mjnbrn

Wireshark Prefs

Oct 21st, 2018
1,554
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 185.16 KB | None | 0 0
  1. # Configuration file for Wireshark 2.2.6.
  2. #
  3. # This file is regenerated each time preferences are saved within
  4. # Wireshark. Making manual changes should be safe, however.
  5. # Preferences that have been commented out have not been
  6. # changed from their default value.
  7.  
  8. ####### User Interface ########
  9.  
  10. # Open a console window (Windows only)
  11. # One of: NEVER, AUTOMATIC, ALWAYS
  12. # (case-insensitive).
  13. #gui.console_open: NEVER
  14.  
  15. # Alternating colors in TreeViews?
  16. # TRUE or FALSE (case-insensitive)
  17. #gui.tree_view_altern_colors: FALSE
  18.  
  19. # Display Icons on Expert Composite Dialog Tabs?
  20. # TRUE or FALSE (case-insensitive)
  21. #gui.expert_composite_eyecandy: FALSE
  22.  
  23. # Place filter toolbar inside the statusbar?
  24. # TRUE or FALSE (case-insensitive)
  25. #gui.filter_toolbar_show_in_statusbar: FALSE
  26.  
  27. # Protocol-tree line style
  28. # One of: NONE, SOLID, DOTTED, TABBED
  29. # (case-insensitive).
  30. #gui.protocol_tree_line_style: NONE
  31.  
  32. # Protocol-tree expander style
  33. # One of: NONE, SQUARE, TRIANGLE, CIRCULAR
  34. # (case-insensitive).
  35. #gui.protocol_tree_expander_style: SQUARE
  36.  
  37. # Hex dump highlight style
  38. # One of: BOLD, INVERSE
  39. # (case-insensitive).
  40. #gui.hex_dump_highlight_style: INVERSE
  41.  
  42. # Where to start the File Open dialog box
  43. # One of: LAST_OPENED, SPECIFIED
  44. # (case-insensitive).
  45. #gui.fileopen.style: LAST_OPENED
  46.  
  47. # The max. number of items in the open recent files list
  48. # A decimal number
  49. #gui.recent_files_count.max: 10
  50.  
  51. # The max. number of entries in the display filter list
  52. # A decimal number
  53. #gui.recent_display_filter_entries.max: 10
  54.  
  55. # Directory to start in when opening File Open dialog.
  56. # A path to a directory
  57. #gui.fileopen.dir:
  58.  
  59. # The preview timeout in the File Open dialog
  60. # A decimal number
  61. #gui.fileopen.preview: 3
  62.  
  63. # Ask to save unsaved capture files?
  64. # TRUE or FALSE (case-insensitive)
  65. #gui.ask_unsaved: TRUE
  66.  
  67. # Wrap to beginning/end of file during search?
  68. # TRUE or FALSE (case-insensitive)
  69. #gui.find_wrap: TRUE
  70.  
  71. # Settings dialogs use a save button?
  72. # TRUE or FALSE (case-insensitive)
  73. #gui.use_pref_save: FALSE
  74.  
  75. # Save window position at exit?
  76. # TRUE or FALSE (case-insensitive)
  77. #gui.geometry.save.position: TRUE
  78.  
  79. # Save window size at exit?
  80. # TRUE or FALSE (case-insensitive)
  81. #gui.geometry.save.size: TRUE
  82.  
  83. # Save window maximized state at exit?
  84. # TRUE or FALSE (case-insensitive)
  85. #gui.geometry.save.maximized: TRUE
  86.  
  87. # Use OS X style (OS X with native GTK only)?
  88. # TRUE or FALSE (case-insensitive)
  89. #gui.macosx_style: TRUE
  90.  
  91. # Main Toolbar style
  92. # One of: ICONS, TEXT, BOTH
  93. # (case-insensitive).
  94. #gui.toolbar_main_style: ICONS
  95.  
  96. # Filter Toolbar style
  97. # One of: ICONS, TEXT, BOTH
  98. # (case-insensitive).
  99. #gui.toolbar_filter_style: TEXT
  100.  
  101. # The path to the webbrowser (Ex: mozilla)
  102. # A string
  103. #gui.webbrowser:
  104.  
  105. # Check for updates (Windows only)
  106. # TRUE or FALSE (case-insensitive)
  107. #gui.update.enabled: TRUE
  108.  
  109. # The type of update to fetch. You should probably leave this set to UPDATE_CHANNEL_STABLE.
  110. # One of: DEVELOPMENT, STABLE
  111. # (case-insensitive).
  112. #gui.update.channel: STABLE
  113.  
  114. # How often to check for software updates in seconds
  115. # A decimal number
  116. #gui.update.interval: 86400
  117.  
  118. # Custom window title to be appended to the existing title
  119. # %P = profile name
  120. # %V = version info
  121. # A string
  122. #gui.window_title:
  123.  
  124. # Custom window title to be prepended to the existing title
  125. # %P = profile name
  126. # %V = version info
  127. # A string
  128. #gui.prepend_window_title:
  129.  
  130. # Custom start page title
  131. # A string
  132. #gui.start_title: The World's Most Popular Network Protocol Analyzer
  133.  
  134. # Show version in the start page and/or main screen's title bar
  135. # One of: WELCOME, TITLE, BOTH, NEITHER
  136. # (case-insensitive).
  137. #gui.version_placement: WELCOME
  138.  
  139. # Automatically scroll the recently expanded item
  140. # TRUE or FALSE (case-insensitive)
  141. #gui.auto_scroll_on_expand: FALSE
  142.  
  143. # The percentage down the view the recently expanded item should be scrolled
  144. # A decimal number
  145. #gui.auto_scroll_percentage: 0
  146.  
  147. # Enable Packet Editor (Experimental)
  148. # TRUE or FALSE (case-insensitive)
  149. #gui.packet_editor.enabled: FALSE
  150.  
  151. # The position of "..." in packet list text.
  152. # One of: LEFT, RIGHT, MIDDLE, NONE
  153. # (case-insensitive).
  154. #gui.packet_list_elide_mode: RIGHT
  155.  
  156. ####### User Interface: Colors ########
  157.  
  158. # Color preferences for a marked frame
  159. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  160. #gui.marked_frame.fg: ffffff
  161.  
  162. # Color preferences for a marked frame
  163. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  164. #gui.marked_frame.bg: 00202a
  165.  
  166. # Color preferences for a ignored frame
  167. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  168. #gui.ignored_frame.fg: 7f7f7f
  169.  
  170. # Color preferences for a ignored frame
  171. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  172. #gui.ignored_frame.bg: ffffff
  173.  
  174. # TCP stream window color preference
  175. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  176. #gui.stream.client.fg: 7f0000
  177.  
  178. # TCP stream window color preference
  179. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  180. #gui.stream.client.bg: fbeded
  181.  
  182. # TCP stream window color preference
  183. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  184. #gui.stream.server.fg: 00007f
  185.  
  186. # TCP stream window color preference
  187. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  188. #gui.stream.server.bg: ededfb
  189.  
  190. # Valid color filter background
  191. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  192. #gui.color_filter_bg.valid: afffaf
  193.  
  194. # Invalid color filter background
  195. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  196. #gui.color_filter_bg.invalid: ffafaf
  197.  
  198. # Deprecated color filter background
  199. # A six-digit hexadecimal RGB color triplet (e.g. fce94f)
  200. #gui.color_filter_bg.deprecated: ffffaf
  201.  
  202. ####### User Interface: Columns ########
  203.  
  204. # Packet list hidden columns
  205. # List all columns to hide in the packet list.
  206. gui.column.hidden: %m,%p,%L
  207.  
  208. # Packet list column format
  209. # Each pair of strings consists of a column title and its format
  210. gui.column.format:
  211. "Time", "%t",
  212. "Source", "%s",
  213. "Source Port", "%uS",
  214. "Destination", "%d",
  215. "Dest Port", "%uD",
  216. "Info", "%i",
  217. "No.", "%m",
  218. "Protocol", "%p",
  219. "Length", "%L"
  220.  
  221. ####### User Interface: Font ########
  222.  
  223. # Font name for packet list, protocol tree, and hex dump panes. (GTK+)
  224. # A string
  225. #gui.gtk2.font_name: Monospace 10
  226.  
  227. # Font name for packet list, protocol tree, and hex dump panes. (Qt)
  228. # A string
  229. gui.qt.font_name: Liberation Mono,11,-1,5,50,0,0,0,0,0
  230.  
  231. ####### User Interface: Layout ########
  232.  
  233. # Layout type (1-6)
  234. # A decimal number
  235. #gui.layout_type: 1
  236.  
  237. # Layout content of the pane 1
  238. # One of: NONE, PLIST, PDETAILS, PBYTES
  239. # (case-insensitive).
  240. #gui.layout_content_1: PLIST
  241.  
  242. # Layout content of the pane 2
  243. # One of: NONE, PLIST, PDETAILS, PBYTES
  244. # (case-insensitive).
  245. #gui.layout_content_2: PDETAILS
  246.  
  247. # Layout content of the pane 3
  248. # One of: NONE, PLIST, PDETAILS, PBYTES
  249. # (case-insensitive).
  250. #gui.layout_content_3: PBYTES
  251.  
  252. # Enable Packet List Separator
  253. # TRUE or FALSE (case-insensitive)
  254. #gui.packet_list_separator.enabled: FALSE
  255.  
  256. # Show related packet indicators in the first column
  257. # TRUE or FALSE (case-insensitive)
  258. #gui.packet_list_show_related: TRUE
  259.  
  260. # Show the intelligent scroll bar (a minimap of packet list colors in the scrollbar)
  261. # TRUE or FALSE (case-insensitive)
  262. #gui.packet_list_show_minimap: TRUE
  263.  
  264. ####### Capture ########
  265.  
  266. # Default capture device
  267. # A string
  268. #capture.device:
  269.  
  270. # Interface link-layer header types (Ex: en0(1),en1(143),...)
  271. # A string
  272. #capture.devices_linktypes:
  273.  
  274. # Interface descriptions (Ex: eth0(eth0 descr),eth1(eth1 descr),...)
  275. # A string
  276. #capture.devices_descr:
  277.  
  278. # Hide interface? (Ex: eth0,eth3,...)
  279. # A string
  280. #capture.devices_hide:
  281.  
  282. # By default, capture in monitor mode on interface? (Ex: eth0,eth3,...)
  283. # A string
  284. #capture.devices_monitor_mode:
  285.  
  286. # Interface buffer size (Ex: en0(1),en1(143),...)
  287. # A string
  288. #capture.devices_buffersize:
  289.  
  290. # Interface snap length (Ex: en0(65535),en1(1430),...)
  291. # A string
  292. #capture.devices_snaplen:
  293.  
  294. # Interface promiscuous mode (Ex: en0(0),en1(1),...)
  295. # A string
  296. #capture.devices_pmode:
  297.  
  298. # Capture in promiscuous mode?
  299. # TRUE or FALSE (case-insensitive)
  300. #capture.prom_mode: TRUE
  301.  
  302. # Interface capture filter (Ex: en0(tcp),en1(udp),...)
  303. # A string
  304. #capture.devices_filter:
  305.  
  306. # Capture in Pcap-NG format?
  307. # TRUE or FALSE (case-insensitive)
  308. #capture.pcap_ng: TRUE
  309.  
  310. # Update packet list in real time during capture?
  311. # TRUE or FALSE (case-insensitive)
  312. #capture.real_time_update: TRUE
  313.  
  314. # Scroll packet list during capture?
  315. # TRUE or FALSE (case-insensitive)
  316. #capture.auto_scroll: TRUE
  317.  
  318. # Show capture info dialog while capturing?
  319. # TRUE or FALSE (case-insensitive)
  320. #capture.show_info: FALSE
  321.  
  322. # Column list
  323. # List of columns to be displayed in the capture options dialog.
  324. # Possible values: INTERFACE, LINK, PMODE, SNAPLEN, MONITOR, BUFFER, FILTER
  325. #
  326. #capture.columns:
  327. # "INTERFACE", "LINK",
  328. # "PMODE", "SNAPLEN",
  329. # "MONITOR", "BUFFER",
  330. # "FILTER"
  331.  
  332. ####### Console ########
  333.  
  334. # Log level
  335. # Console log level (for debugging)
  336. # A bitmask of log levels:
  337. # ERROR = 4
  338. # CRITICAL = 8
  339. # WARNING = 16
  340. # MESSAGE = 32
  341. # INFO = 64
  342. # DEBUG = 128
  343. #console.log.level: 28
  344.  
  345. ####### Extcap Utilities ########
  346.  
  347. # Save arguments on start of capture
  348. # TRUE or FALSE (case-insensitive)
  349. #extcap.gui_save_on_start: TRUE
  350.  
  351. # Remote SSH server address
  352. # A string
  353. #extcap.cisco.remotehost:
  354.  
  355. # Remote SSH server port
  356. # A string
  357. #extcap.cisco.remoteport: 22
  358.  
  359. # Remote SSH server username
  360. # A string
  361. #extcap.cisco.remoteusername: sansforensics
  362.  
  363. # Path to SSH private key
  364. # A string
  365. #extcap.cisco.sshkey:
  366.  
  367. # Remote interface
  368. # A string
  369. #extcap.cisco.remoteinterface:
  370.  
  371. # Remote capture filter
  372. # A string
  373. #extcap.cisco.remotefilter: deny tcp host fe80::6d98:8e03:5803:ddb4 any eq 22, deny tcp any eq 22 host fe80::6d98:8e03:5803:ddb4, deny tcp host 172.17.0.1 any eq 22, deny tcp any eq 22 host 172.17.0.1, deny tcp host 10.0.2.15 any eq 22, deny tcp any eq 22 host 10.0.2.15, permit ip any any
  374.  
  375. # Packets to capture
  376. # A string
  377. #extcap.cisco.remotecount:
  378.  
  379. # Max bytes in a packet
  380. # A string
  381. #extcap.randpkt.maxbytes: 5000
  382.  
  383. # Number of packets
  384. # A string
  385. #extcap.randpkt.count: 1000
  386.  
  387. # Random type
  388. # A string
  389. #extcap.randpkt.randomtype: false
  390.  
  391. # All random packets
  392. # A string
  393. #extcap.randpkt.allrandom: false
  394.  
  395. # Type of packet
  396. # A string
  397. #extcap.randpkt.type:
  398.  
  399. # Remote SSH server address
  400. # A string
  401. #extcap.ssh.remotehost:
  402.  
  403. # Remote SSH server port
  404. # A string
  405. #extcap.ssh.remoteport: 22
  406.  
  407. # Remote SSH server username
  408. # A string
  409. #extcap.ssh.remoteusername: sansforensics
  410.  
  411. # Path to SSH private key
  412. # A string
  413. #extcap.ssh.sshkey:
  414.  
  415. # Remote interface
  416. # A string
  417. #extcap.ssh.remoteinterface: eth0
  418.  
  419. # Remote capture binary
  420. # A string
  421. #extcap.ssh.remotecapturebin: dumpcap
  422.  
  423. # Remote capture filter
  424. # A string
  425. #extcap.ssh.remotefilter: not ((host fe80::6d98:8e03:5803:ddb4 or host 172.17.0.1 or host 10.0.2.15) and port 22)
  426.  
  427. # Packets to capture
  428. # A string
  429. #extcap.ssh.remotecount: 0
  430.  
  431. ####### Name Resolution ########
  432.  
  433. # Resolve Ethernet MAC address to manufacturer names
  434. # TRUE or FALSE (case-insensitive)
  435. #nameres.mac_name: TRUE
  436.  
  437. # Resolve TCP/UDP ports into service names
  438. # TRUE or FALSE (case-insensitive)
  439. #nameres.transport_name: FALSE
  440.  
  441. # Resolve IPv4, IPv6, and IPX addresses into host names. The next set of check boxes determines how name resolution should be performed. If no other options are checked name resolution is made from Wireshark's host file, capture file name resolution blocks and DNS packets in the capture.
  442. # TRUE or FALSE (case-insensitive)
  443. #nameres.network_name: FALSE
  444.  
  445. # Whether address/name pairs found in captured DNS packets should be used by Wireshark for name resolution.
  446. # TRUE or FALSE (case-insensitive)
  447. #nameres.dns_pkt_addr_resolution: TRUE
  448.  
  449. # Use your system's configured name resolver (usually DNS) to resolve network names. Only applies when network name resolution is enabled.
  450. # TRUE or FALSE (case-insensitive)
  451. #nameres.use_external_name_resolver: TRUE
  452.  
  453. # The maximum number of DNS requests that may be active at any time. A large value (many thousands) might overload the network or make your DNS server behave badly.
  454. # A decimal number
  455. #nameres.name_resolve_concurrency: 500
  456.  
  457. # By default "hosts" files will be loaded from multiple sources. Checking this box only loads the "hosts" in the current profile.
  458. # TRUE or FALSE (case-insensitive)
  459. #nameres.hosts_file_handling: FALSE
  460.  
  461. # Resolve VLAN IDs to describing names. To do so you need a file called vlans in your user preference directory. Format of the file is: "ID<Tab>Name" One line per VLAN.
