# Specify when the protocol is called. PARENT_SUBFIELD tcp.port The list of possible PARENT_SUBFIELD : - Based on Wireshark 1.6.2. - NOT exhaustive. aim.family ansi_637.tele_id ansi_a.ota ansi_a.pld ansi_a.sms ansi_map.ota ansi_map.pld ansi_map.tele_id arcnet.protocol_id bacapp.vendor_identifier bctp.tpi ber.oid ber.syntax bsap.pdu_type bssap.pdu_type btl2cap.cid btl2cap.psm btl2cap.service btrfcomm.service bvlc.function camel.ros.local.arg camel.ros.local.err camel.ros.local.res chdlctype cip.class.iface cip.data_segment.iface cmip.attribute_id dccp.port dcp-af.pt dcp-etsi.sync dcp-tpl.ptr ddp.type diameter.3gpp diameter.base diameter.ericsson dns.tsig.mac dop.oid enip.srrd.iface enip.sud.iface ethertype # eth.type does not work fc.ftype fcct.server fcp.type fr.ietf fr.osinl gre.proto gsm-sms-ud.udh.port gsm-sms.udh.port gsm_a.sms_tpdu gsm_map.sms_tpdu gtp.priv_ext h225.gef.content h225.gef.name h225.nsp.h221 h225.nsp.object h225.tp h245.gef.content h245.gef.name h245.nsp.h221 h245.nsp.object h450.ros.global.arg h450.ros.global.err h450.ros.global.res h450.ros.local.arg h450.ros.local.err h450.ros.local.res hci_h1.type hci_h4.type hnbap.extension hnbap.ies hnbap.proc.imsg hnbap.proc.sout hnbap.proc.uout hpext.dxsap http.port idp.packet_type ip.proto ipx.packet_type ipx.socket key_mgmt lapd.gsm.sapi lapd.sapi lapdm.sapi ldap.name llc.dsap llc.xid_dsap llcgprs.sapi mbtcp.data media_type mpls.label mstp.vendor_frame_type mtp3.service_indicator nbap.extension nbap.ies nbap.proc.imsg nbap.proc.sout nbap.proc.uout nfs_fhandle.type null.type osinl osinl.excl p1.extension p1.extension-attribute p1.tokendata pcap.extension pcap.ies pcap.ies.pair.first pcap.ies.pair.second pcap.proc.imsg pcap.proc.out pcap.proc.sout pcap.proc.uout pgm.port ppp.protocol q931.codeset q931.ie q932.ros.global.arg q932.ros.global.err q932.ros.global.res q932.ros.local.arg q932.ros.local.err q932.ros.local.res qsig.ext ranap.extension ranap.ies ranap.ies.pair.first ranap.ies.pair.second ranap.nas_pdu ranap.proc.imsg ranap.proc.out ranap.proc.sout ranap.proc.uout rnsap.extension rnsap.ies rnsap.proc.imsg rnsap.proc.sout rnsap.proc.uout ros.oid rsvp.proto rtcp.app.name rtp.pt rtp_dyn_payload_type rtp_hdr_ext rtse.oid rua.extension rua.ies rua.proc.imsg rua.proc.sout rua.proc.uout s1ap.extension s1ap.ies s1ap.ies.pair.first s1ap.ies.pair.second s1ap.proc.imsg s1ap.proc.sout s1ap.proc.uout sabp.extension sabp.ies sabp.proc.imsg sabp.proc.sout sabp.proc.uout sccp.ssn sctp.port sctp.ppi sip.hdr sita.proto sm_pco.protocol snmp.variable_oid spp.socket spx.socket tali.opcode tcp.port teredo tipc.usr tipcv2.port_name_type udp.port usb.bulk usb.control vines_ip.protocol vines_llc.ptype wtap_encap # frame.encap_type does not work # 45 for User 0 / DLT 147 # 46 for User 1 / DLT 148 # ... # 60 for User 15 / DLT 162 x.25.spi x2ap.extension x2ap.ies x2ap.proc.imsg x2ap.proc.sout x2ap.proc.uout zbee.profile