ethereal-filter(4)

ethereal-filter - Ethereal filter syntax and reference ethereal [other options] [ -R "filter expression" ] tethereal [other options] [ -R "filter expression" ] Ethereal and Tethereal share a powerful filter engine that helps remove the noise from a packet trace and lets you see only the packets that interest you. If a packet meets the requirements expressed in your filter, then it is displayed in the list of packets. Display filters let you compare the fields within a protocol against a specific value, compare fields against fields, and check the existence of specified fields or protocols. Filters are also used by other features such as statistics generation and packet list colorization (the latter is only available to Ethereal). This manual page describes their syntax and provides a comprehensive reference of filter fields.
Check whether a field or protocol exists The simplest filter allows you to check for the existence of a protocol or field. If you want to see all packets which contain the IPX protocol, the filter would be "ipx" (without the quotation marks). To see all packets that contain a Token-Ring RIF field, use "tr.rif". Think of a protocol or field in a filter as implicitly having the "exists" operator. Note: all protocol and field names that are available in Ethereal and Tethereal filters are listed in the FILTER PROTOCOL REFERENCE (see below).
Comparison operators Fields can also be compared against values. The comparison operators can be expressed either through C-like symbols or through English-like abbreviations:

    eq, ==    Equal
    ne, !=    Not Equal
    gt, >     Greater Than
    lt, <     Less Than
    ge, >=    Greater than or Equal to
    le, <=    Less than or Equal to

Search and match operators Additional operators exist expressed only in English, not punctuation:

    contains  Does the protocol, field or slice contain a value
    matches   Does the text string match the given Perl regular expression

The "contains" operator allows a filter to search for a sequence of characters or bytes. For example, to search for a given HTTP URL in a capture, the following filter can be used:

    http contains "http://www.ethereal.com"

The "contains" operator cannot be used on atomic fields, such as numbers or IP addresses. The "matches" operator allows a filter to apply to a specified Perl-compatible regular expression (PCRE). The "matches" operator is only implemented for protocols and for protocol fields with a text string representation. For example, to search for a given WAP WSP User-Agent, you can write:

    wsp.user_agent matches "(?i)cldc"

This example shows an interesting PCRE feature: pattern match options have to be specified with the (?option) construct. For instance, (?i) performs a case-insensitive pattern match. More information on PCRE can be found in the pcrepattern(3) man page (Perl Regular Expressions are explained in http://www.perldoc.com/perl5.8.0/pod/perlre.html). Note: the "matches" operator is only available if Ethereal or Tethereal have been compiled with the PCRE library. This can be checked by running:

    ethereal -v
    tethereal -v

or selecting the "About Ethereal" item from the "Help" menu in Ethereal.
Protocol field types Each protocol field is typed. The types are:

    Unsigned integer (8-bit, 16-bit, 24-bit, or 32-bit)
    Signed integer (8-bit, 16-bit, 24-bit, or 32-bit)
    Boolean
    Ethernet address (6 bytes)
    Byte array
    IPv4 address
    IPv6 address
    IPX network number
    Text string
    Double-precision floating point number

An integer may be expressed in decimal, octal, or hexadecimal notation. The following three display filters are equivalent:

    frame.pkt_len > 10
    frame.pkt_len > 012
    frame.pkt_len > 0xa

Boolean values are either true or false. In a display filter expression testing the value of a Boolean field, "true" is expressed as 1 or any other non-zero value, and "false" is expressed as zero. For example, a token-ring packet's source route field is Boolean. To find any source-routed packets, a display filter would be:

    tr.sr == 1

Non source-routed packets can be found with:

    tr.sr == 0

Ethernet addresses and byte arrays are represented by hex digits. The hex digits may be separated by colons, periods, or hyphens:

    eth.dst eq ff:ff:ff:ff:ff:ff
    aim.data == 0.1.0.d
    fddi.src == aa-aa-aa-aa-aa-aa
    echo.data == 7a

IPv4 addresses can be represented in either dotted decimal notation or by using the hostname:

    ip.dst eq www.mit.edu
    ip.src == 192.168.1.1

IPv4 addresses can be compared with the same logical relations as numbers: eq, ne, gt, ge, lt, and le. The IPv4 address is stored in host order, so you do not have to worry about the endianness of an IPv4 address when using it in a display filter. Classless InterDomain Routing (CIDR) notation can be used to test if an IPv4 address is in a certain subnet. For example, this display filter will find all packets in the 129.111 Class-B network:

    ip.addr == 129.111.0.0/16

Remember, the number after the slash represents the number of bits used to represent the network. CIDR notation can also be used with hostnames, as in this example of finding IP addresses on the same Class C network as 'sneezy':

    ip.addr eq sneezy/24

The CIDR notation can only be used on IP addresses or hostnames, not in variable names. So, a display filter like "ip.src/24 == ip.dst/24" is not valid (yet). IPX networks are represented by unsigned 32-bit integers. Most likely you will be using hexadecimal when testing IPX network values:

    ipx.src.net == 0xc0a82c00

Strings are enclosed in double quotes:

    http.request.method == "POST"

Inside double quotes, you may use a backslash to embed a double quote or an arbitrary byte represented in either octal or hexadecimal.

    browser.comment == "An embedded \" double-quote"

Use of hexadecimal to look for "HEAD":

    http.request.method == "\x48EAD"

Use of octal to look for "HEAD":

    http.request.method == "\110EAD"

This means that you must escape backslashes with backslashes inside double quotes.

    smb.path contains "\\\\SERVER\\SHARE"

looks for \\SERVER\SHARE in "smb.path".
The slice operator You can take a slice of a field if the field is a text string or a byte array. For example, you can filter on the vendor portion of an ethernet address (the first three bytes) like this:

    eth.src[0:3] == 00:00:83

Another example is:

    http.content_type[0:4] == "text"

You can use the slice operator on a protocol name, too. The "frame" protocol can be useful, encompassing all the data captured by Ethereal or Tethereal.

    token[0:5] ne 0.0.0.1.1
    llc[0] eq aa
    frame[100-199] contains "ethereal"

The following syntax governs slices:

    [i:j]    i = start_offset, j = length
    [i-j]    i = start_offset, j = end_offset, inclusive.
    [i]      i = start_offset, length = 1
    [:j]     start_offset = 0, length = j
    [i:]     start_offset = i, end_offset = end_of_field

Offsets can be negative, in which case they indicate the offset from the end of the field. The last byte of the field is at offset -1, the last but one byte is at offset -2, and so on. Here's how to check the last four bytes of a frame:

    frame[-4:4] == 0.1.2.3

or

    frame[-4:] == 0.1.2.3

You can concatenate slices using the comma operator:

    ftp[1,3-5,9:] == 01:03:04:05:09:0a:0b

This concatenates offset 1, offsets 3-5, and offset 9 to the end of the ftp data.
Type conversions If a field is a text string or a byte array, it can be expressed in whichever way is most convenient. So, for instance, the following filters are equivalent:

    http.request.method == "GET"
    http.request.method == 47.45.54

A range can also be expressed in either way:

    frame[60:2] gt 50.51
    frame[60:2] gt "PQ"

Bit field operations It is also possible to define tests with bit field operations. Currently the following bit field operation is supported:

    bitwise_and, &      Bitwise AND

The bitwise AND operation allows testing to see if one or more bits are set. Bitwise AND operates on integer protocol fields and slices. When testing for TCP SYN packets, you can write:

    tcp.flags & 0x02

Similarly, filtering for all WSP GET and extended GET methods is achieved with:

    wsp.pdu_type & 0x40

When using slices, the bit mask must be specified as a byte string, and it must have the same number of bytes as the slice itself, as in:

    ip[42:2] & 40:ff

Logical expressions Tests can be combined using logical expressions. These too are expressable in C-like syntax or with English-like abbreviations:

    and, &&   Logical AND
    or,  ⎪⎪   Logical OR
    not, !    Logical NOT

Expressions can be grouped by parentheses as well. The following are all valid display filter expressions:

    tcp.port == 80 and ip.src == 192.168.2.1
    not llc
    http and frame[100-199] contains "ethereal"
    (ipx.src.net == 0xbad && ipx.src.node == 0.0.0.0.0.1) ⎪⎪ ip

Remember that whenever a protocol or field name occurs in an expression, the "exists" operator is implicitly called. The "exists" operator has the highest priority. This means that the first filter expression must be read as "show me the packets for which tcp.port exists and equals 80, and ip.src exists and equals 192.168.2.1". The second filter expression means "show me the packets where not (llc exists)", or in other words "where llc does not exist" and hence will match all packets that do not contain the llc protocol. The third filter expression includes the constraint that offset 199 in the frame exists, in other words the length of the frame is at least 200. A special caveat must be given regarding fields that occur more than once per packet. "ip.addr" occurs twice per IP packet, once for the source address, and once for the destination address. Likewise, "tr.rif.ring" fields can occur more than once per packet. The following two expressions are not equivalent:

        ip.addr ne 192.168.4.1
    not ip.addr eq 192.168.4.1

The first filter says "show me packets where an ip.addr exists that does not equal 192.168.4.1". That is, as long as one ip.addr in the packet does not equal 192.168.4.1, the packet passes the display filter. The other ip.addr could equal 192.168.4.1 and the packet would still be displayed. The second filter says "don't show me any packets that have an ip.addr field equal to 192.168.4.1". If one ip.addr is 192.168.4.1, the packet does not pass. If neither ip.addr field is 192.168.4.1, then the packet is displayed. It is easy to think of the 'ne' and 'eq' operators as having an implict "exists" modifier when dealing with multiply-recurring fields. "ip.addr ne 192.168.4.1" can be thought of as "there exists an ip.addr that does not equal 192.168.4.1". "not ip.addr eq 192.168.4.1" can be thought of as "there does not exist an ip.addr equal to 192.168.4.1". Be careful with multiply-recurring fields; they can be confusing. Care must also be taken when using the display filter to remove noise from the packet trace. If, for example, you want to filter out all IP multicast packets to address 224.1.2.3, then using:

    ip.dst ne 224.1.2.3

may be too restrictive. Filtering with "ip.dst" selects only those IP packets that satisfy the rule. Any other packets, including all non-IP packets, will not be displayed. To display the non-IP packets as well, you can use one of the following two expressions:

    not ip or ip.dst ne 224.1.2.3
    not ip.addr eq 224.1.2.3

The first filter uses "not ip" to include all non-IP packets and then lets "ip.dst ne 224.1.2.3" filter out the unwanted IP packets. The second filter has already been explained above where filtering with multiply occuring fields was discussed. Each entry below provides an abbreviated protocol or field name. Every one of these fields can be used in a display filter. The type of the field is also given.
3Com XNS Encapsulation (3comxns)

    xnsllc.type  Type
        Unsigned 16-bit integer

3GPP2 A11 (a11)

    a11.ackstat  Reply Status
        Unsigned 8-bit integer
        A11 Registration Ack Status.

    a11.auth.auth  Authenticator
        Byte array
        Authenticator.

    a11.auth.spi  SPI
        Unsigned 32-bit integer
        Authentication Header Security Parameter Index.

    a11.b  Broadcast Datagrams
        Boolean
        Broadcast Datagrams requested

    a11.coa  Care of Address
        IPv4 address
        Care of Address.

    a11.code  Reply Code
        Unsigned 8-bit integer
        A11 Registration Reply code.

    a11.d  Co-lcated Care-of Address
        Boolean
        MN using Co-located Care-of address

    a11.ext.apptype  Application Type
        Unsigned 8-bit integer
        Application Type.

    a11.ext.auth.subtype  Gen Auth Ext SubType
        Unsigned 8-bit integer
        Mobile IP Auth Extension Sub Type.

    a11.ext.canid  CANID
        Byte array
        CANID

    a11.ext.code  Reply Code
        Unsigned 8-bit integer
        PDSN Code.

    a11.ext.dormant  All Dormant Indicator
        Unsigned 16-bit integer
        All Dormant Indicator.

    a11.ext.key  Key
        Unsigned 32-bit integer
        Session Key.

    a11.ext.len  Extension Length
        Unsigned 16-bit integer
        Mobile IP Extension Length.

    a11.ext.mnsrid  MNSR-ID
        Unsigned 16-bit integer
        MNSR-ID

    a11.ext.msid  MSID(BCD)
        Byte array
        MSID(BCD).

    a11.ext.msid_len  MSID Length
        Unsigned 8-bit integer
        MSID Length.

    a11.ext.msid_type  MSID Type
        Unsigned 16-bit integer
        MSID Type.

    a11.ext.panid  PANID
        Byte array
        PANID

    a11.ext.ppaddr  Anchor P-P Address
        IPv4 address
        Anchor P-P Address.

    a11.ext.ptype  Protocol Type
        Unsigned 16-bit integer
        Protocol Type.

    a11.ext.sidver  Session ID Version
        Unsigned 8-bit integer
        Session ID Version

    a11.ext.srvopt  Service Option
        Unsigned 16-bit integer
        Service Option.

    a11.ext.type  Extension Type
        Unsigned 8-bit integer
        Mobile IP Extension Type.

    a11.ext.vid  Vendor ID
        Unsigned 32-bit integer
        Vendor ID.

    a11.extension  Extension
        Byte array
        Extension

    a11.flags  Flags
        Unsigned 8-bit integer

    a11.g  GRE
        Boolean
        MN wants GRE encapsulation

    a11.haaddr  Home Agent
        IPv4 address
        Home agent IP Address.

    a11.homeaddr  Home Address
        IPv4 address
        Mobile Node's home address.

    a11.ident  Identification
        Byte array
        MN Identification.

    a11.life  Lifetime
        Unsigned 16-bit integer
        A11 Registration Lifetime.

    a11.m  Minimal Encapsulation
        Boolean
        MN wants Minimal encapsulation

    a11.nai  NAI
        String
        NAI

    a11.s  Simultaneous Bindings
        Boolean
        Simultaneous Bindings Allowed

    a11.t  Reverse Tunneling
        Boolean
        Reverse tunneling requested

    a11.type  Message Type
        Unsigned 8-bit integer
        A11 Message type.

    a11.v  Van Jacobson
        Boolean
        Van Jacobson

802.1q Virtual LAN (vlan)

    vlan.cfi  CFI
        Unsigned 16-bit integer
        CFI

    vlan.etype  Type
        Unsigned 16-bit integer
        Type

    vlan.id  ID
        Unsigned 16-bit integer
        ID

    vlan.len  Length
        Unsigned 16-bit integer
        Length

    vlan.priority  Priority
        Unsigned 16-bit integer
        Priority

    vlan.trailer  Trailer
        Byte array
        VLAN Trailer

802.1x Authentication (eapol)

    eapol.keydes.data  WPA Key
        Byte array
        WPA Key Data

    eapol.keydes.datalen  WPA Key Length
        Unsigned 16-bit integer
        WPA Key Data Length

    eapol.keydes.id  WPA Key ID
        Byte array
        WPA Key ID(RSN Reserved)

    eapol.keydes.index.indexnum  Index Number
        Unsigned 8-bit integer
        Key Index number

    eapol.keydes.index.keytype  Key Type
        Boolean
        Key Type (unicast/broadcast)

    eapol.keydes.key  Key
        Byte array
        Key

    eapol.keydes.key_info  Key Information
        Unsigned 16-bit integer
        WPA key info

    eapol.keydes.key_info.encr_key_data  Encrypted Key Data flag
        Boolean
        Encrypted Key Data flag

    eapol.keydes.key_info.error  Error flag
        Boolean
        Error flag

    eapol.keydes.key_info.install  Install flag
        Boolean
        Install flag

    eapol.keydes.key_info.key_ack  Key Ack flag
        Boolean
        Key Ack flag

    eapol.keydes.key_info.key_index  Key Index
        Unsigned 16-bit integer
        Key Index (0-3) (RSN: Reserved)

    eapol.keydes.key_info.key_mic  Key MIC flag
        Boolean
        Key MIC flag

    eapol.keydes.key_info.key_type  Key Type
        Boolean
        Key Type (Pairwise or Group)

    eapol.keydes.key_info.keydes_ver  Key Descriptor Version
        Unsigned 16-bit integer
        Key Descriptor Version Type

    eapol.keydes.key_info.request  Request flag
        Boolean
        Request flag

    eapol.keydes.key_info.secure  Secure flag
        Boolean
        Secure flag

    eapol.keydes.key_iv  Key IV
        Byte array
        Key Initialization Vector

    eapol.keydes.key_signature  Key Signature
        Byte array
        Key Signature

    eapol.keydes.keylen  Key Length
        Unsigned 16-bit integer
        Key Length

    eapol.keydes.mic  WPA Key MIC
        Byte array
        WPA Key Message Integrity Check

    eapol.keydes.nonce  Nonce
        Byte array
        WPA Key Nonce

    eapol.keydes.replay_counter  Replay Counter
        Unsigned 64-bit integer
        Replay Counter

    eapol.keydes.rsc  WPA Key RSC
        Byte array
        WPA Key Receive Sequence Counter

    eapol.keydes.type  Descriptor Type
        Unsigned 8-bit integer
        Key Descriptor Type

    eapol.len  Length
        Unsigned 16-bit integer
        Length

    eapol.type  Type
        Unsigned 8-bit integer

    eapol.version  Version
        Unsigned 8-bit integer

AAL type 2 signalling protocol - Capability set 1 (Q.2630.1) (alcap)

    alcap.aal2_path_id  AAL2 path identifier
        Unsigned 32-bit integer

    alcap.channel_id  Channel identifier (CID)
        Unsigned 32-bit integer

    alcap.dsai  Destination signalling association identifier
        Unsigned 32-bit integer

    alcap.len  Length
        Unsigned 8-bit integer

    alcap.msg_type  Message Type
        Unsigned 8-bit integer

    alcap.none  Subtree
        No value

    alcap.nsap_address  NSAP address
        Byte array

    alcap.organizational_unique_id  Organizational unique identifier (OUI)
        Unsigned 24-bit integer

    alcap.osai  Originating signalling association identifier
        Unsigned 32-bit integer

    alcap.param_id  Parameter identifier
        Unsigned 8-bit integer

    alcap.served_user_gen_ref  Served user generated reference
        Unsigned 32-bit integer

ACN (acn)

    acn.pdu  ACN PDU
        No value
        ACN PDU

    acn.pdu.data  Data
        No value
        Data

    acn.pdu.des  des
        Unsigned 8-bit integer
        des

    acn.pdu.destination_cid  Destination CID
        Byte array
        Destination CID

    acn.pdu.destination_ps  Destination PS
        Unsigned 16-bit integer
        Destination PS

    acn.pdu.ext_length_16  Ext Length 16bit
        Unsigned 16-bit integer
        Ext Length 16bit

    acn.pdu.ext_length_32  Ext Length 32bit
        Unsigned 32-bit integer
        Ext Length 32bit

    acn.pdu.flag_p  P
        Unsigned 8-bit integer
        P

    acn.pdu.flag_res  res
        Unsigned 8-bit integer
        res

    acn.pdu.flag_t  T
        Unsigned 8-bit integer
        T

    acn.pdu.flag_z  Z
        Unsigned 8-bit integer
        Z

    acn.pdu.flags  Flags
        Unsigned 8-bit integer
        Flags

    acn.pdu.length  Length
        Unsigned 8-bit integer
        Length

    acn.pdu.padding  Padding
        Unsigned 8-bit integer
        Padding

    acn.pdu.protocol  Protocol
        Unsigned 16-bit integer
        Protocol

    acn.pdu.source_cid  Source CID
        Byte array
        Source CID

    acn.pdu.source_ps  Source PS
        Unsigned 16-bit integer
        Source PS

    acn.pdu.src  src
        Unsigned 8-bit integer
        src

    acn.pdu.type  Type
        Unsigned 16-bit integer
        Type

    acn.pdu.type_dmp  DMP Type
        Unsigned 16-bit integer
        DMP Type

    acn.pdu.type_sdt  SDT Type
        Unsigned 16-bit integer
        SDT Type

    acn.pdu.unknown_data  Unknown Data
        Byte array
        Unknown Data

    acn.sdt.ack_threshold  SDT ACK threshold
        Unsigned 16-bit integer
        SDT ACK threshold

    acn.sdt.downstream_address_type  SDT Downstream address type
        Unsigned 8-bit integer
        SDT Downstream address type

    acn.sdt.downstream_ipv4_address  SDT Donwstream IPv4 Address
        IPv4 address
        SDT Downstream IPv4 Address

    acn.sdt.downstream_ipv6_address  SDT Donwstream IPv6 Address
        IPv6 address
        SDT Downstream IPv6 Address

    acn.sdt.downstream_port  SDT Donwstream Port
        Unsigned 16-bit integer
        SDT Downstream Port

    acn.sdt.flag_d  D
        Unsigned 8-bit integer
        D

    acn.sdt.flag_l  L
        Unsigned 8-bit integer
        L

    acn.sdt.flag_u  U
        Unsigned 8-bit integer
        U

    acn.sdt.flags  SDT Flags
        Unsigned 8-bit integer
        SDT Flags

    acn.sdt.last_rel_seq  SDT Last reliable seq nr
        Unsigned 32-bit integer
        SDT Last reliable seq nr

    acn.sdt.last_rel_wrapper  SDT Last reliable Wrapper
        Unsigned 32-bit integer
        SDT Last reliable Wrapper

    acn.sdt.leader_cid  SDT Leader CID
        Byte array
        SDT Leader CID

    acn.sdt.max_nak_wait_time  SDT Max. NAK wait time
        Unsigned 16-bit integer
        SDT Max. NAK wait time

    acn.sdt.member_cid  SDT Memebr CID
        Byte array
        SDT Member CID

    acn.sdt.mid  SDT Member ID
        Unsigned 16-bit integer
        SDT Member ID

    acn.sdt.nak_holdoff_interval  SDT NAK holdoff interval
        Unsigned 16-bit integer
        SDT NAK holdoff interval

    acn.sdt.nak_modulus  SDT NAK modulus
        Unsigned 16-bit integer
        SDT NAK modulus

    acn.sdt.new_rel_seq  SDT reliable seq nr to continue with
        Unsigned 32-bit integer
        SDT reliable seq nr to continue with

    acn.sdt.nr_lost_wrappers  SDT Nr of lost Wrappers
        Unsigned 32-bit integer
        SDT Nr of lost  Wrappers

    acn.sdt.refuse_code  SDT Refuse code
        Unsigned 16-bit integer
        SDT Refuse Code

    acn.sdt.rel_seq_nr  SDT Rel Seq Nr
        Unsigned 32-bit integer
        SDT Rel Sequence Nr

    acn.sdt.session_exp_time  SDT Session expire time
        Unsigned 16-bit integer
        SDT Session expire time

    acn.sdt.session_nr  SDT Session Nr
        Unsigned 16-bit integer
        SDT Session Nr

    acn.sdt.tot_seq_nr  SDT Total Sequence Nr
        Unsigned 32-bit integer
        SDT Total Sequence Nr

    acn.sdt.unavailable_wrappers  SDT Unavailable Wrappers
        Unsigned 32-bit integer
        SDT Unavailable Wrappers

    acn.sdt.upstream_address_type  SDT Upstream address type
        Unsigned 8-bit integer
        SDT Upstream address type

    acn.sdt.upstream_ipv4_address  SDT Upstream IPv4 Address
        IPv4 address
        SDT Upstream IPv4 Address

    acn.sdt.upstream_ipv6_address  SDT Upstream IPv6 Address
        IPv6 address
        SDT Upstream IPv6 Address

    acn.sdt.upstream_port  SDT Upstream Port
        Unsigned 16-bit integer
        SDT Upstream Port

