Wireshark · Display Filter Reference: Extensible Authentication Protocol

Field name	Description	Type	Versions
eap.aka.error_code	EAP-AKA Error Code	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.aka.notification_type	EAP-AKA Notification Type	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.aka.reserved	EAP-AKA Reserved	Unsigned integer (16 bits)	1.8.0 to 4.4.2
eap.aka.subtype	EAP-AKA Subtype	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.aka.subtype.attribute	EAP-AKA Attribute	Label	1.8.0 to 4.4.2
eap.aka.subtype.len	EAP-AKA Length	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.aka.subtype.type	EAP-AKA Type	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.aka.subtype.value	EAP-AKA Value	Byte sequence	1.8.0 to 4.4.2
eap.bad_length	Bad length (too small or too large)	Label	3.2.0 to 4.4.2
eap.code	Code	Unsigned integer (8 bits)	1.0.0 to 4.4.2
eap.data	EAP Data	Byte sequence	2.0.0 to 4.4.2
eap.desired_type	Desired Auth Type	Unsigned integer (8 bits)	1.0.0 to 4.4.2
eap.dictionary_attacks	Vulnerable to dictionary attacks. If possible, change EAP type. See http://www.cisco.com/warp/public/cc/pd/witc/ao350ap/prodlit/2331_pp.pdf	Label	1.12.0 to 4.4.2
eap.ext.vendor_id	EAP-EXT Vendor Id	Unsigned integer (24 bits)	1.0.0 to 4.4.2
eap.ext.vendor_type	EAP-EXT Vendor Type	Unsigned integer (32 bits)	1.0.0 to 4.4.2
eap.fast.authority_id_data	Authority ID Data	Byte sequence	3.6.0 to 4.4.2
eap.fast.length	EAP-FAST Length	Unsigned integer (16 bits)	3.6.0 to 4.4.2
eap.fast.type	EAP-FAST Type	Unsigned integer (16 bits)	3.6.0 to 4.4.2
eap.gpsk.csuite.specifier	Specifier	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.gpsk.csuite.vendor	Vendor	Unsigned integer (32 bits)	3.4.0 to 4.4.2
eap.gpsk.csuite_list_len	Len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.gpsk.failure_code	EAP-GPSK Failure code	Unsigned integer (32 bits)	3.4.0 to 4.4.2
eap.gpsk.id_peer	EAP-GPSK ID_Peer	Character string	3.4.0 to 4.4.2
eap.gpsk.id_peer.len	EAP-GPSK ID_Peer len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.gpsk.id_server	EAP-GPSK ID_Server	Character string	3.4.0 to 4.4.2
eap.gpsk.id_server.len	EAP-GPSK ID_Server len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.gpsk.opcode	EAP-GPSK OP-Code	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.gpsk.payload_mac	EAP-GPSK Payload MAC	Byte sequence	3.4.0 to 4.4.2
eap.gpsk.pd_payload	EAP-GPSK PD_Payload	Byte sequence	3.4.0 to 4.4.2
eap.gpsk.pd_payload.len	EAP-GPSK PD_Payload len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.gpsk.rand_peer	EAP-GPSK Rand_Peer	Byte sequence	3.4.0 to 4.4.2
eap.gpsk.rand_server	EAP-GPSK Rand_Server	Byte sequence	3.4.0 to 4.4.2
eap.id	Id	Unsigned integer (8 bits)	1.0.0 to 4.4.2
eap.identity	Identity	Character string	1.8.0 to 4.4.2
eap.identity.actual_len	Identity Actual Length	Unsigned integer (16 bits)	2.4.0 to 4.4.2
eap.identity.cert_sn	Certificate Serial Number	Character string	4.0.0 to 4.4.2
eap.identity.full	Identity (Full)	Character string	3.4.0 to 4.4.2
eap.identity.invalid	Invalid identity code	Label	2.6.5 to 4.4.2
eap.identity.mcc	Identity Mobile Country Code	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.identity.mnc	Identity Mobile Network Code	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.identity.nonascii	Non-ASCII characters within identity	Label	4.0.0 to 4.4.2
