Display Filter Reference: ICQ Protocol

Protocol field name: icq

Versions: 1.0.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
icq.ack.random Random Unsigned integer, 4 bytes 1.12.0 to 2.4.4
icq.cellphone Cellphone Character string 2.0.0 to 2.4.4
icq.checkcode Checkcode Unsigned integer, 4 bytes 1.0.0 to 2.4.4
icq.checkcode_key Key Unsigned integer, 4 bytes 1.12.0 to 2.4.4
icq.city City Character string 2.0.0 to 2.4.4
icq.client Client/Server Boolean 1.12.0 to 2.4.4
icq.client_cmd Client command Unsigned integer, 2 bytes 1.0.0 to 2.4.4
icq.decode Decode Character string 1.0.0 to 1.8.15
icq.description Description Character string 2.0.0 to 2.4.4
icq.email Email Character string 2.0.0 to 2.4.4
icq.fax Fax Character string 2.0.0 to 2.4.4
icq.first_name First name Character string 2.0.0 to 2.4.4
icq.group Group Unsigned integer, 4 bytes 1.12.0 to 2.4.4
icq.keep_alive.random Random Unsigned integer, 4 bytes 1.12.0 to 2.4.4
icq.last_name Last name Character string 2.0.0 to 2.4.4
icq.login.ip IP IPv4 address 2.0.0 to 2.4.4
icq.login.password Password Character string 2.0.0 to 2.4.4
icq.login.port Port Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.login.time Time Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.login_reply.ip IP IPv4 address 2.0.0 to 2.4.4
icq.meta_user.about About Character string 2.0.0 to 2.4.4
icq.meta_user.countrycode Countrycode Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.meta_user.found_authorization Authorization Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.meta_user.hideip HideIP Boolean 2.0.0 to 2.4.4
icq.meta_user.info_authorization Authorization Boolean 2.0.0 to 2.4.4
icq.meta_user.length Length Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.meta_user.result Result Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.meta_user.subcmd Subcommand Unsigned integer, 2 bytes 1.12.0 to 2.4.4
icq.meta_user.timezone Timezone Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.meta_user.webaware Webaware Boolean 2.0.0 to 2.4.4
icq.meta_user.x2 x2 Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.meta_user.x3 x3 Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.msg Msg Character string 2.0.0 to 2.4.4
icq.msg_authorization Authorization Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.msg_contact Contact Character string 2.0.0 to 2.4.4
icq.msg_length Length Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.msg_type Type Unsigned integer, 2 bytes 1.12.0 to 2.4.4
icq.multi.num_packets Number of pkts Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.nickname Nickname Character string 2.0.0 to 2.4.4
icq.no_parameters No parameters Label 2.0.0 to 2.4.4
icq.num_uin_pairs Number of pairs Character string 2.0.0 to 2.4.4
icq.number_of_uins Number of uins Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.old_email Old email Character string 2.0.0 to 2.4.4
icq.phone Phone Character string 2.0.0 to 2.4.4
icq.primary_email Primary email Character string 2.0.0 to 2.4.4
icq.rand_user.class Class Unsigned integer, 1 byte 2.0.0 to 2.4.4
icq.rand_user.ip IP IPv4 address 2.0.0 to 2.4.4
icq.rand_user.port Port Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.rand_user.realip RealIP IPv4 address 2.0.0 to 2.4.4
icq.rand_user.tcpversion TCPVersion Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.reason Reason Character string 2.0.0 to 2.4.4
icq.receiver_uin Receiver UIN Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.recv_time Time Sequence of bytes 2.0.0 to 2.4.4
icq.secondary_email Secondary email Character string 2.0.0 to 2.4.4
icq.seqnum1 Seq Number 1 Unsigned integer, 2 bytes 1.12.0 to 2.4.4
icq.seqnum2 Seq Number 2 Unsigned integer, 2 bytes 1.12.0 to 2.4.4
icq.server_cmd Server command Unsigned integer, 2 bytes 1.0.0 to 2.4.4
icq.sessionid Session ID Unsigned integer, 4 bytes 1.0.0 to 2.4.4
icq.state State Character string 2.0.0 to 2.4.4
icq.status Client command Unsigned integer, 4 bytes 1.12.0 to 2.4.4
icq.street Street Character string 2.0.0 to 2.4.4
icq.text Text Character string 2.0.0 to 2.4.4
icq.text_code Text Character string 2.0.0 to 2.4.4
icq.text_code_length Length Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.type Type Unsigned integer, 2 bytes 1.0.0 to 1.10.14
icq.uin UIN Unsigned integer, 4 bytes 1.0.0 to 2.4.4
icq.unknown Unknown Character string 2.0.0 to 2.4.4
icq.unknown_command Unknown command Label 1.12.0 to 2.4.4
icq.unknown_meta_subcmd Unknown meta subcmd Label 1.12.0 to 2.4.4
icq.url URL Character string 2.0.0 to 2.4.4
icq.user_online.ip IP IPv4 address 2.0.0 to 2.4.4
icq.user_online.port Port Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.user_online.realip RealIP IPv4 address 2.0.0 to 2.4.4
icq.user_online.version Version Unsigned integer, 4 bytes 2.0.0 to 2.4.4
icq.version Version Unsigned integer, 2 bytes 1.12.0 to 2.4.4
icq.x1 X1 Unsigned integer, 2 bytes 2.0.0 to 2.4.4
icq.zip Zip Character string 2.0.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More