
Byte array
Key Initialization Vector
eapol.keydes.key_signature Key Signature
Byte array
Key Signature
eapol.keydes.keylen Key Length
Unsigned 16-bit integer
Key Length
eapol.keydes.mic WPA Key MIC
Byte array
WPA Key Message Integrity Check
eapol.keydes.nonce Nonce
Byte array
WPA Key Nonce
eapol.keydes.replay_counter Replay Counter
Unsigned 64-bit integer
Replay Counter
eapol.keydes.rsc WPA Key RSC
Byte array
WPA Key Receive Sequence Counter
eapol.keydes.type Descriptor Type
Unsigned 8-bit integer
Key Descriptor Type
eapol.len Length
Unsigned 16-bit integer
Length
eapol.type Type
Unsigned 8-bit integer
eapol.version Version
Unsigned 8-bit integer
AAL type 2 signalling protocol (Q.2630) (alcap)
alcap.acc.level Congestion Level
Unsigned 8-bit integer
alcap.alc.bitrate.avg.bw Average Backwards Bit Rate
Unsigned 16-bit integer
alcap.alc.bitrate.avg.fw Average Forward Bit Rate
Unsigned 16-bit integer
alcap.alc.bitrate.max.bw Maximum Backwards Bit Rate
Unsigned 16-bit integer
alcap.alc.bitrate.max.fw Maximum Forward Bit Rate
Unsigned 16-bit integer
alcap.alc.sdusize.avg.bw Average Backwards CPS SDU Size
Unsigned 8-bit integer
alcap.alc.sdusize.avg.fw Average Forward CPS SDU Size
Unsigned 8-bit integer
alcap.alc.sdusize.max.bw Maximum Backwards CPS SDU Size
Unsigned 8-bit integer
alcap.alc.sdusize.max.fw Maximum Forward CPS SDU Size
Unsigned 8-bit integer
alcap.cau.coding Cause Coding
Unsigned 8-bit integer
alcap.cau.diag Diagnostic
Byte array
alcap.cau.diag.field_num Field Number
Unsigned 8-bit integer
alcap.cau.diag.len Length
Unsigned 8-bit integer
Diagnostics Length
alcap.cau.diag.msg Message Identifier
Unsigned 8-bit integer
alcap.cau.diag.param Parameter Identifier
Unsigned 8-bit integer
alcap.cau.value Cause Value (ITU)
Unsigned 8-bit integer
alcap.ceid.cid CID
Unsigned 8-bit integer
alcap.ceid.pathid Path ID
Unsigned 32-bit integer
alcap.compat Message Compatibility
Byte array
alcap.compat.general.ii General II
Unsigned 8-bit integer
Instruction Indicator
alcap.compat.general.sni General SNI
Unsigned 8-bit integer
Send Notificaation Indicator
alcap.compat.pass.ii Pass-On II
Unsigned 8-bit integer
Instruction Indicator
alcap.compat.pass.sni Pass-On SNI
Unsigned 8-bit integer
Send Notificaation Indicator
alcap.cp.level Level
Unsigned 8-bit integer
alcap.dnsea.addr Address
Byte array
alcap.dsaid DSAID
Unsigned 32-bit integer
Destination Service Association ID
alcap.fbw.bitrate.bw CPS Backwards Bitrate
Unsigned 24-bit integer
alcap.fbw.bitrate.fw CPS Forward Bitrate
Unsigned 24-bit integer
alcap.fbw.bucket_size.bw Backwards CPS Bucket Size
Unsigned 16-bit integer
alcap.fbw.bucket_size.fw Forward CPS Bucket Size
Unsigned 16-bit integer
alcap.fbw.max_size.bw Backwards CPS Packet Size
Unsigned 8-bit integer
alcap.fbw.max_size.fw Forward CPS Packet Size
Unsigned 8-bit integer
alcap.hc.codepoint Codepoint
Unsigned 8-bit integer
alcap.leg.cause Leg's cause value in REL
Unsigned 8-bit integer
alcap.leg.cid Leg's channel id
Unsigned 32-bit integer
alcap.leg.dnsea Leg's destination NSAP
String
alcap.leg.dsaid Leg's ECF OSA id
Unsigned 32-bit integer
alcap.leg.msg a message of this leg
Frame number
alcap.leg.onsea Leg's originating NSAP
String
alcap.leg.osaid Leg's ERQ OSA id
Unsigned 32-bit integer
alcap.leg.pathid Leg's path id
Unsigned 32-bit integer
alcap.leg.sugr Leg's SUGR
Unsigned 32-bit integer
alcap.msg_type Message Type
Unsigned 8-bit integer
alcap.onsea.addr Address
Byte array
alcap.osaid OSAID
Unsigned 32-bit integer
Originating Service Association ID
alcap.param Parameter
Unsigned 8-bit integer
Parameter Id
alcap.param.len Length
Unsigned 8-bit integer
Parameter Length
alcap.pfbw.bitrate.bw CPS Backwards Bitrate
Unsigned 24-bit integer
alcap.pfbw.bitrate.fw CPS Forward Bitrate
Unsigned 24-bit integer
alcap.pfbw.bucket_size.bw Backwards CPS Bucket Size
Unsigned 16-bit integer
alcap.pfbw.bucket_size.fw Forward CPS Bucket Size
Unsigned 16-bit integer
alcap.pfbw.max_size.bw Backwards CPS Packet Size
Unsigned 8-bit integer
alcap.pfbw.max_size.fw Forward CPS Packet Size
Unsigned 8-bit integer
alcap.plc.bitrate.avg.bw Average Backwards Bit Rate
Unsigned 16-bit integer
alcap.plc.bitrate.avg.fw Average Forward Bit Rate
Unsigned 16-bit integer
alcap.plc.bitrate.max.bw Maximum Backwards Bit Rate
Unsigned 16-bit integer
alcap.plc.bitrate.max.fw Maximum Forward Bit Rate
Unsigned 16-bit integer
alcap.plc.sdusize.max.bw Maximum Backwards CPS SDU Size
Unsigned 8-bit integer
alcap.plc.sdusize.max.fw Maximum Forward CPS SDU Size
Unsigned 8-bit integer
alcap.pssiae.cas CAS
Unsigned 8-bit integer
Channel Associated Signalling
alcap.pssiae.cmd Circuit Mode
Unsigned 8-bit integer
alcap.pssiae.dtmf DTMF
Unsigned 8-bit integer
alcap.pssiae.fax Fax
Unsigned 8-bit integer
Facsimile
alcap.pssiae.frm Frame Mode
Unsigned 8-bit integer
alcap.pssiae.lb Loopback
Unsigned 8-bit integer
alcap.pssiae.mfr1 Multi-Frequency R1
Unsigned 8-bit integer
alcap.pssiae.mfr2 Multi-Frequency R2
Unsigned 8-bit integer
alcap.pssiae.oui OUI
Byte array
Organizational Unique Identifier
alcap.pssiae.pcm PCM Mode
Unsigned 8-bit integer
alcap.pssiae.profile.id Profile Id
Unsigned 8-bit integer
alcap.pssiae.profile.type Profile Type
Unsigned 8-bit integer
I.366.2 Profile Type
alcap.pssiae.rc Rate Conctrol
Unsigned 8-bit integer
alcap.pssiae.syn Syncronization
Unsigned 8-bit integer
Transport of synchronization of change in SSCS operation
alcap.pssime.frm Frame Mode
Unsigned 8-bit integer
alcap.pssime.lb Loopback
Unsigned 8-bit integer
alcap.pssime.max Max Len
Unsigned 16-bit integer
alcap.pssime.mult Multiplier
Unsigned 8-bit integer
alcap.pt.codepoint QoS Codepoint
Unsigned 8-bit integer
alcap.pvbws.bitrate.bw Peak CPS Backwards Bitrate
Unsigned 24-bit integer
alcap.pvbws.bitrate.fw Peak CPS Forward Bitrate
Unsigned 24-bit integer
alcap.pvbws.bucket_size.bw Peak Backwards CPS Bucket Size
Unsigned 16-bit integer
alcap.pvbws.bucket_size.fw Peak Forward CPS Bucket Size
Unsigned 16-bit integer
alcap.pvbws.max_size.bw Backwards CPS Packet Size
Unsigned 8-bit integer
alcap.pvbws.max_size.fw Forward CPS Packet Size
Unsigned 8-bit integer
alcap.pvbws.stt Source Traffic Type
Unsigned 8-bit integer
alcap.pvbwt.bitrate.bw Peak CPS Backwards Bitrate
Unsigned 24-bit integer
alcap.pvbwt.bitrate.fw Peak CPS Forward Bitrate
Unsigned 24-bit integer
alcap.pvbwt.bucket_size.bw Peak Backwards CPS Bucket Size
Unsigned 16-bit integer
alcap.pvbwt.bucket_size.fw Peak Forward CPS Bucket Size
Unsigned 16-bit integer
alcap.pvbwt.max_size.bw Backwards CPS Packet Size
Unsigned 8-bit integer
alcap.pvbwt.max_size.fw Forward CPS Packet Size
Unsigned 8-bit integer
alcap.ssia.cas CAS
Unsigned 8-bit integer
Channel Associated Signalling
alcap.ssia.cmd Circuit Mode
Unsigned 8-bit integer
alcap.ssia.dtmf DTMF
Unsigned 8-bit integer
alcap.ssia.fax Fax
Unsigned 8-bit integer
Facsimile
alcap.ssia.frm Frame Mode
Unsigned 8-bit integer
alcap.ssia.max_fmdata_len Max Len of FM Data
Unsigned 16-bit integer
alcap.ssia.mfr1 Multi-Frequency R1
Unsigned 8-bit integer
alcap.ssia.mfr2 Multi-Frequency R2
Unsigned 8-bit integer
alcap.ssia.oui OUI
Byte array
Organizational Unique Identifier
alcap.ssia.pcm PCM Mode
Unsigned 8-bit integer
alcap.ssia.profile.id Profile Id
Unsigned 8-bit integer
alcap.ssia.profile.type Profile Type
Unsigned 8-bit integer
I.366.2 Profile Type
alcap.ssiae.cas CAS
Unsigned 8-bit integer
Channel Associated Signalling
alcap.ssiae.cmd Circuit Mode
Unsigned 8-bit integer
alcap.ssiae.dtmf DTMF
Unsigned 8-bit integer
alcap.ssiae.fax Fax
Unsigned 8-bit integer
Facsimile
alcap.ssiae.frm Frame Mode
Unsigned 8-bit integer
alcap.ssiae.lb Loopback
Unsigned 8-bit integer
alcap.ssiae.mfr1 Multi-Frequency R1
Unsigned 8-bit integer
alcap.ssiae.mfr2 Multi-Frequency R2
Unsigned 8-bit integer
alcap.ssiae.oui OUI
Byte array
Organizational Unique Identifier
alcap.ssiae.pcm PCM Mode
Unsigned 8-bit integer
alcap.ssiae.profile.id Profile Id
Unsigned 8-bit integer
alcap.ssiae.profile.type Profile Type
Unsigned 8-bit integer
I.366.2 Profile Type
alcap.ssiae.rc Rate Conctrol
Unsigned 8-bit integer
alcap.ssiae.syn Syncronization
Unsigned 8-bit integer
Transport of synchronization of change in SSCS operation
alcap.ssim.frm Frame Mode
Unsigned 8-bit integer
alcap.ssim.max Max Len
Unsigned 16-bit integer
alcap.ssim.mult Multiplier
Unsigned 8-bit integer
alcap.ssime.frm Frame Mode
Unsigned 8-bit integer
alcap.ssime.lb Loopback
Unsigned 8-bit integer
alcap.ssime.max Max Len
Unsigned 16-bit integer
alcap.ssime.mult Multiplier
Unsigned 8-bit integer
alcap.ssisa.sscop.max_sdu_len.bw Maximum Len of SSSAR-SDU Backwards
Unsigned 16-bit integer
alcap.ssisa.sscop.max_sdu_len.fw Maximum Len of SSSAR-SDU Forward
Unsigned 16-bit integer
alcap.ssisa.sscop.max_uu_len.bw Maximum Len of SSSAR-SDU Backwards
Unsigned 16-bit integer
alcap.ssisa.sscop.max_uu_len.fw Maximum Len of SSSAR-SDU Forward
Unsigned 16-bit integer
alcap.ssisa.sssar.max_len.fw Maximum Len of SSSAR-SDU Forward
Unsigned 24-bit integer
alcap.ssisu.sssar.max_len.fw Maximum Len of SSSAR-SDU Forward
Unsigned 24-bit integer
alcap.ssisu.ted Transmission Error Detection
Unsigned 8-bit integer
alcap.suci SUCI