eap.identity.padding	Padding	Byte sequence	3.4.0 to 4.4.2
eap.identity.prefix	Identity Prefix	Character (8 bits)	3.4.0 to 4.4.2
eap.identity.pseudo	Identity (Pseudonym)	Character string	3.2.0 to 3.2.18
eap.identity.reauth	Identity (Reauth)	Character string	3.2.0 to 3.2.18
eap.identity.type	Identity Type	Character string	3.4.0 to 4.4.2
eap.identity.wlan.mcc	WLAN Identity Mobile Country Code	Unsigned integer (16 bits)	2.4.0 to 3.2.18
eap.identity.wlan.mnc	WLAN Identity Mobile Network Code	Unsigned integer (16 bits)	2.4.0 to 3.2.18
eap.identity.wlan.prefix	WLAN Identity Prefix	Character (8 bits)	2.4.0 to 3.2.18
eap.ikev2.flags	EAP-IKEv2 Flags	Unsigned integer (8 bits)	4.0.0 to 4.4.2
eap.ikev2.flags.icv_present	Integrity Checksum Data present	Boolean	4.0.0 to 4.4.2
eap.ikev2.flags.more_fragments	More Fragments	Boolean	4.0.0 to 4.4.2
eap.ikev2.integrity_checksum_data	EAP-IKEv2 Integrity Checksum Data	Byte sequence	4.0.0 to 4.4.2
eap.ikev2.len	EAP-IKEv2 Length	Unsigned integer (32 bits)	4.0.0 to 4.4.2
eap.ikve2.flags.len_included	Length Included	Boolean	4.0.0 to 4.4.2
eap.leap.ap_challenge	EAP-LEAP AP-Challenge	Byte sequence	1.8.0 to 4.4.2
eap.leap.ap_response	EAP-LEAP AP-Response	Byte sequence	1.8.0 to 4.4.2
eap.leap.count	EAP-LEAP Count	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.leap.data	EAP-LEAP Data	Byte sequence	2.0.0 to 4.4.2
eap.leap.name	EAP-LEAP Name	Character string	1.8.0 to 4.4.2
eap.leap.peer_challenge	EAP-LEAP Peer-Challenge	Byte sequence	1.8.0 to 4.4.2
eap.leap.peer_response	EAP-LEAP Peer-Response	Byte sequence	1.8.0 to 4.4.2
eap.leap.reserved	EAP-LEAP Reserved	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.leap.version	EAP-LEAP Version	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.len	Length	Unsigned integer (16 bits)	1.0.0 to 4.4.2
eap.md5.extra_data	EAP-MD5 Extra Data	Byte sequence	1.8.0 to 4.4.2
eap.md5.value	EAP-MD5 Value	Byte sequence	1.8.0 to 4.4.2
eap.md5.value_size	EAP-MD5 Value-Size	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.md5.value_size.overflow	Overflow	Label	1.12.0 to 4.4.2
eap.mitm_attacks	Vulnerable to MITM attacks. If possible, change EAP type.	Label	1.12.0 to 4.4.2
eap.ms_chap_v2.challenge	EAP-MS-CHAP-v2 Challenge	Byte sequence	1.8.0 to 4.4.2
eap.ms_chap_v2.data	EAP-MS-CHAP-v2 Data	Byte sequence	2.0.0 to 4.4.2
eap.ms_chap_v2.failure_request	EAP-MS-CHAP-v2 Failure-Request	Character string	1.8.0 to 4.4.2
eap.ms_chap_v2.flags	EAP-MS-CHAP-v2 Flags	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.ms_chap_v2.id	EAP-MS-CHAP-v2 Id	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.ms_chap_v2.length	EAP-MS-CHAP-v2 Length	Unsigned integer (16 bits)	1.8.0 to 4.4.2
eap.ms_chap_v2.length.invalid	Invalid Length	Label	1.12.0 to 4.4.2
eap.ms_chap_v2.message	EAP-MS-CHAP-v2 Message	Character string	1.8.0 to 4.4.2
eap.ms_chap_v2.name	EAP-MS-CHAP-v2 Name	Character string	1.8.0 to 4.4.2
eap.ms_chap_v2.nt_response	EAP-MS-CHAP-v2 NT-Response	Byte sequence	1.8.0 to 4.4.2
eap.ms_chap_v2.opcode	EAP-MS-CHAP-v2 OpCode	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.ms_chap_v2.peer_challenge	EAP-MS-CHAP-v2 Peer-Challenge	Byte sequence	1.8.0 to 4.4.2
eap.ms_chap_v2.reserved	EAP-MS-CHAP-v2 Reserved	Byte sequence	1.8.0 to 4.4.2
