Display Filter Reference: Gnutella Protocol

Protocol field name: gnutella

Versions: 1.0.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
gnutella.header Descriptor Header Label 1.0.0 to 2.4.4
gnutella.header.hops Hops Unsigned integer, 1 byte 1.0.0 to 2.4.4
gnutella.header.id ID Sequence of bytes 1.0.0 to 2.4.4
gnutella.header.payload Payload Unsigned integer, 1 byte 1.0.0 to 2.4.4
gnutella.header.size Length Unsigned integer, 1 byte 1.0.0 to 2.4.4
gnutella.header.ttl TTL Unsigned integer, 1 byte 1.0.0 to 2.4.4
gnutella.pong.files Files Shared Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.pong.ip IP IPv4 address 1.0.0 to 2.4.4
gnutella.pong.kbytes KBytes Shared Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.pong.payload Pong Label 1.0.0 to 2.4.4
gnutella.pong.port Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
gnutella.push.index Index Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.push.ip IP IPv4 address 1.0.0 to 2.4.4
gnutella.push.payload Push Label 1.0.0 to 2.4.4
gnutella.push.port Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
gnutella.push.servent_id Servent ID Sequence of bytes 1.0.0 to 2.4.4
gnutella.query.min_speed Min Speed Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.query.payload Query Label 1.0.0 to 2.4.4
gnutella.query.search Search Character string 1.0.0 to 2.4.4
gnutella.queryhit.count Count Unsigned integer, 1 byte 1.0.0 to 2.4.4
gnutella.queryhit.extra Extra Sequence of bytes 1.0.0 to 2.4.4
gnutella.queryhit.hit Hit Label 1.0.0 to 2.4.4
gnutella.queryhit.hit.extra Extra Sequence of bytes 1.0.0 to 2.4.4
gnutella.queryhit.hit.index Index Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.queryhit.hit.name Name Character string 1.0.0 to 2.4.4
gnutella.queryhit.hit.size Size Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.queryhit.ip IP IPv4 address 1.0.0 to 2.4.4
gnutella.queryhit.payload QueryHit Label 1.0.0 to 2.4.4
gnutella.queryhit.port Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
gnutella.queryhit.servent_id Servent ID Sequence of bytes 1.0.0 to 2.4.4
gnutella.queryhit.speed Speed Unsigned integer, 4 bytes 1.0.0 to 2.4.4
gnutella.stream Gnutella Upload / Download Stream Label 1.0.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More