Display Filter Reference

Wireshark's most powerful feature is its vast array of display filters (over 261000 fields in 3000 protocols as of version 3.4.5). They let you drill down to the exact traffic you want to see and are the basis of many of Wireshark's other features, such as the coloring rules.

This is a reference. For general help using display filters, please see the wireshark-filter manual page or the User's Guide.

Index

123469_ABCDEFGHIJKLMNOPQRSTUVWXYZ

1

104apci: IEC 60870-5-104-Apci (1.2.0 to 3.0.14, 6 fields)
104asdu: IEC 60870-5-104-Asdu (1.2.0 to 3.0.14, 80 fields)
1722a: IEEE 1722a Protocol (1.12.0 to 2.0.16, 26 fields)

2

2dparityfec: Pro-MPEG Code of Practice #3 release 2 FEC Protocol (1.0.0 to 3.4.5, 14 fields)

3

3comxns: 3Com XNS Encapsulation (1.0.0 to 3.4.5, 1 field)
3gpp: 3GPP COMMON (3.4.0 to 3.4.5, 1 field)

4

4607: STANAG 4607 (GMTI Format) (1.12.0 to 1.12.1, 106 fields)

6

61883: IEC 61883 Protocol (2.2.0 to 2.4.7, 2.6.0 to 2.6.1, 45 fields)
6lowpan: IPv6 over Low power Wireless Personal Area Networks (1.4.0 to 3.4.5, 100 fields)

9

9p: Plan 9 (1.0.0 to 3.4.5, 138 fields)

_

_ws.expert: Expert Info (1.12.0 to 3.4.5, 3 fields)
_ws.lua: Lua Dissection (1.12.0 to 3.4.5, 8 fields)
_ws.malformed: Malformed Packet (1.12.0 to 3.4.5, 3 fields)
_ws.number_string.decoding_error: Number-String Decoding Error (1.12.0 to 3.4.5, 2 fields)
_ws.string: String Errors (3.0.0 to 3.4.5, 1 field)
_ws.type_length: Type Length Mismatch (1.12.0 to 3.4.5, 1 field)

A

a11: 3GPP2 A11 (1.0.0 to 3.4.5, 128 fields)
a21: A21 Protocol (1.12.0 to 3.4.5, 74 fields)
a615a: Arinc 615a Protocol (3.4.0 to 3.4.5, 20 fields)
aaf: AVTP Audio Format (2.2.0 to 3.4.5, 21 fields)
aarp: Appletalk Address Resolution Protocol (1.0.0 to 3.4.5, 14 fields)
aasp: Aastra Signalling Protocol (1.8.0 to 3.4.5, 18 fields)
acap: Application Configuration Access Protocol (1.0.0 to 3.4.5, 6 fields)
acdr: AUDIOCODES DEBUG RECORDING (3.4.0 to 3.4.5, 68 fields)
acf: ACF Message (3.2.0 to 3.4.5, 4 fields)
acf-can: ACF CAN (3.2.0 to 3.4.5, 19 fields)
acf-lin: ACF LIN (3.2.0 to 3.4.5, 8 fields)
acn: Architecture for Control Networks (1.0.0 to 3.4.5, 97 fields)
acp133: ACP133 Attribute Syntaxes (1.0.0 to 3.4.5, 110 fields)
acr122: Advanced Card Systems ACR122 (1.12.0 to 3.4.5, 52 fields)
acse: ISO 8650-1 OSI Association Control Service (1.0.0 to 3.4.5, 127 fields)
actrace: AudioCodes Trunk Trace (1.0.0 to 3.4.5, 15 fields)
adb: Android Debug Bridge (2.0.0 to 3.4.5, 26 fields)
adb_cs: Android Debug Bridge Client-Server (1.12.0 to 3.4.5, 35 fields)
adb_service: Android Debug Bridge Service (2.0.0 to 3.4.5, 39 fields)
adp: Aruba Discovery Protocol (1.0.0 to 3.4.5, 5 fields)
adwin: ADwin communication protocol (1.6.0 to 3.4.5, 47 fields)
adwin_config: ADwin configuration protocol (1.6.0 to 3.4.5, 48 fields)
aeron: Aeron Protocol (2.0.0 to 3.4.5, 135 fields)
afp: Apple Filing Protocol (1.0.0 to 3.4.5, 362 fields)
afs: Andrew File System (AFS) (1.0.0 to 3.4.5, 267 fields)
agentx: AgentX (1.0.0 to 3.4.5, 36 fields)
ah: Authentication Header (1.0.0 to 3.4.5, 6 fields)
aim: AOL Instant Messenger (1.0.0 to 3.4.5, 69 fields)
aim_admin: AIM Administrative (1.0.0 to 3.4.5, 4 fields)
aim_bos: AIM Privacy Management Service (1.0.0 to 3.4.5, 2 fields)
aim_buddylist: AIM Buddylist Service (1.0.0 to 3.4.5, 1 field)
aim_chat: AIM Chat Service (1.0.0 to 3.4.5, 1 field)
aim_generic: AIM Generic Service (1.0.0 to 3.4.5, 33 fields)
aim_icq: AIM ICQ (1.0.0 to 3.4.5, 6 fields)
aim_location: AIM Location (1.0.0 to 3.4.5, 4 fields)
aim_lookup: AIM User Lookup (1.0.0 to 3.4.5, 1 field)
aim_messaging: AIM Messaging (1.0.0 to 3.4.5, 39 fields)
aim_signon: AIM Signon (1.0.0 to 3.4.5, 3 fields)
aim_ssi: AIM Server Side Info (1.0.0 to 3.4.5, 15 fields)
aim_sst: AIM Server Side Themes (1.0.0 to 3.4.5, 6 fields)
ain: Advanced Intelligent Network (3.0.0 to 3.4.5, 509 fields)
airopeek: AiroPeek 802.11 radio information (1.0.0 to 2.0.16, 10 fields)
aj: AllJoyn Message Protocol (1.12.0 to 3.4.5, 1 field)
ajns: AllJoyn Name Service Protocol (1.12.0 to 3.4.5, 120 fields)
ajp13: Apache JServ Protocol v1.3 (1.0.0 to 3.4.5, 59 fields)
alc: Asynchronous Layered Coding (1.0.0 to 3.4.5, 34 fields)
alcap: AAL type 2 signalling protocol (Q.2630) (1.0.0 to 3.4.5, 158 fields)
alt_beacon: AltBeacon (2.4.0 to 3.4.5, 4 fields)
amf: Action Message Format (1.10.0 to 3.4.5, 41 fields)
amp: AMP (3.2.0 to 3.4.5, 28 fields)
amqp: Advanced Message Queueing Protocol (1.0.0 to 3.4.5, 499 fields)
amr: Adaptive Multi-Rate (1.0.0 to 3.4.5, 31 fields)
ams: AMS (1.0.0 to 3.4.5, 65 fields)
amt: Automatic Multicast Tunneling (2.6.0 to 3.4.5, 18 fields)
ancp: Access Node Control Protocol (1.4.0 to 3.4.5, 43 fields)
ans: Intel ANS probe (1.0.0 to 3.4.5, 5 fields)
ansi_637_tele: ANSI IS-637-A (SMS) Teleservice Layer (1.0.0 to 3.4.5, 89 fields)
ansi_637_trans: ANSI IS-637-A (SMS) Transport Layer (1.0.0 to 3.4.5, 29 fields)
ansi_683: ANSI IS-683 (OTA (Mobile)) (1.0.0 to 3.4.5, 112 fields)
ansi_801: ANSI IS-801 (Location Services (PLD)) (1.0.0 to 3.4.5, 111 fields)
ansi_a_bsmap: ANSI A-I/F BSMAP (1.0.0 to 3.4.5, 374 fields)
ansi_map: ANSI Mobile Application Part (1.0.0 to 3.4.5, 979 fields)
ansi_tcap: ANSI Transaction Capabilities Application Part (1.0.0 to 3.4.5, 73 fields)
aodv: Ad hoc On-demand Distance Vector Routing Protocol (1.0.0 to 3.4.5, 30 fields)
aoe: ATAoverEthernet (1.0.0 to 3.4.5, 20 fields)
aol: America Online (1.10.0 to 3.4.5, 38 fields)
ap1394: Apple IP-over-IEEE 1394 (1.0.0 to 3.4.5, 3 fields)
apap: Printer Access Protocol (1.0.0 to 1.8.15, 11 fields)
applemidi: Apple Network-MIDI Session Protocol (1.4.0 to 3.4.5, 16 fields)
aprs: Automatic Position Reporting System (1.10.0 to 3.4.5, 88 fields)
aptx: aptX Codec (2.0.0 to 3.4.5, 7 fields)
ar_drone: AR Drone Packet (1.10.0 to 3.4.5, 30 fields)
arcnet: ARCNET (1.0.0 to 3.4.5, 8 fields)
armagetronad: The Armagetron Advanced OpenGL Tron clone (1.0.0 to 3.4.5, 6 fields)
arp: Address Resolution Protocol (1.0.0 to 3.4.5, 51 fields)
artemis: Artemis Core Protocol (2.6.0 to 3.4.5, 5 fields)
artnet: Art-Net (1.0.0 to 3.4.5, 258 fields)
aruba_erm: Aruba Networks encapsulated remote mirroring (1.4.0 to 3.4.5, 9 fields)
aruba_iap: Aruba Instant AP Protocol (1.12.0 to 3.4.5, 13 fields)
asap: Aggregate Server Access Protocol (1.0.0 to 3.4.5, 54 fields)
ascend: Lucent/Ascend debug output (1.0.0 to 3.4.5, 6 fields)
asf: Alert Standard Forum (1.0.0 to 3.4.5, 15 fields)
asp: AppleTalk Session Protocol (1.0.0 to 3.4.5, 34 fields)
asphodel: Asphodel (3.4.0 to 3.4.5, 35 fields)
asterix: ASTERIX packet (1.12.0 to 3.4.5, 2250 fields)
at: AT Command (1.6.0 to 3.4.5, 130 fields)
ath: Apache Tribes Heartbeat Protocol (2.0.0 to 3.4.5, 20 fields)
atm: Asynchronous Transfer Mode (1.0.0 to 3.4.5, 72 fields)
atmtcp: ATM over TCP (1.6.0 to 3.4.5, 3 fields)
atn-cm: ICAO Doc9705 CM (1.12.0 to 3.4.5, 38 fields)
atn-cpdlc: ICAO Doc9705 CPDLC (1.12.0 to 3.4.5, 576 fields)
atn-ulcs: ICAO Doc9705 ULCS (1.12.0 to 3.4.5, 75 fields)
atp: AppleTalk Transaction Protocol packet (1.0.0 to 3.4.5, 19 fields)
atsvc: Microsoft AT-Scheduler Service (1.0.0 to 3.4.5, 127 fields)
auto_rp: Cisco Auto-RP (1.0.0 to 3.4.5, 12 fields)
autosar-nm: AUTOSAR Network Management (3.0.0 to 3.4.5, 12 fields)
avsp: Arista Vendor Specific Protocol (2.6.0 to 3.4.5, 11 fields)
awdl: Apple Wireless Direct Link action frame (3.0.0 to 3.4.5, 3 fields)
awdl_data: Apple Wireless Direct Link data frame (3.0.0 to 3.4.5, 203 fields)
ax25: Amateur Radio AX.25 (1.10.0 to 3.4.5, 21 fields)
ax25_kiss: AX.25 KISS (1.10.0 to 3.4.5, 10 fields)
ax4000: AX/4000 Test Block (1.0.0 to 3.4.5, 7 fields)
ayiya: Anything in Anything Protocol (1.2.0 to 3.4.5, 10 fields)

B

babel: Babel Routing Protocol (1.6.0 to 3.4.5, 23 fields)
bacapp: Building Automation and Control Network APDU (1.0.0 to 3.4.5, 75 fields)
bacnet: Building Automation and Control Network NPDU (1.0.0 to 3.4.5, 100 fields)
bacp: PPP Bandwidth Allocation Control Protocol (1.0.0 to 3.4.5, 5 fields)
banana: Twisted Banana (1.4.0 to 3.4.5, 13 fields)
bap: PPP Bandwidth Allocation Protocol (1.0.0 to 3.4.5, 18 fields)
basicxid: Logical-Link Control Basic Format XID (1.0.0 to 3.4.5, 3 fields)
bat: B.A.T.M.A.N. Layer 3 Protocol (1.2.0 to 3.4.5, 26 fields)
batadv: B.A.T.M.A.N. Advanced Protocol (1.4.0 to 3.4.5, 180 fields)
bcp: PPP Bridging Control Protocol (1.0.0 to 2.0.16, 7 fields)
bcp_bpdu: PPP Bridging Control Protocol Bridged PDU (2.2.0 to 3.4.5, 7 fields)
bcp_ncp: PPP Bridging Control Protocol Network Control Protocol (2.2.0 to 3.4.5, 10 fields)
bctp: BCTP Q.1990 (1.0.0 to 3.4.5, 4 fields)
beacon: Bluetooth Mesh Beacon (3.2.0 to 3.4.5, 28 fields)
beep: Blocks Extensible Exchange Protocol (1.0.0 to 3.4.5, 30 fields)
bencode: Bencode (1.12.0 to 3.4.5, 14 fields)
ber: Basic Encoding Rules (ASN.1 X.690) (1.0.0 to 3.4.5, 95 fields)
bfcp: Binary Floor Control Protocol (1.8.0 to 3.4.5, 31 fields)
bfd: Bidirectional Forwarding Detection Control Message (1.0.0 to 3.4.5, 48 fields)
bfd_echo: Bidirectional Forwarding Detection Echo Packet (3.4.0 to 3.4.5, 1 field)
bgp: Border Gateway Protocol (1.0.0 to 3.4.5, 713 fields)
bicc: Bearer Independent Call Control (1.0.0 to 3.4.5, 1 field)
bicc_mst: 3GPP BICC MST (3.2.0 to 3.4.5, 5 fields)
bitcoin: Bitcoin protocol (1.10.0 to 3.4.5, 126 fields)
bittorrent: BitTorrent (1.0.0 to 3.4.5, 32 fields)
bjnp: Canon BJNP (1.2.0 to 3.4.5, 7 fields)
blip: BLIP Couchbase Mobile (3.0.0 to 3.4.5, 8 fields)
bluecom: bluecom Protocol (2.2.0 to 3.4.5, 54 fields)
bluetooth: Bluetooth (2.0.0 to 3.4.5, 6 fields)
bluetooth.gaen: Google/Apple Exposure Notification (3.4.0 to 3.4.5, 2 fields)
bmc: Broadcast/Multicast Control (1.6.0 to 3.4.5, 15 fields)
bmp: BGP Monitoring Protocol (2.0.0 to 3.4.5, 114 fields)
bofl: Wellfleet Breath of Life (1.0.0 to 3.4.5, 3 fields)
bootp: Bootstrap Protocol (1.0.0 to 2.6.20, 530 fields)
bootparams: Boot Parameters (1.0.0 to 3.4.5, 8 fields)
bossvr: DCE DFS Basic Overseer Server (1.0.0 to 3.4.5, 1 field)
bpq: Amateur Radio BPQ (1.10.0 to 3.4.5, 1 field)
brcm-tag: Broadcom tag protocol (2.6.0 to 3.4.5, 9 fields)
brdwlk: Boardwalk (1.0.0 to 3.4.5, 15 fields)
browser: Microsoft Windows Browser Protocol (1.0.0 to 3.4.5, 64 fields)
brp: BRP Protocol (1.8.0 to 3.4.5, 14 fields)
bssap: BSSAP/BSAP (1.0.0 to 3.4.5, 72 fields)
bssgp: Base Station Subsystem GPRS Protocol (1.0.0 to 3.4.5, 152 fields)
bsslap: BSS LCS Assistance Protocol (1.2.0 to 3.4.5, 14 fields)
bt-dht: BitTorrent DHT Protocol (1.8.0 to 3.4.5, 17 fields)
bt-utp: uTorrent Transport Protocol (1.6.0 to 3.4.5, 16 fields)
bt3ds: Bluetooth 3DS Profile (1.12.0 to 3.4.5, 9 fields)
bta2dp: Bluetooth A2DP Profile (1.10.0 to 3.4.5, 18 fields)
bta2dp_content_protection_header_scms_t: Bluetooth A2DP Content Protection Header SCMS-T (1.12.0 to 3.4.5, 3 fields)
btamp: Bluetooth AMP Packet (1.4.0 to 3.4.5, 26 fields)
btatt: Bluetooth Attribute Protocol (1.10.0 to 3.4.5, 1059 fields)
btavctp: Bluetooth AVCTP Protocol (1.10.0 to 3.4.5, 9 fields)
btavdtp: Bluetooth AVDTP Protocol (1.10.0 to 3.4.5, 158 fields)
btavrcp: Bluetooth AVRCP Profile (1.10.0 to 3.4.5, 158 fields)
btbnep: Bluetooth BNEP Protocol (1.10.0 to 3.4.5, 29 fields)
btbredr_rf: Bluetooth Pseudoheader for BR/EDR (2.2.0 to 3.4.5, 50 fields)
btcommon: Bluetooth Common (1.12.0 to 3.4.5, 177 fields)
btdun: Bluetooth DUN Packet (1.6.0 to 3.4.5, 1 field)
btgatt: Bluetooth GATT Attribute Protocol (2.2.0 to 3.4.5, 82 fields)
btgnss: Bluetooth GNSS Profile (1.10.0 to 3.4.5, 1 field)
bthci_acl: Bluetooth HCI ACL Packet (1.0.0 to 3.4.5, 27 fields)
bthci_cmd: Bluetooth HCI Command (1.0.0 to 3.4.5, 626 fields)
bthci_evt: Bluetooth HCI Event (1.0.0 to 3.4.5, 595 fields)
bthci_iso: Bluetooth HCI ISO Packet (3.4.0 to 3.4.5, 11 fields)
bthci_iso_data: Bluetooth ISO Data (3.4.0 to 3.4.5, 5 fields)
bthci_sco: Bluetooth HCI SCO Packet (1.0.0 to 3.4.5, 11 fields)
bthci_vendor.broadcom: Bluetooth Broadcom HCI (2.0.0 to 3.4.5, 95 fields)
bthci_vendor.intel: Bluetooth Intel HCI (2.4.0 to 3.4.5, 77 fields)
bthcrp: Bluetooth HCRP Profile (1.10.0 to 3.4.5, 26 fields)
bthf: Bluetooth Handsfree Packet (1.6.0 to 1.8.15, 2 fields)
bthfp: Bluetooth HFP Profile (1.10.0 to 3.4.5, 199 fields)
bthid: Bluetooth HID Profile (1.10.0 to 3.4.5, 50 fields)
bthsp: Bluetooth HSP Profile (1.12.0 to 3.4.5, 23 fields)
btl2cap: Bluetooth L2CAP Protocol (1.0.0 to 3.4.5, 106 fields)
btle: Bluetooth Low Energy Link Layer (1.12.0 to 3.4.5, 175 fields)
btle_rf: Bluetooth Low Energy RF Info (1.12.0 to 3.4.5, 24 fields)
btmcap: Bluetooth MCAP Protocol (1.10.0 to 3.4.5, 19 fields)
btmesh: Bluetooth Mesh (2.6.0 to 3.4.5, 393 fields)
btmproxy: Bluetooth Mesh Proxy (3.2.0 to 3.4.5, 34 fields)
btobex: Bluetooth OBEX Protocol (1.4.0 to 2.0.16, 235 fields)
btpa: BTP-A (3.0.0 to 3.4.5, 3 fields)
btpb: BTP-B (3.0.0 to 3.4.5, 2 fields)
btrfcomm: Bluetooth RFCOMM Protocol (1.0.0 to 3.4.5, 39 fields)
btsap: Bluetooth SAP Profile (1.10.0 to 3.4.5, 23 fields)
btsdp: Bluetooth SDP Protocol (1.0.0 to 3.4.5, 356 fields)
btsmp: Bluetooth Security Manager Protocol (1.10.0 to 3.4.5, 30 fields)
btsnoop: Symbian OS BTSNOOP File Format (2.0.0 to 3.4.5, 21 fields)
btspp: Bluetooth SPP Packet (1.6.0 to 3.4.5, 1 field)
btvdp: Bluetooth VDP Profile (1.10.0 to 3.4.5, 12 fields)
btvdp_content_protection_header_scms_t: Bluetooth VDP Content Protection Header SCMS-T (1.12.0 to 3.4.5, 3 fields)
budb: DCE/DFS BUDB (1.0.0 to 3.4.5, 214 fields)
bundle: Bundle Protocol (1.4.0 to 3.4.5, 150 fields)
butc: DCE/RPC BUTC (1.0.0 to 3.4.5, 122 fields)
bvlc: BACnet Virtual Link Control (1.0.0 to 3.4.5, 20 fields)
bzr: Bazaar Smart Protocol (1.8.0 to 3.4.5, 9 fields)