AFS (4.0) Replication Server call declarations (rep_proc)

    rep_proc.opnum  Operation
        Unsigned 16-bit integer
        Operation

AIM Administrative (aim_admin)

    admin.confirm_status  Confirmation status
        Unsigned 16-bit integer

    aim.acctinfo.code  Account Information Request Code
        Unsigned 16-bit integer

    aim.acctinfo.permissions  Account Permissions
        Unsigned 16-bit integer

AIM Advertisements (aim_adverts)
AIM Buddylist Service (aim_buddylist)
AIM Chat Navigation (aim_chatnav)
AIM Chat Service (aim_chat)
AIM Directory Search (aim_dir)
AIM E-mail (aim_email)
AIM Generic Service (aim_generic)

    aim.client_verification.hash  Client Verification MD5 Hash
        Byte array

    aim.client_verification.length  Client Verification Request Length
        Unsigned 32-bit integer

    aim.client_verification.offset  Client Verification Request Offset
        Unsigned 32-bit integer

    aim.evil.new_warn_level  New warning level
        Unsigned 16-bit integer

    aim.ext_status.data  Extended Status Data
        Byte array

    aim.ext_status.flags  Extended Status Flags
        Unsigned 8-bit integer

    aim.ext_status.length  Extended Status Length
        Unsigned 8-bit integer

    aim.ext_status.type  Extended Status Type
        Unsigned 16-bit integer

    aim.idle_time  Idle time (seconds)
        Unsigned 32-bit integer

    aim.migrate.numfams  Number of families to migrate
        Unsigned 16-bit integer

    aim.privilege_flags  Privilege flags
        Unsigned 32-bit integer

    aim.privilege_flags.allow_idle  Allow other users to see idle time
        Boolean

    aim.privilege_flags.allow_member  Allow other users to see how long account has been a member
        Boolean

    aim.ratechange.msg  Rate Change Message
        Unsigned 16-bit integer

    aim.rateinfo.class.alertlevel  Alert Level
        Unsigned 32-bit integer

    aim.rateinfo.class.clearlevel  Clear Level
        Unsigned 32-bit integer

    aim.rateinfo.class.currentlevel  Current Level
        Unsigned 32-bit integer

    aim.rateinfo.class.curstate  Current State
        Unsigned 8-bit integer

    aim.rateinfo.class.disconnectlevel  Disconnect Level
        Unsigned 32-bit integer

    aim.rateinfo.class.id  Class ID
        Unsigned 16-bit integer

    aim.rateinfo.class.lasttime  Last Time
        Unsigned 32-bit integer

    aim.rateinfo.class.limitlevel  Limit Level
        Unsigned 32-bit integer

    aim.rateinfo.class.maxlevel  Max Level
        Unsigned 32-bit integer

    aim.rateinfo.class.numpairs  Number of Family/Subtype pairs
        Unsigned 16-bit integer

    aim.rateinfo.class.window_size  Window Size
        Unsigned 32-bit integer

    aim.rateinfo.numclasses  Number of Rateinfo Classes
        Unsigned 16-bit integer

    aim.rateinfoack.class  Acknowledged Rate Class
        Unsigned 16-bit integer

    aim.selfinfo.warn_level  Warning level
        Unsigned 16-bit integer

    generic.motd.motdtype  MOTD Type
        Unsigned 16-bit integer

    generic.servicereq.service  Requested Service
        Unsigned 16-bit integer

AIM ICQ (aim_icq)

    aim_icq.chunk_size  Data chunk size
        Unsigned 16-bit integer

    aim_icq.offline_msgs.dropped_flag  Dropped messages flag
        Unsigned 8-bit integer

    aim_icq.owner_uid  Owner UID
        Unsigned 32-bit integer

    aim_icq.request_seq_number  Request Sequence Number
        Unsigned 16-bit integer

    aim_icq.request_type  Request Type
        Unsigned 16-bit integer

    aim_icq.subtype  Meta Request Subtype
        Unsigned 16-bit integer

AIM Invitation Service (aim_invitation)
AIM Location (aim_location)

    aim.snac.location.request_user_info.infotype  Infotype
        Unsigned 16-bit integer

AIM Messaging (aim_messaging)

    aim.evil.warn_level  Old warning level
        Unsigned 16-bit integer

    aim.evilreq.origin  Send Evil Bit As
        Unsigned 16-bit integer

    aim.icbm.channel  Channel to setup
        Unsigned 16-bit integer

    aim.icbm.flags  Message Flags
        Unsigned 32-bit integer

    aim.icbm.max_receiver_warnlevel  max receiver warn level
        Unsigned 16-bit integer

    aim.icbm.max_sender_warn-level  Max sender warn level
        Unsigned 16-bit integer

    aim.icbm.max_snac  Max SNAC Size
        Unsigned 16-bit integer

    aim.icbm.min_msg_interval  Minimum message interval (seconds)
        Unsigned 16-bit integer

    aim.icbm.unknown  Unknown parameter
        Unsigned 16-bit integer

    aim.messaging.channelid  Message Channel ID
        Unsigned 16-bit integer

    aim.messaging.icbmcookie  ICBM Cookie
        Byte array

    aim.notification.channel  Notification Channel
        Unsigned 16-bit integer

    aim.notification.cookie  Notification Cookie
        Byte array

    aim.notification.type  Notification Type
        Unsigned 16-bit integer

    aim.rendezvous.msg_type  Message Type
        Unsigned 16-bit integer

AIM OFT (aim_oft)
AIM Popup (aim_popup)
AIM Privacy Management Service (aim_bos)

    aim.bos.userclass  User class
        Unsigned 32-bit integer

AIM Server Side Info (aim_ssi)

    aim.fnac.ssi.bid  SSI Buddy ID
        Unsigned 16-bit integer

    aim.fnac.ssi.buddyname  Buddy Name
        String

    aim.fnac.ssi.buddyname_len  SSI Buddy Name length
        Unsigned 16-bit integer

    aim.fnac.ssi.data  SSI Buddy Data
        Unsigned 16-bit integer

    aim.fnac.ssi.gid  SSI Buddy Group ID
        Unsigned 16-bit integer

    aim.fnac.ssi.last_change_time  SSI Last Change Time
        Unsigned 32-bit integer

    aim.fnac.ssi.numitems  SSI Object count
        Unsigned 16-bit integer

    aim.fnac.ssi.tlvlen  SSI TLV Len
        Unsigned 16-bit integer

    aim.fnac.ssi.type  SSI Buddy type
        Unsigned 16-bit integer

    aim.fnac.ssi.version  SSI Version
        Unsigned 8-bit integer

AIM Server Side Themes (aim_sst)

    aim.sst.icon  Icon
        Byte array

    aim.sst.icon_size  Icon Size
        Unsigned 16-bit integer

    aim.sst.md5  MD5 Hash
        Byte array

    aim.sst.md5.size  MD5 Hash Size
        Unsigned 8-bit integer

    aim.sst.ref_num  Reference Number
        Unsigned 16-bit integer

    aim.sst.unknown  Unknown Data
        Byte array

AIM Signon (aim_signon)
AIM Statistics (aim_stats)
AIM Translate (aim_translate)
AIM User Lookup (aim_lookup)

    aim.userlookup.email  Email address looked for
        String
        Email address

ANSI A-I/F BSMAP (ansi_a_bsmap)

    ansi_a.bsmap_msgtype  BSMAP Message Type
        Unsigned 8-bit integer

    ansi_a.cell_ci  Cell CI
        Unsigned 16-bit integer

    ansi_a.cell_lac  Cell LAC
        Unsigned 16-bit integer

    ansi_a.cell_mscid  Cell MSCID
        Unsigned 24-bit integer

    ansi_a.cld_party_ascii_num  Called Party ASCII Number
        String

    ansi_a.cld_party_bcd_num  Called Party BCD Number
        String

    ansi_a.clg_party_ascii_num  Calling Party ASCII Number
        String

    ansi_a.clg_party_bcd_num  Calling Party BCD Number
        String

    ansi_a.dtap_msgtype  DTAP Message Type
        Unsigned 8-bit integer

    ansi_a.elem_id  Element ID
        Unsigned 8-bit integer

    ansi_a.esn  ESN
        Unsigned 32-bit integer

    ansi_a.imsi  IMSI
        String

    ansi_a.len  Length
        Unsigned 8-bit integer

    ansi_a.min  MIN
        String

    ansi_a.none  Sub tree
        No value

    ansi_a.pdsn_ip_addr  PDSN IP Address
        IPv4 address
        IP Address

ANSI A-I/F DTAP (ansi_a_dtap)
ANSI IS-637-A (SMS) Teleservice Layer (ansi_637_tele)

    ansi_637.bin_addr  Binary Address
        Byte array

    ansi_637.len  Length
        Unsigned 8-bit integer

    ansi_637.none  Sub tree
        No value

    ansi_637.tele_msg_id  Message ID
        Unsigned 24-bit integer

    ansi_637.tele_msg_rsvd  Reserved
        Unsigned 24-bit integer

    ansi_637.tele_msg_type  Message Type
        Unsigned 24-bit integer

    ansi_637.tele_subparam_id  Teleservice Subparam ID
        Unsigned 8-bit integer

    ansi_637.trans_msg_type  Message Type
        Unsigned 24-bit integer

    ansi_637.trans_param_id  Transport Param ID
        Unsigned 8-bit integer

ANSI IS-637-A (SMS) Transport Layer (ansi_637_trans)
ANSI IS-683-A (OTA (Mobile)) (ansi_683)

    ansi_683.for_msg_type  Forward Link Message Type
        Unsigned 8-bit integer

    ansi_683.len  Length
        Unsigned 8-bit integer

    ansi_683.none  Sub tree
        No value

    ansi_683.rev_msg_type  Reverse Link Message Type
        Unsigned 8-bit integer

ANSI IS-801 (Location Services (PLD)) (ansi_801)

    ansi_801.for_req_type  Forward Request Type
        Unsigned 8-bit integer

    ansi_801.for_rsp_type  Forward Response Type
        Unsigned 8-bit integer

    ansi_801.for_sess_tag  Forward Session Tag
        Unsigned 8-bit integer

    ansi_801.rev_req_type  Reverse Request Type
        Unsigned 8-bit integer

    ansi_801.rev_rsp_type  Reverse Response Type
        Unsigned 8-bit integer

    ansi_801.rev_sess_tag  Reverse Session Tag
        Unsigned 8-bit integer

    ansi_801.sess_tag  Session Tag
        Unsigned 8-bit integer

ANSI Mobile Application Part (ansi_map)

    ansi_map.id  Value
        Unsigned 8-bit integer

    ansi_map.ios401_elem_id  IOS 4.0.1 Element ID
        No value

    ansi_map.len  Length
        Unsigned 8-bit integer

    ansi_map.oprcode  Operation Code
        Signed 32-bit integer

    ansi_map.param_id  Param ID
        Unsigned 32-bit integer

    ansi_map.tag  Tag
        Unsigned 8-bit integer

AOL Instant Messenger (aim)

    aim.authcookie  Authentication Cookie
        Byte array

    aim.buddyname  Buddy Name
        String

    aim.buddynamelen  Buddyname len
        Unsigned 8-bit integer

    aim.channel  Channel ID
        Unsigned 8-bit integer

    aim.cmd_start  Command Start
        Unsigned 8-bit integer

    aim.data  Data
        Byte array

    aim.datalen  Data Field Length
        Unsigned 16-bit integer

    aim.dcinfo.addr  Internal IP address
        IPv4 address

    aim.dcinfo.auth_cookie  Authorization Cookie
        Byte array

    aim.dcinfo.client_futures  Client Futures
        Unsigned 32-bit integer

    aim.dcinfo.last_ext_info_update  Last Extended Info Update
        Unsigned 32-bit integer

    aim.dcinfo.last_ext_status_update  Last Extended Status Update
        Unsigned 32-bit integer

    aim.dcinfo.last_info_update  Last Info Update
        Unsigned 32-bit integer

    aim.dcinfo.proto_version  Protocol Version
        Unsigned 16-bit integer

    aim.dcinfo.tcpport  TCP Port
        Unsigned 32-bit integer

    aim.dcinfo.type  Type
        Unsigned 8-bit integer

    aim.dcinfo.unknown  Unknown
        Unsigned 16-bit integer

    aim.dcinfo.webport  Web Front Port
        Unsigned 32-bit integer

    aim.fnac.family  FNAC Family ID
        Unsigned 16-bit integer

    aim.fnac.flags  FNAC Flags
        Unsigned 16-bit integer

    aim.fnac.flags.contains_version  Contains Version of Family this SNAC is in
        Boolean

    aim.fnac.flags.next_is_related  Followed By SNAC with related information
        Boolean

    aim.fnac.id  FNAC ID
        Unsigned 32-bit integer

    aim.fnac.subtype  FNAC Subtype ID
        Unsigned 16-bit integer

    aim.infotype  Infotype
        Unsigned 16-bit integer

    aim.messageblock.charset  Block Character set
        Unsigned 16-bit integer

    aim.messageblock.charsubset  Block Character subset
        Unsigned 16-bit integer

    aim.messageblock.features  Features
        Byte array

    aim.messageblock.featuresdes  Features
        Unsigned 16-bit integer

    aim.messageblock.featureslen  Features Length
        Unsigned 16-bit integer

    aim.messageblock.info  Block info
        Unsigned 16-bit integer

    aim.messageblock.length  Block length
        Unsigned 16-bit integer

    aim.messageblock.message  Message
        String

    aim.seqno  Sequence Number
        Unsigned 16-bit integer

    aim.signon.challenge  Signon challenge
        String

    aim.signon.challengelen  Signon challenge length
        Unsigned 16-bit integer

    aim.snac.error  SNAC Error
        Unsigned 16-bit integer

    aim.tlvcount  TLV Count
        Unsigned 16-bit integer

    aim.userclass.administrator  AOL Administrator flag
        Boolean

    aim.userclass.away  AOL away status flag
        Boolean

    aim.userclass.commercial  AOL commercial account flag
        Boolean

    aim.userclass.icq  ICQ user sign
        Boolean

    aim.userclass.noncommercial  ICQ non-commercial account flag
        Boolean

    aim.userclass.staff  AOL Staff User Flag
        Boolean

    aim.userclass.unconfirmed  AOL Unconfirmed user flag
        Boolean

    aim.userclass.unknown100  Unknown bit
        Boolean

    aim.userclass.unknown200  Unknown bit
        Boolean

    aim.userclass.unknown400  Unknown bit
        Boolean

    aim.userclass.unknown800  Unknown bit
        Boolean

    aim.userclass.wireless  AOL wireless user
        Boolean

    aim.userinfo.warninglevel  Warning Level
        Unsigned 16-bit integer

ARCNET (arcnet)

    arcnet.dst  Dest
        Unsigned 8-bit integer
        Dest ID

    arcnet.exception_flag  Exception Flag
        Unsigned 8-bit integer
        Exception flag

    arcnet.offset  Offset
        Byte array
        Offset

    arcnet.protID  Protocol ID
        Unsigned 8-bit integer
        Proto type

    arcnet.sequence  Sequence
        Unsigned 16-bit integer
        Sequence number

    arcnet.split_flag  Split Flag
        Unsigned 8-bit integer
        Split flag

    arcnet.src  Source
        Unsigned 8-bit integer
        Source ID

ASN.1 decoding (asn1)
ATAoverEthernet (aoe)

    aoe.aflags.a  A
        Boolean
        Whether this is an asynchronous write or not

    aoe.aflags.d  D
        Boolean

    aoe.aflags.e  E
        Boolean
        Whether this is a normal or LBA48 command

    aoe.aflags.w  W
        Boolean
        Is this a command writing data to the device or not

    aoe.ata.cmd  ATA Cmd
        Unsigned 8-bit integer
        ATA command opcode

    aoe.ata.status  ATA Status
        Unsigned 8-bit integer
        ATA status bits

    aoe.cmd  Command
        Unsigned 8-bit integer
        AOE Command

    aoe.err_feature  Err/Feature
        Unsigned 8-bit integer
        Err/Feature

    aoe.error  Error
        Unsigned 8-bit integer
        Error code

    aoe.lba  Lba
        Unsigned 64-bit integer
        Lba address

    aoe.major  Major
        Unsigned 16-bit integer
        Major address

    aoe.minor  Minor
        Unsigned 8-bit integer
        Minor address

    aoe.response  Response flag
        Boolean
        Whether this is a response PDU or not

    aoe.response_in  Response In
        Frame number
        The response to this packet is in this frame

    aoe.response_to  Response To
        Frame number
        This is a response to the ATA command in this frame

    aoe.sector_count  Sector Count
        Unsigned 8-bit integer
        Sector Count

    aoe.tag  Tag
        Unsigned 32-bit integer
        Command Tag

    aoe.time  Time from request
        Time duration
        Time between Request and Reply for ATA calls

    aoe.version  Version
        Unsigned 8-bit integer
        Version of the AOE protocol

ATM (atm)

    atm.aal  AAL
        Unsigned 8-bit integer

    atm.vci  VCI
        Unsigned 16-bit integer

    atm.vpi  VPI
        Unsigned 8-bit integer

ATM AAL1 (aal1)
ATM AAL3/4 (aal3_4)
ATM LAN Emulation (lane)
ATM OAM AAL (oamaal)
AVS WLAN Capture header (wlancap)

    wlancap.antenna  Antenna
        Unsigned 32-bit integer

    wlancap.channel  Channel
        Unsigned 32-bit integer

    wlancap.datarate  Data rate
        Unsigned 32-bit integer

    wlancap.encoding  Encoding Type
        Unsigned 32-bit integer

    wlancap.hosttime  Host timestamp
        Unsigned 64-bit integer

    wlancap.length  Header length
        Unsigned 32-bit integer

    wlancap.mactime  MAC timestamp
        Unsigned 64-bit integer

    wlancap.phytype  PHY type
        Unsigned 32-bit integer

    wlancap.preamble  Preamble
        Unsigned 32-bit integer

    wlancap.priority  Priority
        Unsigned 32-bit integer

    wlancap.ssi_noise  SSI Noise
        Signed 32-bit integer

    wlancap.ssi_signal  SSI Signal
        Signed 32-bit integer

    wlancap.ssi_type  SSI Type
        Unsigned 32-bit integer

    wlancap.version  Header revision
        Unsigned 32-bit integer

AX/4000 Test Block (ax4000)

    ax4000.chassis  Chassis Number
        Unsigned 8-bit integer

    ax4000.crc  CRC (unchecked)
        Unsigned 16-bit integer

    ax4000.fill  Fill Type
        Unsigned 8-bit integer

    ax4000.index  Index
        Unsigned 16-bit integer

    ax4000.port  Port Number
        Unsigned 8-bit integer

    ax4000.seq  Sequence Number
        Unsigned 32-bit integer

    ax4000.timestamp  Timestamp
        Unsigned 32-bit integer

Ad hoc On-demand Distance Vector Routing Protocol (aodv)

    aodv.dest_ip  Destination IP
        IPv4 address
        Destination IP Address

    aodv.dest_ipv6  Destination IPv6
        IPv6 address
        Destination IPv6 Address

    aodv.dest_seqno  Destination Sequence Number
        Unsigned 32-bit integer
        Destination Sequence Number

    aodv.destcount  Destination Count
        Unsigned 8-bit integer
        Unreachable Destinations Count

    aodv.ext_length  Extension Length
        Unsigned 8-bit integer
        Extension Data Length

    aodv.ext_type  Extension Type
        Unsigned 8-bit integer
        Extension Format Type

    aodv.flags  Flags
        Unsigned 16-bit integer
        Flags

    aodv.flags.rerr_nodelete  RERR No Delete
        Boolean

    aodv.flags.rrep_ack  RREP Acknowledgement
        Boolean

    aodv.flags.rrep_repair  RREP Repair
        Boolean

    aodv.flags.rreq_destinationonly  RREQ Destination only
        Boolean

    aodv.flags.rreq_gratuitous  RREQ Gratuitous RREP
        Boolean

    aodv.flags.rreq_join  RREQ Join
        Boolean

    aodv.flags.rreq_repair  RREQ Repair
        Boolean

    aodv.flags.rreq_unknown  RREQ Unknown Sequence Number
        Boolean

    aodv.hello_interval  Hello Interval
        Unsigned 32-bit integer
        Hello Interval Extension

    aodv.hopcount  Hop Count
        Unsigned 8-bit integer
        Hop Count

    aodv.lifetime  Lifetime
        Unsigned 32-bit integer
        Lifetime

    aodv.orig_ip  Originator IP
        IPv4 address
        Originator IP Address

    aodv.orig_ipv6  Originator IPv6
        IPv6 address
        Originator IPv6 Address

    aodv.orig_seqno  Originator Sequence Number
        Unsigned 32-bit integer
        Originator Sequence Number

    aodv.prefix_sz  Prefix Size
        Unsigned 8-bit integer
        Prefix Size

    aodv.rreq_id  RREQ Id
        Unsigned 32-bit integer
        RREQ Id

    aodv.timestamp  Timestamp
        Unsigned 64-bit integer
        Timestamp Extension

    aodv.type  Type
        Unsigned 8-bit integer
        AODV packet type

    aodv.unreach_dest_ip  Unreachable Destination IP
        IPv4 address
        Unreachable Destination IP Address

    aodv.unreach_dest_ipv6  Unreachable Destination IPv6
        IPv6 address
        Unreachable Destination IPv6 Address

    aodv.unreach_dest_seqno  Unreachable Destination Sequence Number
        Unsigned 32-bit integer
        Unreachable Destination Sequence Number

Adaptive Multi-Rate (amr)

    amr.cmr  CMR
        Unsigned 8-bit integer
        codec mode request

    amr.reserved  Reserved
        Unsigned 8-bit integer
        Reserved bits

    amr.toc.f  F bit
        Boolean
        F bit

    amr.toc.ft  FT bits
        Unsigned 8-bit integer
        FT bits

    amr.toc.q  Q bit
        Boolean
        Frame quality indicator bit

Address Resolution Protocol (arp)

    arp.dst.atm_num_e164  Target ATM number (E.164)
        String

    arp.dst.atm_num_nsap  Target ATM number (NSAP)
        Byte array

    arp.dst.atm_subaddr  Target ATM subaddress
        Byte array

    arp.dst.hlen  Target ATM number length
        Unsigned 8-bit integer

    arp.dst.htype  Target ATM number type
        Boolean

    arp.dst.hw  Target hardware address
        Byte array

    arp.dst.hw_mac  Target MAC address
        6-byte Hardware (MAC) Address

    arp.dst.pln  Target protocol size
        Unsigned 8-bit integer

    arp.dst.proto  Target protocol address
        Byte array

    arp.dst.proto_ipv4  Target IP address
        IPv4 address

    arp.dst.slen  Target ATM subaddress length
        Unsigned 8-bit integer

    arp.dst.stype  Target ATM subaddress type
        Boolean

    arp.hw.size  Hardware size
        Unsigned 8-bit integer

    arp.hw.type  Hardware type
        Unsigned 16-bit integer

    arp.opcode  Opcode
        Unsigned 16-bit integer

    arp.proto.size  Protocol size
        Unsigned 8-bit integer

    arp.proto.type  Protocol type
        Unsigned 16-bit integer

    arp.src.atm_num_e164  Sender ATM number (E.164)
        String

    arp.src.atm_num_nsap  Sender ATM number (NSAP)
        Byte array

    arp.src.atm_subaddr  Sender ATM subaddress
        Byte array

    arp.src.hlen  Sender ATM number length
        Unsigned 8-bit integer

    arp.src.htype  Sender ATM number type
        Boolean

    arp.src.hw  Sender hardware address
        Byte array

    arp.src.hw_mac  Sender MAC address
        6-byte Hardware (MAC) Address

    arp.src.pln  Sender protocol size
        Unsigned 8-bit integer

    arp.src.proto  Sender protocol address
        Byte array

    arp.src.proto_ipv4  Sender IP address
        IPv4 address

    arp.src.slen  Sender ATM subaddress length
        Unsigned 8-bit integer

    arp.src.stype  Sender ATM subaddress type
        Boolean

AgentX (agentx)

    agentx.c.reason  Reason
        Unsigned 8-bit integer
        close reason

    agentx.flags  Flags          
        Unsigned 8-bit integer
        header type

    agentx.gb.mrepeat  Max Repetition
        Unsigned 16-bit integer
        getBulk Max repetition

    agentx.gb.nrepeat  Repeaters
        Unsigned 16-bit integer
        getBulk Num. repeaters

    agentx.n_subid  Number subids 
        Unsigned 8-bit integer
        Number subids

    agentx.o.timeout  Timeout
        Unsigned 8-bit integer
        open timeout

    agentx.oid  OID
        String
        OID

    agentx.oid_include  OID include   
        Unsigned 8-bit integer
        OID include

    agentx.oid_prefix  OID prefix    
        Unsigned 8-bit integer
        OID prefix

    agentx.ostring  Octet String
        String
        Octet String

    agentx.ostring_len  OString len
        Unsigned 32-bit integer
        Octet String Length

    agentx.packet_id  PacketID       
        Unsigned 32-bit integer
        Packet ID

    agentx.payload_len  Payload length 
        Unsigned 32-bit integer
        Payload length

    agentx.r.error  Resp. error
        Unsigned 16-bit integer
        response error

    agentx.r.index  Resp. index
        Unsigned 16-bit integer
        response index

    agentx.r.priority  Priority
        Unsigned 8-bit integer
        Register Priority

    agentx.r.range_subid  Range_subid
        Unsigned 8-bit integer
        Register range_subid

    agentx.r.timeout  Timeout
        Unsigned 8-bit integer
        Register timeout

    agentx.r.upper_bound  Upper bound
        Unsigned 32-bit integer
        Register upper bound

    agentx.r.uptime  sysUpTime
        Unsigned 32-bit integer
        sysUpTime

    agentx.session_id  sessionID      
        Unsigned 32-bit integer
        Session ID

    agentx.transaction_id  TransactionID  
        Unsigned 32-bit integer
        Transaction ID

    agentx.type  Type           
        Unsigned 8-bit integer
        header type

    agentx.u.priority  Priority
        Unsigned 8-bit integer
        Unegister Priority

    agentx.u.range_subid  Range_subid
        Unsigned 8-bit integer
        Unegister range_subid

    agentx.u.timeout  Timeout
        Unsigned 8-bit integer
        Unregister timeout

    agentx.u.upper_bound  Upper bound
        Unsigned 32-bit integer
        Register upper bound

    agentx.v.tag  Variable type
        Unsigned 16-bit integer
        vtag

    agentx.v.val32  Value(32)
        Unsigned 32-bit integer
        val32

    agentx.v.val64  Value(64)
        Unsigned 64-bit integer
        val64

    agentx.version  Version        
        Unsigned 8-bit integer
        header version

Aggregate Server Access Protocol (asap)

    asap.cause_code  Cause code
        Unsigned 16-bit integer

    asap.cause_info  Cause info
        Byte array

    asap.cause_length  Cause length
        Unsigned 16-bit integer

    asap.cause_padding  Padding
        Byte array

    asap.cookie  Cookie
        Byte array

    asap.ipv4_address  IP Version 4 address
        IPv4 address

    asap.ipv6_address  IP Version 6 address
        IPv6 address

    asap.message_flags  Flags
        Unsigned 8-bit integer

    asap.message_length  Length
        Unsigned 16-bit integer

    asap.message_type  Type
        Unsigned 8-bit integer

    asap.parameter_length  Parameter length
        Unsigned 16-bit integer

    asap.parameter_padding  Padding
        Byte array

    asap.parameter_type  Parameter Type
        Unsigned 16-bit integer

    asap.parameter_value  Parameter value
        Byte array

    asap.pe_checksum  PE checksum
        Unsigned 32-bit integer

    asap.pe_identifier  PE identifier
        Unsigned 32-bit integer

    asap.pool_element_home_enrp_server_identifier  Home ENRP server identifier
        Unsigned 32-bit integer

    asap.pool_element_pe_identifier  PE identifier
        Unsigned 32-bit integer

    asap.pool_element_registration_life  Registration life
        Signed 32-bit integer

    asap.pool_handle_pool_handle  Pool handle
        Byte array

    asap.pool_member_slection_policy_type  Policy type
        Unsigned 8-bit integer

    asap.pool_member_slection_policy_value  Policy value
        Signed 24-bit integer

    asap.sctp_transport_port  Port
        Unsigned 16-bit integer

    asap.server_information_m_bit  M-Bit
        Boolean

    asap.server_information_reserved  Reserved
        Unsigned 32-bit integer

    asap.server_information_server_identifier  Server identifier
        Unsigned 32-bit integer

    asap.tcp_transport_port  Port
        Unsigned 16-bit integer

    asap.transport_use  Transport use
        Unsigned 16-bit integer

    asap.udp_transport_port  Port
        Unsigned 16-bit integer

    asap.udp_transport_reserved  Reserved
        Unsigned 16-bit integer

Alert Standard Forum (asf)

    asf.iana  IANA Enterprise Number
        Unsigned 32-bit integer
        ASF IANA Enterprise Number

    asf.len  Data Length
        Unsigned 8-bit integer
        ASF Data Length

    asf.tag  Message Tag
        Unsigned 8-bit integer
        ASF Message Tag

    asf.type  Message Type
        Unsigned 8-bit integer
        ASF Message Type

Alteon - Transparent Proxy Cache Protocol (tpcp)

    tpcp.caddr  Client Source IP address
        IPv4 address

    tpcp.cid  Client indent
        Unsigned 16-bit integer

    tpcp.cport  Client Source Port
        Unsigned 16-bit integer

    tpcp.flags.redir  No Redirect
        Boolean
        Don't redirect client

    tpcp.flags.tcp  UDP/TCP
        Boolean
        Protocol type

    tpcp.flags.xoff  XOFF
        Boolean

    tpcp.flags.xon  XON
        Boolean

    tpcp.rasaddr  RAS server IP address
        IPv4 address

    tpcp.saddr  Server IP address
        IPv4 address

    tpcp.type  Type
        Unsigned 8-bit integer
        PDU type

    tpcp.vaddr  Virtual Server IP address
        IPv4 address

    tpcp.version  Version
        Unsigned 8-bit integer
        TPCP version

Andrew File System (AFS) (afs)

    afs.backup  Backup
        Boolean
        Backup Server

    afs.backup.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.backup.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.bos  BOS
        Boolean
        Basic Oversee Server

    afs.bos.baktime  Backup Time
        Date/Time stamp
        Backup Time

    afs.bos.cell  Cell
        String
        Cell

    afs.bos.cmd  Command
        String
        Command

    afs.bos.content  Content
        String
        Content

    afs.bos.data  Data
        Byte array
        Data

    afs.bos.date  Date
        Unsigned 32-bit integer
        Date

    afs.bos.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.bos.error  Error
        String
        Error

    afs.bos.file  File
        String
        File

    afs.bos.flags  Flags
        Unsigned 32-bit integer
        Flags

    afs.bos.host  Host
        String
        Host

    afs.bos.instance  Instance
        String
        Instance

    afs.bos.key  Key
        Byte array
        key

    afs.bos.keychecksum  Key Checksum
        Unsigned 32-bit integer
        Key Checksum

    afs.bos.keymodtime  Key Modification Time
        Date/Time stamp
        Key Modification Time

    afs.bos.keyspare2  Key Spare 2
        Unsigned 32-bit integer
        Key Spare 2

    afs.bos.kvno  Key Version Number
        Unsigned 32-bit integer
        Key Version Number

    afs.bos.newtime  New Time
        Date/Time stamp
        New Time

    afs.bos.number  Number
        Unsigned 32-bit integer
        Number

    afs.bos.oldtime  Old Time
        Date/Time stamp
        Old Time

    afs.bos.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.bos.parm  Parm
        String
        Parm

    afs.bos.path  Path
        String
        Path

    afs.bos.size  Size
        Unsigned 32-bit integer
        Size

    afs.bos.spare1  Spare1
        String
        Spare1

    afs.bos.spare2  Spare2
        String
        Spare2

    afs.bos.spare3  Spare3
        String
        Spare3

    afs.bos.status  Status
        Signed 32-bit integer
        Status

    afs.bos.statusdesc  Status Description
        String
        Status Description

    afs.bos.type  Type
        String
        Type

    afs.bos.user  User
        String
        User

    afs.cb  Callback
        Boolean
        Callback

    afs.cb.callback.expires  Expires
        Date/Time stamp
        Expires

    afs.cb.callback.type  Type
        Unsigned 32-bit integer
        Type

    afs.cb.callback.version  Version
        Unsigned 32-bit integer
        Version

    afs.cb.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.cb.fid.uniq  FileID (Uniqifier)
        Unsigned 32-bit integer
        File ID (Uniqifier)

    afs.cb.fid.vnode  FileID (VNode)
        Unsigned 32-bit integer
        File ID (VNode)

    afs.cb.fid.volume  FileID (Volume)
        Unsigned 32-bit integer
        File ID (Volume)

    afs.cb.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.error  Error
        Boolean
        Error

    afs.error.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.fs  File Server
        Boolean
        File Server

    afs.fs.acl.a  _A_dminister
        Boolean
        Administer

    afs.fs.acl.count.negative  ACL Count (Negative)
        Unsigned 32-bit integer
        Number of Negative ACLs

    afs.fs.acl.count.positive  ACL Count (Positive)
        Unsigned 32-bit integer
        Number of Positive ACLs

    afs.fs.acl.d  _D_elete
        Boolean
        Delete

    afs.fs.acl.datasize  ACL Size
        Unsigned 32-bit integer
        ACL Data Size

    afs.fs.acl.entity  Entity (User/Group)
        String
        ACL Entity (User/Group)

    afs.fs.acl.i  _I_nsert
        Boolean
        Insert

    afs.fs.acl.k  _L_ock
        Boolean
        Lock

    afs.fs.acl.l  _L_ookup
        Boolean
        Lookup

    afs.fs.acl.r  _R_ead
        Boolean
        Read

    afs.fs.acl.w  _W_rite
        Boolean
        Write

    afs.fs.callback.expires  Expires
        Time duration
        Expires

    afs.fs.callback.type  Type
        Unsigned 32-bit integer
        Type

    afs.fs.callback.version  Version
        Unsigned 32-bit integer
        Version

    afs.fs.cps.spare1  CPS Spare1
        Unsigned 32-bit integer
        CPS Spare1

    afs.fs.cps.spare2  CPS Spare2
        Unsigned 32-bit integer
        CPS Spare2

    afs.fs.cps.spare3  CPS Spare3
        Unsigned 32-bit integer
        CPS Spare3

    afs.fs.data  Data
        Byte array
        Data

    afs.fs.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.fs.fid.uniq  FileID (Uniqifier)
        Unsigned 32-bit integer
        File ID (Uniqifier)

    afs.fs.fid.vnode  FileID (VNode)
        Unsigned 32-bit integer
        File ID (VNode)

    afs.fs.fid.volume  FileID (Volume)
        Unsigned 32-bit integer
        File ID (Volume)

    afs.fs.flength  FLength
        Unsigned 32-bit integer
        FLength

    afs.fs.flength64  FLength64
        Unsigned 64-bit integer
        FLength64

    afs.fs.length  Length
        Unsigned 32-bit integer
        Length

    afs.fs.length64  Length64
        Unsigned 64-bit integer
        Length64

    afs.fs.motd  Message of the Day
        String
        Message of the Day

    afs.fs.name  Name
        String
        Name

    afs.fs.newname  New Name
        String
        New Name

    afs.fs.offlinemsg  Offline Message
        String
        Volume Name

    afs.fs.offset  Offset
        Unsigned 32-bit integer
        Offset

    afs.fs.offset64  Offset64
        Unsigned 64-bit integer
        Offset64

    afs.fs.oldname  Old Name
        String
        Old Name

    afs.fs.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.fs.status.anonymousaccess  Anonymous Access
        Unsigned 32-bit integer
        Anonymous Access

    afs.fs.status.author  Author
        Unsigned 32-bit integer
        Author

    afs.fs.status.calleraccess  Caller Access
        Unsigned 32-bit integer
        Caller Access

    afs.fs.status.clientmodtime  Client Modification Time
        Date/Time stamp
        Client Modification Time

    afs.fs.status.dataversion  Data Version
        Unsigned 32-bit integer
        Data Version

    afs.fs.status.dataversionhigh  Data Version (High)
        Unsigned 32-bit integer
        Data Version (High)

    afs.fs.status.filetype  File Type
        Unsigned 32-bit integer
        File Type

    afs.fs.status.group  Group
        Unsigned 32-bit integer
        Group

    afs.fs.status.interfaceversion  Interface Version
        Unsigned 32-bit integer
        Interface Version

    afs.fs.status.length  Length
        Unsigned 32-bit integer
        Length

    afs.fs.status.linkcount  Link Count
        Unsigned 32-bit integer
        Link Count

    afs.fs.status.mask  Mask
        Unsigned 32-bit integer
        Mask

    afs.fs.status.mask.fsync  FSync
        Boolean
        FSync

    afs.fs.status.mask.setgroup  Set Group
        Boolean
        Set Group

    afs.fs.status.mask.setmode  Set Mode
        Boolean
        Set Mode

    afs.fs.status.mask.setmodtime  Set Modification Time
        Boolean
        Set Modification Time

    afs.fs.status.mask.setowner  Set Owner
        Boolean
        Set Owner

    afs.fs.status.mask.setsegsize  Set Segment Size
        Boolean
        Set Segment Size

    afs.fs.status.mode  Unix Mode
        Unsigned 32-bit integer
        Unix Mode

    afs.fs.status.owner  Owner
        Unsigned 32-bit integer
        Owner

    afs.fs.status.parentunique  Parent Unique
        Unsigned 32-bit integer
        Parent Unique

    afs.fs.status.parentvnode  Parent VNode
        Unsigned 32-bit integer
        Parent VNode

    afs.fs.status.segsize  Segment Size
        Unsigned 32-bit integer
        Segment Size

    afs.fs.status.servermodtime  Server Modification Time
        Date/Time stamp
        Server Modification Time

    afs.fs.status.spare2  Spare 2
        Unsigned 32-bit integer
        Spare 2

    afs.fs.status.spare3  Spare 3
        Unsigned 32-bit integer
        Spare 3

    afs.fs.status.spare4  Spare 4
        Unsigned 32-bit integer
        Spare 4

    afs.fs.status.synccounter  Sync Counter
        Unsigned 32-bit integer
        Sync Counter

    afs.fs.symlink.content  Symlink Content
        String
        Symlink Content

    afs.fs.symlink.name  Symlink Name
        String
        Symlink Name

    afs.fs.timestamp  Timestamp
        Date/Time stamp
        Timestamp

    afs.fs.token  Token
        Byte array
        Token

    afs.fs.viceid  Vice ID
        Unsigned 32-bit integer
        Vice ID

    afs.fs.vicelocktype  Vice Lock Type
        Unsigned 32-bit integer
        Vice Lock Type

    afs.fs.volid  Volume ID
        Unsigned 32-bit integer
        Volume ID

    afs.fs.volname  Volume Name
        String
        Volume Name

    afs.fs.volsync.spare1  Volume Creation Timestamp
        Date/Time stamp
        Volume Creation Timestamp

    afs.fs.volsync.spare2  Spare 2
        Unsigned 32-bit integer
        Spare 2

    afs.fs.volsync.spare3  Spare 3
        Unsigned 32-bit integer
        Spare 3

    afs.fs.volsync.spare4  Spare 4
        Unsigned 32-bit integer
        Spare 4

    afs.fs.volsync.spare5  Spare 5
        Unsigned 32-bit integer
        Spare 5

    afs.fs.volsync.spare6  Spare 6
        Unsigned 32-bit integer
        Spare 6

    afs.fs.xstats.clientversion  Client Version
        Unsigned 32-bit integer
        Client Version

    afs.fs.xstats.collnumber  Collection Number
        Unsigned 32-bit integer
        Collection Number

    afs.fs.xstats.timestamp  XStats Timestamp
        Unsigned 32-bit integer
        XStats Timestamp

    afs.fs.xstats.version  XStats Version
        Unsigned 32-bit integer
        XStats Version

    afs.kauth  KAuth
        Boolean
        Kerberos Auth Server

    afs.kauth.data  Data
        Byte array
        Data

    afs.kauth.domain  Domain
        String
        Domain

    afs.kauth.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.kauth.kvno  Key Version Number
        Unsigned 32-bit integer
        Key Version Number

    afs.kauth.name  Name
        String
        Name

    afs.kauth.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.kauth.princ  Principal
        String
        Principal

    afs.kauth.realm  Realm
        String
        Realm

    afs.prot  Protection
        Boolean
        Protection Server

    afs.prot.count  Count
        Unsigned 32-bit integer
        Count

    afs.prot.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.prot.flag  Flag
        Unsigned 32-bit integer
        Flag

    afs.prot.gid  Group ID
        Unsigned 32-bit integer
        Group ID

    afs.prot.id  ID
        Unsigned 32-bit integer
        ID

    afs.prot.maxgid  Maximum Group ID
        Unsigned 32-bit integer
        Maximum Group ID

    afs.prot.maxuid  Maximum User ID
        Unsigned 32-bit integer
        Maximum User ID

    afs.prot.name  Name
        String
        Name

    afs.prot.newid  New ID
        Unsigned 32-bit integer
        New ID

    afs.prot.oldid  Old ID
        Unsigned 32-bit integer
        Old ID

    afs.prot.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.prot.pos  Position
        Unsigned 32-bit integer
        Position

    afs.prot.uid  User ID
        Unsigned 32-bit integer
        User ID

    afs.repframe  Reply Frame
        Frame number
        Reply Frame

    afs.reqframe  Request Frame
        Frame number
        Request Frame

    afs.rmtsys  Rmtsys
        Boolean
        Rmtsys

    afs.rmtsys.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.time  Time from request
        Time duration
        Time between Request and Reply for AFS calls

    afs.ubik  Ubik
        Boolean
        Ubik

    afs.ubik.activewrite  Active Write
        Unsigned 32-bit integer
        Active Write

    afs.ubik.addr  Address
        IPv4 address
        Address

    afs.ubik.amsyncsite  Am Sync Site
        Unsigned 32-bit integer
        Am Sync Site

    afs.ubik.anyreadlocks  Any Read Locks
        Unsigned 32-bit integer
        Any Read Locks

    afs.ubik.anywritelocks  Any Write Locks
        Unsigned 32-bit integer
        Any Write Locks

    afs.ubik.beaconsincedown  Beacon Since Down
        Unsigned 32-bit integer
        Beacon Since Down

    afs.ubik.currentdb  Current DB
        Unsigned 32-bit integer
        Current DB

    afs.ubik.currenttran  Current Transaction
        Unsigned 32-bit integer
        Current Transaction

    afs.ubik.epochtime  Epoch Time
        Date/Time stamp
        Epoch Time

    afs.ubik.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.ubik.file  File
        Unsigned 32-bit integer
        File

    afs.ubik.interface  Interface Address
        IPv4 address
        Interface Address

    afs.ubik.isclone  Is Clone
        Unsigned 32-bit integer
        Is Clone

    afs.ubik.lastbeaconsent  Last Beacon Sent
        Date/Time stamp
        Last Beacon Sent

    afs.ubik.lastvote  Last Vote
        Unsigned 32-bit integer
        Last Vote

    afs.ubik.lastvotetime  Last Vote Time
        Date/Time stamp
        Last Vote Time

    afs.ubik.lastyesclaim  Last Yes Claim
        Date/Time stamp
        Last Yes Claim

    afs.ubik.lastyeshost  Last Yes Host
        IPv4 address
        Last Yes Host

    afs.ubik.lastyesstate  Last Yes State
        Unsigned 32-bit integer
        Last Yes State

    afs.ubik.lastyesttime  Last Yes Time
        Date/Time stamp
        Last Yes Time

    afs.ubik.length  Length
        Unsigned 32-bit integer
        Length

    afs.ubik.lockedpages  Locked Pages
        Unsigned 32-bit integer
        Locked Pages

    afs.ubik.locktype  Lock Type
        Unsigned 32-bit integer
        Lock Type

    afs.ubik.lowesthost  Lowest Host
        IPv4 address
        Lowest Host

    afs.ubik.lowesttime  Lowest Time
        Date/Time stamp
        Lowest Time

    afs.ubik.now  Now
        Date/Time stamp
        Now

    afs.ubik.nservers  Number of Servers
        Unsigned 32-bit integer
        Number of Servers

    afs.ubik.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.ubik.position  Position
        Unsigned 32-bit integer
        Position

    afs.ubik.recoverystate  Recovery State
        Unsigned 32-bit integer
        Recovery State

    afs.ubik.site  Site
        IPv4 address
        Site

    afs.ubik.state  State
        Unsigned 32-bit integer
        State

    afs.ubik.synchost  Sync Host
        IPv4 address
        Sync Host

    afs.ubik.syncsiteuntil  Sync Site Until
        Date/Time stamp
        Sync Site Until

    afs.ubik.synctime  Sync Time
        Date/Time stamp
        Sync Time

    afs.ubik.tidcounter  TID Counter
        Unsigned 32-bit integer
        TID Counter

    afs.ubik.up  Up
        Unsigned 32-bit integer
        Up

    afs.ubik.version.counter  Counter
        Unsigned 32-bit integer
        Counter

    afs.ubik.version.epoch  Epoch
        Date/Time stamp
        Epoch

    afs.ubik.voteend  Vote Ends
        Date/Time stamp
        Vote Ends

    afs.ubik.votestart  Vote Started
        Date/Time stamp
        Vote Started

    afs.ubik.votetype  Vote Type
        Unsigned 32-bit integer
        Vote Type

    afs.ubik.writelockedpages  Write Locked Pages
        Unsigned 32-bit integer
        Write Locked Pages

    afs.ubik.writetran  Write Transaction
        Unsigned 32-bit integer
        Write Transaction

    afs.update  Update
        Boolean
        Update Server

    afs.update.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.vldb  VLDB
        Boolean
        Volume Location Database Server

    afs.vldb.bkvol  Backup Volume ID
        Unsigned 32-bit integer
        Read-Only Volume ID

    afs.vldb.bump  Bumped Volume ID
        Unsigned 32-bit integer
        Bumped Volume ID

    afs.vldb.clonevol  Clone Volume ID
        Unsigned 32-bit integer
        Clone Volume ID

    afs.vldb.count  Volume Count
        Unsigned 32-bit integer
        Volume Count

    afs.vldb.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.vldb.flags  Flags
        Unsigned 32-bit integer
        Flags

    afs.vldb.flags.bkexists  Backup Exists
        Boolean
        Backup Exists

    afs.vldb.flags.dfsfileset  DFS Fileset
        Boolean
        DFS Fileset

    afs.vldb.flags.roexists  Read-Only Exists
        Boolean
        Read-Only Exists

    afs.vldb.flags.rwexists  Read/Write Exists
        Boolean
        Read/Write Exists

    afs.vldb.id  Volume ID
        Unsigned 32-bit integer
        Volume ID

    afs.vldb.index  Volume Index
        Unsigned 32-bit integer
        Volume Index

    afs.vldb.name  Volume Name
        String
        Volume Name

    afs.vldb.nextindex  Next Volume Index
        Unsigned 32-bit integer
        Next Volume Index

    afs.vldb.numservers  Number of Servers
        Unsigned 32-bit integer
        Number of Servers

    afs.vldb.opcode  Operation
        Unsigned 32-bit integer
        Operation

    afs.vldb.partition  Partition
        String
        Partition

    afs.vldb.rovol  Read-Only Volume ID
        Unsigned 32-bit integer
        Read-Only Volume ID

    afs.vldb.rwvol  Read-Write Volume ID
        Unsigned 32-bit integer
        Read-Only Volume ID

    afs.vldb.server  Server
        IPv4 address
        Server

    afs.vldb.serverflags  Server Flags
        Unsigned 32-bit integer
        Server Flags

    afs.vldb.serverip  Server IP
        IPv4 address
        Server IP

    afs.vldb.serveruniq  Server Unique Address
        Unsigned 32-bit integer
        Server Unique Address

    afs.vldb.serveruuid  Server UUID
        Byte array
        Server UUID

    afs.vldb.spare1  Spare 1
        Unsigned 32-bit integer
        Spare 1

    afs.vldb.spare2  Spare 2
        Unsigned 32-bit integer
        Spare 2

    afs.vldb.spare3  Spare 3
        Unsigned 32-bit integer
        Spare 3

    afs.vldb.spare4  Spare 4
        Unsigned 32-bit integer
        Spare 4

    afs.vldb.spare5  Spare 5
        Unsigned 32-bit integer
        Spare 5

    afs.vldb.spare6  Spare 6
        Unsigned 32-bit integer
        Spare 6

    afs.vldb.spare7  Spare 7
        Unsigned 32-bit integer
        Spare 7

    afs.vldb.spare8  Spare 8
        Unsigned 32-bit integer
        Spare 8

    afs.vldb.spare9  Spare 9
        Unsigned 32-bit integer
        Spare 9

    afs.vldb.type  Volume Type
        Unsigned 32-bit integer
        Volume Type

    afs.vol  Volume Server
        Boolean
        Volume Server

    afs.vol.count  Volume Count
        Unsigned 32-bit integer
        Volume Count

    afs.vol.errcode  Error Code
        Unsigned 32-bit integer
        Error Code

    afs.vol.id  Volume ID
        Unsigned 32-bit integer
        Volume ID

    afs.vol.name  Volume Name
        String
        Volume Name

    afs.vol.opcode  Operation
        Unsigned 32-bit integer
        Operation

Apache JServ Protocol v1.3 (ajp13)

    ajp13.code  Code
        String
        Type Code

    ajp13.data  Data
        String
        Data

    ajp13.hname  HNAME
        String
        Header Name

    ajp13.hval  HVAL
        String
        Header Value

    ajp13.len  Length
        Unsigned 16-bit integer
        Data Length

    ajp13.magic  Magic
        Byte array
        Magic Number

    ajp13.method  Method
        String
        HTTP Method

    ajp13.nhdr  NHDR
        Unsigned 16-bit integer
        Num Headers

    ajp13.port  PORT
        Unsigned 16-bit integer
        Port

    ajp13.raddr  RADDR
        String
        Remote Address

    ajp13.reusep  REUSEP
        Unsigned 8-bit integer
        Reuse Connection?