eap.ms_chap_v2.response	EAP-MS-CHAP-v2 Response (Unknown Length)	Byte sequence	2.0.0 to 4.4.2
eap.ms_chap_v2.value_size	EAP-MS-CHAP-v2 Value-Size	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.msauth-tlv.crypto.cmac	Compound MAC	Byte sequence	4.0.0 to 4.4.2
eap.msauth-tlv.crypto.nonce	Nonce	Byte sequence	4.0.0 to 4.4.2
eap.msauth-tlv.crypto.received-version	Received Version	Unsigned integer (8 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.crypto.reserved	Reserved	Unsigned integer (8 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.crypto.subtype	Subtype	Unsigned integer (8 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.crypto.version	Version	Unsigned integer (8 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.len	Length	Unsigned integer (16 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.mandatory	Mandatory	Boolean	4.0.0 to 4.4.2
eap.msauth-tlv.reserved	Reserved	Boolean	4.0.0 to 4.4.2
eap.msauth-tlv.status	Status	Unsigned integer (16 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.type	Type	Unsigned integer (16 bits)	4.0.0 to 4.4.2
eap.msauth-tlv.val	Value	Byte sequence	4.0.0 to 4.4.2
eap.notification	Notification	Character string	1.8.0 to 4.4.2
eap.pax.a	EAP-PAX A	Byte sequence	3.4.0 to 4.4.2
eap.pax.a.len	EAP-PAX A len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.pax.ade	EAP-PAX ADE	Byte sequence	3.4.0 to 4.4.2
eap.pax.ade.len	EAP-PAX ADE len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.pax.b	EAP-PAX B	Byte sequence	3.4.0 to 4.4.2
eap.pax.b.len	EAP-PAX B len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.pax.cid	EAP-PAX CID	Character string	3.4.0 to 4.4.2
eap.pax.cid.len	EAP-PAX CID len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.pax.dh_group_id	EAP-PAX DH Group ID	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.pax.flags	EAP-PAX Flags	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.pax.flags.ai	ADE Included	Boolean	3.4.0 to 4.4.2
eap.pax.flags.ce	certificate enabled	Boolean	3.4.0 to 4.4.2
eap.pax.flags.mf	more fragments	Boolean	3.4.0 to 4.4.2
eap.pax.flags.reserved	reserved	Boolean	3.4.0 to 4.4.2
eap.pax.icv	EAP-PAX ICV	Byte sequence	3.4.0 to 4.4.2
eap.pax.mac_ck	EAP-PAX MAC_CK	Byte sequence	3.4.0 to 4.4.2
eap.pax.mac_ck.len	EAP-PAX MAC_CK len	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.pax.mac_id	EAP-PAX MAC ID	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.pax.opcode	EAP-PAX OP-Code	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.pax.public_key_id	EAP-PAX Public Key ID	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.psk.flags	EAP-PSK Flags	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.psk.flags.reserved	Reserved	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.psk.flags.t	T	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.psk.id_p	EAP-PSK ID_P	Character string	3.4.0 to 4.4.2
eap.psk.id_s	EAP-PSK ID_S	Character string	3.4.0 to 4.4.2
eap.psk.mac_p	EAP-PSK MAC_P	Byte sequence	3.4.0 to 4.4.2
eap.psk.mac_s	EAP-PSK MAC_S	Byte sequence	3.4.0 to 4.4.2
eap.psk.pchannel	EAP-PSK Protected Channel (encrypted)	Byte sequence	3.4.0 to 4.4.2
eap.psk.rand_p	EAP-PSK RAND_P	Byte sequence	3.4.0 to 4.4.2
eap.psk.rand_s	EAP-PSK RAND_S	Byte sequence	3.4.0 to 4.4.2
eap.retransmission	This packet is a retransmission	Label	3.2.0 to 4.4.2