C

c1222: ANSI C12.22 (1.8.0 to 3.4.5, 81 fields)
c15: C15 Call History Protocol (2.0.0 to 3.4.5, 451 fields)
c15.ch: C15 Call History Common Header Protocol (2.0.0 to 3.4.5, 12 fields)
c15.inc_gwe: C15 Incoming GWE (2.0.0 to 3.4.5, 136 fields)
c15.out_gwe: C15 Outgoing GWE (2.0.0 to 3.4.5, 97 fields)
c15.tone: C15 Tone (2.0.0 to 3.4.5, 38 fields)
c15hbeat: C15 Call History Heartbeat Protocol (2.0.0 to 3.4.5, 4 fields)
calcappprotocol: Calculation Application Protocol (1.0.0 to 3.4.5, 6 fields)
camel: Camel (1.0.0 to 3.4.5, 668 fields)
can: Controller Area Network (1.4.0 to 3.4.5, 40 fields)
caneth: Controller Area Network over Ethernet (2.6.0 to 3.4.5, 9 fields)
canopen: CANopen (1.8.0 to 3.4.5, 67 fields)
capwap: Control And Provisioning of Wireless Access Points - Control (1.4.0 to 3.4.5, 456 fields)
carp: Common Address Redundancy Protocol (1.12.0 to 3.4.5, 13 fields)
cast: Cast Client Control Protocol (1.0.0 to 3.4.5, 100 fields)
cattp: ETSI Card Application Toolkit Transport Protocol (2.0.0 to 3.4.5, 26 fields)
cba_acco_cb: ICBAAccoCallback (1.0.0 to 3.4.5, 14 fields)
cba_acco_mgt: ICBAAccoMgt (1.0.0 to 3.4.5, 54 fields)
cba_acco_server: ICBAAccoServer (1.0.0 to 3.4.5, 14 fields)
cba_browse: ICBABrowse (1.0.0 to 3.4.5, 20 fields)
cba_pdev: ICBAPhysicalDevice (1.0.0 to 3.4.5, 18 fields)
cbcp: PPP Callback Control Protocol (1.0.0 to 3.4.5, 7 fields)
cbor: Concise Binary Object Representation (2.0.0 to 3.4.5, 25 fields)
cbrs_oids: Citizen Broadband Radio Service - Object Identifiers (3.0.0 to 3.4.5, 8 fields)
cbsp: 3GPP/GSM Cell Broadcast Service Protocol (3.2.0 to 3.4.5, 33 fields)
ccp: PPP Compression Control Protocol (1.0.0 to 3.4.5, 34 fields)
ccsds: CCSDS (1.0.0 to 3.4.5, 33 fields)
ccsrl: H.324/CCSRL (1.0.0 to 3.4.5, 1 field)
cdma2k: CDMA2K (3.0.0 to 3.4.5, 434 fields)
cdp: Cisco Discovery Protocol (1.0.0 to 3.4.5, 91 fields)
cds_clerkserver: CDS Clerk Server Calls (1.0.0 to 3.4.5, 1 field)
cds_solicit: DCE/RPC CDS Solicitation (1.0.0 to 3.4.5, 1 field)
cdt: Compressed Data Type (1.0.0 to 3.4.5, 13 fields)
cemi: Common External Message Interface (3.0.0 to 3.4.5, 52 fields)
ceph: Ceph (2.0.0 to 3.4.5, 650 fields)
cesoeth: Circuit Emulation Service over Ethernet (3.0.0 to 3.4.5, 13 fields)
cfdp: CFDP (1.12.0 to 3.4.5, 89 fields)
cflow: Cisco NetFlow/IPFIX (1.0.0 to 3.4.5, 1350 fields)
cfm: CFM EOAM 802.1ag/ITU Protocol (1.0.0 to 3.4.5, 136 fields)
cfp: Cisco FabricPath (1.8.0 to 3.4.5, 20 fields)
cgmp: Cisco Group Management Protocol (1.0.0 to 3.4.5, 6 fields)
chap: PPP Challenge Handshake Authentication Protocol (1.0.0 to 3.4.5, 9 fields)
chargen: Character Generator Protocol (2.0.0 to 3.4.5, 1 field)
chargingase: Charging ASE (1.2.0 to 3.4.5, 90 fields)
chdlc: Cisco HDLC (1.0.0 to 3.4.5, 4 fields)
cigi: Common Image Generator Interface (1.0.0 to 3.4.5, 834 fields)
cimd: Computer Interface to Message Distribution (1.0.0 to 3.4.5, 48 fields)
cimetrics: Cimetrics MS/TP (1.2.0 to 3.4.5, 4 fields)
cip: Common Industrial Protocol (1.0.0 to 3.4.5, 357 fields)
cipcco: CIP Connection Configuration Object (1.4.0 to 3.4.5, 49 fields)
cipcm: CIP Connection Manager (1.4.0 to 3.4.5, 55 fields)
cipm: Common Industrial Protocol, Motion (1.8.0 to 3.4.5, 240 fields)
cipmb: CIP Modbus Object (1.8.0 to 3.4.5, 22 fields)
cippccc: CIP PCCC Object (3.0.0 to 3.4.5, 21 fields)
cipsafety: Common Industrial Protocol, Safety (1.8.0 to 3.4.5, 62 fields)
cipssupervisor: CIP Safety Supervisor (1.8.0 to 3.4.5, 180 fields)
cipsvalidator: CIP Safety Validator (1.8.0 to 3.4.5, 29 fields)
cisco-erspan3-marker: CISCO ERSPAN3 Marker Packet (2.2.0 to 3.4.5, 12 fields)
cl3: CableLabs Layer 3 Protocol (3.2.0 to 3.4.5, 6 fields)
cl3dcw: CableLabs Dual-Channel Wi-Fi (3.2.0 to 3.4.5, 11 fields)
classicstun: Simple Traversal of UDP Through NAT (1.4.0 to 3.4.5, 29 fields)
clearcase: Clearcase NFS (1.0.0 to 3.4.5, 1 field)
clip: Classical IP frame (2.0.0 to 3.4.5, 1 field)
clique-rm: Clique Reliable Multicast Protocol (1.10.0 to 3.4.5, 22 fields)
clnp: ISO 8473/X.233 CLNP ConnectionLess Network Protocol (1.0.0 to 3.4.5, 33 fields)
cltp: ISO 8602/X.234 CLTP ConnectionLess Transport Protocol (1.0.0 to 3.4.5, 2 fields)
clusapi: Failover Cluster Management API (clusapi) (2.4.0 to 3.4.5, 846 fields)
cmctrl_tlv: DOCSIS CM-CTRL TLV's (1.6.0 to 2.2.17, 11 fields)
cmd: Cisco MetaData (1.12.0 to 3.4.5, 6 fields)
cmip: X711 CMIP (1.0.0 to 3.4.5, 348 fields)
cmp: Certificate Management Protocol (1.0.0 to 3.4.5, 248 fields)
cmpp: China Mobile Point to Point Protocol (1.0.0 to 3.4.5, 47 fields)
cms: Cryptographic Message Syntax (1.0.0 to 3.4.5, 221 fields)
cnip: Component Network over IP (1.8.0 to 3.4.5, 12 fields)
coap: Constrained Application Protocol (1.6.0 to 3.4.5, 86 fields)
collectd: collectd network data (1.4.0 to 3.4.5, 28 fields)
componentstatusprotocol: Component Status Protocol (1.0.0 to 3.4.5, 18 fields)
conv: DCE/RPC Conversation Manager (1.0.0 to 3.4.5, 9 fields)
cops: Common Open Policy Service (1.0.0 to 3.4.5, 208 fields)
corosync_totemnet: Totemnet Layer of Corosync Cluster Engine (2.0.0 to 3.4.5, 4 fields)
corosync_totemsrp: Totem Single Ring Protocol implemented in Corosync Cluster Engine (2.0.0 to 3.4.5, 46 fields)
cosine: CoSine IPNOS L2 debug output (1.0.0 to 3.4.5, 7 fields)
cotp: ISO 8073/X.224 COTP Connection-Oriented Transport Protocol (1.0.0 to 3.4.5, 70 fields)
couchbase: Couchbase Protocol (2.0.0 to 3.4.5, 176 fields)
cp2179: CP2179 Protocol (2.0.0 to 3.4.5, 65 fields)
cpfi: Cross Point Frame Injector (1.0.0 to 3.4.5, 21 fields)
cpha: Check Point High Availability Protocol (1.0.0 to 3.4.5, 34 fields)
cprpc_server: DNS Control Program Server (1.0.0 to 3.4.5, 1 field)
cql: Cassandra CQL Protocol (2.2.0 to 3.4.5, 83 fields)
credssp: Credential Security Support Provider (1.8.0 to 3.4.5, 27 fields)
crf: Clock Reference Format (2.2.0 to 3.4.5, 14 fields)
crmf: Certificate Request Message Format (1.0.0 to 3.4.5, 114 fields)
crtp: CRTP (1.0.0 to 3.4.5, 15 fields)
csm_encaps: CSM_ENCAPS (1.0.0 to 3.4.5, 54 fields)
csn1: CSN.1 (2.0.0 to 3.4.5, 9 fields)
ctdb: Cluster TDB (1.0.0 to 3.4.5, 39 fields)
cups: Common Unix Printing System (CUPS) Browsing Protocol (1.0.0 to 3.4.5, 24 fields)
cvf: AVTP Compressed Video Format (2.6.0 to 3.4.5, 23 fields)
cvspserver: CVS pserver (2.6.0 to 3.4.5, 1 field)
cwids: Cisco Wireless IDS Captures (1.0.0 to 3.4.5, 9 fields)

D

daap: Digital Audio Access Protocol (1.0.0 to 3.4.5, 13 fields)
dap: X.519 Directory Access Protocol (1.0.0 to 3.4.5, 543 fields)
data: Data (1.0.0 to 3.4.5, 6 fields)
daytime: Daytime Protocol (1.0.0 to 3.4.5, 2 fields)
db-lsp: Dropbox LAN sync Protocol (1.4.0 to 3.4.5, 7 fields)
dbus: D-Bus (1.10.0 to 3.4.5, 21 fields)
dc: Dublin Core Metadata (DC) (1.0.0 to 3.4.5, 16 fields)
dcc: Distributed Checksum Clearinghouse protocol (1.0.0 to 3.4.5, 36 fields)
dccp: Datagram Congestion Control Protocol (1.0.0 to 3.4.5, 47 fields)
dce_update: DCE/RPC UpServer (1.0.0 to 3.4.5, 1 field)
dcerpc: Distributed Computing Environment / Remote Procedure Call (DCE/RPC) (1.0.0 to 3.4.5, 243 fields)
dcm: DICOM (1.0.0 to 1.0.16, 16 fields)
dcom: DCOM (1.0.0 to 3.4.5, 96 fields)
dcp-af: DCP Application Framing Layer (1.0.0 to 3.4.5, 8 fields)
dcp-etsi: ETSI Distribution & Communication Protocol (for DRM) (1.0.0 to 3.4.5, 3 fields)
dcp-pft: DCP Protection, Fragmentation & Transport Layer (1.0.0 to 3.4.5, 28 fields)
dcp-tpl: DCP Tag Packet Layer (1.0.0 to 3.4.5, 2 fields)
dct2000: Catapult DCT2000 packet (1.0.0 to 3.4.5, 83 fields)
ddp: Datagram Delivery Protocol (1.0.0 to 3.4.5, 13 fields)
ddtp: Dynamic DNS Tools Protocol (1.0.0 to 3.4.5, 9 fields)
dec_dna: DEC DNA Routing Protocol (1.0.0 to 3.4.5, 61 fields)
dec_stp: DEC Spanning Tree Protocol (1.0.0 to 3.4.5, 17 fields)
dect: DECT Protocol (1.2.0 to 3.4.5, 127 fields)
devicenet: DeviceNet Protocol (1.12.0 to 3.4.5, 40 fields)
dhcp: Dynamic Host Configuration Protocol (3.0.0 to 3.4.5, 565 fields)
dhcpfo: DHCP Failover (1.0.0 to 3.4.5, 47 fields)
dhcpv6: DHCPv6 (1.0.0 to 3.4.5, 237 fields)
dhcpv6.bulk_leasequery: DHCPv6 Bulk Leasequery (1.10.0 to 3.4.5, 7 fields)
diameter: Diameter Protocol (1.0.0 to 3.4.5, 3221 fields)
diameter.3gpp: Diameter 3GPP (1.10.0 to 3.4.5, 524 fields)
diameter3gpp: Diameter 3GPP (1.0.0 to 1.8.15, 63 fields)
dicom: DICOM (1.2.0 to 3.4.5, 85 fields)
dis: Distributed Interactive Simulation (1.0.0 to 3.4.5, 425 fields)
disp: X.519 Directory Information Shadowing Protocol (1.0.0 to 3.4.5, 161 fields)
dispatch: DCOM IDispatch (1.0.0 to 3.4.5, 64 fields)
distcc: Distcc Distributed Compiler (1.0.0 to 3.4.5, 9 fields)
djiuav: DJI UAV Drone Control Protocol (2.0.0 to 3.4.5, 13 fields)
dlep: Dynamic Link Exchange Protocol (3.4.0 to 3.4.5, 72 fields)
dlm3: Distributed Lock Manager (1.0.0 to 3.4.5, 131 fields)
dlr: Device Level Ring (1.4.0 to 3.4.5, 36 fields)
dlsw: Data Link SWitching (1.0.0 to 3.4.5, 71 fields)
dlt: Diagnostic Log and Trace (DLT) (3.2.0 to 3.4.5, 58 fields)
dmp: Direct Message Profile (1.0.0 to 3.4.5, 195 fields)
dmx: DMX (1.8.0 to 3.4.5, 2 fields)
dmx-chan: DMX Channels (1.8.0 to 2.0.16, 2 fields)
dmx-sip: DMX SIP (1.8.0 to 2.0.16, 19 fields)
dmx-test: DMX Test Frame (1.8.0 to 2.0.16, 3 fields)
dmx-text: DMX Text Frame (1.8.0 to 2.0.16, 3 fields)
dmx_chan: DMX Channels (2.2.0 to 3.4.5, 2 fields)
dmx_sip: DMX SIP (2.2.0 to 3.4.5, 19 fields)
dmx_test: DMX Test Frame (2.2.0 to 3.4.5, 3 fields)
dmx_text: DMX Text Frame (2.2.0 to 3.4.5, 3 fields)
dnp3: Distributed Network Protocol 3.0 (1.0.0 to 3.4.5, 180 fields)
dns: Domain Name System (1.0.0 to 3.4.5, 348 fields)
dnsserver: DNS Server (1.0.0 to 3.4.5, 142 fields)
docsis: DOCSIS (1.0.0 to 3.4.5, 65 fields)
docsis_bintrngreq: DOCSIS Bonded Initial Ranging Message (1.4.0 to 3.4.5, 6 fields)
docsis_bpkmattr: DOCSIS Baseline Privacy Key Management Attributes (1.0.0 to 2.2.17, 28 fields)
docsis_bpkmreq: DOCSIS Baseline Privacy Key Management Request (1.0.0 to 2.2.17, 3 fields)
docsis_bpkmrsp: DOCSIS Baseline Privacy Key Management Response (1.0.0 to 2.2.17, 3 fields)
docsis_cmctrlreq: DOCSIS CM Control Request (1.6.0 to 2.2.17, 1 field)
docsis_cmctrlrsp: DOCSIS CM Control Response (1.6.0 to 3.4.5, 1 field)
docsis_cmstatus: DOCSIS CM-STATUS Report (1.6.0 to 3.4.5, 15 fields)
docsis_dbcack: DOCSIS Dynamic Bonding Change Acknowledge (1.6.0 to 3.4.5, 1 field)
docsis_dbcreq: DOCSIS Dynamic Bonding Change Request (1.6.0 to 3.4.5, 3 fields)
docsis_dbcrsp: DOCSIS Dynamic Bonding Change Response (1.6.0 to 3.4.5, 2 fields)
docsis_dccack: DOCSIS Downstream Channel Change Acknowledge (1.0.0 to 3.4.5, 3 fields)
docsis_dccreq: DOCSIS Downstream Channel Change Request (1.0.0 to 3.4.5, 21 fields)
docsis_dccrsp: DOCSIS Downstream Channel Change Response (1.0.0 to 3.4.5, 6 fields)
docsis_dcd: DOCSIS Downstream Channel Descriptor (1.0.0 to 3.4.5, 29 fields)
docsis_dpd: DOCSIS Downstream Profile Descriptor (2.2.0 to 3.4.5, 16 fields)
docsis_dpvreq: DOCSIS Path Verify Request (1.6.0 to 2.2.17, 9 fields)
docsis_dpvrsp: DOCSIS Path Verify Response (1.6.0 to 2.2.17, 9 fields)
docsis_dsaack: DOCSIS Dynamic Service Addition Acknowledge (1.0.0 to 3.4.5, 2 fields)
docsis_dsareq: DOCSIS Dynamic Service Addition Request (1.0.0 to 3.4.5, 1 field)
docsis_dsarsp: DOCSIS Dynamic Service Addition Response (1.0.0 to 3.4.5, 2 fields)
docsis_dscack: DOCSIS Dynamic Service Change Acknowledgement (1.0.0 to 3.4.5, 2 fields)
docsis_dscreq: DOCSIS Dynamic Service Change Request (1.0.0 to 3.4.5, 1 field)
docsis_dscrsp: DOCSIS Dynamic Service Change Response (1.0.0 to 3.4.5, 2 fields)
docsis_dsdreq: DOCSIS Dynamic Service Delete Request (1.0.0 to 3.4.5, 3 fields)
docsis_dsdrsp: DOCSIS Dynamic Service Delete Response (1.0.0 to 3.4.5, 3 fields)
docsis_intrngreq: DOCSIS Initial Ranging Message (1.0.0 to 3.4.5, 3 fields)
docsis_map: DOCSIS Upstream Bandwidth Allocation - version 1 (1.0.0 to 3.4.5, 14 fields)
docsis_mdd: DOCSIS Mac Domain Description (1.2.0 to 3.4.5, 42 fields)
docsis_mgmt: DOCSIS Mac Management (1.0.0 to 3.4.5, 571 fields)
docsis_ocd: DOCSIS OFDM Channel Descriptor (2.2.0 to 3.4.5, 17 fields)
docsis_regack: DOCSIS Registration Acknowledge (1.0.0 to 3.4.5, 2 fields)
docsis_regreq: DOCSIS Registration Requests (1.0.0 to 3.4.5, 1 field)
docsis_regreqmp: DOCSIS Registration Request Multipart (1.2.0 to 3.4.5, 3 fields)
docsis_regrsp: DOCSIS Registration Responses (1.0.0 to 3.4.5, 2 fields)
docsis_regrspmp: DOCSIS Registration Response Multipart (1.2.0 to 3.4.5, 4 fields)
docsis_rngreq: DOCSIS Range Request Message (1.0.0 to 3.4.5, 3 fields)
docsis_rngrsp: DOCSIS Ranging Response (1.0.0 to 3.4.5, 11 fields)
docsis_sync: DOCSIS Synchronisation Message (1.2.0 to 3.4.5, 1 field)
docsis_tlv: DOCSIS Appendix C TLV's (1.0.0 to 3.4.5, 415 fields)
docsis_type29ucd: DOCSIS Upstream Channel Descriptor Type 29 (1.0.0 to 3.4.5, 56 fields)
docsis_type35ucd: DOCSIS Upstream Channel Descriptor Type 35 (2.2.0 to 3.4.5, 60 fields)
docsis_uccreq: DOCSIS Upstream Channel Change Request (1.0.0 to 3.4.5, 1 field)
docsis_uccrsp: DOCSIS Upstream Channel Change Response (1.0.0 to 3.4.5, 1 field)
docsis_ucd: DOCSIS Upstream Channel Descriptor (1.0.0 to 3.4.5, 48 fields)
docsis_vsif: DOCSIS Vendor Specific Encodings (1.0.0 to 3.4.5, 42 fields)
dof: DOF Protocol Stack (2.2.0 to 3.4.5, 49 fields)
dof.ccm: DOF CCM Security Mode of Operation (2.2.0 to 3.4.5, 12 fields)
dof.ccm.app: DOF CCM Security Mode App (2.2.0 to 3.4.5, 1 field)
dof.ccm.dsp: DOF CCM Security Mode DSP Options (2.2.0 to 3.4.5, 7 fields)
dof.dnp: DOF Network Protocol (2.2.0 to 3.4.5, 2 fields)
dof.dnp.v0: DOF Network Protocol V0 (2.2.0 to 3.4.5, 2 fields)
dof.dnp.v1: DOF Network Protocol V1 (2.2.0 to 3.4.5, 8 fields)
dof.dpp: DOF Presentation Protocol (2.2.0 to 3.4.5, 12 fields)
dof.dpp.v0: DOF Presentation Protocol V0 (2.2.0 to 3.4.5, 1 field)
dof.dpp.v2: DOF Presentation Protocol V2 (2.2.0 to 3.4.5, 26 fields)
dof.esp: DOF Session Protocol (2.2.0 to 3.4.5, 6 fields)
dof.oap: DOF Object Access Protocol (2.2.0 to 3.4.5, 27 fields)
dof.oap.dsp: DOF Object Access Protocol DSP Options (2.2.0 to 3.4.5, 1 field)
dof.oid: DOF Object Identifier (2.2.0 to 3.4.5, 13 fields)
dof.sgmp: DOF Secure Group Management Protocol (2.2.0 to 3.4.5, 13 fields)
dof.tep1: DOF Ticket Exchange Protocol Version 1 (2.2.0 to 3.4.5, 18 fields)
dof.tep1.dsp: DOF Ticket Exchange Protocol DSP Options (2.2.0 to 3.4.5, 1 field)
dof.trp: DOF Ticket Request Protocol (2.2.0 to 3.4.5, 25 fields)
dof.trp.dsp: DOF Ticket Request Protocol DSP Options (2.2.0 to 3.4.5, 1 field)
doip: DoIP (ISO13400) Protocol (3.0.0 to 3.4.5, 28 fields)
dop: X.501 Directory Operational Binding Management Protocol (1.0.0 to 3.4.5, 302 fields)
dpaux: DisplayPort AUX-Channel (3.0.0 to 3.4.5, 28 fields)
dpauxmon: DPAUXMON DisplayPort AUX channel monitor (3.0.0 to 3.4.5, 7 fields)
dplay: DirectPlay Protocol (1.0.0 to 3.4.5, 165 fields)
dpnet: DirectPlay 8 protocol (2.4.0 to 3.4.5, 60 fields)
dpnss: Digital Private Signalling System No 1 (1.0.0 to 3.4.5, 32 fields)
dpnss_link: Digital Private Signalling System No 1 Link Layer (1.2.0 to 3.4.5, 8 fields)
dpp: Wi-Fi Device Provisioning Protocol (2.6.0 to 3.4.5, 40 fields)
drb: Distributed Ruby (3.0.0 to 3.4.5, 1 field)
drbd: DRBD Protocol (3.2.0 to 3.4.5, 105 fields)
drda: DRDA (1.0.0 to 3.4.5, 18 fields)
drsuapi: DRSUAPI (1.0.0 to 3.4.5, 415 fields)
dsi: Data Stream Interface (1.0.0 to 3.4.5, 45 fields)
dsp: X.519 Directory System Protocol (1.0.0 to 3.4.5, 214 fields)
dsr: Dynamic Source Routing (2.0.0 to 3.4.5, 39 fields)
dssetup: Active Directory Setup (1.0.0 to 3.4.5, 20 fields)
dtcp-ip: Digital Transmission Content Protection over IP (1.10.0 to 3.4.5, 15 fields)
dtls: Datagram Transport Layer Security (1.0.0 to 3.4.5, 290 fields)
dtp: Dynamic Trunk Protocol (1.0.0 to 3.4.5, 14 fields)
dtps: DOF Tunnel Protocol Stack (2.2.0 to 3.4.5, 2 fields)
dtpt: DeskTop PassThrough Protocol (1.0.0 to 3.4.5, 74 fields)
dtsprovider: DCE Distributed Time Service Provider (1.0.0 to 3.4.5, 2 fields)
dtsstime_req: DCE Distributed Time Service Local Server (1.0.0 to 3.4.5, 1 field)
dua: DPNSS/DASS2-User Adaptation Layer (1.0.0 to 3.4.5, 30 fields)
dvb-ci: DVB Common Interface (1.6.0 to 3.4.5, 328 fields)
dvb-s2_bb: DVB-S2 Baseband Frame (1.10.0 to 3.4.5, 26 fields)
dvb-s2_gse: DVB-S2 GSE Packet (1.10.0 to 3.4.5, 26 fields)
dvb-s2_modeadapt: DVB-S2 Mode Adaptation Header (1.10.0 to 3.4.5, 7 fields)
dvb-s2_table: DVB-S2 Signalization Table (3.4.0 to 3.4.5, 382 fields)
dvb_ait: DVB Application Information Table (1.8.0 to 3.4.5, 35 fields)
dvb_bat: DVB Bouquet Association Table (1.8.0 to 3.4.5, 15 fields)
dvb_data_mpe: DVB-DATA MultiProtocol Encapsulation (1.8.0 to 3.4.5, 8 fields)
dvb_eit: DVB Event Information Table (1.8.0 to 3.4.5, 16 fields)
dvb_ipdc: ETSI IPDC Bootstrap (1.8.0 to 3.4.5, 1 field)
dvb_nit: DVB Network Information Table (1.8.0 to 3.4.5, 14 fields)
dvb_sdt: DVB Service Description Table (1.8.0 to 3.4.5, 15 fields)
dvb_tdt: DVB Time and Date Table (1.8.0 to 3.4.5, 1 field)
dvb_tot: DVB Time Offset Table (1.8.0 to 3.4.5, 3 fields)
dvmrp: Distance Vector Multicast Routing Protocol (1.0.0 to 3.4.5, 45 fields)
dx: DX cluster (1.10.0 to 3.4.5, 1 field)
dxl: Data Exchange Layer (3.0.0 to 3.4.5, 3 fields)