Unsigned 8-bit integer
Served User Correlation Id
alcap.sugr SUGR
Byte array
Served User Generated Reference
alcap.sut.sut_len SUT Length
Unsigned 8-bit integer
alcap.sut.transport SUT
Byte array
Served User Transport
alcap.unknown.field Unknown Field Data
Byte array
alcap.vbws.bitrate.bw CPS Backwards Bitrate
Unsigned 24-bit integer
alcap.vbws.bitrate.fw CPS Forward Bitrate
Unsigned 24-bit integer
alcap.vbws.bucket_size.bw Backwards CPS Bucket Size
Unsigned 16-bit integer
alcap.vbws.bucket_size.fw Forward CPS Bucket Size
Unsigned 16-bit integer
alcap.vbws.max_size.bw Backwards CPS Packet Size
Unsigned 8-bit integer
alcap.vbws.max_size.fw Forward CPS Packet Size
Unsigned 8-bit integer
alcap.vbws.stt Source Traffic Type
Unsigned 8-bit integer
alcap.vbwt.bitrate.bw Peak CPS Backwards Bitrate
Unsigned 24-bit integer
alcap.vbwt.bitrate.fw Peak CPS Forward Bitrate
Unsigned 24-bit integer
alcap.vbwt.bucket_size.bw Peak Backwards CPS Bucket Size
Unsigned 16-bit integer
alcap.vbwt.bucket_size.fw Peak Forward CPS Bucket Size
Unsigned 16-bit integer
alcap.vbwt.max_size.bw Backwards CPS Packet Size
Unsigned 8-bit integer
alcap.vbwt.max_size.fw Forward CPS Packet Size
Unsigned 8-bit integer
ACP133 Attribute Syntaxes (acp133)
acp133.ACPLegacyFormat ACPLegacyFormat
Signed 32-bit integer
acp133.ACPLegacyFormat
acp133.ACPPreferredDelivery ACPPreferredDelivery
Unsigned 32-bit integer
acp133.ACPPreferredDelivery
acp133.ALType ALType
Signed 32-bit integer
acp133.ALType
acp133.AddressCapabilities AddressCapabilities
No value
acp133.AddressCapabilities
acp133.Addressees Addressees
Unsigned 32-bit integer
acp133.Addressees
acp133.Addressees_item Item
String
acp133.PrintableString_SIZE_1_55
acp133.Capability Capability
No value
acp133.Capability
acp133.Classification Classification
Unsigned 32-bit integer
acp133.Classification
acp133.Community Community
Unsigned 32-bit integer
acp133.Community
acp133.DLPolicy DLPolicy
No value
acp133.DLPolicy
acp133.DLSubmitPermission DLSubmitPermission
Unsigned 32-bit integer
acp133.DLSubmitPermission
acp133.DistributionCode DistributionCode
String
acp133.DistributionCode
acp133.JPEG JPEG
Byte array
acp133.JPEG
acp133.Kmid Kmid
Byte array
acp133.Kmid
acp133.MLReceiptPolicy MLReceiptPolicy
Unsigned 32-bit integer
acp133.MLReceiptPolicy
acp133.MonthlyUKMs MonthlyUKMs
No value
acp133.MonthlyUKMs
acp133.OnSupported OnSupported
Byte array
acp133.OnSupported
acp133.RIParameters RIParameters
No value
acp133.RIParameters
acp133.Remarks Remarks
Unsigned 32-bit integer
acp133.Remarks
acp133.Remarks_item Item
String
acp133.PrintableString
acp133.acp127-nn acp127-nn
Boolean
acp133.acp127-pn acp127-pn
Boolean
acp133.acp127-tn acp127-tn
Boolean
acp133.address address
No value
x411.ORAddress
acp133.algorithm_identifier algorithm-identifier
No value
x509af.AlgorithmIdentifier
acp133.capabilities capabilities
Unsigned 32-bit integer
acp133.SET_OF_Capability
acp133.capabilities_item Item
No value
acp133.Capability
acp133.classification classification
Unsigned 32-bit integer
acp133.Classification
acp133.content_types content-types
Unsigned 32-bit integer
acp133.SET_OF_ExtendedContentType
acp133.content_types_item Item
x411.ExtendedContentType
acp133.conversion_with_loss_prohibited conversion-with-loss-prohibited
Unsigned 32-bit integer
acp133.T_conversion_with_loss_prohibited
acp133.date date
String
acp133.UTCTime
acp133.description description
String
acp133.GeneralString
acp133.disclosure_of_other_recipients disclosure-of-other-recipients
Unsigned 32-bit integer
acp133.T_disclosure_of_other_recipients
acp133.edition edition
Signed 32-bit integer
acp133.INTEGER
acp133.encoded_information_types_constraints encoded-information-types-constraints
No value
x411.EncodedInformationTypesConstraints
acp133.encrypted encrypted
Byte array
acp133.BIT_STRING
acp133.further_dl_expansion_allowed further-dl-expansion-allowed
Boolean
acp133.BOOLEAN
acp133.implicit_conversion_prohibited implicit-conversion-prohibited
Unsigned 32-bit integer
acp133.T_implicit_conversion_prohibited
acp133.inAdditionTo inAdditionTo
Unsigned 32-bit integer
acp133.SEQUENCE_OF_GeneralNames
acp133.inAdditionTo_item Item
Unsigned 32-bit integer
x509ce.GeneralNames
acp133.individual individual
No value
x411.ORName
acp133.insteadOf insteadOf
Unsigned 32-bit integer
acp133.SEQUENCE_OF_GeneralNames
acp133.insteadOf_item Item
Unsigned 32-bit integer
x509ce.GeneralNames
acp133.kmid kmid
Byte array
acp133.Kmid
acp133.maximum_content_length maximum-content-length
Unsigned 32-bit integer
x411.ContentLength
acp133.member_of_dl member-of-dl
No value
x411.ORName
acp133.member_of_group member-of-group
Unsigned 32-bit integer
x509if.Name
acp133.minimize minimize
Boolean
acp133.BOOLEAN
acp133.none none
No value
acp133.NULL
acp133.originating_MTA_report originating-MTA-report
Signed 32-bit integer
acp133.T_originating_MTA_report
acp133.originator_certificate_selector originator-certificate-selector
No value
x509ce.CertificateAssertion
acp133.originator_report originator-report
Signed 32-bit integer
acp133.T_originator_report
acp133.originator_requested_alternate_recipient_removed originator-requested-alternate-recipient-removed
Boolean
acp133.BOOLEAN
acp133.pattern_match pattern-match
No value
acp133.ORNamePattern
acp133.priority priority
Signed 32-bit integer
acp133.T_priority
acp133.proof_of_delivery proof-of-delivery
Signed 32-bit integer
acp133.T_proof_of_delivery
acp133.rI rI
String
acp133.PrintableString
acp133.rIType rIType
Unsigned 32-bit integer
acp133.T_rIType
acp133.recipient_certificate_selector recipient-certificate-selector
No value
x509ce.CertificateAssertion
acp133.removed removed
No value
acp133.NULL
acp133.replaced replaced
Unsigned 32-bit integer
x411.RequestedDeliveryMethod
acp133.report_from_dl report-from-dl
Signed 32-bit integer
acp133.T_report_from_dl
acp133.report_propagation report-propagation
Signed 32-bit integer
acp133.T_report_propagation
acp133.requested_delivery_method requested-delivery-method
Unsigned 32-bit integer
acp133.T_requested_delivery_method
acp133.return_of_content return-of-content
Unsigned 32-bit integer
acp133.T_return_of_content
acp133.sHD sHD
String
acp133.PrintableString
acp133.security_labels security-labels
Unsigned 32-bit integer
x411.SecurityContext
acp133.tag tag
No value
acp133.PairwiseTag
acp133.token_encryption_algorithm_preference token-encryption-algorithm-preference
Unsigned 32-bit integer
acp133.SEQUENCE_OF_AlgorithmInformation
acp133.token_encryption_algorithm_preference_item Item
No value
acp133.AlgorithmInformation
acp133.token_signature_algorithm_preference token-signature-algorithm-preference
Unsigned 32-bit integer
acp133.SEQUENCE_OF_AlgorithmInformation
acp133.token_signature_algorithm_preference_item Item
No value
acp133.AlgorithmInformation
acp133.ukm ukm
Byte array
acp133.OCTET_STRING
acp133.ukm_entries ukm-entries
Unsigned 32-bit integer
acp133.SEQUENCE_OF_UKMEntry
acp133.ukm_entries_item Item
No value
acp133.UKMEntry
acp133.unchanged unchanged
No value
acp133.NULL
AFS (4.0) Replication Server call declarations (rep_proc)
rep_proc.opnum Operation
Unsigned 16-bit integer
Operation
AIM Administrative (aim_admin)
admin.confirm_status Confirmation status
Unsigned 16-bit integer
aim.acctinfo.code Account Information Request Code
Unsigned 16-bit integer
aim.acctinfo.permissions Account Permissions
Unsigned 16-bit integer
AIM Advertisements (aim_adverts)
AIM Buddylist Service (aim_buddylist)
AIM Chat Navigation (aim_chatnav)
AIM Chat Service (aim_chat)
AIM Directory Search (aim_dir)
AIM E-mail (aim_email)
AIM Generic Service (aim_generic)
aim.client_verification.hash Client Verification MD5 Hash
Byte array
aim.client_verification.length Client Verification Request Length
Unsigned 32-bit integer
aim.client_verification.offset Client Verification Request Offset
Unsigned 32-bit integer
aim.evil.new_warn_level New warning level
Unsigned 16-bit integer
aim.ext_status.data Extended Status Data
Byte array
aim.ext_status.flags Extended Status Flags
Unsigned 8-bit integer
aim.ext_status.length Extended Status Length
Unsigned 8-bit integer
aim.ext_status.type Extended Status Type
Unsigned 16-bit integer
aim.idle_time Idle time (seconds)
Unsigned 32-bit integer
aim.migrate.numfams Number of families to migrate
Unsigned 16-bit integer
aim.privilege_flags Privilege flags
Unsigned 32-bit integer
aim.privilege_flags.allow_idle Allow other users to see idle time
Boolean
aim.privilege_flags.allow_member Allow other users to see how long account has been a member
Boolean
aim.ratechange.msg Rate Change Message
Unsigned 16-bit integer
aim.rateinfo.class.alertlevel Alert Level
Unsigned 32-bit integer
aim.rateinfo.class.clearlevel Clear Level
Unsigned 32-bit integer
aim.rateinfo.class.currentlevel Current Level
Unsigned 32-bit integer
aim.rateinfo.class.curstate Current State
Unsigned 8-bit integer
aim.rateinfo.class.disconnectlevel Disconnect Level
Unsigned 32-bit integer
aim.rateinfo.class.id Class ID
Unsigned 16-bit integer
aim.rateinfo.class.lasttime Last Time
Unsigned 32-bit integer
aim.rateinfo.class.limitlevel Limit Level
Unsigned 32-bit integer
