Display Filter Reference: CIP Modbus Object

Protocol field name: cipmb

Versions: 1.8.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
cip.mb.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.read_coils.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.read_coils.num_coils Quantity of Coils Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_coils.start_addr Starting Address Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_discrete_inputs.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.read_discrete_inputs.num_inputs Quantity of Inputs Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_discrete_inputs.start_addr Starting Address Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_holding_register.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.read_holding_register.num_registers Quantity of Holding Registers Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_holding_register.start_addr Starting Address Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_input_register.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.read_input_register.num_registers Quantity of Input Registers Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.read_input_register.start_addr Starting Address Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.sc Service Unsigned integer, 1 byte 1.8.0 to 2.4.4
cip.mb.write_coils.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.write_coils.num_coils Quantity of Coils Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.write_coils.outputs_forced Outputs Forced Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.write_coils.start_addr Starting Address Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.write_registers.data Data Sequence of bytes 1.8.0 to 2.4.4
cip.mb.write_registers.num_registers Quantity of Holding Registers Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.write_registers.outputs_forced Outputs Forced Unsigned integer, 2 bytes 1.8.0 to 2.4.4
cip.mb.write_registers.start_addr Starting Address Unsigned integer, 2 bytes 1.8.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More