Display Filter Reference: Ethernet
Protocol field name: eth
Versions: 1.0.0 to 3.4.5
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| eth.addr | Address | Ethernet or other MAC address | 1.0.0 to 3.4.5 |
| eth.addr.oui | Address OUI | Unsigned integer, 3 bytes | 3.2.0 to 3.4.5 |
| eth.addr.oui_resolved | Address OUI (resolved) | Character string | 3.2.0 to 3.4.5 |
| eth.addr_resolved | Address (resolved) | Character string | 1.12.0 to 3.4.5 |
| eth.dst | Destination | Ethernet or other MAC address | 1.0.0 to 3.4.5 |
| eth.dst.ig | IG bit | Boolean | 3.2.0 to 3.4.5 |
| eth.dst.lg | LG bit | Boolean | 3.2.0 to 3.4.5 |
| eth.dst.oui | Destination OUI | Unsigned integer, 3 bytes | 3.2.0 to 3.4.5 |
| eth.dst.oui_resolved | Destination OUI (resolved) | Character string | 3.2.0 to 3.4.5 |
| eth.dst_resolved | Destination (resolved) | Character string | 1.12.0 to 3.4.5 |
| eth.fcs | Frame check sequence | Unsigned integer, 4 bytes | 1.8.0 to 3.4.5 |
| eth.fcs.status | FCS Status | Unsigned integer, 1 byte | 2.2.0 to 3.4.5 |
| eth.fcs_bad | Bad checksum | Label | 1.8.0 to 3.4.5 |
| eth.fcs_bad.expert | Expert Info | Label | 1.12.0 to 2.0.16 |
| eth.fcs_good | FCS Good | Boolean | 1.8.0 to 2.0.16 |
| eth.ig | IG bit | Boolean | 1.0.0 to 3.4.5 |
| eth.invalid_lentype | Invalid length/type | Unsigned integer, 2 bytes | 1.8.0 to 3.4.5 |
| eth.invalid_lentype.expert | Invalid length/type | Label | 1.12.3 to 3.4.5 |
| eth.len | Length | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| eth.len.past_end | Length field value goes past the end of the payload | Label | 1.12.0 to 3.4.5 |
| eth.lg | LG bit | Boolean | 1.0.0 to 3.4.5 |
| eth.padding | Padding | Sequence of bytes | 1.8.0 to 3.4.5 |
| eth.padding_bad | Padding identification may be inaccurate and impact trailer dissector | Label | 3.4.0 to 3.4.5 |
| eth.src | Source | Ethernet or other MAC address | 1.0.0 to 3.4.5 |
| eth.src.ig | IG bit | Boolean | 3.2.0 to 3.4.5 |
| eth.src.lg | LG bit | Boolean | 3.2.0 to 3.4.5 |
| eth.src.oui | Source OUI | Unsigned integer, 3 bytes | 3.2.0 to 3.4.5 |
| eth.src.oui_resolved | Source OUI (resolved) | Character string | 3.2.0 to 3.4.5 |
| eth.src_not_group | Source MAC must not be a group address: IEEE 802.3-2002, Section 3.2.3(b) | Label | 1.12.0 to 3.4.5 |
| eth.src_resolved | Source (resolved) | Character string | 1.12.0 to 3.4.5 |
| eth.trailer | Trailer | Sequence of bytes | 1.0.0 to 3.4.5 |
| eth.type | Type | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| eth.vlan.cfi | CFI | Unsigned integer, 2 bytes | 1.6.0 to 1.6.2 |
| eth.vlan.id | VLAN | Unsigned integer, 2 bytes | 1.6.0 to 1.6.2 |
| eth.vlan.pri | Priority | Unsigned integer, 2 bytes | 1.6.0 to 1.6.2 |
| eth.vlan.tpid | Identifier | Unsigned integer, 2 bytes | 1.6.0 to 1.6.2 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance