Ethereal

Display Filter Reference
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Introduction

Ethereal has a rich set of display filters (42,165 as of version 0.99.0) that let you quickly drill down to the traffic that you want to see. Below you will find a list of all of the protocols that Ethereal supports. On each protocol page you will find a list of supported display filters for that protocol, along with data type and version information.

Information using Ethereal's display filters can be found in the ethereal-filter(4) man page or in the User's Guide

3

3comxns: 3Com XNS Encapsulation

9

9p: Plan 9 9P

A

a11: 3GPP2 A11
aal1: ATM AAL1
aal3_4: ATM AAL3/4
aarp: Appletalk Address Resolution Protocol
acap: Application Configuration Access Protocol
acn: ACN
acp133: ACP133 Attribute Syntaxes
acse: ISO 8650-1 OSI Association Control Service
actrace: AudioCodes Trunk Trace
adp: Aruba - Aruba Discovery Protocol
afp: Apple Filing Protocol
afs: Andrew File System (AFS)
agentx: AgentX
ah: Authentication Header
aim: AOL Instant Messenger
aim_admin: AIM Administrative
aim_adverts: AIM Advertisements
aim_bos: AIM Privacy Management Service
aim_buddylist: AIM Buddylist Service
aim_chat: AIM Chat Service
aim_chatnav: AIM Chat Navigation
aim_dir: AIM Directory Search
aim_email: AIM E-mail
aim_generic: AIM Generic Service
aim_icq: AIM ICQ
aim_invitation: AIM Invitation Service
aim_location: AIM Location
aim_lookup: AIM User Lookup
aim_messaging: AIM Messaging
aim_oft: AIM OFT
aim_popup: AIM Popup
aim_signon: AIM Signon
aim_ssi: AIM Server Side Info
aim_sst: AIM Server Side Themes
aim_stats: AIM Statistics
aim_translate: AIM Translate
airopeek: AiroPeek radio information
ajp13: Apache JServ Protocol v1.3
alc: Asynchronous Layered Coding
alcap: AAL type 2 signalling protocol (Q.2630)
amr: Adaptive Multi-Rate
ans: Intel ANS probe
ansi_637_tele: ANSI IS-637-A (SMS) Teleservice Layer
ansi_637_trans: ANSI IS-637-A (SMS) Transport Layer
ansi_683: ANSI IS-683-A (OTA (Mobile))
ansi_801: ANSI IS-801 (Location Services (PLD))
ansi_a_bsmap: ANSI A-I/F BSMAP
ansi_a_dtap: ANSI A-I/F DTAP
ansi_map: ANSI Mobile Application Part
aodv: Ad hoc On-demand Distance Vector Routing Protocol
aodv6: Ad hoc On-demand Distance Vector Routing Protocol v6
aoe: ATAoverEthernet
ap1394: Apple IP-over-IEEE 1394
apap: Printer Access Protocol
application-x-jxta-msg: Media Type: application/x-jxta-msg
arcnet: ARCNET
armagetronad: The Armagetron Advanced OpenGL Tron clone
arp: Address Resolution Protocol
artnet: Art-Net
asap: Aggregate Server Access Protocol
ascend: Lucent/Ascend debug output
asf: Alert Standard Forum
asn1: ASN.1 decoding
asp: AppleTalk Session Protocol
atm: ATM
atp: AppleTalk Transaction Protocol packet
atsvc: Microsoft AT-Scheduler Service
auto_rp: Cisco Auto-RP
ax4000: AX/4000 Test Block

B

bacapp: Building Automation and Control Network APDU
bacnet: Building Automation and Control Network NPDU
bacp: PPP Bandwidth Allocation Control Protocol
bap: PPP Bandwidth Allocation Protocol
basicxid: Logical-Link Control Basic Format XID
bcp: PPP Bridge Control Protocol
beep: Blocks Extensible Exchange Protocol
ber: Basic Encoding Rules (ASN.1 X.690)
bfdcontrol: Bi-directional Fault Detection Control Message
bgp: Border Gateway Protocol
bicc: Bearer Independent Call Control
bittorrent: BitTorrent
bofl: Wellfleet Breath of Life
bootp: Bootstrap Protocol
bootparams: Boot Parameters
bossvr: DCE/RPC BOS Server
brdwlk: Boardwalk
browser: Microsoft Windows Browser Protocol
bssap: BSSAP/BSAP
bssgp: Base Station Subsystem GPRS Protocol
budb: DCE/DFS BUDB
butc: DCE/RPC BUTC
bvlc: BACnet Virtual Link Control