  462. # TRUE or FALSE (case-insensitive)
  463. #nameres.vlan_name: FALSE
  464.  
  465. # You must restart Wireshark for this change to take effect
  466. # TRUE or FALSE (case-insensitive)
  467. #nameres.load_smi_modules: FALSE
  468.  
  469. # Some errors can be ignored. If unsure, set to false.
  470. # TRUE or FALSE (case-insensitive)
  471. #nameres.suppress_smi_errors: FALSE
  472.  
  473. ####### Printing ########
  474.  
  475. # Can be one of "text" or "postscript"
  476. # One of: Plain Text, Postscript
  477. # (case-insensitive).
  478. #print.format: Plain Text
  479.  
  480. # Can be one of "command" or "file"
  481. # One of: Command, File
  482. # (case-insensitive).
  483. #print.destination: Command
  484.  
  485. # Output gets piped to this command when the destination is set to "command"
  486. # A string
  487. #print.command: lpr
  488.  
  489. # This is the file that gets written to when the destination is set to "file"
  490. # A path to a file
  491. #print.file: wireshark.out
  492.  
  493. ####### Protocols ########
  494.  
  495. # Display all hidden protocol items in the packet list.
  496. # TRUE or FALSE (case-insensitive)
  497. #protocols.display_hidden_proto_items: FALSE
  498.  
  499. # Display all byte fields with a space character between each byte in the packet list.
  500. # TRUE or FALSE (case-insensitive)
  501. #protocols.display_byte_fields_with_spaces: FALSE
  502.  
  503. # Look for dissectors that left some bytes undecoded.
  504. # TRUE or FALSE (case-insensitive)
  505. #protocols.enable_incomplete_dissectors_check: FALSE
  506.  
  507. # TCP port used by source of IEC104, usually 2404
  508. # A decimal number
  509. #104apci.tcp.port: 2404
  510.  
  511. # Use a registered heuristic sub-dissector to decode the data payload
  512. # TRUE or FALSE (case-insensitive)
  513. #lbmc.use_heuristic_subdissectors: TRUE
  514.  
  515. # Reassemble data message fragments
  516. # TRUE or FALSE (case-insensitive)
  517. #lbmc.reassemble_fragments: FALSE
  518.  
  519. # Recognize and dissect payloads containing LBMPDM messages (requires reassembly to be enabled)
  520. # TRUE or FALSE (case-insensitive)
  521. #lbmc.dissect_lbmpdm: FALSE
  522.  
  523. # Set the low end of the TCP port range
  524. # A decimal number
  525. #lbmpdm_tcp.port_low: 14371
  526.  
  527. # Set the high end of the port range
  528. # A decimal number
  529. #lbmpdm_tcp.port_high: 14390
  530.  
  531. # Use table of LBMPDM-TCP tags to decode the packet instead of above values
  532. # TRUE or FALSE (case-insensitive)
  533. #lbmpdm_tcp.use_lbmpdm_tcp_domain: FALSE
  534.  
  535. # Set the UDP port for incoming multicast topic resolution (context resolver_multicast_incoming_port)
  536. # A decimal number
  537. #lbmr.mc_incoming_port: 12965
  538.  
  539. # Set the multicast address for incoming multicast topic resolution (context resolver_multicast_incoming_address)
  540. # A string
  541. #lbmr.mc_incoming_address: 224.9.10.11
  542.  
  543. # Set the UDP port for outgoing multicast topic resolution (context resolver_multicast_outgoing_port)
  544. # A decimal number
  545. #lbmr.mc_outgoing_port: 12965
  546.  
  547. # Set the multicast address for outgoing multicast topic resolution (context resolver_multicast_outgoing_address)
  548. # A string
  549. #lbmr.mc_outgoing_address: 224.9.10.11
  550.  
  551. # Set the low UDP port for unicast topic resolution (context resolver_unicast_port_low)
  552. # A decimal number
  553. #lbmr.uc_port_low: 14402
  554.  
  555. # Set the high UDP port for unicast topic resolution (context resolver_unicast_port_high)
  556. # A decimal number
  557. #lbmr.uc_port_high: 14406
  558.  
  559. # Set the destination port for unicast topic resolution (context resolver_unicast_destination_port)
  560. # A decimal number
  561. #lbmr.uc_dest_port: 15380
  562.  
  563. # Set the address of the unicast resolver daemon (context resolver_unicast_address)
  564. # A string
  565. #lbmr.uc_address: 0.0.0.0
  566.  
  567. # Use table of LBMR tags to decode the packet instead of above values
  568. # TRUE or FALSE (case-insensitive)
  569. #lbmr.use_lbmr_domain: FALSE
  570.  
  571. # Set the low end of the LBT-RM multicast address range (context transport_lbtrm_multicast_address_low)
  572. # A string
  573. #lbtrm.mc_address_low: 224.10.10.10
  574.  
  575. # Set the high end of the LBT-RM multicast address range (context transport_lbtrm_multicast_address_high)
  576. # A string
  577. #lbtrm.mc_address_high: 224.10.10.14
  578.  
  579. # Set the low end of the LBT-RM UDP destination port range (source transport_lbtrm_destination_port)
  580. # A decimal number
  581. #lbtrm.dport_low: 14400
  582.  
  583. # Set the high end of the LBT-RM UDP destination port range (source transport_lbtrm_destination_port)
  584. # A decimal number
  585. #lbtrm.dport_high: 14400
  586.  
  587. # Set the low end of the LBT-RM UDP source port range (context transport_lbtrm_source_port_low)
  588. # A decimal number
  589. #lbtrm.sport_low: 14390
  590.  
  591. # Set the high end of the LBT-RM UDP source port range (context transport_lbtrm_source_port_high)
  592. # A decimal number
  593. #lbtrm.sport_high: 14399
  594.  
  595. # Set the incoming MIM multicast address (context mim_incoming_address)
  596. # A string
  597. #lbtrm.mim_incoming_address: 224.10.10.21
  598.  
  599. # Set the outgoing MIM multicast address (context mim_outgoing_address)
  600. # A string
  601. #lbtrm.mim_outgoing_address: 224.10.10.21
  602.  
  603. # Set the incoming MIM UDP port (context mim_incoming_destination_port)
  604. # A decimal number
  605. #lbtrm.mim_incoming_dport: 14401
  606.  
  607. # Set the outgoing MIM UDP port (context mim_outgoing_destination_port)
  608. # A decimal number
  609. #lbtrm.mim_outgoing_dport: 14401
  610.  
  611. # Separate multiple NAKs from a single packet into distinct Expert Info entries
  612. # TRUE or FALSE (case-insensitive)
  613. #lbtrm.expert_separate_naks: FALSE
  614.  
  615. # Separate multiple NCFs from a single packet into distinct Expert Info entries
  616. # TRUE or FALSE (case-insensitive)
  617. #lbtrm.expert_separate_ncfs: FALSE
  618.  
  619. # Perform analysis on LBT-RM sequence numbers to determine out-of-order, gaps, loss, etc
  620. # TRUE or FALSE (case-insensitive)
  621. #lbtrm.sequence_analysis: FALSE
  622.  
  623. # Use table of LBT-RM tags to decode the packet instead of above values
  624. # TRUE or FALSE (case-insensitive)
  625. #lbtrm.use_lbtrm_domain: FALSE
  626.  
  627. # Set the low end of the LBT-RU source UDP port range (context transport_lbtru_port_low)
  628. # A decimal number
  629. #lbtru.source_port_low: 14380
  630.  
  631. # Set the high end of the LBT-RU source UDP port range (context transport_lbtru_port_high)
  632. # A decimal number
  633. #lbtru.source_port_high: 14389
  634.  
  635. # Set the low end of the LBT-RU receiver UDP port range (receiver transport_lbtru_port_low)
  636. # A decimal number
  637. #lbtru.receiver_port_low: 14360
  638.  
  639. # Set the high end of the LBT-RU receiver UDP port range (receiver transport_lbtru_port_high)
  640. # A decimal number
  641. #lbtru.receiver_port_high: 14379
  642.  
  643. # Separate multiple NAKs from a single packet into distinct Expert Info entries
  644. # TRUE or FALSE (case-insensitive)
  645. #lbtru.expert_separate_naks: FALSE
  646.  
  647. # Separate multiple NCFs from a single packet into distinct Expert Info entries
  648. # TRUE or FALSE (case-insensitive)
  649. #lbtru.expert_separate_ncfs: FALSE
  650.  
  651. # Perform analysis on LBT-RU sequence numbers to determine out-of-order, gaps, loss, etc
  652. # TRUE or FALSE (case-insensitive)
  653. #lbtru.sequence_analysis: FALSE
  654.  
  655. # Use table of LBT-RU tags to decode the packet instead of above values
  656. # TRUE or FALSE (case-insensitive)
  657. #lbtru.use_lbtru_domain: FALSE
  658.  
  659. # Set the low end of the LBT-TCP source TCP port range (context transport_tcp_port_low)
  660. # A decimal number
  661. #lbttcp.source_port_low: 14371
  662.  
  663. # Set the high end of the LBT-TCP source TCP port range (context transport_tcp_port_high)
  664. # A decimal number
  665. #lbttcp.source_port_high: 14390
  666.  
  667. # Set the low end of the LBT-TCP request TCP port range (context request_tcp_port_low)
  668. # A decimal number
  669. #lbttcp.request_port_low: 14391
  670.  
  671. # Set the high end of the LBT-TCP request TCP port range (context request_tcp_port_high)
  672. # A decimal number
  673. #lbttcp.request_port_high: 14395
  674.  
  675. # Set the low end of the LBT-TCP UME Store TCP port range
  676. # A decimal number
  677. #lbttcp.store_port_low: 0
  678.  
  679. # Set the high end of the LBT-TCP UME Store TCP port range
  680. # A decimal number
  681. #lbttcp.store_port_high: 0
  682.  
  683. # Use table of LBT-TCP tags to decode the packet instead of above values
  684. # TRUE or FALSE (case-insensitive)
  685. #lbttcp.use_lbttcp_domain: FALSE
  686.  
  687. # Enable this option to recognise all traffic on RTP dynamic payload type 96 (0x60) as FEC data corresponding to Pro-MPEG Code of Practice #3 release 2
  688. # TRUE or FALSE (case-insensitive)
  689. #2dparityfec.enable: FALSE
  690.  
  691. # Derive IID from a short 16-bit address according to RFC 4944 (using the PAN ID).
  692. # TRUE or FALSE (case-insensitive)
  693. #6lowpan.rfc4944_short_address_format: FALSE
  694.  
  695. # IPv6 prefix to use for stateful address decompression.
  696. # A string
  697. #6lowpan.context0:
  698.  
  699. # IPv6 prefix to use for stateful address decompression.
  700. # A string
  701. #6lowpan.context1:
  702.  
  703. # IPv6 prefix to use for stateful address decompression.
  704. # A string
  705. #6lowpan.context2:
  706.  
  707. # IPv6 prefix to use for stateful address decompression.
  708. # A string
  709. #6lowpan.context3:
  710.  
  711. # IPv6 prefix to use for stateful address decompression.
  712. # A string
  713. #6lowpan.context4:
  714.  
  715. # IPv6 prefix to use for stateful address decompression.
  716. # A string
  717. #6lowpan.context5:
  718.  
  719. # IPv6 prefix to use for stateful address decompression.
  720. # A string
  721. #6lowpan.context6:
  722.  
  723. # IPv6 prefix to use for stateful address decompression.
  724. # A string
  725. #6lowpan.context7:
  726.  
  727. # IPv6 prefix to use for stateful address decompression.
  728. # A string
  729. #6lowpan.context8:
  730.  
  731. # IPv6 prefix to use for stateful address decompression.
  732. # A string
  733. #6lowpan.context9:
  734.  
  735. # IPv6 prefix to use for stateful address decompression.
  736. # A string
  737. #6lowpan.context10:
  738.  
  739. # IPv6 prefix to use for stateful address decompression.
  740. # A string
  741. #6lowpan.context11:
  742.  
  743. # IPv6 prefix to use for stateful address decompression.
  744. # A string
  745. #6lowpan.context12:
  746.  
  747. # IPv6 prefix to use for stateful address decompression.
  748. # A string
  749. #6lowpan.context13:
  750.  
  751. # IPv6 prefix to use for stateful address decompression.
  752. # A string
  753. #6lowpan.context14:
  754.  
  755. # IPv6 prefix to use for stateful address decompression.
  756. # A string
  757. #6lowpan.context15:
  758.  
  759. # Radiotap has a bit to indicate whether the FCS is still on the frame or not. Some generators (e.g. AirPcap) use a non-standard radiotap flag 14 to put the FCS into the header.
  760. # TRUE or FALSE (case-insensitive)
  761. #radiotap.bit14_fcs_in_header: FALSE
  762.  
  763. # Some generators use rates with bit 7 set to indicate an MCS, e.g. BSD. others (Linux, AirPcap) do not.
  764. # TRUE or FALSE (case-insensitive)
  765. #radiotap.interpret_high_rates_as_mcs: FALSE
  766.  
  767. # Use ipaccess nanoBTS specific definitions for OML
  768. # One of: ETSI/3GPP TS 12.21, Siemens, ip.access, Ericsson OM2000
  769. # (case-insensitive).
  770. #gsm_abis_oml.oml_dialect: ETSI/3GPP TS 12.21
  771.  
  772. # UDP port used by A21, usually 23272
  773. # A decimal number
  774. #a21.udp.port: 0
  775.  
  776. # Enable Streaming DMX extension dissector (ANSI BSR E1.31)
  777. # TRUE or FALSE (case-insensitive)
  778. #acn.dmx_enable: FALSE
  779.  
  780. # Display format
  781. # One of: Hex , Decimal, Percent
  782. # (case-insensitive).
  783. #acn.dmx_display_view: Hex
  784.  
  785. # Display zeros instead of dots
  786. # TRUE or FALSE (case-insensitive)
  787. #acn.dmx_display_zeros: FALSE
  788.  
  789. # Display leading zeros on levels
  790. # TRUE or FALSE (case-insensitive)
  791. #acn.dmx_display_leading_zeros: FALSE
  792.  
  793. # Display line format
  794. # One of: 20 per line, 16 per line
  795. # (case-insensitive).
  796. #acn.dmx_display_line_format: 20 per line
  797.  
  798. # Set the UDP port for AudioCodes Trunk Traces.Use http://x.x.x.x/TrunkTraces to enable the traces in the Blade
  799. # A decimal number
  800. #actrace.udp_port: 2428
  801.  
  802. # Server Port
  803. # A decimal number
  804. #adb_cs.server_port: 5037
  805.  
  806. # Dissect more detail for framebuffer service
  807. # TRUE or FALSE (case-insensitive)
  808. #adb_service.framebuffer_more_details: FALSE
  809.  
  810. # Set the UDP port for ADwin packets (if other than the default of 6543)
  811. # A decimal number
  812. #adwin.udp.port: 6543
  813.  
  814. # Specify if the Data sections of packets should be dissected or not
  815. # TRUE or FALSE (case-insensitive)
  816. #adwin.dissect_data: TRUE
  817.  
  818. # Include next/previous frame for channel, stream, and term, and other transport sequence analysis.
  819. # TRUE or FALSE (case-insensitive)
  820. #aeron.sequence_analysis: FALSE
  821.  
  822. # Include stream analysis, tracking publisher and subscriber positions. Requires "Analyze transport sequencing".
  823. # TRUE or FALSE (case-insensitive)
  824. #aeron.stream_analysis: FALSE
  825.  
  826. # Reassemble fragmented data messages. Requires "Analyze transport sequencing" and "Analyze stream sequencing".
  827. # TRUE or FALSE (case-insensitive)
  828. #aeron.reassemble_fragments: FALSE
  829.  
  830. # Use a registered heuristic sub-dissector to decode the payload data. Requires "Analyze transport sequencing", "Analyze stream sequencing", and "Reassemble fragmented data".
  831. # TRUE or FALSE (case-insensitive)
  832. #aeron.use_heuristic_subdissectors: FALSE
  833.  
  834. # Set the TCP port for AgentX(if other than the default of 705)
  835. # A decimal number
  836. #agentx.tcp.agentx_port: 705
  837.  
  838. # Whether the AIM dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  839. # TRUE or FALSE (case-insensitive)
  840. #aim.desegment: TRUE
  841.  
  842. # Specifies the UDP destination port for automatic dissection of ALC packets
  843. # A decimal number
  844. #alc.default.udp_port: 0
  845.  
  846. # Whether the LCT header Codepoint field should be considered the FEC Encoding ID of carried object
  847. # TRUE or FALSE (case-insensitive)
  848. #alc.lct.codepoint_as_fec_id: TRUE
  849.  
  850. # How to decode LCT header extension 192
  851. # One of: Don't decode, Decode as FLUTE extension (EXT_FDT)
  852. # (case-insensitive).
  853. #alc.lct.ext.192: Decode as FLUTE extension (EXT_FDT)
  854.  
  855. # How to decode LCT header extension 193
  856. # One of: Don't decode, Decode as FLUTE extension (EXT_CENC)
  857. # (case-insensitive).
  858. #alc.lct.ext.193: Decode as FLUTE extension (EXT_CENC)
  859.  