E

e.212: ITU-T E.212 number (1.0.0 to 1.0.16, 3 fields)
e100: E100 Encapsulation (1.2.0 to 3.4.5, 8 fields)
e164: ITU-T E.164 number (1.0.0 to 3.4.5, 7 fields)
e1ap: E1 Application Protocol (3.0.0 to 3.4.5, 549 fields)
e212: ITU-T E.212 number (1.2.0 to 3.4.5, 22 fields)
eap: Extensible Authentication Protocol (1.0.0 to 3.4.5, 147 fields)
eapol: 802.1X Authentication (1.0.0 to 3.4.5, 37 fields)
ebhscr: EBHSCR Protocol (3.2.0 to 3.4.5, 67 fields)
ecat: EtherCAT datagram(s) (1.0.0 to 3.4.5, 486 fields)
ecat_mailbox: EtherCAT Mailbox Protocol (1.0.0 to 3.4.5, 152 fields)
ecatf: EtherCAT frame header (2.2.0 to 3.4.5, 3 fields)
echo: Echo (1.0.0 to 3.4.5, 3 fields)
ecmp: ECMP (2.2.0 to 3.4.5, 174 fields)
ecp: ECP Protocol (1.8.0 to 3.4.5, 15 fields)
ecp21: Edge Control Protocol (2.2.0 to 3.4.5, 4 fields)
ecpri: evolved Common Public Radio Interface (3.2.0 to 3.4.5, 42 fields)
edonkey: eDonkey Protocol (1.0.0 to 3.4.5, 119 fields)
edp: Extreme Discovery Protocol (1.0.0 to 3.4.5, 87 fields)
eero: EERO Protocol (3.2.0 to 3.4.5, 3 fields)
efs: EFS (pidl) (1.0.0 to 3.4.5, 32 fields)
egd: Ethernet Global Data (1.2.0 to 3.4.5, 10 fields)
ehdlc: Ericsson HDLC (1.8.0 to 3.4.5, 23 fields)
ehs: EHS (1.2.0 to 3.4.5, 142 fields)
eigrp: Enhanced Interior Gateway Routing Protocol (1.0.0 to 3.4.5, 263 fields)
eiss: ETV-AM EISS Section (1.8.0 to 3.4.5, 41 fields)
elasticsearch: Elasticsearch (2.0.0 to 3.4.5, 36 fields)
elcom: ELCOM Communication Protocol (1.8.0 to 3.4.5, 33 fields)
elf: Executable and Linkable Format (1.12.0 to 3.4.5, 132 fields)
elmi: Ethernet Local Management Interface (1.12.0 to 3.4.5, 41 fields)
enc: OpenBSD Encapsulating device (1.0.0 to 3.4.5, 8 fields)
enip: EtherNet/IP (Industrial Protocol) (1.0.0 to 3.4.5, 288 fields)
enrp: Endpoint Handlespace Redundancy Protocol (1.0.0 to 3.4.5, 50 fields)
enttec: ENTTEC (1.0.0 to 3.4.5, 17 fields)
epl: Ethernet POWERLINK (1.0.0 to 3.4.5, 246 fields)
epl_v1: ETHERNET Powerlink V1.0 (1.0.0 to 3.4.5, 33 fields)
epm: DCE/RPC Endpoint Mapper (1.0.0 to 3.4.5, 32 fields)
epmd: Erlang Port Mapper Daemon (1.0.0 to 3.4.5, 15 fields)
epon: IEEE 802.3 EPON Preamble (1.12.0 to 3.4.5, 13 fields)
erf: Extensible Record Format (1.0.0 to 3.4.5, 3737 fields)
erldp: Erlang Distribution Protocol (1.6.0 to 3.4.5, 35 fields)
erspan: Encapsulated Remote Switch Packet ANalysis (1.0.0 to 3.4.5, 44 fields)
esio: SAIA Ether-S-I/O protocol (1.6.0 to 3.4.5, 19 fields)
esis: ISO 9542 ESIS Routeing Information Exchange Protocol (1.0.0 to 3.4.5, 21 fields)
esl: EtherCAT Switch Link (1.4.0 to 3.4.5, 4 fields)
esp: Encapsulating Security Payload (1.0.0 to 3.4.5, 12 fields)
ess: Extended Security Services (1.0.0 to 3.4.5, 94 fields)
etag: 802.1BR E-Tag (2.2.0 to 3.4.5, 10 fields)
etch: Apache Etch Protocol (1.6.0 to 3.4.5, 20 fields)
eth: Ethernet (1.0.0 to 3.4.5, 36 fields)
ethercat: EtherCAT frame header (1.0.0 to 2.0.16, 3 fields)
etheric: Etheric (1.0.0 to 1.2.18, 27 fields)
etherip: Ethernet over IP (1.0.0 to 3.4.5, 4 fields)
etsi_cat: Card Application Toolkit ETSI TS 102.223 (1.8.0 to 3.4.5, 118 fields)
etv-ddb: ETV-AM DDB Section (1.8.0 to 3.4.5, 6 fields)
etv-dii: ETV-AM DII Section (1.8.0 to 3.4.5, 6 fields)
etw.ndis: ETW Ndis (2.6.0 to 3.4.5, 95 fields)
etw.wfp_capture: ETW WFP Capture (2.6.0 to 3.4.5, 10 fields)
eventlog: Event Logger (1.0.0 to 3.4.5, 96 fields)
evrc: Enhanced Variable Rate Codec (1.2.0 to 3.4.5, 20 fields)
evs: Enhanced Voice Services (3.0.0 to 3.4.5, 25 fields)
exablaze: Exablaze trailer (3.0.0 to 3.4.5, 6 fields)
exec: Remote Process Execution (1.0.0 to 3.4.5, 6 fields)
expert: Expert Info (1.2.0 to 1.10.14, 3 fields)
exported_pdu: EXPORTED_PDU (1.12.0 to 3.4.5, 22 fields)

F

f1ap: F1 Application Protocol (2.6.0 to 3.4.5, 936 fields)
f5ethtrailer: F5 Ethernet Trailer Protocol (2.6.0 to 3.4.5, 79 fields)
f5fileinfo: F5 Capture Information (2.6.0 to 3.4.5, 6 fields)
fb_zero: (Facebook) Zero Protocol (2.4.0 to 3.4.5, 31 fields)
fc: Fibre Channel (1.0.0 to 3.4.5, 53 fields)
fc00: Fc00 CryptoAuth (2.4.0 to 3.4.5, 21 fields)
fcct: Fibre Channel Common Transport (1.0.0 to 3.4.5, 11 fields)
fcdns: Fibre Channel Name Server (1.0.0 to 3.4.5, 72 fields)
fcels: FC Extended Link Svc (1.0.0 to 3.4.5, 182 fields)
fcfzs: Fibre Channel Fabric Zone Server (1.0.0 to 3.4.5, 32 fields)
fcgi: FastCGI (1.6.0 to 3.4.5, 13 fields)
fcip: FCIP (1.0.0 to 3.4.5, 26 fields)
fcoe: Fibre Channel over Ethernet (1.0.0 to 3.4.5, 9 fields)
fcoib: Fibre Channel over Infiniband (1.6.0 to 3.4.5, 9 fields)
fcp: Fibre Channel Protocol for SCSI (1.0.0 to 3.4.5, 44 fields)
fcs: FC Fabric Configuration Server (1.0.0 to 3.4.5, 42 fields)
fcsb3: Fibre Channel Single Byte Command (1.10.0 to 3.4.5, 69 fields)
fcsof: Fibre Channel Delimiters (1.4.0 to 3.4.5, 4 fields)
fcsp: Fibre Channel Security Protocol (1.0.0 to 3.4.5, 31 fields)
fddi: Fiber Distributed Data Interface (1.0.0 to 3.4.5, 8 fields)
fdp: Foundry Discovery Protocol (1.10.0 to 3.4.5, 21 fields)
fefd: Far End Failure Detection (1.2.0 to 3.4.5, 11 fields)
felica: Sony FeliCa (1.8.0 to 3.4.5, 14 fields)
ff: FOUNDATION Fieldbus (1.0.0 to 3.4.5, 704 fields)
file: File (1.12.0 to 3.4.5, 10 fields)
file-pcap: PCAP File Format (2.0.0 to 3.4.5, 22 fields)
file-pcapng: PCAPNG File Format (2.0.0 to 3.4.5, 112 fields)
fileexp: DCE DFS File Exporter (1.0.0 to 3.4.5, 161 fields)
finger: finger (1.12.0 to 3.4.5, 6 fields)
fip: FCoE Initialization Protocol (1.2.0 to 3.4.5, 45 fields)
fix: Financial Information eXchange Protocol (1.0.0 to 3.4.5, 1638 fields)
fldb: DCE DFS Fileset Location Server (1.0.0 to 3.4.5, 124 fields)
flexnet: FlexNet (1.10.0 to 3.4.5, 3 fields)
flexray: FlexRay Protocol (2.2.0 to 3.4.5, 25 fields)
flip: NSN FLIP (1.4.0 to 3.4.5, 9 fields)
fmp: File Mapping Protocol (1.0.0 to 3.4.5, 87 fields)
fmp_notify: File Mapping Protocol Notify (1.0.0 to 3.4.5, 19 fields)
fmtp: Flight Message Transfer Protocol (FMTP) (1.8.0 to 3.4.5, 4 fields)
forces: Forwarding and Control Element Separation Protocol (1.10.0 to 3.4.5, 45 fields)
fortinet_sso: Fortinet Single Sign On (3.4.0 to 3.4.5, 14 fields)
fp: FP (1.0.0 to 3.4.5, 163 fields)
fp_hint: FP Hint (1.4.0 to 3.4.5, 25 fields)
fp_mux: Huawei FP Multiplexing Header (2.6.0 to 3.4.5, 6 fields)
fpp: IEEE 802.3br Frame Preemption Protocol (2.6.0 to 3.4.5, 21 fields)
fr: Frame Relay (1.0.0 to 3.4.5, 32 fields)
fractalgeneratorprotocol: Fractal Generator Protocol (1.0.0 to 3.4.5, 16 fields)
frame: Frame (1.0.0 to 3.4.5, 51 fields)
frsapi: Microsoft File Replication Service API (1.0.0 to 3.4.5, 1 field)
frsrpc: File Replication Service (1.0.0 to 3.4.5, 181 fields)
frstrans: File Replication Service DFS-R (1.4.0 to 3.4.5, 98 fields)
fsrvp: File Server Remote VSS Protocol (3.2.0 to 3.4.5, 39 fields)
ftam: ISO 8571 FTAM (1.0.0 to 3.4.5, 592 fields)
ftdi-ft: FTDI FT USB (3.4.0 to 3.4.5, 51 fields)
ftdi-mpsse: FTDI Multi-Protocol Synchronous Serial Engine (3.4.0 to 3.4.5, 63 fields)
ftdift: FTDI FT USB (3.2.0 to 3.2.13, 41 fields)
ftp: File Transfer Protocol (FTP) (1.0.0 to 3.4.5, 38 fields)
ftserver: FTServer Operations (1.0.0 to 3.4.5, 1 field)
fw1: Checkpoint FW-1 (1.0.0 to 3.4.5, 6 fields)

G

g723: G.723 (1.0.0 to 3.4.5, 2 fields)
gadu-gadu: Gadu-Gadu Protocol (1.8.0 to 3.4.5, 59 fields)
gbcs_gbz: GBCS GBZ (3.0.0 to 3.4.5, 26 fields)
gbcs_message: GBCS Message (3.0.0 to 3.4.5, 51 fields)
gbcs_tunnel: GBCS Tunnel (3.0.0 to 3.4.5, 2 fields)
gcsna: GCSNA (3.0.0 to 3.4.5, 26 fields)
gdb: GDB Remote Serial Protocol (2.0.0 to 3.4.5, 5 fields)
gdsdb: Firebird SQL Database Remote Protocol (1.0.0 to 3.4.5, 115 fields)
gearman: Gearman Protocol (1.10.0 to 3.4.5, 29 fields)
ged125: Cisco GED-125 Protocol (1.10.0 to 3.4.5, 93 fields)
gelf: Graylog Extended Log Format (3.2.0 to 3.4.5, 17 fields)
geneve: Generic Network Virtualization Encapsulation (2.0.0 to 3.4.5, 20 fields)
genl: Linux Generic Netlink protocol (2.4.0 to 3.4.5, 22 fields)
gfp: Generic Framing Procedure (2.2.0 to 3.4.5, 26 fields)
gift: giFT Internet File Transfer (1.0.0 to 3.4.5, 6 fields)
giop: General Inter-ORB Protocol (1.0.0 to 3.4.5, 103 fields)
giop-coseventcomm: Coseventcomm Dissector Using GIOP API (1.0.0 to 3.4.5, 6 fields)
giop-cosnaming: Cosnaming Dissector Using GIOP API (1.0.0 to 3.4.5, 37 fields)
giop-gias: Gias Dissector Using GIOP API (2.0.0 to 3.4.5, 325 fields)
giop-parlay: Parlay Dissector Using GIOP API (1.0.0 to 3.4.5, 2872 fields)
giop-tango: Tango Dissector Using GIOP API (1.0.0 to 3.4.5, 370 fields)
git: Git Smart Protocol (1.4.0 to 3.4.5, 3 fields)
glbp: Gateway Load Balancing Protocol (1.4.0 to 3.4.5, 42 fields)
glow: Glow (3.0.0 to 3.4.5, 84 fields)
gluster.cli: Gluster CLI (1.8.0 to 3.4.5, 11 fields)
gluster.dump: Gluster Dump (1.8.0 to 3.4.5, 5 fields)
gluster.pmap: Gluster Portmap (1.8.0 to 3.4.5, 4 fields)
glusterd: Gluster Daemon (1.8.0 to 3.4.5, 14 fields)
glusterfs: GlusterFS (1.8.0 to 3.4.5, 149 fields)
glusterfs.cbk: GlusterFS Callback (1.8.0 to 3.4.5, 21 fields)
glusterfs.hndsk: GlusterFS Handshake (1.8.0 to 3.4.5, 9 fields)
gmhdr: Gigamon Header (1.4.0 to 3.4.5, 20 fields)
gmr1.bcch: GEO-Mobile Radio (1) BCCH (1.10.0 to 3.4.5, 92 fields)
gmr1.common: GEO-Mobile Radio (1) Common (1.10.0 to 3.4.5, 19 fields)
gmr1.dtap: GEO-Mobile Radio (1) DTAP (1.10.0 to 3.4.5, 2 fields)
gmr1.rach: GEO-Mobile Radio (1) RACH (1.10.0 to 3.4.5, 45 fields)
gmr1.rr: GEO-Mobile Radio (1) RR (1.10.0 to 3.4.5, 103 fields)
gmr1_bcch: GEO-Mobile Radio (1) BCCH (1.8.0 to 1.8.15, 66 fields)
gmr1_ccch: GEO-Mobile Radio (1) CCCH (1.8.0 to 1.8.15, 99 fields)
gmr1_common: GEO-Mobile Radio (1) Common (1.8.0 to 1.8.15, 18 fields)
gmrp: GARP Multicast Registration Protocol (1.0.0 to 3.4.5, 8 fields)
gmtrailer: Gigamon Trailer (1.10.0 to 3.4.5, 3 fields)
gnm: ITU M.3100 Generic Network Information Model (1.0.0 to 1.10.14, 180 fields)
gnutella: Gnutella Protocol (1.0.0 to 3.4.5, 32 fields)
gnw: GeoNetworking (3.0.0 to 3.4.5, 151 fields)
goose: GOOSE (1.2.0 to 3.4.5, 67 fields)
gopher: Gopher (1.6.0 to 3.4.5, 8 fields)
gpef: GPEF (1.2.0 to 3.4.5, 8 fields)
gprs-ns: GPRS Network Service (1.4.0 to 3.4.5, 31 fields)
gprs_ns: GPRS Network service (1.0.0 to 1.2.18, 8 fields)
gprscdr: GPRS CDR (1.6.0 to 3.4.5, 538 fields)
gquic: GQUIC (Google Quick UDP Internet Connections) (2.6.0 to 3.4.5, 149 fields)
gre: Generic Routing Encapsulation (1.0.0 to 3.4.5, 47 fields)
grpc: GRPC Message (2.6.0 to 3.4.5, 5 fields)
gryphon: DG Gryphon Protocol (1.0.0 to 3.4.5, 288 fields)
gsm-r-uus1: GSM-R User-to-User Signaling (3.0.0 to 3.4.5, 44 fields)
gsm-sms-ud: GSM Short Message Service User Data (1.0.0 to 1.8.15, 19 fields)
gsm_a: GSM A-I/F COMMON (1.10.0 to 3.4.5, 201 fields)
gsm_a.bssmap: GSM A-I/F BSSMAP (1.10.0 to 3.4.5, 194 fields)
gsm_a.dtap: GSM A-I/F DTAP (1.10.0 to 3.4.5, 255 fields)
gsm_a.gm: GSM A-I/F GPRS Mobility and Session Management (1.10.0 to 3.4.5, 321 fields)
gsm_a.rp: GSM A-I/F RP (1.10.0 to 3.4.5, 10 fields)
gsm_a.rr: GSM A-I/F Radio Resource Management (1.8.5 to 3.4.5, 744 fields)
gsm_a.sacch: GSM SACCH (1.8.5 to 3.4.5, 3 fields)
gsm_a_bssmap: GSM A-I/F BSSMAP (1.0.0 to 1.8.15, 225 fields)
gsm_a_ccch: GSM CCCH (1.0.0 to 1.8.4, 351 fields)
gsm_a_common: GSM A-I/F COMMON (1.2.0 to 1.8.15, 157 fields)
gsm_a_dtap: GSM A-I/F DTAP (1.0.0 to 1.8.15, 87 fields)
gsm_a_gm: GSM A-I/F GPRS Mobility and Session Management (1.2.0 to 1.8.15, 205 fields)
gsm_a_rp: GSM A-I/F RP (1.0.0 to 1.8.15, 3 fields)
gsm_a_sacch: GSM SACCH (1.2.0 to 1.8.4, 4 fields)
gsm_abis_om2000: Ericsson A-bis OML (1.8.0 to 3.4.5, 161 fields)
gsm_abis_oml: GSM A-bis OML (1.8.0 to 3.4.5, 128 fields)
gsm_abis_pgsl: GSM A-bis P-GSL (2.4.0 to 3.4.5, 36 fields)
gsm_abis_rsl: Radio Signalling Link (RSL) (1.10.0 to 3.4.5, 123 fields)
gsm_abis_tfp: GSM A-bis TFP (2.4.0 to 3.4.5, 9 fields)
gsm_bssmap_le: Lb-I/F BSSMAP LE (1.2.0 to 3.4.5, 53 fields)
gsm_cbch: GSM Cell Broadcast Channel (1.8.0 to 3.4.5, 30 fields)
gsm_cbs: GSM Cell Broadcast Service (1.10.0 to 3.4.5, 21 fields)
gsm_cell_broadcast: GSM Cell Broadcast Service (1.8.0 to 1.8.15, 19 fields)
gsm_ipa: GSM over IP protocol as used by ip.access (1.4.0 to 3.4.5, 10 fields)
gsm_map: GSM Mobile Application (1.0.0 to 3.4.5, 2647 fields)
gsm_rlcmac: Radio Link Control, Medium Access Control, 3GPP TS44.060 (1.6.0 to 3.4.5, 2399 fields)
gsm_sim: GSM SIM 11.11 (1.8.0 to 3.4.5, 357 fields)
gsm_sms: GSM SMS TPDU (GSM 03.40) (1.0.0 to 3.4.5, 152 fields)
gsm_sms_ud: GSM Short Message Service User Data (1.10.0 to 3.4.5, 20 fields)
gsm_um: GSM Um Interface (1.2.0 to 3.4.5, 10 fields)
gsmtap: GSM Radiotap (1.4.0 to 3.4.5, 26 fields)
gsmtap_log: GSMTAP libosmocore logging (2.4.0 to 3.4.5, 8 fields)
gss-api: GSS-API Generic Security Service Application Program Interface (1.0.0 to 3.4.5, 15 fields)
gsup: Osmocom General Subscriber Update Protocol (3.0.0 to 3.4.5, 38 fields)
gtp: GPRS Tunneling Protocol (1.0.0 to 3.4.5, 354 fields)
gtpv2: GPRS Tunneling Protocol V2 (1.2.0 to 3.4.5, 738 fields)
gvcp: GigE Vision Control Protocol (1.4.0 to 3.4.5, 252 fields)
gvrp: GARP VLAN Registration Protocol (1.0.0 to 3.4.5, 7 fields)
gvsp: GigE Vision Streaming Protocol (2.0.0 to 3.4.5, 162 fields)