aim.rateinfo.class.maxlevel Max Level
Unsigned 32-bit integer
aim.rateinfo.class.numpairs Number of Family/Subtype pairs
Unsigned 16-bit integer
aim.rateinfo.class.window_size Window Size
Unsigned 32-bit integer
aim.rateinfo.numclasses Number of Rateinfo Classes
Unsigned 16-bit integer
aim.rateinfoack.class Acknowledged Rate Class
Unsigned 16-bit integer
aim.selfinfo.warn_level Warning level
Unsigned 16-bit integer
generic.motd.motdtype MOTD Type
Unsigned 16-bit integer
generic.servicereq.service Requested Service
Unsigned 16-bit integer
AIM ICQ (aim_icq)
aim_icq.chunk_size Data chunk size
Unsigned 16-bit integer
aim_icq.offline_msgs.dropped_flag Dropped messages flag
Unsigned 8-bit integer
aim_icq.owner_uid Owner UID
Unsigned 32-bit integer
aim_icq.request_seq_number Request Sequence Number
Unsigned 16-bit integer
aim_icq.request_type Request Type
Unsigned 16-bit integer
aim_icq.subtype Meta Request Subtype
Unsigned 16-bit integer
AIM Invitation Service (aim_invitation)
AIM Location (aim_location)
aim.snac.location.request_user_info.infotype Infotype
Unsigned 16-bit integer
AIM Messaging (aim_messaging)
aim.clientautoresp.client_caps_flags Client Capabilities Flags
Unsigned 32-bit integer
aim.clientautoresp.protocol_version Version
Unsigned 16-bit integer
aim.clientautoresp.reason Reason
Unsigned 16-bit integer
aim.evil.warn_level Old warning level
Unsigned 16-bit integer
aim.evilreq.origin Send Evil Bit As
Unsigned 16-bit integer
aim.icbm.channel Channel to setup
Unsigned 16-bit integer
aim.icbm.extended_data.message.flags Message Flags
Unsigned 8-bit integer
aim.icbm.extended_data.message.flags.auto Auto Message
Boolean
aim.icbm.extended_data.message.flags.normal Normal Message
Boolean
aim.icbm.extended_data.message.priority_code Priority Code
Unsigned 16-bit integer
aim.icbm.extended_data.message.status_code Status Code
Unsigned 16-bit integer
aim.icbm.extended_data.message.text Text
String
aim.icbm.extended_data.message.text_length Text Length
Unsigned 16-bit integer
aim.icbm.extended_data.message.type Message Type
Unsigned 8-bit integer
aim.icbm.flags Message Flags
Unsigned 32-bit integer
aim.icbm.max_receiver_warnlevel max receiver warn level
Unsigned 16-bit integer
aim.icbm.max_sender_warn-level Max sender warn level
Unsigned 16-bit integer
aim.icbm.max_snac Max SNAC Size
Unsigned 16-bit integer
aim.icbm.min_msg_interval Minimum message interval (seconds)
Unsigned 16-bit integer
aim.icbm.rendezvous.extended_data.message.flags.multi Multiple Recipients Message
Boolean
aim.icbm.unknown Unknown parameter
Unsigned 16-bit integer
aim.messaging.channelid Message Channel ID
Unsigned 16-bit integer
aim.messaging.icbmcookie ICBM Cookie
Byte array
aim.notification.channel Notification Channel
Unsigned 16-bit integer
aim.notification.cookie Notification Cookie
Byte array
aim.notification.type Notification Type
Unsigned 16-bit integer
aim.rendezvous.msg_type Message Type
Unsigned 16-bit integer
AIM OFT (aim_oft)
AIM Popup (aim_popup)
AIM Privacy Management Service (aim_bos)
aim.bos.userclass User class
Unsigned 32-bit integer
AIM Server Side Info (aim_ssi)
aim.fnac.ssi.bid SSI Buddy ID
Unsigned 16-bit integer
aim.fnac.ssi.buddyname Buddy Name
String
aim.fnac.ssi.buddyname_len SSI Buddy Name length
Unsigned 16-bit integer
aim.fnac.ssi.data SSI Buddy Data
Unsigned 16-bit integer
aim.fnac.ssi.gid SSI Buddy Group ID
Unsigned 16-bit integer
aim.fnac.ssi.last_change_time SSI Last Change Time
Unsigned 32-bit integer
aim.fnac.ssi.numitems SSI Object count
Unsigned 16-bit integer
aim.fnac.ssi.tlvlen SSI TLV Len
Unsigned 16-bit integer
aim.fnac.ssi.type SSI Buddy type
Unsigned 16-bit integer
aim.fnac.ssi.version SSI Version
Unsigned 8-bit integer
AIM Server Side Themes (aim_sst)
aim.sst.icon Icon
Byte array
aim.sst.icon_size Icon Size
Unsigned 16-bit integer
aim.sst.md5 MD5 Hash
Byte array
aim.sst.md5.size MD5 Hash Size
Unsigned 8-bit integer
aim.sst.ref_num Reference Number
Unsigned 16-bit integer
aim.sst.unknown Unknown Data
Byte array
AIM Signon (aim_signon)
AIM Statistics (aim_stats)
AIM Translate (aim_translate)
AIM User Lookup (aim_lookup)
aim.userlookup.email Email address looked for
String
Email address
ANSI A-I/F BSMAP (ansi_a_bsmap)
ansi_a.bsmap_msgtype BSMAP Message Type
Unsigned 8-bit integer
ansi_a.cell_ci Cell CI
Unsigned 16-bit integer
ansi_a.cell_lac Cell LAC
Unsigned 16-bit integer
ansi_a.cell_mscid Cell MSCID
Unsigned 24-bit integer
ansi_a.cld_party_ascii_num Called Party ASCII Number
String
ansi_a.cld_party_bcd_num Called Party BCD Number
String
ansi_a.clg_party_ascii_num Calling Party ASCII Number
String
ansi_a.clg_party_bcd_num Calling Party BCD Number
String
ansi_a.dtap_msgtype DTAP Message Type
Unsigned 8-bit integer
ansi_a.elem_id Element ID
Unsigned 8-bit integer
ansi_a.esn ESN
Unsigned 32-bit integer
ansi_a.imsi IMSI
String
ansi_a.len Length
Unsigned 8-bit integer
ansi_a.min MIN
String
ansi_a.none Sub tree
No value
ansi_a.pdsn_ip_addr PDSN IP Address
IPv4 address
IP Address
ANSI A-I/F DTAP (ansi_a_dtap)
ANSI IS-637-A (SMS) Teleservice Layer (ansi_637_tele)
ansi_637.bin_addr Binary Address
Byte array
ansi_637.len Length
Unsigned 8-bit integer
ansi_637.none Sub tree
No value
ansi_637.tele_msg_id Message ID
Unsigned 24-bit integer
ansi_637.tele_msg_rsvd Reserved
Unsigned 24-bit integer
ansi_637.tele_msg_type Message Type
Unsigned 24-bit integer
ansi_637.tele_subparam_id Teleservice Subparam ID
Unsigned 8-bit integer
ansi_637.trans_msg_type Message Type
Unsigned 24-bit integer
ansi_637.trans_param_id Transport Param ID
Unsigned 8-bit integer
ANSI IS-637-A (SMS) Transport Layer (ansi_637_trans)
ANSI IS-683-A (OTA (Mobile)) (ansi_683)
ansi_683.for_msg_type Forward Link Message Type
Unsigned 8-bit integer
ansi_683.len Length
Unsigned 8-bit integer
ansi_683.none Sub tree
No value
ansi_683.rev_msg_type Reverse Link Message Type
Unsigned 8-bit integer
ANSI IS-801 (Location Services (PLD)) (ansi_801)
ansi_801.for_req_type Forward Request Type
Unsigned 8-bit integer
ansi_801.for_rsp_type Forward Response Type
Unsigned 8-bit integer
ansi_801.for_sess_tag Forward Session Tag
Unsigned 8-bit integer
ansi_801.rev_req_type Reverse Request Type
Unsigned 8-bit integer
ansi_801.rev_rsp_type Reverse Response Type
Unsigned 8-bit integer
ansi_801.rev_sess_tag Reverse Session Tag
Unsigned 8-bit integer
ansi_801.sess_tag Session Tag
Unsigned 8-bit integer
ANSI Mobile Application Part (ansi_map)
ansi_map.billing_id Billing ID
Signed 32-bit integer
ansi_map.id Value
Unsigned 8-bit integer
ansi_map.ios401_elem_id IOS 4.0.1 Element ID
No value
ansi_map.len Length
Unsigned 8-bit integer
ansi_map.min MIN
String
ansi_map.number Number
String
ansi_map.oprcode Operation Code
Signed 32-bit integer
ansi_map.param_id Param ID
Unsigned 32-bit integer
ansi_map.tag Tag
Unsigned 8-bit integer
AOL Instant Messenger (aim)
aim.buddyname Buddy Name
String
aim.buddynamelen Buddyname len
Unsigned 8-bit integer
aim.channel Channel ID
Unsigned 8-bit integer
aim.cmd_start Command Start
Unsigned 8-bit integer
aim.data Data
Byte array
aim.datalen Data Field Length
Unsigned 16-bit integer
aim.dcinfo.addr Internal IP address
IPv4 address
aim.dcinfo.auth_cookie Authorization Cookie
Byte array
aim.dcinfo.client_futures Client Futures
Unsigned 32-bit integer
aim.dcinfo.last_ext_info_update Last Extended Info Update
Unsigned 32-bit integer
aim.dcinfo.last_ext_status_update Last Extended Status Update
Unsigned 32-bit integer
aim.dcinfo.last_info_update Last Info Update
Unsigned 32-bit integer
aim.dcinfo.proto_version Protocol Version
Unsigned 16-bit integer
aim.dcinfo.tcpport TCP Port
Unsigned 32-bit integer
aim.dcinfo.type Type
Unsigned 8-bit integer
aim.dcinfo.unknown Unknown
Unsigned 16-bit integer
aim.dcinfo.webport Web Front Port
Unsigned 32-bit integer
aim.fnac.family FNAC Family ID
Unsigned 16-bit integer
aim.fnac.flags FNAC Flags
Unsigned 16-bit integer
aim.fnac.flags.contains_version Contains Version of Family this SNAC is in
Boolean
aim.fnac.flags.next_is_related Followed By SNAC with related information
Boolean
aim.fnac.id FNAC ID
Unsigned 32-bit integer
aim.fnac.subtype FNAC Subtype ID
Unsigned 16-bit integer
aim.infotype Infotype
Unsigned 16-bit integer
aim.messageblock.charset Block Character set
Unsigned 16-bit integer
aim.messageblock.charsubset Block Character subset
Unsigned 16-bit integer
aim.messageblock.features Features
Byte array
aim.messageblock.featuresdes Features
Unsigned 16-bit integer
aim.messageblock.featureslen Features Length
Unsigned 16-bit integer
aim.messageblock.info Block info
Unsigned 16-bit integer
aim.messageblock.length Block length
Unsigned 16-bit integer
aim.messageblock.message Message
String
aim.seqno Sequence Number
Unsigned 16-bit integer
aim.signon.challenge Signon challenge
String
aim.signon.challengelen Signon challenge length
Unsigned 16-bit integer
aim.snac.error SNAC Error
Unsigned 16-bit integer
aim.tlvcount TLV Count
Unsigned 16-bit integer
aim.userclass.administrator AOL Administrator flag
Boolean
aim.userclass.away AOL away status flag
Boolean
aim.userclass.commercial AOL commercial account flag
Boolean
aim.userclass.icq ICQ user sign
Boolean
