Display Filter Reference: Common Address Redundancy Protocol

Protocol field name: carp

Versions: 1.12.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
carp.adver_int Adver Int Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.advskew Advertisement Skew Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.authlen Auth Len Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.bad_checksum Bad checksum Label 2.4.0 to 2.4.4
carp.checksum Checksum Unsigned integer, 2 bytes 2.0.0 to 2.4.4
carp.checksum.status Checksum Status Unsigned integer, 1 byte 2.4.0 to 2.4.4
carp.counter Counter Unsigned integer, 8 bytes 1.12.0 to 2.4.4
carp.demotion Demotion indicator Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.hmac HMAC Sequence of bytes 1.12.0 to 2.4.4
carp.type CARP packet type Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.typever CARP message version and type Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.version CARP protocol version Unsigned integer, 1 byte 1.12.0 to 2.4.4
carp.vhid Virtual Host ID Unsigned integer, 1 byte 1.12.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More