Wireshark · Display Filter Reference: CIP Modbus Object

Field name	Description	Type	Versions
cip.mb.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.read_coils.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.read_coils.num_coils	Quantity of Coils	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_coils.start_addr	Starting Address	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_discrete_inputs.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.read_discrete_inputs.num_inputs	Quantity of Inputs	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_discrete_inputs.start_addr	Starting Address	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_holding_register.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.read_holding_register.num_registers	Quantity of Holding Registers	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_holding_register.start_addr	Starting Address	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_input_register.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.read_input_register.num_registers	Quantity of Input Registers	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.read_input_register.start_addr	Starting Address	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.sc	Service	Unsigned integer (8 bits)	1.8.0 to 4.4.2
cip.mb.write_coils.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.write_coils.num_coils	Quantity of Coils	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.write_coils.outputs_forced	Outputs Forced	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.write_coils.start_addr	Starting Address	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.write_registers.data	Data	Byte sequence	1.8.0 to 4.4.2
cip.mb.write_registers.num_registers	Quantity of Holding Registers	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.write_registers.outputs_forced	Outputs Forced	Unsigned integer (16 bits)	1.8.0 to 4.4.2
cip.mb.write_registers.start_addr	Starting Address	Unsigned integer (16 bits)	1.8.0 to 4.4.2