aim.userclass.noncommercial ICQ non-commercial account flag
Boolean
aim.userclass.staff AOL Staff User Flag
Boolean
aim.userclass.unconfirmed AOL Unconfirmed user flag
Boolean
aim.userclass.unknown100 Unknown bit
Boolean
aim.userclass.unknown200 Unknown bit
Boolean
aim.userclass.unknown400 Unknown bit
Boolean
aim.userclass.unknown800 Unknown bit
Boolean
aim.userclass.wireless AOL wireless user
Boolean
aim.userinfo.warninglevel Warning Level
Unsigned 16-bit integer
aim.version Protocol Version
Byte array
ARCNET (arcnet)
arcnet.dst Dest
Unsigned 8-bit integer
Dest ID
arcnet.exception_flag Exception Flag
Unsigned 8-bit integer
Exception flag
arcnet.offset Offset
Byte array
Offset
arcnet.protID Protocol ID
Unsigned 8-bit integer
Proto type
arcnet.sequence Sequence
Unsigned 16-bit integer
Sequence number
arcnet.split_flag Split Flag
Unsigned 8-bit integer
Split flag
arcnet.src Source
Unsigned 8-bit integer
Source ID
ATAoverEthernet (aoe)
aoe.aflags.a A
Boolean
Whether this is an asynchronous write or not
aoe.aflags.d D
Boolean
aoe.aflags.e E
Boolean
Whether this is a normal or LBA48 command
aoe.aflags.w W
Boolean
Is this a command writing data to the device or not
aoe.ata.cmd ATA Cmd
Unsigned 8-bit integer
ATA command opcode
aoe.ata.status ATA Status
Unsigned 8-bit integer
ATA status bits
aoe.cmd Command
Unsigned 8-bit integer
AOE Command
aoe.err_feature Err/Feature
Unsigned 8-bit integer
Err/Feature
aoe.error Error
Unsigned 8-bit integer
Error code
aoe.lba Lba
Unsigned 64-bit integer
Lba address
aoe.major Major
Unsigned 16-bit integer
Major address
aoe.minor Minor
Unsigned 8-bit integer
Minor address
aoe.response Response flag
Boolean
Whether this is a response PDU or not
aoe.response_in Response In
Frame number
The response to this packet is in this frame
aoe.response_to Response To
Frame number
This is a response to the ATA command in this frame
aoe.sector_count Sector Count
Unsigned 8-bit integer
Sector Count
aoe.tag Tag
Unsigned 32-bit integer
Command Tag
aoe.time Time from request
Time duration
Time between Request and Reply for ATA calls
aoe.version Version
Unsigned 8-bit integer
Version of the AOE protocol
ATM (atm)
atm.aal AAL
Unsigned 8-bit integer
atm.cid CID
Unsigned 8-bit integer
atm.vci VCI
Unsigned 16-bit integer
atm.vpi VPI
Unsigned 8-bit integer
ATM AAL1 (aal1)
ATM AAL3/4 (aal3_4)
ATM LAN Emulation (lane)
ATM OAM AAL (oamaal)
AVS WLAN Capture header (wlancap)
wlancap.antenna Antenna
Unsigned 32-bit integer
wlancap.channel Channel
Unsigned 32-bit integer
wlancap.datarate Data rate
Unsigned 32-bit integer
wlancap.drops Known Dropped Frames
Unsigned 32-bit integer
wlancap.encoding Encoding Type
Unsigned 32-bit integer
wlancap.hosttime Host timestamp
Unsigned 64-bit integer
wlancap.length Header length
Unsigned 32-bit integer
wlancap.mactime MAC timestamp
Unsigned 64-bit integer
wlancap.phytype PHY type
Unsigned 32-bit integer
wlancap.preamble Preamble
Unsigned 32-bit integer
wlancap.priority Priority
Unsigned 32-bit integer
wlancap.sequence Receive sequence
Unsigned 32-bit integer
wlancap.sniffer_addr Sniffer Address
6-byte Hardware (MAC) Address
Sniffer Hardware Address
wlancap.ssi_noise SSI Noise
Signed 32-bit integer
wlancap.ssi_signal SSI Signal
Signed 32-bit integer
wlancap.ssi_type SSI Type
Unsigned 32-bit integer
wlancap.version Header revision
Unsigned 32-bit integer
AX/4000 Test Block (ax4000)
ax4000.chassis Chassis Number
Unsigned 8-bit integer
ax4000.crc CRC (unchecked)
Unsigned 16-bit integer
ax4000.fill Fill Type
Unsigned 8-bit integer
ax4000.index Index
Unsigned 16-bit integer
ax4000.port Port Number
Unsigned 8-bit integer
ax4000.seq Sequence Number
Unsigned 32-bit integer
ax4000.timestamp Timestamp
Unsigned 32-bit integer
Active Directory Setup (dssetup)
dssetup.dssetup_DsRoleFlags.DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT Ds Role Primary Domain Guid Present
Boolean
dssetup.dssetup_DsRoleFlags.DS_ROLE_PRIMARY_DS_MIXED_MODE Ds Role Primary Ds Mixed Mode
Boolean
dssetup.dssetup_DsRoleFlags.DS_ROLE_PRIMARY_DS_RUNNING Ds Role Primary Ds Running
Boolean
dssetup.dssetup_DsRoleFlags.DS_ROLE_UPGRADE_IN_PROGRESS Ds Role Upgrade In Progress
Boolean
dssetup.dssetup_DsRoleGetPrimaryDomainInformation.info Info
No value
dssetup.dssetup_DsRoleGetPrimaryDomainInformation.level Level
Unsigned 16-bit integer
dssetup.dssetup_DsRoleInfo.basic Basic
No value
dssetup.dssetup_DsRoleInfo.opstatus Opstatus
No value
dssetup.dssetup_DsRoleInfo.upgrade Upgrade
No value
dssetup.dssetup_DsRoleOpStatus.status Status
Unsigned 16-bit integer
dssetup.dssetup_DsRolePrimaryDomInfoBasic.dns_domain Dns Domain
String
dssetup.dssetup_DsRolePrimaryDomInfoBasic.domain Domain
String
dssetup.dssetup_DsRolePrimaryDomInfoBasic.domain_guid Domain Guid
dssetup.dssetup_DsRolePrimaryDomInfoBasic.flags Flags
Unsigned 32-bit integer
dssetup.dssetup_DsRolePrimaryDomInfoBasic.forest Forest
String
dssetup.dssetup_DsRolePrimaryDomInfoBasic.role Role
Unsigned 16-bit integer
dssetup.dssetup_DsRoleUpgradeStatus.previous_role Previous Role
Unsigned 16-bit integer
dssetup.dssetup_DsRoleUpgradeStatus.upgrading Upgrading
Unsigned 32-bit integer
dssetup.opnum Operation
Unsigned 16-bit integer
dssetup.werror Windows Error
Unsigned 32-bit integer
Ad hoc On-demand Distance Vector Routing Protocol (aodv)
aodv.dest_ip Destination IP
IPv4 address
Destination IP Address
aodv.dest_ipv6 Destination IPv6
IPv6 address
Destination IPv6 Address
aodv.dest_seqno Destination Sequence Number
Unsigned 32-bit integer
Destination Sequence Number
aodv.destcount Destination Count
Unsigned 8-bit integer
Unreachable Destinations Count
aodv.ext_length Extension Length
Unsigned 8-bit integer
Extension Data Length
aodv.ext_type Extension Type
Unsigned 8-bit integer
Extension Format Type
aodv.flags Flags
Unsigned 16-bit integer
Flags
aodv.flags.rerr_nodelete RERR No Delete
Boolean
aodv.flags.rrep_ack RREP Acknowledgement
Boolean
aodv.flags.rrep_repair RREP Repair
Boolean
aodv.flags.rreq_destinationonly RREQ Destination only
Boolean
aodv.flags.rreq_gratuitous RREQ Gratuitous RREP
Boolean
aodv.flags.rreq_join RREQ Join
Boolean
aodv.flags.rreq_repair RREQ Repair
Boolean
aodv.flags.rreq_unknown RREQ Unknown Sequence Number
Boolean
aodv.hello_interval Hello Interval
Unsigned 32-bit integer
Hello Interval Extension
aodv.hopcount Hop Count
Unsigned 8-bit integer
Hop Count
aodv.lifetime Lifetime
Unsigned 32-bit integer
Lifetime
aodv.orig_ip Originator IP
IPv4 address
Originator IP Address
aodv.orig_ipv6 Originator IPv6
IPv6 address
Originator IPv6 Address
aodv.orig_seqno Originator Sequence Number
Unsigned 32-bit integer
Originator Sequence Number
aodv.prefix_sz Prefix Size
Unsigned 8-bit integer
Prefix Size
aodv.rreq_id RREQ Id
Unsigned 32-bit integer
RREQ Id
aodv.timestamp Timestamp
Unsigned 64-bit integer
Timestamp Extension
aodv.type Type
Unsigned 8-bit integer
AODV packet type
aodv.unreach_dest_ip Unreachable Destination IP
IPv4 address
Unreachable Destination IP Address
aodv.unreach_dest_ipv6 Unreachable Destination IPv6
IPv6 address
Unreachable Destination IPv6 Address
aodv.unreach_dest_seqno Unreachable Destination Sequence Number
Unsigned 32-bit integer
Unreachable Destination Sequence Number
Adaptive Multi-Rate (amr)
amr.cmr CMR
Unsigned 8-bit integer
codec mode request
amr.fqi FQI
Boolean
Frame quality indicator bit
amr.if1.ft Frame Type
Unsigned 8-bit integer
Frame Type
amr.if1.modereq Mode Type request
Unsigned 8-bit integer
Mode Type request
amr.if1.sti SID Type Indicator
Boolean
SID Type Indicator
amr.if2.ft Frame Type
Unsigned 8-bit integer
Frame Type
amr.reserved Reserved
Unsigned 8-bit integer
Reserved bits
amr.sti SID Type Indicator
Boolean
SID Type Indicator
amr.toc.f F bit
Boolean
F bit
amr.toc.f.ual1 F bit
Boolean
F bit
amr.toc.f.ual2 F bit
Boolean
F bit
amr.toc.ft FT bits
Unsigned 8-bit integer
FT bits
amr.toc.ft.ual1 FT bits
Unsigned 16-bit integer
FT bits
amr.toc.ft.ual2 FT bits
Unsigned 16-bit integer
FT bits
amr.toc.q Q bit
Boolean
Frame quality indicator bit
amr.toc.ua1.q.ual1 Q bit
Boolean
Frame quality indicator bit
amr.toc.ua1.q.ual2 Q bit
Boolean
Frame quality indicator bit
Address Resolution Protocol (arp)
arp.dst.atm_num_e164 Target ATM number (E.164)
String
arp.dst.atm_num_nsap Target ATM number (NSAP)
Byte array
arp.dst.atm_subaddr Target ATM subaddress
Byte array
arp.dst.hlen Target ATM number length
Unsigned 8-bit integer
arp.dst.htype Target ATM number type
Boolean
arp.dst.hw Target hardware address
Byte array
arp.dst.hw_mac Target MAC address
6-byte Hardware (MAC) Address
arp.dst.pln Target protocol size
Unsigned 8-bit integer
arp.dst.proto Target protocol address
Byte array
arp.dst.proto_ipv4 Target IP address
IPv4 address
arp.dst.slen Target ATM subaddress length
Unsigned 8-bit integer
arp.dst.stype Target ATM subaddress type
Boolean
arp.hw.size Hardware size
Unsigned 8-bit integer
arp.hw.type Hardware type
Unsigned 16-bit integer
arp.opcode Opcode
Unsigned 16-bit integer
arp.proto.size Protocol size
Unsigned 8-bit integer
arp.proto.type Protocol type
Unsigned 16-bit integer
arp.src.atm_num_e164 Sender ATM number (E.164)
String
arp.src.atm_num_nsap Sender ATM number (NSAP)
