Display Filter Reference: Remote Packet Capture
Protocol field name: rpcap
Versions: 1.2.0 to 4.4.2
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| rpcap | Address | Label | 1.2.0 to 4.4.2 |
| rpcap | Authentication | Label | 1.2.0 to 2.4.12, 2.6.0 to 2.6.6 |
| rpcap | Authentication item length 1 | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Authentication item length 2 | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Maximum version number supported | Unsigned integer (8 bits) | 2.4.13 to 2.4.16, 2.6.7 to 4.4.2 |
| rpcap | Minimum version number supported | Unsigned integer (8 bits) | 2.4.13 to 2.4.16, 2.6.7 to 4.4.2 |
| rpcap | Authentication reply | Label | 2.4.13 to 2.4.16, 2.6.7 to 4.4.2 |
| rpcap | Authentication request | Label | 2.4.13 to 2.4.16, 2.6.7 to 4.4.2 |
| rpcap | Authentication type | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Broadcast | Label | 1.2.0 to 4.4.2 |
| rpcap | Buffer size | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Capture length | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Caplen is bigger than the remaining message length | Label | 1.12.0 to 4.4.2 |
| rpcap | Client Port | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Description length | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | P2P destination address | Label | 1.2.0 to 4.4.2 |
| rpcap | Dummy | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Error | Character string | 1.2.0 to 4.4.2 |
| rpcap | Error | Label | 1.12.0 to 4.4.2 |
| rpcap | Error value | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Filter | Label | 1.2.0 to 4.4.2 |
| rpcap | Filter BPF instruction | Label | 1.2.0 to 4.4.2 |
| rpcap | Filter type | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Find all devices | Label | 1.2.0 to 4.4.2 |
| rpcap | Flags | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Use Datagram | Boolean | 1.2.0 to 4.4.2 |
| rpcap | Inbound | Boolean | 1.2.0 to 4.4.2 |
| rpcap | Outbound | Boolean | 1.2.0 to 4.4.2 |
| rpcap | Promiscuous mode | Boolean | 1.2.0 to 4.4.2 |
| rpcap | Server open | Boolean | 1.2.0 to 4.4.2 |
| rpcap | Interface | Label | 1.2.0 to 4.4.2 |
| rpcap | Address family | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Interface flags | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Flow information | Unsigned integer (32 bits) | 3.6.0 to 4.4.2 |
| rpcap | IP address | IPv4 address | 1.2.0 to 3.4.16 |
| rpcap | IPv4 address | IPv4 address | 3.6.0 to 4.4.2 |
| rpcap | IPv6 address | IPv6 address | 3.6.0 to 4.4.2 |
| rpcap | Padding | Byte sequence | 1.2.0 to 4.4.2 |
| rpcap | Port | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Scope ID | Unsigned integer (32 bits) | 3.6.0 to 4.4.2 |
| rpcap | Unknown address | Byte sequence | 1.2.0 to 4.4.2 |
| rpcap | Unknown address family | Label | 1.12.0 to 4.4.2 |
| rpcap | Interface address | Label | 1.2.0 to 4.4.2 |
| rpcap | Description | Character string | 1.2.0 to 4.4.2 |
| rpcap | Dropped by network interface | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Name | Character string | 1.2.0 to 4.4.2 |
| rpcap | Received by kernel filter | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Instruction value | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | JF | Unsigned integer (8 bits) | 1.2.0 to 4.4.2 |
| rpcap | JT | Unsigned integer (8 bits) | 1.2.0 to 4.4.2 |
| rpcap | Dropped by kernel filter | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Payload length | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Link type | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Number of addresses | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Name length | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Netmask | Label | 1.2.0 to 4.4.2 |
| rpcap | Number of items | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | No more data in packet | Label | 1.12.0 to 4.4.2 |
| rpcap | Frame number | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Op code | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Op | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Class | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Fields | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Op | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Op | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Mode | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Rval | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Size | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Src | Unsigned integer (16 bits) | 1.8.0 to 4.4.2 |
| rpcap | Open reply | Label | 1.2.0 to 4.4.2 |
| rpcap | Open request | Character string | 1.2.0 to 4.4.2 |
| rpcap | Packet | Label | 1.2.0 to 4.4.2 |
| rpcap | Password | Character string | 1.2.0 to 4.4.2 |
| rpcap | Read timeout | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Method | Unsigned integer (8 bits) | 1.2.0 to 4.4.2 |
| rpcap | Sampling | Label | 1.2.0 to 4.4.2 |
| rpcap | Value | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Server port | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Snap length | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Captured by rpcapd | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Start capture reply | Label | 1.2.0 to 4.4.2 |
| rpcap | Start capture request | Label | 1.2.0 to 4.4.2 |
| rpcap | Statistics | Label | 1.2.0 to 4.4.2 |
| rpcap | Arrival time | Date and time | 1.2.0 to 4.4.2 |
| rpcap | Message type | Unsigned integer (8 bits) | 1.2.0 to 4.4.2 |
| rpcap | Timezone offset | Unsigned integer (32 bits) | 1.2.0 to 4.4.2 |
| rpcap | Username | Character string | 1.2.0 to 4.4.2 |
| rpcap | Message value | Unsigned integer (16 bits) | 1.2.0 to 4.4.2 |
| rpcap | Version | Unsigned integer (8 bits) | 1.2.0 to 4.4.2 |