    ajp13.rhost  RHOST
        String
        Remote Host

    ajp13.rlen  RLEN
        Unsigned 16-bit integer
        Requested Length

    ajp13.rmsg  RSMSG
        String
        HTTP Status Message

    ajp13.rstatus  RSTATUS
        Unsigned 16-bit integer
        HTTP Status Code

    ajp13.srv  SRV
        String
        Server

    ajp13.sslp  SSLP
        Unsigned 8-bit integer
        Is SSL?

    ajp13.uri  URI
        String
        HTTP URI

    ajp13.ver  Version
        String
        HTTP Version

Apple IP-over-IEEE 1394 (ap1394)

    ap1394.dst  Destination
        Byte array
        Destination address

    ap1394.src  Source
        Byte array
        Source address

    ap1394.type  Type
        Unsigned 16-bit integer

AppleTalk Filing Protocol (afp)

    afp.AFPVersion  AFP Version
        String
        Client AFP version

    afp.UAM  UAM
        String
        User Authentication Method

    afp.access  Access mode
        Unsigned 8-bit integer
        Fork access mode

    afp.access.deny_read  Deny read
        Boolean
        Deny read

    afp.access.deny_write  Deny write
        Boolean
        Deny write

    afp.access.read  Read
        Boolean
        Open for reading

    afp.access.write  Write
        Boolean
        Open for writing

    afp.actual_count  Count
        Signed 32-bit integer
        Number of bytes returned by read/write

    afp.afp_login_flags  Flags
        Unsigned 16-bit integer
        Login flags

    afp.appl_index  Index
        Unsigned 16-bit integer
        Application index

    afp.appl_tag  Tag
        Unsigned 32-bit integer
        Application tag

    afp.backup_date  Backup date
        Date/Time stamp
        Backup date

    afp.cat_count  Cat count
        Unsigned 32-bit integer
        Number of structures returned

    afp.cat_position  Position
        Byte array
        Reserved

    afp.cat_req_matches  Max answers
        Signed 32-bit integer
        Maximum number of matches to return.

    afp.command  Command
        Unsigned 8-bit integer
        AFP function

    afp.comment  Comment
        String
        File/folder comment

    afp.create_flag  Hard create
        Boolean
        Soft/hard create file

    afp.creation_date  Creation date
        Date/Time stamp
        Creation date

    afp.data_fork_len  Data fork size
        Unsigned 32-bit integer
        Data fork size

    afp.did  DID
        Unsigned 32-bit integer
        Parent directory ID

    afp.dir_ar  Access rights
        Unsigned 32-bit integer
        Directory access rights

    afp.dir_ar.blank  Blank access right
        Boolean
        Blank access right

    afp.dir_ar.e_read  Everyone has read access
        Boolean
        Everyone has read access

    afp.dir_ar.e_search  Everyone has search access
        Boolean
        Everyone has search access

    afp.dir_ar.e_write  Everyone has write access
        Boolean
        Everyone has write access

    afp.dir_ar.g_read  Group has read access
        Boolean
        Group has read access

    afp.dir_ar.g_search  Group has search access
        Boolean
        Group has search access

    afp.dir_ar.g_write  Group has write access
        Boolean
        Group has write access

    afp.dir_ar.o_read  Owner has read access
        Boolean
        Owner has read access

    afp.dir_ar.o_search  Owner has search access
        Boolean
        Owner has search access

    afp.dir_ar.o_write  Owner has write access
        Boolean
        Gwner has write access

    afp.dir_ar.u_owner  User is the owner
        Boolean
        Current user is the directory owner

    afp.dir_ar.u_read  User has read access
        Boolean
        User has read access

    afp.dir_ar.u_search  User has search access
        Boolean
        User has search access

    afp.dir_ar.u_write  User has write access
        Boolean
        User has write access

    afp.dir_attribute.backup_needed  Backup needed
        Boolean
        Directory needs to be backed up

    afp.dir_attribute.delete_inhibit  Delete inhibit
        Boolean
        Delete inhibit

    afp.dir_attribute.in_exported_folder  Shared area
        Boolean
        Directory is in a shared area

    afp.dir_attribute.invisible  Invisible
        Boolean
        Directory is not visible

    afp.dir_attribute.mounted  Mounted
        Boolean
        Directory is mounted

    afp.dir_attribute.rename_inhibit  Rename inhibit
        Boolean
        Rename inhibit

    afp.dir_attribute.set_clear  Set
        Boolean
        Clear/set attribute

    afp.dir_attribute.share  Share point
        Boolean
        Directory is a share point

    afp.dir_attribute.system  System
        Boolean
        Directory is a system directory

    afp.dir_bitmap  Directory bitmap
        Unsigned 16-bit integer
        Directory bitmap

    afp.dir_bitmap.UTF8_name  UTF-8 name
        Boolean
        Return UTF-8 name if diectory

    afp.dir_bitmap.access_rights  Access rights
        Boolean
        Return access rights if directory

    afp.dir_bitmap.attributes  Attributes
        Boolean
        Return attributes if directory

    afp.dir_bitmap.backup_date  Backup date
        Boolean
        Return backup date if directory

    afp.dir_bitmap.create_date  Creation date
        Boolean
        Return creation date if directory

    afp.dir_bitmap.did  DID
        Boolean
        Return parent directory ID if directory

    afp.dir_bitmap.fid  File ID
        Boolean
        Return file ID if directory

    afp.dir_bitmap.finder_info  Finder info
        Boolean
        Return finder info if directory

    afp.dir_bitmap.group_id  Group id
        Boolean
        Return group id if directory

    afp.dir_bitmap.long_name  Long name
        Boolean
        Return long name if directory

    afp.dir_bitmap.mod_date  Modification date
        Boolean
        Return modification date if directory

    afp.dir_bitmap.offspring_count  Offspring count
        Boolean
        Return offspring count if directory

    afp.dir_bitmap.owner_id  Owner id
        Boolean
        Return owner id if directory

    afp.dir_bitmap.short_name  Short name
        Boolean
        Return short name if directory

    afp.dir_bitmap.unix_privs  UNIX privileges
        Boolean
        Return UNIX privileges if directory

    afp.dir_group_id  Group ID
        Signed 32-bit integer
        Directory group ID

    afp.dir_offspring  Offspring
        Unsigned 16-bit integer
        Directory offspring

    afp.dir_owner_id  Owner ID
        Signed 32-bit integer
        Directory owner ID

    afp.dt_ref  DT ref
        Unsigned 16-bit integer
        Desktop database reference num

    afp.ext_data_fork_len  Extended data fork size
        Unsigned 64-bit integer
        Extended (>2GB) data fork length

    afp.ext_resource_fork_len  Extended resource fork size
        Unsigned 64-bit integer
        Extended (>2GB) resource fork length

    afp.file_attribute.backup_needed  Backup needed
        Boolean
        File needs to be backed up

    afp.file_attribute.copy_protect  Copy protect
        Boolean
        copy protect

    afp.file_attribute.delete_inhibit  Delete inhibit
        Boolean
        delete inhibit

    afp.file_attribute.df_open  Data fork open
        Boolean
        Data fork already open

    afp.file_attribute.invisible  Invisible
        Boolean
        File is not visible

    afp.file_attribute.multi_user  Multi user
        Boolean
        multi user

    afp.file_attribute.rename_inhibit  Rename inhibit
        Boolean
        rename inhibit

    afp.file_attribute.rf_open  Resource fork open
        Boolean
        Resource fork already open

    afp.file_attribute.set_clear  Set
        Boolean
        Clear/set attribute

    afp.file_attribute.system  System
        Boolean
        File is a system file

    afp.file_attribute.write_inhibit  Write inhibit
        Boolean
        Write inhibit

    afp.file_bitmap  File bitmap
        Unsigned 16-bit integer
        File bitmap

    afp.file_bitmap.UTF8_name  UTF-8 name
        Boolean
        Return UTF-8 name if file

    afp.file_bitmap.attributes  Attributes
        Boolean
        Return attributes if file

    afp.file_bitmap.backup_date  Backup date
        Boolean
        Return backup date if file

    afp.file_bitmap.create_date  Creation date
        Boolean
        Return creation date if file

    afp.file_bitmap.data_fork_len  Data fork size
        Boolean
        Return data fork size if file

    afp.file_bitmap.did  DID
        Boolean
        Return parent directory ID if file

    afp.file_bitmap.ex_data_fork_len  Extended data fork size
        Boolean
        Return extended (>2GB) data fork size if file

    afp.file_bitmap.ex_resource_fork_len  Extended resource fork size
        Boolean
        Return extended (>2GB) resource fork size if file

    afp.file_bitmap.fid  File ID
        Boolean
        Return file ID if file

    afp.file_bitmap.finder_info  Finder info
        Boolean
        Return finder info if file

    afp.file_bitmap.launch_limit  Launch limit
        Boolean
        Return launch limit if file

    afp.file_bitmap.long_name  Long name
        Boolean
        Return long name if file

    afp.file_bitmap.mod_date  Modification date
        Boolean
        Return modification date if file

    afp.file_bitmap.resource_fork_len  Resource fork size
        Boolean
        Return resource fork size if file

    afp.file_bitmap.short_name  Short name
        Boolean
        Return short name if file

    afp.file_bitmap.unix_privs  UNIX privileges
        Boolean
        Return UNIX privileges if file

    afp.file_creator  File creator
        String
        File creator

    afp.file_flag  Dir
        Boolean
        Is a dir

    afp.file_id  File ID
        Unsigned 32-bit integer
        File/directory ID

    afp.file_type  File type
        String
        File type

    afp.finder_info  Finder info
        Byte array
        Finder info

    afp.flag  From
        Unsigned 8-bit integer
        Offset is relative to start/end of the fork

    afp.fork_type  Resource fork
        Boolean
        Data/resource fork

    afp.group_ID  Group ID
        Unsigned 32-bit integer
        Group ID

    afp.icon_index  Index
        Unsigned 16-bit integer
        Icon index in desktop database

    afp.icon_length  Size
        Unsigned 16-bit integer
        Size for icon bitmap

    afp.icon_tag  Tag
        Unsigned 32-bit integer
        Icon tag

    afp.icon_type  Icon type
        Unsigned 8-bit integer
        Icon type

    afp.last_written  Last written
        Unsigned 32-bit integer
        Offset of the last byte written

    afp.last_written64  Last written
        Unsigned 64-bit integer
        Offset of the last byte written (64 bits)

    afp.lock_from  End
        Boolean
        Offset is relative to the end of the fork

    afp.lock_len  Length
        Signed 32-bit integer
        Number of bytes to be locked/unlocked

    afp.lock_len64  Length
        Signed 64-bit integer
        Number of bytes to be locked/unlocked (64 bits)

    afp.lock_offset  Offset
        Signed 32-bit integer
        First byte to be locked

    afp.lock_offset64  Offset
        Signed 64-bit integer
        First byte to be locked (64 bits)

    afp.lock_op  unlock
        Boolean
        Lock/unlock op

    afp.lock_range_start  Start
        Signed 32-bit integer
        First byte locked/unlocked

    afp.lock_range_start64  Start
        Signed 64-bit integer
        First byte locked/unlocked (64 bits)

    afp.long_name_offset  Long name offset
        Unsigned 16-bit integer
        Long name offset in packet

    afp.map_id  ID
        Unsigned 32-bit integer
        User/Group ID

    afp.map_id_type  Type
        Unsigned 8-bit integer
        Map ID type

    afp.map_name  Name
        String
        User/Group name

    afp.map_name_type  Type
        Unsigned 8-bit integer
        Map name type

    afp.modification_date  Modification date
        Date/Time stamp
        Modification date

    afp.newline_char  Newline char
        Unsigned 8-bit integer
        Value to compare ANDed bytes with when looking for newline

    afp.newline_mask  Newline mask
        Unsigned 8-bit integer
        Value to AND bytes with when looking for newline

    afp.offset  Offset
        Signed 32-bit integer
        Offset

    afp.offset64  Offset
        Signed 64-bit integer
        Offset (64 bits)

    afp.ofork  Fork
        Unsigned 16-bit integer
        Open fork reference number

    afp.ofork_len  New length
        Signed 32-bit integer
        New length

    afp.ofork_len64  New length
        Signed 64-bit integer
        New length (64 bits)

    afp.pad  Pad
        No value
        Pad Byte

    afp.passwd  Password
        String
        Password

    afp.path_len  Len
        Unsigned 8-bit integer
        Path length

    afp.path_name  Name
        String
        Path name

    afp.path_type  Type
        Unsigned 8-bit integer
        Type of names

    afp.path_unicode_hint  Unicode hint
        Unsigned 32-bit integer
        Unicode hint

    afp.path_unicode_len  Len
        Unsigned 16-bit integer
        Path length (unicode)

    afp.random  Random number
        Byte array
        UAM random number

    afp.reply_size  Reply size
        Unsigned 16-bit integer
        Reply size

    afp.reply_size32  Reply size
        Unsigned 32-bit integer
        Reply size

    afp.req_count  Req count
        Unsigned 16-bit integer
        Maximum number of structures returned

    afp.request_bitmap  Request bitmap
        Unsigned 32-bit integer
        Request bitmap

    afp.request_bitmap.UTF8_name  UTF-8 name
        Boolean
        Search UTF-8 name

    afp.request_bitmap.attributes  Attributes
        Boolean
        Search attributes

    afp.request_bitmap.backup_date  Backup date
        Boolean
        Search backup date

    afp.request_bitmap.create_date  Creation date
        Boolean
        Search creation date

    afp.request_bitmap.data_fork_len  Data fork size
        Boolean
        Search data fork size

    afp.request_bitmap.did  DID
        Boolean
        Search parent directory ID

    afp.request_bitmap.ex_data_fork_len  Extended data fork size
        Boolean
        Search extended (>2GB) data fork size

    afp.request_bitmap.ex_resource_fork_len  Extended resource fork size
        Boolean
        Search extended (>2GB) resource fork size

    afp.request_bitmap.finder_info  Finder info
        Boolean
        Search finder info

    afp.request_bitmap.long_name  Long name
        Boolean
        Search long name

    afp.request_bitmap.mod_date  Modification date
        Boolean
        Search modification date

    afp.request_bitmap.offspring_count  Offspring count
        Boolean
        Search offspring count

    afp.request_bitmap.partial_names  Match on partial names
        Boolean
        Match on partial names

    afp.request_bitmap.resource_fork_len  Resource fork size
        Boolean
        Search resource fork size

    afp.reserved  Reserved
        Byte array
        Reserved

    afp.resource_fork_len  Resource fork size
        Unsigned 32-bit integer
        Resource fork size

    afp.rw_count  Count
        Signed 32-bit integer
        Number of bytes to be read/written

    afp.rw_count64  Count
        Signed 64-bit integer
        Number of bytes to be read/written (64 bits)

    afp.server_time  Server time
        Date/Time stamp
        Server time

    afp.session_token  Token
        Byte array
        Session token

    afp.session_token_len  Len
        Unsigned 32-bit integer
        Session token length

    afp.session_token_timestamp  Time stamp
        Unsigned 32-bit integer
        Session time stamp

    afp.session_token_type  Type
        Unsigned 16-bit integer
        Session token type

    afp.short_name_offset  Short name offset
        Unsigned 16-bit integer
        Short name offset in packet

    afp.start_index  Start index
        Unsigned 16-bit integer
        First structure returned

    afp.start_index32  Start index
        Unsigned 32-bit integer
        First structure returned

    afp.struct_size  Struct size
        Unsigned 8-bit integer
        Sizeof of struct

    afp.struct_size16  Struct size
        Unsigned 16-bit integer
        Sizeof of struct

    afp.unicode_name_offset  Unicode name offset
        Unsigned 16-bit integer
        Unicode name offset in packet

    afp.unix_privs.gid  GID
        Unsigned 32-bit integer
        Group ID

    afp.unix_privs.permissions  Permissions
        Unsigned 32-bit integer
        Permissions

    afp.unix_privs.ua_permissions  User's access rights
        Unsigned 32-bit integer
        User's access rights

    afp.unix_privs.uid  UID
        Unsigned 32-bit integer
        User ID

    afp.user  User
        String
        User

    afp.user_ID  User ID
        Unsigned 32-bit integer
        User ID

    afp.user_bitmap  Bitmap
        Unsigned 16-bit integer
        User Info bitmap

    afp.user_bitmap.GID  Primary group ID
        Boolean
        Primary group ID

    afp.user_bitmap.UID  User ID
        Boolean
        User ID

    afp.user_flag  Flag
        Unsigned 8-bit integer
        User Info flag

    afp.user_len  Len
        Unsigned 16-bit integer
        User name length (unicode)

    afp.user_name  User
        String
        User name (unicode)

    afp.user_type  Type
        Unsigned 8-bit integer
        Type of user name

    afp.vol_attribute.blank_access_privs  Blank access privileges
        Boolean
        Supports blank access privileges

    afp.vol_attribute.cat_search  Catalog search
        Boolean
        Supports catalog search operations

    afp.vol_attribute.fileIDs  File IDs
        Boolean
        Supports file IDs

    afp.vol_attribute.passwd  Volume password
        Boolean
        Has a volume password

    afp.vol_attribute.read_only  Read only
        Boolean
        Read only volume

    afp.vol_attribute.unix_privs  UNIX access privileges
        Boolean
        Supports UNIX access privileges

    afp.vol_attribute.utf8_names  UTF-8 names
        Boolean
        Supports UTF-8 names

    afp.vol_attributes  Attributes
        Unsigned 16-bit integer
        Volume attributes

    afp.vol_backup_date  Backup date
        Date/Time stamp
        Volume backup date

    afp.vol_bitmap  Bitmap
        Unsigned 16-bit integer
        Volume bitmap

    afp.vol_bitmap.attributes  Attributes
        Boolean
        Volume attributes

    afp.vol_bitmap.backup_date  Backup date
        Boolean
        Volume backup date

    afp.vol_bitmap.block_size  Block size
        Boolean
        Volume block size

    afp.vol_bitmap.bytes_free  Bytes free
        Boolean
        Volume free bytes

    afp.vol_bitmap.bytes_total  Bytes total
        Boolean
        Volume total bytes

    afp.vol_bitmap.create_date  Creation date
        Boolean
        Volume creation date

    afp.vol_bitmap.ex_bytes_free  Extended bytes free
        Boolean
        Volume extended (>2GB) free bytes

    afp.vol_bitmap.ex_bytes_total  Extended bytes total
        Boolean
        Volume extended (>2GB) total bytes

    afp.vol_bitmap.id  ID
        Boolean
        Volume ID

    afp.vol_bitmap.mod_date  Modification date
        Boolean
        Volume modification date

    afp.vol_bitmap.name  Name
        Boolean
        Volume name

    afp.vol_bitmap.signature  Signature
        Boolean
        Volume signature

    afp.vol_block_size  Block size
        Unsigned 32-bit integer
        Volume block size

    afp.vol_bytes_free  Bytes free
        Unsigned 32-bit integer
        Free space

    afp.vol_bytes_total  Bytes total
        Unsigned 32-bit integer
        Volume size

    afp.vol_creation_date  Creation date
        Date/Time stamp
        Volume creation date

    afp.vol_ex_bytes_free  Extended bytes free
        Unsigned 64-bit integer
        Extended (>2GB) free space

    afp.vol_ex_bytes_total  Extended bytes total
        Unsigned 64-bit integer
        Extended (>2GB) volume size

    afp.vol_flag_passwd  Password
        Boolean
        Volume is password-protected

    afp.vol_flag_unix_priv  Unix privs
        Boolean
        Volume has unix privileges

    afp.vol_id  Volume id
        Unsigned 16-bit integer
        Volume id

    afp.vol_modification_date  Modification date
        Date/Time stamp
        Volume modification date

    afp.vol_name  Volume
        String
        Volume name

    afp.vol_name_offset  Volume name offset
        Unsigned 16-bit integer
        Volume name offset in packet

    afp.vol_signature  Signature
        Unsigned 16-bit integer
        Volume signature

AppleTalk Session Protocol (asp)

    asp.attn_code  Attn code
        Unsigned 16-bit integer
        asp attention code

    asp.error  asp error
        Signed 32-bit integer
        return error code

    asp.function  asp function
        Unsigned 8-bit integer
        asp function

    asp.init_error  Error
        Unsigned 16-bit integer
        asp init error

    asp.seq  Sequence
        Unsigned 16-bit integer
        asp sequence number

    asp.server_addr.len  Length
        Unsigned 8-bit integer
        Address length.

    asp.server_addr.type  Type
        Unsigned 8-bit integer
        Address type.