Byte array
arp.src.atm_subaddr Sender ATM subaddress
Byte array
arp.src.hlen Sender ATM number length
Unsigned 8-bit integer
arp.src.htype Sender ATM number type
Boolean
arp.src.hw Sender hardware address
Byte array
arp.src.hw_mac Sender MAC address
6-byte Hardware (MAC) Address
arp.src.pln Sender protocol size
Unsigned 8-bit integer
arp.src.proto Sender protocol address
Byte array
arp.src.proto_ipv4 Sender IP address
IPv4 address
arp.src.slen Sender ATM subaddress length
Unsigned 8-bit integer
arp.src.stype Sender ATM subaddress type
Boolean
Aggregate Server Access Protocol (asap)
asap.cause_code Cause code
Unsigned 16-bit integer
asap.cause_info Cause info
Byte array
asap.cause_length Cause length
Unsigned 16-bit integer
asap.cause_padding Padding
Byte array
asap.cookie Cookie
Byte array
asap.h_bit H bit
Boolean
asap.ipv4_address IP Version 4 address
IPv4 address
asap.ipv6_address IP Version 6 address
IPv6 address
asap.message_flags Flags
Unsigned 8-bit integer
asap.message_length Length
Unsigned 16-bit integer
asap.message_type Type
Unsigned 8-bit integer
asap.parameter_length Parameter length
Unsigned 16-bit integer
asap.parameter_padding Padding
Byte array
asap.parameter_type Parameter Type
Unsigned 16-bit integer
asap.parameter_value Parameter value
Byte array
asap.pe_checksum PE checksum
Unsigned 32-bit integer
asap.pe_checksum_reserved Reserved
Unsigned 16-bit integer
asap.pe_identifier PE identifier
Unsigned 32-bit integer
asap.pool_element_home_enrp_server_identifier Home ENRP server identifier
Unsigned 32-bit integer
asap.pool_element_pe_identifier PE identifier
Unsigned 32-bit integer
asap.pool_element_registration_life Registration life
Signed 32-bit integer
asap.pool_handle_pool_handle Pool handle
Byte array
asap.pool_member_slection_policy_type Policy type
Unsigned 8-bit integer
asap.pool_member_slection_policy_value Policy value
Signed 24-bit integer
asap.r_bit R bit
Boolean
asap.sctp_transport_port Port
Unsigned 16-bit integer
asap.server_identifier Server identifier
Unsigned 32-bit integer
asap.server_information_m_bit M-Bit
Boolean
asap.server_information_reserved Reserved
Unsigned 32-bit integer
asap.tcp_transport_port Port
Unsigned 16-bit integer
asap.transport_use Transport use
Unsigned 16-bit integer
asap.udp_transport_port Port
Unsigned 16-bit integer
asap.udp_transport_reserved Reserved
Unsigned 16-bit integer
Alert Standard Forum (asf)
asf.iana IANA Enterprise Number
Unsigned 32-bit integer
ASF IANA Enterprise Number
asf.len Data Length
Unsigned 8-bit integer
ASF Data Length
asf.tag Message Tag
Unsigned 8-bit integer
ASF Message Tag
asf.type Message Type
Unsigned 8-bit integer
ASF Message Type
Alteon - Transparent Proxy Cache Protocol (tpcp)
tpcp.caddr Client Source IP address
IPv4 address
tpcp.cid Client indent
Unsigned 16-bit integer
tpcp.cport Client Source Port
Unsigned 16-bit integer
tpcp.flags.redir No Redirect
Boolean
Don't redirect client
tpcp.flags.tcp UDP/TCP
Boolean
Protocol type
tpcp.flags.xoff XOFF
Boolean
tpcp.flags.xon XON
Boolean
tpcp.rasaddr RAS server IP address
IPv4 address
tpcp.saddr Server IP address
IPv4 address
tpcp.type Type
Unsigned 8-bit integer
PDU type
tpcp.vaddr Virtual Server IP address
IPv4 address
tpcp.version Version
Unsigned 8-bit integer
TPCP version
Andrew File System (AFS) (afs)
afs.backup Backup
Boolean
Backup Server
afs.backup.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.backup.opcode Operation
Unsigned 32-bit integer
Operation
afs.bos BOS
Boolean
Basic Oversee Server
afs.bos.baktime Backup Time
Date/Time stamp
Backup Time
afs.bos.cell Cell
String
Cell
afs.bos.cmd Command
String
Command
afs.bos.content Content
String
Content
afs.bos.data Data
Byte array
Data
afs.bos.date Date
Unsigned 32-bit integer
Date
afs.bos.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.bos.error Error
String
Error
afs.bos.file File
String
File
afs.bos.flags Flags
Unsigned 32-bit integer
Flags
afs.bos.host Host
String
Host
afs.bos.instance Instance
String
Instance
afs.bos.key Key
Byte array
key
afs.bos.keychecksum Key Checksum
Unsigned 32-bit integer
Key Checksum
afs.bos.keymodtime Key Modification Time
Date/Time stamp
Key Modification Time
afs.bos.keyspare2 Key Spare 2
Unsigned 32-bit integer
Key Spare 2
afs.bos.kvno Key Version Number
Unsigned 32-bit integer
Key Version Number
afs.bos.newtime New Time
Date/Time stamp
New Time
afs.bos.number Number
Unsigned 32-bit integer
Number
afs.bos.oldtime Old Time
Date/Time stamp
Old Time
afs.bos.opcode Operation
Unsigned 32-bit integer
Operation
afs.bos.parm Parm
String
Parm
afs.bos.path Path
String
Path
afs.bos.size Size
Unsigned 32-bit integer
Size
afs.bos.spare1 Spare1
String
Spare1
afs.bos.spare2 Spare2
String
Spare2
afs.bos.spare3 Spare3
String
Spare3
afs.bos.status Status
Signed 32-bit integer
Status
afs.bos.statusdesc Status Description
String
Status Description
afs.bos.type Type
String
Type
afs.bos.user User
String
User
afs.cb Callback
Boolean
Callback
afs.cb.callback.expires Expires
Date/Time stamp
Expires
afs.cb.callback.type Type
Unsigned 32-bit integer
Type
afs.cb.callback.version Version
Unsigned 32-bit integer
Version
afs.cb.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.cb.fid.uniq FileID (Uniqifier)
Unsigned 32-bit integer
File ID (Uniqifier)
afs.cb.fid.vnode FileID (VNode)
Unsigned 32-bit integer
File ID (VNode)
afs.cb.fid.volume FileID (Volume)
Unsigned 32-bit integer
File ID (Volume)
afs.cb.opcode Operation
Unsigned 32-bit integer
Operation
afs.error Error
Boolean
Error
afs.error.opcode Operation
Unsigned 32-bit integer
Operation
afs.fs File Server
Boolean
File Server
afs.fs.acl.a _A_dminister
Boolean
Administer
afs.fs.acl.count.negative ACL Count (Negative)
Unsigned 32-bit integer
Number of Negative ACLs
afs.fs.acl.count.positive ACL Count (Positive)
Unsigned 32-bit integer
Number of Positive ACLs
afs.fs.acl.d _D_elete
Boolean
Delete
afs.fs.acl.datasize ACL Size
Unsigned 32-bit integer
ACL Data Size
afs.fs.acl.entity Entity (User/Group)
String
ACL Entity (User/Group)
afs.fs.acl.i _I_nsert
Boolean
Insert
afs.fs.acl.k _L_ock
Boolean
Lock
afs.fs.acl.l _L_ookup
Boolean
Lookup
afs.fs.acl.r _R_ead
Boolean
Read
afs.fs.acl.w _W_rite
Boolean
Write
afs.fs.callback.expires Expires
Time duration
Expires
afs.fs.callback.type Type
Unsigned 32-bit integer
Type
afs.fs.callback.version Version
Unsigned 32-bit integer
Version
afs.fs.cps.spare1 CPS Spare1
Unsigned 32-bit integer
CPS Spare1
afs.fs.cps.spare2 CPS Spare2
Unsigned 32-bit integer
CPS Spare2
afs.fs.cps.spare3 CPS Spare3
Unsigned 32-bit integer
CPS Spare3
afs.fs.data Data
Byte array
Data
afs.fs.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.fs.fid.uniq FileID (Uniqifier)
Unsigned 32-bit integer
File ID (Uniqifier)
afs.fs.fid.vnode FileID (VNode)
Unsigned 32-bit integer
File ID (VNode)
afs.fs.fid.volume FileID (Volume)
Unsigned 32-bit integer
File ID (Volume)
afs.fs.flength FLength
Unsigned 32-bit integer
FLength
afs.fs.flength64 FLength64
Unsigned 64-bit integer
FLength64
afs.fs.length Length
Unsigned 32-bit integer
Length
afs.fs.length64 Length64
Unsigned 64-bit integer
Length64
afs.fs.motd Message of the Day
String
Message of the Day
afs.fs.name Name
String
Name
afs.fs.newname New Name
String
New Name
afs.fs.offlinemsg Offline Message
String
Volume Name
afs.fs.offset Offset
Unsigned 32-bit integer
Offset
afs.fs.offset64 Offset64
Unsigned 64-bit integer
Offset64
afs.fs.oldname Old Name
String
Old Name
afs.fs.opcode Operation
Unsigned 32-bit integer
Operation
afs.fs.status.anonymousaccess Anonymous Access
Unsigned 32-bit integer
Anonymous Access
afs.fs.status.author Author
Unsigned 32-bit integer
Author
afs.fs.status.calleraccess Caller Access
Unsigned 32-bit integer
Caller Access
afs.fs.status.clientmodtime Client Modification Time
Date/Time stamp
Client Modification Time
afs.fs.status.dataversion Data Version
Unsigned 32-bit integer
Data Version
afs.fs.status.dataversionhigh Data Version (High)
Unsigned 32-bit integer
Data Version (High)
afs.fs.status.filetype File Type
Unsigned 32-bit integer
File Type
afs.fs.status.group Group
Unsigned 32-bit integer
Group
afs.fs.status.interfaceversion Interface Version
Unsigned 32-bit integer
Interface Version
afs.fs.status.length Length
Unsigned 32-bit integer
Length
afs.fs.status.linkcount Link Count
Unsigned 32-bit integer
Link Count
afs.fs.status.mask Mask
Unsigned 32-bit integer
Mask
afs.fs.status.mask.fsync FSync
Boolean
FSync
afs.fs.status.mask.setgroup Set Group
Boolean
Set Group
afs.fs.status.mask.setmode Set Mode
Boolean
Set Mode
afs.fs.status.mask.setmodtime Set Modification Time
Boolean
Set Modification Time
afs.fs.status.mask.setowner Set Owner
Boolean
Set Owner
afs.fs.status.mask.setsegsize Set Segment Size
Boolean
Set Segment Size
afs.fs.status.mode Unix Mode
Unsigned 32-bit integer
Unix Mode
afs.fs.status.owner Owner
Unsigned 32-bit integer
Owner
afs.fs.status.parentunique Parent Unique
Unsigned 32-bit integer
Parent Unique
afs.fs.status.parentvnode Parent VNode
Unsigned 32-bit integer
Parent VNode
afs.fs.status.segsize Segment Size
Unsigned 32-bit integer
Segment Size
afs.fs.status.servermodtime Server Modification Time