C

camel: Camel
cast: Cast Client Control Protocol
cba_acco_cb: ICBAAccoCallback
cba_acco_cb2: ICBAAccoCallback2
cba_acco_mgt: ICBAAccoMgt
cba_acco_mgt2: ICBAAccoMgt2
cba_acco_server: ICBAAccoServer
cba_acco_server2: ICBAAccoServer2
cba_acco_server_srt: ICBAAccoServerSRT
cba_acco_sync: ICBAAccoSync
cba_browse: ICBABrowse
cba_browse2: ICBABrowse2
cba_grouperror: ICBAGroupError
cba_grouperror_event: ICBAGroupErrorEvent
cba_ldev: ICBALogicalDevice
cba_ldev2: ICBALogicalDevice2
cba_pdev: ICBAPhysicalDevice
cba_pdev2: ICBAPhysicalDevice2
cba_pdev_class: CBAPhysicalDevice
cba_pdev_pc: ICBAPhysicalDevicePC
cba_pdev_pc_event: ICBAPhysicalDevicePCEvent
cba_persist: ICBAPersist
cba_persist2: ICBAPersist2
cba_rtauto: ICBARTAuto
cba_rtauto2: ICBARTAuto2
cba_state: ICBAState
cba_state_event: ICBAStateEvent
cba_sysprop: ICBASystemProperties
cba_time: ICBATime
cbcp: PPP Callback Control Protocol
ccp: PPP Compression Control Protocol
ccsds: CCSDS
ccsrl: H.324/CCSRL
cdp: Cisco Discovery Protocol
cdpcp: PPP CDP Control Protocol
cds_clerkserver: CDS Clerk Server Calls
cds_solicit: DCE/RPC CDS Solicitation
cdt: Compressed Data Type
cflow: Cisco NetFlow
cgmp: Cisco Group Management Protocol
chap: PPP Challenge Handshake Authentication Protocol
chdlc: Cisco HDLC
cigi: Common Image Generator Interface
cimd: Computer Interface to Message Distribution
cip: Common Industrial Protocol
ciscowl: Cisco Wireless Layer 2
cldap: Connectionless Lightweight Directory Access Protocol
clearcase: Clearcase NFS
clnp: ISO 8473 CLNP ConnectionLess Network Protocol
cltp: ISO 8602 CLTP ConnectionLess Transport Protocol
cmip: X711 CMIP
cmp: Certificate Management Protocol
cms: Cryptographic Message Syntax
comp_data: PPP Compressed Datagram
conv: DCE/RPC Conversation Manager
cops: Common Open Policy Service
cosine: CoSine IPNOS L2 debug output
cotp: ISO 8073 COTP Connection-Oriented Transport Protocol
cpfi: Cross Point Frame Injector
cpha: Check Point High Availability Protocol
cprpc_server: DNS Control Program Server
crmf: Certificate Request Message Format
csm_encaps: CSM_ENCAPS
cups: Common Unix Printing System (CUPS) Browsing Protocol