    asp.server_addr.value  Value
        Byte array
        Address value

    asp.server_directory  Directory service
        String
        Server directory service

    asp.server_flag  Flag
        Unsigned 16-bit integer
        Server capabilities flag

    asp.server_flag.copyfile  Support copyfile
        Boolean
        Server support copyfile

    asp.server_flag.directory  Support directory services
        Boolean
        Server support directory services

    asp.server_flag.fast_copy  Support fast copy
        Boolean
        Server support fast copy

    asp.server_flag.no_save_passwd  Don't allow save password
        Boolean
        Don't allow save password

    asp.server_flag.notify  Support server notifications
        Boolean
        Server support notifications

    asp.server_flag.passwd  Support change password
        Boolean
        Server support change password

    asp.server_flag.reconnect  Support server reconnect
        Boolean
        Server support reconnect

    asp.server_flag.srv_msg  Support server message
        Boolean
        Support server message

    asp.server_flag.srv_sig  Support server signature
        Boolean
        Support server signature

    asp.server_flag.tcpip  Support TCP/IP
        Boolean
        Server support TCP/IP

    asp.server_flag.utf8_name  Support UTF8 server name
        Boolean
        Server support UTF8 server name

    asp.server_icon  Icon bitmap
        Byte array
        Server icon bitmap

    asp.server_name  Server name
        String
        Server name

    asp.server_signature  Server signature
        Byte array
        Server signature

    asp.server_type  Server type
        String
        Server type

    asp.server_uams  UAM
        String
        UAM

    asp.server_utf8_name  Server name (UTF8)
        String
        Server name (UTF8)

    asp.server_utf8_name_len  Server name length
        Unsigned 16-bit integer
        UTF8 server name length

    asp.server_vers  AFP version
        String
        AFP version

    asp.session_id  Session ID
        Unsigned 8-bit integer
        asp session id

    asp.size  size
        Unsigned 16-bit integer
        asp available size for reply

    asp.socket  Socket
        Unsigned 8-bit integer
        asp socket

    asp.version  Version
        Unsigned 16-bit integer
        asp version

    asp.zero_value  Pad (0)
        Byte array
        Pad

AppleTalk Transaction Protocol packet (atp)

    atp.bitmap  Bitmap
        Unsigned 8-bit integer
        Bitmap or sequence number

    atp.ctrlinfo  Control info
        Unsigned 8-bit integer
        control info

    atp.eom  EOM
        Boolean
        End-of-message

    atp.fragment  ATP Fragment
        Frame number
        ATP Fragment

    atp.fragments  ATP Fragments
        No value
        ATP Fragments

    atp.function  Function
        Unsigned 8-bit integer
        function code

    atp.reassembled_in  Reassembled ATP in frame
        Frame number
        This ATP packet is reassembled in this frame

    atp.segment.error  Desegmentation error
        Frame number
        Desegmentation error due to illegal segments

    atp.segment.multipletails  Multiple tail segments found
        Boolean
        Several tails were found when desegmenting the packet

    atp.segment.overlap  Segment overlap
        Boolean
        Segment overlaps with other segments

    atp.segment.overlap.conflict  Conflicting data in segment overlap
        Boolean
        Overlapping segments contained conflicting data

    atp.segment.toolongsegment  Segment too long
        Boolean
        Segment contained data past end of packet

    atp.sts  STS
        Boolean
        Send transaction status

    atp.tid  TID
        Unsigned 16-bit integer
        Transaction id

    atp.treltimer  TRel timer
        Unsigned 8-bit integer
        TRel timer

    atp.user_bytes  User bytes
        Unsigned 32-bit integer
        User bytes

    atp.xo  XO
        Boolean
        Exactly-once flag

Appletalk Address Resolution Protocol (aarp)

    aarp.dst.hw  Target hardware address
        Byte array

    aarp.dst.hw_mac  Target MAC address
        6-byte Hardware (MAC) Address

    aarp.dst.proto  Target protocol address
        Byte array

    aarp.dst.proto_id  Target ID
        Byte array

    aarp.hard.size  Hardware size
        Unsigned 8-bit integer

    aarp.hard.type  Hardware type
        Unsigned 16-bit integer

    aarp.opcode  Opcode
        Unsigned 16-bit integer

    aarp.proto.size  Protocol size
        Unsigned 8-bit integer

    aarp.proto.type  Protocol type
        Unsigned 16-bit integer

    aarp.src.hw  Sender hardware address
        Byte array

    aarp.src.hw_mac  Sender MAC address
        6-byte Hardware (MAC) Address

    aarp.src.proto  Sender protocol address
        Byte array

    aarp.src.proto_id  Sender ID
        Byte array

Application Configuration Access Protocol (acap)

    acap.request  Request
        Boolean
        TRUE if ACAP request

    acap.response  Response
        Boolean
        TRUE if ACAP response

Art-Net (artnet)

    artner.tod_control  ArtTodControl packet
        No value
        Art-Net ArtTodControl packet

    artnet.address  ArtAddress packet
        No value
        Art-Net ArtAddress packet

    artnet.address.command  Command
        Unsigned 8-bit integer
        Command

    artnet.address.long_name  Long Name
        String
        Long Name

    artnet.address.short_name  Short Name
        String
        Short Name

    artnet.address.subswitch  Subswitch
        Unsigned 8-bit integer
        Subswitch

    artnet.address.swin  Input Subswitch
        No value
        Input Subswitch

    artnet.address.swin_1  Input Subswitch of Port 1
        Unsigned 8-bit integer
        Input Subswitch of Port 1

    artnet.address.swin_2  Input Subswitch of Port 2
        Unsigned 8-bit integer
        Input Subswitch of Port 2

    artnet.address.swin_3  Input Subswitch of Port 3
        Unsigned 8-bit integer
        Input Subswitch of Port 3

    artnet.address.swin_4  Input Subswitch of Port 4
        Unsigned 8-bit integer
        Input Subswitch of Port 4

    artnet.address.swout  Output Subswitch
        No value
        Output Subswitch

    artnet.address.swout_1  Output Subswitch of Port 1
        Unsigned 8-bit integer
        Output Subswitch of Port 1

    artnet.address.swout_2  Output Subswitch of Port 2
        Unsigned 8-bit integer
        Output Subswitch of Port 2

    artnet.address.swout_3  Output Subswitch of Port 3
        Unsigned 8-bit integer
        Output Subswitch of Port 3

    artnet.address.swout_4  Output Subswitch of Port 4
        Unsigned 8-bit integer
        Ouput Subswitch of Port 4

    artnet.address.swvideo  SwVideo
        Unsigned 8-bit integer
        SwVideo

    artnet.filler  filler
        Byte array
        filler

    artnet.firmware_master  ArtFirmwareMaster packet
        No value
        Art-Net ArtFirmwareMaster packet

    artnet.firmware_master.block_id  Block ID
        Unsigned 8-bit integer
        Block ID

    artnet.firmware_master.data  data
        Byte array
        data

    artnet.firmware_master.length  Lentgh
        Unsigned 32-bit integer
        Length

    artnet.firmware_master.type  Type
        Unsigned 8-bit integer
        Number of Ports

    artnet.firmware_reply  ArtFirmwareReply packet
        No value
        Art-Net ArtFirmwareReply packet

    artnet.firmware_reply.type  Type
        Unsigned 8-bit integer
        Number of Ports

    artnet.header  Descriptor Header
        No value
        Art-Net Descriptor Header

    artnet.header.id  ID
        String
        ArtNET ID

    artnet.header.opcode  Opcode
        Unsigned 16-bit integer
        Art-Net message type

    artnet.header.protver  ProVer
        Unsigned 16-bit integer
        Protcol revision number

    artnet.input  ArtInput packet
        No value
        Art-Net ArtInput packet

    artnet.input.input  Port Status
        No value
        Port Status

    artnet.input.input_1  Status of Port 1
        Unsigned 8-bit integer
        Status of Port 1

    artnet.input.input_2  Status of Port 2
        Unsigned 8-bit integer
        Status of Port 2

    artnet.input.input_3  Status of Port 3
        Unsigned 8-bit integer
        Status of Port 3

    artnet.input.input_4  Status of Port 4
        Unsigned 8-bit integer
        Status of Port 4

    artnet.input.num_ports  Number of Ports
        Unsigned 16-bit integer
        Number of Ports

    artnet.ip_prog  ArtIpProg packet
        No value
        ArtNET ArtIpProg packet

    artnet.ip_prog.command  Command
        Unsigned 8-bit integer
        Command

    artnet.ip_prog.command_prog_enable  Enable Programming
        Unsigned 8-bit integer
        Enable Programming

    artnet.ip_prog.command_prog_ip  Program IP
        Unsigned 8-bit integer
        Program IP

    artnet.ip_prog.command_prog_port  Program Port
        Unsigned 8-bit integer
        Program Port

    artnet.ip_prog.command_prog_sm  Program Subnet Mask
        Unsigned 8-bit integer
        Program Subnet Mask

    artnet.ip_prog.command_reset  Reset parameters
        Unsigned 8-bit integer
        Reset parameters

    artnet.ip_prog.command_unused  Unused
        Unsigned 8-bit integer
        Unused

    artnet.ip_prog.ip  IP Address
        IPv4 address
        IP Address

    artnet.ip_prog.port  Port
        Unsigned 16-bit integer
        Port

    artnet.ip_prog.sm  Subnet mask
        IPv4 address
        IP Subnet mask

    artnet.ip_prog_reply  ArtIpProgReplay packet
        No value
        Art-Net ArtIpProgReply packet

    artnet.ip_prog_reply.ip  IP Address
        IPv4 address
        IP Address

    artnet.ip_prog_reply.port  Port
        Unsigned 16-bit integer
        Port

    artnet.ip_prog_reply.sm  Subnet mask
        IPv4 address
        IP Subnet mask

    artnet.output  ArtDMX packet
        No value
        Art-Net ArtDMX packet

    artnet.output.data  DMX data
        No value
        DMX Data

    artnet.output.data_filter  DMX data filter
        Byte array
        DMX Data Filter

    artnet.output.dmx_data  DMX data
        No value
        DMX Data

    artnet.output.length  Length
        Unsigned 16-bit integer
        Length

    artnet.output.physical  Physical
        Unsigned 8-bit integer
        Physical

    artnet.output.sequence  Sequence
        Unsigned 8-bit integer
        Sequence

    artnet.output.universe  Universe
        Unsigned 16-bit integer
        Universe

    artnet.poll  ArtPoll packet
        No value
        Art-Net ArtPoll packet

    artnet.poll.talktome  TalkToMe
        Unsigned 8-bit integer
        TalkToMe

    artnet.poll.talktome_reply_dest  Reply destination
        Unsigned 8-bit integer
        Reply destination

    artnet.poll.talktome_reply_type  Reply type
        Unsigned 8-bit integer
        Reply type

    artnet.poll.talktome_unused  unused
        Unsigned 8-bit integer
        unused

    artnet.poll_reply  ArtPollReply packet
        No value
        Art-Net ArtPollReply packet

    artnet.poll_reply.esta_man  ESTA Code
        Unsigned 16-bit integer
        ESTA Code

    artnet.poll_reply.good_input  Input Status
        No value
        Input Status

    artnet.poll_reply.good_input_1  Input status of Port 1
        Unsigned 8-bit integer
        Input status of Port 1

    artnet.poll_reply.good_input_2  Input status of Port 2
        Unsigned 8-bit integer
        Input status of Port 2

    artnet.poll_reply.good_input_3  Input status of Port 3
        Unsigned 8-bit integer
        Input status of Port 3

    artnet.poll_reply.good_input_4  Input status of Port 4
        Unsigned 8-bit integer
        Input status of Port 4

    artnet.poll_reply.good_output  Output Status
        No value
        Port output status

    artnet.poll_reply.good_output_1  Output status of Port 1
        Unsigned 8-bit integer
        Output status of Port 1

    artnet.poll_reply.good_output_2  Output status of Port 2
        Unsigned 8-bit integer
        Output status of Port 2

    artnet.poll_reply.good_output_3  Output status of Port 3
        Unsigned 8-bit integer
        Output status of Port 3

    artnet.poll_reply.good_output_4  Output status of Port 4
        Unsigned 8-bit integer
        Outpus status of Port 4

    artnet.poll_reply.ip_address  IP Address
        IPv4 address
        IP Address

    artnet.poll_reply.long_name  Long Name
        String
        Long Name

    artnet.poll_reply.mac  MAC
        6-byte Hardware (MAC) Address
        MAC

    artnet.poll_reply.node_report  Node Report
        String
        Node Report

    artnet.poll_reply.num_ports  Number of Ports
        Unsigned 16-bit integer
        Number of Ports

    artnet.poll_reply.oem  Oem
        Unsigned 16-bit integer
        OEM

    artnet.poll_reply.port_info  Port Info
        No value
        Port Info

    artnet.poll_reply.port_nr  Port number
        Unsigned 16-bit integer
        Port Number

    artnet.poll_reply.port_types  Port Types
        No value
        Port Types

    artnet.poll_reply.port_types_1  Type of Port 1
        Unsigned 8-bit integer
        Type of Port 1

    artnet.poll_reply.port_types_2  Type of Port 2
        Unsigned 8-bit integer
        Type of Port 2

    artnet.poll_reply.port_types_3  Type of Port 3
        Unsigned 8-bit integer
        Type of Port 3

    artnet.poll_reply.port_types_4  Type of Port 4
        Unsigned 8-bit integer
        Type of Port 4

    artnet.poll_reply.short_name  Short Name
        String
        Short Name

    artnet.poll_reply.status  Status
        Unsigned 8-bit integer
        Status

    artnet.poll_reply.subswitch  SubSwitch
        Unsigned 16-bit integer
        Subswitch version

    artnet.poll_reply.swin  Input Subswitch
        No value
        Input Subswitch

    artnet.poll_reply.swin_1  Input Subswitch of Port 1
        Unsigned 8-bit integer
        Input Subswitch of Port 1

    artnet.poll_reply.swin_2  Input Subswitch of Port 2
        Unsigned 8-bit integer
        Input Subswitch of Port 2

    artnet.poll_reply.swin_3  Input Subswitch of Port 3
        Unsigned 8-bit integer
        Input Subswitch of Port 3

    artnet.poll_reply.swin_4  Input Subswitch of Port 4
        Unsigned 8-bit integer
        Input Subswitch of Port 4

    artnet.poll_reply.swmacro  SwMacro
        Unsigned 8-bit integer
        SwMacro

    artnet.poll_reply.swout  Output Subswitch
        No value
        Output Subswitch

    artnet.poll_reply.swout_1  Output Subswitch of Port 1
        Unsigned 8-bit integer
        Output Subswitch of Port 1

    artnet.poll_reply.swout_2  Output Subswitch of Port 2
        Unsigned 8-bit integer
        Output Subswitch of Port 2

    artnet.poll_reply.swout_3  Output Subswitch of Port 3
        Unsigned 8-bit integer
        Output Subswitch of Port 3

    artnet.poll_reply.swout_4  Output Subswitch of Port 4
        Unsigned 8-bit integer
        Ouput Subswitch of Port 4

    artnet.poll_reply.swremote  SwRemote
        Unsigned 8-bit integer
        SwRemote

    artnet.poll_reply.swvideo  SwVideo
        Unsigned 8-bit integer
        SwVideo

    artnet.poll_reply.ubea_version  UBEA Version
        Unsigned 8-bit integer
        UBEA version number

    artnet.poll_reply.versinfo  Version Info
        Unsigned 16-bit integer
        Version info

    artnet.poll_server_reply  ArtPollServerReply packet
        No value
        Art-Net ArtPollServerReply packet

    artnet.rdm  ArtRdm packet
        No value
        Art-Net ArtRdm packet

    artnet.rdm.address  Address
        Unsigned 8-bit integer
        Address

    artnet.rdm.command  Command
        Unsigned 8-bit integer
        Command

    artnet.spare  spare
        Byte array
        spare

    artnet.tod_control.command  Command
        Unsigned 8-bit integer
        Command

    artnet.tod_data  ArtTodData packet
        No value
        Art-Net ArtTodData packet

    artnet.tod_data.address  Address
        Unsigned 8-bit integer
        Address

    artnet.tod_data.block_count  Block Count
        Unsigned 8-bit integer
        Block Count

    artnet.tod_data.command_response  Command Response
        Unsigned 8-bit integer
        Command Response

    artnet.tod_data.port  Port
        Unsigned 8-bit integer
        Port

    artnet.tod_data.tod  TOD
        Byte array
        TOD

    artnet.tod_data.uid_count  UID Count
        Unsigned 8-bit integer
        UID Count

    artnet.tod_data.uid_total  UID Total
        Unsigned 16-bit integer
        UID Total

    artnet.tod_request  ArtTodRequest packet
        No value
        Art-Net ArtTodRequest packet

    artnet.tod_request.ad_count  Address Count
        Unsigned 8-bit integer
        Address Count

    artnet.tod_request.address  Address
        Byte array
        Address

    artnet.tod_request.command  Command
        Unsigned 8-bit integer
        Command

    artnet.video_data  ArtVideoData packet
        No value
        Art-Net ArtVideoData packet

    artnet.video_data.data  Video Data
        Byte array
        Video Data

    artnet.video_data.len_x  LenX
        Unsigned 8-bit integer
        LenX

    artnet.video_data.len_y  LenY
        Unsigned 8-bit integer
        LenY

    artnet.video_data.pos_x  PosX
        Unsigned 8-bit integer
        PosX

    artnet.video_data.pos_y  PosY
        Unsigned 8-bit integer
        PosY

    artnet.video_palette  ArtVideoPalette packet
        No value
        Art-Net ArtVideoPalette packet

    artnet.video_palette.colour_blue  Colour Blue
        Byte array
        Colour Blue

    artnet.video_palette.colour_green  Colour Green
        Byte array
        Colour Green

    artnet.video_palette.colour_red  Colour Red
        Byte array
        Colour Red

    artnet.video_setup  ArtVideoSetup packet
        No value
        ArtNET ArtVideoSetup packet

    artnet.video_setup.control  control
        Unsigned 8-bit integer
        control

    artnet.video_setup.first_font  First Font
        Unsigned 8-bit integer
        First Font

    artnet.video_setup.font_data  Font data
        Byte array
        Font Date

    artnet.video_setup.font_height  Font Height
        Unsigned 8-bit integer
        Font Height

    artnet.video_setup.last_font  Last Font
        Unsigned 8-bit integer
        Last Font

    artnet.video_setup.win_font_name  Windows Font Name
        String
        Windows Font Name

Async data over ISDN (V.120) (v120)

    v120.address  Link Address
        Unsigned 16-bit integer

    v120.control  Control Field
        Unsigned 16-bit integer

    v120.control.f  Final
        Boolean

    v120.control.ftype  Frame type
        Unsigned 16-bit integer

    v120.control.n_r  N(R)
        Unsigned 16-bit integer

    v120.control.n_s  N(S)
        Unsigned 16-bit integer

    v120.control.p  Poll
        Boolean

    v120.control.s_ftype  Supervisory frame type
        Unsigned 16-bit integer

    v120.control.u_modifier_cmd  Command
        Unsigned 8-bit integer

    v120.control.u_modifier_resp  Response
        Unsigned 8-bit integer

    v120.header  Header Field
        String

Asynchronous Layered Coding (alc)

    alc.fec  Forward Error Correction (FEC) header
        No value

    alc.fec.encoding_id  FEC Encoding ID
        Unsigned 8-bit integer

    alc.fec.esi  Encoding Symbol ID
        Unsigned 32-bit integer

    alc.fec.fti  FEC Object Transmission Information
        No value

    alc.fec.fti.encoding_symbol_length  Encoding Symbol Length
        Unsigned 32-bit integer

    alc.fec.fti.max_number_encoding_symbols  Maximum Number of Encoding Symbols
        Unsigned 32-bit integer

    alc.fec.fti.max_source_block_length  Maximum Source Block Length
        Unsigned 32-bit integer

    alc.fec.fti.transfer_length  Transfer Length
        Unsigned 64-bit integer

    alc.fec.instance_id  FEC Instance ID
        Unsigned 8-bit integer

    alc.fec.sbl  Source Block Length
        Unsigned 32-bit integer

    alc.fec.sbn  Source Block Number
        Unsigned 32-bit integer

    alc.lct  Layered Coding Transport (LCT) header
        No value

    alc.lct.cci  Congestion Control Information
        Byte array

    alc.lct.codepoint  Codepoint
        Unsigned 8-bit integer

    alc.lct.ert  Expected Residual Time
        Time duration

    alc.lct.ext  Extension count
        Unsigned 8-bit integer

    alc.lct.flags  Flags
        No value

    alc.lct.flags.close_object  Close Object flag
        Boolean

    alc.lct.flags.close_session  Close Session flag
        Boolean

    alc.lct.flags.ert_present  Expected Residual Time present flag
        Boolean

    alc.lct.flags.sct_present  Sender Current Time present flag
        Boolean

    alc.lct.fsize  Field sizes (bytes)
        No value

    alc.lct.fsize.cci  Congestion Control Information field size
        Unsigned 8-bit integer

    alc.lct.fsize.toi  Transport Object Identifier field size
        Unsigned 8-bit integer

    alc.lct.fsize.tsi  Transport Session Identifier field size
        Unsigned 8-bit integer

    alc.lct.hlen  Header length
        Unsigned 16-bit integer

    alc.lct.sct  Sender Current Time
        Time duration

    alc.lct.toi  Transport Object Identifier (up to 64 bites)
        Unsigned 64-bit integer

    alc.lct.toi_extended  Transport Object Identifier (up to 112 bits)
        Byte array

    alc.lct.tsi  Transport Session Identifier
        Unsigned 64-bit integer

    alc.lct.version  Version
        Unsigned 8-bit integer

    alc.payload  Payload
        No value

    alc.version  Version
        Unsigned 8-bit integer

Authentication Header (ah)

    ah.sequence  Sequence
        Unsigned 32-bit integer

    ah.spi  SPI
        Unsigned 32-bit integer

BACnet Virtual Link Control (bvlc)

    bvlc.bdt_ip  IP
        IPv4 address
        BDT IP

    bvlc.bdt_mask  Mask
        Byte array
        BDT Broadcast Distribution Mask

    bvlc.bdt_port  Port
        Unsigned 16-bit integer
        BDT Port

    bvlc.fdt_ip  IP
        IPv4 address
        FDT IP

    bvlc.fdt_port  Port
        Unsigned 16-bit integer
        FDT Port

    bvlc.fdt_timeout  Timeout
        Unsigned 16-bit integer
        Foreign Device Timeout (seconds)

    bvlc.fdt_ttl  TTL
        Unsigned 16-bit integer
        Foreign Device Time To Live

    bvlc.function  Function
        Unsigned 8-bit integer
        BLVC Function

    bvlc.fwd_ip  IP
        IPv4 address
        FWD IP

    bvlc.fwd_port  Port
        Unsigned 16-bit integer
        FWD Port

    bvlc.length  Length
        Unsigned 16-bit integer
        Length of BVLC

    bvlc.reg_ttl  TTL
        Unsigned 16-bit integer
        Foreign Device Time To Live

    bvlc.result  Result
        Unsigned 16-bit integer
        Result Code

    bvlc.type  Type
        Unsigned 8-bit integer
        Type

BEA Tuxedo (tuxedo)

    tuxedo.magic  Magic
        Unsigned 32-bit integer
        TUXEDO magic

    tuxedo.opcode  Opcode
        Unsigned 32-bit integer
        TUXEDO opcode

BSSAP/BSAP (bssap)

    bsap.dlci.cc  Control Channel
        Unsigned 8-bit integer

    bsap.dlci.rsvd  Reserved
        Unsigned 8-bit integer

    bsap.dlci.sapi  SAPI
        Unsigned 8-bit integer

    bsap.pdu_type  Message Type
        Unsigned 8-bit integer

    bssap.dlci.cc  Control Channel
        Unsigned 8-bit integer

    bssap.dlci.sapi  SAPI
        Unsigned 8-bit integer

    bssap.dlci.spare  Spare
        Unsigned 8-bit integer

    bssap.length  Length
        Unsigned 8-bit integer

    bssap.pdu_type  Message Type
        Unsigned 8-bit integer

Banyan Vines ARP (vines_arp)
Banyan Vines Echo (vines_echo)
Banyan Vines Fragmentation Protocol (vines_frp)
Banyan Vines ICP (vines_icp)
Banyan Vines IP (vines_ip)

    vines_ip.protocol  Protocol
        Unsigned 8-bit integer
        Vines protocol

