Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Display Filter Reference: TCP Encapsulation of IPsec Packets

Protocol field name: tcpencap

Versions: 1.0.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
tcpencap.espzeroESP zeroUnsigned integer (16 bits)1.0.0 to 4.2.4
tcpencap.ikedirectionISAKMP traffic directionUnsigned integer (16 bits)1.0.0 to 4.2.4
tcpencap.magicMagic numberByte sequence1.0.0 to 4.2.4
tcpencap.magic2Magic 2Byte sequence1.0.0 to 4.2.4
tcpencap.protoProtocolUnsigned integer (8 bits)1.0.0 to 4.2.4
tcpencap.seqSequence numberUnsigned integer (16 bits)1.0.0 to 4.2.4
tcpencap.unknownUnknown trailerByte sequence1.0.0 to 4.2.4
tcpencap.zeroAll zeroByte sequence1.0.0 to 4.2.4