Wireshark · Display Filter Reference: Session Announcement Protocol

Field name	Description	Type	Versions
sap.auth	Authentication data	Label	1.0.0 to 4.4.2
sap.auth.data_padding	Authentication data padding	Byte sequence	1.12.0 to 4.4.2
sap.auth.data_padding.len	Authentication data pad count (bytes)	Unsigned integer (8 bits)	1.12.0 to 4.4.2
sap.auth.flags	Authentication data flags	Unsigned integer (8 bits)	1.0.0 to 4.4.2
sap.auth.flags.p	Padding Bit	Boolean	1.0.0 to 4.4.2
sap.auth.flags.t	Authentication Type	Unsigned integer (8 bits)	1.0.0 to 4.4.2
sap.auth.flags.v	Version Number	Unsigned integer (8 bits)	1.0.0 to 4.4.2
sap.auth.len	Authentication Length	Unsigned integer (8 bits)	1.12.0 to 4.4.2
sap.auth.subheader	Authentication subheader	Byte sequence	1.12.0 to 4.4.2
sap.bogus_authentication_or_pad_length	Bogus authentication length	Label	1.12.0 to 4.4.2
sap.compressed	The rest of the packet is compressed	Label	1.12.0 to 4.4.2
sap.compressed_and_encrypted	The rest of the packet is compressed and encrypted	Label	1.12.0 to 4.4.2
sap.encrypted	The rest of the packet is encrypted	Label	1.12.0 to 4.4.2
sap.flags	Flags	Unsigned integer (8 bits)	1.0.0 to 4.4.2
sap.flags.a	Address Type	Boolean	1.0.0 to 4.4.2
sap.flags.c	Compression Bit	Boolean	1.0.0 to 4.4.2
sap.flags.e	Encryption Bit	Boolean	1.0.0 to 4.4.2
sap.flags.r	Reserved	Boolean	1.0.0 to 4.4.2
sap.flags.t	Message Type	Boolean	1.0.0 to 4.4.2
sap.flags.v	Version Number	Unsigned integer (8 bits)	1.0.0 to 4.4.2
sap.message_identifier_hash	Message Identifier Hash	Unsigned integer (16 bits)	1.12.0 to 4.4.2
sap.originating_source	Originating Source	IPv4 address	1.12.0 to 4.4.2
sap.originating_source.ipv6	Originating Source	IPv6 address	2.2.0 to 4.4.2
sap.payload_type	Payload type	Character string	1.12.0 to 4.4.2