  860. # Whether persistent call leg information is to be kept
  861. # TRUE or FALSE (case-insensitive)
  862. #alcap.leg_info: TRUE
  863.  
  864. # Set the TCP port for AMQP(if other than the default of 5672)
  865. # A decimal number
  866. #amqp.tcp.port: 5672
  867.  
  868. # Set the TCP port for AMQP over TLS/SSL(if other than the default of 5671)
  869. # A decimal number
  870. #amqp.ssl.port: 5671
  871.  
  872. # The dynamic payload type which will be interpreted as AMR; The value must be greater than 95
  873. # A decimal number
  874. #amr.dynamic.payload.type: 0
  875.  
  876. # Type of AMR encoding of the payload
  877. # One of: RFC 3267 octet aligned, RFC 3267 BW-efficient, AMR IF1, AMR IF2
  878. # (case-insensitive).
  879. #amr.encoding.version: RFC 3267 octet aligned
  880.  
  881. # The AMR mode
  882. # One of: Narrowband AMR, Wideband AMR
  883. # (case-insensitive).
  884. #amr.mode: Narrowband AMR
  885.  
  886. # (if other than the default of IOS 4.0.1)
  887. # One of: IS-634 rev. 0, TSB-80, IS-634-A, IOS 2.x, IOS 3.x, IOS 4.0.1, IOS 5.0.1
  888. # (case-insensitive).
  889. #ansi_a_bsmap.global_variant: IOS 4.0.1
  890.  
  891. # Whether the mobile ID and service options are displayed in the INFO column
  892. # TRUE or FALSE (case-insensitive)
  893. #ansi_a_bsmap.top_display_mid_so: TRUE
  894.  
  895. # ANSI MAP SSNs to decode as ANSI MAP
  896. # A string denoting an positive integer range (e.g., "1-20,30-40")
  897. #ansi_map.map.ssn: 5-14
  898.  
  899. # Type of matching invoke/response, risk of mismatch if loose matching chosen
  900. # One of: Transaction ID only, Transaction ID and Source, Transaction ID Source and Destination
  901. # (case-insensitive).
  902. #ansi_map.transaction.matchtype: Transaction ID and Source
  903.  
  904. # Type of matching invoke/response, risk of mismatch if loose matching chosen
  905. # One of: Transaction ID only, Transaction ID and Source, Transaction ID Source and Destination
  906. # (case-insensitive).
  907. #ansi_tcap.transaction.matchtype: Transaction ID only
  908.  
  909. # Whether the AOL dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  910. # TRUE or FALSE (case-insensitive)
  911. #aol.desegment: TRUE
  912.  
  913. # Attempt to display common APRS protocol violations correctly
  914. # TRUE or FALSE (case-insensitive)
  915. #aprs.showaprslax: FALSE
  916.  
  917. # AR Drone UDP port
  918. # A decimal number
  919. #ar_drone.udp.port: 0
  920.  
  921. # Attempt to detect excessive rate of ARP requests
  922. # TRUE or FALSE (case-insensitive)
  923. #arp.detect_request_storms: FALSE
  924.  
  925. # Number of requests needed within period to indicate a storm
  926. # A decimal number
  927. #arp.detect_storm_number_of_packets: 30
  928.  
  929. # Period in milliseconds during which a packet storm may be detected
  930. # A decimal number
  931. #arp.detect_storm_period: 100
  932.  
  933. # Attempt to detect duplicate use of IP addresses
  934. # TRUE or FALSE (case-insensitive)
  935. #arp.detect_duplicate_ips: TRUE
  936.  
  937. # Try to resolve physical addresses to host names from ARP requests/responses
  938. # TRUE or FALSE (case-insensitive)
  939. #arp.register_network_address_binding: TRUE
  940.  
  941. # Set the UDP port numbers (typically the range 5555 to 5560) used for Aruba Networks encapsulated remote mirroring frames;
  942. # 0 (default) means that the ARUBA_ERM dissector is not active
  943. #
  944. # A string denoting an positive integer range (e.g., "1-20,30-40")
  945. #aruba_erm.udp.ports: 0
  946.  
  947. # Select the CAT001 version
  948. # One of: Version 1.2
  949. # (case-insensitive).
  950. #asterix.i001_version: Version 1.2
  951.  
  952. # Select the CAT001 version
  953. # One of: Version 1.0
  954. # (case-insensitive).
  955. #asterix.i002_version: Version 1.0
  956.  
  957. # Select the CAT004 version
  958. # One of: Version 1.7
  959. # (case-insensitive).
  960. #asterix.i004_version: Version 1.7
  961.  
  962. # Select the CAT008 version
  963. # One of: Version 1.1
  964. # (case-insensitive).
  965. #asterix.i008_version: Version 1.1
  966.  
  967. # Select the CAT009 version
  968. # One of: Version 2.0
  969. # (case-insensitive).
  970. #asterix.i009_version: Version 2.0
  971.  
  972. # Select the CAT021 version
  973. # One of: Version 2.3, Version 2.1
  974. # (case-insensitive).
  975. #asterix.i021_version: Version 2.3
  976.  
  977. # Select the CAT023 version
  978. # One of: Version 1.2
  979. # (case-insensitive).
  980. #asterix.i023_version: Version 1.2
  981.  
  982. # Select the CAT025 version
  983. # One of: Version 1.1
  984. # (case-insensitive).
  985. #asterix.i025_version: Version 1.1
  986.  
  987. # Select the CAT034 version
  988. # One of: Version 1.27
  989. # (case-insensitive).
  990. #asterix.i034_version: Version 1.27
  991.  
  992. # Select the CAT048 version
  993. # One of: Version 1.17
  994. # (case-insensitive).
  995. #asterix.i048_version: Version 1.17
  996.  
  997. # Select the CAT062 version
  998. # One of: Version 1.16, Version 0.17
  999. # (case-insensitive).
  1000. #asterix.i062_version: Version 1.16
  1001.  
  1002. # Select the CAT063 version
  1003. # One of: Version 1.3
  1004. # (case-insensitive).
  1005. #asterix.i063_version: Version 1.3
  1006.  
  1007. # Select the CAT065 version
  1008. # One of: Version 1.3
  1009. # (case-insensitive).
  1010. #asterix.i065_version: Version 1.3
  1011.  
  1012. # Autodection between LANE and SSCOP is hard. As default LANE is preferred
  1013. # TRUE or FALSE (case-insensitive)
  1014. #atm.dissect_lane_as_sscop: FALSE
  1015.  
  1016. # ATMTCP TCP port if other than the default
  1017. # A decimal number
  1018. #atmtcp.tcp.port: 2812
  1019.  
  1020. # Whether the ATP dissector should reassemble messages spanning multiple DDP packets
  1021. # TRUE or FALSE (case-insensitive)
  1022. #atp.desegment: TRUE
  1023.  
  1024. # Enable checksum calculation.
  1025. # TRUE or FALSE (case-insensitive)
  1026. #ax25_kiss.showcksum: FALSE
  1027.  
  1028. # Enable decoding of the payload as APRS.
  1029. # TRUE or FALSE (case-insensitive)
  1030. #ax25_nol3.showaprs: FALSE
  1031.  
  1032. # Enable decoding of the payload as DX cluster info.
  1033. # TRUE or FALSE (case-insensitive)
  1034. #ax25_nol3.showcluster: FALSE
  1035.  
  1036. # Banana TCP Port range
  1037. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1038. #banana.tcp.port:
  1039.  
  1040. # Set the port for B.A.T.M.A.N. BAT messages (if other than the default of 4305)
  1041. # A decimal number
  1042. #bat.batman.bat.port: 4305
  1043.  
  1044. # Set the port for B.A.T.M.A.N. Gateway messages (if other than the default of 4306)
  1045. # A decimal number
  1046. #bat.batman.gw.port: 4306
  1047.  
  1048. # Set the port for B.A.T.M.A.N. VIS messages (if other than the default of 4307)
  1049. # A decimal number
  1050. #bat.batman.vis.port: 4307
  1051.  
  1052. # Ethertype used to indicate B.A.T.M.A.N. packet.
  1053. # A hexadecimal number
  1054. #batadv.batmanadv.ethertype: 0x4305
  1055.  
  1056. # Whether the Bazaar dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1057. # TRUE or FALSE (case-insensitive)
  1058. #bzr.desegment: TRUE
  1059.  
  1060. # Set the port for BEEP messages (if other than the default of 10288)
  1061. # A decimal number
  1062. #beep.tcp.port: 10288
  1063.  
  1064. # Specifies that BEEP requires CRLF as a terminator, and not just CR or LF
  1065. # TRUE or FALSE (case-insensitive)
  1066. #beep.strict_header_terminator: TRUE
  1067.  
  1068. # Whether the dissector should also display internal ASN.1 BER details such as Identifier and Length fields
  1069. # TRUE or FALSE (case-insensitive)
  1070. #ber.show_internals: FALSE
  1071.  
  1072. # Whether the dissector should decode unexpected tags as ASN.1 BER encoded data
  1073. # TRUE or FALSE (case-insensitive)
  1074. #ber.decode_unexpected: FALSE
  1075.  
  1076. # Whether the dissector should try decoding OCTET STRINGs as constructed ASN.1 BER encoded data
  1077. # TRUE or FALSE (case-insensitive)
  1078. #ber.decode_octetstring: FALSE
  1079.  
  1080. # Whether the dissector should try decoding unknown primitive as constructed ASN.1 BER encoded data
  1081. # TRUE or FALSE (case-insensitive)
  1082. #ber.decode_primitive: FALSE
  1083.  
  1084. # Whether the dissector should warn if excessive leading zero (0) bits
  1085. # TRUE or FALSE (case-insensitive)
  1086. #ber.warn_too_many_bytes: FALSE
  1087.  
  1088. # Whether the BGP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1089. # TRUE or FALSE (case-insensitive)
  1090. #bgp.desegment: TRUE
  1091.  
  1092. # BGP dissector detect the length of the AS number in AS_PATH attributes automatically or manually (NOTE: Automatic detection is not 100% accurate)
  1093. # One of: Auto-detect, 2 octet, 4 octet
  1094. # (case-insensitive).
  1095. #bgp.asn_len: Auto-detect
  1096.  
  1097. # Whether the Bitcoin dissector should desegment all messages spanning multiple TCP segments
  1098. # TRUE or FALSE (case-insensitive)
  1099. #bitcoin.desegment: TRUE
  1100.  
  1101. # Whether the BitTorrent dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1102. # TRUE or FALSE (case-insensitive)
  1103. #bittorrent.desegment: TRUE
  1104.  
  1105. # Enabling this will tell which BitTorrent client that produced the handshake message
  1106. # TRUE or FALSE (case-insensitive)
  1107. #bittorrent.decode_client: FALSE
  1108.  
  1109. # Whether the BMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1110. # TRUE or FALSE (case-insensitive)
  1111. #bmp.desegment: TRUE
  1112.  
  1113. # Novell Servers option 85 can be configured as a string instead of address
  1114. # TRUE or FALSE (case-insensitive)
  1115. #bootp.novellserverstring: FALSE
  1116.  
  1117. # The PacketCable CCC protocol version
  1118. # One of: PKT-SP-PROV-I05-021127, IETF Draft 5, RFC 3495
  1119. # (case-insensitive).
  1120. #bootp.pkt.ccc.protocol_version: RFC 3495
  1121.  
  1122. # Option Number for PacketCable CableLabs Client Configuration
  1123. # A decimal number
  1124. #bootp.pkt.ccc.option: 122
  1125.  
  1126. # Endianness applied to UUID fields
  1127. # One of: Little Endian, Big Endian
  1128. # (case-insensitive).
  1129. #bootp.uuid.endian: Little Endian
  1130.  
  1131. # Set the UDP port for BRP messages
  1132. # A decimal number
  1133. #brp.port: 0
  1134.  
  1135. # For the sake of sub-dissectors registering to accept data from the BSSAP/BSAP dissector, this defines whether it is identified as BSSAP or BSAP.
  1136. # One of: BSSAP, BSAP
  1137. # (case-insensitive).
  1138. #bssap.bsap_or_bssap: BSSAP
  1139.  
  1140. # GSM-A is the interface between the BSC and the MSC. Lb is the interface between the BSC and the SMLC.
  1141. # One of: GSM A, Lb
  1142. # (case-insensitive).
  1143. #bssap.gsm_or_lb_interface: GSM A
  1144.  
  1145. # Set Subsystem number used for BSSAP/BSSAP+
  1146. # A decimal number
  1147. #bssap.ssn: 98
  1148.  
  1149. # Decode NRI (for use with SGSN in Pool)
  1150. # TRUE or FALSE (case-insensitive)
  1151. #bssgp.decode_nri: FALSE
  1152.  
  1153. # NRI length, in bits
  1154. # A decimal number
  1155. #bssgp.nri_length: 4
  1156.  
  1157. # Force decoding stream as A2DP with Content Protection SCMS-T
  1158. # TRUE or FALSE (case-insensitive)
  1159. #bta2dp.a2dp.content_protection.scms_t: FALSE
  1160.  
  1161. # Force decoding stream as A2DP with specified codec
  1162. # One of: Default, SBC, MPEG12 AUDIO, MPEG24 AAC, APT-X
  1163. # (case-insensitive).
  1164. #bta2dp.a2dp.codec: Default
  1165.  
  1166. # Dissecting the top protocols
  1167. # TRUE or FALSE (case-insensitive)
  1168. #btbnep.bnep.top_dissect: TRUE
  1169.  
  1170. # If "yes" localhost will be treat as Client, "no" as Server
  1171. # One of: Default, Yes, No
  1172. # (case-insensitive).
  1173. #bthcrp.hcrp.force_client: Default
  1174.  
  1175. # L2CAP PSM for Control
  1176. # A decimal number
  1177. #bthcrp.hcrp.control.psm: 0
  1178.  
  1179. # L2CAP PSM for Data
  1180. # A decimal number
  1181. #bthcrp.hcrp.data.psm: 0
  1182.  
  1183. # L2CAP PSM for Notification
  1184. # A decimal number
  1185. #bthcrp.hcrp.notification.psm: 0
  1186.  
  1187. # Force treat packets as AG or HS role
  1188. # One of: Off, Sent is AG, Rcvd is HS, Sent is HS, Rcvd is AG
  1189. # (case-insensitive).
  1190. #bthfp.hfp.hfp_role: Off
  1191.  
  1192. # Show what is deprecated in HID 1.1
  1193. # TRUE or FALSE (case-insensitive)
  1194. #bthid.hid.deprecated: FALSE
  1195.  
  1196. # Force treat packets as AG or HS role
  1197. # One of: Off, Sent is AG, Rcvd is HS, Sent is HS, Rcvd is AG
  1198. # (case-insensitive).
  1199. #bthsp.hsp.hsp_role: Off
  1200.  
  1201. # Turn on/off decode by next rules
  1202. # TRUE or FALSE (case-insensitive)
  1203. #btrfcomm.rfcomm.decode_by.enabled: FALSE
  1204.  
  1205. # Dissecting the top protocols
  1206. # One of: off, Put higher dissectors under this one, On top
  1207. # (case-insensitive).
  1208. #btsap.sap.top_dissect: Put higher dissectors under this one
  1209.  
  1210. # Force decoding stream as VDP with Content Protection SCMS-T
  1211. # TRUE or FALSE (case-insensitive)
  1212. #btvdp.vdp.content_protection.scms_t: FALSE
  1213.  
  1214. # Force decoding stream as VDP with specified codec
  1215. # One of: H263, MPEG4 VSP
  1216. # (case-insensitive).
  1217. #btvdp.vdp.codec: H263
  1218.  
  1219. # Dissect next layer
  1220. # TRUE or FALSE (case-insensitive)
  1221. #btsnoop.dissect_next_layer: FALSE
  1222.  
  1223. # TCP Port to Accept Bundle Protocol Connections
  1224. # A decimal number
  1225. #bundle.tcp.port: 4556
  1226.  
  1227. # UDP Port to Accept Bundle Protocol Connections
  1228. # A decimal number
  1229. #bundle.udp.port: 4556
  1230.  
  1231. # Set an additional UDP port, besides the standard X'BAC0' (47808) port.
  1232. # A decimal number
  1233. #bvlc.additional_udp_port: 0
  1234.  
  1235. # Whether the C12.22 dissector should reassemble all messages spanning multiple TCP segments
  1236. # TRUE or FALSE (case-insensitive)
  1237. #c1222.desegment: TRUE
  1238.  
  1239. # Base object identifier for use in resolving relative object identifiers
  1240. # A string
  1241. #c1222.baseoid:
  1242.  
  1243. # Whether the C12.22 dissector should verify the crypto for all relevant messages
  1244. # TRUE or FALSE (case-insensitive)
  1245. #c1222.decrypt: TRUE
  1246.  
  1247. # The date format: (DD/MM) or (MM/DD)
  1248. # One of: DD/MM/YYYY, MM/DD/YYYY
  1249. # (case-insensitive).
  1250. #camel.date.format: DD/MM/YYYY
  1251.  
  1252. # TCAP Subsystem numbers used for Camel
  1253. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1254. #camel.tcap.ssn: 146
  1255.  