Banyan Vines IPC (vines_ipc)
Banyan Vines LLC (vines_llc)
Banyan Vines RTP (vines_rtp)
Banyan Vines SPP (vines_spp)
Base Station Subsystem GPRS Protocol (bssgp)

    bssgp.bvci  BVCI
        Unsigned 16-bit integer

    bssgp.ci  CI
        Unsigned 16-bit integer
        Cell Identity

    bssgp.ie_type  IE Type
        Unsigned 8-bit integer
        Information element type

    bssgp.imei  IMEI
        String

    bssgp.imeisv  IMEISV
        String

    bssgp.imsi  IMSI
        String

    bssgp.lac  LAC
        Unsigned 16-bit integer

    bssgp.mcc  MCC
        Unsigned 8-bit integer

    bssgp.mnc  MNC
        Unsigned 8-bit integer

    bssgp.nri  NRI
        Unsigned 16-bit integer

    bssgp.nsei  NSEI
        Unsigned 16-bit integer

    bssgp.pdu_type  PDU Type
        Unsigned 8-bit integer

    bssgp.rac  RAC
        Unsigned 8-bit integer

    bssgp.tlli  TLLI
        Unsigned 32-bit integer

    bssgp.tmsi_ptmsi  TMSI/PTMSI
        Unsigned 32-bit integer

Basic Encoding Rules (ASN.1 X.690) (ber)

    ber.bitstring.padding  Padding
        Unsigned 8-bit integer
        Number of unsused bits in the last octet of the bitstring

    ber.id.class  Class
        Unsigned 8-bit integer
        Class of BER TLV Identifier

    ber.id.pc  P/C
        Boolean
        Primitive or Constructed BER encoding

    ber.id.tag  Tag
        Unsigned 32-bit integer
        Tag value for non-Universal classes

    ber.id.uni_tag  Tag
        Unsigned 8-bit integer
        Universal tag type

    ber.length  Length
        Unsigned 32-bit integer
        Length of contents

    ber.unknown.ENUMERATED  ENUMERATED
        Unsigned 32-bit integer
        This is an unknown ENUMERATED

    ber.unknown.IA5String  IA5String
        String
        This is an unknown IA5String

    ber.unknown.INTEGER  INTEGER
        Unsigned 32-bit integer
        This is an unknown INTEGER

    ber.unknown.NumericString  NumericString
        String
        This is an unknown NumericString

    ber.unknown.OCTETSTRING  OCTETSTRING
        Byte array
        This is an unknown OCTETSTRING

    ber.unknown.OID  OID
        String
        This is an unknown Object Identifier

    ber.unknown.PrintableString  PrintableString
        String
        This is an unknown PrintableString

Bearer Independent Call Control (bicc)

    bicc.cic  Call identification Code (CIC)
        Unsigned 32-bit integer

Bi-directional Fault Detection Control Message (bfdcontrol)

    bfd.desired_min_tx_interval  Desired Min TX Interval
        Unsigned 32-bit integer

    bfd.detect_time_multiplier  Detect Time Multiplier
        Unsigned 8-bit integer

    bfd.diag  Diagnostic Code
        Unsigned 8-bit integer

    bfd.flags  Message Flags
        Unsigned 8-bit integer

    bfd.my_discriminator  My Discriminator
        Unsigned 32-bit integer

    bfd.required_min_echo_interval  Required Min Echo Interval
        Unsigned 32-bit integer

    bfd.required_min_rx_interval  Required Min RX Interval
        Unsigned 32-bit integer

    bfd.version  Protocol Version
        Unsigned 8-bit integer

    bfd.your_discriminator  Your Discriminator
        Unsigned 32-bit integer

BitTorrent (bittorrent)

    bittorrent.info_hash  SHA1 Hash of info dictionary
        Byte array

    bittorrent.length  Field Length
        Unsigned 32-bit integer

    bittorrent.msg.bitfield  Bitfield data
        Byte array

    bittorrent.msg.length  Message Length
        Unsigned 32-bit integer

    bittorrent.msg.type  Message Type
        Unsigned 8-bit integer

    bittorrent.peer_id  Peer ID
        Byte array

    bittorrent.piece.begin  Begin offset of piece
        Unsigned 32-bit integer

    bittorrent.piece.data  Data in a piece
        Byte array

    bittorrent.piece.index  Piece index
        Unsigned 32-bit integer

    bittorrent.piece.length  Piece Length
        Unsigned 32-bit integer

    bittorrent.protocol.name  Protocol Name
        String

    bittorrent.protocol.name.length  Protocol Name Length
        Unsigned 8-bit integer

    bittorrent.reserved  Reserved Extension Bytes
        Byte array

Blocks Extensible Exchange Protocol (beep)

    beep.ansno  Ansno
        Unsigned 32-bit integer

    beep.channel  Channel
        Unsigned 32-bit integer

    beep.end  End
        Boolean

    beep.more.complete  Complete
        Boolean

    beep.more.intermediate  Intermediate
        Boolean

    beep.msgno  Msgno
        Unsigned 32-bit integer

    beep.req  Request
        Boolean

    beep.req.channel  Request Channel Number
        Unsigned 32-bit integer

    beep.rsp  Response
        Boolean

    beep.rsp.channel  Response Channel Number
        Unsigned 32-bit integer

    beep.seq  Sequence
        Boolean

    beep.seq.ackno  Ackno
        Unsigned 32-bit integer

    beep.seq.channel  Sequence Channel Number
        Unsigned 32-bit integer

    beep.seq.window  Window
        Unsigned 32-bit integer

    beep.seqno  Seqno
        Unsigned 32-bit integer

    beep.size  Size
        Unsigned 32-bit integer

    beep.status.negative  Negative
        Boolean

    beep.status.positive  Positive
        Boolean

    beep.violation  Protocol Violation
        Boolean

Blubster/Piolet MANOLITO Protocol (manolito)

    manolito.checksum  Checksum
        Unsigned 32-bit integer
        Checksum used for verifying integrity

    manolito.dest  Destination IP Address
        IPv4 address
        Destination IPv4 address

    manolito.options  Options
        Unsigned 32-bit integer
        Packet-dependent data

    manolito.seqno  Sequence Number
        Unsigned 32-bit integer
        Incremental sequence number

    manolito.src  Forwarded IP Address
        IPv4 address
        Host packet was forwarded from (or 0)

Boardwalk (brdwlk)

    brdwlk.drop  Packet Dropped
        Boolean

    brdwlk.eof  EOF
        Unsigned 8-bit integer
        EOF

    brdwlk.error  Error
        Unsigned 8-bit integer
        Error

    brdwlk.pktcnt  Packet Count
        Unsigned 16-bit integer

    brdwlk.plen  Original Packet Length
        Unsigned 32-bit integer

    brdwlk.sof  SOF
        Unsigned 8-bit integer
        SOF

    brdwlk.vsan  VSAN
        Unsigned 16-bit integer

Boot Parameters (bootparams)

    bootparams.domain  Client Domain
        String
        Client Domain

    bootparams.fileid  File ID
        String
        File ID

    bootparams.filepath  File Path
        String
        File Path

    bootparams.host  Client Host
        String
        Client Host

    bootparams.hostaddr  Client Address
        IPv4 address
        Address

    bootparams.procedure_v1  V1 Procedure
        Unsigned 32-bit integer
        V1 Procedure

    bootparams.routeraddr  Router Address
        IPv4 address
        Router Address

    bootparams.type  Address Type
        Unsigned 32-bit integer
        Address Type

Bootstrap Protocol (bootp)

    bootp.cookie  Magic cookie
        IPv4 address

    bootp.dhcp  Frame is DHCP
        Boolean

    bootp.file  Boot file name
        String

    bootp.flags  Bootp flags
        Unsigned 16-bit integer

    bootp.flags.bc  Broadcast flag
        Boolean

    bootp.flags.reserved  Reserved flags
        Unsigned 16-bit integer

    bootp.fqdn.e  Encoding
        Boolean
        If true, name is binary encoded

    bootp.fqdn.mbz  Reserved flags
        Unsigned 8-bit integer

    bootp.fqdn.n  Server DDNS
        Boolean
        If true, server should not do any DDNS updates

    bootp.fqdn.name  Client name
        Byte array
        Name to register via DDNS

    bootp.fqdn.o  Server overrides
        Boolean
        If true, server insists on doing DDNS update

    bootp.fqdn.rcode1  A-RR result
        Unsigned 8-bit integer
        Result code of A-RR update

    bootp.fqdn.rcode2  PTR-RR result
        Unsigned 8-bit integer
        Result code of PTR-RR update

    bootp.fqdn.s  Server
        Boolean
        If true, server should do DDNS update

    bootp.hops  Hops
        Unsigned 8-bit integer

    bootp.hw.addr  Client hardware address
        Byte array

    bootp.hw.len  Hardware address length
        Unsigned 8-bit integer

    bootp.hw.mac_addr  Client MAC address
        6-byte Hardware (MAC) Address

    bootp.hw.type  Hardware type
        Unsigned 8-bit integer

    bootp.id  Transaction ID
        Unsigned 32-bit integer

    bootp.ip.client  Client IP address
        IPv4 address

    bootp.ip.relay  Relay agent IP address
        IPv4 address

    bootp.ip.server  Next server IP address
        IPv4 address

    bootp.ip.your  Your (client) IP address
        IPv4 address

    bootp.secs  Seconds elapsed
        Unsigned 16-bit integer

    bootp.server  Server host name
        String

    bootp.type  Message type
        Unsigned 8-bit integer

    bootp.vendor  Bootp Vendor Options
        Byte array

    bootp.vendor.docsis.cmcap_len  DOCSIS CM Device Capabilities Length
        Unsigned 8-bit integer
        DOCSIS Cable Modem Device Capabilities Length

    bootp.vendor.pktc.mtacap_len  PacketCable MTA Device Capabilities Length
        Unsigned 8-bit integer
        PacketCable MTA Device Capabilities Length

Border Gateway Protocol (bgp)

    bgp.aggregator_as  Aggregator AS
        Unsigned 16-bit integer

    bgp.aggregator_origin  Aggregator origin
        IPv4 address

    bgp.as_path  AS Path
        Unsigned 16-bit integer

    bgp.cluster_identifier  Cluster identifier
        IPv4 address

    bgp.cluster_list  Cluster List
        Byte array

    bgp.community_as  Community AS
        Unsigned 16-bit integer

    bgp.community_value  Community value
        Unsigned 16-bit integer

    bgp.local_pref  Local preference
        Unsigned 32-bit integer

    bgp.mp_nlri_tnl_id  MP Reach NLRI Tunnel Identifier
        Unsigned 16-bit integer

    bgp.mp_reach_nlri_ipv4_prefix  MP Reach NLRI IPv4 prefix
        IPv4 address

    bgp.mp_unreach_nlri_ipv4_prefix  MP Unreach NLRI IPv4 prefix
        IPv4 address

    bgp.multi_exit_disc  Multiple exit discriminator
        Unsigned 32-bit integer

    bgp.next_hop  Next hop
        IPv4 address

    bgp.nlri_prefix  NLRI prefix
        IPv4 address

    bgp.origin  Origin
        Unsigned 8-bit integer

    bgp.originator_id  Originator identifier
        IPv4 address

    bgp.ssa_l2tpv3_Unused  Unused
        Boolean
        Unused Flags

    bgp.ssa_l2tpv3_cookie  Cookie
        Byte array
        Cookie

    bgp.ssa_l2tpv3_cookie_len  Cookie Length
        Unsigned 8-bit integer
        Cookie Length

    bgp.ssa_l2tpv3_pref  Preference
        Unsigned 16-bit integer
        Preference

    bgp.ssa_l2tpv3_s  Sequencing bit
        Boolean
        Sequencing S-bit

    bgp.ssa_l2tpv3_session_id  Session ID
        Unsigned 32-bit integer
        Session ID

    bgp.ssa_len  Length
        Unsigned 16-bit integer
        SSA Length

    bgp.ssa_t  Transitive bit
        Boolean
        SSA Transitive bit

    bgp.ssa_type  SSA Type
        Unsigned 16-bit integer
        SSA Type

    bgp.ssa_value  Value
        Byte array
        SSA Value

    bgp.type  Type
        Unsigned 8-bit integer
        BGP message type

    bgp.withdrawn_prefix  Withdrawn prefix
        IPv4 address

Building Automation and Control Network APDU (bacapp)

    bacapp.bacapp_type  APDU Type
        Unsigned 8-bit integer
        APDU Type

Building Automation and Control Network NPDU (bacnet)

    bacnet.control  Control
        Unsigned 8-bit integer
        BACnet Control

    bacnet.control_dest  Destination Specifier
        Boolean
        BACnet Control

    bacnet.control_expect  Expecting Reply
        Boolean
        BACnet Control

    bacnet.control_net  NSDU contains
        Boolean
        BACnet Control

    bacnet.control_prio_high  Priority
        Boolean
        BACnet Control

    bacnet.control_prio_low  Priority
        Boolean
        BACnet Control

    bacnet.control_res1  Reserved
        Boolean
        BACnet Control

    bacnet.control_res2  Reserved
        Boolean
        BACnet Control

    bacnet.control_src  Source specifier
        Boolean
        BACnet Control

    bacnet.dadr_eth  Destination ISO 8802-3 MAC Address
        6-byte Hardware (MAC) Address
        Destination ISO 8802-3 MAC Address

    bacnet.dadr_tmp  Unknown Destination MAC
        Byte array
        Unknown Destination MAC

    bacnet.dlen  Destination MAC Layer Address Length
        Unsigned 8-bit integer
        Destination MAC Layer Address Length

    bacnet.dnet  Destination Network Address
        Unsigned 16-bit integer
        Destination Network Address

    bacnet.hopc  Hop Count
        Unsigned 8-bit integer
        Hop Count

    bacnet.mesgtyp  Message Type
        Unsigned 8-bit integer
        Message Type

    bacnet.perf  Performance Index
        Unsigned 8-bit integer
        Performance Index

    bacnet.pinfo  Port Info
        Unsigned 8-bit integer
        Port Info

    bacnet.pinfolen  Port Info Length
        Unsigned 8-bit integer
        Port Info Length

    bacnet.portid  Port ID
        Unsigned 8-bit integer
        Port ID

    bacnet.rejectreason  Reject Reason
        Unsigned 8-bit integer
        Reject Reason

    bacnet.rportnum  Number of Port Mappings
        Unsigned 8-bit integer
        Number of Port Mappings

    bacnet.sadr_eth  SADR
        6-byte Hardware (MAC) Address
        Source ISO 8802-3 MAC Address

    bacnet.sadr_tmp  Unknown Source MAC
        Byte array
        Unknown Source MAC

    bacnet.slen  Source MAC Layer Address Length
        Unsigned 8-bit integer
        Source MAC Layer Address Length

    bacnet.snet  Source Network Address
        Unsigned 16-bit integer
        Source Network Address

    bacnet.vendor  Vendor ID
        Unsigned 16-bit integer
        Vendor ID

    bacnet.version  Version
        Unsigned 8-bit integer
        BACnet Version

CBAPhysicalDevice (cba_pdev_class)
CCSDS (CCSDS)

    ccsds.apid  APID
        Unsigned 16-bit integer
        Represents APID

    ccsds.checkword  checkword indicator
        Unsigned 8-bit integer
        checkword indicator

    ccsds.dcc  Data Cycle Counter
        Unsigned 16-bit integer
        Data Cycle Counter

    ccsds.length  packet length
        Unsigned 16-bit integer
        packet length

    ccsds.packtype  packet type
        Unsigned 8-bit integer
        Packet Type - Unused in Ku-Band

    ccsds.secheader  secondary header
        Boolean
        secondary header present

    ccsds.seqflag  sequence flags
        Unsigned 16-bit integer
        sequence flags

    ccsds.seqnum  sequence number
        Unsigned 16-bit integer
        sequence number

    ccsds.time  time
        Byte array
        time

    ccsds.timeid  time identifier
        Unsigned 8-bit integer
        time identifier

    ccsds.type  type
        Unsigned 16-bit integer
        type

    ccsds.version  version
        Unsigned 16-bit integer
        version

    ccsds.vid  version identifier
        Unsigned 16-bit integer
        version identifier

    ccsds.zoe  ZOE TLM
        Unsigned 8-bit integer
        CONTAINS S-BAND ZOE PACKETS

CDS Clerk Server Calls (cds_clerkserver)

    cds_clerkserver.opnum  Operation
        Unsigned 16-bit integer
        Operation

Cast Client Control Protocol (cast)

    cast.DSCPValue  DSCPValue
        Unsigned 32-bit integer
        DSCPValue.

    cast.MPI  MPI
        Unsigned 32-bit integer
        MPI.

    cast.ORCStatus  ORCStatus
        Unsigned 32-bit integer
        The status of the opened receive channel.

    cast.RTPPayloadFormat  RTPPayloadFormat
        Unsigned 32-bit integer
        RTPPayloadFormat.

    cast.activeConferenceOnRegistration  ActiveConferenceOnRegistration
        Unsigned 32-bit integer
        ActiveConferenceOnRegistration.

    cast.activeStreamsOnRegistration  ActiveStreamsOnRegistration
        Unsigned 32-bit integer
        ActiveStreamsOnRegistration.

    cast.annexNandWFutureUse  AnnexNandWFutureUse
        Unsigned 32-bit integer
        AnnexNandWFutureUse.

    cast.audio  AudioCodec
        Unsigned 32-bit integer
        The audio codec that is in use.

    cast.bandwidth  Bandwidth
        Unsigned 32-bit integer
        Bandwidth.

    cast.callIdentifier  Call Identifier
        Unsigned 32-bit integer
        Call identifier for this call.

    cast.callInstance  CallInstance
        Unsigned 32-bit integer
        CallInstance.

    cast.callSecurityStatus  CallSecurityStatus
        Unsigned 32-bit integer
        CallSecurityStatus.

    cast.callState  CallState
        Unsigned 32-bit integer
        CallState.

    cast.callType  Call Type
        Unsigned 32-bit integer
        What type of call, in/out/etc

    cast.calledParty  CalledParty
        String
        The number called.

    cast.calledPartyName  Called Party Name
        String
        The name of the party we are calling.

    cast.callingPartyName  Calling Party Name
        String
        The passed name of the calling party.

    cast.cdpnVoiceMailbox  CdpnVoiceMailbox
        String
        CdpnVoiceMailbox.

    cast.cgpnVoiceMailbox  CgpnVoiceMailbox
        String
        CgpnVoiceMailbox.

    cast.clockConversionCode  ClockConversionCode
        Unsigned 32-bit integer
        ClockConversionCode.

    cast.clockDivisor  ClockDivisor
        Unsigned 32-bit integer
        Clock Divisor.

    cast.confServiceNum  ConfServiceNum
        Unsigned 32-bit integer
        ConfServiceNum.

    cast.conferenceID  Conference ID
        Unsigned 32-bit integer
        The conference ID

    cast.customPictureFormatCount  CustomPictureFormatCount
        Unsigned 32-bit integer
        CustomPictureFormatCount.

    cast.dataCapCount  DataCapCount
        Unsigned 32-bit integer
        DataCapCount.

    cast.data_length  Data Length
        Unsigned 32-bit integer
        Number of bytes in the data portion.

    cast.directoryNumber  Directory Number
        String
        The number we are reporting statistics for.

    cast.echoCancelType  Echo Cancel Type
        Unsigned 32-bit integer
        Is echo cancelling enabled or not

    cast.firstGOB  FirstGOB
        Unsigned 32-bit integer
        FirstGOB.

    cast.firstMB  FirstMB
        Unsigned 32-bit integer
        FirstMB.

    cast.format  Format
        Unsigned 32-bit integer
        Format.

    cast.g723BitRate  G723 BitRate
        Unsigned 32-bit integer
        The G723 bit rate for this stream/JUNK if not g723 stream

    cast.h263_capability_bitfield  H263_capability_bitfield
        Unsigned 32-bit integer
        H263_capability_bitfield.

    cast.ipAddress  IP Address
        IPv4 address
        An IP address

    cast.isConferenceCreator  IsConferenceCreator
        Unsigned 32-bit integer
        IsConferenceCreator.

    cast.lastRedirectingParty  LastRedirectingParty
        String
        LastRedirectingParty.

    cast.lastRedirectingPartyName  LastRedirectingPartyName
        String
        LastRedirectingPartyName.

    cast.lastRedirectingReason  LastRedirectingReason
        Unsigned 32-bit integer
        LastRedirectingReason.

    cast.lastRedirectingVoiceMailbox  LastRedirectingVoiceMailbox
        String
        LastRedirectingVoiceMailbox.

    cast.layout  Layout
        Unsigned 32-bit integer
        Layout

    cast.layoutCount  LayoutCount
        Unsigned 32-bit integer
        LayoutCount.

    cast.levelPreferenceCount  LevelPreferenceCount
        Unsigned 32-bit integer
        LevelPreferenceCount.

    cast.lineInstance  Line Instance
        Unsigned 32-bit integer
        The display call plane associated with this call.

    cast.longTermPictureIndex  LongTermPictureIndex
        Unsigned 32-bit integer
        LongTermPictureIndex.

    cast.marker  Marker
        Unsigned 32-bit integer
        Marker value should ne zero.

    cast.maxBW  MaxBW
        Unsigned 32-bit integer
        MaxBW.

    cast.maxBitRate  MaxBitRate
        Unsigned 32-bit integer
        MaxBitRate.

    cast.maxConferences  MaxConferences
        Unsigned 32-bit integer
        MaxConferences.

    cast.maxStreams  MaxStreams
        Unsigned 32-bit integer
        32 bit unsigned integer indicating the maximum number of simultansous RTP duplex streams that the client can handle.

    cast.messageid  Message ID
        Unsigned 32-bit integer
        The function requested/done with this message.

    cast.millisecondPacketSize  MS/Packet
        Unsigned 32-bit integer
        The number of milliseconds of conversation in each packet

    cast.minBitRate  MinBitRate
        Unsigned 32-bit integer
        MinBitRate.

    cast.miscCommandType  MiscCommandType
        Unsigned 32-bit integer
        MiscCommandType

    cast.modelNumber  ModelNumber
        Unsigned 32-bit integer
        ModelNumber.

    cast.numberOfGOBs  NumberOfGOBs
        Unsigned 32-bit integer
        NumberOfGOBs.

    cast.numberOfMBs  NumberOfMBs
        Unsigned 32-bit integer
        NumberOfMBs.

    cast.originalCalledParty  Original Called Party
        String
        The number of the original calling party.

    cast.originalCalledPartyName  Original Called Party Name
        String
        name of the original person who placed the call.

    cast.originalCdpnRedirectReason  OriginalCdpnRedirectReason
        Unsigned 32-bit integer
        OriginalCdpnRedirectReason.

    cast.originalCdpnVoiceMailbox  OriginalCdpnVoiceMailbox
        String
        OriginalCdpnVoiceMailbox.

    cast.passThruPartyID  PassThruPartyID
        Unsigned 32-bit integer
        The pass thru party id

    cast.payloadCapability  PayloadCapability
        Unsigned 32-bit integer
        The payload capability for this media capability structure.

    cast.payloadType  PayloadType
        Unsigned 32-bit integer
        PayloadType.

    cast.payload_rfc_number  Payload_rfc_number
        Unsigned 32-bit integer
        Payload_rfc_number.

    cast.pictureFormatCount  PictureFormatCount
        Unsigned 32-bit integer
        PictureFormatCount.

    cast.pictureHeight  PictureHeight
        Unsigned 32-bit integer
        PictureHeight.

    cast.pictureNumber  PictureNumber
        Unsigned 32-bit integer
        PictureNumber.

    cast.pictureWidth  PictureWidth
        Unsigned 32-bit integer
        PictureWidth.

    cast.pixelAspectRatio  PixelAspectRatio
        Unsigned 32-bit integer
        PixelAspectRatio.

    cast.portNumber  Port Number
        Unsigned 32-bit integer
        A port number

    cast.precedenceDm  PrecedenceDm
        Unsigned 32-bit integer
        Precedence Domain.

    cast.precedenceLv  PrecedenceLv
        Unsigned 32-bit integer
        Precedence Level.

    cast.precedenceValue  Precedence
        Unsigned 32-bit integer
        Precedence value

    cast.privacy  Privacy
        Unsigned 32-bit integer
        Privacy.

    cast.protocolDependentData  ProtocolDependentData
        Unsigned 32-bit integer
        ProtocolDependentData.

    cast.recoveryReferencePictureCount  RecoveryReferencePictureCount
        Unsigned 32-bit integer
        RecoveryReferencePictureCount.

    cast.requestorIpAddress  RequestorIpAddress
        IPv4 address
        RequestorIpAddress

    cast.serviceNum  ServiceNum
        Unsigned 32-bit integer
        ServiceNum.

    cast.serviceNumber  ServiceNumber
        Unsigned 32-bit integer
        ServiceNumber.

    cast.serviceResourceCount  ServiceResourceCount
        Unsigned 32-bit integer
        ServiceResourceCount.

    cast.stationFriendlyName  StationFriendlyName
        String
        StationFriendlyName.

    cast.stationGUID  stationGUID
        String
        stationGUID.

    cast.stationIpAddress  StationIpAddress
        IPv4 address
        StationIpAddress

    cast.stillImageTransmission  StillImageTransmission
        Unsigned 32-bit integer
        StillImageTransmission.

    cast.temporalSpatialTradeOff  TemporalSpatialTradeOff
        Unsigned 32-bit integer
        TemporalSpatialTradeOff.

    cast.temporalSpatialTradeOffCapability  TemporalSpatialTradeOffCapability
        Unsigned 32-bit integer
        TemporalSpatialTradeOffCapability.

    cast.transmitOrReceive  TransmitOrReceive
        Unsigned 32-bit integer
        TransmitOrReceive

    cast.transmitPreference  TransmitPreference
        Unsigned 32-bit integer
        TransmitPreference.

    cast.version  Version
        Unsigned 32-bit integer
        The version in the keepalive version messages.

    cast.videoCapCount  VideoCapCount
        Unsigned 32-bit integer
        VideoCapCount.

    skinny.bitRate  BitRate
        Unsigned 32-bit integer
        BitRate.