Date/Time stamp
Server Modification Time
afs.fs.status.spare2 Spare 2
Unsigned 32-bit integer
Spare 2
afs.fs.status.spare3 Spare 3
Unsigned 32-bit integer
Spare 3
afs.fs.status.spare4 Spare 4
Unsigned 32-bit integer
Spare 4
afs.fs.status.synccounter Sync Counter
Unsigned 32-bit integer
Sync Counter
afs.fs.symlink.content Symlink Content
String
Symlink Content
afs.fs.symlink.name Symlink Name
String
Symlink Name
afs.fs.timestamp Timestamp
Date/Time stamp
Timestamp
afs.fs.token Token
Byte array
Token
afs.fs.viceid Vice ID
Unsigned 32-bit integer
Vice ID
afs.fs.vicelocktype Vice Lock Type
Unsigned 32-bit integer
Vice Lock Type
afs.fs.volid Volume ID
Unsigned 32-bit integer
Volume ID
afs.fs.volname Volume Name
String
Volume Name
afs.fs.volsync.spare1 Volume Creation Timestamp
Date/Time stamp
Volume Creation Timestamp
afs.fs.volsync.spare2 Spare 2
Unsigned 32-bit integer
Spare 2
afs.fs.volsync.spare3 Spare 3
Unsigned 32-bit integer
Spare 3
afs.fs.volsync.spare4 Spare 4
Unsigned 32-bit integer
Spare 4
afs.fs.volsync.spare5 Spare 5
Unsigned 32-bit integer
Spare 5
afs.fs.volsync.spare6 Spare 6
Unsigned 32-bit integer
Spare 6
afs.fs.xstats.clientversion Client Version
Unsigned 32-bit integer
Client Version
afs.fs.xstats.collnumber Collection Number
Unsigned 32-bit integer
Collection Number
afs.fs.xstats.timestamp XStats Timestamp
Unsigned 32-bit integer
XStats Timestamp
afs.fs.xstats.version XStats Version
Unsigned 32-bit integer
XStats Version
afs.kauth KAuth
Boolean
Kerberos Auth Server
afs.kauth.data Data
Byte array
Data
afs.kauth.domain Domain
String
Domain
afs.kauth.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.kauth.kvno Key Version Number
Unsigned 32-bit integer
Key Version Number
afs.kauth.name Name
String
Name
afs.kauth.opcode Operation
Unsigned 32-bit integer
Operation
afs.kauth.princ Principal
String
Principal
afs.kauth.realm Realm
String
Realm
afs.prot Protection
Boolean
Protection Server
afs.prot.count Count
Unsigned 32-bit integer
Count
afs.prot.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.prot.flag Flag
Unsigned 32-bit integer
Flag
afs.prot.gid Group ID
Unsigned 32-bit integer
Group ID
afs.prot.id ID
Unsigned 32-bit integer
ID
afs.prot.maxgid Maximum Group ID
Unsigned 32-bit integer
Maximum Group ID
afs.prot.maxuid Maximum User ID
Unsigned 32-bit integer
Maximum User ID
afs.prot.name Name
String
Name
afs.prot.newid New ID
Unsigned 32-bit integer
New ID
afs.prot.oldid Old ID
Unsigned 32-bit integer
Old ID
afs.prot.opcode Operation
Unsigned 32-bit integer
Operation
afs.prot.pos Position
Unsigned 32-bit integer
Position
afs.prot.uid User ID
Unsigned 32-bit integer
User ID
afs.repframe Reply Frame
Frame number
Reply Frame
afs.reqframe Request Frame
Frame number
Request Frame
afs.rmtsys Rmtsys
Boolean
Rmtsys
afs.rmtsys.opcode Operation
Unsigned 32-bit integer
Operation
afs.time Time from request
Time duration
Time between Request and Reply for AFS calls
afs.ubik Ubik
Boolean
Ubik
afs.ubik.activewrite Active Write
Unsigned 32-bit integer
Active Write
afs.ubik.addr Address
IPv4 address
Address
afs.ubik.amsyncsite Am Sync Site
Unsigned 32-bit integer
Am Sync Site
afs.ubik.anyreadlocks Any Read Locks
Unsigned 32-bit integer
Any Read Locks
afs.ubik.anywritelocks Any Write Locks
Unsigned 32-bit integer
Any Write Locks
afs.ubik.beaconsincedown Beacon Since Down
Unsigned 32-bit integer
Beacon Since Down
afs.ubik.currentdb Current DB
Unsigned 32-bit integer
Current DB
afs.ubik.currenttran Current Transaction
Unsigned 32-bit integer
Current Transaction
afs.ubik.epochtime Epoch Time
Date/Time stamp
Epoch Time
afs.ubik.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.ubik.file File
Unsigned 32-bit integer
File
afs.ubik.interface Interface Address
IPv4 address
Interface Address
afs.ubik.isclone Is Clone
Unsigned 32-bit integer
Is Clone
afs.ubik.lastbeaconsent Last Beacon Sent
Date/Time stamp
Last Beacon Sent
afs.ubik.lastvote Last Vote
Unsigned 32-bit integer
Last Vote
afs.ubik.lastvotetime Last Vote Time
Date/Time stamp
Last Vote Time
afs.ubik.lastyesclaim Last Yes Claim
Date/Time stamp
Last Yes Claim
afs.ubik.lastyeshost Last Yes Host
IPv4 address
Last Yes Host
afs.ubik.lastyesstate Last Yes State
Unsigned 32-bit integer
Last Yes State
afs.ubik.lastyesttime Last Yes Time
Date/Time stamp
Last Yes Time
afs.ubik.length Length
Unsigned 32-bit integer
Length
afs.ubik.lockedpages Locked Pages
Unsigned 32-bit integer
Locked Pages
afs.ubik.locktype Lock Type
Unsigned 32-bit integer
Lock Type
afs.ubik.lowesthost Lowest Host
IPv4 address
Lowest Host
afs.ubik.lowesttime Lowest Time
Date/Time stamp
Lowest Time
afs.ubik.now Now
Date/Time stamp
Now
afs.ubik.nservers Number of Servers
Unsigned 32-bit integer
Number of Servers
afs.ubik.opcode Operation
Unsigned 32-bit integer
Operation
afs.ubik.position Position
Unsigned 32-bit integer
Position
afs.ubik.recoverystate Recovery State
Unsigned 32-bit integer
Recovery State
afs.ubik.site Site
IPv4 address
Site
afs.ubik.state State
Unsigned 32-bit integer
State
afs.ubik.synchost Sync Host
IPv4 address
Sync Host
afs.ubik.syncsiteuntil Sync Site Until
Date/Time stamp
Sync Site Until
afs.ubik.synctime Sync Time
Date/Time stamp
Sync Time
afs.ubik.tidcounter TID Counter
Unsigned 32-bit integer
TID Counter
afs.ubik.up Up
Unsigned 32-bit integer
Up
afs.ubik.version.counter Counter
Unsigned 32-bit integer
Counter
afs.ubik.version.epoch Epoch
Date/Time stamp
Epoch
afs.ubik.voteend Vote Ends
Date/Time stamp
Vote Ends
afs.ubik.votestart Vote Started
Date/Time stamp
Vote Started
afs.ubik.votetype Vote Type
Unsigned 32-bit integer
Vote Type
afs.ubik.writelockedpages Write Locked Pages
Unsigned 32-bit integer
Write Locked Pages
afs.ubik.writetran Write Transaction
Unsigned 32-bit integer
Write Transaction
afs.update Update
Boolean
Update Server
afs.update.opcode Operation
Unsigned 32-bit integer
Operation
afs.vldb VLDB
Boolean
Volume Location Database Server
afs.vldb.bkvol Backup Volume ID
Unsigned 32-bit integer
Read-Only Volume ID
afs.vldb.bump Bumped Volume ID
Unsigned 32-bit integer
Bumped Volume ID
afs.vldb.clonevol Clone Volume ID
Unsigned 32-bit integer
Clone Volume ID
afs.vldb.count Volume Count
Unsigned 32-bit integer
Volume Count
afs.vldb.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.vldb.flags Flags
Unsigned 32-bit integer
Flags
afs.vldb.flags.bkexists Backup Exists
Boolean
Backup Exists
afs.vldb.flags.dfsfileset DFS Fileset
Boolean
DFS Fileset
afs.vldb.flags.roexists Read-Only Exists
Boolean
Read-Only Exists
afs.vldb.flags.rwexists Read/Write Exists
Boolean
Read/Write Exists
afs.vldb.id Volume ID
Unsigned 32-bit integer
Volume ID
afs.vldb.index Volume Index
Unsigned 32-bit integer
Volume Index
afs.vldb.name Volume Name
String
Volume Name
afs.vldb.nextindex Next Volume Index
Unsigned 32-bit integer
Next Volume Index
afs.vldb.numservers Number of Servers
Unsigned 32-bit integer
Number of Servers
afs.vldb.opcode Operation
Unsigned 32-bit integer
Operation
afs.vldb.partition Partition
String
Partition
afs.vldb.rovol Read-Only Volume ID
Unsigned 32-bit integer
Read-Only Volume ID
afs.vldb.rwvol Read-Write Volume ID
Unsigned 32-bit integer
Read-Only Volume ID
afs.vldb.server Server
IPv4 address
Server
afs.vldb.serverflags Server Flags
Unsigned 32-bit integer
Server Flags
afs.vldb.serverip Server IP
IPv4 address
Server IP
afs.vldb.serveruniq Server Unique Address
Unsigned 32-bit integer
Server Unique Address
afs.vldb.serveruuid Server UUID
Byte array
Server UUID
afs.vldb.spare1 Spare 1
Unsigned 32-bit integer
Spare 1
afs.vldb.spare2 Spare 2
Unsigned 32-bit integer
Spare 2
afs.vldb.spare3 Spare 3
Unsigned 32-bit integer
Spare 3
afs.vldb.spare4 Spare 4
Unsigned 32-bit integer
Spare 4
afs.vldb.spare5 Spare 5
Unsigned 32-bit integer
Spare 5
afs.vldb.spare6 Spare 6
Unsigned 32-bit integer
Spare 6
afs.vldb.spare7 Spare 7
Unsigned 32-bit integer
Spare 7
afs.vldb.spare8 Spare 8
Unsigned 32-bit integer
Spare 8
afs.vldb.spare9 Spare 9
Unsigned 32-bit integer
Spare 9
afs.vldb.type Volume Type
Unsigned 32-bit integer
Volume Type
afs.vol Volume Server
Boolean
Volume Server
afs.vol.count Volume Count
Unsigned 32-bit integer
Volume Count
afs.vol.errcode Error Code
Unsigned 32-bit integer
Error Code
afs.vol.id Volume ID
Unsigned 32-bit integer
Volume ID
afs.vol.name Volume Name
String
Volume Name
afs.vol.opcode Operation
Unsigned 32-bit integer
Operation
Apache JServ Protocol v1.3 (ajp13)
ajp13.code Code
String
Type Code
ajp13.data Data
String
Data
ajp13.hname HNAME
String
Header Name
ajp13.hval HVAL
String
Header Value
ajp13.len Length
Unsigned 16-bit integer
Data Length
ajp13.magic Magic
Byte array
Magic Number
ajp13.method Method
String
HTTP Method
ajp13.nhdr NHDR
Unsigned 16-bit integer
Num Headers
ajp13.port PORT
Unsigned 16-bit integer
Port
ajp13.raddr RADDR
String
Remote Address
ajp13.reusep REUSEP
Unsigned 8-bit integer
Reuse Connection?
ajp13.rhost RHOST
String
Remote Host
ajp13.rlen RLEN
Unsigned 16-bit integer
Requested Length
ajp13.rmsg RSMSG
String
HTTP Status Message
ajp13.rstatus RSTATUS
Unsigned 16-bit integer
HTTP Status Code
ajp13.srv SRV
String
Server
ajp13.sslp SSLP
Unsigned 8-bit integer
Is SSL?