  1256. # Enable response time analysis
  1257. # TRUE or FALSE (case-insensitive)
  1258. #camel.srt: FALSE
  1259.  
  1260. # Statistics for Response Time
  1261. # TRUE or FALSE (case-insensitive)
  1262. #camel.persistentsrt: FALSE
  1263.  
  1264. # Whether the CAN ID/flags field should be byte-swapped
  1265. # TRUE or FALSE (case-insensitive)
  1266. #can.byte_swap: FALSE
  1267.  
  1268. # Set the port for CAPWAP Control messages (if other than the default of 5246)
  1269. # A decimal number
  1270. #capwap.udp.port.control: 5246
  1271.  
  1272. # Set the port for CAPWAP Data messages (if other than the default of 5247)
  1273. # A decimal number
  1274. #capwap.udp.port.data: 5247
  1275.  
  1276. # Enable support of Cisco Wireless Controller (based on old 8 draft revision).
  1277. # TRUE or FALSE (case-insensitive)
  1278. #capwap.draft_8_cisco: FALSE
  1279.  
  1280. # Reassemble fragmented CAPWAP packets.
  1281. # TRUE or FALSE (case-insensitive)
  1282. #capwap.reassemble: TRUE
  1283.  
  1284. # Swap frame control bytes (needed for some APs).
  1285. # TRUE or FALSE (case-insensitive)
  1286. #capwap.swap_fc: TRUE
  1287.  
  1288. # Whether the CAST dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1289. # TRUE or FALSE (case-insensitive)
  1290. #cast.reassembly: TRUE
  1291.  
  1292. # Whether the checksum of all messages should be validated or not
  1293. # TRUE or FALSE (case-insensitive)
  1294. #cattp.checksum: TRUE
  1295.  
  1296. # Specify how the dissector should handle the CCSDS checkword
  1297. # One of: Use header flag, Override header flag to be false, Override header flag to be true
  1298. # (case-insensitive).
  1299. #ccsds.global_pref_checkword: Use header flag
  1300.  
  1301. # Set the port(s) for NetFlow messages (default: 2055,9996)
  1302. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1303. #cflow.netflow.ports: 2055,9996
  1304.  
  1305. # Set the port(s) for IPFIX messages (default: 4739)
  1306. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1307. #cflow.ipfix.ports: 4739
  1308.  
  1309. # Set the number of fields allowed in a template. Use 0 (zero) for unlimited. (default: 60)
  1310. # A decimal number
  1311. #cflow.max_template_fields: 60
  1312.  
  1313. # The type of CHDLC frame checksum (none, 16-bit, 32-bit)
  1314. # One of: None, 16-Bit, 32-Bit
  1315. # (case-insensitive).
  1316. #chdlc.fcs_type: None
  1317.  
  1318. # The version of CIGI with which to dissect packets
  1319. # One of: From Packet, CIGI 2, CIGI 3
  1320. # (case-insensitive).
  1321. #cigi.version: From Packet
  1322.  
  1323. # The byte order with which to dissect CIGI packets (CIGI3)
  1324. # One of: From Packet, Big-Endian, Little-Endian
  1325. # (case-insensitive).
  1326. #cigi.byte_order: From Packet
  1327.  
  1328. # IPv4 address or hostname of the host
  1329. # A string
  1330. #cigi.host:
  1331.  
  1332. # IPv4 address or hostname of the image generator
  1333. # A string
  1334. #cigi.ig:
  1335.  
  1336. # Whether the CIP dissector should display enhanced/verbose data in the Info column for CIP explicit messages
  1337. # TRUE or FALSE (case-insensitive)
  1338. #cip.enhanced_info_column: TRUE
  1339.  
  1340. # NSAP selector for Transport Protocol (last byte in hex)
  1341. # A hexadecimal number
  1342. #clnp.tp_nsap_selector: 0x21
  1343.  
  1344. # Always try to decode NSDU as transport PDUs
  1345. # TRUE or FALSE (case-insensitive)
  1346. #clnp.always_decode_transport: FALSE
  1347.  
  1348. # Whether segmented CLNP datagrams should be reassembled
  1349. # TRUE or FALSE (case-insensitive)
  1350. #clnp.reassemble: TRUE
  1351.  
  1352. # Whether ATN security label should be decoded
  1353. # TRUE or FALSE (case-insensitive)
  1354. #clnp.decode_atn_options: FALSE
  1355.  
  1356. # Whether the CMP-over-TCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1357. # TRUE or FALSE (case-insensitive)
  1358. #cmp.desegment: TRUE
  1359.  
  1360. # Decode this TCP port's traffic as CMP. Set to "0" to disable.
  1361. # A decimal number
  1362. #cmp.tcp_alternate_port: 0
  1363.  
  1364. # Decode this TCP port's traffic as CMP-over-HTTP. Set to "0" to disable. Use this if the Content-Type is not set correctly.
  1365. # A decimal number
  1366. #cmp.http_alternate_port: 0
  1367.  
  1368. # Decode this TCP port's traffic as TCP-transport-style CMP-over-HTTP. Set to "0" to disable. Use this if the Content-Type is not set correctly.
  1369. # A decimal number
  1370. #cmp.tcp_style_http_alternate_port: 0
  1371.  
  1372. # Port number used for CoAP traffic
  1373. # A decimal number
  1374. #coap.udp_port: 5683
  1375.  
  1376. # Set the UDP port for collectd messages
  1377. # A decimal number
  1378. #collectd.udp.port: 25826
  1379.  
  1380. # Set the TCP port for COPS messages
  1381. # A decimal number
  1382. #cops.tcp.cops_port: 3288
  1383.  
  1384. # Whether the COPS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1385. # TRUE or FALSE (case-insensitive)
  1386. #cops.desegment: TRUE
  1387.  
  1388. # Decode the COPS messages using PacketCable clients. (Select port 2126)
  1389. # TRUE or FALSE (case-insensitive)
  1390. #cops.packetcable: TRUE
  1391.  
  1392. # Set the UDP port for totem ring protocol implemented in corosync cluster engine
  1393. # A decimal number
  1394. #corosync_totemnet.udp.port: 5405
  1395.  
  1396. # Semicolon-separated list of keys for decryption(e.g. key1;key2;...
  1397. # A string
  1398. #corosync_totemnet.private_keys:
  1399.  
  1400. # Whether segmented COTP datagrams should be reassembled. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1401. # TRUE or FALSE (case-insensitive)
  1402. #cotp.reassemble: TRUE
  1403.  
  1404. # How TSAPs should be displayed
  1405. # One of: As strings if printable, As strings, As bytes
  1406. # (case-insensitive).
  1407. #cotp.tsap_display: As strings if printable
  1408.  
  1409. # Whether to decode OSI TPDUs with ATN (Aereonautical Telecommunications Network) extensions. To use this option, you must also enable "Always try to decode NSDU as transport PDUs" in the CLNP protocol settings.
  1410. # TRUE or FALSE (case-insensitive)
  1411. #cotp.decode_atn: FALSE
  1412.  
  1413. # Whether the memcache dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1414. # TRUE or FALSE (case-insensitive)
  1415. #couchbase.desegment_pdus: TRUE
  1416.  
  1417. # TCP ports to be decoded as Couchbase (default is 11210)
  1418. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1419. #couchbase.tcp.ports: 11210
  1420.  
  1421. # Set the TCP port for CP 2179 Protocol packets (if other than the default of 0)
  1422. # A decimal number
  1423. #cp2179.tcp.port: 0
  1424.  
  1425. # Whether the SEL Protocol dissector should automatically pre-process Telnet data to remove IAC bytes
  1426. # TRUE or FALSE (case-insensitive)
  1427. #cp2179.telnetclean: TRUE
  1428.  
  1429. # Set the port for CPFI messages (if other than the default of 5000)
  1430. # A decimal number
  1431. #cpfi.udp.port: 5000
  1432.  
  1433. # Set the port for InstanceToInstance messages (if other than the default of 5001)
  1434. # A decimal number
  1435. #cpfi.udp.port2: 5001
  1436.  
  1437. # Control the way the '-->' is displayed. When enabled, keeps the 'lowest valued' endpoint of the src-dest pair on the left, and the arrow moves to distinguish source from dest. When disabled, keeps the arrow pointing right so the source of the frame is always on the left.
  1438. # TRUE or FALSE (case-insensitive)
  1439. #cpfi.arrow_ctl: TRUE
  1440.  
  1441. # Set the destination UDP port Cisco wireless IDS messages
  1442. # A decimal number
  1443. #cwids.udp.port: 0
  1444.  
  1445. # Show not dissected data on new Packet Bytes pane
  1446. # TRUE or FALSE (case-insensitive)
  1447. #data.datapref.newpane: FALSE
  1448.  
  1449. # Show data as text in the Packet Details pane
  1450. # TRUE or FALSE (case-insensitive)
  1451. #data.show_as_text: FALSE
  1452.  
  1453. # Whether or not MD5 hashes should be generated and shown for each payload.
  1454. # TRUE or FALSE (case-insensitive)
  1455. #data.md5_hash: FALSE
  1456.  
  1457. # Whether the LAN sync dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1458. # TRUE or FALSE (case-insensitive)
  1459. #db-lsp.desegment_pdus: TRUE
  1460.  
  1461. # Try to decode the payload using an heuristic sub-dissector
  1462. # TRUE or FALSE (case-insensitive)
  1463. #db-lsp.try_heuristic: TRUE
  1464.  
  1465. # Whether the DCCP summary line should be shown in the protocol tree
  1466. # TRUE or FALSE (case-insensitive)
  1467. #dccp.summary_in_tree: TRUE
  1468.  
  1469. # Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
  1470. # TRUE or FALSE (case-insensitive)
  1471. #dccp.try_heuristic_first: FALSE
  1472.  
  1473. # Whether to check the validity of the DCCP checksum
  1474. # TRUE or FALSE (case-insensitive)
  1475. #dccp.check_checksum: TRUE
  1476.  
  1477. # Whether the DCE/RPC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1478. # TRUE or FALSE (case-insensitive)
  1479. #dcerpc.desegment_dcerpc: TRUE
  1480.  
  1481. # Whether the DCE/RPC dissector should reassemble fragmented DCE/RPC PDUs
  1482. # TRUE or FALSE (case-insensitive)
  1483. #dcerpc.reassemble_dcerpc: TRUE
  1484.  
  1485. # Display some DCOM unmarshalled fields usually hidden
  1486. # TRUE or FALSE (case-insensitive)
  1487. #dcom.display_unmarshalling_details: FALSE
  1488.  
  1489. # If a payload looks like it's embedded in an IP primitive message, and there is a Wireshark dissector matching the DCT2000 protocol name, try parsing the payload using that dissector
  1490. # TRUE or FALSE (case-insensitive)
  1491. #dct2000.ipprim_heuristic: TRUE
  1492.  
  1493. # If a payload looks like it's embedded in an SCTP primitive message, and there is a Wireshark dissector matching the DCT2000 protocol name, try parsing the payload using that dissector
  1494. # TRUE or FALSE (case-insensitive)
  1495. #dct2000.sctpprim_heuristic: TRUE
  1496.  
  1497. # When set, attempt to decode LTE RRC frames. Note that this won't affect other protocols that also call the LTE RRC dissector
  1498. # TRUE or FALSE (case-insensitive)
  1499. #dct2000.decode_lte_rrc: TRUE
  1500.  
  1501. # When set, attempt to decode LTE S1AP frames. Note that this won't affect other protocols that also call the LTE S1AP dissector
  1502. # TRUE or FALSE (case-insensitive)
  1503. #dct2000.decode_lte_s1ap: TRUE
  1504.  
  1505. # When set, look for formatted messages indicating specific events. This may be quite slow, so should be disabled if LTE MAC is not being analysed
  1506. # TRUE or FALSE (case-insensitive)
  1507. #dct2000.decode_mac_lte_oob_messages: TRUE
  1508.  
  1509. # Set the port for DHCP failover communications
  1510. # A decimal number
  1511. #dhcpfo.tcp_port: 519
  1512.  
  1513. # Whether the DHCP failover dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1514. # TRUE or FALSE (case-insensitive)
  1515. #dhcpfo.desegment: TRUE
  1516.  
  1517. # Whether Option 18 is dissected as CableLab or RFC 3315
  1518. # TRUE or FALSE (case-insensitive)
  1519. #dhcpv6.cablelabs_interface_id: FALSE
  1520.  
  1521. # Whether the Bulk Leasequery dissector should desegment all messages spanning multiple TCP segments
  1522. # TRUE or FALSE (case-insensitive)
  1523. #dhcpv6.bulk_leasequery.desegment: TRUE
  1524.  
  1525. # TCP ports to be decoded as Diameter (default: 3868)
  1526. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1527. #diameter.tcp.ports: 3868
  1528.  
  1529. # SCTP ports to be decoded as Diameter (default: 3868)
  1530. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1531. #diameter.sctp.ports: 3868
  1532.  
  1533. # Whether the Diameter dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1534. # TRUE or FALSE (case-insensitive)
  1535. #diameter.desegment: TRUE
  1536.  
  1537. # UDP ports to be decoded as Diameter (default: 0 as Diameter over UDP is nonstandard)
  1538. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1539. #diameter.udp.ports:
  1540.  
  1541. # DICOM Ports range
  1542. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1543. #dicom.tcp.port: 104
  1544.  
  1545. # Create DICOM File Meta Header according to PS 3.10 on export for PDUs. If the captured PDV does not contain a SOP Class UID and SOP Instance UID (e.g. for command PDVs), wireshark specific ones will be created.
  1546. # TRUE or FALSE (case-insensitive)
  1547. #dicom.export_header: TRUE
  1548.  
  1549. # Do not show items below this size in the export list. Set it to 0, to see DICOM commands and responses in the list. Set it higher, to just export DICOM IODs (i.e. CT Images, RT Structures).
  1550. # A decimal number
  1551. #dicom.export_minsize: 4096
  1552.  
  1553. # Create a node for sequences and items, and show children in a hierarchy. Deselect this option, if you prefer a flat display or e.g. when using TShark to create a text output.
  1554. # TRUE or FALSE (case-insensitive)
  1555. #dicom.seq_tree: TRUE
  1556.  
  1557. # Create a node for a tag and show tag details as single elements. This can be useful to debug a tag and to allow display filters on these attributes. When using TShark to create a text output, it's better to have it disabled.
  1558. # TRUE or FALSE (case-insensitive)
  1559. #dicom.tag_tree: FALSE
  1560.  
  1561. # Show message ID and number of completed, remaining, warned or failed operations in header and info column.
  1562. # TRUE or FALSE (case-insensitive)
  1563. #dicom.cmd_details: TRUE
  1564.  
  1565. # Decode all DICOM tags in the last PDV. This will ensure the proper reassembly. When not set, the decoding may fail and the exports may become corrupt.
  1566. # TRUE or FALSE (case-insensitive)
  1567. #dicom.pdv_reassemble: TRUE
  1568.  
  1569. # Set the UDP port for DIS messages
  1570. # A decimal number
  1571. #dis.udp.port: 3000
  1572.  
  1573. # Set the TCP port for DISTCC messages
  1574. # A decimal number
  1575. #distcc.tcp.port: 3632
  1576.  
  1577. # Whether the DISTCC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1578. # TRUE or FALSE (case-insensitive)
  1579. #distcc.desegment_distcc_over_tcp: TRUE
  1580.  
  1581. # Whether DJIUAV should reassemble messages spanning multiple TCP segments (required to get useful results)
  1582. # TRUE or FALSE (case-insensitive)
  1583. #djiuav.desegment: TRUE
  1584.  
  1585. # Set the TCP port for Distributed Lock Manager
  1586. # A decimal number
  1587. #dlm3.tcp.port: 21064
  1588.  
  1589. # Set the SCTP port for Distributed Lock Manager
  1590. # A decimal number
  1591. #dlm3.sctp.port: 21064
  1592.  
  1593. # Port numbers used for DMP traffic
  1594. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1595. #dmp.udp_ports: 5031
  1596.  
  1597. # Select the type of decoding for nationally-defined values
  1598. # One of: None (raw data), As for regular, Thales XOmail
  1599. # (case-insensitive).
  1600. #dmp.national_decode: As for regular
  1601.  
  1602. # Select the nation of sending server. This is used when presenting security classification values in messages with security policy set to National (nation of local server)
  1603. # One of: None, Albania, Armenia, Austria, Azerbaijan, Belarus, Belgium, Bosnia and Hercegowina, Bulgaria, Canada, Croatia, Czech Republic, Denmark, Estonia, Euro-Atlantic Partnership Council (EAPC), European Union (EU), Finland, Former Yugoslav Republic of Macedonia, France, Georgia, Germany, Greece, Hungary, Iceland, International Security Assistance Force (ISAF), Ireland, Italy, Kazakhstan, Kyrgyztan, Latvia, Lithuania, Luxembourg, Malta, Moldova, Montenegro, Netherlands, Norway, Partnership for Peace (PfP), Poland, Portugal, Romania, Russian Federation, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Tajikistan, Turkey, Turkmenistan, United Kingdom, United States, Ukraine, Uzbekistan, Western European Union (WEU)
  1604. # (case-insensitive).
