Wireshark · Display Filter Reference: UserLog Protocol

Display Filter Reference: UserLog Protocol

Protocol field name: userlog

Versions: 2.2.0 to 4.4.1

Field name	Description	Type	Versions
userlog.count	LogCount	Unsigned integer (16 bits)	2.2.0 to 4.4.1
userlog.Destination-IP	Destination-IP	IPv4 address	2.2.0 to 4.4.1
userlog.Destination-NAT-IP	Destination-NAT-IP	IPv4 address	2.2.0 to 4.4.1
userlog.Destination-NAT-Port	Destination-NAT-Port	Unsigned integer (16 bits)	2.2.0 to 4.4.1
userlog.Destination-Port	Destination-Port	Unsigned integer (16 bits)	2.2.0 to 4.4.1
userlog.EndTime	EndTime	Date and time	2.2.0 to 4.4.1
userlog.header_reserved	Reserved	Byte sequence	2.2.0 to 4.2.8
userlog.InTotalByte	InTotalByte	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.InTotalPkg	InTotalPkg	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.IPToS	IP ToS	Unsigned integer (8 bits)	2.2.0 to 4.4.1
userlog.IPVersion	IP Version	Unsigned integer (8 bits)	2.2.0 to 4.4.1
userlog.logtype	LogType	Unsigned integer (8 bits)	2.2.0 to 4.4.1
userlog.Operator	Operator	Unsigned integer (8 bits)	2.2.0 to 4.4.1
userlog.OutTotalByte	OutTotalByte	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.OutTotalPkg	OutTotalPkg	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.proto	Protocol	Unsigned integer (8 bits)	2.2.0 to 4.4.1
userlog.reserved	Reserved	Byte sequence	4.4.0 to 4.4.1
userlog.Reserved1	Reserved1	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.Reserved2	Reserved2	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.Reserved3	Reserved3	Unsigned integer (32 bits)	2.2.0 to 4.4.1
userlog.Source-NAT-IP	Source-NAT-IP	IPv4 address	2.2.0 to 4.4.1
userlog.Source-NAT-Port	Source-NAT-Port	Unsigned integer (16 bits)	2.2.0 to 4.4.1
userlog.Source-Port	Source-Port	Unsigned integer (16 bits)	2.2.0 to 4.4.1
userlog.SourceIP	Source-IP	IPv4 address	2.2.0 to 4.4.1
userlog.StartTime	StartTime	Date and time	2.2.0 to 4.4.1
userlog.timestamp	TimeStamp	Date and time	2.2.0 to 4.4.1
userlog.version	Version	Unsigned integer (8 bits)	2.2.0 to 4.4.1