H

h1: Sinec H1 Protocol (1.0.0 to 3.4.5, 18 fields)
h221nonstd: H221NonStandard (1.0.0 to 3.4.5, 2 fields)
h223: ITU-T Recommendation H.223 (1.0.0 to 3.4.5, 43 fields)
h225: H323-MESSAGES (1.0.0 to 3.4.5, 1056 fields)
h235: H235-SECURITY-MESSAGES (1.0.0 to 3.4.5, 144 fields)
h245: MULTIMEDIA-SYSTEM-CONTROL (1.0.0 to 3.4.5, 1815 fields)
h248: H.248 MEGACO (1.0.0 to 3.4.5, 444 fields)
h248.2: H.248.2 (1.10.0 to 3.4.5, 2 fields)
h248.3gpp: H.248 3GPP (1.10.0 to 3.4.5, 30 fields)
h248.an: H.248.7 (1.10.0 to 3.4.5, 13 fields)
h248.annexc: H.248 Annex C (2.0.0 to 3.4.5, 127 fields)
h248.chp: H.248.10 (1.10.0 to 3.4.5, 2 fields)
h2483gpp: H.248 3GPP (1.0.0 to 1.8.15, 24 fields)
h248_2: H.248.2 (1.8.0 to 1.8.15, 2 fields)
h248an: H.248.7 (1.0.0 to 1.8.15, 13 fields)
h248c: H.248 Annex C (1.0.0 to 1.12.13, 124 fields)
h248chp: H.248.10 (1.0.0 to 1.8.15, 2 fields)
h248e: H.248 Annex E (1.0.0 to 3.4.5, 151 fields)
h248q1950: H.248 Q.1950 Annex A (1.0.0 to 3.4.5, 62 fields)
h261: ITU-T Recommendation H.261 (1.0.0 to 3.4.5, 10 fields)
h263: ITU-T Recommendation H.263 (1.0.0 to 3.4.5, 45 fields)
h263p: ITU-T Recommendation H.263 RTP Payload header (RFC4629) (1.0.0 to 3.4.5, 12 fields)
h264: H.264 (1.0.0 to 3.4.5, 200 fields)
h265: H.265 (3.0.0 to 3.4.5, 311 fields)
h323: H.323 (1.0.0 to 3.4.5, 42 fields)
h450: H.450 Supplementary Services (1.0.0 to 3.4.5, 448 fields)
h450.ros: H.450 Remote Operations Apdus (1.0.0 to 3.4.5, 21 fields)
h460: H.460 Supplementary Services (1.0.0 to 3.4.5, 252 fields)
h501: H.501 Mobility (1.0.0 to 3.4.5, 376 fields)
hart_ip: HART_IP Protocol (1.8.0 to 3.4.5, 152 fields)
hbbak: Palo Alto Heartbeat Backup (3.4.0 to 3.4.5, 3 fields)
hci_h1: Bluetooth HCI H1 (1.0.0 to 3.4.5, 2 fields)
hci_h4: Bluetooth HCI H4 (1.0.0 to 3.4.5, 2 fields)
hci_mon: Bluetooth Linux Monitor Transport (1.12.0 to 3.4.5, 21 fields)
hci_usb: Bluetooth HCI USB Transport (1.10.0 to 3.4.5, 18 fields)
hclnfsd: Hummingbird NFS Daemon (1.0.0 to 3.4.5, 42 fields)
hcrt: Hotline Command-Response Transaction protocol (2.0.0 to 3.4.5, 17 fields)
hdcp: High bandwidth Digital Content Protection (1.8.0 to 3.4.5, 35 fields)
hdcp2: High bandwidth Digital Content Protection version 2 (1.8.0 to 3.4.5, 26 fields)
hdfs: HDFS Protocol (1.8.0 to 3.4.5, 52 fields)
hdfsdata: HDFSDATA Protocol (1.8.0 to 3.4.5, 34 fields)
hdmi: High-Definition Multimedia Interface (1.12.0 to 3.4.5, 10 fields)
hi2operations: HI2Operations (1.4.0 to 3.4.5, 396 fields)
hilscher: Hilscher analyzer dissector (1.0.0 to 1.6.16, 3 fields)
hip: Host Identity Protocol (1.4.0 to 3.4.5, 104 fields)
hiqnet: Harman HiQnet (2.0.0 to 3.4.5, 110 fields)
hislip: High-Speed LAN Instrument Protocol (1.12.0 to 3.4.5, 40 fields)
hl7: Health Level Seven (2.4.0 to 3.4.5, 9 fields)
hnbap: UTRAN Iuh interface HNBAP signalling (1.4.0 to 3.4.5, 168 fields)
homeplug: HomePlug protocol (1.0.0 to 3.4.5, 151 fields)
homeplug-av: HomePlug AV protocol (1.8.0 to 3.4.5, 590 fields)
hp_erm: HP encapsulated remote mirroring (1.4.0 to 3.4.5, 8 fields)
hpext: HP Extended Local-Link Control (1.0.0 to 3.4.5, 3 fields)
hpfeeds: HPFEEDS HoneyPot Feeds Protocol (1.10.0 to 3.4.5, 13 fields)
hpna: HomePNA, wlan link local tunnel (2.4.0 to 3.4.5, 6 fields)
hpsw: HP Switch Protocol (1.0.0 to 3.4.5, 21 fields)
hpteam: HP NIC Teaming Heartbeat (1.4.0 to 3.4.5, 1 field)
hsms: High-speed SECS Message Service Protocol (2.4.0 to 3.4.5, 27 fields)
hsr: High-availability Seamless Redundancy (IEC62439 Part 3 Chapter 5) (1.8.0 to 3.4.5, 7 fields)
hsr_prp_supervision: HSR/PRP Supervision (IEC62439 Part 3) (1.8.0 to 3.4.5, 10 fields)
hsrp: Cisco Hot Standby Router Protocol (1.0.0 to 3.4.5, 44 fields)
http: Hypertext Transfer Protocol (1.0.0 to 3.4.5, 79 fields)
http2: HyperText Transfer Protocol 2 (1.12.0 to 3.4.5, 144 fields)
http3: Hypertext Transfer Protocol Version 3 (3.4.0 to 3.4.5, 7 fields)
hyperscsi: HyperSCSI (1.0.0 to 3.4.5, 6 fields)
hzlcst: Hazelcast Wire Protocol (1.8.0 to 3.4.5, 33 fields)

I

i1d3: X-Rite i1 Display Pro (and derivatives) USB protocol (2.4.0 to 3.4.5, 48 fields)
i2c: Inter-Integrated Circuit (1.2.0 to 3.4.5, 4 fields)
iap: Information Access Protocol (1.0.0 to 3.4.5, 18 fields)
iapp: Inter-Access-Point Protocol (1.0.0 to 3.4.5, 16 fields)
iax2: Inter-Asterisk eXchange v2 (1.0.0 to 3.4.5, 145 fields)
ib_sdp: Infiniband Sockets Direct Protocol (1.6.0 to 1.8.15, 36 fields)
ibeacon: Apple iBeacon (2.4.0 to 3.4.5, 3 fields)
icall: iCall Communication Protocol (2.4.0 to 3.4.5, 15 fields)
icap: Internet Content Adaptation Protocol (1.0.0 to 3.4.5, 5 fields)
icep: Internet Communications Engine Protocol (1.0.0 to 3.4.5, 37 fields)
icl_rpc: DCE DFS ICL RPC (1.0.0 to 3.4.5, 1 field)
icmp: Internet Control Message Protocol (1.0.0 to 3.4.5, 105 fields)
icmpv6: Internet Control Message Protocol v6 (1.0.0 to 3.4.5, 472 fields)
icp: Internet Cache Protocol (1.0.0 to 3.4.5, 13 fields)
icq: ICQ Protocol (1.0.0 to 3.4.5, 77 fields)
idmp: X.519 Internet Directly Mapped Protocol (1.6.0 to 3.4.5, 52 fields)
idn: Ilda Digital Network Protocol (3.4.0 to 3.4.5, 83 fields)
idp: Internetwork Datagram Protocol (1.0.0 to 3.4.5, 12 fields)
idrp: ISO/IEC 10747 (1993): Inter Domain Routing Protocol (1.12.0 to 3.4.5, 70 fields)
iec60870_101: IEC 60870-5-101 (3.2.0 to 3.4.5, 13 fields)
iec60870_104: IEC 60870-5-104 (3.2.0 to 3.4.5, 6 fields)
iec60870_asdu: IEC 60870-5-101/104 ASDU (3.2.0 to 3.4.5, 82 fields)
iec61883: IEC 61883 Protocol (2.4.8 to 2.4.16, 2.6.2 to 3.4.5, 45 fields)
ieee1609dot2: IEEE1609dot2 (3.0.0 to 3.4.5, 159 fields)
ieee1722: IEEE 1722 Protocol (1.4.0 to 3.4.5, 30 fields)
ieee17221: IEEE 1722.1 Protocol (1.8.0 to 3.4.5, 570 fields)
ieee1905: IEEE 1905.1a (2.6.0 to 3.4.5, 684 fields)
ieee8021ad: IEEE 802.1ad (1.0.0 to 3.4.5, 5 fields)
ieee8021ah: IEEE 802.1ah (1.0.0 to 3.4.5, 11 fields)
ieee8021cb: 802.1CB Redundancy Tag (3.4.0 to 3.4.5, 3 fields)
ieee802a: IEEE802a OUI Extended Ethertype (1.0.0 to 3.4.5, 3 fields)
ifcp: iFCP (1.0.0 to 3.4.5, 30 fields)
igap: Internet Group membership Authentication Protocol (1.0.0 to 3.4.5, 19 fields)
igmp: Internet Group Management Protocol (1.0.0 to 3.4.5, 45 fields)
igrp: Cisco Interior Gateway Routing Protocol (1.0.0 to 3.4.5, 16 fields)
ilp: OMA Internal Location Protocol (1.12.0 to 3.4.5, 412 fields)
image-gif: Compuserve GIF (1.0.0 to 3.4.5, 26 fields)
image-jfif: JPEG File Interchange Format (1.0.0 to 3.4.5, 51 fields)
imap: Internet Message Access Protocol (1.0.0 to 3.4.5, 18 fields)
imf: Internet Message Format (1.0.0 to 3.4.5, 84 fields)
inap: Intelligent Network Application Protocol (1.0.0 to 3.4.5, 766 fields)
infiniband: InfiniBand (1.0.0 to 3.4.5, 558 fields)
infiniband_link: InfiniBand Link (1.4.0 to 3.4.5, 5 fields)
infiniband_sdp: Infiniband Sockets Direct Protocol (1.10.0 to 3.4.5, 34 fields)
initshutdown: Init shutdown service (1.0.0 to 3.4.5, 23 fields)
interlink: Interlink Protocol (1.4.0 to 1.6.16, 1.8.3 to 3.4.5, 10 fields)
ioraw: TwinCAT IO-RAW (1.0.0 to 3.4.5, 3 fields)
ip: Internet Protocol Version 4 (1.0.0 to 3.4.5, 138 fields)
ipaccess: GSM over IP ip.access CCM sub-protocol (1.4.0 to 3.4.5, 4 fields)
ipcomp: IP Payload Compression (1.0.0 to 3.4.5, 3 fields)
ipcp: PPP IP Control Protocol (1.0.0 to 3.4.5, 27 fields)
ipdc: IP Device Control (SS7 over IP) (1.0.0 to 3.4.5, 17 fields)
ipdr: IPDR (2.0.0 to 3.4.5, 66 fields)
iperf2: iPerf2 Packet Data (2.4.0 to 3.4.5, 9 fields)
ipfc: IP Over FC (1.0.0 to 3.4.5, 2 fields)
ipmi: Intelligent Platform Management Interface (1.0.0 to 3.4.5, 1713 fields)
ipmi-session: Intelligent Platform Management Interface (Session Wrapper) (1.2.0 to 1.8.15, 11 fields)
ipmi-trace: IPMI Trace Data Collection (1.12.0 to 1.12.13, 16 fields)
ipmi.trace: IPMI Trace Data Collection (2.0.0 to 3.4.5, 16 fields)
ipmi_session: Intelligent Platform Management Interface (Session Wrapper) (1.10.0 to 3.4.5, 11 fields)
ipnet: Solaris IPNET (1.4.0 to 3.4.5, 8 fields)
ipoib: IP over Infiniband (1.8.0 to 3.4.5, 11 fields)
ipos: IPOS Kernel Packet Protocol (2.2.0 to 3.4.5, 4 fields)
ipp: Internet Printing Protocol (1.0.0 to 3.4.5, 30 fields)
ippusb: Internet Printing Protocol Over USB (3.4.0 to 3.4.5, 11 fields)
ipsictl: IPSICTL (1.2.0 to 3.4.5, 7 fields)
ipv6: Internet Protocol Version 6 (1.0.0 to 3.4.5, 277 fields)
ipv6.dstopts: Destination Options for IPv6 (2.0.0 to 3.4.5, 3 fields)
ipv6.fraghdr: Fragment Header for IPv6 (2.2.0 to 3.4.5, 6 fields)
ipv6.hopopts: IPv6 Hop-by-Hop Option (2.0.0 to 3.4.5, 4 fields)
ipv6.routing: Routing Header for IPv6 (2.0.0 to 3.4.5, 44 fields)
ipv6cp: PPP IPv6 Control Protocol (1.0.0 to 3.4.5, 3 fields)
ipvs: IP Virtual Services Sync Daemon (1.0.0 to 3.4.5, 26 fields)
ipx: Internetwork Packet eXchange (1.0.0 to 3.4.5, 16 fields)
ipxmsg: IPX Message (1.0.0 to 3.4.5, 2 fields)
ipxrip: IPX Routing Information Protocol (1.0.0 to 3.4.5, 6 fields)
ipxsap: Service Advertisement Protocol (1.0.0 to 3.4.5, 16 fields)
ipxwan: IPX WAN (1.0.0 to 3.4.5, 25 fields)
irc: Internet Relay Chat (1.0.0 to 3.4.5, 18 fields)
ircomm: IrCOMM Protocol (1.0.0 to 3.4.5, 6 fields)
iremotewinspool: IRemoteWinspool SubSystem (3.4.0 to 3.4.5, 344 fields)
irlap: IrDA Link Access Protocol (1.0.0 to 3.4.5, 30 fields)
irlmp: IrDA Link Management Protocol (1.0.0 to 3.4.5, 16 fields)
isakmp: Internet Security Association and Key Management Protocol (1.0.0 to 3.4.5, 400 fields)
iscsi: iSCSI (1.0.0 to 3.4.5, 106 fields)
isdn: ISDN (1.0.0 to 3.4.5, 2 fields)
isdn_sup: ISDN supplementary services (1.10.0 to 3.4.5, 166 fields)
iser: iSCSI Extensions for RDMA (2.0.0 to 3.4.5, 11 fields)
isi: Intelligent Service Interface (2.2.0 to 3.4.5, 105 fields)
isis: ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol (1.0.0 to 3.4.5, 56 fields)
isis.csnp: ISO 10589 ISIS Complete Sequence Numbers Protocol Data Unit (1.12.0 to 3.4.5, 24 fields)
isis.hello: ISIS HELLO (1.12.0 to 3.4.5, 89 fields)
isis.lsp: ISO 10589 ISIS Link State Protocol Data Unit (1.12.0 to 3.4.5, 346 fields)
isis.psnp: ISO 10589 ISIS Partial Sequence Numbers Protocol Data Unit (1.12.0 to 3.4.5, 10 fields)
isl: Cisco ISL (1.0.0 to 3.4.5, 23 fields)
ismacryp: ISMACryp Protocol (1.2.0 to 3.4.5, 31 fields)
ismp: InterSwitch Message Protocol (1.0.0 to 3.4.5, 68 fields)
isns: iSNS (1.0.0 to 3.4.5, 105 fields)
iso14443: ISO/IEC 14443 (2.2.0 to 3.4.5, 124 fields)
iso15765: ISO15765 Protocol (2.4.0 to 3.4.5, 18 fields)
iso7816: ISO/IEC 7816 (1.8.0 to 3.4.5, 39 fields)
iso8583: ISO 8583-1 (2.2.0 to 3.4.5, 133 fields)
isobus: ISObus (2.6.0 to 3.4.5, 35 fields)
isobus.vt: ISObus Virtual Terminal (2.6.0 to 3.4.5, 312 fields)
isup: ISDN User Part (1.0.0 to 3.4.5, 374 fields)
isup_thin: ISUP Thin Protocol (1.0.0 to 1.2.18, 15 fields)
isystemactivator: ISystemActivator ISystemActivator Resolver (1.0.0 to 3.4.5, 64 fields)
itdm: Internal TDM (1.2.0 to 3.4.5, 23 fields)
its: Intelligent Transport Systems (3.0.0 to 3.4.5, 1579 fields)
itunes: iTunes podCast rss elements (1.0.0 to 3.4.5, 10 fields)
iua: ISDN Q.921-User Adaptation Layer (1.0.0 to 3.4.5, 31 fields)
iuup: IuUP (1.0.0 to 3.4.5, 1333 fields)
iwarp_ddp_rdmap: iWARP Direct Data Placement and Remote Direct Memory Access Protocol (1.2.0 to 3.4.5, 60 fields)
iwarp_mpa: iWARP Marker Protocol data unit Aligned framing (1.2.0 to 3.4.5, 23 fields)
ixiatrailer: Ixia Trailer (1.10.0 to 3.4.5, 4 fields)
ixveriwave: ixveriwave (1.8.0 to 3.4.5, 348 fields)

J

j1939: SAE J1939 (1.12.0 to 3.4.5, 11 fields)
jabber: Jabber XML Messaging (1.0.0 to 1.6.16, 2 fields)
jdwp: Java Debug Wire Protocol (3.4.0 to 3.4.5, 10 fields)
jmirror: Juniper Packet Mirror (1.4.0 to 3.4.5, 2 fields)
jpeg: RFC 2435 JPEG (1.0.0 to 3.4.5, 18 fields)
json: JavaScript Object Notation (1.6.0 to 3.4.5, 13 fields)
juniper: Juniper (1.0.0 to 3.4.5, 43 fields)
jxta: JXTA P2P (1.0.0 to 3.4.5, 54 fields)

K

k12: K12xx (1.0.0 to 3.4.5, 8 fields)
kadm5: Kerberos Administration (1.0.0 to 3.4.5, 1 field)
kafka: Kafka (1.12.0 to 3.4.5, 176 fields)
kdp: Kontiki Delivery Protocol (1.2.0 to 3.4.5, 31 fields)
kdsp: Kismet Drone/Server Protocol (1.8.0 to 3.4.5, 94 fields)
kerberos: Kerberos (1.0.0 to 3.4.5, 411 fields)
kf: Kingfisher (1.0.0 to 3.4.5, 12 fields)
kif: QNX6 QNET KIF protocol (2.0.0 to 3.4.5, 243 fields)
kink: Kerberized Internet Negotiation of Key (1.0.0 to 3.4.5, 24 fields)
kip: KNX/IP (3.0.0 to 3.4.5, 55 fields)
kismet: Kismet Client/Server Protocol (1.0.0 to 3.4.5, 10 fields)
klm: Kernel Lock Manager (1.0.0 to 3.4.5, 10 fields)
knet: kNet Protocol (1.8.0 to 3.4.5, 21 fields)
knx: KNXnet/IP (2.0.0 to 2.6.20, 138 fields)
kpasswd: MS Kpasswd (1.0.0 to 3.4.5, 9 fields)
krb4: Kerberos v4 (1.0.0 to 3.4.5, 21 fields)
krb5rpc: DCE/RPC Kerberos V (1.0.0 to 3.4.5, 18 fields)
kt: Kyoto Tycoon Protocol (1.12.0 to 3.4.5, 21 fields)

L

l2tp: Layer 2 Tunneling Protocol (1.0.0 to 3.4.5, 202 fields)
lacp: LACP (2.0.0 to 3.4.5, 88 fields)
lanforge: LANforge Traffic Generator (1.2.0 to 3.4.5, 12 fields)
lanman: Microsoft Windows Lanman Remote API Protocol (1.0.0 to 3.4.5, 87 fields)
lapb: Link Access Procedure Balanced (LAPB) (1.0.0 to 3.4.5, 10 fields)
lapbether: Link Access Procedure Balanced Ethernet (LAPBETHER) (1.0.0 to 3.4.5, 1 field)
lapd: Link Access Procedure, Channel D (LAPD) (1.0.0 to 3.4.5, 23 fields)
lapdm: Link Access Procedure, Channel Dm (LAPDm) (1.2.0 to 3.4.5, 29 fields)
laplink: Laplink (1.0.0 to 3.4.5, 5 fields)
lapsat: Link Access Procedure, Satellite channel (LAPSat) (1.8.0 to 3.4.5, 30 fields)
lat: Local Area Transport (2.2.0 to 3.4.5, 133 fields)
lbmc: LBMC Protocol (1.12.0 to 3.4.5, 1205 fields)
lbmpdm: LBMPDM Protocol (1.12.0 to 3.4.5, 68 fields)
lbmpdm_tcp: LBMPDM over TCP Protocol (1.12.0 to 3.4.5, 2 fields)
lbmr: LBM Topic Resolution Protocol (1.12.0 to 3.4.5, 449 fields)
lbmsrs: LBM Stateful Resolution Service Protocol (3.4.0 to 3.4.5, 132 fields)
lbtrm: LBT Reliable Multicast Protocol (1.12.0 to 3.4.5, 75 fields)
lbtru: LBT Reliable Unicast Protocol (1.12.0 to 3.4.5, 103 fields)
lbttcp: LBT TCP Protocol (1.12.0 to 3.4.5, 4 fields)
lcp: PPP Link Control Protocol (1.0.0 to 3.4.5, 78 fields)
lcsap: LCS Application Protocol (1.8.0 to 3.4.5, 179 fields)
lct: H.283 Logical Channel Transport (1.0.0 to 3.4.5, 45 fields)
ldac: LDAC Codec (3.2.0 to 3.4.5, 15 fields)
ldap: Lightweight Directory Access Protocol (1.0.0 to 3.4.5, 265 fields)
ldp: Label Distribution Protocol (1.0.0 to 3.4.5, 267 fields)
ldss: Local Download Sharing Service (1.2.0 to 3.4.5, 23 fields)
lg8979: Landis & Gyr Telegyr 8979 (1.12.0 to 3.4.5, 112 fields)
lge_monitor: LGE Monitor (1.0.0 to 3.4.5, 4 fields)
link16: Link 16 (1.12.0 to 3.4.5, 5 fields)
linx: ENEA LINX (1.0.0 to 3.4.5, 50 fields)
linxtcp: ENEA LINX over TCP (1.8.0 to 3.4.5, 35 fields)
lisp: Locator/ID Separation Protocol (1.6.0 to 3.4.5, 228 fields)
lisp-data: Locator/ID Separation Protocol (Data) (1.6.0 to 3.4.5, 16 fields)
lisp-tcp: Locator/ID Separation Protocol (Reliable Transport) (2.0.0 to 3.4.5, 37 fields)
list: Event Notification for Resource Lists (RFC 4662) (1.0.0 to 3.4.5, 21 fields)
lithionics_bms: Lithionics Battery Management System (3.4.0 to 3.4.5, 34 fields)
llap: LocalTalk Link Access Protocol (1.0.0 to 3.4.5, 3 fields)
llb: DCE/RPC NCS 1.5.1 Local Location Broker (1.0.0 to 3.4.5, 1 field)
llc: Logical-Link Control (1.0.0 to 3.4.5, 32 fields)
llcgprs: Logical Link Control GPRS (1.0.0 to 3.4.5, 49 fields)
lldp: Link Layer Discovery Protocol (1.0.0 to 3.4.5, 405 fields)
llrp: Low Level Reader Protocol (1.8.0 to 3.4.5, 264 fields)
llt: Veritas Low Latency Transport (LLT) (1.0.0 to 3.4.5, 5 fields)
lltd: Link Layer Topology Discovery (2.0.0 to 3.4.5, 103 fields)
lmi: Local Management Interface (1.0.0 to 3.4.5, 11 fields)
lmp: Link Management Protocol (LMP) (1.0.0 to 3.4.5, 218 fields)
lnet: Lustre Network (2.6.0 to 3.4.5, 50 fields)
lnpdqp: Local Number Portability Database Query (3.0.0 to 3.4.5, 17 fields)
log: Log Message (1.0.0 to 3.4.5, 2 fields)
log3gpp: 3GPP log packet (3.2.0 to 3.4.5, 6 fields)
logcat: Android Logcat (1.12.0 to 3.4.5, 14 fields)
logcat_text: Android Logcat Text (2.0.0 to 3.4.5, 8 fields)
logotypecertextn: Logotype Certificate Extensions (1.0.0 to 3.4.5, 58 fields)
lon: Local Operating Network (1.8.0 to 3.4.5, 43 fields)
loop: Configuration Test Protocol (loopback) (1.0.0 to 3.4.5, 5 fields)
loratap: LoRaTap header (2.6.0 to 3.4.5, 13 fields)
lorawan: LoRaWAN Protocol (2.6.0 to 3.4.5, 81 fields)
lpd: Line Printer Daemon Protocol (1.0.0 to 3.4.5, 5 fields)
lpp: LTE Positioning Protocol (LPP) (1.8.0 to 3.4.5, 1757 fields)
lppa: LTE Positioning Protocol A (LPPa) (1.8.0 to 3.4.5, 257 fields)
lppe: LTE Positioning Protocol Extensions (LLPe) (1.10.0 to 3.4.5, 2240 fields)
lr: QNX6 QNET LR protocol (2.0.0 to 3.4.5, 23 fields)
lsa: Microsoft Local Security Architecture (1.0.0 to 1.0.16, 93 fields)
lsarpc: Local Security Authority (1.2.0 to 3.4.5, 418 fields)
lsc: Pegasus Lightweight Stream Control (1.0.0 to 3.4.5, 11 fields)
lsd: Local Service Discovery (2.4.0 to 3.4.5, 6 fields)
lte_rrc: LTE Radio Resource Control (RRC) protocol (1.2.0 to 3.4.5, 7858 fields)
ltp: Licklider Transmission Protocol (1.4.0 to 3.4.5, 45 fields)
lustre: Lustre (2.6.0 to 3.4.5, 675 fields)
lwapp: LWAPP Encapsulated Packet (1.0.0 to 3.4.5, 16 fields)
lwl4: QNX6 QNET LWL4 protocol (2.0.0 to 3.4.5, 19 fields)
lwm: Lightweight Mesh (v1.1.1) (1.12.0 to 3.4.5, 31 fields)
lwm2mtlv: Lightweight M2M TLV (2.2.0 to 3.4.5, 133 fields)
lwres: Light Weight DNS RESolver (BIND9) (1.0.0 to 3.4.5, 37 fields)