  1605. #dmp.local_nation: None
  1606.  
  1607. # Calculate sequence/acknowledgement analysis
  1608. # TRUE or FALSE (case-insensitive)
  1609. #dmp.seq_ack_analysis: TRUE
  1610.  
  1611. # Align identifiers in info list (does not align when retransmission or duplicate acknowledgement indication)
  1612. # TRUE or FALSE (case-insensitive)
  1613. #dmp.align_ids: FALSE
  1614.  
  1615. # Print subject as body id in free text messages with subject
  1616. # TRUE or FALSE (case-insensitive)
  1617. #dmp.subject_as_id: FALSE
  1618.  
  1619. # Format of the structured message id
  1620. # One of: None, 1 Byte value, 2 Byte value, 4 Byte value, 8 Byte value, Fixed text string, Zero terminated text string
  1621. # (case-insensitive).
  1622. #dmp.struct_print: None
  1623.  
  1624. # Used to set where the structured message id starts in the User Data
  1625. # A decimal number
  1626. #dmp.struct_offset: 0
  1627.  
  1628. # Used to set length of fixed text string in the structured message id format (maximum 128 characters)
  1629. # A decimal number
  1630. #dmp.struct_length: 1
  1631.  
  1632. # The way DMX values are displayed
  1633. # One of: Percent, Hexadecimal, Decimal
  1634. # (case-insensitive).
  1635. #dmx_chan.dmx_disp_chan_val_type: Percent
  1636.  
  1637. # The way DMX channel numbers are displayed
  1638. # One of: Hexadecimal, Decimal
  1639. # (case-insensitive).
  1640. #dmx_chan.dmx_disp_chan_nr_type: Hexadecimal
  1641.  
  1642. # The number of columns for the DMX display
  1643. # One of: 6, 10, 12, 16, 24
  1644. # (case-insensitive).
  1645. #dmx_chan.dmx_disp_col_count: 16
  1646.  
  1647. # Whether the DNP3 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1648. # TRUE or FALSE (case-insensitive)
  1649. #dnp3.desegment: TRUE
  1650.  
  1651. # TCP ports to be decoded as DNS (default: 53)
  1652. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1653. #dns.tcp.ports: 53
  1654.  
  1655. # UDP ports to be decoded as DNS (default: 53)
  1656. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1657. #dns.udp.ports: 53
  1658.  
  1659. # Whether the DNS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1660. # TRUE or FALSE (case-insensitive)
  1661. #dns.desegment_dns_messages: TRUE
  1662.  
  1663. # Specifies that decryption should be attempted on all packets, even if the session initialization wasn't captured.
  1664. # TRUE or FALSE (case-insensitive)
  1665. #dof.custom_dof_decrypt_all: FALSE
  1666.  
  1667. # Specifies that operations should be tracked across multiple packets, providing summary lists. This takes time and memory.
  1668. # TRUE or FALSE (case-insensitive)
  1669. #dof.custom_dof_track_operations: FALSE
  1670.  
  1671. # Limits the number of operations shown before and after the current operations
  1672. # A decimal number
  1673. #dof.custom_dof_track_operations_window: 5
  1674.  
  1675. # Whether the DRDA dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1676. # TRUE or FALSE (case-insensitive)
  1677. #drda.desegment: TRUE
  1678.  
  1679. # Whether the DSI dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1680. # TRUE or FALSE (case-insensitive)
  1681. #dsi.desegment: TRUE
  1682.  
  1683. # TCP port number for DTCP-IP
  1684. # A decimal number
  1685. #dtcp-ip.tcp.port: 0
  1686.  
  1687. # redirect dtls debug to file name; leave empty to disable debug, use "-" to redirect output to stderr
  1688. #
  1689. # A path to a file
  1690. #dtls.debug_file:
  1691.  
  1692. # Pre-Shared-Key as HEX string. Should be 0 to 16 bytes.
  1693. # A string
  1694. #dtls.psk:
  1695.  
  1696. # The name of a file which contains a list of
  1697. # (pre-)master secrets in one of the following formats:
  1698. #
  1699. # RSA <EPMS> <PMS>
  1700. # RSA Session-ID:<SSLID> Master-Key:<MS>
  1701. # CLIENT_RANDOM <CRAND> <MS>
  1702. # PMS_CLIENT_RANDOM <CRAND> <PMS>
  1703. #
  1704. # Where:
  1705. # <EPMS> = First 8 bytes of the Encrypted PMS
  1706. # <PMS> = The Pre-Master-Secret (PMS) used to derive the MS
  1707. # <SSLID> = The SSL Session ID
  1708. # <MS> = The Master-Secret (MS)
  1709. # <CRAND> = The Client's random number from the ClientHello message
  1710. #
  1711. # (All fields are in hex notation)
  1712. # A path to a file
  1713. #dtls.keylog_file:
  1714.  
  1715. # Set the TDP port for the DTPT Server
  1716. # A decimal number
  1717. #dtpt.tcp.port: 5721
  1718.  
  1719. # SAC Encryption Key (16 hex bytes)
  1720. # A string
  1721. #dvb-ci.sek:
  1722.  
  1723. # SAC Init Vector (16 hex bytes)
  1724. # A string
  1725. #dvb-ci.siv:
  1726.  
  1727. # Dissect the content of messages transmitted on the Low-Speed Communication resource. This requires a dissector for the protocol and target port contained in the connection descriptor.
  1728. # TRUE or FALSE (case-insensitive)
  1729. #dvb-ci.dissect_lsc_msg: FALSE
  1730.  
  1731. # Check this to enable full protocol dissection of data above GSE Layer
  1732. # TRUE or FALSE (case-insensitive)
  1733. #dvb-s2_modeadapt.full_decode: FALSE
  1734.  
  1735. # Allow only packets with Major=0x03//Minor=0xFF as DVMRP V3 packets
  1736. # TRUE or FALSE (case-insensitive)
  1737. #dvmrp.strict_v3: FALSE
  1738.  
  1739. # Whether the eDonkey dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1740. # TRUE or FALSE (case-insensitive)
  1741. #edonkey.desegment: TRUE
  1742.  
  1743. # Whether the EtherNet/IP dissector should desegment all messages spanning multiple TCP segments
  1744. # TRUE or FALSE (case-insensitive)
  1745. #enip.desegment: TRUE
  1746.  
  1747. # Determines whether all I/O connections will assume a 32-bit header in the O->T direction
  1748. # TRUE or FALSE (case-insensitive)
  1749. #enip.o2t_run_idle: TRUE
  1750.  
  1751. # Determines whether all I/O connections will assume a 32-bit header in the T->O direction
  1752. # TRUE or FALSE (case-insensitive)
  1753. #enip.t2o_run_idle: FALSE
  1754.  
  1755. # The UDP port on which ENTTEC packets will be sent
  1756. # A decimal number
  1757. #enttec.udp_port: 3333
  1758.  
  1759. # The TCP port on which ENTTEC packets will be sent
  1760. # A decimal number
  1761. #enttec.tcp_port: 3333
  1762.  
  1763. # The way DMX values are displayed
  1764. # One of: Percent, Hexadecimal, Decimal
  1765. # (case-insensitive).
  1766. #enttec.dmx_disp_chan_val_type: Percent
  1767.  
  1768. # The way DMX channel numbers are displayed
  1769. # One of: Hexadecimal, Decimal
  1770. # (case-insensitive).
  1771. #enttec.dmx_disp_chan_nr_type: Hexadecimal
  1772.  
  1773. # The number of columns for the DMX display
  1774. # One of: 6, 10, 12, 16, 24
  1775. # (case-insensitive).
  1776. #enttec.dmx_disp_col_count: 16
  1777.  
  1778. # If you are capturing in networks with multiplexed or slow nodes, this can be useful
  1779. # TRUE or FALSE (case-insensitive)
  1780. #epl.show_soc_flags: FALSE
  1781.  
  1782. # For analysis purposes one might want to show the command layer even if the dissectore assumes a duplicated frame
  1783. # TRUE or FALSE (case-insensitive)
  1784. #epl.show_duplicated_command_layer: FALSE
  1785.  
  1786. # Protocol encapsulated in HDLC records
  1787. # One of: Cisco HDLC, PPP serial, Frame Relay, SS7 MTP2, Attempt to guess
  1788. # (case-insensitive).
  1789. #erf.hdlc_type: Attempt to guess
  1790.  
  1791. # Whether raw ATM cells should be treated as the first cell of an AAL5 PDU
  1792. # TRUE or FALSE (case-insensitive)
  1793. #erf.rawcell_first: FALSE
  1794.  
  1795. # Protocol encapsulated in ATM AAL5 packets
  1796. # One of: Attempt to guess, LLC multiplexed, Unspecified
  1797. # (case-insensitive).
  1798. #erf.aal5_type: Attempt to guess
  1799.  
  1800. # When set, dissector will FORCE to decode directly Ethernet FrameSome vendor use fake ERSPAN frame (with not ERSPAN Header)
  1801. # TRUE or FALSE (case-insensitive)
  1802. #erspan.fake_erspan: FALSE
  1803.  
  1804. # This is done only if the Decoding is not SET or the packet does not belong to a SA. Assumes a 12 byte auth (HMAC-SHA1-96/HMAC-MD5-96/AES-XCBC-MAC-96) and attempts decode based on the ethertype 13 bytes from packet end
  1805. # TRUE or FALSE (case-insensitive)
  1806. #esp.enable_null_encryption_decode_heuristic: FALSE
  1807.  
  1808. # Check that successive frames increase sequence number by 1 within an SPI. This should work OK when only one host is sending frames on an SPI
  1809. # TRUE or FALSE (case-insensitive)
  1810. #esp.do_esp_sequence_analysis: TRUE
  1811.  
  1812. # Attempt to decode based on the SAD described hereafter.
  1813. # TRUE or FALSE (case-insensitive)
  1814. #esp.enable_encryption_decode: FALSE
  1815.  
  1816. # Attempt to Check ESP Authentication based on the SAD described hereafter.
  1817. # TRUE or FALSE (case-insensitive)
  1818. #esp.enable_authentication_check: FALSE
  1819.  
  1820. # Whether the E-Tag summary line should be shown in the protocol tree
  1821. # TRUE or FALSE (case-insensitive)
  1822. #etag.summary_in_tree: TRUE
  1823.  
  1824. # Place the hash/symbol files (generated by the Apache Etch compiler) ending with .ewh here
  1825. # A path to a directory
  1826. #etch.file:
  1827.  
  1828. # Etch TCP port
  1829. # A decimal number
  1830. #etch.tcp.port: 0
  1831.  
  1832. # Some devices add trailing data to frames. When this setting is checked the Ethernet dissector will assume there has been added padding to the frame before the trailer was added. Uncheck if a device added a trailer before the frame was padded.
  1833. # TRUE or FALSE (case-insensitive)
  1834. #eth.assume_padding: TRUE
  1835.  
  1836. # Some TAPs add a fixed length ethernet trailer at the end of the frame, but before the (optional) FCS. Make sure it gets interpreted correctly.
  1837. # A decimal number
  1838. #eth.trailer_length: 0
  1839.  
  1840. # Some Ethernet adapters and drivers include the FCS at the end of a packet, others do not. The Ethernet dissector attempts to guess whether a captured packet has an FCS, but it cannot always guess correctly.
  1841. # TRUE or FALSE (case-insensitive)
  1842. #eth.assume_fcs: FALSE
  1843.  
  1844. # Whether to validate the Frame Check Sequence
  1845. # TRUE or FALSE (case-insensitive)
  1846. #eth.check_fcs: TRUE
  1847.  
  1848. # Whether packets should be interpreted as coming from CheckPoint FireWall-1 monitor file if they look as if they do
  1849. # TRUE or FALSE (case-insensitive)
  1850. #eth.interpret_as_fw1_monitor: FALSE
  1851.  
  1852. # Set the condition that must be true for the CCSDS dissector to be called
  1853. # TRUE or FALSE (case-insensitive)
  1854. #eth.ccsds_heuristic_length: FALSE
  1855.  
  1856. # Set the condition that must be true for the CCSDS dissector to be called
  1857. # TRUE or FALSE (case-insensitive)
  1858. #eth.ccsds_heuristic_version: FALSE
  1859.  
  1860. # Set the condition that must be true for the CCSDS dissector to be called
  1861. # TRUE or FALSE (case-insensitive)
  1862. #eth.ccsds_heuristic_header: FALSE
  1863.  
  1864. # Set the condition that must be true for the CCSDS dissector to be called
  1865. # TRUE or FALSE (case-insensitive)
  1866. #eth.ccsds_heuristic_bit: FALSE
  1867.  
  1868. # Whether the EVRC dissector should process payload type 60 as legacy EVRC packets
  1869. # TRUE or FALSE (case-insensitive)
  1870. #evrc.legacy_pt_60: FALSE
  1871.  
  1872. # Controls the display of the session's username in the info column. This is only displayed if the packet containing it was seen during this capture session.
  1873. # TRUE or FALSE (case-insensitive)
  1874. #exec.info_show_username: TRUE
  1875.  
  1876. # Controls the display of the command being run on the server by this session in the info column. This is only displayed if the packet containing it was seen during this capture session.
  1877. # TRUE or FALSE (case-insensitive)
  1878. #exec.info_show_command: FALSE
  1879.  
  1880. # If enabled, reassembly of multi-frame sequences is done
  1881. # TRUE or FALSE (case-insensitive)
  1882. #fc.reassemble: TRUE
  1883.  
  1884. # This is the size of non-last frames in a multi-frame sequence
  1885. # A decimal number
  1886. #fc.max_frame_size: 1024
  1887.  
  1888. # Set the TCP port for FastCGI traffic
  1889. # A decimal number
  1890. #fcgi.tcp.port: 0
  1891.  
  1892. # When this option is enabled Wireshark will attempt to identify FCoIB packets automatically based on some common features (may generate false positives)
  1893. # TRUE or FALSE (case-insensitive)
  1894. #fcoib.heur_en: TRUE
  1895.  
  1896. # Enables dissecting packets between the manually configured source/destination as FCoIB traffic
  1897. # TRUE or FALSE (case-insensitive)
  1898. #fcoib.manual_en: FALSE
  1899.  
  1900. # Type of address specified
  1901. # One of: LID, GID
  1902. # (case-insensitive).
  1903. #fcoib.addr_a_type: LID
  1904.  
  1905. # LID/GID of address A
  1906. # A string
  1907. #fcoib.addr_a_id:
  1908.  
  1909. # QP Number for address A
  1910. # A decimal number
  1911. #fcoib.addr_a_qp: 0
  1912.  
  1913. # Type of address specified
  1914. # One of: LID, GID
  1915. # (case-insensitive).
  1916. #fcoib.addr_b_type: LID
  1917.  
  1918. # LID/GID of address B
  1919. # A string
  1920. #fcoib.addr_b_id:
  1921.  
  1922. # QP Number for address B
  1923. # A decimal number
  1924. #fcoib.addr_b_qp: 0
  1925.  
  1926. # Whether the FDDI dissector should add 3-byte padding to all captured FDDI packets (useful with e.g. Tru64 UNIX tcpdump)
  1927. # TRUE or FALSE (case-insensitive)
  1928. #fddi.padding: FALSE
  1929.  
  1930. # Whether the FCIP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1931. # TRUE or FALSE (case-insensitive)
  1932. #fcip.desegment: TRUE
  1933.  
  1934. # Port number used for FCIP
  1935. # A decimal number
  1936. #fcip.target_port: 3225
  1937.  
  1938. # Dissect next layer
  1939. # TRUE or FALSE (case-insensitive)
  1940. #file-pcap.dissect_next_layer: FALSE
  1941.  
  1942. # Dissect next layer
  1943. # TRUE or FALSE (case-insensitive)
  1944. #file-pcapng.dissect_next_layer: FALSE
  1945.  
  1946. # Whether the FIX dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  1947. # TRUE or FALSE (case-insensitive)
  1948. #fix.desegment: TRUE
  1949.  
  1950. # TCP Ports range
  1951. # A string denoting an positive integer range (e.g., "1-20,30-40")
  1952. #fix.tcp.port:
  1953.  
  1954. # With this option display filters for fmp fhandle a RPC call, even if the actual fhandle is only present in one of the packets
  1955. # TRUE or FALSE (case-insensitive)
  1956. #fmp.fhandle_find_both_reqrep: FALSE
  1957.  
  1958. # Decode packets on this TCP port as ForCES
  1959. # A decimal number
  1960. #forces.tcp_alternate_port: 0
  1961.  
  1962. # Decode packets on this UDP port as ForCES
  1963. # A decimal number
  1964. #forces.udp_alternate_port: 0
  1965.  
  1966. # Decode packets on this sctp port as ForCES
  1967. # A decimal number
  1968. #forces.sctp_high_prio_port: 0
  1969.  
  1970. # Decode packets on this sctp port as ForCES
  1971. # A decimal number
  1972. #forces.sctp_med_prio_port: 0
  1973.  
  1974. # Decode packets on this sctp port as ForCES
  1975. # A decimal number
  1976. #forces.sctp_low_prio_port: 0
  1977.  
