Display Filter Reference: CISCO ERSPAN3 Marker Packet

Protocol field name: cisco-erspan3-marker

Versions: 2.2.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
cisco_erspan_marker.granularity Granularity Unsigned integer, 2 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.header Header Boolean 2.2.0 to 2.4.4
cisco_erspan_marker.prop_header Proprietary CISCO Header Sequence of bytes 2.2.0 to 2.4.4
cisco_erspan_marker.sequence_number Sequence Number Unsigned integer, 4 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.ssid SSID Unsigned integer, 2 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.tail TAIL Unsigned integer, 4 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.timestamp Timestamp Unsigned integer, 4 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.type Type Unsigned integer, 2 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.utc_offset UTC Offset Unsigned integer, 2 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.utc_sec UTC Seconds Unsigned integer, 4 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.utc_usec UTC Microseconds Unsigned integer, 4 bytes 2.2.0 to 2.4.4
cisco_erspan_marker.version Version Unsigned integer, 2 bytes 2.2.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More