M

m2ap: M2 Application Protocol (2.4.0 to 3.4.5, 166 fields)
m2m: WiMax Mac to Mac Packet (1.0.0 to 3.4.5, 23 fields)
m2pa: MTP2 Peer Adaptation Layer (1.0.0 to 3.4.5, 26 fields)
m2tp: MTP 2 Transparent Proxy (1.0.0 to 3.4.5, 17 fields)
m2ua: MTP 2 User Adaptation Layer (1.0.0 to 3.4.5, 37 fields)
m3ap: M3 Application Protocol (1.8.0 to 3.4.5, 132 fields)
m3ua: MTP 3 User Adaptation Layer (1.0.0 to 3.4.5, 61 fields)
maap: IEEE 1722 MAAP Protocol (1.8.0 to 3.4.5, 8 fields)
mac: MAC (1.4.0 to 3.4.5, 30 fields)
mac-lte: MAC-LTE (1.2.0 to 3.4.5, 350 fields)
mac-nr: MAC-NR (2.6.0 to 3.4.5, 266 fields)
macc: MAC Control (1.0.0 to 3.4.5, 51 fields)
macsec: 802.1AE Security tag (1.12.0 to 3.4.5, 16 fields)
mactelnet: MikroTik MAC-Telnet Protocol (1.6.0 to 3.4.5, 17 fields)
magic: Magic Bullet (2.4.0 to 3.4.5, 25 fields)
mailslot: SMB MailSlot Protocol (1.0.0 to 3.4.5, 5 fields)
manolito: Blubster/Piolet MANOLITO Protocol (1.0.0 to 3.4.5, 8 fields)
mapi: Exchange 5.5 EMSMDB (1.0.0 to 3.4.5, 124 fields)
marker: Marker (2.0.0 to 3.4.5, 11 fields)
mate: Meta Analysis Tracing Engine (1.0.0 to 3.4.5, 6 fields)
mausb: Media Agnostic USB (1.12.0 to 3.4.5, 100 fields)
mbim: Mobile Broadband Interface Model (1.12.0 to 3.4.5, 790 fields)
mbrtu: Modbus RTU (1.10.0 to 3.4.5, 4 fields)
mbtcp: Modbus/TCP (1.0.0 to 3.4.5, 65 fields)
mc-nmf: .NET Message Framing Protocol (3.4.0 to 3.4.5, 21 fields)
mcp: Miscabling Protocol (3.4.0 to 3.4.5, 14 fields)
mcpe: Minecraft Pocket Edition (2.0.0 to 3.4.5, 29 fields)
mdp: Meraki Discovery Protocol (3.0.0 to 3.4.5, 10 fields)
mdshdr: MDS Header (1.0.0 to 3.4.5, 9 fields)
mdssvc: Spotlight metadata search service (1.12.0 to 3.4.5, 50 fields)
media: Media Type (1.0.0 to 3.4.5, 1 field)
megaco: MEGACO (1.0.0 to 3.4.5, 76 fields)
memcache: Memcache Protocol (1.2.0 to 3.4.5, 41 fields)
mesh: Mesh Header (1.2.0 to 3.4.5, 2 fields)
message_analyzer.wfp_capture.auth.v4: Message Analyzer WFP Capture AUTH v4 (2.6.0 to 3.4.5, 6 fields)
message_analyzer.wfp_capture.v4: Message Analyzer WFP Capture v4 (2.6.0 to 3.4.5, 2 fields)
messenger: Microsoft Messenger Service (1.0.0 to 3.4.5, 5 fields)
meta: Metadata (1.4.0 to 3.4.5, 34 fields)
metamako: Metamako ethernet trailer (2.2.0 to 3.4.5, 14 fields)
mgcp: Media Gateway Control Protocol (1.0.0 to 3.4.5, 113 fields)
mgmt: DCE/RPC Remote Management (1.0.0 to 3.4.5, 5 fields)
mibs: MIBs (1.0.3 to 1.0.5, 1.0.9 to 1.0.16, 1.2.1 to 1.2.18, 759 fields)
mifare: NXP MiFare (1.8.0 to 3.4.5, 7 fields)
mih: Media-Independent Handover (1.10.0 to 3.4.5, 213 fields)
mikey: Multimedia Internet KEYing (1.0.0 to 3.4.5, 108 fields)
mime_multipart: MIME Multipart Media Encapsulation (1.0.0 to 3.4.5, 20 fields)
mint: Media Independent Network Transport (1.12.0 to 3.4.5, 54 fields)
miop: Unreliable Multicast Inter-ORB Protocol (1.2.0 to 3.4.5, 10 fields)
mip: Mobile IP (1.0.0 to 3.4.5, 92 fields)
mipv6: Mobile IPv6 (1.0.0 to 3.4.5, 240 fields)
misc: MISC (pidl) (1.12.0 to 3.4.5, 18 fields)
mka: MACsec Key Agreement (2.0.0 to 3.4.5, 56 fields)
mle: Mesh Link Establishment (2.4.0 to 3.4.5, 77 fields)
mms: MMS (1.0.0 to 3.4.5, 712 fields)
mmse: MMS Message Encapsulation (1.0.0 to 3.4.5, 47 fields)
mndp: Mikrotik Neighbor Discovery Protocol (1.6.0 to 3.4.5, 15 fields)
modbus: Modbus (1.8.0 to 3.4.5, 74 fields)
mojito: Mojito DHT (1.10.0 to 3.4.5, 40 fields)
moldudp: MoldUDP (1.8.0 to 3.4.5, 9 fields)
moldudp64: MoldUDP64 (1.8.0 to 3.4.5, 11 fields)
mongo: Mongo Wire Protocol (1.6.0 to 3.4.5, 95 fields)
mount: Mount Service (1.0.0 to 3.4.5, 54 fields)
mp: PPP Multilink Protocol (1.0.0 to 3.4.5, 20 fields)
mp2t: ISO/IEC 13818-1 (1.0.0 to 3.4.5, 73 fields)
mp4: MP4 / ISOBMFF file format (1.12.0 to 3.4.5, 54 fields)
mp4v-es: MP4V-ES (1.2.0 to 3.4.5, 19 fields)
mpeg-audio: Moving Picture Experts Group Audio (1.10.0 to 3.4.5, 28 fields)
mpeg-dsmcc: MPEG DSM-CC (1.8.0 to 1.8.15, 55 fields)
mpeg-pes: Packetized Elementary Stream (1.0.0 to 3.4.5, 83 fields)
mpeg.audio: Moving Picture Experts Group Audio (1.0.0 to 1.8.15, 26 fields)
mpeg1: RFC 2250 MPEG1 (1.0.0 to 3.4.5, 14 fields)
mpeg_ca: MPEG2 Conditional Access Table (1.8.0 to 3.4.5, 5 fields)
mpeg_descr: MPEG2 Descriptors (1.8.0 to 3.4.5, 305 fields)
mpeg_dsmcc: MPEG DSM-CC (1.10.0 to 3.4.5, 152 fields)
mpeg_pat: MPEG2 Program Association Table (1.8.0 to 3.4.5, 9 fields)
mpeg_pmt: MPEG2 Program Map Table (1.8.0 to 3.4.5, 15 fields)
mpeg_sect: MPEG2 Section (1.8.0 to 3.4.5, 4 fields)
mpls: MultiProtocol Label Switching Header (1.0.0 to 3.4.5, 24 fields)
mpls-echo: Multiprotocol Label Switching Echo (1.0.0 to 3.4.5, 218 fields)
mpls_mac: MPLS-MAC (2.6.0 to 3.4.5, 12 fields)
mpls_psc: PSC (1.10.0 to 3.4.5, 7 fields)
mpls_y1711: MPLS ITU-T Y.1711 OAM (1.10.0 to 3.4.5, 17 fields)
mplspmdlm: MPLS Direct Loss Measurement (DLM) (1.8.0 to 3.4.5, 88 fields)
mplspsc: PSC (1.8.0 to 1.8.15, 7 fields)
mplspwatm11_or_aal5pdu: MPLS PW ATM One-to-One or AAL5 PDU encapsulation (1.4.0 to 3.4.5, 4 fields)
mplspwatmaal5sdu: MPLS PW ATM AAL5 CPCS-SDU mode encapsulation (1.4.0 to 3.4.5, 1 field)
mplspwatmcell: ATM Cell (1.4.0 to 3.4.5, 13 fields)
mplspwatmcellheader: MPLS PW ATM Cell Header (1.4.0 to 3.4.5, 7 fields)
mplspwatmcontrolword: MPLS PW ATM Control Word (1.4.0 to 3.4.5, 9 fields)
mplspwatmn1cw: MPLS PW ATM N-to-One encapsulation, with CW (1.4.0 to 3.4.5, 2 fields)
mplspwatmn1nocw: MPLS PW ATM N-to-One encapsulation, no CW (1.4.0 to 3.4.5, 3 fields)
mplstp_fm: MPLS-TP Fault-Management (1.10.0 to 3.4.5, 14 fields)
mplstp_lock: MPLS-TP Lock-Instruct (1.10.0 to 3.4.5, 3 fields)
mplsy1711: MPLS ITU-T Y.1711 OAM (1.8.0 to 1.8.15, 6 fields)
mptcp: Multipath Transmission Control Protocol (2.0.0 to 3.4.5, 17 fields)
mq: WebSphere MQ (1.0.0 to 3.4.5, 615 fields)
mqpcf: WebSphere MQ Programmable Command Formats (1.0.0 to 3.4.5, 32 fields)
mqtt: MQ Telemetry Transport Protocol (1.12.0 to 3.4.5, 78 fields)
mqttsn: MQ Telemetry Transport Protocol for Sensor Networks (2.0.0 to 3.4.5, 27 fields)
mrcpv2: Media Resource Control Protocol Version 2 (MRCPv2) (1.10.0 to 3.4.5, 111 fields)
mrdisc: Multicast Router DISCovery protocol (1.0.0 to 3.4.5, 13 fields)
mrp-mmrp: Multiple Mac Registration Protocol (1.6.0 to 3.4.5, 13 fields)
mrp-msrp: Multiple Stream Reservation Protocol (1.4.0 to 3.4.5, 30 fields)
mrp-mvrp: Multiple VLAN Registration Protocol (1.8.0 to 3.4.5, 13 fields)
ms-nns: .NET NegotiateStream Protocol (3.4.0 to 3.4.5, 7 fields)
mscml: Media Server Control Markup Language - draft 07 (1.0.0 to 3.4.5, 719 fields)
msdp: Multicast Source Discovery Protocol (1.0.0 to 3.4.5, 26 fields)
msgpack: Message Pack (3.0.0 to 3.4.5, 9 fields)
msmms: Microsoft Media Server (1.0.0 to 3.4.5, 57 fields)
msnip: MSNIP: Multicast Source Notification of Interest Protocol (1.0.0 to 3.4.5, 13 fields)
msnlb: MS Network Load Balancing (1.0.0 to 3.4.5, 49 fields)
msproxy: MS Proxy Protocol (1.0.0 to 3.4.5, 34 fields)
msrp: Message Session Relay Protocol (1.0.0 to 3.4.5, 29 fields)
mstp: BACnet MS/TP (1.2.0 to 3.4.5, 14 fields)
mswsp: Windows Search Protocol (2.0.0 to 3.4.5, 225 fields)
mtp2: Message Transfer Part Level 2 (1.0.0 to 3.4.5, 25 fields)
mtp3: Message Transfer Part Level 3 (1.0.0 to 3.4.5, 17 fields)
mtp3mg: Message Transfer Part Level 3 Management (1.0.0 to 3.4.5, 28 fields)
mudurl: MUDURL (2.4.0 to 3.4.5, 1 field)
mux27010: MUX27010 Protocol (1.6.0 to 3.4.5, 84 fields)
mysql: MySQL Protocol (1.0.0 to 3.4.5, 197 fields)

N

nan: NAN protocol (3.2.0 to 3.4.5, 228 fields)
nano: Nano Cryptocurrency Protocol (2.6.0 to 3.4.5, 34 fields)
nas-5gs: Non-Access-Stratum 5GS (NAS)PDU (2.6.0 to 3.4.5, 358 fields)
nas-eps: Non-Access-Stratum (NAS)PDU (1.2.0 to 3.4.5, 365 fields)
nasdaq_itch: Nasdaq TotalView-ITCH (1.2.0 to 3.4.5, 25 fields)
nasdaq_soup: Nasdaq-SoupTCP version 2.0 (1.2.0 to 3.4.5, 9 fields)
nat-pmp: NAT Port Mapping Protocol (1.2.0 to 3.4.5, 10 fields)
nb_rtpmux: 3GPP Nb Interface RTP Multiplex (1.4.0 to 3.4.5, 9 fields)
nbap: UTRAN Iub interface NBAP signalling (1.0.0 to 3.4.5, 4348 fields)
nbd: Network Block Device (1.0.0 to 3.4.5, 10 fields)
nbdgm: NetBIOS Datagram Service (1.0.0 to 3.4.5, 13 fields)
nbifom: Network-Based IP Flow Mobility (2.2.0 to 3.4.5, 48 fields)
nbipx: NetBIOS over IPX (1.0.0 to 3.4.5, 25 fields)
nbns: NetBIOS Name Service (1.0.0 to 3.4.5, 52 fields)
nbp: Name Binding Protocol (1.0.0 to 3.4.5, 11 fields)
nbss: NetBIOS Session Service (1.0.0 to 3.4.5, 10 fields)
ncp: NetWare Core Protocol (1.0.0 to 3.4.5, 2444 fields)
ncs: Novell Cluster Services (1.0.0 to 3.4.5, 2 fields)
ncsi: NCSI (3.2.0 to 3.4.5, 44 fields)
ndmp: Network Data Management Protocol (1.0.0 to 3.4.5, 200 fields)
ndp: Nortel Discovery Protocol (1.6.0 to 3.4.5, 6 fields)
ndps: Novell Distributed Print System (1.0.0 to 3.4.5, 377 fields)
negoex: SPNEGO Extended Negotiation Security Mechanism (1.10.0 to 3.4.5, 28 fields)
net_dm: Linux net_dm (network drop monitor) protocol (3.2.0 to 3.4.5, 22 fields)
netanalyzer: netANALYZER (1.8.0 to 3.4.5, 27 fields)
netbios: NetBIOS (1.0.0 to 3.4.5, 53 fields)
netdfs: Settings for Microsoft Distributed File System (1.0.0 to 3.4.5, 169 fields)
netdump: Netdump Protocol (1.2.0 to 3.4.5, 9 fields)
netlink: Linux netlink protocol (1.12.0 to 3.4.5, 28 fields)
netlink-netfilter: Linux netlink netfilter protocol (1.12.0 to 3.4.5, 93 fields)
netlink-route: Linux rtnetlink (route netlink) protocol (1.12.0 to 3.4.5, 82 fields)
netlink-sock_diag: Linux netlink sock diag protocol (1.12.0 to 3.4.5, 52 fields)
netmon_802_11: NetMon 802.11 capture header (1.4.0 to 3.4.5, 15 fields)
netmon_event: Network Monitor Event (2.6.0 to 3.4.5, 43 fields)
netmon_filter: Network Monitor Filter (2.6.0 to 3.4.5, 6 fields)
netmon_header: Network Monitor Header (2.6.0 to 3.4.5, 2 fields)
netmon_network_info: Network Monitor Network Info (2.6.0 to 3.4.5, 23 fields)
netmon_process: Network Monitor Process (2.6.0 to 3.4.5, 30 fields)
netmon_system_config: Network Monitor System Config (2.6.0 to 3.4.5, 100 fields)
netmon_system_trace: Network Monitor System Trace (2.6.0 to 3.4.5, 32 fields)
netrix: Netrix Communication Protocol (2.4.0 to 3.4.5, 36 fields)
netrom: Amateur Radio NET/ROM (1.10.0 to 3.4.5, 19 fields)
netsync: Monotone Netsync (1.0.0 to 3.4.5, 39 fields)
nettl: HP-UX Network Tracing and Logging (1.0.0 to 3.4.5, 5 fields)
newmail: Microsoft Exchange New Mail Notification (1.0.0 to 3.4.5, 1 field)
nfapi: Nfapi (2.6.0 to 3.4.5, 574 fields)
nflog: Linux Netfilter NFLOG (1.8.0 to 3.4.5, 18 fields)
nfs: Network File System (1.0.0 to 3.4.5, 674 fields)
nfsacl: NFSACL (1.0.0 to 3.4.5, 19 fields)
nfsauth: NFSAUTH (1.0.0 to 3.4.5, 1 field)
ngap: NG Application Protocol (3.0.0 to 3.4.5, 1073 fields)
nge: Netgear Ensemble Protocol (2.4.0 to 3.4.5, 14 fields)
nhrp: NBMA Next Hop Resolution Protocol (1.0.0 to 3.4.5, 83 fields)
nisplus: NIS+ (1.0.0 to 3.4.5, 118 fields)
nispluscb: NIS+ Callback (1.0.0 to 3.4.5, 3 fields)
nist_csor: NIST_CSOR (3.0.0 to 3.4.5, 4 fields)
njack: 3com Network Jack (1.0.0 to 3.4.5, 23 fields)
nl80211: Linux 802.11 Netlink (2.4.0 to 3.4.5, 114 fields)
nlm: Network Lock Manager Protocol (1.0.0 to 3.4.5, 29 fields)
nlsp: NetWare Link Services Protocol (1.0.0 to 3.4.5, 80 fields)
nm: Network Management (2.4.0 to 2.6.20, 7 fields)
nmas: Novell Modular Authentication Service (1.0.0 to 3.4.5, 33 fields)
nntp: Network News Transfer Protocol (1.0.0 to 3.4.5, 2 fields)
noe: NOE Protocol (1.8.0 to 3.4.5, 29 fields)
nordic_ble: Nordic BLE Sniffer (2.4.0 to 3.4.5, 33 fields)
norm: Negative-acknowledgment Oriented Reliable Multicast (1.0.0 to 3.4.5, 65 fields)
novell_pkis: Novell PKIS ASN.1 type (1.12.0 to 3.4.5, 45 fields)
npmp: NetPerfMeter Protocol (1.4.0 to 3.4.5, 56 fields)
nr: QNX6 QNET Network Resolver protocol (2.0.0 to 3.4.5, 8 fields)
nr-rrc: NR Radio Resource Control (RRC) protocol (2.6.0 to 3.4.5, 5064 fields)
nrppa: NR Positioning Protocol A (NRPPa) (3.2.0 to 3.4.5, 159 fields)
nrup: NRUP (3.4.0 to 3.4.5, 47 fields)
ns: NetScaler Trace (1.4.0 to 3.4.5, 108 fields)
ns_cert_exts: NetScape Certificate Extensions (1.0.0 to 3.4.5, 27 fields)
nsh: Network Service Header (2.2.0 to 3.4.5, 18 fields)
nsip: Network Service Over IP (1.0.0 to 1.2.18, 21 fields)
nspi: Exchange 5.5 Name Service Provider (1.0.0 to 3.4.5, 110 fields)
nsrp: Juniper Netscreen Redundant Protocol (1.0.0 to 3.4.5, 26 fields)
nstrace.ha: NetScaler HA Protocol (2.4.0 to 3.4.5, 18 fields)
nstrace.mep: NetScaler Metric Exchange Protocol (2.4.0 to 3.4.5, 51 fields)
nstrace.rpc: NetScaler RPC Protocol (2.4.0 to 3.4.5, 4 fields)
ntlmssp: NTLM Secure Service Provider (1.0.0 to 3.4.5, 162 fields)
ntp: Network Time Protocol (1.0.0 to 3.4.5, 346 fields)
ntscf: Non-Time-Synchronous Control Format (3.2.0 to 3.4.5, 6 fields)
null: Null/Loopback (1.0.0 to 3.4.5, 2 fields)
nvme: NVM Express (2.4.0 to 3.4.5, 83 fields)
nvme-rdma: NVM Express Fabrics RDMA (2.4.0 to 3.4.5, 60 fields)
nvme-tcp: NVM Express Fabrics TCP (3.2.0 to 3.4.5, 94 fields)
nw_mtp: NexusWare C7 MTP (1.4.0 to 3.4.5, 5 fields)
nw_serial: NetWare Serialization Protocol (1.0.0 to 3.4.5, 1 field)
nwp: Neighborhood Watch Protocol (2.0.0 to 3.4.5, 13 fields)
nxp_802154_sniffer: NXP 802.15.4 Sniffer Protocol (2.6.0 to 3.4.5, 5 fields)

O

oampdu: OAMPDU (2.0.0 to 3.4.5, 102 fields)
obd-ii: OBD-II PID (2.4.0 to 3.4.5, 69 fields)
obex: OBEX Protocol (2.2.0 to 3.4.5, 230 fields)
ocfs2: OCFS2 Networking (2.0.0 to 3.4.5, 82 fields)
ocsp: Online Certificate Status Protocol (1.0.0 to 3.4.5, 75 fields)
oer: Octet Encoding Rules (ASN.1) (3.0.0 to 3.4.5, 7 fields)
oicq: OICQ - IM software, popular in China (1.0.0 to 3.4.5, 6 fields)
oipf.ciplus: Open IPTV Forum CSPG-CI+ (1.8.0 to 3.4.5, 7 fields)
olsr: Optimized Link State Routing Protocol (1.0.0 to 3.4.5, 42 fields)
omapi: ISC Object Management API (1.0.0 to 3.4.5, 21 fields)
omron: OMRON FINS Protocol (1.4.0 to 3.4.5, 315 fields)
opa: Intel Omni-Path (2.2.0 to 3.4.5, 103 fields)
opa.fe: Intel Omni-Path FE Header - Omni-Path Fabric Executive Header (2.2.0 to 3.4.5, 5 fields)
opa.mad: Intel Omni-Path MAD (2.2.0 to 3.4.5, 1186 fields)
opa.snc: Intel Omni-Path SnC - Omni-Path Snoop and Capture MetaData Header (2.2.0 to 3.4.5, 37 fields)
opcua: OpcUa Binary Protocol (1.0.0 to 3.4.5, 633 fields)
openflow: OpenFlow (1.12.0 to 3.4.5, 2 fields)
openflow_v1: OpenFlow 1.0 (1.12.0 to 3.4.5, 99 fields)
openflow_v4: OpenFlow 1.3 (1.12.0 to 3.4.5, 569 fields)
openflow_v5: OpenFlow 1.4 (1.12.0 to 3.4.5, 715 fields)
openflow_v6: OpenFlow 1.5 (2.4.0 to 3.4.5, 796 fields)
opensafety: openSAFETY (1.6.0 to 3.4.5, 111 fields)
opensafety_udp: openSAFETY over UDP (2.6.0 to 3.4.5, 6 fields)
openthread: OpenThread (2.4.0 to 3.4.5, 1 field)
openvpn: OpenVPN Protocol (1.10.0 to 3.4.5, 25 fields)
openwire: OpenWire (1.8.0 to 3.4.5, 186 fields)
opsi: Open Policy Service Interface (1.0.0 to 3.4.5, 45 fields)
optommp: OptoMMP (2.0.0 to 3.4.5, 11 fields)
osc: Open Sound Control Encoding (1.12.0 to 3.4.5, 40 fields)
oscore: Object Security for Constrained RESTful Environments (2.6.0 to 3.4.5, 60 fields)
osi: OSI (1.0.0 to 3.4.5, 28 fields)
osinlcp: PPP OSI Network Layer Control Protocol (1.8.0 to 3.4.5, 3 fields)
osmo_trxc: OsmoTRX Control / Clock Protocol (3.2.0 to 3.4.5, 8 fields)
osmo_trxd: OsmoTRX Data Protocol (3.2.0 to 3.4.5, 20 fields)
osmux: GSM multiplexing for AMR (2.4.0 to 3.4.5, 13 fields)
ospf: Open Shortest Path First (1.0.0 to 3.4.5, 305 fields)
ossp: OSSP (2.0.0 to 3.4.5, 23 fields)
ouch: OUCH (1.10.0 to 3.4.5, 37 fields)
oxid: DCOM OXID Resolver (1.0.0 to 3.4.5, 30 fields)

