bookmark
source
capture.sourceId
capture.sourceSession
application.proto
app.proto
decoded.proto
arp.dst.ip
arp.dst.mac
arp.hw.size
arp.hw.type
arp.op
arp.opcode
arp.proto.size
arp.proto.type
arp.src.ip
arp.src.mac
atm.encapsulation
bittorrent.info_hash
bittorrent.length
bittorrent.message
bittorrent.message_id
bittorrent.peer_id
bittorrent.peer_id_hex
bittorrent.protocol
bittorrent.query
bittorrent.reserved
bittorrent.signature
bittorrent.transaction_type
bittorrent.type
cookie.SC
dns.aip
dns.aips
dns.anames
dns.ancount
dns.hostnames
dns.id
dns.qdcount
dns.qname
dns.qnames
dns.qr
ether.dst.mac.addr
ether.dst.mac.vendor
ether.src.mac.addr
ether.src.mac.vendor
ether.type
host.banner
http.accept
http.accept_encoding
http.connection
http.content_encoding
http.content_length
http.content_type
http.host
http.location
http.method
http.referer
http.server
http.status_code
http.status_msg
http.transfer_encoding
http.type
http.url
http.version
icmp.chksum
icmp.code
icmp.id
icmp.seq
icmp.type
igmp.chksum
igmp.group_addr
igmp.max_resp_time_ds
igmp.type
igmp.type_num
igmp.version
ip.chksum
ip.dst.addr
ip.dst.class
ip.dst.location
ip.len
ip.src.addr
ip.src.class
ip.src.location
irc.command
irc.msg_count
irc.params
irc.prefix
krb5.msg_type
krb5.pvno
link.arp.dst.ip
link.arp.dst.mac
link.arp.hw.size
link.arp.hw.type
link.arp.op
link.arp.opcode
link.arp.proto.size
link.arp.proto.type
link.arp.src.ip
link.arp.src.mac
link.dst.mac.addr
link.dst.mac.vendor
link.proto
link.rarp
link.rarp.dst.ip
link.rarp.dst.mac
link.rarp.hw.size
link.rarp.hw.type
link.rarp.opcode
link.rarp.proto.size
link.rarp.proto.type
link.rarp.src.ip
link.rarp.src.mac
link.src.mac.addr
link.src.mac.vendor
lldp.chassis_id
lldp.port_id
lldp.ttl
loc.dst.city
loc.dst.country
loc.dst.postal
loc.dst.timezone
loc.dst.tz
loc.src.city
loc.src.country
loc.src.postal
loc.src.timezone
loc.src.tz
network.dst.class
network.dst.location
network.igmp.chksum
network.igmp.group_addr
network.igmp.max_resp_time_ds
network.igmp.type
network.igmp.type_num
network.igmp.version
network.igmp.wire.len
network.ip.chksum
network.ip.dst.addr
network.ip.len
network.ip.src.addr
network.len
network.proto
network.src.class
network.src.location
packet.decoded_protocols
packet.hex
packet.proto
packet.timestamp
index
packet.length
length
protocol
frame.length
packet.processed
payload.ascii
payload.charset
payload.chars.used
payload.decompressed
payload.encoding
payload.entropy
payload.hex
payload.len
payload.mime
raw.data
raw.data.payload
raw.data.payload.payload.hex
raw.data.payload.hex.encoded
raw.data.payload.len
pppoe.code
pppoe.session_id
pppoe.stage
ppp.proto_field
rarp.dst.ip
rarp.dst.mac
rarp.hw.size
rarp.hw.type
rarp.op
rarp.opcode
rarp.proto.size
rarp.proto.type
rarp.src.ip
rarp.src.mac
rpc.msg_type
rpc.procedure
rpc.program
rpc.prog_version
rpc.reply_status
rpc.version
rpc.xid
sctp.chksum
sctp.chunk.count
sctp.chunk.details
sctp.chunk.flags
sctp.chunk.length
sctp.chunk.payload.len
sctp.chunk.payload.preview
sctp.chunks
sctp.chunk.type
sctp.chunk.type_name
sctp.dst.port
sctp.src.port
sctp.vtag
sigtran.length
sigtran.message.class
sigtran.message.class_name
sigtran.message.type
sigtran.payload.len
sigtran.payload.preview
sigtran.proto
sigtran.reserved
sigtran.signaling
sigtran.version
sip.authorization
sip.proxy_authorization
smb.auth.domain
smb.auth.lm_response
smb.auth.ntlm_response
smb.auth.username
smb.auth.workstation
smb.ntlm.message_type
smb.ntlm.target_name
smb.ntlm.type
smpp.body_length
smpp.command
smpp.command_id
smpp.command_length
smpp.command_status
smpp.is_response
smpp.sequence
soulseek.body_length
soulseek.code
soulseek.code_hex
soulseek.length
soulseek.preview
ssh.banner
ssh.comments
ssh.direction
ssh.likely_encrypted
ssh.msg_type
ssh.msg_type_num
ssh.packet_length
ssh.padding_length
ssh.protocol_version
ssh.software_version
ssh.type
tcp.ack
tcp.chksum
tcp.desc
tcp.dst.port
tcp.flags
tcp.len
tcp.options
tcp.payload.len
tcp.proto
tcp.seq
tcp.src.port
tcp.urgptr
tor.exit.node
tor.nickname
tor.platform
transport.icmp.chksum
transport.icmp.code
transport.icmp.id
transport.icmp.seq
transport.icmp.type
transport.len
transport.proto
transport.sctp.dst.port
transport.sctp.src.port
transport.tcp.ack
transport.tcp.chksum
transport.tcp.dst.port
transport.tcp.flags
transport.tcp.len
transport.tcp.options
transport.tcp.payload.len
transport.tcp.seq
transport.tcp.src.port
transport.tcp.urgptr
transport.udp.chksum
transport.udp.dst.port
transport.udp.len
transport.udp.src.port
udp.chksum
udp.desc
udp.dst.port
udp.len
udp.proto
udp.src.port
wan.detected
wan.layers
wan.primary
wan.proto.atm
wan.proto.frame_relay
wan.proto.hdlc
wan.proto.lap
wan.proto.lcp
wan.proto.lldp
wan.proto.ncp
wan.proto.ppp
wan.proto.pppoe
wan.proto.sdlc
wan.proto.slip
wan.proto.token_ring
wire.len
wire.proto
ws.fin
ws.host
ws.key
ws.masked
ws.opcode
ws.payload_len
ws.type
ws.upgrade
ws.version
wifi.bssid
wifi.ssid
wifi.channel
wifi.cipher
wifi.crypto
wifi.type
wifi.subtype
wifi.signal_dbm
wifi.noise_dbm
wifi.data_rate_mbps
wifi.fc.protected
wifi.fc.tods
wifi.fc.fromds
wifi.fc.frag
wifi.fc.retry
wifi.decrypt.ok
wifi.decrypt.algorithm
wifi.decrypt.payload