D

daap: Digital Audio Access Protocol
dap: X.519 Directory Access Protocol
data: Data
data-text-lines: Line-based text data
dc: Dublin Core Metadata (DC)
dccp: Distributed Checksum Clearinghouse Protocol
dce_dfs: DFS Calls
dce_update: DCE/RPC UpServer
dcerpc: DCE RPC
DCERPC_NT: Dummy Protocol
dcm: DICOM
dcom: DCOM
dcp: Datagram Congestion Control Protocol
ddp: Datagram Delivery Protocol
ddtp: Dynamic DNS Tools Protocol
dec_dna: DEC DNA Routing Protocol
dec_stp: DEC Spanning Tree Protocol
dfs: Microsoft Distributed File System
dhcpfo: DHCP Failover
dhcpv6: DHCPv6
diameter: Diameter Protocol
dis: Distributed Interactive Simulation
disp: X.519 Directory Information Shadowing Protocol
dispatch: DCOM IDispatch
distcc: Distcc Distributed Compiler
dlsw: Data Link SWitching
dnp3: Distributed Network Protocol 3.0
dns: Domain Name Service
dnsserver: Windows 2000 DNS
docsis: DOCSIS 1.1
docsis_bpkmattr: DOCSIS Baseline Privacy Key Management Attributes
docsis_bpkmreq: DOCSIS Baseline Privacy Key Management Request
docsis_bpkmrsp: DOCSIS Baseline Privacy Key Management Response
docsis_dccack: DOCSIS Downstream Channel Change Acknowledge
docsis_dccreq: DOCSIS Downstream Channel Change Request
docsis_dccrsp: DOCSIS Downstream Channel Change Response
docsis_dcd: DOCSIS Downstream Channel Descriptor
docsis_dsaack: DOCSIS Dynamic Service Addition Acknowledge
docsis_dsareq: DOCSIS Dynamic Service Addition Request
docsis_dsarsp: DOCSIS Dynamic Service Addition Response
docsis_dscack: DOCSIS Dynamic Service Change Acknowledgement
docsis_dscreq: DOCSIS Dynamic Service Change Request
docsis_dscrsp: DOCSIS Dynamic Service Change Response
docsis_dsdreq: DOCSIS Dynamic Service Delete Request
docsis_dsdrsp: DOCSIS Dynamic Service Delete Response
docsis_intrngreq: DOCSIS Initial Ranging Message
docsis_map: DOCSIS Upstream Bandwidth Allocation
docsis_mgmt: DOCSIS Mac Management
docsis_regack: DOCSIS Registration Acknowledge
docsis_regreq: DOCSIS Registration Requests
docsis_regrsp: DOCSIS Registration Responses
docsis_rngreq: DOCSIS Range Request Message
docsis_rngrsp: DOCSIS Ranging Response
docsis_tlv: DOCSIS Appendix C TLV's
docsis_type29ucd: DOCSIS Upstream Channel Descriptor Type 29
docsis_uccreq: DOCSIS Upstream Channel Change Request
docsis_uccrsp: DOCSIS Upstream Channel Change Response
docsis_ucd: DOCSIS Upstream Channel Descriptor
docsis_vsif: DOCSIS Vendor Specific Endodings
dop: X.501 Directory Operational Binding Management Protocol
drsuapi: DRSUAPI
dsi: Data Stream Interface
dsp: X.519 Directory System Protocol
dssetup: Active Directory Setup
dtp: Dynamic Trunking Protocol
dtsprovider: DCE Distributed Time Service Provider
dtsstime_req: DCE Distributed Time Service Local Server
dua: DPNSS/DASS2-User Adaptation Layer
dvmrp: Distance Vector Multicast Routing Protocol

E

e.212: ITU-T E.212 number
e164: ITU-T E.164 number
eap: Extensible Authentication Protocol
eapol: 802.1X Authentication
echo: Echo
edonkey: eDonkey Protocol
edp: Extreme Discovery Protocol
efs: Microsoft Encrypted File System Service
efsrpc: Microsoft Encrypted File System Service
eigrp: Enhanced Interior Gateway Routing Protocol
els: FC Extended Link Svc
enc: OpenBSD Encapsulating device
enip: EtherNet/IP (Industrial Protocol)
enrp: Endpoint Name Resolution Protocol
enttec: ENTTEC
epm: DCE/RPC Endpoint Mapper
epm4: DCE/RPC Endpoint Mapper v4
esis: ISO 9542 ESIS Routeing Information Exchange Protocol
esp: Encapsulating Security Payload
ess: Extended Security Services
eth: Ethernet
etheric: Etheric
etherip: Ethernet over IP
eventlog: Microsoft Eventlog Service

F

fc: Fibre Channel
FC-dNS: Fibre Channel Name Server
fcct: Fibre Channel Common Transport
fcdns: Fibre Channel Name Server
fcfzs: Fibre Channel Fabric Zone Server
fcip: FCIP
fcp: Fibre Channel Protocol for SCSI
fcs: FC Fabric Configuration Server
fcsp: Fibre Channel Security Protocol
fddi: Fiber Distributed Data Interface
fix: Financial Information eXchange Protocol
fldb: DCE/RPC FLDB
fr: Frame Relay
frame: Frame
frsapi: Microsoft File Replication Service API
frsrpc: Microsoft File Replication Service
ftam: ISO 8571 FTAM
ftbp: X.420 File Transfer Body Part
ftp: File Transfer Protocol (FTP)
ftp-data: FTP Data
ftserver: FTServer Operations
fw1: Checkpoint FW-1
FZS: Fibre Channel Fabric Zone Server