P

p1: X.411 Message Transfer Service (1.6.0 to 3.4.5, 843 fields)
p22: X.420 Information Object (1.6.0 to 3.4.5, 466 fields)
p7: X.413 Message Store Service (1.0.0 to 3.4.5, 473 fields)
p772: STANAG 4406 Message (1.6.0 to 3.4.5, 99 fields)
p_mul: P_Mul (ACP142) (1.0.0 to 3.4.5, 77 fields)
packetbb: PacketBB Protocol (1.4.0 to 3.4.5, 79 fields)
packetcable_avps: PacketCable AVPs (1.10.0 to 3.4.5, 77 fields)
packetlogger: PacketLogger (1.2.0 to 3.4.5, 10 fields)
pagp: Port Aggregation Protocol (1.0.0 to 3.4.5, 28 fields)
paketcable_avps: PacketCable AVPs (1.0.0 to 1.8.15, 66 fields)
paltalk: Paltalk Messenger Protocol (1.2.0 to 3.4.5, 4 fields)
pana: Protocol for carrying Authentication for Network Access (1.0.0 to 3.4.5, 30 fields)
pap: PPP Password Authentication Protocol (1.0.0 to 3.4.5, 11 fields)
papi: Aruba PAPI (1.6.0 to 3.4.5, 54 fields)
pathport: Pathport Protocol (1.12.0 to 3.4.5, 25 fields)
pbadv: Bluetooth Mesh PB-ADV (3.2.0 to 3.4.5, 25 fields)
pcap: UTRAN Iupc interface Positioning Calculation Application Part (PCAP) (1.0.0 to 3.4.5, 1397 fields)
pcap_pktdata: pcap/pcapng packet data (2.2.0 to 3.4.5, 5 fields)
pcep: Path Computation Element communication Protocol (1.0.0 to 3.4.5, 387 fields)
pcli: Packet Cable Lawful Intercept (1.0.0 to 3.4.5, 4 fields)
pcnfsd: PC NFS (1.0.0 to 3.4.5, 18 fields)
pcomascii: PCOM ASCII (3.0.0 to 3.4.5, 10 fields)
pcombinary: PCOM BINARY (3.0.0 to 3.4.5, 18 fields)
pcomtcp: PCOM/TCP (3.0.0 to 3.4.5, 5 fields)
pcp: Performance Co-Pilot (1.8.0 to 3.4.5, 131 fields)
pdc: PDC Protocol (1.12.0 to 3.4.5, 21 fields)
pdcp-lte: PDCP-LTE (1.2.0 to 3.4.5, 143 fields)
pdcp-nr: PDCP-NR (3.0.0 to 3.4.5, 41 fields)
peekremote: AiroPeek/OmniPeek encapsulated IEEE 802.11 (1.8.0 to 3.4.5, 69 fields)
per: Packed Encoding Rules (ASN.1 X.691) (1.0.0 to 3.4.5, 44 fields)
pfcp: Packet Forwarding Control Protocol (2.6.0 to 3.4.5, 665 fields)
pflog: OpenBSD Packet Filter log file (1.0.0 to 3.4.5, 21 fields)
pflog-old: OpenBSD Packet Filter log file, pre 3.4 (1.0.0 to 3.4.5, 6 fields)
pgm: Pragmatic General Multicast (1.0.0 to 3.4.5, 93 fields)
pgsql: PostgreSQL (1.0.0 to 3.4.5, 56 fields)
pim: Protocol Independent Multicast (1.0.0 to 3.4.5, 105 fields)
pingpongprotocol: Ping Pong Protocol (1.0.0 to 3.4.5, 8 fields)
pipe: SMB Pipe Protocol (1.0.0 to 1.10.14, 23 fields)
pkcs-1: PKCS#1 (1.0.0 to 3.4.5, 48 fields)
pkcs10: PKCS10 Certification Request (3.0.0 to 3.4.5, 12 fields)
pkcs12: PKCS#12: Personal Information Exchange (1.0.0 to 3.4.5, 90 fields)
pkinit: PKINIT (1.0.0 to 3.4.5, 48 fields)
pkix-cert: PKIX CERT File Format (1.0.0 to 3.4.5, 2 fields)
pkix1explicit: PKIX1Explicit (1.0.0 to 3.4.5, 60 fields)
pkix1implicit: PKIX1Implitit (1.0.0 to 3.4.5, 22 fields)
pkixac: PKIX Attribute Certificate (1.4.0 to 3.4.5, 67 fields)
pkixproxy: PKIXProxy (RFC3820) (1.0.0 to 3.4.5, 7 fields)
pkixqualified: PKIX Qualified (1.0.0 to 3.4.5, 28 fields)
pkixtsp: PKIX Time Stamp Protocol (1.0.0 to 3.4.5, 62 fields)
pkt_ccc: PacketCable Call Content Connection (1.0.0 to 3.4.5, 2 fields)
pktap: PKTAP packet header (1.12.0 to 3.4.5, 16 fields)
pktc: PacketCable (1.0.0 to 3.4.5, 35 fields)
pktc.mtafqdn: PacketCable MTA FQDN (2.0.0 to 3.4.5, 11 fields)
pktgen: Linux Kernel Packet Generator (1.0.0 to 3.4.5, 5 fields)
pmproxy: Performance Co-Pilot Proxy (2.0.0 to 3.4.5, 4 fields)
pn532: NXP PN532 (1.8.0 to 3.4.5, 186 fields)
pn532_hci: NXP PN532 HCI (1.12.0 to 3.4.5, 14 fields)
pn_dcp: PROFINET DCP (1.0.0 to 3.4.5, 51 fields)
pn_io: PROFINET IO (1.0.0 to 3.4.5, 638 fields)
pn_mrp: PROFINET MRP (1.0.0 to 3.4.5, 24 fields)
pn_mrrt: PROFINET MRRT (1.0.0 to 3.4.5, 6 fields)
pn_ptcp: PROFINET PTCP (1.0.0 to 3.4.5, 35 fields)
pn_rt: PROFINET Real-Time Protocol (1.0.0 to 3.4.5, 48 fields)
png: Portable Network Graphics (1.0.0 to 3.4.5, 42 fields)
pnp: Microsoft Plug and Play service (1.0.0 to 3.4.5, 1 field)
pnrp: Peer Name Resolution Protocol (1.4.0 to 3.4.5, 114 fields)
poc-settings: poc-settings XML doc (RFC 4354) (1.0.0 to 3.4.5, 32 fields)
pop: Post Office Protocol (1.0.0 to 3.4.5, 19 fields)
portcontrol: Port Control Protocol (1.10.0 to 3.4.5, 55 fields)
portmap: Portmap (1.0.0 to 3.4.5, 19 fields)
ppcap: Proprietary PCAP (1.8.0 to 3.4.5, 25 fields)
ppi: PPI Packet Header (1.0.0 to 3.4.5, 123 fields)
ppi_antenna: PPI antenna decoder (1.6.0 to 3.4.5, 37 fields)
ppi_gps: PPI Geotagging GPS tag decoder (1.6.0 to 3.4.5, 43 fields)
ppi_sensor: PPI sensor decoder (1.8.0 to 3.4.5, 28 fields)
ppi_vector: PPI vector decoder (1.6.0 to 3.4.5, 74 fields)
ppp: Point-to-Point Protocol (1.0.0 to 3.4.5, 20 fields)
ppp_hdlc: PPP In HDLC-Like Framing (1.0.0 to 3.4.5, 2 fields)
pppmux: PPP Multiplexing (1.0.0 to 3.4.5, 1 field)
pppmuxcp: PPPMux Control Protocol (1.0.0 to 3.4.5, 7 fields)
pppoe: PPP-over-Ethernet (1.2.0 to 3.4.5, 7 fields)
pppoed: PPP-over-Ethernet Discovery (1.0.0 to 3.4.5, 60 fields)
pppoes: PPP-over-Ethernet Session (1.0.0 to 3.4.5, 5 fields)
pptp: Point-to-Point Tunnelling Protocol (1.0.0 to 3.4.5, 50 fields)
prap: Printer Access Protocol (1.10.0 to 3.4.5, 10 fields)
pres: ISO 8823 OSI Presentation Protocol (1.0.0 to 3.4.5, 114 fields)
presence: presence XML doc (RFC 3863) (1.0.0 to 3.4.5, 19 fields)
prism: Prism capture header (1.0.0 to 3.4.5, 29 fields)
protobuf: Protocol Buffers (2.6.0 to 3.4.5, 23 fields)
provideclassinfo: DCOM IProvideClassInfo (3.2.0 to 3.4.5, 2 fields)
provisioning: Bluetooth Mesh Provisioning PDU (3.2.0 to 3.4.5, 54 fields)
proxy: PROXY Protocol (3.0.0 to 3.4.5, 41 fields)
prp: Parallel Redundancy Protocol (IEC62439 Part 3) (1.0.0 to 3.4.5, 14 fields)
ptp: Precision Time Protocol (IEEE1588) (1.0.0 to 3.4.5, 451 fields)
ptpip: Picture Transfer Protocol Over IP (1.12.0 to 3.4.5, 13 fields)
pulse: PULSE protocol for Linux Virtual Server redundancy (1.10.0 to 3.4.5, 1 field)
pvfs: Parallel Virtual File System (1.0.0 to 3.4.5, 124 fields)
pw.padding: Pseudowire Padding (2.0.0 to 3.4.5, 1 field)
pw_atm_n2o_cw: ATM PW, N-to-one Cell Mode Control Word (1.2.0 to 1.2.18, 3 fields)
pw_hdlc_nocw_fr: HDLC PW, FR port mode (no CW) (1.2.0 to 3.4.5, 8 fields)
pw_oam: Pseudo-Wire OAM (1.10.0 to 3.4.5, 8 fields)
pwcesopsn: CESoPSN basic NxDS0 mode (no RTP support) (1.2.0 to 3.4.5, 18 fields)
pwethcw: PW Ethernet Control Word (1.2.0 to 3.4.5, 3 fields)
pwfr: PW Frame Relay DLCI Control Word (1.2.0 to 3.4.5, 11 fields)
pwpadding: Pseudowire Padding (1.4.0 to 1.12.13, 1 field)
pwsatopcw: SAToP (no RTP support) (1.2.0 to 3.4.5, 18 fields)

Q

q2931: Q.2931 (1.0.0 to 3.4.5, 112 fields)
q708: ITU-T Q.708 ISPC Analysis (1.4.0 to 3.4.5, 3 fields)
q931: Q.931 (1.0.0 to 3.4.5, 156 fields)
q932: Q.932 (1.0.0 to 3.4.5, 55 fields)
q932.ros: Q.932 Operations Service Element (1.0.0 to 3.4.5, 26 fields)
q933: Q.933 (1.0.0 to 3.4.5, 101 fields)
qllc: Qualified Logical Link Control (1.0.0 to 3.4.5, 2 fields)
qos: QNX6 QNET QOS protocol (2.0.0 to 3.4.5, 8 fields)
qsig: QSIG (1.0.0 to 3.4.5, 1042 fields)
quake: Quake Network Protocol (1.0.0 to 3.4.5, 32 fields)
quake2: Quake II Network Protocol (1.0.0 to 3.4.5, 24 fields)
quake3: Quake III Arena Network Protocol (1.0.0 to 3.4.5, 13 fields)
quakeworld: QuakeWorld Network Protocol (1.0.0 to 3.4.5, 23 fields)
quic: QUIC IETF (1.12.0 to 3.4.5, 274 fields)

R

r-stp: Retix Spanning Tree Protocol (1.0.0 to 3.4.5, 10 fields)
r3: Assa Abloy R3 (1.4.0 to 3.4.5, 648 fields)
radio: 802.11 radio information (1.0.0 to 1.12.13, 3 fields)
radiotap: IEEE 802.11 Radiotap Capture header (1.0.0 to 3.4.5, 379 fields)
radius: RADIUS Protocol (1.0.0 to 3.4.5, 13671 fields)
raknet: RakNet game networking protocol (2.0.0 to 3.4.5, 80 fields)
ranap: Radio Access Network Application Part (1.0.0 to 3.4.5, 988 fields)
raw_sip: Session Initiation Protocol (SIP as raw text) (1.0.0 to 3.4.5, 1 field)
rbm: Ruby Marshal Object (3.0.0 to 3.4.5, 11 fields)
rdaclif: DCE/RPC Directory Acl Interface (1.0.0 to 3.4.5, 1 field)
rdc: H.282 Remote Device Control (1.0.0 to 3.4.5, 646 fields)
rdm: Remote Device Management (1.0.0 to 3.4.5, 382 fields)
rdmnet: RDMnet (3.4.0 to 3.4.5, 93 fields)
rdp: Remote Desktop Protocol (1.8.0 to 3.4.5, 247 fields)
rdt: Real Data Transport (1.0.0 to 3.4.5, 69 fields)
redback: Redback (1.0.0 to 3.4.5, 10 fields)
redbackli: Redback Lawful Intercept (1.0.0 to 3.4.5, 10 fields)
reginfo: Reginfo XML doc (RFC 3680) (1.0.0 to 3.4.5, 42 fields)
reload: REsource LOcation And Discovery (1.6.0 to 3.4.5, 311 fields)
reload-framing: REsource LOcation And Discovery Framing (1.6.0 to 3.4.5, 13 fields)
remact: DCOM IRemoteActivation (1.0.0 to 3.4.5, 22 fields)
remunk: IRemUnknown (1.0.0 to 3.4.5, 18 fields)
rep_proc: DCE DFS Replication Server (1.0.0 to 3.4.5, 1 field)
rfc2190: H.263 RTP Payload header (RFC2190) (1.2.0 to 3.4.5, 21 fields)
rfc7468: RFC 7468 file format (3.0.0 to 3.4.5, 3 fields)
rfr: Exchange 2003 Directory Request For Response (1.2.0 to 3.4.5, 10 fields)
rftap: RFtap Protocol (2.4.0 to 3.4.5, 36 fields)
rgmp: Router-port Group Management Protocol (1.0.0 to 3.4.5, 7 fields)
riemann: Riemann (2.0.0 to 3.4.5, 31 fields)
rip: Routing Information Protocol (1.0.0 to 3.4.5, 18 fields)
ripng: RIPng (1.0.0 to 3.4.5, 8 fields)
rlc: Radio Link Control (1.4.0 to 3.4.5, 63 fields)
rlc-lte: RLC-LTE (1.2.0 to 3.4.5, 94 fields)
rlc-nr: RLC-NR (2.6.0 to 3.4.5, 65 fields)
rlm: Redundant Link Management Protocol (1.0.0 to 3.4.5, 5 fields)
rlogin: Rlogin Protocol (1.0.0 to 3.4.5, 17 fields)
rmcp: Remote Management Control Protocol (1.0.0 to 3.4.5, 6 fields)
rmi: Java RMI (1.0.0 to 3.4.5, 12 fields)
rmp: HP Remote Maintenance Protocol (1.0.0 to 3.4.5, 10 fields)
rmt-fec: Forward Error Correction (FEC) (1.12.0 to 3.4.5, 13 fields)
rmt-lct: Layered Coding Transport (1.12.0 to 3.4.5, 33 fields)
rnsap: UTRAN Iur interface Radio Network Subsystem Application Part (1.0.0 to 3.4.5, 3863 fields)
rohc: RObust Header Compression (ROHC) (1.6.0 to 3.4.5, 152 fields)
roofnet: Roofnet Protocol (1.0.0 to 3.4.5, 23 fields)
ros: X.880 OSI Remote Operations Service (1.0.0 to 3.4.5, 42 fields)
roverride: Remote Override interface (1.0.0 to 3.4.5, 1 field)
rpc: Remote Procedure Call (1.0.0 to 3.4.5, 81 fields)
rpc_browser: RPC Browser (1.0.0 to 3.4.5, 6 fields)
rpc_netlogon: Microsoft Network Logon (1.0.0 to 3.4.5, 324 fields)
rpcap: Remote Packet Capture (1.2.0 to 3.4.5, 85 fields)
rpcordma: RPC over RDMA (2.0.0 to 3.4.5, 28 fields)
rpkirtr: RPKI-Router Protocol (1.10.0 to 3.4.5, 26 fields)
rpl: Remote Program Load (1.0.0 to 3.4.5, 21 fields)
rpriv: Privilege Server operations (1.0.0 to 3.4.5, 8 fields)
rquota: Remote Quota (1.0.0 to 3.4.5, 18 fields)
rras: Microsoft Routing and Remote Access Service (1.0.0 to 3.4.5, 1 field)
rrc: Radio Resource Control (RRC) protocol (1.0.0 to 3.4.5, 8897 fields)
rrlp: Radio Resource LCS Protocol (RRLP) (1.0.0 to 3.4.5, 1067 fields)
rs_acct: DCE/RPC RS_ACCT (1.0.0 to 3.4.5, 8 fields)
rs_attr: Registry Server Attributes Manipulation Interface (1.0.0 to 3.4.5, 1 field)
rs_attr_schema: DCE/RPC Registry Server Attributes Schema (1.0.0 to 3.4.5, 1 field)
rs_bind: DCE/RPC RS_BIND (1.0.0 to 3.4.5, 1 field)
rs_misc: DCE/RPC RS_MISC (1.0.0 to 3.4.5, 5 fields)
rs_pgo: DCE Name Service (1.0.0 to 3.4.5, 67 fields)
rs_plcy: RS Interface properties (1.0.0 to 3.4.5, 1 field)
rs_prop_acct: DCE/RPC RS_PROP_ACCT (1.0.0 to 3.4.5, 1 field)
rs_prop_acl: DCE/RPC Registry server propagation interface - ACLs (1.0.0 to 3.4.5, 1 field)
rs_prop_attr: DCE/RPC Prop Attr (1.0.0 to 3.4.5, 1 field)
rs_prop_pgo: DCE/RPC Registry server propagation interface - PGO items (1.0.0 to 3.4.5, 1 field)
rs_prop_plcy: DCE/RPC Registry server propagation interface - properties and policies (1.0.0 to 3.4.5, 1 field)
rs_pwd_mgmt: DCE/RPC Registry Password Management (1.0.0 to 3.4.5, 1 field)
rs_repadm: Registry server administration operations. (1.0.0 to 3.4.5, 2 fields)
rs_replist: DCE/RPC Repserver Calls (1.0.0 to 3.4.5, 1 field)
rs_repmgr: DCE/RPC Operations between registry server replicas (1.0.0 to 3.4.5, 1 field)
rs_unix: DCE/RPC RS_UNIX (1.0.0 to 3.4.5, 1 field)
rsec_login: Remote sec_login preauth interface. (1.0.0 to 3.4.5, 1 field)
rsh: Remote Shell (1.0.0 to 3.4.5, 8 fields)
rsip: Realm Specific IP Protocol (1.6.0 to 3.4.5, 28 fields)
rsl: Radio Signalling Link (RSL) (1.0.0 to 1.8.15, 86 fields)
rsp: RMCP Security-extensions Protocol (1.0.0 to 3.4.5, 2 fields)
rss: rss (1.0.0 to 3.4.5, 122 fields)
rstat: RSTAT (1.0.0 to 3.4.5, 4 fields)
rsvd: Remote Shared Virtual Disk (2.0.0 to 3.4.5, 75 fields)
rsvp: Resource ReserVation Protocol (RSVP) (1.0.0 to 3.4.5, 608 fields)
rsync: RSYNC File Synchroniser (1.0.0 to 3.4.5, 8 fields)
rtacser: RTAC Serial (1.12.0 to 3.4.5, 11 fields)
rtcdc: WebRTC Datachannel Protocol (1.10.0 to 3.4.5, 18 fields)
rtcfg: RTcfg (1.0.0 to 3.4.5, 24 fields)
rtcp: Real-time Transport Control Protocol (1.0.0 to 3.4.5, 323 fields)
rtitcp: RTI TCP Transport Protocol (2.2.0 to 3.4.5, 24 fields)
rtls: Real Time Location System (2.2.0 to 3.4.5, 65 fields)
rtmac: Real-Time Media Access Control (1.0.0 to 3.4.5, 38 fields)
rtmp: Routing Table Maintenance Protocol (1.0.0 to 3.4.5, 9 fields)
rtmpt: Real Time Messaging Protocol (1.0.0 to 3.4.5, 57 fields)
rtp: Real-Time Transport Protocol (1.0.0 to 3.4.5, 75 fields)
rtp.ext.ed137: Real-Time Transport Protocol ED137 Extensions (3.0.0 to 3.4.5, 65 fields)
rtpevent: RFC 2833 RTP Event (1.0.0 to 3.4.5, 5 fields)
rtpmidi: RFC 4695/6295 RTP-MIDI (1.8.0 to 3.4.5, 299 fields)
rtpproxy: Sippy RTPproxy Protocol (1.12.0 to 3.4.5, 42 fields)
rtps: Real-Time Publish-Subscribe Wire Protocol (1.0.0 to 3.4.5, 421 fields)
rtps2: Real-Time Publish-Subscribe Wire Protocol 2.x (1.2.0 to 1.8.15, 47 fields)
rtse: X.228 OSI Reliable Transfer Service (1.0.0 to 3.4.5, 46 fields)
rtsp: Real Time Streaming Protocol (1.0.0 to 3.4.5, 23 fields)
rua: UTRAN Iuh interface RUA signalling (1.4.0 to 3.4.5, 89 fields)
rudp: Reliable UDP (1.0.0 to 3.4.5, 13 fields)
rwall: Remote Wall protocol (1.0.0 to 3.4.5, 2 fields)
rx: RX Protocol (1.0.0 to 3.4.5, 41 fields)

