Display Filter Reference: Address Resolution Protocol

Protocol field name: arp

Versions: 1.0.0 to 3.4.5

Back to Display Filter Reference

Field name Description Type Versions
arp.dst.atm_num_e164 Target ATM number (E.164) Character string 1.0.0 to 3.4.5
arp.dst.atm_num_nsap Target ATM number (NSAP) Sequence of bytes 1.0.0 to 3.4.5
arp.dst.atm_subaddr Target ATM subaddress Sequence of bytes 1.0.0 to 3.4.5
arp.dst.drarp_error_status DRARP error status Unsigned integer, 2 bytes 1.8.0 to 3.4.5
arp.dst.hlen Target ATM number length Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.dst.htype Target ATM number type Boolean 1.0.0 to 3.4.5
arp.dst.hw Target hardware address Sequence of bytes 1.0.0 to 3.4.5
arp.dst.hw_ax25 Target AX.25 address AX.25 address 1.10.0 to 3.4.5
arp.dst.hw_mac Target MAC address Ethernet or other MAC address 1.0.0 to 3.4.5
arp.dst.pln Target protocol size Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.dst.proto Target protocol address Sequence of bytes 1.0.0 to 3.4.5
arp.dst.proto_ipv4 Target IP address IPv4 address 1.0.0 to 3.4.5
arp.dst.slen Target ATM subaddress length Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.dst.stype Target ATM subaddress type Boolean 1.0.0 to 3.4.5
arp.duplicate-address-detected Duplicate IP address configured Label 1.0.0 to 3.4.5
arp.duplicate-address-frame Frame showing earlier use of IP address Frame number 1.0.0 to 3.4.5
arp.hw.size Hardware size Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.hw.type Hardware type Unsigned integer, 2 bytes 1.0.0 to 3.4.5
arp.isannouncement Is announcement Boolean 3.2.0 to 3.4.5
arp.isgratuitous Is gratuitous Boolean 1.2.0 to 3.4.5
arp.isprobe Is probe Boolean 3.2.0 to 3.4.5
arp.opcode Opcode Unsigned integer, 2 bytes 1.0.0 to 3.4.5
arp.packet-storm-detected ARP packet storm detected Label 1.0.0 to 3.4.5
arp.proto.size Protocol size Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.proto.type Protocol type Unsigned integer, 2 bytes 1.0.0 to 3.4.5
arp.seconds-since-duplicate-address-frame Seconds since earlier frame seen Unsigned integer, 4 bytes 1.0.0 to 3.4.5
arp.src.atm_afi AFI Unsigned integer, 1 byte 2.0.0 to 3.4.5
arp.src.atm_afi.unknown Unknown AFI Label 2.0.0 to 3.4.5
arp.src.atm_data_country_code Data Country Code Unsigned integer, 2 bytes 2.0.0 to 3.4.5
arp.src.atm_data_country_code_group Data Country Code (group) Unsigned integer, 2 bytes 2.0.0 to 3.4.5
arp.src.atm_e.164_isdn E.164 ISDN Sequence of bytes 2.0.0 to 3.4.5
arp.src.atm_e.164_isdn_group E.164 ISDN Sequence of bytes 2.0.0 to 3.4.5
arp.src.atm_end_system_identifier End System Identifier Sequence of bytes 2.0.0 to 3.4.5
arp.src.atm_high_order_dsp High Order DSP Sequence of bytes 2.0.0 to 3.4.5
arp.src.atm_international_code_designator International Code Designator Unsigned integer, 2 bytes 2.0.0 to 3.4.5
arp.src.atm_international_code_designator_group International Code Designator (group) Unsigned integer, 2 bytes 2.0.0 to 3.4.5
arp.src.atm_num_e164 Sender ATM number (E.164) Character string 1.0.0 to 3.4.5
arp.src.atm_num_nsap Sender ATM number (NSAP) Sequence of bytes 1.0.0 to 3.4.5
arp.src.atm_rest_of_address Rest of address Sequence of bytes 2.0.0 to 3.4.5
arp.src.atm_selector Selector Unsigned integer, 1 byte 2.0.0 to 3.4.5
arp.src.atm_subaddr Sender ATM subaddress Sequence of bytes 1.0.0 to 3.4.5
arp.src.hlen Sender ATM number length Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.src.htype Sender ATM number type Boolean 1.0.0 to 3.4.5
arp.src.hw Sender hardware address Sequence of bytes 1.0.0 to 3.4.5
arp.src.hw_ax25 Sender AX.25 address AX.25 address 1.10.0 to 3.4.5
arp.src.hw_mac Sender MAC address Ethernet or other MAC address 1.0.0 to 3.4.5
arp.src.pln Sender protocol size Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.src.proto Sender protocol address Sequence of bytes 1.0.0 to 3.4.5
arp.src.proto_ipv4 Sender IP address IPv4 address 1.0.0 to 3.4.5
arp.src.slen Sender ATM subaddress length Unsigned integer, 1 byte 1.0.0 to 3.4.5
arp.src.stype Sender ATM subaddress type Boolean 1.0.0 to 3.4.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More