G

g723: G.723
gift: giFT Internet File Transfer
giop: General Inter-ORB Protocol
giop-coseventcomm: Coseventcomm Dissector Using GIOP API
giop-cosnaming: Cosnaming Dissector Using GIOP API
giop-parlay: Parlay Dissector Using GIOP API
giop-tango: Tango Dissector Using GIOP API
gmrp: GARP Multicast Registration Protocol
gnm: ITU M.3100 Generic Network Information Model
gnutella: Gnutella Protocol
gprs_ns: GPRS Network service
gre: Generic Routing Encapsulation
gryphon: DG Gryphon Protocol
gsm-sms-ud: GSM Short Message Service User Data
gsm_a_bssmap: GSM A-I/F BSSMAP
gsm_a_dtap: GSM A-I/F DTAP
gsm_a_rp: GSM A-I/F RP
gsm_map: GSM Mobile Application
gsm_sms: GSM SMS TPDU (GSM 03.40)
gsm_ss: GSM_SS
gss-api: GSS-API Generic Security Service Application Program Interface
gtp: GPRS Tunneling Protocol
gtpv0: GPRS Tunnelling Protocol v0
gtpv1: GPRS Tunnelling Protocol v1
gvrp: GARP VLAN Registration Protocol

H

h1: Sinec H1 Protocol
h221nonstd: H221NonStandard
h223: ITU-T Recommendation H.223
h225: H323-MESSAGES
h235: H235-SECURITY-MESSAGES
h245: MULTIMEDIA-SYSTEM-CONTROL
h248: H.248 MEGACO
h261: ITU-T Recommendation H.261
h263: ITU-T Recommendation H.263 RTP Payload header (RFC2190)
h263data: ITU-T Recommendation H.263
h450: h450
h4501: H4501
hclnfsd: Hummingbird NFS Daemon
hpext: HP Extended Local-Link Control
hpsw: HP Switch Protocol
hsrp: Cisco Hot Standby Router Protocol
http: Hypertext Transfer Protocol
hyperscsi: HyperSCSI

I

iap: Information Access Protocol
iapp: Inter-Access-Point Protocol
iax2: Inter-Asterisk eXchange v2
ib: Interbase
icap: Internet Content Adaptation Protocol
icep: Internet Communications Engine Protocol
icl_rpc: DCE/RPC ICL RPC
icmp: Internet Control Message Protocol
icmpv6: Internet Control Message Protocol v6
icp: Internet Cache Protocol
icq: ICQ Protocol
idp: Internetwork Datagram Protocol
ieee802a: IEEE802a OUI Extended Ethertype
ifcp: iFCP
igap: Internet Group membership Authentication Protocol
igmp: Internet Group Management Protocol
igrp: Cisco Interior Gateway Routing Protocol
ilmi: ILMI
image-gif: Compuserve GIF
image-jfif: JPEG File Interchange Format
imap: Internet Message Access Protocol
inap: Intelligent Network Application Protocol
initshutdown: Init shutdown service
ip: Internet Protocol
ipcomp: IP Payload Compression
ipcp: PPP IP Control Protocol
ipdc: IP Device Control (SS7 over IP)
ipfc: IP Over FC
ipmi: Intelligent Platform Management Interface
ipp: Internet Printing Protocol
ipv6: Internet Protocol Version 6
ipv6cp: PPP IPv6 Control Protocol
ipvs: IP Virtual Services Sync Daemon
ipx: Internetwork Packet eXchange
ipxmsg: IPX Message
ipxrip: IPX Routing Information Protocol
ipxsap: Service Advertisement Protocol
ipxwan: IPX WAN
irc: Internet Relay Chat
ircomm: IrCOMM Protocol
IRemUnknown: IRemUnknown IRemUnknown Resolver
IRemUnknown2: IRemUnknown2 IRemUnknown2 Resolver
irlap: IrDA Link Access Protocol
irlmp: IrDA Link Management Protocol
isakmp: Internet Security Association and Key Management Protocol
iscsi: iSCSI
isdn: ISDN
isis: ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol
isl: Cisco ISL
ismp: InterSwitch Message Protocol
isns: iSNS
isup: ISDN User Part
isup_thin: ISUP Thin Protocol
isystemactivator: ISystemActivator ISystemActivator Resolver
itunes: iTunes podCast rss elements
iua: ISDN Q.921-User Adaptation Layer
iuup: IuUP