  1978. # Show reported release info
  1979. # TRUE or FALSE (case-insensitive)
  1980. #fp.show_release_info: TRUE
  1981.  
  1982. # Call MAC dissector for payloads
  1983. # TRUE or FALSE (case-insensitive)
  1984. #fp.call_mac: TRUE
  1985.  
  1986. # Validate FP payload checksums
  1987. # TRUE or FALSE (case-insensitive)
  1988. #fp.payload_checksum: TRUE
  1989.  
  1990. # Validate FP header checksums
  1991. # TRUE or FALSE (case-insensitive)
  1992. #fp.header_checksum: TRUE
  1993.  
  1994. # Encapsulation
  1995. # One of: FRF 3.2/Cisco HDLC, GPRS Network Service, Raw Ethernet
  1996. # (case-insensitive).
  1997. #fr.encap: FRF 3.2/Cisco HDLC
  1998.  
  1999. # Show offset of frame in capture file
  2000. # TRUE or FALSE (case-insensitive)
  2001. #frame.show_file_off: FALSE
  2002.  
  2003. # Treat all frames as DOCSIS Frames
  2004. # TRUE or FALSE (case-insensitive)
  2005. #frame.force_docsis_encap: FALSE
  2006.  
  2007. # Whether or not MD5 hashes should be generated for each frame, useful for finding duplicate frames.
  2008. # TRUE or FALSE (case-insensitive)
  2009. #frame.generate_md5_hash: FALSE
  2010.  
  2011. # Whether or not an Epoch time entry should be generated for each frame.
  2012. # TRUE or FALSE (case-insensitive)
  2013. #frame.generate_epoch_time: TRUE
  2014.  
  2015. # Whether or not the number of bits in the frame should be shown.
  2016. # TRUE or FALSE (case-insensitive)
  2017. #frame.generate_bits_field: TRUE
  2018.  
  2019. # Whether or not 'packet size limited during capture' message in shown in Info column.
  2020. # TRUE or FALSE (case-insensitive)
  2021. #frame.disable_packet_size_limited_in_summary: FALSE
  2022.  
  2023. # Whether the FireWall-1 summary line should be shown in the protocol tree
  2024. # TRUE or FALSE (case-insensitive)
  2025. #fw1.summary_in_tree: TRUE
  2026.  
  2027. # Whether the Firewall-1 monitor file includes UUID information
  2028. # TRUE or FALSE (case-insensitive)
  2029. #fw1.with_uuid: FALSE
  2030.  
  2031. # Whether the interface list includes the chain position
  2032. # TRUE or FALSE (case-insensitive)
  2033. #fw1.iflist_with_chain: FALSE
  2034.  
  2035. # Whether the Gadu-Gadu dissector should reassemble messages spanning multiple TCP segments.To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2036. # TRUE or FALSE (case-insensitive)
  2037. #gadu-gadu.desegment: TRUE
  2038.  
  2039. # Whether the Gearman dissector should desegment all messages spanning multiple TCP segments
  2040. # TRUE or FALSE (case-insensitive)
  2041. #gearman.desegment: TRUE
  2042.  
  2043. # Set up the TCP port for GED125
  2044. # A decimal number
  2045. #ged125.tcp_port: 0
  2046.  
  2047. # Whether the GED125 dissector should desegment all messages spanning multiple TCP segments
  2048. # TRUE or FALSE (case-insensitive)
  2049. #ged125.desegment_body: TRUE
  2050.  
  2051. # Whether the GIOP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2052. # TRUE or FALSE (case-insensitive)
  2053. #giop.desegment_giop_messages: TRUE
  2054.  
  2055. # Whether fragmented GIOP messages should be reassembled
  2056. # TRUE or FALSE (case-insensitive)
  2057. #giop.reassemble: TRUE
  2058.  
  2059. # Maximum allowed message size in bytes (default=10485760)
  2060. # A decimal number
  2061. #giop.max_message_size: 10485760
  2062.  
  2063. # File containing stringified IORs, one per line.
  2064. # A path to a file
  2065. #giop.ior_txt: IOR.txt
  2066.  
  2067. # Whether the GIT dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2068. # TRUE or FALSE (case-insensitive)
  2069. #git.desegment: TRUE
  2070.  
  2071. # Whether the Gigamon header summary line should be shown in the protocol tree
  2072. # TRUE or FALSE (case-insensitive)
  2073. #gmhdr.summary_in_tree: TRUE
  2074.  
  2075. # Whether the Gigamon Trailer summary line should be shown in the protocol tree
  2076. # TRUE or FALSE (case-insensitive)
  2077. #gmtrailer.summary_in_tree: TRUE
  2078.  
  2079. # Whether the Gigamon trailer containing HW timestamp, source id and original CRC should be decoded
  2080. # TRUE or FALSE (case-insensitive)
  2081. #gmtrailer.decode_trailer_timestamp: TRUE
  2082.  
  2083. # TCP Ports range
  2084. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2085. #gopher.tcp.port: 70
  2086.  
  2087. # Whether to autodetect the cipher bit (because it might be set on unciphered data)
  2088. # TRUE or FALSE (case-insensitive)
  2089. #llcgprs.autodetect_cipher_bit: FALSE
  2090.  
  2091. # UDP ports to be decoded as GPRS-NS (default: 2157,19999)
  2092. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2093. #gprs-ns.udp.ports: 2157,19999
  2094.  
  2095. # Whether the Gryphon dissector should desegment all messages spanning multiple TCP segments
  2096. # TRUE or FALSE (case-insensitive)
  2097. #gryphon.desegment: TRUE
  2098.  
  2099. # Set the port(s) for ip.access IPA (default: 3002,3003,3006,4249,4250,5000)
  2100. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2101. #gsm_ipa.tcp_ports: 3002,3003,3006,4249,4250,5000
  2102.  
  2103. # Set the port(s) for ip.access IPA (usually: 3006)
  2104. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2105. #gsm_ipa.udp_ports: 0
  2106.  
  2107. # No description
  2108. # TRUE or FALSE (case-insensitive)
  2109. #gsm_ipa.hsl_debug_in_root_tree: FALSE
  2110.  
  2111. # No description
  2112. # TRUE or FALSE (case-insensitive)
  2113. #gsm_ipa.hsl_debug_in_info: FALSE
  2114.  
  2115. # Whether the dissector should reassemble SMS spanning multiple packets
  2116. # TRUE or FALSE (case-insensitive)
  2117. #gsm_sms.reassemble: TRUE
  2118.  
  2119. # Always decode a GSM Short Message as Connectionless WSP if a Port Number Information Element is present in the SMS User Data Header.
  2120. # TRUE or FALSE (case-insensitive)
  2121. #gsm_sms_ud.port_number_udh_means_wsp: FALSE
  2122.  
  2123. # Always try subdissection of the 1st fragment of a fragmented GSM Short Message. If reassembly is possible, the Short Message may be dissected twice (once as a short frame, once in its entirety).
  2124. # TRUE or FALSE (case-insensitive)
  2125. #gsm_sms_ud.try_dissect_1st_fragment: FALSE
  2126.  
  2127. # Prevent sub-dissectors from replacing column data with their own. Eg. Prevent WSP dissector overwriting SMPP information.
  2128. # TRUE or FALSE (case-insensitive)
  2129. #gsm_sms_ud.prevent_dissectors_chg_cols: FALSE
  2130.  
  2131. # Treat ARFCN 512-810 as DCS 1800 rather than PCS 1900
  2132. # TRUE or FALSE (case-insensitive)
  2133. #gsm_um.dcs1800: TRUE
  2134.  
  2135. # TCAP Subsystem numbers used for GSM MAP
  2136. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2137. #gsm_map.tcap.ssn: 6-9
  2138.  
  2139. # How to treat Application context
  2140. # One of: Use application context from the trace, Treat as AC 1, Treat as AC 2, Treat as AC 3
  2141. # (case-insensitive).
  2142. #gsm_map.application.context.version: Use application context from the trace
  2143.  
  2144. # When enabled, dissector will use the non 3GPP standard extensions from Ericsson (that can override the standard ones)
  2145. # TRUE or FALSE (case-insensitive)
  2146. #gsm_map.ericsson.proprietary.extensions: FALSE
  2147.  
  2148. # Whether or not to try reassembling GSSAPI blobs spanning multiple (SMB/SessionSetup) PDUs
  2149. # TRUE or FALSE (case-insensitive)
  2150. #gss-api.gssapi_reassembly: TRUE
  2151.  
  2152. # GTPv0 and GTP' port (default 3386)
  2153. # A decimal number
  2154. #gtp.v0_port: 3386
  2155.  
  2156. # GTPv1 and GTPv2 control plane port (default 2123)
  2157. # A decimal number
  2158. #gtp.v1c_port: 2123
  2159.  
  2160. # GTPv1 user plane port (default 2152)
  2161. # A decimal number
  2162. #gtp.v1u_port: 2152
  2163.  
  2164. # Dissect T-PDU as
  2165. # One of: None, TPDU, SYNC
  2166. # (case-insensitive).
  2167. #gtp.dissect_tpdu_as: TPDU
  2168.  
  2169. # GTP ETSI order
  2170. # TRUE or FALSE (case-insensitive)
  2171. #gtp.check_etsi: FALSE
  2172.  
  2173. # Dissect GTP over TCP
  2174. # TRUE or FALSE (case-insensitive)
  2175. #gtp.dissect_gtp_over_tcp: TRUE
  2176.  
  2177. # Track GTP session
  2178. # TRUE or FALSE (case-insensitive)
  2179. #gtp.track_gtp_session: FALSE
  2180.  
  2181. # H.225 Server TLS Port
  2182. # A decimal number
  2183. #h225.tls.port: 1300
  2184.  
  2185. # Whether the H.225 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2186. # TRUE or FALSE (case-insensitive)
  2187. #h225.reassembly: TRUE
  2188.  
  2189. # ON - display tunnelled H.245 inside H.225.0 tree, OFF - display tunnelled H.245 in root tree after H.225.0
  2190. # TRUE or FALSE (case-insensitive)
  2191. #h225.h245_in_tree: TRUE
  2192.  
  2193. # ON - display tunnelled protocols inside H.225.0 tree, OFF - display tunnelled protocols in root tree after H.225.0
  2194. # TRUE or FALSE (case-insensitive)
  2195. #h225.tp_in_tree: TRUE
  2196.  
  2197. # Whether the H.245 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2198. # TRUE or FALSE (case-insensitive)
  2199. #h245.reassembly: TRUE
  2200.  
  2201. # Whether the dissector should show short names or the long names from the standard
  2202. # TRUE or FALSE (case-insensitive)
  2203. #h245.shorttypes: FALSE
  2204.  
  2205. # Whether the dissector should print items of h245 Info column in reversed order
  2206. # TRUE or FALSE (case-insensitive)
  2207. #h245.prepand: FALSE
  2208.  
  2209. # Port to be decoded as h501
  2210. # A decimal number
  2211. #h501.udp.port: 2099
  2212.  
  2213. # Port to be decoded as h501
  2214. # A decimal number
  2215. #h501.tcp.port: 2099
  2216.  
  2217. # Desegment H.501 messages that span more TCP segments
  2218. # TRUE or FALSE (case-insensitive)
  2219. #h501.desegment: TRUE
  2220.  
  2221. # Maintain relationships between transactions and contexts and display an extra tree showing context data
  2222. # TRUE or FALSE (case-insensitive)
  2223. #h248.ctx_info: FALSE
  2224.  
  2225. # Port to be decoded as h248
  2226. # A decimal number
  2227. #h248.udp_port: 2945
  2228.  
  2229. # Port to be decoded as h248
  2230. # A decimal number
  2231. #h248.tcp_port: 2945
  2232.  
  2233. # Desegment H.248 messages that span more TCP segments
  2234. # TRUE or FALSE (case-insensitive)
  2235. #h248.desegment: TRUE
  2236.  
  2237. # The dynamic payload type which will be interpreted as H264; The value must be greater than 95
  2238. # A decimal number
  2239. #h263p.dynamic.payload.type: 0
  2240.  
  2241. # Dynamic payload types which will be interpreted as H264; Values must be in the range 96 - 127
  2242. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2243. #h264.dynamic.payload.type:
  2244.  
  2245. # Whether the HART-IP dissector should desegment all messages spanning multiple TCP segments
  2246. # TRUE or FALSE (case-insensitive)
  2247. #hart_ip.desegment: TRUE
  2248.  
  2249. # Whether the hazel dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2250. # TRUE or FALSE (case-insensitive)
  2251. #hzlcst.desegment: TRUE
  2252.  
  2253. # Hazelcast TCP port if other than the default
  2254. # A decimal number
  2255. #hzlcst.tcp.port: 5701
  2256.  
  2257. # Whether the ACL dissector should reassemble fragmented PDUs
  2258. # TRUE or FALSE (case-insensitive)
  2259. #bthci_acl.hci_acl_reassembly: TRUE
  2260.  
  2261. # The UDP port used in L3 communications (default 47000)
  2262. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2263. #hcrt.dissector_udp_port: 47000
  2264.  
  2265. # The ethernet type used for L2 communications
  2266. # A decimal number
  2267. #hcrt.dissector_ethertype: 61522
  2268.  
  2269. # Set the TCP port for HDFS
  2270. # A decimal number
  2271. #hdfs.tcp.port: 0
  2272.  
  2273. # Set the TCP port for HDFSDATA
  2274. # A decimal number
  2275. #hdfsdata.tcp.port: 0
  2276.  
  2277. # Set the TCP port for HiSLIP traffic if other than the default
  2278. # A decimal number
  2279. #hislip.tcp.port: 4880
  2280.  
  2281. # Set the port for HNBAP messages (Default of 29169)
  2282. # A decimal number
  2283. #hnbap.port: 29169
  2284.  
  2285. # Set the UDP port (source or destination) used for HP encapsulated remote mirroring frames;
  2286. # 0 (default) means that the HP_ERM dissector is not active
  2287. # A decimal number
  2288. #hp_erm.udp.port: 0
  2289.  
  2290. # Whether the HPFEEDS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2291. # TRUE or FALSE (case-insensitive)
  2292. #hpfeeds.desegment_hpfeeds_messages: TRUE
  2293.  
  2294. # Set the TCP port for HPFEEDS messages
  2295. # A decimal number
  2296. #hpfeeds.dissector_port: 0
  2297.  
  2298. # Try to decode the payload using an heuristic sub-dissector
  2299. # TRUE or FALSE (case-insensitive)
  2300. #hpfeeds.try_heuristic: TRUE
  2301.  
  2302. # Whether the HTTP dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2303. # TRUE or FALSE (case-insensitive)
  2304. #http.desegment_headers: TRUE
  2305.  
  2306. # Whether the HTTP dissector should use the "Content-length:" value, if present, to reassemble the body of a request spanning multiple TCP segments, and reassemble chunked data spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2307. # TRUE or FALSE (case-insensitive)
  2308. #http.desegment_body: TRUE
  2309.  
  2310. # Whether to reassemble bodies of entities that are transferred using the "Transfer-Encoding: chunked" method
  2311. # TRUE or FALSE (case-insensitive)
  2312. #http.dechunk_body: TRUE
  2313.  
  2314. # Whether to uncompress entity bodies that are compressed using "Content-Encoding: "
  2315. # TRUE or FALSE (case-insensitive)
  2316. #http.decompress_body: TRUE
  2317.  
  2318. # TCP Ports range
  2319. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2320. #http.tcp.port: 80,3128,3132,5985,8080,8088,11371,1900,2869,2710
  2321.  
  2322. # SCTP Ports range
  2323. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2324. #http.sctp.port: 80
  2325.  
  2326. # SSL/TLS Ports range
  2327. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2328. #http.ssl.port: 443
  2329.  
  2330. # When set, dissector will attempt to identify unknown IBA payloads as containing an encapsulated ethertype, and parse them accordingly
  2331. # TRUE or FALSE (case-insensitive)
  2332. #infiniband.identify_payload: TRUE
  2333.  
  2334. # When set, dissector will attempt to identify and parse Mellanox Ethernet-over-InfiniBand packets
  2335. # TRUE or FALSE (case-insensitive)
  2336. #infiniband.dissect_eoib: TRUE
  2337.  
  2338. # when set the Analyser will consider this as RRoce UDP Port and parse it accordingly
  2339. # A decimal number
  2340. #infiniband.rroce.port: 0
  2341.  
  2342. # ICEP TCP port
  2343. # A decimal number
  2344. #icep.tcp.port: 0
  2345.  
  2346. # ICEP UDP port
  2347. # A decimal number
  2348. #icep.udp.port: 0
  2349.  
  2350. # Maximum number of batch requests allowed
  2351. # A decimal number
  2352. #icep.max_batch_requests: 64
  2353.  
  2354. # Maximum length allowed of an ICEP string
  2355. # A decimal number
  2356. #icep.max_ice_string_len: 512
  2357.  
  2358. # Maximum number of context pairs allowed
  2359. # A decimal number
  2360. #icep.max_ice_context_pairs: 64
  2361.  