S

s101: S101 (3.0.0 to 3.4.5, 28 fields)
s1ap: S1 Application Protocol (1.0.0 to 3.4.5, 1106 fields)
s4406: STANAG 4406 Message (1.0.0 to 1.4.15, 87 fields)
s4607: STANAG 4607 (GMTI Format) (1.12.2 to 3.4.5, 106 fields)
s5066: STANAG 5066 (SIS layer) (1.0.0 to 1.10.14, 98 fields)
s5066dts: STANAG 5066(DTS layer) (1.12.0 to 3.4.5, 104 fields)
s5066sis: STANAG 5066 (SIS layer) (1.12.0 to 3.4.5, 105 fields)
s7comm: S7 Communication (2.0.0 to 3.4.5, 1149 fields)
sabp: UTRAN IuBC interface SABP signaling (1.0.0 to 3.4.5, 111 fields)
sadmind: SADMIND (1.0.0 to 3.4.5, 3 fields)
sametime: Sametime Protocol (1.6.0 to 3.4.5, 28 fields)
samr: SAMR (pidl) (1.0.0 to 3.4.5, 648 fields)
sap: Session Announcement Protocol (1.0.0 to 3.4.5, 24 fields)
sasp: Server/Application State Protocol (1.4.0 to 3.4.5, 68 fields)
sb3: Fibre Channel Single Byte Command (1.0.0 to 1.8.15, 68 fields)
sbc: Bluetooth SBC Codec (1.10.0 to 3.4.5, 25 fields)
sbcap: SBc Application Part (1.8.0 to 3.4.5, 155 fields)
sbus: SAIA S-Bus (1.0.0 to 3.4.5, 77 fields)
sccp: Signalling Connection Control Part (1.0.0 to 3.4.5, 101 fields)
sccpmg: Signalling Connection Control Part Management (1.0.0 to 3.4.5, 11 fields)
scop: ZigBee SCoP (1.6.0 to 3.4.5, 6 fields)
scsi: SCSI (1.0.0 to 3.4.5, 659 fields)
scsi_mmc: SCSI_MMC (1.0.0 to 3.4.5, 319 fields)
scsi_osd: SCSI_OSD (1.0.0 to 3.4.5, 200 fields)
scsi_sbc: SCSI_SBC (1.0.0 to 3.4.5, 185 fields)
scsi_smc: SCSI_SMC (1.0.0 to 3.4.5, 70 fields)
scsi_ssc: SCSI_SSC (1.0.0 to 3.4.5, 107 fields)
scte35: SCTE-35 Splice Information (2.4.0 to 3.4.5, 46 fields)
scte35_private_command: SCTE-35 Private Command (2.4.0 to 3.4.5, 2 fields)
scte35_si: SCTE-35 Splice Insert (2.4.0 to 3.4.5, 22 fields)
scte35_splice_schedule: SCTE-35 Splice Schedule (2.4.0 to 3.4.5, 18 fields)
scte35_time: SCTE-35 Time Signal (2.4.0 to 3.4.5, 3 fields)
sctp: Stream Control Transmission Protocol (1.0.0 to 3.4.5, 172 fields)
scylla: Scylla RPC protocol (3.4.0 to 3.4.5, 24 fields)
sdap: SDAP (3.0.0 to 3.4.5, 5 fields)
sdh: SDH/SONET Protocol (1.8.0 to 3.4.5, 28 fields)
sdlc: Synchronous Data Link Control (SDLC) (1.0.0 to 3.4.5, 10 fields)
sdp: Session Description Protocol (1.0.0 to 3.4.5, 95 fields)
sebek: SEBEK - Kernel Data Capture (1.0.0 to 3.4.5, 19 fields)
secidmap: DCE Security ID Mapper (1.0.0 to 3.4.5, 1 field)
selfm: SEL Protocol (1.10.0 to 3.4.5, 221 fields)
sercosiii: SERCOS III V1.1 (1.2.0 to 1.6.16, 53 fields)
ses: ISO 8327-1 OSI Session Protocol (1.0.0 to 3.4.5, 77 fields)
sflow: InMon sFlow (1.0.0 to 3.4.5, 371 fields)
sgsap: SGs Application Part (SGsAP) (1.6.0 to 3.4.5, 20 fields)
shim6: Shim6 Protocol (2.2.0 to 3.4.5, 41 fields)
sigcomp: Signaling Compression (1.0.0 to 3.4.5, 108 fields)
siii: SERCOS III V1.1 (1.8.0 to 3.4.5, 65 fields)
simple: Standard Interface for Multiple Platform Link Evaluation (2.2.0 to 3.4.5, 56 fields)
simulcrypt: SIMULCRYPT Protocol (1.2.0 to 3.4.5, 85 fields)
sip: Session Initiation Protocol (1.0.0 to 3.4.5, 292 fields)
sipfrag: Sipfrag (1.0.0 to 3.4.5, 1 field)
sir: Serial Infrared (1.0.0 to 3.4.5, 9 fields)
sita: Societe Internationale de Telecommunications Aeronautiques (1.0.0 to 3.4.5, 27 fields)
skinny: Skinny Client Control Protocol (1.0.0 to 3.4.5, 567 fields)
skype: SKYPE (1.10.0 to 3.4.5, 19 fields)
slarp: Cisco SLARP (1.0.0 to 3.4.5, 7 fields)
slimp3: SliMP3 Communication Protocol (1.0.0 to 3.4.5, 37 fields)
sll: Linux cooked-mode capture (1.0.0 to 3.4.5, 12 fields)
slow: Slow Protocols (1.0.0 to 3.4.5, 173 fields)
slsk: SoulSeek Protocol (1.0.0 to 3.4.5, 86 fields)
sm: Cisco Session Management (1.0.0 to 3.4.5, 20 fields)
smb: SMB (Server Message Block Protocol) (1.0.0 to 3.4.5, 752 fields)
smb2: SMB2 (Server Message Block Protocol version 2) (1.0.0 to 3.4.5, 619 fields)
smb_direct: SMB-Direct (SMB RDMA Transport) (1.12.0 to 3.4.5, 29 fields)
smb_netlogon: Microsoft Windows Logon Protocol (Old) (1.0.0 to 3.4.5, 49 fields)
smb_pipe: SMB Pipe Protocol (1.12.0 to 3.4.5, 30 fields)
smcr: Shared Memory Communications - RDMA (2.0.0 to 3.4.5, 103 fields)
smil: Synchronized Multimedia Integration Language (1.0.0 to 3.4.5, 256 fields)
sml: Smart Message Language (1.10.0 to 3.4.5, 86 fields)
smp: Session Multiplex Protocol (2.6.0 to 3.4.5, 11 fields)
smpp: Short Message Peer to Peer (1.0.0 to 3.4.5, 152 fields)
smrse: Short Message Relaying Service (1.0.0 to 3.4.5, 37 fields)
smtp: Simple Mail Transfer Protocol (1.0.0 to 3.4.5, 25 fields)
smux: SNMP Multiplex Protocol (1.0.0 to 3.4.5, 2 fields)
sna: Systems Network Architecture (1.0.0 to 3.4.5, 210 fields)
snaeth: SNA-over-Ethernet (1.0.0 to 3.4.5, 3 fields)
sndcp: Subnetwork Dependent Convergence Protocol (1.0.0 to 3.4.5, 31 fields)
sndcpxid: Subnetwork Dependent Convergence Protocol XID (1.2.0 to 3.4.5, 52 fields)
snmp: Simple Network Management Protocol (1.0.0 to 3.4.5, 149 fields)
snort: Snort Alerts (2.4.0 to 3.4.5, 29 fields)
socks: Socks Protocol (1.0.0 to 3.4.5, 30 fields)
solaredge: SolarEdge monitoring protocol (2.6.0 to 3.4.5, 47 fields)
someip: SOME/IP Protocol (3.2.0 to 3.4.5, 46 fields)
someipsd: SOME/IP Service Discovery Protocol (3.2.0 to 3.4.5, 53 fields)
sonmp: Nortel SONMP (1.0.0 to 1.4.15, 6 fields)
soupbintcp: SoupBinTCP (1.10.0 to 3.4.5, 13 fields)
spdy: SPDY (1.12.0 to 3.4.5, 36 fields)
spice: Spice protocol (1.8.0 to 3.4.5, 288 fields)
spnego: Simple Protected Negotiation (1.0.0 to 3.4.5, 53 fields)
spoolss: Microsoft Spool Subsystem (1.0.0 to 3.4.5, 386 fields)
spp: Sequenced Packet Protocol (1.0.0 to 3.4.5, 12 fields)
spray: SPRAY (1.0.0 to 3.4.5, 6 fields)
sprt: Simple Packet Relay Transport (1.10.0 to 3.4.5, 153 fields)
spx: Sequenced Packet eXchange (1.0.0 to 3.4.5, 18 fields)
srp: H.324/SRP (1.0.0 to 3.4.5, 4 fields)
srt: SRT Protocol (3.0.0 to 3.4.5, 54 fields)
srvloc: Service Location Protocol (1.0.0 to 3.4.5, 113 fields)
srvsvc: Server Service (1.0.0 to 3.4.5, 751 fields)
sscf-nni: SSCF-NNI (1.0.0 to 3.4.5, 2 fields)
sscop: SSCOP (1.0.0 to 3.4.5, 10 fields)
ssh: SSH Protocol (1.0.0 to 3.4.5, 72 fields)
ssl: Secure Sockets Layer (1.0.0 to 2.6.20, 300 fields)
ssp: Scripting Service Protocol (1.0.0 to 3.4.5, 18 fields)
sss: Novell SecretStore Services (1.0.0 to 3.4.5, 46 fields)
sstp: Secure Socket Tunneling Protocol (2.0.0 to 3.4.5, 20 fields)
starteam: StarTeam (1.0.0 to 3.4.5, 17 fields)
stat: Network Status Monitor Protocol (1.0.0 to 3.4.5, 15 fields)
statnotify: Network Status Monitor CallBack Protocol (1.0.0 to 3.4.5, 4 fields)
stcsig: Spirent Test Center Signature (3.0.0 to 3.4.5, 12 fields)
steam_ihs_discovery: Steam In-Home Streaming Discovery Protocol (2.6.0 to 3.4.5, 52 fields)
stp: Spanning Tree Protocol (1.0.0 to 3.4.5, 68 fields)
stt: Stateless Transport Tunneling (2.0.0 to 3.4.5, 56 fields)
stun: Session Traversal Utilities for NAT (1.0.0 to 3.4.5, 102 fields)
stun2: Session Traversal Utilities for NAT (1.0.0 to 1.2.18, 55 fields)
sua: SS7 SCCP-User Adaptation Layer (1.0.0 to 3.4.5, 139 fields)
sv: IEC61850 Sampled Values (1.4.0 to 3.4.5, 36 fields)
svcctl: Microsoft Service Control (1.0.0 to 3.4.5, 41 fields)
swils: Fibre Channel SW_ILS (1.0.0 to 3.4.5, 153 fields)
swipe: swIPe IP Security Protocol (1.12.0 to 3.4.5, 5 fields)
symantec: Symantec Enterprise Firewall (1.0.0 to 3.4.5, 2 fields)
sync: MBMS synchronisation protocol (1.8.0 to 3.4.5, 12 fields)
synergy: Synergy (1.0.0 to 3.4.5, 63 fields)
synphasor: IEEE C37.118 Synchrophasor Protocol (1.2.0 to 3.4.5, 91 fields)
sysdig: Sysdig System Call (2.0.0 to 3.4.5, 188 fields)
sysex: MIDI System Exclusive (1.10.0 to 3.4.5, 31 fields)
sysex_digitech: MIDI System Exclusive DigiTech (3.2.0 to 3.4.5, 26 fields)
syslog: Syslog message (1.0.0 to 3.4.5, 12 fields)
systemd_journal: systemd Journal Entry (3.0.0 to 3.4.5, 102 fields)

T

t124: GENERIC-CONFERENCE-CONTROL T.124 (1.8.0 to 3.4.5, 293 fields)
t125: MULTIPOINT-COMMUNICATION-SERVICE T.125 (1.0.0 to 3.4.5, 125 fields)
t30: T.30 (1.0.0 to 3.4.5, 109 fields)
t38: T.38 (1.0.0 to 3.4.5, 46 fields)
tacacs: TACACS (1.0.0 to 3.4.5, 15 fields)
tacplus: TACACS+ (1.0.0 to 3.4.5, 69 fields)
tali: Transport Adapter Layer Interface v1.0, RFC 3094 (1.0.0 to 3.4.5, 3 fields)
tapa: Trapeze Access Point Access Protocol (1.0.0 to 3.4.5, 29 fields)
tapi: Microsoft Telephony API Service (1.0.0 to 3.4.5, 6 fields)
tc_nv: TwinCAT NV (1.0.0 to 3.4.5, 12 fields)
tcap: Transaction Capabilities Application Part (1.0.0 to 3.4.5, 154 fields)
tcg_cp_oids: TCG_CP_OIDS (3.0.0 to 3.4.5, 51 fields)
tcp: Transmission Control Protocol (1.0.0 to 3.4.5, 255 fields)
tcpcl: DTN TCP Convergence Layer Protocol (1.4.0 to 3.4.5, 24 fields)
tcpencap: TCP Encapsulation of IPsec Packets (1.0.0 to 3.4.5, 8 fields)
tcpros: TCP based Robot Operating System protocol (TCPROS) (2.0.0 to 3.4.5, 22 fields)
tdmoe: Digium TDMoE Protocol (1.6.0 to 3.4.5, 8 fields)
tdmop: TDMoP protocol (2.0.0 to 3.4.5, 15 fields)
tds: Tabular Data Stream (1.0.0 to 3.4.5, 621 fields)
teap: Tunnel Extensible Authentication Protocol (3.4.0 to 3.4.5, 38 fields)
tecmp: Technically Enhanced Capture Module Protocol (3.4.0 to 3.4.5, 12 fields)
tecmp.payload: Technically Enhanced Capture Module Protocol Payload (3.4.0 to 3.4.5, 80 fields)
tei_management: TEI Management Procedure, Channel D (LAPD) (1.0.0 to 3.4.5, 5 fields)
teklink: TEKLINK (1.6.0 to 3.4.5, 18 fields)
telkonet: Telkonet powerline (1.0.0 to 3.4.5, 1 field)
telnet: Telnet (1.0.0 to 3.4.5, 58 fields)
teredo: Teredo IPv6 over UDP tunneling (1.0.0 to 3.4.5, 10 fields)
tetra: TETRA Protocol (1.6.0 to 3.4.5, 578 fields)
tfp: Tinkerforge Protocol (1.12.0 to 3.4.5, 11 fields)
tftp: Trivial File Transfer Protocol (1.0.0 to 3.4.5, 26 fields)
thread_address: Thread Address (2.4.0 to 3.4.5, 15 fields)
thread_bcn: Thread Beacon (2.4.0 to 3.4.5, 11 fields)
thread_diagnostic: Thread Diagnostics (2.4.0 to 3.4.5, 6 fields)
thread_meshcop: Thread MeshCoP (2.4.0 to 3.4.5, 60 fields)
thread_nwd: Thread Network Data (2.4.0 to 3.4.5, 35 fields)
thrift: Thrift Protocol (2.0.0 to 3.4.5, 21 fields)
tibia: Tibia Protocol (2.6.0 to 3.4.5, 112 fields)
time: Time Protocol (1.0.0 to 3.4.5, 2 fields)
tipc: Transparent Inter Process Communication(TIPC) (1.0.0 to 3.4.5, 130 fields)
tivoconnect: TiVoConnect Discovery Protocol (1.0.0 to 3.4.5, 7 fields)
tkn4int: DCE DFS Token Server (1.0.0 to 3.4.5, 1 field)
tls: Transport Layer Security (3.0.0 to 3.4.5, 283 fields)
tn3270: TN3270 Protocol (1.4.0 to 3.4.5, 363 fields)
tn5250: TN5250 Protocol (1.4.0 to 3.4.5, 551 fields)
tnef: Transport-Neutral Encapsulation Format (1.0.0 to 3.4.5, 61 fields)
tns: Transparent Network Substrate Protocol (1.0.0 to 3.4.5, 110 fields)
tpcp: Alteon - Transparent Proxy Cache Protocol (1.0.0 to 3.4.5, 14 fields)
tpkt: TPKT - ISO on TCP - RFC1006 (1.0.0 to 3.4.5, 4 fields)
tpm: TPM2.0 Protocol (3.0.0 to 3.4.5, 71 fields)
tpncp: AudioCodes TPNCP (TrunkPack Network Control Protocol) (1.0.0 to 3.4.5, 11417 fields)
tr: Token-Ring (1.0.0 to 3.4.5, 22 fields)
transum: TRANSUM RTE Data (2.4.0 to 3.4.5, 14 fields)
trill: TRILL (1.4.0 to 3.4.5, 8 fields)
trksvr: Microsoft Distributed Link Tracking Server Service (1.0.0 to 3.4.5, 2 fields)
trmac: Token-Ring Media Access Control (1.0.0 to 3.4.5, 46 fields)
ts2: Teamspeak2 Protocol (1.2.0 to 3.4.5, 64 fields)
tscf: Time-Synchronous Control Format (3.2.0 to 3.4.5, 13 fields)
tsdns: TeamSpeak3 DNS (3.0.0 to 3.4.5, 8 fields)
tsp: Time Synchronization Protocol (1.0.0 to 3.4.5, 7 fields)
ttag: Cisco ttag (2.2.0 to 3.4.5, 2 fields)
tte: TTEthernet (1.2.0 to 3.4.5, 6 fields)
tte_pcf: TTEthernet Protocol Control Frame (1.2.0 to 3.4.5, 15 fields)
ttp: Tiny Transport Protocol (1.0.0 to 3.4.5, 4 fields)
turbocell: Turbocell Header (1.2.0 to 3.4.5, 10 fields)
turbocell_aggregate: Turbocell Aggregate Data (1.2.0 to 3.4.5, 5 fields)
turnchannel: TURN Channel (1.2.0 to 3.4.5, 2 fields)
tuxedo: BEA Tuxedo (1.0.0 to 3.4.5, 2 fields)
twamp.control: TwoWay Active Measurement Control Protocol (2.6.0 to 3.4.5, 27 fields)
twamp.test: TwoWay Active Measurement Test Protocol (2.6.0 to 3.4.5, 15 fields)
typeinfo: DCOM ITypeInfo (3.2.0 to 3.4.5, 82 fields)
tzsp: Tazmen Sniffer Protocol (1.0.0 to 3.4.5, 25 fields)

U

u3v: USB 3 Vision (2.2.0 to 3.4.5, 120 fields)
ua3g: UA3G Message (1.8.0 to 3.4.5, 377 fields)
uasip: UA/SIP Protocol (1.8.0 to 3.4.5, 15 fields)
uaudp: UA/UDP Encapsulation Protocol (1.8.0 to 3.4.5, 18 fields)
ubdp: Ubiquiti Discovery Protocol (3.0.0 to 3.4.5, 20 fields)
ubertooth: Ubertooth (1.12.0 to 3.4.5, 289 fields)
ubikdisk: DCE DFS FLDB UBIK TRANSFER (1.0.0 to 3.4.5, 1 field)
ubikvote: DCE DFS FLDB UBIKVOTE (1.0.0 to 3.4.5, 1 field)
ucp: Universal Computer Protocol (1.0.0 to 3.4.5, 113 fields)
udld: Unidirectional Link Detection (1.0.0 to 3.4.5, 12 fields)
udp: User Datagram Protocol (1.0.0 to 3.4.5, 30 fields)
udpcp: UDPCP (3.4.0 to 3.4.5, 30 fields)
udpencap: UDP Encapsulation of IPsec Packets (1.0.0 to 3.4.5, 2 fields)
udplite: Lightweight User Datagram Protocol (1.0.0 to 3.4.5, 2 fields)
uds: Unified Diagnostic Services (2.4.0 to 3.4.5, 37 fields)
udt: UDT Protocol (1.12.0 to 3.4.5, 27 fields)
uftp: UDP based FTP w/ multicast (2.2.0 to 3.4.5, 167 fields)
uftp4: UDP based FTP w/ multicast V4 (2.2.0 to 3.4.5, 233 fields)
uftp5: UDP based FTP w/ multicast V5 (3.4.0 to 3.4.5, 226 fields)
uhd: UHD (1.10.0 to 3.4.5, 17 fields)
ulp: OMA UserPlane Location Protocol (1.0.0 to 3.4.5, 797 fields)
uma: Unlicensed Mobile Access (1.0.0 to 3.4.5, 118 fields)
unistim: UNISTIM Protocol (1.0.0 to 3.4.5, 329 fields)
urlencoded-form: HTML Form URL Encoded (1.12.0 to 3.4.5, 2 fields)
usb: USB (1.0.0 to 3.4.5, 214 fields)
usbaudio: USB Audio (1.10.0 to 3.4.5, 288 fields)
usbccid: USB CCID (1.8.0 to 3.4.5, 78 fields)
usbcom: USB Communications and CDC Control (1.12.0 to 3.4.5, 97 fields)
usbdfu: USB Device Firmware Upgrade (1.12.0 to 3.4.5, 27 fields)
usbhid: USB HID (1.4.0 to 3.4.5, 114 fields)
usbhub: USB HUB (1.4.0 to 3.4.5, 31 fields)
usbip: USBIP Protocol (2.2.0 to 3.4.5, 42 fields)
usbll: USB Link Layer (3.2.0 to 3.4.5, 30 fields)
usbms: USB Mass Storage (1.0.0 to 3.4.5, 15 fields)
usbport: USBPort (2.6.0 to 3.4.5, 48 fields)
usbprinter: USB Printer (3.4.0 to 3.4.5, 7 fields)
usbvideo: USB Video (1.10.0 to 3.4.5, 174 fields)
user_dlt: DLT User (1.0.0 to 3.4.5, 1 field)
userlog: UserLog Protocol (2.2.0 to 3.4.5, 26 fields)
uts: Unisys Transmittal System (1.0.0 to 3.4.5, 12 fields)

V

v120: Async data over ISDN (V.120) (1.0.0 to 3.4.5, 24 fields)
v150fw: V.150.1 State Signaling Event (1.10.0 to 3.4.5, 31 fields)
v52: V5.2 (1.4.0 to 3.4.5, 67 fields)
v5dl: V5 Data Link Layer (1.8.0 to 3.4.5, 21 fields)
v5ef: V5 Envelope Function (v5ef) (1.8.0 to 3.4.5, 6 fields)
v5ua: V5.2-User Adaptation Layer (1.0.0 to 3.4.5, 82 fields)
vcdu: VCDU (1.2.0 to 3.4.5, 51 fields)
vdp21: VSI protocol (2.2.0 to 3.4.5, 26 fields)
vicp: LeCroy VICP (1.2.0 to 3.4.5, 6 fields)
vines_arp: Banyan Vines ARP (1.0.0 to 3.4.5, 5 fields)
vines_echo: Banyan Vines Echo (1.0.0 to 3.4.5, 1 field)
vines_frp: Banyan Vines Fragmentation Protocol (1.0.0 to 3.4.5, 4 fields)
vines_icp: Banyan Vines ICP (1.0.0 to 3.4.5, 3 fields)
vines_ip: Banyan Vines IP (1.0.0 to 3.4.5, 13 fields)
vines_ipc: Banyan Vines IPC (1.0.0 to 3.4.5, 14 fields)
vines_llc: Banyan Vines LLC (1.0.0 to 3.4.5, 1 field)
vines_rtp: Banyan Vines RTP (1.0.0 to 3.4.5, 50 fields)
vines_spp: Banyan Vines SPP (1.0.0 to 3.4.5, 13 fields)
vj: PPP VJ Compression (1.0.0 to 1.10.14, 15 fields)
vlan: 802.1Q Virtual LAN (1.0.0 to 1.4.15, 1.6.3 to 3.4.5, 10 fields)
vmlab: VMware Lab Manager (1.4.0 to 3.4.5, 9 fields)
vnc: Virtual Network Computing (1.0.0 to 3.4.5, 242 fields)
vntag: VN-Tag (1.10.0 to 3.4.5, 12 fields)
vp8: VP8 (1.12.0 to 3.4.5, 29 fields)
vpp: VPP Dispatch Trace (3.0.0 to 3.4.5, 8 fields)
vpp-metadata: VPP Buffer Metadata (3.0.0 to 3.4.5, 1 field)
vpp-opaque: VPP Buffer Opaque (3.0.0 to 3.4.5, 1 field)
vpp-opaque2: VPP Buffer Opaque2 (3.0.0 to 3.4.5, 1 field)
vpp-trace: VPP Buffer Trace (3.0.0 to 3.4.5, 1 field)
vrrp: Virtual Router Redundancy Protocol (1.0.0 to 3.4.5, 19 fields)
vrt: VITA 49 radio transport protocol (1.10.0 to 3.4.5, 47 fields)
vsip: Video Services over IP (2.0.0 to 3.4.5, 118 fields)
vsncp: Vendor Specific Control Protocol (1.4.0 to 3.4.5, 19 fields)
vsnp: Vendor Specific Network Protocol (1.4.0 to 3.4.5, 3 fields)
vsock: vSocket (2.4.0 to 3.4.5, 19 fields)
vssmonitoring: VSS Monitoring Ethernet trailer (1.8.0 to 3.4.5, 3 fields)
vtp: VLAN Trunking Protocol (1.0.0 to 3.4.5, 38 fields)
vuze-dht: Vuze DHT Protocol (1.8.0 to 3.4.5, 68 fields)
vxi11_async: VXI-11 Asynchronous Abort (1.10.0 to 3.4.5, 1 field)
vxi11_core: VXI-11 Core Protocol (1.10.0 to 3.4.5, 31 fields)
vxi11_intr: VXI-11 Interrupt (1.10.0 to 3.4.5, 2 fields)
vxi11async: VXI-11 Asynchronous Abort (1.4.0 to 1.8.15, 1 field)
vxi11core: VXI-11 Core Protocol (1.4.0 to 1.8.15, 31 fields)
vxi11intr: VXI-11 Interrupt (1.4.0 to 1.8.15, 2 fields)
vxlan: Virtual eXtensible Local Area Network (1.8.0 to 3.4.5, 23 fields)