eap.sake.attr.len	Attribute Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.sake.attr.type	Attribute Type	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.sake.attr.val	Attribute Value	Byte sequence	3.4.0 to 4.4.2
eap.sake.attr.val_str	Attribute Value	Character string	3.4.0 to 4.4.2
eap.sake.attr.val_uint48	Attribute Value	Unsigned integer (48 bits)	3.4.0 to 4.4.2
eap.sake.session_id	EAP-SAKE Session ID	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.sake.subtype	EAP-SAKE Subtype	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.sake.version	EAP-SAKE Version	Unsigned integer (8 bits)	3.4.0 to 4.4.2
eap.sim.error_code	EAP-SIM Error Code	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.sim.notification_type	EAP-SIM Notification Type	Unsigned integer (16 bits)	3.4.0 to 4.4.2
eap.sim.reserved	EAP-SIM Reserved	Unsigned integer (16 bits)	1.8.0 to 4.4.2
eap.sim.subtype	EAP-SIM Subtype	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.sim.subtype.attribute	EAP-SIM Attribute	Label	1.8.0 to 4.4.2
eap.sim.subtype.len	EAP-SIM Length	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.sim.subtype.type	EAP-SIM Type	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.sim.subtype.value	EAP-SIM Value	Byte sequence	1.8.0 to 4.4.2
eap.tls.flags	EAP-TLS Flags	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.tls.flags.len_included	Length Included	Boolean	1.8.0 to 4.4.2
eap.tls.flags.more_fragments	More Fragments	Boolean	1.8.0 to 4.4.2
eap.tls.flags.outer_tlv_len_included	Outer TLV Length Included	Boolean	4.0.0 to 4.4.2
eap.tls.flags.start	Start	Boolean	1.8.0 to 4.4.2
eap.tls.flags.version	Version	Unsigned integer (8 bits)	1.8.0 to 4.4.2
eap.tls.fragment	EAP-TLS Fragment	Frame number	1.8.0 to 4.4.2
eap.tls.fragment.count	Fragment Count	Unsigned integer (32 bits)	1.8.0 to 4.4.2
eap.tls.fragment.error	Defragmentation Error	Frame number	1.8.0 to 4.4.2
eap.tls.fragment.fragment.too_long	Fragment Too Long	Boolean	1.8.0 to 4.4.2
eap.tls.fragment.multiple_tails	Multiple Tail Fragments Found	Boolean	1.8.0 to 4.4.2
eap.tls.fragment.overlap	Fragment Overlap	Boolean	1.8.0 to 4.4.2
eap.tls.fragment.overlap_conflict	Conflicting Data In Fragment Overlap	Boolean	1.8.0 to 4.4.2
eap.tls.fragments	EAP-TLS Fragments	Label	1.8.0 to 4.4.2
eap.tls.len	EAP-TLS Length	Unsigned integer (32 bits)	1.8.0 to 4.4.2
eap.tls.outer_tlvs_len	TEAP Outer TLVs Length	Unsigned integer (32 bits)	4.2.0 to 4.4.2
eap.tls.reassembled.len	Reassembled EAP-TLS Length	Unsigned integer (32 bits)	1.8.0 to 4.4.2
eap.tls.reassembled_in	Reassembled EAP-TLS PDU in frame	Frame number	4.2.0 to 4.4.2
eap.type	Type	Unsigned integer (8 bits)	1.0.0 to 4.4.2
eaptls.fragment	EAP-TLS Fragment	Frame number	1.0.0 to 1.6.16
eaptls.fragment.count	Fragment count	Unsigned integer (32 bits)	1.6.0 to 1.6.16
eaptls.fragment.error	Defragmentation error	Frame number	1.0.0 to 1.6.16
eaptls.fragment.multipletails	Multiple tail fragments found	Boolean	1.0.0 to 1.6.16
eaptls.fragment.overlap	Fragment overlap	Boolean	1.0.0 to 1.6.16
eaptls.fragment.overlap.conflict	Conflicting data in fragment overlap	Boolean	1.0.0 to 1.6.16
eaptls.fragment.toolongfragment	Fragment too long	Boolean	1.0.0 to 1.6.16
eaptls.fragments	EAP-TLS Fragments	Label	1.0.0 to 1.6.16
eaptls.reassembled.length	Reassembled EAP-TLS length	Unsigned integer (32 bits)	1.4.0 to 1.6.16