Wireshark · Display Filter Reference: TACACS+

Field name	Description	Type	Versions
tacplus.acct.arg_count	Arg count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.acct.auth_method	Auth Method	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.acct.flags	Flags	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tacplus.acct.flags.more	More	Boolean	1.10.0 to 4.4.2
tacplus.acct.flags.start	Start	Boolean	1.10.0 to 4.4.2
tacplus.acct.flags.stop	Stop	Boolean	1.10.0 to 4.4.2
tacplus.acct.flags.watchdog	Watchdog	Boolean	1.10.0 to 4.4.2
tacplus.address_len	Remaddr len	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.arap.nas_challenge	Nas Challenge	Character string	1.10.0 to 4.4.2
tacplus.arap.remote_challenge	Remote Challenge	Character string	1.10.0 to 4.4.2
tacplus.arap.remote_response	Remote Response	Character string	1.10.0 to 4.4.2
tacplus.arap_data_length	ARAP Data Length	Unsigned integer (8 bits)	2.0.0 to 4.4.2
tacplus.arg_length	Length	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.arg_value	Value	Character string	1.10.0 to 4.4.2
tacplus.ascii_length	ASCII Data Length	Unsigned integer (8 bits)	2.0.0 to 4.4.2
tacplus.auth_password	Password	Character string	1.10.0 to 4.4.2
tacplus.authen_action	Action	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.authentication_type	Authentication type	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_acct.data	Data	Character string	1.10.0 to 4.4.2
tacplus.body_acct.data_len	Data length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_acct.msg_len	Server Msg length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_acct.server_msg	Server message	Character string	1.10.0 to 4.4.2
tacplus.body_acct.status	Status	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_authen_rep.flags	Flags	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_authen_rep.server_msg	Server message	Character string	1.10.0 to 4.4.2
tacplus.body_authen_rep.server_msg_len	Server message length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_authen_rep.status	Status	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_authen_rep_server.data_len	Data length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_authen_req_cont.data_length	Data length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_authen_req_cont.flags	Flags	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_authen_req_cont.user	User	Character string	1.10.0 to 4.4.2
tacplus.body_authen_req_cont.user_length	User length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_author_rep.arg_count	Arg count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_author_rep.auth_status	Auth Status	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_author_rep_server.data_len	Data length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_author_rep_server.msg_len	Server Msg length	Unsigned integer (16 bits)	1.10.0 to 4.4.2
tacplus.body_author_req.arg_count	Arg count	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.body_author_req.auth_method	Auth Method	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.bogus_data	Bogus data	Label	2.0.0 to 4.4.2
tacplus.chap.challenge	Challenge	Character string	1.10.0 to 4.4.2
tacplus.chap.id	ID	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.chap.response	Response	Character string	1.10.0 to 4.4.2
tacplus.chap_data_length	CHAP Data Length	Unsigned integer (8 bits)	2.0.0 to 4.4.2
tacplus.data	Data	Byte sequence	2.0.0 to 4.4.2
tacplus.data_length	Data	Unsigned integer (8 bits)	2.0.0 to 4.4.2
tacplus.flags	Flags	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tacplus.flags.singleconn	Single Connection	Boolean	1.0.0 to 4.4.2
tacplus.flags.unencrypted	Unencrypted	Boolean	1.0.0 to 4.4.2
tacplus.flags.unencrypted.deprecated	Unencrypted payload option MUST NOT be used in production	Label	4.2.0 to 4.4.2
tacplus.majvers	Major version	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tacplus.minvers	Minor version	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tacplus.mschap.challenge	Challenge	Character string	1.10.0 to 4.4.2
tacplus.mschap.id	ID	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.mschap.response	Response	Character string	1.10.0 to 4.4.2
tacplus.mschap_data_length	MSCHAP Data Length	Unsigned integer (8 bits)	2.0.0 to 4.4.2
tacplus.packet_len	Packet length	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tacplus.packet_len.invalid	Invalid length	Label	1.12.0 to 4.4.2
tacplus.password_length	Password Length	Unsigned integer (8 bits)	2.0.0 to 4.4.2
tacplus.port	Port	Character string	1.10.0 to 4.4.2
tacplus.port_len	Port len	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.privilege_level	Privilege Level	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.remote_address	Remote Address	Character string	1.10.0 to 4.4.2
tacplus.request	Request	Boolean	1.0.0 to 4.4.2
tacplus.response	Response	Boolean	1.0.0 to 4.4.2
tacplus.seqno	Sequence number	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tacplus.service	Service	Unsigned integer (8 bits)	1.10.0 to 4.4.2
tacplus.session_id	Session ID	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tacplus.type	Type	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tacplus.user	User	Character string	1.10.0 to 4.4.2
tacplus.user_len	User len	Unsigned integer (8 bits)	1.10.0 to 4.4.2