J

jabber: Jabber XML Messaging
juniper: Juniper
jxta: JXTA P2P
jxta.framing: JXTA Message Framing
jxta.message: JXTA Message
jxta.udp: JXTA UDP
jxta.welcome: JXTA Connection Welcome Message

K

k12: K12xx
kadm5: Kerberos Administration
kerberos: Kerberos
kink: Kerberized Internet Negotiation of Key
klm: Kernel Lock Manager
kpasswd: MS Kpasswd
krb4: Kerberos v4
krb5rpc: DCE/RPC Kerberos V

L

l2tp: Layer 2 Tunneling Protocol
lacp: Link Aggregation Control Protocol
lane: ATM LAN Emulation
lanman: Microsoft Windows Lanman Remote API Protocol
lapb: Link Access Procedure Balanced (LAPB)
lapbether: Link Access Procedure Balanced Ethernet (LAPBETHER)
lapd: Link Access Procedure, Channel D (LAPD)
laplink: Laplink
lcp: PPP Link Control Protocol
ldap: Lightweight Directory Access Protocol
ldp: Label Distribution Protocol
lge_monitor: LGE Monitor
llap: LocalTalk Link Access Protocol
llb: DCE/RPC NCS 1.5.1 Local Location Broker
llc: Logical-Link Control
llcgprs: Logical Link Control GPRS
lldp: Link Layer Discovery Protocol
lmi: Local Management Interface
lmp: Link Management Protocol (LMP)
log: Log Message
logotypecertextn: Logotype Certificate Extensions
loop: Configuration Test Protocol (loopback)
lpd: Line Printer Daemon Protocol
lsa: Microsoft Local Security Architecture
lsa_ds: Microsoft Local Security Architecture (Directory Services)
lwapp: LWAPP Encapsulated Packet
lwapp-cntl: LWAP Control Message
lwapp-l3: LWAPP Layer 3 Packet
lwres: Light Weight DNS RESolver (BIND9)

M

m2pa: MTP2 Peer Adaptation Layer
m2tp: MTP 2 Transparent Proxy
m2ua: MTP 2 User Adaptation Layer
m3ua: MTP 3 User Adaptation Layer
macc: MAC Control
mailslot: SMB MailSlot Protocol
malformed: Malformed Packet
manolito: Blubster/Piolet MANOLITO Protocol
map_dialoguepdu: MAP_DialoguePDU
mapi: Microsoft Exchange MAPI
mate: Meta Analysis Tracing Engine
mbtcp: Modbus/TCP
mdshdr: MDS Header
media: Media Type
megaco: MEGACO
message-http: Media Type: message/http
messenger: Microsoft Messenger Service
mgcp: Media Gateway Control Protocol
mgmt: DCE/RPC Remote Management
mime_multipart: MIME Multipart Media Encapsulation
mip: Mobile IP
mipv6: Mobile IPv6 / Network Mobility
mms: MMS
mmse: MMS Message Encapsulation
mount: Mount Service
mp: PPP Multilink Protocol
mpeg1: RFC 2250 MPEG1
mpls: MultiProtocol Label Switching Header
mpls-echo: Multiprotocol Label Switching Echo
mplscp: PPP MPLS Control Protocol
mq: WebSphere MQ
mqpcf: WebSphere MQ Programmable Command Formats
mrdisc: Multicast Router DISCovery protocol
msdp: Multicast Source Discovery Protocol
msmms: Microsoft Media Server
msnip: MSNIP: Multicast Source Notification of Interest Protocol
msnlb: MS Network Load Balancing
msnms: MSN Messenger Service
msproxy: MS Proxy Protocol
msrp: Message Session Relay Protocol
mtp2: Message Transfer Part Level 2
mtp3: Message Transfer Part Level 3
mtp3mg: Message Transfer Part Level 3 Management
mysql: MySQL Protocol

N

nbap: UTRAN Iub interface NBAP signalling
nbdgm: NetBIOS Datagram Service
nbipx: NetBIOS over IPX
nbns: NetBIOS Name Service
nbp: Name Binding Protocol
nbss: NetBIOS Session Service
ncp: NetWare Core Protocol
ncs: Novell Cluster Services
ndmp: Network Data Management Protocol
ndps: Novell Distributed Print System
netbios: NetBIOS
netlogon: Microsoft Windows Logon Protocol
netsync: Monotone Netsync
nettl: HP-UX Network Tracing and Logging
nfs: Network File System
nfsacl: NFSACL
nfsauth: NFSAUTH
nhrp: NBMA Next Hop Resolution Protocol
nisplus: NIS+
nispluscb: NIS+ Callback
njack: 3com Network Jack
nlm: Network Lock Manager Protocol
nlsp: NetWare Link Services Protocol
nmas: Novell Modular Authentication Service
nmpi: Name Management Protocol over IPX
nntp: Network News Transfer Protocol
norm: Negative-acknowledgment Oriented Reliable Multicast
ns_cert_exts: NetScape Certificate Extensions
nsip: Network Service Over IP
nspi: NSPI
ntlmssp: NTLM Secure Service Provider
ntp: Network Time Protocol
null: Null/Loopback
nw_serial: NetWare Serialization Protocol

O

oamaal: ATM OAM AAL
ocsp: Online Certificate Status Protocol
oicq: OICQ - IM software, which is popular in China
olsr: Optimized Link State Routing Protocol
opsi: Open Policy Service Interface
osicp: PPP OSI Control Protocol
ospf: Open Shortest Path First
oxid: DCOM OXID Resolver

P

p_mul: P_Mul (ACP142)
pagp: Port Aggregation Protocol
paketcable_avps: PacketCable AVPs
pap: PPP Password Authentication Protocol
pcli: Packet Cable Lawful Intercept
pcnfsd: PC NFS
per: Packed Encoding Rules (ASN.1 X.691)
pflog: OpenBSD Packet Filter log file
pflog-old: OpenBSD Packet Filter log file, pre 3.4
pgm: Pragmatic General Multicast
pgsql: PostgreSQL
pim: Protocol Independent Multicast
pipe: SMB Pipe Protocol
pkcs-1: PKCS#1
pkinit: PKINIT
pkix-cert: PKIX CERT File Format
pkix1explicit: PKIX1Explitit
pkix1implicit: PKIX1Implitit
pkixproxy: PKIXProxy (RFC3820)
pkixqualified: PKIX Qualified
pkixtsp: PKIX Time Stamp Protocol
pkt_ccc: PacketCable Call Content Connection
pktc: PacketCable
pn_dcp: PROFINET DCP
pn_io: PROFINET IO
pn_rt: PROFINET Real-Time Protocol
pnp: Microsoft Plug and Play service
pop: Post Office Protocol
portmap: Portmap
postgresql: POSTGRESQL
ppp: Point-to-Point Protocol
ppp_hdlc: PPP In HDLC-Like Framing
pppmux: PPP Multiplexing
pppmuxcp: PPPMux Control Protocol
pppoed: PPP-over-Ethernet Discovery
pppoes: PPP-over-Ethernet Session
pptp: Point-to-Point Tunnelling Protocol
pres: ISO 8823 OSI Presentation Protocol
prism: Prism
ptp: Precision Time Protocol (IEEE1588)
pvfs: Parallel Virtual File System

Q

q2931: Q.2931
q931: Q.931
q933: Q.933
qllc: Qualified Logical Link Control
quake: Quake Network Protocol
quake2: Quake II Network Protocol
quake3: Quake III Arena Network Protocol
quakeworld: QuakeWorld Network Protocol