Certificate Management Protocol (cmp)

    cmp.CRLAnnContent_item  Item
        No value
        CRLAnnContent/_item

    cmp.GenMsgContent_item  Item
        No value
        GenMsgContent/_item

    cmp.GenRepContent_item  Item
        No value
        GenRepContent/_item

    cmp.PKIFreeText_item  Item
        String
        PKIFreeText/_item

    cmp.POPODecKeyChallContent_item  Item
        No value
        POPODecKeyChallContent/_item

    cmp.POPODecKeyRespContent_item  Item
        Signed 32-bit integer
        POPODecKeyRespContent/_item

    cmp.RevReqContent_item  Item
        No value
        RevReqContent/_item

    cmp.badAlg  badAlg
        Boolean

    cmp.badCertId  badCertId
        Boolean

    cmp.badDataFormat  badDataFormat
        Boolean

    cmp.badMessageCheck  badMessageCheck
        Boolean

    cmp.badPOP  badPOP
        Boolean

    cmp.badRequest  badRequest
        Boolean

    cmp.badSinceDate  badSinceDate
        String

    cmp.badTime  badTime
        Boolean

    cmp.body  body
        Unsigned 32-bit integer

    cmp.caCerts  caCerts
        No value
        KeyRecRepContent/caCerts

    cmp.caCerts_item  Item
        No value
        KeyRecRepContent/caCerts/_item

    cmp.caPubs  caPubs
        No value
        CertRepMessage/caPubs

    cmp.caPubs_item  Item
        No value
        CertRepMessage/caPubs/_item

    cmp.cann  cann
        No value
        PKIBody/cann

    cmp.ccp  ccp
        No value
        PKIBody/ccp

    cmp.ccr  ccr
        No value
        PKIBody/ccr

    cmp.certDetails  certDetails
        No value
        RevDetails/certDetails

    cmp.certId  certId
        No value

    cmp.certOrEncCert  certOrEncCert
        Unsigned 32-bit integer
        CertifiedKeyPair/certOrEncCert

    cmp.certReqId  certReqId
        Signed 32-bit integer
        CertResponse/certReqId

    cmp.certificate  certificate
        No value
        CertOrEncCert/certificate

    cmp.certifiedKeyPair  certifiedKeyPair
        No value
        CertResponse/certifiedKeyPair

    cmp.challenge  challenge
        Byte array
        Challenge/challenge

    cmp.ckuann  ckuann
        No value
        PKIBody/ckuann

    cmp.conf  conf
        No value
        PKIBody/conf

    cmp.cp  cp
        No value
        PKIBody/cp

    cmp.cr  cr
        No value
        PKIBody/cr

    cmp.crlDetails  crlDetails
        Unsigned 32-bit integer
        RevAnnContent/crlDetails

    cmp.crlEntryDetails  crlEntryDetails
        Unsigned 32-bit integer
        RevDetails/crlEntryDetails

    cmp.crlann  crlann
        No value
        PKIBody/crlann

    cmp.crls  crls
        No value
        RevRepContent/crls

    cmp.crls_item  Item
        No value
        RevRepContent/crls/_item

    cmp.encryptedCert  encryptedCert
        No value
        CertOrEncCert/encryptedCert

    cmp.error  error
        No value
        PKIBody/error

    cmp.errorCode  errorCode
        Signed 32-bit integer
        ErrorMsgContent/errorCode

    cmp.errorDetails  errorDetails
        No value
        ErrorMsgContent/errorDetails

    cmp.extraCerts  extraCerts
        No value
        PKIMessage/extraCerts

    cmp.extraCerts_item  Item
        No value
        PKIMessage/extraCerts/_item

    cmp.failInfo  failInfo
        Byte array
        PKIStatusInfo/failInfo

    cmp.freeText  freeText
        No value
        PKIHeader/freeText

    cmp.generalInfo  generalInfo
        No value
        PKIHeader/generalInfo

    cmp.generalInfo_item  Item
        No value
        PKIHeader/generalInfo/_item

    cmp.genm  genm
        No value
        PKIBody/genm

    cmp.genp  genp
        No value
        PKIBody/genp

    cmp.hashAlg  hashAlg
        No value
        OOBCertHash/hashAlg

    cmp.hashVal  hashVal
        Byte array
        OOBCertHash/hashVal

    cmp.header  header
        No value

    cmp.incorrectData  incorrectData
        Boolean

    cmp.infoType  infoType
        String
        InfoTypeAndValue/infoType

    cmp.infoValue  infoValue
        No value
        InfoTypeAndValue/infoValue

    cmp.ip  ip
        No value
        PKIBody/ip

    cmp.ir  ir
        No value
        PKIBody/ir

    cmp.iterationCount  iterationCount
        Signed 32-bit integer
        PBMParameter/iterationCount

    cmp.keyPairHist  keyPairHist
        No value
        KeyRecRepContent/keyPairHist

    cmp.keyPairHist_item  Item
        No value
        KeyRecRepContent/keyPairHist/_item

    cmp.krp  krp
        No value
        PKIBody/krp

    cmp.krr  krr
        No value
        PKIBody/krr

    cmp.kup  kup
        No value
        PKIBody/kup

    cmp.kur  kur
        No value
        PKIBody/kur

    cmp.mac  mac
        No value

    cmp.messageTime  messageTime
        String
        PKIHeader/messageTime

    cmp.missingTimeStamp  missingTimeStamp
        Boolean

    cmp.nested  nested
        No value
        PKIBody/nested

    cmp.newSigCert  newSigCert
        No value
        KeyRecRepContent/newSigCert

    cmp.newWithNew  newWithNew
        No value
        CAKeyUpdAnnContent/newWithNew

    cmp.newWithOld  newWithOld
        No value
        CAKeyUpdAnnContent/newWithOld

    cmp.oldWithNew  oldWithNew
        No value
        CAKeyUpdAnnContent/oldWithNew

    cmp.owf  owf
        No value

    cmp.pKIStatusInfo  pKIStatusInfo
        No value
        ErrorMsgContent/pKIStatusInfo

    cmp.popdecc  popdecc
        No value
        PKIBody/popdecc

    cmp.popdecr  popdecr
        No value
        PKIBody/popdecr

    cmp.privateKey  privateKey
        No value
        CertifiedKeyPair/privateKey

    cmp.protection  protection
        Byte array
        PKIMessage/protection

    cmp.protectionAlg  protectionAlg
        No value
        PKIHeader/protectionAlg

    cmp.publicationInfo  publicationInfo
        No value
        CertifiedKeyPair/publicationInfo

    cmp.pvno  pvno
        Signed 32-bit integer
        PKIHeader/pvno

    cmp.rann  rann
        No value
        PKIBody/rann

    cmp.recipKID  recipKID
        Byte array
        PKIHeader/recipKID

    cmp.recipNonce  recipNonce
        Byte array
        PKIHeader/recipNonce

    cmp.recipient  recipient
        Unsigned 32-bit integer
        PKIHeader/recipient

    cmp.response  response
        No value
        CertRepMessage/response

    cmp.response_item  Item
        No value
        CertRepMessage/response/_item

    cmp.revCerts  revCerts
        No value
        RevRepContent/revCerts

    cmp.revCerts_item  Item
        No value
        RevRepContent/revCerts/_item

    cmp.revocationReason  revocationReason
        Byte array
        RevDetails/revocationReason

    cmp.rp  rp
        No value
        PKIBody/rp

    cmp.rr  rr
        No value
        PKIBody/rr

    cmp.rspInfo  rspInfo
        Byte array
        CertResponse/rspInfo

    cmp.salt  salt
        Byte array
        PBMParameter/salt

    cmp.sender  sender
        Unsigned 32-bit integer
        PKIHeader/sender

    cmp.senderKID  senderKID
        Byte array
        PKIHeader/senderKID

    cmp.senderNonce  senderNonce
        Byte array
        PKIHeader/senderNonce

    cmp.status  status
        Signed 32-bit integer

    cmp.statusString  statusString
        No value
        PKIStatusInfo/statusString

    cmp.status_item  Item
        No value
        RevRepContent/status/_item

    cmp.transactionID  transactionID
        Byte array
        PKIHeader/transactionID

    cmp.type.oid  InfoType
        String
        Type of InfoTypeAndValue

    cmp.willBeRevokedAt  willBeRevokedAt
        String
        RevAnnContent/willBeRevokedAt

    cmp.witness  witness
        Byte array
        Challenge/witness

    cmp.wrongAuthority  wrongAuthority
        Boolean

Certificate Request Message Format (crmf)

    crmf.CertReqMessages_item  Item
        No value
        CertReqMessages/_item

    crmf.Controls_item  Item
        No value
        Controls/_item

    crmf.action  action
        Signed 32-bit integer
        PKIPublicationInfo/action

    crmf.algId  algId
        No value
        PKMACValue/algId

    crmf.algorithmIdentifier  algorithmIdentifier
        No value
        POPOSigningKey/algorithmIdentifier

    crmf.archiveRemGenPrivKey  archiveRemGenPrivKey
        Boolean
        PKIArchiveOptions/archiveRemGenPrivKey

    crmf.authInfo  authInfo
        Unsigned 32-bit integer
        POPOSigningKeyInput/authInfo

    crmf.certReq  certReq
        No value
        CertReqMsg/certReq

    crmf.certReqId  certReqId
        Signed 32-bit integer
        CertRequest/certReqId

    crmf.certTemplate  certTemplate
        No value
        CertRequest/certTemplate

    crmf.controls  controls
        No value
        CertRequest/controls

    crmf.dhMAC  dhMAC
        Byte array
        POPOPrivKey/dhMAC

    crmf.encSymmKey  encSymmKey
        Byte array
        EncryptedValue/encSymmKey

    crmf.encValue  encValue
        Byte array
        EncryptedValue/encValue

    crmf.encryptedPrivKey  encryptedPrivKey
        Unsigned 32-bit integer
        PKIArchiveOptions/encryptedPrivKey

    crmf.encryptedValue  encryptedValue
        No value
        EncryptedKey/encryptedValue

    crmf.envelopedData  envelopedData
        No value
        EncryptedKey/envelopedData

    crmf.extensions  extensions
        Unsigned 32-bit integer
        CertTemplate/extensions

    crmf.generalTime  generalTime
        String
        Time/generalTime

    crmf.intendedAlg  intendedAlg
        No value
        EncryptedValue/intendedAlg

    crmf.issuer  issuer
        Unsigned 32-bit integer
        CertTemplate/issuer

    crmf.issuerUID  issuerUID
        Byte array
        CertTemplate/issuerUID

    crmf.iterationCount  iterationCount
        Signed 32-bit integer
        PBMParameter/iterationCount

    crmf.keyAgreement  keyAgreement
        Unsigned 32-bit integer
        ProofOfPossession/keyAgreement

    crmf.keyAlg  keyAlg
        No value
        EncryptedValue/keyAlg

    crmf.keyEncipherment  keyEncipherment
        Unsigned 32-bit integer
        ProofOfPossession/keyEncipherment

    crmf.keyGenParameters  keyGenParameters
        Byte array
        PKIArchiveOptions/keyGenParameters

    crmf.mac  mac
        No value
        PBMParameter/mac

    crmf.notAfter  notAfter
        Unsigned 32-bit integer
        OptionalValidity/notAfter

    crmf.notBefore  notBefore
        Unsigned 32-bit integer
        OptionalValidity/notBefore

    crmf.owf  owf
        No value
        PBMParameter/owf

    crmf.pop  pop
        Unsigned 32-bit integer
        CertReqMsg/pop

    crmf.poposkInput  poposkInput
        No value
        POPOSigningKey/poposkInput

    crmf.pubInfos  pubInfos
        No value
        PKIPublicationInfo/pubInfos

    crmf.pubInfos_item  Item
        No value
        PKIPublicationInfo/pubInfos/_item

    crmf.pubLocation  pubLocation
        Unsigned 32-bit integer
        SinglePubInfo/pubLocation

    crmf.pubMethod  pubMethod
        Signed 32-bit integer
        SinglePubInfo/pubMethod

    crmf.publicKey  publicKey
        No value

    crmf.publicKeyMAC  publicKeyMAC
        No value
        POPOSigningKeyInput/authInfo/publicKeyMAC

    crmf.raVerified  raVerified
        No value
        ProofOfPossession/raVerified

    crmf.regInfo  regInfo
        No value
        CertReqMsg/regInfo

    crmf.regInfo_item  Item
        No value
        CertReqMsg/regInfo/_item

    crmf.salt  salt
        Byte array
        PBMParameter/salt

    crmf.sender  sender
        Unsigned 32-bit integer
        POPOSigningKeyInput/authInfo/sender

    crmf.serialNumber  serialNumber
        Signed 32-bit integer

    crmf.signature  signature
        No value
        ProofOfPossession/signature

    crmf.signingAlg  signingAlg
        No value
        CertTemplate/signingAlg

    crmf.subject  subject
        Unsigned 32-bit integer
        CertTemplate/subject

    crmf.subjectUID  subjectUID
        Byte array
        CertTemplate/subjectUID

    crmf.subsequentMessage  subsequentMessage
        Signed 32-bit integer
        POPOPrivKey/subsequentMessage

    crmf.symmAlg  symmAlg
        No value
        EncryptedValue/symmAlg

    crmf.thisMessage  thisMessage
        Byte array
        POPOPrivKey/thisMessage

    crmf.type  type
        String
        AttributeTypeAndValue/type

    crmf.type.oid  Type
        String
        Type of AttributeTypeAndValue

    crmf.utcTime  utcTime
        String
        Time/utcTime

    crmf.validity  validity
        No value
        CertTemplate/validity

    crmf.value  value
        No value
        AttributeTypeAndValue/value

    crmf.valueHint  valueHint
        Byte array
        EncryptedValue/valueHint

    crmf.version  version
        Signed 32-bit integer
        CertTemplate/version

Check Point High Availability Protocol (cpha)

    cpha.ifn  Interface Number
        Unsigned 32-bit integer

    cphap.cluster_number  Cluster Number
        Unsigned 16-bit integer
        Cluster Number

    cphap.dst_id  Destination Machine ID
        Unsigned 16-bit integer
        Destination Machine ID

    cphap.ethernet_addr  Ethernet Address
        6-byte Hardware (MAC) Address
        Ethernet Address

    cphap.filler  Filler
        Unsigned 16-bit integer

    cphap.ha_mode  HA mode
        Unsigned 16-bit integer
        HA Mode

    cphap.ha_time_unit  HA Time unit (ms)
        Unsigned 16-bit integer
        HA Time unit

    cphap.hash_len  Hash list length
        Signed 32-bit integer
        Hash list length

    cphap.id_num  Number of IDs reported
        Unsigned 16-bit integer
        Number of IDs reported

    cphap.if_trusted  Interface Trusted
        Boolean
        Interface Trusted

    cphap.in_assume_up  Interfaces assumed up in the Inbound
        Signed 8-bit integer

    cphap.in_up  Interfaces up in the Inbound
        Signed 8-bit integer
        Interfaces up in the Inbound

    cphap.ip  IP Address
        IPv4 address
        IP Address

    cphap.machine_num  Machine Number
        Signed 16-bit integer
        Machine Number

    cphap.magic_number  CPHAP Magic Number
        Unsigned 16-bit integer
        CPHAP Magic Number

    cphap.opcode  OpCode
        Unsigned 16-bit integer
        OpCode

    cphap.out_assume_up  Interfaces assumed up in the Outbound
        Signed 8-bit integer

    cphap.out_up  Interfaces up in the Outbound
        Signed 8-bit integer

    cphap.policy_id  Policy ID
        Unsigned 16-bit integer
        Policy ID

    cphap.random_id  Random ID
        Unsigned 16-bit integer
        Random ID

    cphap.reported_ifs  Reported Interfaces
        Unsigned 32-bit integer
        Reported Interfaces

    cphap.seed  Seed
        Unsigned 32-bit integer
        Seed

    cphap.slot_num  Slot Number
        Signed 16-bit integer
        Slot Number

    cphap.src_id  Source Machine ID
        Unsigned 16-bit integer
        Source Machine ID

    cphap.src_if  Source Interface
        Unsigned 16-bit integer
        Source Interface

    cphap.status  Status
        Unsigned 32-bit integer

    cphap.version  Protocol Version
        Unsigned 16-bit integer
        CPHAP Version

Checkpoint FW-1 (fw1)

    fw1.chain  Chain Position
        String
        Chain Position

    fw1.direction  Direction
        String
        Direction

    fw1.interface  Interface
        String
        Interface

    fw1.type  Type
        Unsigned 16-bit integer

    fw1.uuid  UUID
        Unsigned 32-bit integer
        UUID

Cisco Auto-RP (auto_rp)

    auto_rp.group_prefix  Prefix
        IPv4 address
        Group prefix

    auto_rp.holdtime  Holdtime
        Unsigned 16-bit integer
        The amount of time in seconds this announcement is valid

    auto_rp.mask_len  Mask length
        Unsigned 8-bit integer
        Length of group prefix

    auto_rp.pim_ver  Version
        Unsigned 8-bit integer
        RP's highest PIM version

    auto_rp.prefix_sign  Sign
        Unsigned 8-bit integer
        Group prefix sign

    auto_rp.rp_addr  RP address
        IPv4 address
        The unicast IP address of the RP

    auto_rp.rp_count  RP count
        Unsigned 8-bit integer
        The number of RP addresses contained in this message

    auto_rp.type  Packet type
        Unsigned 8-bit integer
        Auto-RP packet type

    auto_rp.version  Protocol version
        Unsigned 8-bit integer
        Auto-RP protocol version

Cisco Discovery Protocol (cdp)

    cdp.checksum  Checksum
        Unsigned 16-bit integer

    cdp.tlv.len  Length
        Unsigned 16-bit integer

    cdp.tlv.type  Type
        Unsigned 16-bit integer

    cdp.ttl  TTL
        Unsigned 16-bit integer

    cdp.version  Version
        Unsigned 8-bit integer

Cisco Group Management Protocol (cgmp)

    cgmp.count  Count
        Unsigned 8-bit integer

    cgmp.gda  Group Destination Address
        6-byte Hardware (MAC) Address
        Group Destination Address

    cgmp.type  Type
        Unsigned 8-bit integer

    cgmp.usa  Unicast Source Address
        6-byte Hardware (MAC) Address
        Unicast Source Address

    cgmp.version  Version
        Unsigned 8-bit integer

Cisco HDLC (chdlc)

    chdlc.address  Address
        Unsigned 8-bit integer

    chdlc.protocol  Protocol
        Unsigned 16-bit integer

Cisco Hot Standby Router Protocol (hsrp)

    hsrp.auth_data  Authentication Data
        String
        Contains a clear-text 8 character reused password

    hsrp.group  Group
        Unsigned 8-bit integer
        This field identifies the standby group

    hsrp.hellotime  Hellotime
        Unsigned 8-bit integer
        The approximate period between the Hello messages that the router sends

    hsrp.holdtime  Holdtime
        Unsigned 8-bit integer
        Time that the current Hello message should be considered valid

    hsrp.opcode  Op Code
        Unsigned 8-bit integer
        The type of message contained in this packet

    hsrp.priority  Priority
        Unsigned 8-bit integer
        Used to elect the active and standby routers. Numerically higher priority wins vote

    hsrp.reserved  Reserved
        Unsigned 8-bit integer
        Reserved

    hsrp.state  State
        Unsigned 8-bit integer
        The current state of the router sending the message

    hsrp.version  Version
        Unsigned 8-bit integer
        The version of the HSRP messages

    hsrp.virt_ip  Virtual IP Address
        IPv4 address
        The virtual IP address used by this group

Cisco ISL (isl)

    isl.addr  Source or Destination Address
        6-byte Hardware (MAC) Address
        Source or Destination Hardware Address

    isl.bpdu  BPDU
        Boolean
        BPDU indicator

    isl.crc  CRC
        Unsigned 32-bit integer
        CRC field of encapsulated frame

    isl.dst  Destination
        6-byte Hardware (MAC) Address
        Destination Address

    isl.dst_route_desc  Destination route descriptor
        Unsigned 16-bit integer
        Route descriptor to be used for forwarding

    isl.esize  Esize
        Unsigned 8-bit integer
        Frame size for frames less than 64 bytes

    isl.explorer  Explorer
        Boolean
        Explorer

    isl.fcs_not_incl  FCS Not Included
        Boolean
        FCS not included

    isl.hsa  HSA
        Unsigned 24-bit integer
        High bits of source address

    isl.index  Index
        Unsigned 16-bit integer
        Port index of packet source

    isl.len  Length
        Unsigned 16-bit integer

    isl.src  Source
        6-byte Hardware (MAC) Address
        Source Hardware Address

    isl.src_route_desc  Source-route descriptor
        Unsigned 16-bit integer
        Route descriptor to be used for source learning

    isl.src_vlan_id  Source VLAN ID
        Unsigned 16-bit integer
        Source Virtual LAN ID

    isl.trailer  Trailer
        Byte array
        Ethernet Trailer or Checksum

    isl.type  Type
        Unsigned 8-bit integer
        Type

    isl.user  User
        Unsigned 8-bit integer
        User-defined bits

    isl.user_eth  User
        Unsigned 8-bit integer
        Priority (for Ethernet)

    isl.vlan_id  VLAN ID
        Unsigned 16-bit integer
        Virtual LAN ID

Cisco Interior Gateway Routing Protocol (igrp)

    igrp.as  Autonomous System
        Unsigned 16-bit integer
        Autonomous System number

    igrp.update  Update Release
        Unsigned 8-bit integer
        Update Release number

