Display Filter Reference: IEC 61883 Protocol

Protocol field name: 61883

Versions: 2.2.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
61883.4_incorrect_cip_dbs Incorrect data block size, shall be 6 for IEC 61883-4 Label 2.4.0 to 2.4.4
61883.4_incorrect_cip_fn Incorrect fraction number, shall be 8 for IEC 61883-4 Label 2.4.0 to 2.4.4
61883.4_incorrect_cip_sph Incorrect source packet header value, shall be 1 for IEC 61883-4 Label 2.4.0 to 2.4.4
61883.6_incorrect_cip_fdf Incorrect frame dependent field value, shall be 0 Label 2.4.0 to 2.4.4
61883.6_incorrect_cip_fn Incorrect fraction number, shall be 0 for IEC 61883-6 Label 2.4.0 to 2.4.4
61883.6_incorrect_cip_sph Incorrect source packet header value, shall be 0 for IEC 61883-6 Label 2.4.0 to 2.4.4
61883.audiodata Audio Data Sequence of bytes 2.2.0 to 2.4.4
61883.audiodata.sample.label Label Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.audiodata.sample.sampledata Sample Sequence of bytes 2.2.0 to 2.4.4
61883.avtp_timestamp AVTP Timestamp Unsigned integer, 4 bytes 2.2.0 to 2.4.4
61883.channel 1394 Packet Channel Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.dbc CIP Data Block Continuity Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.dbs CIP Data Block Size Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.fdf CIP Format Dependent Field Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.fdf_no_syt CIP Format Dependent Field Unsigned integer, 1 byte 2.4.0 to 2.4.4
61883.fdf_tsf Time shift flag Boolean 2.4.0 to 2.4.4
61883.fmt CIP Format ID Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.fn CIP Fraction Number Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.gateway_info Gateway Info Unsigned integer, 4 bytes 2.2.0 to 2.4.4
61883.gvfield Gateway Info Valid Boolean 2.2.0 to 2.4.4
61883.incorrect_channel_sid 1394 Packet Channel and Source ID don`t match Label 2.4.0 to 2.4.4
61883.incorrect_datalen Incorrect stream data length field, must be multiple of 192 plus 8 bytes CIP header Label 2.4.0 to 2.4.4
61883.incorrect_qi1 Incorrect quadlet indicator 1 field, talker shall set this field to 0x00 Label 2.2.0 to 2.4.4
61883.incorrect_qi2 Incorrect quadlet indicator 2 field, talker shall set this field to 0x02 Label 2.2.0 to 2.4.4
61883.incorrect_qpc Incorrect quadlet padding count field, shall be set to 0 Label 2.2.0 to 2.4.4
61883.incorrect_tag Incorrect tag field, only 0x00 and 0x01 supported for AVTP Label 2.2.0 to 2.4.4
61883.incorrect_tcode Incorrect tcode, talker shall set this field to 0x0A Label 2.2.0 to 2.4.4
61883.mrfield Media Clock Restart Boolean 2.2.0 to 2.4.4
61883.qi1 CIP Quadlet Indicator 1 Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.qi2 CIP Quadlet Indicator 2 Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.qpc CIP Quadlet Padding Count Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.seqnum Sequence Number Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.sid CIP Source ID Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.sph CIP Source Packet Header Boolean 2.2.0 to 2.4.4
61883.spht Source Packet Header Timestamp Unsigned integer, 4 bytes 2.2.0 to 2.4.4
61883.stream_data_len 1394 Stream Data Length Unsigned integer, 2 bytes 2.2.0 to 2.4.4
61883.stream_id Stream ID Unsigned integer, 8 bytes 2.2.0 to 2.4.4
61883.sy 1394 App-specific Control Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.syt CIP SYT Unsigned integer, 2 bytes 2.2.0 to 2.4.4
61883.tag 1394 Packet Format Tag Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.tcode 1394 Packet Tcode Unsigned integer, 1 byte 2.2.0 to 2.4.4
61883.tufield Timestamp Uncertain Boolean 2.2.0 to 2.4.4
61883.tvfield Timestamp Valid Boolean 2.2.0 to 2.4.4
61883.unknown_format IEC 61883 format not dissected yet Label 2.2.0 to 2.4.4
61883.videodata Video Data Sequence of bytes 2.2.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More