ajp13.uri URI
String
HTTP URI
ajp13.ver Version
String
HTTP Version
Apple Filing Protocol (afp)
afp.AFPVersion AFP Version
String
Client AFP version
afp.UAM UAM
String
User Authentication Method
afp.access Access mode
Unsigned 8-bit integer
Fork access mode
afp.access.deny_read Deny read
Boolean
Deny read
afp.access.deny_write Deny write
Boolean
Deny write
afp.access.read Read
Boolean
Open for reading
afp.access.write Write
Boolean
Open for writing
afp.access_bitmap Bitmap
Unsigned 16-bit integer
Bitmap (reserved)
afp.ace_applicable ACE
Byte array
ACE applicable
afp.ace_flags Flags
Unsigned 32-bit integer
ACE flags
afp.ace_flags.allow Allow
Boolean
Allow rule
afp.ace_flags.deny Deny
Boolean
Deny rule
afp.ace_flags.directory_inherit Dir inherit
Boolean
Dir inherit
afp.ace_flags.file_inherit File inherit
Boolean
File inherit
afp.ace_flags.inherited Inherited
Boolean
Inherited
afp.ace_flags.limit_inherit Limit inherit
Boolean
Limit inherit
afp.ace_flags.only_inherit Only inherit
Boolean
Only inherit
afp.ace_rights Rights
Unsigned 32-bit integer
ACE flags
afp.acl_access_bitmap Bitmap
Unsigned 32-bit integer
ACL access bitmap
afp.acl_access_bitmap.append_data Append data/create subdir
Boolean
Append data to a file / create a subdirectory
afp.acl_access_bitmap.change_owner Change owner
Boolean
Change owner
afp.acl_access_bitmap.delete Delete
Boolean
Delete
afp.acl_access_bitmap.delete_child Delete dir
Boolean
Delete directory
afp.acl_access_bitmap.execute Execute/Search
Boolean
Execute a program
afp.acl_access_bitmap.generic_all Generic all
Boolean
Generic all
afp.acl_access_bitmap.generic_execute Generic execute
Boolean
Generic execute
afp.acl_access_bitmap.generic_read Generic read
Boolean
Generic read
afp.acl_access_bitmap.generic_write Generic write
Boolean
Generic write
afp.acl_access_bitmap.read_attrs Read attributes
Boolean
Read attributes
afp.acl_access_bitmap.read_data Read/List
Boolean
Read data / list directory
afp.acl_access_bitmap.read_extattrs Read extended attributes
Boolean
Read extended attributes
afp.acl_access_bitmap.read_security Read security
Boolean
Read access rights
afp.acl_access_bitmap.synchronize Synchronize
Boolean
Synchronize
afp.acl_access_bitmap.write_attrs Write attributes
Boolean
Write attributes
afp.acl_access_bitmap.write_data Write/Add file
Boolean
Write data to a file / add a file to a directory
afp.acl_access_bitmap.write_extattrs Write extended attributes
Boolean
Write extended attributes
afp.acl_access_bitmap.write_security Write security
Boolean
Write access rights
afp.acl_entrycount Count
Unsigned 32-bit integer
Number of ACL entries
afp.acl_flags ACL flags
Unsigned 32-bit integer
ACL flags
afp.acl_list_bitmap ACL bitmap
Unsigned 16-bit integer
ACL control list bitmap
afp.acl_list_bitmap.ACL ACL
Boolean
ACL
afp.acl_list_bitmap.GRPUUID GRPUUID
Boolean
Group UUID
afp.acl_list_bitmap.Inherit Inherit
Boolean
Inherit ACL
afp.acl_list_bitmap.REMOVEACL Remove ACL
Boolean
Remove ACL
afp.acl_list_bitmap.UUID UUID
Boolean
User UUID
afp.actual_count Count
Signed 32-bit integer
Number of bytes returned by read/write
afp.afp_login_flags Flags
Unsigned 16-bit integer
Login flags
afp.appl_index Index
Unsigned 16-bit integer
Application index
afp.appl_tag Tag
Unsigned 32-bit integer
Application tag
afp.backup_date Backup date
Date/Time stamp
Backup date
afp.cat_count Cat count
Unsigned 32-bit integer
Number of structures returned
afp.cat_position Position
Byte array
Reserved
afp.cat_req_matches Max answers
Signed 32-bit integer
Maximum number of matches to return.
afp.command Command
Unsigned 8-bit integer
AFP function
afp.comment Comment
String
File/folder comment
afp.create_flag Hard create
Boolean
Soft/hard create file
afp.creation_date Creation date
Date/Time stamp
Creation date
afp.data_fork_len Data fork size
Unsigned 32-bit integer
Data fork size
afp.did DID
Unsigned 32-bit integer
Parent directory ID
afp.dir_ar Access rights
Unsigned 32-bit integer
Directory access rights
afp.dir_ar.blank Blank access right
Boolean
Blank access right
afp.dir_ar.e_read Everyone has read access
Boolean
Everyone has read access
afp.dir_ar.e_search Everyone has search access
Boolean
Everyone has search access
afp.dir_ar.e_write Everyone has write access
Boolean
Everyone has write access
afp.dir_ar.g_read Group has read access
Boolean
Group has read access
afp.dir_ar.g_search Group has search access
Boolean
Group has search access
afp.dir_ar.g_write Group has write access
Boolean
Group has write access
afp.dir_ar.o_read Owner has read access
Boolean
Owner has read access
afp.dir_ar.o_search Owner has search access
Boolean
Owner has search access
afp.dir_ar.o_write Owner has write access
Boolean
Gwner has write access
afp.dir_ar.u_owner User is the owner
Boolean
Current user is the directory owner
afp.dir_ar.u_read User has read access
Boolean
User has read access
afp.dir_ar.u_search User has search access
Boolean
User has search access
afp.dir_ar.u_write User has write access
Boolean
User has write access
afp.dir_attribute.backup_needed Backup needed
Boolean
Directory needs to be backed up
afp.dir_attribute.delete_inhibit Delete inhibit
Boolean
Delete inhibit
afp.dir_attribute.in_exported_folder Shared area
Boolean
Directory is in a shared area
afp.dir_attribute.invisible Invisible
Boolean
Directory is not visible
afp.dir_attribute.mounted Mounted
Boolean
Directory is mounted
afp.dir_attribute.rename_inhibit Rename inhibit
Boolean
Rename inhibit
afp.dir_attribute.set_clear Set
Boolean
Clear/set attribute
afp.dir_attribute.share Share point
Boolean
Directory is a share point
afp.dir_attribute.system System
Boolean
Directory is a system directory
afp.dir_bitmap Directory bitmap
Unsigned 16-bit integer
Directory bitmap
afp.dir_bitmap.UTF8_name UTF-8 name
Boolean
Return UTF-8 name if directory
afp.dir_bitmap.access_rights Access rights
Boolean
Return access rights if directory
afp.dir_bitmap.attributes Attributes
Boolean
Return attributes if directory
afp.dir_bitmap.backup_date Backup date
Boolean
Return backup date if directory
afp.dir_bitmap.create_date Creation date
Boolean
Return creation date if directory
afp.dir_bitmap.did DID
Boolean
Return parent directory ID if directory
afp.dir_bitmap.fid File ID
Boolean
Return file ID if directory
afp.dir_bitmap.finder_info Finder info
Boolean
Return finder info if directory
afp.dir_bitmap.group_id Group id
Boolean
Return group id if directory
afp.dir_bitmap.long_name Long name
Boolean
Return long name if directory
afp.dir_bitmap.mod_date Modification date
Boolean
Return modification date if directory
afp.dir_bitmap.offspring_count Offspring count
Boolean
Return offspring count if directory
afp.dir_bitmap.owner_id Owner id
Boolean
Return owner id if directory
afp.dir_bitmap.short_name Short name
Boolean
Return short name if directory
afp.dir_bitmap.unix_privs UNIX privileges
Boolean
Return UNIX privileges if directory
afp.dir_group_id Group ID
Signed 32-bit integer
Directory group ID
afp.dir_offspring Offspring
Unsigned 16-bit integer
Directory offspring
afp.dir_owner_id Owner ID
Signed 32-bit integer
Directory owner ID
afp.dt_ref DT ref
Unsigned 16-bit integer
Desktop database reference num
afp.ext_data_fork_len Extended data fork size
Unsigned 64-bit integer
Extended (>2GB) data fork length
afp.ext_resource_fork_len Extended resource fork size
Unsigned 64-bit integer
Extended (>2GB) resource fork length
afp.extattr.data Data
Byte array
Extendend attribute data
afp.extattr.len Length
Unsigned 32-bit integer
Extended attribute length
afp.extattr.name Name
String
Extended attribute name
afp.extattr.namelen Length
Unsigned 16-bit integer
Extended attribute name length
afp.extattr.reply_size Reply size
Unsigned 32-bit integer
Reply size
afp.extattr.req_count Request Count
Unsigned 16-bit integer
Request Count.
afp.extattr.start_index Index
Unsigned 32-bit integer
Start index
afp.extattr_bitmap Bitmap
Unsigned 16-bit integer
Extended attributes bitmap
afp.extattr_bitmap.create Create
Boolean
Create extended attribute
afp.extattr_bitmap.nofollow No follow symlinks
Boolean
Do not follow symlink
afp.extattr_bitmap.replace Replace
Boolean
Replace extended attribute
afp.file_attribute.backup_needed Backup needed
Boolean
File needs to be backed up
afp.file_attribute.copy_protect Copy protect
Boolean
copy protect
afp.file_attribute.delete_inhibit Delete inhibit
Boolean
delete inhibit
afp.file_attribute.df_open Data fork open
Boolean
Data fork already open
afp.file_attribute.invisible Invisible
Boolean
File is not visible
afp.file_attribute.multi_user Multi user
Boolean
multi user
afp.file_attribute.rename_inhibit Rename inhibit
Boolean
rename inhibit
afp.file_attribute.rf_open Resource fork open
Boolean
Resource fork already open
afp.file_attribute.set_clear Set
Boolean
Clear/set attribute
afp.file_attribute.system System
Boolean
File is a system file
afp.file_attribute.write_inhibit Write inhibit
Boolean
Write inhibit
afp.file_bitmap File bitmap
Unsigned 16-bit integer
File bitmap
afp.file_bitmap.UTF8_name UTF-8 name
Boolean
Return UTF-8 name if file
afp.file_bitmap.attributes Attributes
Boolean
Return attributes if file
afp.file_bitmap.backup_date Backup date
Boolean
Return backup date if file
afp.file_bitmap.create_date Creation date
Boolean
Return creation date if file
afp.file_bitmap.data_fork_len Data fork size
Boolean
Return data fork size if file
afp.file_bitmap.did DID
Boolean
Return parent directory ID if file
afp.file_bitmap.ex_data_fork_len Extended data fork size
Boolean
Return extended (>2GB) data fork size if file
afp.file_bitmap.ex_resource_fork_len Extended resource fork size
Boolean
Return extended (>2GB) resource fork size if file
afp.file_bitmap.fid File ID
Boolean
Return file ID if file
afp.file_bitmap.finder_info Finder info
Boolean
Return finder info if file
afp.file_bitmap.launch_limit Launch limit
Boolean
Return launch limit if file
afp.file_bitmap.long_name Long name
Boolean
Return long name if file
afp.file_bitmap.mod_date Modification date
Boolean
Return modification date if file
afp.file_bitmap.resource_fork_len Resource fork size
Boolean
Return resource fork size if file
afp.file_bitmap.short_name Short name
Boolean
Return short name if file
afp.file_bitmap.unix_privs UNIX privileges
Boolean
Return UNIX privileges if file
afp.file_creator File creator
String
File creator
afp.file_flag Dir
Boolean
Is a dir
afp.file_id File ID
Unsigned 32-bit integer
File/directory ID
afp.file_type File type
String
File type
afp.finder_info Finder info
Byte array
Finder info
afp.flag From
Unsigned 8-bit integer
Offset is relative to start/end of the fork
afp.fork_type Resource fork
Boolean
Data/resource fork
afp.group_ID Group ID
Unsigned 32-bit integer
Group ID
afp.grpuuid GRPUUID
Byte array
Group UUID
afp.icon_index Index
Unsigned 16-bit integer
Icon index in desktop database
afp.icon_length Size
Unsigned 16-bit integer
Size for icon bitmap
afp.icon_tag Tag
Unsigned 32-bit integer
Icon tag
afp.icon_type Icon type
Unsigned 8-bit integer
Icon type
afp.last_written Last written
Unsigned 32-bit integer
Offset of the last byte written
afp.last_written64 Last written
Unsigned 64-bit integer
Offset of the last byte written (64 bits)
afp.lock_from End
Boolean
Offset is relative to the end of the fork
afp.lock_len Length
Signed 32-bit integer
Number of bytes to be locked/unlocked
afp.lock_len64 Length
Signed 64-bit integer
Number of bytes to be locked/unlocked (64 bits)
afp.lock_offset Offset
Signed 32-bit integer
First byte to be locked
afp.lock_offset64 Offset
Signed 64-bit integer
First byte to be locked (64 bits)
afp.lock_op unlock
Boolean
Lock/unlock op
afp.lock_range_start Start
Signed 32-bit integer
First byte locked/unlocked
afp.lock_range_start64 Start
Signed 64-bit integer
First byte locked/unlocked (64 bits)
afp.long_name_offset Long name offset
Unsigned 16-bit integer
Long name offset in packet
afp.map_id ID
Unsigned 32-bit integer
User/Group ID
afp.map_id_type Type
Unsigned 8-bit integer
Map ID type
afp.map_name Name
String
User/Group name
afp.map_name_type Type
Unsigned 8-bit integer
Map name type
afp.message Message
String
Message
afp.message_bitmap Bitmap
Unsigned 16-bit integer
Message bitmap
afp.message_bitmap.requested Request message
Boolean
Message Requested
afp.message_bitmap.utf8 Message is UTF8
Boolean
Message is UTF8
afp.message_length Len
Unsigned 32-bit integer
Message length
afp.message_type Type
Unsigned 16-bit integer
Type of server message
afp.modification_date Modification date
Date/Time stamp
Modification date
afp.newline_char Newline char
Unsigned 8-bit integer
Value to compare ANDed bytes with when looking for newline
afp.newline_mask Newline mask
Unsigned 8-bit integer
Value to AND bytes with when looking for newline
afp.offset Offset
Signed 32-bit integer
Offset
afp.offset64 Offset
Signed 64-bit integer
Offset (64 bits)
afp.ofork Fork
Unsigned 16-bit integer
Open fork reference number
afp.ofork_len New length
Signed 32-bit integer
New length
afp.ofork_len64 New length
Signed 64-bit integer
New length (64 bits)
afp.pad Pad
No value
Pad Byte
afp.passwd Password
String
Password
afp.path_len Len
Unsigned 8-bit integer
Path length
afp.path_name Name
String
Path name
afp.path_type Type
Unsigned 8-bit integer
Type of names
afp.path_unicode_hint Unicode hint
Unsigned 32-bit integer
Unicode hint
afp.path_unicode_len Len
Unsigned 16-bit integer
Path length (unicode)
afp.random Random number
Byte array
UAM random number
afp.reply_size Reply size
Unsigned 16-bit integer
Reply size
afp.reply_size32 Reply size
Unsigned 32-bit integer
Reply size
afp.req_count Req count
Unsigned 16-bit integer
Maximum number of structures returned
afp.reqcount64 Count
Signed 64-bit integer
Request Count (64 bits)
afp.request_bitmap Request bitmap
Unsigned 32-bit integer
Request bitmap
afp.request_bitmap.UTF8_name UTF-8 name
Boolean
Search UTF-8 name
afp.request_bitmap.attributes Attributes
Boolean
Search attributes
afp.request_bitmap.backup_date Backup date
Boolean
Search backup date
afp.request_bitmap.create_date Creation date
Boolean
Search creation date
afp.request_bitmap.data_fork_len Data fork size
Boolean
Search data fork size
afp.request_bitmap.did DID
Boolean
Search parent directory ID
afp.request_bitmap.ex_data_fork_len Extended data fork size
Boolean
Search extended (>2GB) data fork size
afp.request_bitmap.ex_resource_fork_len Extended resource fork size
Boolean
Search extended (>2GB) resource fork size
afp.request_bitmap.finder_info Finder info
Boolean
Search finder info
afp.request_bitmap.long_name Long name
Boolean
Search long name
afp.request_bitmap.mod_date Modification date
Boolean
Search modification date
afp.request_bitmap.offspring_count Offspring count
Boolean
Search offspring count
afp.request_bitmap.partial_names Match on partial names
Boolean
Match on partial names
afp.request_bitmap.resource_fork_len Resource fork size
Boolean
Search resource fork size
afp.reserved Reserved
Byte array
Reserved
afp.resource_fork_len Resource fork size
Unsigned 32-bit integer
Resource fork size
afp.response_in Response in
Frame number
The response to this packet is in this packet
afp.response_to Response to
Frame number
This packet is a response to the packet in this frame
afp.rw_count Count
Signed 32-bit integer
Number of bytes to be read/written
afp.rw_count64 Count
Signed 64-bit integer
Number of bytes to be read/written (64 bits)
afp.server_time Server time
Date/Time stamp
Server time
afp.session_token Token
Byte array
Session token
afp.session_token_len Len
Unsigned 32-bit integer
Session token length
afp.session_token_timestamp Time stamp
Unsigned 32-bit integer
Session time stamp
afp.session_token_type Type
Unsigned 16-bit integer
Session token type
afp.short_name_offset Short name offset
Unsigned 16-bit integer
Short name offset in packet
afp.start_index Start index
Unsigned 16-bit integer
First structure returned
afp.start_index32 Start index
Unsigned 32-bit integer
First structure returned
afp.struct_size Struct size
Unsigned 8-bit integer
Sizeof of struct
afp.struct_size16 Struct size
Unsigned 16-bit integer
Sizeof of struct
afp.time Time from request
Time duration
Time between Request and Response for AFP cmds
afp.unicode_name_offset Unicode name offset
Unsigned 16-bit integer
Unicode name offset in packet
afp.unix_privs.gid GID
Unsigned 32-bit integer
Group ID
afp.unix_privs.permissions Permissions
Unsigned 32-bit integer
Permissions
afp.unix_privs.ua_permissions User's access rights
Unsigned 32-bit integer
User's access rights
afp.unix_privs.uid UID
Unsigned 32-bit integer
User ID
afp.user User
String
User
afp.user_ID User ID
Unsigned 32-bit integer
User ID
afp.user_bitmap Bitmap
Unsigned 16-bit integer
User Info bitmap
afp.user_bitmap.GID Primary group ID
Boolean
Primary group ID
afp.user_bitmap.UID User ID
Boolean
User ID
afp.user_bitmap.UUID UUID
Boolean
UUID
afp.user_flag Flag
Unsigned 8-bit integer
User Info flag
afp.user_len Len
Unsigned 16-bit integer
User name length (unicode)
afp.user_name User
String
User name (unicode)
afp.user_type Type
Unsigned 8-bit integer
Type of user name
afp.uuid UUID
Byte array
UUID
afp.vol_attribute.acls ACLs
Boolean
Supports access control lists
afp.vol_attribute.blank_access_privs Blank access privileges
Boolean
Supports blank access privileges
afp.vol_attribute.cat_search Catalog search
Boolean
Supports catalog search operations
afp.vol_attribute.extended_attributes Extended Attributes
Boolean
Supports Extended Attributes
afp.vol_attribute.fileIDs File IDs
Boolean
Supports file IDs
afp.vol_attribute.inherit_parent_privs Inherit parent privileges
Boolean
Inherit parent privileges
afp.vol_attribute.network_user_id No Network User ID
Boolean
No Network User ID
afp.vol_attribute.no_exchange_files No exchange files
Boolean
Exchange files not supported
afp.vol_attribute.passwd Volume password
Boolean
Has a volume password
afp.vol_attribute.read_only Read only
Boolean
Read only volume
afp.vol_attribute.unix_privs UNIX access privileges
Boolean
Supports UNIX access privileges
afp.vol_attribute.utf8_names UTF-8 names
Boolean
Supports UTF-8 names
afp.vol_attributes Attributes
Unsigned 16-bit integer
Volume attributes
afp.vol_backup_date Backup date
Date/Time stamp
Volume backup date
afp.vol_bitmap Bitmap
Unsigned 16-bit integer
Volume bitmap
afp.vol_bitmap.attributes Attributes
Boolean
Volume attributes
afp.vol_bitmap.backup_date Backup date
Boolean
Volume backup date
afp.vol_bitmap.block_size Block size
Boolean
Volume block size
afp.vol_bitmap.bytes_free Bytes free
Boolean
Volume free bytes
afp.vol_bitmap.bytes_total Bytes total
Boolean
Volume total bytes
afp.vol_bitmap.create_date Creation date
Boolean
Volume creation date
afp.vol_bitmap.ex_bytes_free Extended bytes free
Boolean
Volume extended (>2GB) free bytes
afp.vol_bitmap.ex_bytes_total Extended bytes total
Boolean
Volume extended (>2GB) total bytes
afp.vol_bitmap.id ID
Boolean
Volume ID
afp.vol_bitmap.mod_date Modification date
Boolean
Volume modification date
afp.vol_bitmap.name Name
Boolean
Volume name
afp.vol_bitmap.signature Signature
Boolean
Volume signature
afp.vol_block_size Block size
Unsigned 32-bit integer
Volume block size
afp.vol_bytes_free Bytes free
Unsigned 32-bit integer
Free space
afp.vol_bytes_total Bytes total
Unsigned 32-bit integer
Volume size
afp.vol_creation_date Creation date
Date/Time stamp
Volume creation date
afp.vol_ex_bytes_free Extended bytes free
Unsigned 64-bit integer
Extended (>2GB) free space
afp.vol_ex_bytes_total Extended bytes total
Unsigned 64-bit integer
Extended (>2GB) volume size
afp.vol_flag_passwd Password
Boolean
Volume is password-protected
afp.vol_flag_unix_priv Unix privs
Boolean
Volume has unix privileges
afp.vol_id Volume id
Unsigned 16-bit integer
Volume id
afp.vol_modification_date Modification date
Date/Time stamp
Volume modification date
afp.vol_name Volume
String
Volume name
afp.vol_name_offset Volume name offset
Unsigned 16-bit integer
Volume name offset in packet
afp.vol_signature Signature
Unsigned 16-bit integer
Volume signature
Apple IP-over-IEEE 1394 (ap1394)
ap1394.dst Destination
Byte array
Destination address
ap1394.src Source
Byte array
Source address
ap1394.type Type
Unsigned 16-bit integer
AppleTalk Session Protocol (asp)
asp.attn_code Attn code
Unsigned 16-bit integer
asp attention code
asp.error asp error
Signed 32-bit integer
return error code
asp.function asp function
Unsigned 8-bit integer
asp function
asp.init_error Error
Unsigned 16-bit integer
asp init error
asp.seq Sequence
Unsigned 16-bit integer
asp sequence number
asp.server_addr.len Length
Unsigned 8-bit integer
Address length.
asp.server_addr.type Type
Unsigned 8-bit integer
Address type.
asp.server_addr.value Value
Byte array
Address value
asp.server_directory Directory service
String
Server directory service
asp.server_flag Flag
Unsigned 16-bit integer
Server capabilities flag
asp.server_flag.copyfile Support copyfile
Boolean
Server support copyfile
asp.server_flag.directory Support directory services
Boolean
Server support directory services
asp.server_flag.fast_copy Support fast copy
Boolean
Server support fast copy
asp.server_flag.no_save_passwd Don't allow save password
Boolean
Don't allow save password
asp.server_flag.notify Support server notifications
Boolean
Server support notifications
asp.server_flag.passwd Support change password
Boolean
Server support change password
asp.server_flag.reconnect Support server reconnect
Boolean
Server support reconnect
asp.server_flag.srv_msg Support server message
Boolean
Support server message
asp.server_flag.srv_sig Support server signature
Boolean
Support server signature
asp.server_flag.tcpip Support TCP/IP
Boolean
Server support TCP/IP
asp.server_flag.utf8_name Support UTF8 server name
Boolean
Server support UTF8 server name
asp.server_icon Icon bitmap
Byte array
Server icon bitmap
asp.server_name Server name
String
Server name
asp.server_signature Server signature
Byte array
Server signature
asp.server_type Server type
String
Server type
asp.server_uams UAM
String
UAM
asp.server_utf8_name Server name (UTF8)
String
Server name (UTF8)
asp.server_utf8_name_len Server name length
Unsigned 16-bit integer
UTF8 server name length
asp.server_vers AFP version
String
AFP version
asp.session_id Session ID
Unsigned 8-bit integer
asp session id
asp.size size
Unsigned 16-bit integer
asp available size for reply
asp.socket Socket
Unsigned 8-bit integer
asp socket
asp.version Version
Unsigned 16-bit integer
asp version
asp.zero_value Pad (0)
Byte array
Pad
AppleTalk Transaction Protocol packet (atp)
atp.bitmap Bitmap
Unsigned 8-bit integer
Bitmap or sequence number
atp.ctrlinfo Control info
Unsigned 8-bit integer
control info
atp.eom EOM
Boolean
End-of-message
atp.fragment ATP Fragment
Frame number
ATP Fragment
atp.fragments ATP Fragments
No value
ATP Fragments
atp.function Function
Unsigned 8-bit integer
function code
atp.reassembled_in Reassembled ATP in frame
Frame number
This ATP packet is reassembled in this frame
atp.segment.error Desegmentation error
Frame number
Desegmentation error due to illegal segments
atp.segment.multipletails Multiple tail segments found
Boolean
Several tails were found when desegmenting the packet
atp.segment.overlap Segment overlap
Boolean
Segment overlaps with other segments
atp.segment.overlap.conflict Conflicting data in segment overlap
Boolean
Overlapping segments contained conflicting data
atp.segment.toolongsegment Segment too long
Boolean
Segment contained data past end of packet
atp.sts STS
Boole