R

r-stp: Retix Spanning Tree Protocol
radiotap: IEEE 802.11 Radiotap Capture header
radius: Radius Protocol
ranap: Radio Access Network Application Part
raw: Raw packet data
raw_sigcomp: Decompressed SigComp message as raw text
raw_sip: Session Initiation Protocol (SIP as raw text)
rdaclif: DCE/RPC Directory Acl Interface
rdm: RDM
rdt: Real Data Transport
redback: Redback
reg: Microsoft Registry
remact: DCOM IRemoteActivation
remunk: IRemUnknown
remunk2: IRemUnknown2
rep_proc: AFS (4.0) Replication Server call declarations
rip: Routing Information Protocol
ripng: RIPng
rlm: Redundant Link Management Protocol
rlogin: Rlogin Protocol
rmcp: Remote Management Control Protocol
rmi: Java RMI
rmp: HP Remote Maintenance Protocol
rnsap: UTRAN Iur interface Radio Network Subsystem Application Part
ros: X.880 OSI Remote Operations Service
roverride: Remote Override interface
rpc: Remote Procedure Call
rpc_browser: RPC Browser
rpc_netlogon: Microsoft Network Logon
rpl: Remote Program Load
rpriv: Privilege Server operations
rquota: Remote Quota
rras: Microsoft Routing and Remote Access Service
rs_acct: DCE/RPC RS_ACCT
rs_attr: Registry Server Attributes Manipulation Interface
rs_attr_schema: DCE/RPC Registry Server Attributes Schema
rs_bind: DCE/RPC RS_BIND
rs_misc: DCE/RPC RS_MISC
rs_pgo: DCE Name Service
rs_plcy: RS Interface properties
rs_prop_acct: DCE/RPC RS_PROP_ACCT
rs_prop_acl: DCE/RPC Registry server propagation interface - ACLs.
rs_prop_attr: DCE/RPC Prop Attr
rs_prop_pgo: DCE/RPC Registry server propagation interface - PGO items
rs_prop_plcy: DCE/RPC Registry server propagation interface - properties and policies
rs_pwd_mgmt: DCE/RPC Registry Password Management
rs_repadm: Registry server administration operations.
rs_replist: DCE/RPC Repserver Calls
rs_repmgr: DCE/RPC Operations between registry server replicas
rs_unix: DCE/RPC RS_UNIX
rsec_login: Remote sec_login preauth interface.
rsh: Remote Shell
rss: rss
rstat: RSTAT
rsvp: Resource ReserVation Protocol (RSVP)
rsync: RSYNC File Synchroniser
rtcfg: RTcfg
rtcp: Real-time Transport Control Protocol
rtmac: Real-Time Media Access Control
rtmp: Routing Table Maintenance Protocol
rtnet: RTNET
rtp: Real-Time Transport Protocol
rtpevent: RFC 2833 RTP Event
rtps: Real-Time Publish-Subscribe Wire Protocol
rtse: X.228 OSI Reliable Transfer Service
rtsp: Real Time Streaming Protocol
rudp: Reliable UDP
rwall: Remote Wall protocol
rx: RX Protocol

S

s4406: STANAG 4406 Military Message
s5066: STANAG 5066 (SIS layer)
sadmind: SADMIND
samr: Microsoft Security Account Manager
sap: Session Announcement Protocol
sb3: Fibre Channel Single Byte Command
sccp: Signalling Connection Control Part
sccpmg: Signalling Connection Control Part Management
scsi: SCSI
sctp: Stream Control Transmission Protocol
sdlc: Synchronous Data Link Control (SDLC)
sdp: Session Description Protocol
sebek: SEBEK - Kernel Data Capture
secidmap: DCE Security ID Mapper
serialization: Java Serialization
ses: ISO 8327-1 OSI Session Protocol
sflow: InMon sFlow
sgimount: SGI Mount Service
short: Short Frame
sigcomp: Signaling Compression
sip: Session Initiation Protocol
sipfrag: Sipfrag
sir: Serial Infrared
skinny: Skinny Client Control Protocol
slarp: Cisco SLARP
slimp3: SliMP3 Communication Protocol
sll: Linux cooked-mode capture
slow: Slow Protocols
slsk: SoulSeek Protocol
sm: Cisco Session Management
smb: SMB (Server Message Block Protocol)
smb2: SMB2 (Server Message Block Protocol version 2)
smb_netlogon: Microsoft Windows Logon Protocol (Old)
smil: Synchronized Multimedia Integration Language
smpp: Short Message Peer to Peer
smrse: Short Message Relaying Service
smtp: Simple Mail Transfer Protocol
smux: SNMP Multiplex Protocol
sna: Systems Network Architecture
sna_xid: Systems Network Architecture XID
snaeth: SNA-over-Ethernet
sndcp: Subnetwork Dependent Convergence Protocol
snmp: Simple Network Management Protocol
socks: Socks Protocol
sonmp: Nortel SONMP
spnego: Simple Protected Negotiation
spnego-krb5: SPNEGO-KRB5
spoolss: Microsoft Spool Subsystem
spp: Sequenced Packet Protocol
spray: SPRAY
spx: Sequenced Packet eXchange
srp: H.324/SRP
srvloc: Service Location Protocol
srvsvc: Microsoft Server Service
sscf-nni: SSCF-NNI
sscop: SSCOP
ssh: SSH Protocol
ssl: Secure Socket Layer
sss: Novell SecretStore Services
stat: Network Status Monitor Protocol
statnotify: Network Status Monitor CallBack Protocol
stp: Spanning Tree Protocol
stun: Simple Traversal of UDP Through NAT
sua: SS7 SCCP-User Adaptation Layer
svcctl: Microsoft Service Control
swils: Fibre Channel SW_ILS
symantec: Symantec Enterprise Firewall
synergy: Synergy
syslog: Syslog message