W

wai: WAI Protocol (1.6.0 to 3.4.5, 73 fields)
wap-sir: WAP Session Initiation Request (1.0.0 to 3.4.5, 14 fields)
wassp: Wireless Access Station Session Protocol (1.2.0 to 3.4.5, 391 fields)
watcherinfo: watcherinfo XML doc (RFC 3858) (1.0.0 to 3.4.5, 20 fields)
waveagent: WaveAgent (1.8.0 to 3.4.5, 122 fields)
wbxml: WAP Binary XML (1.0.0 to 3.4.5, 35 fields)
wccp: Web Cache Communication Protocol (1.0.0 to 3.4.5, 257 fields)
wcp: Wellfleet Compression (1.0.0 to 3.4.5, 31 fields)
websocket: WebSocket (1.8.0 to 3.4.5, 33 fields)
wg: WireGuard Protocol (3.0.0 to 3.4.5, 30 fields)
whdlc: Wellfleet HDLC (1.0.0 to 3.4.5, 2 fields)
who: Who (1.0.0 to 3.4.5, 15 fields)
whois: whois (1.12.0 to 3.4.5, 6 fields)
wifi_display: Wi-Fi Display (1.12.0 to 3.4.5, 49 fields)
wifi_p2p: Wi-Fi Peer-to-Peer (1.6.0 to 3.4.5, 146 fields)
wimaxasncp: WiMAX ASN Control Plane Protocol (1.0.0 to 3.4.5, 777 fields)
wimaxmacphy: WiMAX MAC-PHY over Ethernet (1.10.0 to 3.4.5, 217 fields)
winreg: Remote Registry Service (1.0.0 to 3.4.5, 161 fields)
winsrepl: WINS (Windows Internet Name Service) Replication (1.0.0 to 3.4.5, 29 fields)
wisun: Wi-SUN Field Area Network (2.6.0 to 3.4.5, 102 fields)
witness: SMB Witness Service (2.2.0 to 3.4.5, 56 fields)
wkssvc: Workstation Service (1.0.0 to 3.4.5, 376 fields)
wlan: IEEE 802.11 wireless LAN (1.0.0 to 3.4.5, 2620 fields)
wlan_aggregate: IEEE 802.11 wireless LAN aggregate frame (1.0.0 to 3.4.5, 3 fields)
wlan_mgt: IEEE 802.11 wireless LAN management frame (1.0.0 to 2.2.17, 1240 fields)
wlan_radio: 802.11 radio information (2.0.0 to 3.4.5, 56 fields)
wlan_rsna_eapol: IEEE 802.11 RSNA EAPOL key (1.12.0 to 3.4.5, 21 fields)
wlancap: AVS WLAN Capture header (1.0.0 to 3.4.5, 40 fields)
wlancertextn: Wlan Certificate Extension (1.0.0 to 3.4.5, 3 fields)
wlccp: Cisco Wireless LAN Context Control Protocol (1.0.0 to 3.4.5, 160 fields)
wmx: WiMax Protocol (1.0.0 to 3.4.5, 173 fields)
wmx.aas: WiMax AAS-FEEDBACK Messages (1.0.0 to 3.4.5, 29 fields)
wmx.aas_beam: WiMax AAS-BEAM Messages (1.12.0 to 3.4.5, 11 fields)
wmx.arq: WiMax ARQ Feedback/Discard/Reset Messages (1.0.0 to 3.4.5, 21 fields)
wmx.cd: WiMax DCD/UCD Messages (1.0.0 to 1.10.14, 129 fields)
wmx.cdma: WiMax CDMA Code Attribute (1.12.0 to 3.4.5, 3 fields)
wmx.clk: WiMax CLK-CMP Message (1.0.0 to 3.4.5, 7 fields)
wmx.dcd: WiMax DCD Messages (1.12.0 to 3.4.5, 65 fields)
wmx.dlmap: WiMax DLMAP Messages (1.12.0 to 3.4.5, 338 fields)
wmx.dreg: WiMax DREG-REQ/CMD Messages (1.0.0 to 1.10.14, 24 fields)
wmx.dreg_req: WiMax DREG-REQ Messages (1.12.0 to 3.4.5, 21 fields)
wmx.ds: WiMax DSA/C/D Messages (1.0.0 to 1.10.14, 17 fields)
wmx.dsa: WiMax DSA Messages (1.12.0 to 3.4.5, 2 fields)
wmx.dsc: WiMax DSC Messages (1.12.0 to 3.4.5, 2 fields)
wmx.dsd: WiMax DSD Messages (1.12.0 to 3.4.5, 5 fields)
wmx.dsx: WiMax DSX-RVD Message (1.0.0 to 1.10.14, 3 fields)
wmx.dsx_rvd: WiMax DSX-RVD Message (1.12.0 to 3.4.5, 2 fields)
wmx.fpc: WiMax FPC Message (1.0.0 to 3.4.5, 6 fields)
wmx.hdr: WiMax Generic/Type1/Type2 MAC Header Messages (1.0.0 to 3.4.5, 178 fields)
wmx.map: WiMax DLMAP/ULMAP Messages (1.0.0 to 1.10.14, 97 fields)
wmx.mgmt: WiMax MAC Management Message (1.12.0 to 3.4.5, 3 fields)
wmx.pkm: WiMax PKM-REQ/RSP Messages (1.0.0 to 3.4.5, 4 fields)
wmx.pmc: WiMax PMC-REQ/RSP Messages (1.0.0 to 1.10.14, 9 fields)
wmx.pmc_req: WiMax PMC-REQ Messages (1.12.0 to 3.4.5, 7 fields)
wmx.prc: WiMax PRC-LT-CTRL Message (1.0.0 to 3.4.5, 4 fields)
wmx.reg: WiMax REG-REQ/RSP Messages (1.0.0 to 1.10.14, 162 fields)
wmx.reg_req: WiMax REG-REQ Messages (1.12.0 to 3.4.5, 97 fields)
wmx.reg_rsp: WiMax REG-RSP Messages (1.12.0 to 3.4.5, 8 fields)
wmx.rep: WiMax REP-REQ/RSP Messages (1.0.0 to 3.4.5, 100 fields)
wmx.res: WiMax RES-CMD Message (1.0.0 to 3.4.5, 3 fields)
wmx.rng: WiMax RNG-REQ/RSP Messages (1.0.0 to 1.10.14, 88 fields)
wmx.rng_req: WiMax RNG-REQ Messages (1.12.0 to 3.4.5, 37 fields)
wmx.rng_rsp: WiMax RNG-RSP Messages (1.12.0 to 3.4.5, 52 fields)
wmx.sbc: WiMax SBC-REQ/RSP Messages (1.0.0 to 3.4.5, 227 fields)
wmx.sub: WiMax Sub-TLV Messages (1.0.0 to 3.4.5, 212 fields)
wmx.ucd: WiMax UCD Messages (1.12.0 to 3.4.5, 70 fields)
wmx.ulmap: WiMax ULMAP Messages (1.12.0 to 3.4.5, 324 fields)
wol: Wake On LAN (1.0.0 to 3.4.5, 3 fields)
wow: World of Warcraft (1.2.0 to 3.4.5, 35 fields)
wpan: IEEE 802.15.4 Low-Rate Wireless PAN (1.0.0 to 3.4.5, 333 fields)
wps: Wifi Protected Setup (1.0.0 to 3.4.5, 176 fields)
wreth: WSE remote ethernet (1.8.0 to 3.4.5, 105 fields)
wsmp: Wave Short Message Protocol(IEEE P1609.3) (1.2.0 to 3.4.5, 22 fields)
wsp: Wireless Session Protocol (1.0.0 to 3.4.5, 201 fields)
wtls: Wireless Transport Layer Security (1.0.0 to 3.4.5, 69 fields)
wtp: Wireless Transaction Protocol (1.0.0 to 3.4.5, 36 fields)
wzcsvc: Wireless Configuration Service (1.0.0 to 3.4.5, 1 field)

X

x.25: X.25 (1.0.0 to 1.0.16, 17 fields)
x.29: X.29 (1.0.0 to 1.0.16, 3 fields)
x11: X11 (1.0.0 to 3.4.5, 9912 fields)
x224: ITU-T Rec X.224 (1.0.0 to 2.0.16, 8 fields)
x25: X.25 (1.2.0 to 3.4.5, 99 fields)
x29: X.29 (1.2.0 to 3.4.5, 12 fields)
x2ap: EUTRAN X2 Application Protocol (X2AP) (1.0.0 to 3.4.5, 1255 fields)
x411: X.411 Message Transfer Service (1.0.0 to 1.4.15, 531 fields)
x420: X.420 Information Object (1.0.0 to 1.4.15, 357 fields)
x509af: X.509 Authentication Framework (1.0.0 to 3.4.5, 97 fields)
x509ce: X.509 Certificate Extensions (1.0.0 to 3.4.5, 274 fields)
x509if: X.509 Information Framework (1.0.0 to 3.4.5, 169 fields)
x509sat: X.509 Selected Attribute Types (1.0.0 to 3.4.5, 215 fields)
xcap-caps: XML Configuration Access Protocol Server Capabilities (1.0.0 to 3.4.5, 3 fields)
xcap-error: XCAP Error XML doc (RFC 4825) (1.0.0 to 3.4.5, 30 fields)
xcsl: Call Specification Language (Xcsl) (1.0.0 to 3.4.5, 7 fields)
xdmcp: X Display Manager Control Protocol (1.0.0 to 3.4.5, 30 fields)
xip: eXpressive Internet Protocol (2.0.0 to 3.4.5, 15 fields)
xipserval: XIP Serval (2.0.0 to 3.4.5, 21 fields)
xmcp: eXtensible Messaging Client Protocol (1.8.0 to 3.4.5, 71 fields)
xml: eXtensible Markup Language (1.0.0 to 3.4.5, 16 fields)
xmpp: XMPP Protocol (1.8.0 to 3.4.5, 162 fields)
xnap: NG-RAN Xn Application Protocol (XnAP) (3.0.0 to 3.4.5, 1100 fields)
xot: X.25 over TCP (1.0.0 to 3.4.5, 17 fields)
xra: Excentis XRA header (2.6.0 to 3.4.5, 86 fields)
xtp: Xpress Transport Protocol (1.2.0 to 3.4.5, 65 fields)
xyplex: Xyplex (1.0.0 to 3.4.5, 7 fields)

Y

yami: YAMI Protocol (1.8.0 to 3.4.5, 17 fields)
yhoo: Yahoo Messenger Protocol (1.0.0 to 3.4.5, 10 fields)
ymsg: Yahoo YMSG Messenger Protocol (1.0.0 to 3.4.5, 10 fields)
ypbind: Yellow Pages Bind (1.0.0 to 3.4.5, 8 fields)
yppasswd: Yellow Pages Passwd (1.0.0 to 3.4.5, 11 fields)
ypserv: Yellow Pages Service (1.0.0 to 3.4.5, 16 fields)
ypxfr: Yellow Pages Transfer (1.0.0 to 3.4.5, 1 field)

Z

z3950: Z39.50 Protocol (3.0.0 to 3.4.5, 803 fields)
zbee.apf: ZigBee Application Framework (1.2.0 to 1.8.15, 2 fields)
zbee.aps: ZigBee Application Support Layer (1.2.0 to 1.8.15, 43 fields)
zbee.nwk: ZigBee Network Layer (1.2.0 to 1.8.15, 75 fields)
zbee.zcl: ZigBee Cluster Library (1.4.0 to 1.8.15, 44 fields)
zbee.zdp: ZigBee Device Profile (1.2.0 to 1.8.15, 78 fields)
zbee_apf: ZigBee Application Framework (1.10.0 to 3.4.5, 2 fields)
zbee_aps: ZigBee Application Support Layer (1.10.0 to 3.4.5, 62 fields)
zbee_nwk: ZigBee Network Layer (1.10.0 to 3.4.5, 118 fields)
zbee_nwk_gp: ZigBee Green Power Profile (1.12.0 to 3.4.5, 89 fields)
zbee_zcl: ZigBee Cluster Library (1.10.0 to 3.4.5, 103 fields)
zbee_zcl_closures.door_lock: ZigBee ZCL Door Lock (2.2.0 to 3.4.5, 8 fields)
zbee_zcl_closures.shade_config: ZigBee ZCL Shade Configuration (2.2.0 to 3.4.5, 7 fields)
zbee_zcl_general.alarms: ZigBee ZCL Alarms (2.2.0 to 3.4.5, 7 fields)
zbee_zcl_general.analog.input.basic: ZigBee ZCL Analog Input Basic (2.2.0 to 3.4.5, 7 fields)
zbee_zcl_general.analog.output.basic: ZigBee ZCL Analog Output Basic (2.2.0 to 3.4.5, 14 fields)
zbee_zcl_general.analog.value.basic: ZigBee ZCL Analog Value Basic (2.2.0 to 3.4.5, 13 fields)
zbee_zcl_general.applctrl: ZigBee ZCL Appliance Control (1.12.0 to 3.4.5, 16 fields)
zbee_zcl_general.basic: ZigBee ZCL Basic (1.12.0 to 3.4.5, 12 fields)
zbee_zcl_general.binary_input_basic: ZigBee ZCL Binary Input Basic (2.2.0 to 3.4.5, 8 fields)
zbee_zcl_general.binary_output_basic: ZigBee ZCL Binary Output Basic (2.2.0 to 3.4.5, 14 fields)
zbee_zcl_general.binary_value_basic: ZigBee ZCL Binary Value Basic (2.2.0 to 3.4.5, 13 fields)
zbee_zcl_general.commissioning: ZigBee ZCL Commissioning (2.2.0 to 3.4.5, 19 fields)
zbee_zcl_general.device_temperature_config: ZigBee ZCL Device Temperature Configuration (2.2.0 to 3.4.5, 5 fields)
zbee_zcl_general.gp: ZigBee ZCL Green Power (2.2.0 to 3.4.5, 207 fields)
zbee_zcl_general.groups: ZigBee ZCL Groups (2.2.0 to 3.4.5, 11 fields)
zbee_zcl_general.identify: ZigBee ZCL Identify (1.12.0 to 3.4.5, 7 fields)
zbee_zcl_general.level_control: ZigBee ZCL Level Control (2.2.0 to 3.4.5, 13 fields)
zbee_zcl_general.multistate.input.basic: ZigBee ZCL Multistate Input Basic (2.2.0 to 3.4.5, 7 fields)
zbee_zcl_general.multistate.output.basic: ZigBee ZCL Multistate Output Basic (2.2.0 to 3.4.5, 13 fields)
zbee_zcl_general.multistate.value.basic: ZigBee ZCL Multistate Value Basic (2.2.0 to 3.4.5, 13 fields)
zbee_zcl_general.onoff: ZigBee ZCL OnOff (1.12.0 to 3.4.5, 12 fields)
zbee_zcl_general.onoff.switch.configuration: ZigBee ZCL OnOff Switch Configuration (2.2.0 to 3.4.5, 3 fields)
zbee_zcl_general.ota: ZigBee ZCL OTA (1.12.0 to 3.4.5, 40 fields)
zbee_zcl_general.part: ZigBee ZCL Partition (1.12.0 to 3.4.5, 16 fields)
zbee_zcl_general.poll: ZigBee ZCL Poll Control (2.0.0 to 3.4.5, 7 fields)
zbee_zcl_general.power_config: ZigBee ZCL Power Configuration (2.0.0 to 3.4.5, 19 fields)
zbee_zcl_general.pwrprof: ZigBee ZCL Power Profile (1.12.0 to 3.4.5, 37 fields)
zbee_zcl_general.rssi_location: ZigBee ZCL RSSI Location (2.2.0 to 3.4.5, 36 fields)
zbee_zcl_general.scenes: ZigBee ZCL Scenes (2.2.0 to 3.4.5, 37 fields)
zbee_zcl_general.time: ZigBee ZCL Time (2.2.0 to 3.4.5, 6 fields)
zbee_zcl_general.touchlink: ZigBee ZCL Touchlink (2.6.0 to 3.4.5, 45 fields)
zbee_zcl_ha.applevtalt: ZigBee ZCL Appliance Events & Alert (1.12.0 to 3.4.5, 11 fields)
zbee_zcl_ha.applident: ZigBee ZCL Appliance Identification (1.12.0 to 3.4.5, 7 fields)
zbee_zcl_ha.applstats: ZigBee ZCL Appliance Statistics (1.12.0 to 3.4.5, 8 fields)
zbee_zcl_ha.metidt: ZigBee ZCL Meter Identification (1.12.0 to 3.4.5, 3 fields)
zbee_zcl_hvac.dehum_ctrl: ZigBee ZCL Dehumidification Control (2.2.0 to 3.4.5, 4 fields)
zbee_zcl_hvac.fan_ctrl: ZigBee ZCL Fan Control (2.2.0 to 3.4.5, 3 fields)
zbee_zcl_hvac.pump_config_ctrl: ZigBee ZCL Pump Configuration and Control (2.2.0 to 3.4.5, 29 fields)
zbee_zcl_hvac.thermo_ui_config: ZigBee ZCL Thermostat User Interface Configuration (2.2.0 to 3.4.5, 3 fields)
zbee_zcl_hvac.thermostat: ZigBee ZCL Thermostat (2.0.0 to 3.4.5, 21 fields)
zbee_zcl_ias.ace: ZigBee ZCL IAS ACE (2.2.0 to 3.4.5, 10 fields)
zbee_zcl_ias.wd: ZigBee ZCL IAS WD (2.2.0 to 3.4.5, 7 fields)
zbee_zcl_ias.zone: ZigBee ZCL IAS Zone (2.0.0 to 3.4.5, 19 fields)
zbee_zcl_lighting.ballast_ctrl: ZigBee ZCL Ballast Configuration (2.2.0 to 3.4.5, 6 fields)
zbee_zcl_lighting.color_ctrl: ZigBee ZCL Color Control (2.2.0 to 3.4.5, 88 fields)
zbee_zcl_meas_sensing.elecmes: ZigBee ZCL Electrical Measurement (3.2.0 to 3.4.5, 11 fields)
zbee_zcl_meas_sensing.flowmeas: ZigBee ZCL Flow Meas. (2.2.0 to 3.4.5, 5 fields)
zbee_zcl_meas_sensing.illumlevelsen: ZigBee ZCL Illuminance Level Sensing (2.2.0 to 3.4.5, 4 fields)
zbee_zcl_meas_sensing.illummeas: ZigBee ZCL Illuminance Meas. (1.12.0 to 3.4.5, 6 fields)
zbee_zcl_meas_sensing.occsen: ZigBee ZCL Occupancy Sensing (2.2.0 to 3.4.5, 4 fields)
zbee_zcl_meas_sensing.pressmeas: ZigBee ZCL Pressure Meas. (1.12.0 to 3.4.5, 10 fields)
zbee_zcl_meas_sensing.relhummeas: ZigBee ZCL Rel. Humidity Meas. (1.12.0 to 3.4.5, 5 fields)
zbee_zcl_meas_sensing.tempmeas: ZigBee ZCL Temperature Meas. (1.12.0 to 3.4.5, 5 fields)
zbee_zcl_se.calendar: ZigBee ZCL Calendar (2.6.0 to 3.4.5, 46 fields)
zbee_zcl_se.daily_schedule: ZigBee ZCL Daily Schedule (3.0.0 to 3.4.5, 19 fields)
zbee_zcl_se.dm: ZigBee ZCL Device Management (2.6.0 to 3.4.5, 65 fields)
zbee_zcl_se.drlc: ZigBee ZCL DLRC (2.6.0 to 3.4.5, 52 fields)
zbee_zcl_se.em: ZigBee ZCL Energy Management (2.6.0 to 3.4.5, 38 fields)
zbee_zcl_se.events: ZigBee ZCL Events (2.4.0 to 3.4.5, 24 fields)
zbee_zcl_se.ke: ZigBee ZCL Key Establishment (2.0.0 to 3.4.5, 25 fields)
zbee_zcl_se.keep_alive: ZigBee ZCL Keep-Alive (2.6.0 to 3.4.5, 4 fields)
zbee_zcl_se.mdu_pairing: ZigBee ZCL MDU Pairing (2.6.0 to 3.4.5, 11 fields)
zbee_zcl_se.met: ZigBee ZCL Metering (2.4.0 to 3.4.5, 204 fields)
zbee_zcl_se.msg: ZigBee ZCL Messaging (1.12.0 to 3.4.5, 22 fields)
zbee_zcl_se.pp: ZigBee ZCL Prepayment (2.4.0 to 3.4.5, 100 fields)
zbee_zcl_se.price: ZigBee ZCL Price (2.6.0 to 3.4.5, 109 fields)
zbee_zcl_se.sub_ghz: ZigBee ZCL Sub-Ghz (2.6.0 to 3.4.5, 5 fields)
zbee_zcl_se.tun: ZigBee ZCL Tunneling (2.0.0 to 3.4.5, 17 fields)
zbee_zdp: ZigBee Device Profile (1.10.0 to 3.4.5, 127 fields)
zebra: Zebra Protocol (1.0.0 to 3.4.5, 74 fields)
zep: ZigBee Encapsulation Protocol (1.2.0 to 3.4.5, 11 fields)
ziop: Zipped Inter-ORB Protocol (1.2.0 to 3.4.5, 9 fields)
zip: Zone Information Protocol (1.0.0 to 3.4.5, 18 fields)
zrtp: ZRTP (1.2.0 to 3.4.5, 46 fields)
zvt: ZVT Kassenschnittstelle (2.0.0 to 3.4.5, 26 fields)
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More