  2362. # Whether the 128th and following bytes of the ICMP payload should be decoded as MPLS extensions or as a portion of the original packet
  2363. # TRUE or FALSE (case-insensitive)
  2364. #icmp.favor_icmp_mpls: FALSE
  2365.  
  2366. # Whether fragmented 802.11 datagrams should be reassembled
  2367. # TRUE or FALSE (case-insensitive)
  2368. #wlan.defragment: TRUE
  2369.  
  2370. # Don't dissect 802.11n draft HT elements (which might contain duplicate information).
  2371. # TRUE or FALSE (case-insensitive)
  2372. #wlan.ignore_draft_ht: FALSE
  2373.  
  2374. # Whether retransmitted 802.11 frames should be subdissected
  2375. # TRUE or FALSE (case-insensitive)
  2376. #wlan.retransmitted: TRUE
  2377.  
  2378. # Some 802.11 cards include the FCS at the end of a packet, others do not.
  2379. # TRUE or FALSE (case-insensitive)
  2380. #wlan.check_fcs: FALSE
  2381.  
  2382. # Whether to validate the FCS checksum or not.
  2383. # TRUE or FALSE (case-insensitive)
  2384. #wlan.check_checksum: TRUE
  2385.  
  2386. # Some 802.11 cards leave the Protection bit set even though the packet is decrypted, and some also leave the IV (initialization vector).
  2387. # One of: No, Yes - without IV, Yes - with IV
  2388. # (case-insensitive).
  2389. #wlan.ignore_wep: No
  2390.  
  2391. # Enable WEP and WPA/WPA2 decryption
  2392. # TRUE or FALSE (case-insensitive)
  2393. #wlan.enable_decryption: TRUE
  2394.  
  2395. # (Hexadecimal) Ethertype used to indicate IEEE 802.15.4 frame.
  2396. # A hexadecimal number
  2397. #wpan.802154_ethertype: 0x809a
  2398.  
  2399. # Set if the FCS field is in TI CC24xx format.
  2400. # TRUE or FALSE (case-insensitive)
  2401. #wpan.802154_cc24xx: FALSE
  2402.  
  2403. # Dissect payload only if FCS is valid.
  2404. # TRUE or FALSE (case-insensitive)
  2405. #wpan.802154_fcs_ok: TRUE
  2406.  
  2407. # 128-bit decryption key in hexadecimal format
  2408. # A string
  2409. #wpan.802154_key:
  2410.  
  2411. # Specifies the security suite to use for 802.15.4-2003 secured frames (only supported suites are listed). Option ignored for 802.15.4-2006 and unsecured frames.
  2412. # One of: AES-128 Encryption, 128-bit Integrity Protection, AES-128 Encryption, 64-bit Integrity Protection, AES-128 Encryption, 32-bit Integrity Protection
  2413. # (case-insensitive).
  2414. #wpan.802154_sec_suite: AES-128 Encryption, 64-bit Integrity Protection
  2415.  
  2416. # Set if the manufacturer extends the authentication data with the security header. Option ignored for 802.15.4-2006 and unsecured frames.
  2417. # TRUE or FALSE (case-insensitive)
  2418. #wpan.802154_extend_auth: TRUE
  2419.  
  2420. # (Hexadecimal) Ethertype used to indicate IEEE 802.1ah tag.
  2421. # A hexadecimal number
  2422. #ieee8021ah.8021ah_ethertype: 0x88e7
  2423.  
  2424. # Whether the iFCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2425. # TRUE or FALSE (case-insensitive)
  2426. #ifcp.desegment: TRUE
  2427.  
  2428. # Whether the ILP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2429. # TRUE or FALSE (case-insensitive)
  2430. #ilp.desegment_ilp_messages: TRUE
  2431.  
  2432. # Set the TCP port for ILP messages(IANA registered port is 7276)
  2433. # A decimal number
  2434. #ilp.tcp.port: 7276
  2435.  
  2436. # Whether to use heuristics for post-STARTTLS detection of encrypted IMAP conversations
  2437. # TRUE or FALSE (case-insensitive)
  2438. #imap.ssl_heuristic: TRUE
  2439.  
  2440. # TCAP Subsystem numbers used for INAP
  2441. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2442. #inap.ssn: 106,241
  2443.  
  2444. # Check to treat all traffic between the configured source/destination as SDP
  2445. # TRUE or FALSE (case-insensitive)
  2446. #infiniband_sdp.manual_en: FALSE
  2447.  
  2448. # Type of address specified
  2449. # One of: LID, GID
  2450. # (case-insensitive).
  2451. #infiniband_sdp.addr_a_type: LID
  2452.  
  2453. # LID/GID of address A
  2454. # A string
  2455. #infiniband_sdp.addr_a_id:
  2456.  
  2457. # QP Number for address A
  2458. # A decimal number
  2459. #infiniband_sdp.addr_a_qp: 0
  2460.  
  2461. # Type of address specified
  2462. # One of: LID, GID
  2463. # (case-insensitive).
  2464. #infiniband_sdp.addr_b_type: LID
  2465.  
  2466. # LID/GID of address B
  2467. # A string
  2468. #infiniband_sdp.addr_b_id:
  2469.  
  2470. # QP Number for address B
  2471. # A decimal number
  2472. #infiniband_sdp.addr_b_qp: 0
  2473.  
  2474. # Whether the IPDC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2475. # TRUE or FALSE (case-insensitive)
  2476. #ipdc.desegment_ipdc_messages: TRUE
  2477.  
  2478. # Set the IPDC monitoring port
  2479. # A decimal number
  2480. #ipdc.tcp.port: 6668
  2481.  
  2482. # FRU Language Code is English; strings are ASCII+LATIN1 (vs. Unicode)
  2483. # TRUE or FALSE (case-insensitive)
  2484. #ipmi.fru_langcode_is_english: TRUE
  2485.  
  2486. # Do not search for responses coming after this timeout (milliseconds)
  2487. # A decimal number
  2488. #ipmi.response_after_req: 5000
  2489.  
  2490. # Allow for responses before requests (milliseconds)
  2491. # A decimal number
  2492. #ipmi.response_before_req: 0
  2493.  
  2494. # Format of messages embedded into Send/Get/Forward Message
  2495. # One of: None, IPMB, Session-based (LAN, ...), Use heuristics
  2496. # (case-insensitive).
  2497. #ipmi.msgfmt: Use heuristics
  2498.  
  2499. # Selects which OEM format is used for commands that IPMI does not define
  2500. # One of: None, Pigeon Point Systems
  2501. # (case-insensitive).
  2502. #ipmi.selected_oem: None
  2503.  
  2504. # Whether the IPv4 type-of-service field should be decoded as a Differentiated Services field (see RFC2474/RFC2475)
  2505. # TRUE or FALSE (case-insensitive)
  2506. #ip.decode_tos_as_diffserv: TRUE
  2507.  
  2508. # Whether fragmented IPv4 datagrams should be reassembled
  2509. # TRUE or FALSE (case-insensitive)
  2510. #ip.defragment: TRUE
  2511.  
  2512. # Whether the IPv4 summary line should be shown in the protocol tree
  2513. # TRUE or FALSE (case-insensitive)
  2514. #ip.summary_in_tree: TRUE
  2515.  
  2516. # Whether to validate the IPv4 checksum
  2517. # TRUE or FALSE (case-insensitive)
  2518. #ip.check_checksum: FALSE
  2519.  
  2520. # Whether to correct for TSO-enabled (TCP segmentation offload) hardware captures, such as spoofing the IP packet length
  2521. # TRUE or FALSE (case-insensitive)
  2522. #ip.tso_support: TRUE
  2523.  
  2524. # Whether to look up IP addresses in each GeoIP database we have loaded
  2525. # TRUE or FALSE (case-insensitive)
  2526. #ip.use_geoip: TRUE
  2527.  
  2528. # Whether to interpret the originally reserved flag as security flag
  2529. # TRUE or FALSE (case-insensitive)
  2530. #ip.security_flag: FALSE
  2531.  
  2532. # Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
  2533. # TRUE or FALSE (case-insensitive)
  2534. #ip.try_heuristic_first: FALSE
  2535.  
  2536. # Whether fragmented IPv6 datagrams should be reassembled
  2537. # TRUE or FALSE (case-insensitive)
  2538. #ipv6.defragment: TRUE
  2539.  
  2540. # Whether the IPv6 summary line should be shown in the protocol tree
  2541. # TRUE or FALSE (case-insensitive)
  2542. #ipv6.summary_in_tree: TRUE
  2543.  
  2544. # Whether to look up IPv6 addresses in each GeoIP database we have loaded
  2545. # TRUE or FALSE (case-insensitive)
  2546. #ipv6.use_geoip: TRUE
  2547.  
  2548. # Whether to check that all RPL Source Routed packets do not visit a node more than once
  2549. # TRUE or FALSE (case-insensitive)
  2550. #ipv6.perform_strict_rpl_srh_rfc_checking: FALSE
  2551.  
  2552. # Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
  2553. # TRUE or FALSE (case-insensitive)
  2554. #ipv6.try_heuristic_first: FALSE
  2555.  
  2556. # Whether to display IPv6 extension headers as a separate protocol or a sub-protocol of the IPv6 packet
  2557. # TRUE or FALSE (case-insensitive)
  2558. #ipv6.exthdr_under_root_protocol_tree: FALSE
  2559.  
  2560. # If enabled the Length field in octets will be hidden
  2561. # TRUE or FALSE (case-insensitive)
  2562. #ipv6.exthdr_hide_len_oct_field: FALSE
  2563.  
  2564. # The iSCSI protocol version
  2565. # One of: Draft 08, Draft 09, Draft 11, Draft 12, Draft 13
  2566. # (case-insensitive).
  2567. #iscsi.protocol_version: Draft 13
  2568.  
  2569. # Whether the iSCSI dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2570. # TRUE or FALSE (case-insensitive)
  2571. #iscsi.desegment_iscsi_messages: TRUE
  2572.  
  2573. # When enabled, packets that appear bogus are ignored
  2574. # TRUE or FALSE (case-insensitive)
  2575. #iscsi.bogus_pdu_filter: TRUE
  2576.  
  2577. # Ignore packets that haven't set the F bit when they should have
  2578. # TRUE or FALSE (case-insensitive)
  2579. #iscsi.demand_good_f_bit: FALSE
  2580.  
  2581. # Treat packets whose data segment length is greater than this value as bogus
  2582. # A decimal number
  2583. #iscsi.bogus_pdu_max_data_len: 262144
  2584.  
  2585. # Range of iSCSI target ports(default 3260)
  2586. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2587. #iscsi.target_ports: 3260
  2588.  
  2589. # System port number of iSCSI target
  2590. # A decimal number
  2591. #iscsi.target_system_port: 860
  2592.  
  2593. # The protocol running on the D channel
  2594. # One of: LAPD, DPNSS
  2595. # (case-insensitive).
  2596. #isdn.dchannel_protocol: LAPD
  2597.  
  2598. # Check to treat all traffic between the configured source/destination as iSER
  2599. # TRUE or FALSE (case-insensitive)
  2600. #iser.manual_en: FALSE
  2601.  
  2602. # Type of address specified
  2603. # One of: LID, GID
  2604. # (case-insensitive).
  2605. #iser.addr_a_type: LID
  2606.  
  2607. # LID/GID of address A
  2608. # A string
  2609. #iser.addr_a_id:
  2610.  
  2611. # QP Number for address A
  2612. # A decimal number
  2613. #iser.addr_a_qp: 0
  2614.  
  2615. # Type of address specified
  2616. # One of: LID, GID
  2617. # (case-insensitive).
  2618. #iser.addr_b_type: LID
  2619.  
  2620. # LID/GID of address B
  2621. # A string
  2622. #iser.addr_b_id:
  2623.  
  2624. # QP Number for address B
  2625. # A decimal number
  2626. #iser.addr_b_qp: 0
  2627.  
  2628. # Range of iSER target ports(default 3260)
  2629. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2630. #iser.target_ports: 3260
  2631.  
  2632. # The dynamic payload type which will be interpreted as ISMACryp
  2633. # A decimal number
  2634. #ismacryp.dynamic.payload.type: 0
  2635.  
  2636. # ISMACryp version
  2637. # One of: ISMACryp v1.1, ISMACryp v2.0
  2638. # (case-insensitive).
  2639. #ismacryp.version: ISMACryp v1.1
  2640.  
  2641. # Indicates whether or not the ISMACryp version deduced from RTP payload type, if present, is used or whether the version above is used
  2642. # TRUE or FALSE (case-insensitive)
  2643. #ismacryp.override_rtp_pt: FALSE
  2644.  
  2645. # Set the length of the IV in the ISMACryp AU Header in bytes
  2646. # A decimal number
  2647. #ismacryp.iv_length: 4
  2648.  
  2649. # Set the length of the Delta IV in the ISMACryp AU Header in bytes
  2650. # A decimal number
  2651. #ismacryp.delta_iv_length: 0
  2652.  
  2653. # Set the length of the Key Indicator in the ISMACryp AU Header in bytes
  2654. # A decimal number
  2655. #ismacryp.key_indicator_length: 0
  2656.  
  2657. # Indicates whether or not the Key Indicator is present in all AU Headers (T/F)
  2658. # TRUE or FALSE (case-insensitive)
  2659. #ismacryp.key_indicator_per_au_flag: FALSE
  2660.  
  2661. # Indicates whether or not selective encryption is enabled (T/F)
  2662. # TRUE or FALSE (case-insensitive)
  2663. #ismacryp.selective_encryption: TRUE
  2664.  
  2665. # Indicates whether or not slice start / end is present (T/F)
  2666. # TRUE or FALSE (case-insensitive)
  2667. #ismacryp.slice_indication: FALSE
  2668.  
  2669. # Indicates whether or not padding information is present (T/F)
  2670. # TRUE or FALSE (case-insensitive)
  2671. #ismacryp.padding_indication: FALSE
  2672.  
  2673. # RFC3640 mode
  2674. # One of: aac-hbr, mpeg4-video, avc-video
  2675. # (case-insensitive).
  2676. #ismacryp.rfc3640_mode: avc-video
  2677.  
  2678. # Indicates use of user mode instead of RFC3640 modes (T/F)
  2679. # TRUE or FALSE (case-insensitive)
  2680. #ismacryp.user_mode: FALSE
  2681.  
  2682. # Set the length of the AU size in the AU Header in bits
  2683. # A decimal number
  2684. #ismacryp.au_size_length: 0
  2685.  
  2686. # Set the length of the AU index in the AU Header in bits
  2687. # A decimal number
  2688. #ismacryp.au_index_length: 0
  2689.  
  2690. # Set the length of the AU delta index in the AU Header in bits
  2691. # A decimal number
  2692. #ismacryp.au_index_delta_length: 0
  2693.  
  2694. # Set the length of the CTS delta field in the AU Header in bits
  2695. # A decimal number
  2696. #ismacryp.cts_delta_length: 0
  2697.  
  2698. # Set the length of the DTS delta field in the AU Header in bits
  2699. # A decimal number
  2700. #ismacryp.dts_delta_length: 0
  2701.  
  2702. # Indicates whether or not the RAP field is present in the AU Header (T/F)
  2703. # TRUE or FALSE (case-insensitive)
  2704. #ismacryp.random_access_indication: FALSE
  2705.  
  2706. # Indicates the number of bits on which the stream state field is encoded in the AU Header (bits)
  2707. # A decimal number
  2708. #ismacryp.stream_state_indication: 0
  2709.  
  2710. # Whether the iSNS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2711. # TRUE or FALSE (case-insensitive)
  2712. #isns.desegment: TRUE
  2713.  
  2714. # Endian of the length field. Big endian or Little endian
  2715. # One of: Big endian, Little endian
  2716. # (case-insensitive).
  2717. #iso8583.len_endian: Little endian
  2718.  
  2719. # iso8583 TCP port
  2720. # A decimal number
  2721. #iso8583.tcp.port: 0
  2722.  
  2723. # charset for numbers
  2724. # One of: Digits represented as ASCII Characters, Digits represented in nibbles
  2725. # (case-insensitive).
  2726. #iso8583.charset: Digits represented as ASCII Characters
  2727.  
  2728. # binary data representation
  2729. # One of: Bin data represented as Hex Ascii characters, Bin data not encoded
  2730. # (case-insensitive).
  2731. #iso8583.binencode: Bin data represented as Hex Ascii characters
  2732.  
  2733. # Note national variants may not be fully supported
  2734. # One of: ITU Standard, French National Standard, Israeli National Standard, Russian National Standard, Japan National Standard, Japan National Standard (TTC)
  2735. # (case-insensitive).
  2736. #isup.variant: ITU Standard
  2737.  
  2738. # Show the CIC value (in addition to the message type) in the Info column
  2739. # TRUE or FALSE (case-insensitive)
  2740. #isup.show_cic_in_info: TRUE
  2741.  
  2742. # Whether APM messages datagrams should be reassembled
  2743. # TRUE or FALSE (case-insensitive)
  2744. #isup.defragment_apm: TRUE
  2745.  
  2746. # The MPLS label (aka Flow Bundle ID) used by ITDM traffic.
  2747. # A hexadecimal number
  2748. #itdm.mpls_label: 0x99887
  2749.  
  2750. # Flow Number used by I-TDM Control Protocol traffic.