T

t30: T.30
t38: T.38
tacacs: TACACS
tacplus: TACACS+
tali: Transport Adapter Layer Interface v1.0, RFC 3094
tapi: Microsoft Telephony API Service
tcap: Transaction Capabilities Application Part
tcp: Transmission Control Protocol
tdma: TDMA RTmac Discipline
tds: Tabular Data Stream
tei_management: TEI Management Procedure, Channel D (LAPD)
telnet: Telnet
teredo: Teredo IPv6 over UDP tunneling
tftp: Trivial File Transfer Protocol
time: Time Protocol
tipc: Transparent Inter Process Communication(TIPC)
tkn4int: DCE/RPC TokenServer Calls
tns: Transparent Network Substrate Protocol
tpcp: Alteon - Transparent Proxy Cache Protocol
tpkt: TPKT - ISO on TCP - RFC1006
tr: Token-Ring
trksvr: Microsoft Distributed Link Tracking Server Service
trmac: Token-Ring Media Access Control
tsp: Time Synchronization Protocol
ttp: Tiny Transport Protocol
tuxedo: BEA Tuxedo
tzsp: Tazmen Sniffer Protocol

U

ubikdisk: DCE/RPC FLDB UBIK TRANSFER
ubikvote: DCE/RPC FLDB UBIKVOTE
ucp: Universal Computer Protocol
udp: User Datagram Protocol
udpencap: UDP Encapsulation of IPsec Packets
udplite: Lightweight User Datagram Protocol
uma: Unlicensed Mobile Access
unreassembled: Unreassembled Fragmented Packet
user_dlt_a: DLT_USER_A
user_dlt_b: DLT_USER_B
user_dlt_c: DLT_USER_C
user_dlt_d: DLT_USER_D

V

v120: Async data over ISDN (V.120)
v5ua: V5.2-User Adaptation Layer
vines: Banyan Vines
vines_arp: Banyan Vines ARP
vines_echo: Banyan Vines Echo
vines_frp: Banyan Vines Fragmentation Protocol
vines_icp: Banyan Vines ICP
vines_ip: Banyan Vines IP
vines_ipc: Banyan Vines IPC
vines_llc: Banyan Vines LLC
vines_rtp: Banyan Vines RTP
vines_spp: Banyan Vines SPP
vj: PPP VJ Compression
vlan: 802.1Q Virtual LAN
vnc: Virtual Network Computing
vrrp: Virtual Router Redundancy Protocol
vtp: Virtual Trunking Protocol

W

wap-sir: WAP Session Initiation Request
wap-wsp: Wireless Session Protocol
wap-wsp-wtp: Wireless Transaction Protocol
wap-wtls: Wireless Transport Layer Security
wbxml: WAP Binary XML
wccp: Web Cache Coordination Protocol
wcp: Wellfleet Compression
whdlc: Wellfleet HDLC
who: Who
winreg: Remote Registry Service
winsrepl: WINS (Windows Internet Name Service) Replication
wkssvc: Microsoft Workstation Service
wlan: IEEE 802.11 wireless LAN
wlan_mgt: IEEE 802.11 wireless LAN management frame
wlancap: AVS WLAN Capture header
wlancertextn: Wlan Certificate Extension
wsp: Wireless Session Protocol
wtls: Wireless Transport Layer Security
wtp: Wireless Transaction Protocol

X

x.25: X.25
x.29: X.29
x11: X11
x411: X.411 Message Transfer Service
x420: X.420 Information Object
x509af: X.509 Authentication Framework
x509ce: X.509 Certificate Extensions
x509if: X.509 Information Framework
x509sat: X.509 Selected Attribute Types
xdmcp: X Display Manager Control Protocol
xml: eXtensible Markup Language
xot: X.25 over TCP
xyplex: Xyplex

Y

yhoo: Yahoo Messenger Protocol
ymsg: Yahoo YMSG Messenger Protocol
ypbind: Yellow Pages Bind
yppasswd: Yellow Pages Passwd
ypserv: Yellow Pages Service
ypxfr: Yellow Pages Transfer

Z

zebra: Zebra Protocol
zip: Zone Information Protocol