Cisco NetFlow (cflow)

    cflow.aggmethod  AggMethod
        Unsigned 8-bit integer
        CFlow V8 Aggregation Method

    cflow.aggversion  AggVersion
        Unsigned 8-bit integer
        CFlow V8 Aggregation Version

    cflow.bgpnexthop  BGPNextHop
        IPv4 address
        BGP Router Nexthop

    cflow.bgpnexthopv6  BGPNextHop
        IPv6 address
        BGP Router Nexthop

    cflow.count  Count
        Unsigned 16-bit integer
        Count of PDUs

    cflow.data_flowset_id  Data FlowSet (Template Id)
        Unsigned 16-bit integer
        Data FlowSet with corresponding to a template Id

    cflow.dstaddr  DstAddr
        IPv4 address
        Flow Destination Address

    cflow.dstaddrv6  DstAddr
        IPv6 address
        Flow Destination Address

    cflow.dstas  DstAS
        Unsigned 16-bit integer
        Destination AS

    cflow.dstmask  DstMask
        Unsigned 8-bit integer
        Destination Prefix Mask

    cflow.dstport  DstPort
        Unsigned 16-bit integer
        Flow Destination Port

    cflow.engine_id  EngineId
        Unsigned 8-bit integer
        Slot number of switching engine

    cflow.engine_type  EngineType
        Unsigned 8-bit integer
        Flow switching engine type

    cflow.flags  Export Flags
        Unsigned 8-bit integer
        CFlow Flags

    cflow.flow_active_timeout  Flow active timeout
        Unsigned 16-bit integer
        Flow active timeout

    cflow.flow_inactive_timeout  Flow inactive timeout
        Unsigned 16-bit integer
        Flow inactive timeout

    cflow.flows  Flows
        Unsigned 32-bit integer
        Flows Aggregated in PDU

    cflow.flowset_id  FlowSet Id
        Unsigned 16-bit integer
        FlowSet Id

    cflow.flowset_length  FlowSet Length
        Unsigned 16-bit integer
        FlowSet length

    cflow.flowsexp  FlowsExp
        Unsigned 32-bit integer
        Flows exported

    cflow.inputint  InputInt
        Unsigned 16-bit integer
        Flow Input Interface

    cflow.muloctets  MulticastOctets
        Unsigned 32-bit integer
        Count of multicast octets

    cflow.mulpackets  MulticastPackets
        Unsigned 32-bit integer
        Count of multicast packets

    cflow.nexthop  NextHop
        IPv4 address
        Router nexthop

    cflow.nexthopv6  NextHop
        IPv6 address
        Router nexthop

    cflow.octets  Octets
        Unsigned 32-bit integer
        Count of bytes

    cflow.octets64  Octets
        Unsigned 64-bit integer
        Count of bytes

    cflow.octetsexp  OctetsExp
        Unsigned 32-bit integer
        Octets exported

    cflow.option_length  Option Length
        Unsigned 16-bit integer
        Option length

    cflow.option_scope_length  Option Scope Length
        Unsigned 16-bit integer
        Option scope length

    cflow.options_flowset_id  Options FlowSet
        Unsigned 16-bit integer
        Options FlowSet

    cflow.outputint  OutputInt
        Unsigned 16-bit integer
        Flow Output Interface

    cflow.packets  Packets
        Unsigned 32-bit integer
        Count of packets

    cflow.packets64  Packets
        Unsigned 64-bit integer
        Count of packets

    cflow.packetsexp  PacketsExp
        Unsigned 32-bit integer
        Packets exported

    cflow.packetsout  PacketsOut
        Unsigned 64-bit integer
        Count of packets going out

    cflow.protocol  Protocol
        Unsigned 8-bit integer
        IP Protocol

    cflow.routersc  Router Shortcut
        IPv4 address
        Router shortcut by switch

    cflow.samplerate  SampleRate
        Unsigned 16-bit integer
        Sample Frequency of exporter

    cflow.sampling_algorithm  Sampling algorithm
        Unsigned 8-bit integer
        Sampling algorithm

    cflow.sampling_interval  Sampling interval
        Unsigned 32-bit integer
        Sampling interval

    cflow.samplingmode  SamplingMode
        Unsigned 16-bit integer
        Sampling Mode of exporter

    cflow.scope_field_length  Scope Field Length
        Unsigned 16-bit integer
        Scope field length

    cflow.scope_field_type  Scope Type
        Unsigned 16-bit integer
        Scope field type

    cflow.sequence  FlowSequence
        Unsigned 32-bit integer
        Sequence number of flows seen

    cflow.source_id  SourceId
        Unsigned 32-bit integer
        Identifier for export device

    cflow.srcaddr  SrcAddr
        IPv4 address
        Flow Source Address

    cflow.srcaddrv6  SrcAddr
        IPv6 address
        Flow Source Address

    cflow.srcas  SrcAS
        Unsigned 16-bit integer
        Source AS

    cflow.srcmask  SrcMask
        Unsigned 8-bit integer
        Source Prefix Mask

    cflow.srcnet  SrcNet
        IPv4 address
        Flow Source Network

    cflow.srcport  SrcPort
        Unsigned 16-bit integer
        Flow Source Port

    cflow.sysuptime  SysUptime
        Unsigned 32-bit integer
        Time since router booted (in milliseconds)

    cflow.tcpflags  TCP Flags
        Unsigned 8-bit integer
        TCP Flags

    cflow.template_field_count  Field Count
        Unsigned 16-bit integer
        Template field count

    cflow.template_field_length  Length
        Unsigned 16-bit integer
        Template field length

    cflow.template_field_type  Type
        Unsigned 16-bit integer
        Template field type

    cflow.template_flowset_id  Template FlowSet
        Unsigned 16-bit integer
        Template FlowSet

    cflow.template_id  Template Id
        Unsigned 16-bit integer
        Template Id

    cflow.timeend  EndTime
        Time duration
        Uptime at end of flow

    cflow.timestamp  Timestamp
        Date/Time stamp
        Current seconds since epoch

    cflow.timestart  StartTime
        Time duration
        Uptime at start of flow

    cflow.tos  IP ToS
        Unsigned 8-bit integer
        IP Type of Service

    cflow.unix_nsecs  CurrentNSecs
        Unsigned 32-bit integer
        Residual nanoseconds since epoch

    cflow.unix_secs  CurrentSecs
        Unsigned 32-bit integer
        Current seconds since epoch

    cflow.version  Version
        Unsigned 16-bit integer
        NetFlow Version

Cisco SLARP (slarp)

    slarp.address  Address
        IPv4 address

    slarp.mysequence  Outgoing sequence number
        Unsigned 32-bit integer

    slarp.ptype  Packet type
        Unsigned 32-bit integer

    slarp.yoursequence  Returned sequence number
        Unsigned 32-bit integer

Cisco Session Management (sm)

    sm.bearer  Bearer ID
        Unsigned 16-bit integer

    sm.channel  Channel ID
        Unsigned 16-bit integer

    sm.len  Length
        Unsigned 16-bit integer

    sm.msg_type  Message Type
        Unsigned 16-bit integer

    sm.msgid  Message ID
        Unsigned 16-bit integer

    sm.protocol  Protocol Type
        Unsigned 16-bit integer

    sm.sm_msg_type  SM Message Type
        Unsigned 32-bit integer

Clearcase NFS (clearcase)

    clearcase.procedure_v3  V3 Procedure
        Unsigned 32-bit integer
        V3 Procedure

CoSine IPNOS L2 debug output (cosine)

    cosine.err  Error Code
        Unsigned 8-bit integer

    cosine.off  Offset
        Unsigned 8-bit integer

    cosine.pri  Priority
        Unsigned 8-bit integer

    cosine.pro  Protocol
        Unsigned 8-bit integer

    cosine.rm  Rate Marking
        Unsigned 8-bit integer

Common Industrial Protocol (cip)

    cip.attribute  Attribute
        Unsigned 8-bit integer
        Attribute

    cip.class  Class
        Unsigned 8-bit integer
        Class

    cip.connpoint  Connection Point
        Unsigned 8-bit integer
        Connection Point

    cip.devtype  Device Type
        Unsigned 16-bit integer
        Device Type

    cip.epath  EPath
        Byte array
        EPath

    cip.fwo.cmp  Compatibility
        Unsigned 8-bit integer
        Fwd Open: Compatibility bit

    cip.fwo.consize  Connection Size
        Unsigned 16-bit integer
        Fwd Open: Connection size

    cip.fwo.dir  Direction
        Unsigned 8-bit integer
        Fwd Open: Direction

    cip.fwo.f_v  Connection Size Type
        Unsigned 16-bit integer
        Fwd Open: Fixed or variable connection size

    cip.fwo.major  Major Revision
        Unsigned 8-bit integer
        Fwd Open: Major Revision

    cip.fwo.owner  Owner
        Unsigned 16-bit integer
        Fwd Open: Redundant owner bit

    cip.fwo.prio  Priority
        Unsigned 16-bit integer
        Fwd Open: Connection priority

    cip.fwo.transport  Class
        Unsigned 8-bit integer
        Fwd Open: Transport Class

    cip.fwo.trigger  Trigger
        Unsigned 8-bit integer
        Fwd Open: Production trigger

    cip.fwo.type  Connection Type
        Unsigned 16-bit integer
        Fwd Open: Connection type

    cip.genstat  General Status
        Unsigned 8-bit integer
        General Status

    cip.instance  Instance
        Unsigned 8-bit integer
        Instance

    cip.linkaddress  Link Address
        Unsigned 8-bit integer
        Link Address

    cip.port  Port
        Unsigned 8-bit integer
        Port Identifier

    cip.rr  Request/Response
        Unsigned 8-bit integer
        Request or Response message

    cip.sc  Service
        Unsigned 8-bit integer
        Service Code

    cip.symbol  Symbol
        String
        ANSI Extended Symbol Segment

    cip.vendor  Vendor ID
        Unsigned 16-bit integer
        Vendor ID

Common Open Policy Service (cops)

    cops.accttimer.value  Contents: ACCT Timer Value
        Unsigned 16-bit integer
        Accounting Timer Value in AcctTimer object

    cops.c_num  C-Num
        Unsigned 8-bit integer
        C-Num in COPS Object Header

    cops.c_type  C-Type
        Unsigned 8-bit integer
        C-Type in COPS Object Header

    cops.client_type  Client Type
        Unsigned 16-bit integer
        Client Type in COPS Common Header

    cops.context.m_type  M-Type
        Unsigned 16-bit integer
        M-Type in COPS Context Object

    cops.context.r_type  R-Type
        Unsigned 16-bit integer
        R-Type in COPS Context Object

    cops.cperror  Error
        Unsigned 16-bit integer
        Error in Error object

    cops.cperror_sub  Error Sub-code
        Unsigned 16-bit integer
        Error Sub-code in Error object

    cops.decision.cmd  Command-Code
        Unsigned 16-bit integer
        Command-Code in Decision/LPDP Decision object

    cops.decision.flags  Flags
        Unsigned 16-bit integer
        Flags in Decision/LPDP Decision object

    cops.error  Error
        Unsigned 16-bit integer
        Error in Error object

    cops.error_sub  Error Sub-code
        Unsigned 16-bit integer
        Error Sub-code in Error object

    cops.flags  Flags
        Unsigned 8-bit integer
        Flags in COPS Common Header

    cops.gperror  Error
        Unsigned 16-bit integer
        Error in Error object

    cops.gperror_sub  Error Sub-code
        Unsigned 16-bit integer
        Error Sub-code in Error object

    cops.in-int.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS IN-Int object

    cops.in-int.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS IN-Int object

    cops.in-out-int.ifindex  ifIndex
        Unsigned 32-bit integer
        If SNMP is supported, corresponds to MIB-II ifIndex

    cops.integrity.key_id  Contents: Key ID
        Unsigned 32-bit integer
        Key ID in Integrity object

    cops.integrity.seq_num  Contents: Sequence Number
        Unsigned 32-bit integer
        Sequence Number in Integrity object

    cops.katimer.value  Contents: KA Timer Value
        Unsigned 16-bit integer
        Keep-Alive Timer Value in KATimer object

    cops.lastpdpaddr.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS LastPDPAddr object

    cops.lastpdpaddr.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS LastPDPAddr object

    cops.msg_len  Message Length
        Unsigned 32-bit integer
        Message Length in COPS Common Header

    cops.obj.len  Object Length
        Unsigned 32-bit integer
        Object Length in COPS Object Header

    cops.op_code  Op Code
        Unsigned 8-bit integer
        Op Code in COPS Common Header

    cops.out-int.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS OUT-Int object

    cops.out-int.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS OUT-Int

    cops.pc_activity_count  Count
        Unsigned 32-bit integer
        Count

    cops.pc_algorithm  Algorithm
        Unsigned 16-bit integer
        Algorithm

    cops.pc_bcid  Billing Correlation ID
        Unsigned 32-bit integer
        Billing Correlation ID

    cops.pc_bcid_ev  BDID Event Counter
        Unsigned 32-bit integer
        BCID Event Counter

    cops.pc_bcid_ts  BDID Timestamp
        Unsigned 32-bit integer
        BCID Timestamp

    cops.pc_close_subcode  Reason Sub Code
        Unsigned 16-bit integer
        Reason Sub Code

    cops.pc_cmts_ip  CMTS IP Address
        IPv4 address
        CMTS IP Address

    cops.pc_cmts_ip_port  CMTS IP Port
        Unsigned 16-bit integer
        CMTS IP Port

    cops.pc_delete_subcode  Reason Sub Code
        Unsigned 16-bit integer
        Reason Sub Code

    cops.pc_dest_ip  Destination IP Address
        IPv4 address
        Destination IP Address

    cops.pc_dest_port  Destination IP Port
        Unsigned 16-bit integer
        Destination IP Port

    cops.pc_dfccc_id  CCC ID
        Unsigned 32-bit integer
        CCC ID

    cops.pc_dfccc_ip  DF IP Address CCC
        IPv4 address
        DF IP Address CCC

    cops.pc_dfccc_ip_port  DF IP Port CCC
        Unsigned 16-bit integer
        DF IP Port CCC

    cops.pc_dfcdc_ip  DF IP Address CDC
        IPv4 address
        DF IP Address CDC

    cops.pc_dfcdc_ip_port  DF IP Port CDC
        Unsigned 16-bit integer
        DF IP Port CDC

    cops.pc_direction  Direction
        Unsigned 8-bit integer
        Direction

    cops.pc_ds_field  DS Field (DSCP or TOS)
        Unsigned 8-bit integer
        DS Field (DSCP or TOS)

    cops.pc_gate_command_type  Gate Command Type
        Unsigned 16-bit integer
        Gate Command Type

    cops.pc_gate_id  Gate Identifier
        Unsigned 32-bit integer
        Gate Identifier

    cops.pc_gate_spec_flags  Flags
        Unsigned 8-bit integer
        Flags

    cops.pc_key  Security Key
        Unsigned 32-bit integer
        Security Key

    cops.pc_max_packet_size  Maximum Packet Size
        Unsigned 32-bit integer
        Maximum Packet Size

    cops.pc_min_policed_unit  Minimum Policed Unit
        Unsigned 32-bit integer
        Minimum Policed Unit

    cops.pc_mm_amid  AMID
        Unsigned 32-bit integer
        PacketCable Multimedia AMID

    cops.pc_mm_amrtrps  Assumed Minimum Reserved Traffic Rate Packet Size
        Unsigned 16-bit integer
        PacketCable Multimedia Committed Envelope Assumed Minimum Reserved Traffic Rate Packet Size

    cops.pc_mm_classifier_dscp  DSCP/TOS Field
        Unsigned 8-bit integer
        PacketCable Multimedia Classifier DSCP/TOS Field

    cops.pc_mm_classifier_dscp_mask  DSCP/TOS Mask
        Unsigned 8-bit integer
        PacketCable Multimedia Classifer DSCP/TOS Mask

    cops.pc_mm_classifier_dst_addr  Destination address
        IPv4 address
        PacketCable Multimedia Classifier Destination IP Address

    cops.pc_mm_classifier_dst_port  Destination Port
        Unsigned 16-bit integer
        PacketCable Multimedia Classifier Source Port

    cops.pc_mm_classifier_priority  Priority
        Unsigned 8-bit integer
        PacketCable Multimedia Classifier Priority

    cops.pc_mm_classifier_proto_id  Protocol ID
        Unsigned 16-bit integer
        PacketCable Multimedia Classifier Protocol ID

    cops.pc_mm_classifier_src_addr  Source address
        IPv4 address
        PacketCable Multimedia Classifier Source IP Address

    cops.pc_mm_classifier_src_port  Source Port
        Unsigned 16-bit integer
        PacketCable Multimedia Classifier Source Port

    cops.pc_mm_docsis_scn  Service Class Name
        String
        PacketCable Multimedia DOCSIS Service Class Name

    cops.pc_mm_envelope  Envelope
        Unsigned 8-bit integer
        PacketCable Multimedia Envelope

    cops.pc_mm_error_ec  Error-Code
        Unsigned 16-bit integer
        PacketCable Multimedia PacketCable-Error Error-Code

    cops.pc_mm_error_esc  Error-code
        Unsigned 16-bit integer
        PacketCable Multimedia PacketCable-Error Error Sub-code

    cops.pc_mm_fs_envelope  Envelope
        Unsigned 8-bit integer
        PacketCable Multimedia Flow Spec Envelope

    cops.pc_mm_fs_svc_num  Service Number
        Unsigned 8-bit integer
        PacketCable Multimedia Flow Spec Service Number

    cops.pc_mm_gpi  Grants Per Interval
        Unsigned 8-bit integer
        PacketCable Multimedia Grants Per Interval

    cops.pc_mm_gs_dscp  DSCP/TOS Field
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec DSCP/TOS Field

    cops.pc_mm_gs_dscp_mask  DSCP/TOS Mask
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec DSCP/TOS Mask

    cops.pc_mm_gs_flags  Flags
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec Flags

    cops.pc_mm_gs_reason  Reason
        Unsigned 16-bit integer
        PacketCable Multimedia Gate State Reason

    cops.pc_mm_gs_scid  SessionClassID
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec SessionClassID

    cops.pc_mm_gs_scid_conf  SessionClassID Configurable
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec SessionClassID Configurable

    cops.pc_mm_gs_scid_preempt  SessionClassID Preemption
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec SessionClassID Preemption

    cops.pc_mm_gs_scid_prio  SessionClassID Priority
        Unsigned 8-bit integer
        PacketCable Multimedia GateSpec SessionClassID Priority

    cops.pc_mm_gs_state  State
        Unsigned 16-bit integer
        PacketCable Multimedia Gate State

    cops.pc_mm_gs_timer_t1  Timer T1
        Unsigned 16-bit integer
        PacketCable Multimedia GateSpec Timer T1

    cops.pc_mm_gs_timer_t2  Timer T2
        Unsigned 16-bit integer
        PacketCable Multimedia GateSpec Timer T2

    cops.pc_mm_gs_timer_t3  Timer T3
        Unsigned 16-bit integer
        PacketCable Multimedia GateSpec Timer T3

    cops.pc_mm_gs_timer_t4  Timer T4
        Unsigned 16-bit integer
        PacketCable Multimedia GateSpec Timer T4

    cops.pc_mm_gti  Gate Time Info
        Unsigned 32-bit integer
        PacketCable Multimedia Gate Time Info

    cops.pc_mm_gui  Gate Usage Info
        Unsigned 32-bit integer
        PacketCable Multimedia Gate Usage Info

    cops.pc_mm_mdl  Maximum Downstream Latency
        Unsigned 32-bit integer
        PacketCable Multimedia Maximum Downstream Latency

    cops.pc_mm_mrtr  Minimum Reserved Traffic Rate
        Unsigned 32-bit integer
        PacketCable Multimedia Committed Envelope Minimum Reserved Traffic Rate

    cops.pc_mm_mstr  Maximum Sustained Traffic Rate
        Unsigned 32-bit integer
        PacketCable Multimedia Committed Envelope Maximum Sustained Traffic Rate

    cops.pc_mm_mtb  Maximum Traffic Burst
        Unsigned 32-bit integer
        PacketCable Multimedia Committed Envelope Maximum Traffic Burst

    cops.pc_mm_ngi  Nominal Grant Interval
        Unsigned 32-bit integer
        PacketCable Multimedia Nominal Grant Interval

    cops.pc_mm_npi  Nominal Polling Interval
        Unsigned 32-bit integer
        PacketCable Multimedia Nominal Polling Interval

    cops.pc_mm_rtp  Request Transmission Policy
        Unsigned 32-bit integer
        PacketCable Multimedia Committed Envelope Traffic Priority

    cops.pc_mm_tbul_ul  Usage Limit
        Unsigned 32-bit integer
        PacketCable Multimedia Time-Based Usage Limit

    cops.pc_mm_tgj  Tolerated Grant Jitter
        Unsigned 32-bit integer
        PacketCable Multimedia Tolerated Grant Jitter

    cops.pc_mm_tp  Traffic Priority
        Unsigned 8-bit integer
        PacketCable Multimedia Committed Envelope Traffic Priority

    cops.pc_mm_tpj  Tolerated Poll Jitter
        Unsigned 32-bit integer
        PacketCable Multimedia Tolerated Poll Jitter

    cops.pc_mm_ugs  Unsolicited Grant Size
        Unsigned 16-bit integer
        PacketCable Multimedia Unsolicited Grant Size

    cops.pc_mm_vbul_ul  Usage Limit
        Unsigned 64-bit integer
        PacketCable Multimedia Volume-Based Usage Limit

    cops.pc_mm_vi_major  Major Version Number
        Unsigned 16-bit integer
        PacketCable Multimedia Major Version Number

    cops.pc_mm_vi_minor  Minor Version Number
        Unsigned 16-bit integer
        PacketCable Multimedia Minor Version Number

    cops.pc_packetcable_err_code  Error Code
        Unsigned 16-bit integer
        Error Code

    cops.pc_packetcable_sub_code  Error Sub Code
        Unsigned 16-bit integer
        Error Sub Code

    cops.pc_peak_data_rate  Peak Data Rate

        Peak Data Rate

    cops.pc_prks_ip  PRKS IP Address
        IPv4 address
        PRKS IP Address

    cops.pc_prks_ip_port  PRKS IP Port
        Unsigned 16-bit integer
        PRKS IP Port

    cops.pc_protocol_id  Protocol ID
        Unsigned 8-bit integer
        Protocol ID

    cops.pc_reason_code  Reason Code
        Unsigned 16-bit integer
        Reason Code

    cops.pc_remote_flags  Flags
        Unsigned 16-bit integer
        Flags

    cops.pc_remote_gate_id  Remote Gate ID
        Unsigned 32-bit integer
        Remote Gate ID

    cops.pc_reserved  Reserved
        Unsigned 32-bit integer
        Reserved

    cops.pc_session_class  Session Class
        Unsigned 8-bit integer
        Session Class

    cops.pc_slack_term  Slack Term
        Unsigned 32-bit integer
        Slack Term

    cops.pc_spec_rate  Rate

        Rate

    cops.pc_src_ip  Source IP Address
        IPv4 address
        Source IP Address

    cops.pc_src_port  Source IP Port
        Unsigned 16-bit integer
        Source IP Port

    cops.pc_srks_ip  SRKS IP Address
        IPv4 address
        SRKS IP Address

    cops.pc_srks_ip_port  SRKS IP Port
        Unsigned 16-bit integer
        SRKS IP Port

    cops.pc_subscriber_id4  Subscriber Identifier (IPv4)
        IPv4 address
        Subscriber Identifier (IPv4)

    cops.pc_subscriber_id6  Subscriber Identifier (IPv6)
        IPv6 address
        Subscriber Identifier (IPv6)

    cops.pc_subtree  Object Subtree
        Unsigned 16-bit integer
        Object Subtree

    cops.pc_t1_value  Timer T1 Value (sec)
        Unsigned 16-bit integer
        Timer T1 Value (sec)

    cops.pc_t7_value  Timer T7 Value (sec)
        Unsigned 16-bit integer
        Timer T7 Value (sec)

    cops.pc_t8_value  Timer T8 Value (sec)
        Unsigned 16-bit integer
        Timer T8 Value (sec)

    cops.pc_token_bucket_rate  Token Bucket Rate

        Token Bucket Rate

    cops.pc_token_bucket_size  Token Bucket Size

        Token Bucket Size

    cops.pc_transaction_id  Transaction Identifier
        Unsigned 16-bit integer
        Transaction Identifier

    cops.pdp.tcp_port  TCP Port Number
        Unsigned 32-bit integer
        TCP Port Number of PDP in PDPRedirAddr/LastPDPAddr object

    cops.pdprediraddr.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS PDPRedirAddr object

    cops.pdprediraddr.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS PDPRedirAddr object