  2751. # A decimal number
  2752. #itdm.ctl_flowno: 0
  2753.  
  2754. # Support Implementers Guide (version 01)
  2755. # TRUE or FALSE (case-insensitive)
  2756. #iua.support_ig: FALSE
  2757.  
  2758. # Use SAPI values as specified in TS 48 056
  2759. # TRUE or FALSE (case-insensitive)
  2760. #iua.use_gsm_sapi_values: TRUE
  2761.  
  2762. # Whether IuUP Payload bits should be dissected
  2763. # TRUE or FALSE (case-insensitive)
  2764. #iuup.dissect_payload: FALSE
  2765.  
  2766. # The payload contains a two byte pseudoheader indicating direction and circuit_id
  2767. # TRUE or FALSE (case-insensitive)
  2768. #iuup.two_byte_pseudoheader: FALSE
  2769.  
  2770. # The dynamic payload type which will be interpreted as IuUP
  2771. # A decimal number
  2772. #iuup.dynamic.payload.type: 0
  2773.  
  2774. # Whether the trailer summary line should be shown in the protocol tree
  2775. # TRUE or FALSE (case-insensitive)
  2776. #ixiatrailer.summary_in_tree: TRUE
  2777.  
  2778. # Set the port for JMirror Port (if other than the default of 30030)
  2779. # A decimal number
  2780. #jmirror.udp.port: 30030
  2781.  
  2782. # Enable to have correctly typed MIME media dissected as JXTA Messages.
  2783. # TRUE or FALSE (case-insensitive)
  2784. #jxta.msg.mediatype: TRUE
  2785.  
  2786. # Whether the JXTA dissector should reassemble messages spanning multiple UDP/TCP/SCTP segments. To use this option you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings and enable "Reassemble fragmented IP datagrams" in the IP protocol settings.
  2787. # TRUE or FALSE (case-insensitive)
  2788. #jxta.desegment: TRUE
  2789.  
  2790. # TCP Ports range
  2791. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2792. #kafka.tcp.ports:
  2793.  
  2794. # Set the port for Kismet Drone/Server messages (if other than the default of 2502)
  2795. # A decimal number
  2796. #kdsp.tcp.port: 2502
  2797.  
  2798. # Set the port for Kismet Client/Server messages (if other than the default of 2501)
  2799. # A decimal number
  2800. #kismet.tcp.port: 2501
  2801.  
  2802. # Set the SCTP port for kNet messages
  2803. # A decimal number
  2804. #knet.sctp.port: 2345
  2805.  
  2806. # Set the TCP port for kNet messages
  2807. # A decimal number
  2808. #knet.tcp.port: 2345
  2809.  
  2810. # Set the UDP port for kNet messages
  2811. # A decimal number
  2812. #knet.udp.port: 2345
  2813.  
  2814. # Whether the Kpasswd dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2815. # TRUE or FALSE (case-insensitive)
  2816. #kpasswd.desegment: TRUE
  2817.  
  2818. # Whether the Kerberos dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2819. # TRUE or FALSE (case-insensitive)
  2820. #kerberos.desegment: TRUE
  2821.  
  2822. # Whether the dissector should try to decrypt encrypted Kerberos blobs. This requires that the proper keytab file is installed as well.
  2823. # TRUE or FALSE (case-insensitive)
  2824. #kerberos.decrypt: FALSE
  2825.  
  2826. # The keytab file containing all the secrets
  2827. # A path to a file
  2828. #kerberos.file:
  2829.  
  2830. # TCP ports to be decoded as Kyoto Tycoon (binary protocol) (default: 1978-1979)
  2831. # A string denoting an positive integer range (e.g., "1-20,30-40")
  2832. #kt.tcp.ports: 1978-1979
  2833.  
  2834. # KT allows binary values in keys and values. Attempt to show an ASCII representation anyway (which might be prematurely terminated by a NULL!
  2835. # TRUE or FALSE (case-insensitive)
  2836. #kt.present_key_val_as_ascii: FALSE
  2837.  
  2838. # Whether the L&G 8979 dissector should desegment all messages spanning multiple TCP segments
  2839. # TRUE or FALSE (case-insensitive)
  2840. #lg8979.desegment: TRUE
  2841.  
  2842. # Set the TCP port for L&G 8979 Protocol packets (if other than the default of 0)
  2843. # A decimal number
  2844. #lg8979.tcp.port: 0
  2845.  
  2846. # L2TPv3 Cookie Size
  2847. # One of: Detect, None, 4 Byte Cookie, 8 Byte Cookie
  2848. # (case-insensitive).
  2849. #l2tp.cookie_size: Detect
  2850.  
  2851. # L2TPv3 L2-Specific Sublayer
  2852. # One of: Detect, None, Default L2-Specific, ATM-Specific, LAPD-Specific, DOCSIS DMPT-Specific
  2853. # (case-insensitive).
  2854. #l2tp.l2_specific: Detect
  2855.  
  2856. # Shared secret used for control message digest authentication
  2857. # A string
  2858. #l2tp.shared_secret:
  2859.  
  2860. # Use SAPI values as specified in TS 48 056
  2861. # TRUE or FALSE (case-insensitive)
  2862. #lapd.use_gsm_sapi_values: FALSE
  2863.  
  2864. # RTP payload type for embedded LAPD. It must be one of the dynamic types from 96 to 127. Set it to 0 to disable.
  2865. # A decimal number
  2866. #lapd.rtp_payload_type: 0
  2867.  
  2868. # SCTP Payload Protocol Identifier for LAPD. It is a 32 bits value from 0 to 4294967295. Set it to 0 to disable.
  2869. # A decimal number
  2870. #lapd.sctp_payload_protocol_identifier: 0
  2871.  
  2872. # Whether the dissector should defragment LAPDm messages spanning multiple packets.
  2873. # TRUE or FALSE (case-insensitive)
  2874. #lapdm.reassemble: TRUE
  2875.  
  2876. # Whether the Laplink dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2877. # TRUE or FALSE (case-insensitive)
  2878. #laplink.desegment_laplink_over_tcp: TRUE
  2879.  
  2880. # Set the SCTP port for LCSAP messages
  2881. # A decimal number
  2882. #lcsap.sctp.port: 9082
  2883.  
  2884. # Whether the LDAP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2885. # TRUE or FALSE (case-insensitive)
  2886. #ldap.desegment_ldap_messages: TRUE
  2887.  
  2888. # Set the port for LDAP operations
  2889. # A decimal number
  2890. #ldap.tcp.port: 389
  2891.  
  2892. # Set the port for LDAP operations over SSL
  2893. # A decimal number
  2894. #ldap.ssl.port: 636
  2895.  
  2896. # Set the TCP port for messages (if other than the default of 646)
  2897. # A decimal number
  2898. #ldp.tcp.port: 646
  2899.  
  2900. # Set the UDP port for messages (if other than the default of 646)
  2901. # A decimal number
  2902. #ldp.udp.port: 646
  2903.  
  2904. # Whether the LDP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  2905. # TRUE or FALSE (case-insensitive)
  2906. #ldp.desegment_ldp_messages: TRUE
  2907.  
  2908. # The UDP port on which Local Download Sharing Service broadcasts will be sent
  2909. # A decimal number
  2910. #ldss.udp_port: 6087
  2911.  
  2912. # Set UDP port for LGE Monitor messages
  2913. # A decimal number
  2914. #lge_monitor.udp.port: 0
  2915.  
  2916. # TCP port used by ENEA LINX, usually 19790
  2917. # A decimal number
  2918. #linxtcp.tcp.port: 0
  2919.  
  2920. # Dissect this ethertype as LLT traffic in addition to the default, 0xCAFE.
  2921. # A hexadecimal number
  2922. #llt.alternate_ethertype: 0
  2923.  
  2924. # UDP port number to use for LMP
  2925. # A decimal number
  2926. #lmp.udp_port: 701
  2927.  
  2928. # Whether LMP contains a checksum which can be checked
  2929. # TRUE or FALSE (case-insensitive)
  2930. #lmp.checksum: FALSE
  2931.  
  2932. # Use oneline info column by replace all new line characters by spaces
  2933. # TRUE or FALSE (case-insensitive)
  2934. #logcat.oneline_info_column: TRUE
  2935.  
  2936. # Set the TCP or UDP port for Pegasus LSC messages
  2937. # A decimal number
  2938. #lsc.port: 0
  2939.  
  2940. # The UDP or DCCP port to accept LTP Connections
  2941. # A decimal number
  2942. #ltp.port: 1113
  2943.  
  2944. # Swap frame control bytes (needed for some APs
  2945. # TRUE or FALSE (case-insensitive)
  2946. #lwapp.swap_fc: FALSE
  2947.  
  2948. # Whether to validate the LWL4 crc when crc bit is not set
  2949. # TRUE or FALSE (case-insensitive)
  2950. #lwl4.check_crc: TRUE
  2951.  
  2952. # 128-bit decryption key in hexadecimal format
  2953. # A string
  2954. #lwm.lwmes_key:
  2955.  
  2956. # Set the UDP port for lwres daemon(if other than the default of 921)
  2957. # A decimal number
  2958. #lwres.udp.lwres_port: 921
  2959.  
  2960. # Version used by Wireshark
  2961. # One of: Internet Draft version 2, Internet Draft version 8, RFC 4165
  2962. # (case-insensitive).
  2963. #m2pa.version: RFC 4165
  2964.  
  2965. # Set the port for M2PA messages (Default of 3565)
  2966. # A decimal number
  2967. #m2pa.port: 3565
  2968.  
  2969. # The value of the parameter tag for protocol data 1
  2970. # One of: 0x000e (Draft 7), 0x0300 (RFC3331)
  2971. # (case-insensitive).
  2972. #m2ua.protocol_data_1_tag: 0x0300 (RFC3331)
  2973.  
  2974. # Version used by Wireshark
  2975. # One of: Internet Draft version 5, Internet Draft version 6, Internet Draft version 7, RFC 4666
  2976. # (case-insensitive).
  2977. #m3ua.version: RFC 4666
  2978.  
  2979. # TSN size in bits, either 6 or 14 bit
  2980. # One of: 6 bits, 14 bits
  2981. # (case-insensitive).
  2982. #mac.tsn_size: 6 bits
  2983.  
  2984. # Number of Re-Transmits before expert warning triggered
  2985. # A decimal number
  2986. #mac-lte.retx_count_warn: 3
  2987.  
  2988. # Attempt to decode BCH, PCH and CCCH data using LTE RRC dissector
  2989. # TRUE or FALSE (case-insensitive)
  2990. #mac-lte.attempt_rrc_decode: TRUE
  2991.  
  2992. # Attempt to dissect frames that have failed CRC check
  2993. # TRUE or FALSE (case-insensitive)
  2994. #mac-lte.attempt_to_dissect_crc_failures: FALSE
  2995.  
  2996. # Will call LTE RLC dissector with standard settings as per RRC spec
  2997. # TRUE or FALSE (case-insensitive)
  2998. #mac-lte.attempt_to_dissect_srb_sdus: TRUE
  2999.  
  3000. # Will call LTE RLC dissector for MCH LCID 0
  3001. # TRUE or FALSE (case-insensitive)
  3002. #mac-lte.attempt_to_dissect_mcch: FALSE
  3003.  
  3004. # Call RLC dissector MTCH LCIDs
  3005. # TRUE or FALSE (case-insensitive)
  3006. #mac-lte.call_rlc_for_mtch: FALSE
  3007.  
  3008. # Set whether LCID -> drb Table is taken from static table (below) or from info learned from control protocol (e.g. RRC)
  3009. # One of: From static table, From configuration protocol
  3010. # (case-insensitive).
  3011. #mac-lte.lcid_to_drb_mapping_source: From static table
  3012.  
  3013. # If any BSR report is >= this number, an expert warning will be added
  3014. # A decimal number
  3015. #mac-lte.bsr_warn_threshold: 50
  3016.  
  3017. # Track status of SRs, providing links between requests, failure indications and grants
  3018. # TRUE or FALSE (case-insensitive)
  3019. #mac-lte.track_sr: TRUE
  3020.  
  3021. # Can show PHY, MAC or RLC layer info in Info column
  3022. # One of: PHY Info, MAC Info, RLC Info
  3023. # (case-insensitive).
  3024. #mac-lte.layer_to_show: RLC Info
  3025.  
  3026. # Attempt to decode 6 bytes of Contention Resolution body as an UL CCCH PDU
  3027. # TRUE or FALSE (case-insensitive)
  3028. #mac-lte.decode_cr_body: FALSE
  3029.  
  3030. # Apply DRX config and show DRX state within each UE
  3031. # TRUE or FALSE (case-insensitive)
  3032. #mac-lte.show_drx: FALSE
  3033.  
  3034. # Add as a generated field the middle of the range indicated by the BSR index
  3035. # TRUE or FALSE (case-insensitive)
  3036. #mac-lte.show_bsr_median: FALSE
  3037.  
  3038. # MAC-Telnet UDP port if other than the default
  3039. # A decimal number
  3040. #mactelnet.port: 20561
  3041.  
  3042. # The name of the file containing the mate module's configuration
  3043. # A path to a file
  3044. #mate.config:
  3045.  
  3046. # Set the port for Media Agnostic Packets
  3047. # A decimal number
  3048. #mausb.tcp.port: 0
  3049.  
  3050. # Set the port for Media Agnostic Packets
  3051. # A decimal number
  3052. #mausb.udp.port: 0
  3053.  
  3054. # Decode control data received on "usb.control" with an unknown interface class as MBIM
  3055. # TRUE or FALSE (case-insensitive)
  3056. #mbim.control_decode_unknown_itf: FALSE
  3057.  
  3058. # Format used for SMS PDU decoding
  3059. # One of: Automatic, 3GPP, 3GPP2
  3060. # (case-insensitive).
  3061. #mbim.sms_pdu_format: Automatic
  3062.  
  3063. # Set the UDP port for the MCPE Server
  3064. # A decimal number
  3065. #mcpe.udp.port: 19132
  3066.  
  3067. # A frame is considered for decoding as MDSHDR if either ethertype is 0xFCFC or zero. Turn this flag off if you don't want ethertype zero to be decoded as MDSHDR. This might be useful to avoid problems with test frames.
  3068. # TRUE or FALSE (case-insensitive)
  3069. #mdshdr.decode_if_etype_zero: FALSE
  3070.  
  3071. # Set the SCTP port for MEGACO text messages
  3072. # A decimal number
  3073. #megaco.sctp.txt_port: 2944
  3074.  
  3075. # Set the TCP port for MEGACO text messages
  3076. # A decimal number
  3077. #megaco.tcp.txt_port: 2944
  3078.  
  3079. # Set the UDP port for MEGACO text messages
  3080. # A decimal number
  3081. #megaco.udp.txt_port: 2944
  3082.  
  3083. # Specifies that the raw text of the MEGACO message should be displayed instead of (or in addition to) the dissection tree
  3084. # TRUE or FALSE (case-insensitive)
  3085. #megaco.display_raw_text: TRUE
  3086.  
  3087. # Specifies that the dissection tree of the MEGACO message should be displayed instead of (or in addition to) the raw text
  3088. # TRUE or FALSE (case-insensitive)
  3089. #megaco.display_dissect_tree: TRUE
  3090.  
  3091. # Maintain relationships between transactions and contexts and display an extra tree showing context data
  3092. # TRUE or FALSE (case-insensitive)
  3093. #megaco.ctx_info: FALSE
  3094.  
  3095. # Whether the MEMCACHE dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3096. # TRUE or FALSE (case-insensitive)
  3097. #memcache.desegment_headers: TRUE
  3098.  
  3099. # Whether the memcache dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3100. # TRUE or FALSE (case-insensitive)
  3101. #memcache.desegment_pdus: TRUE
  3102.  
  3103. # MEMCACHE TCP Port range
  3104. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3105. #memcache.tcp.ports: 11211
  3106.  
  3107. # MEMCACHE UDP Port range
  3108. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3109. #memcache.udp.ports: 11211
  3110.  
  3111. # Set the UDP port for gateway messages (if other than the default of 2427)
  3112. # A decimal number
  3113. #mgcp.tcp.gateway_port: 2427
  3114.  
  3115. # Set the TCP port for gateway messages (if other than the default of 2427)
  3116. # A decimal number
  3117. #mgcp.udp.gateway_port: 2427
  3118.  
  3119. # Set the TCP port for callagent messages (if other than the default of 2727)
  3120. # A decimal number
  3121. #mgcp.tcp.callagent_port: 2727
  3122.  
  3123. # Set the UDP port for callagent messages (if other than the default of 2727)
  3124. # A decimal number
  3125. #mgcp.udp.callagent_port: 2727
  3126.  
  3127. # Specifies that the raw text of the MGCP message should be displayed instead of (or in addition to) the dissection tree
  3128. # TRUE or FALSE (case-insensitive)
  3129. #mgcp.display_raw_text: FALSE
  3130.  
  3131. # Display the number of MGCP messages found in a packet in the protocol column.
  3132. # TRUE or FALSE (case-insensitive)
  3133. #mgcp.display_mgcp_message_count: FALSE
  3134.  
  3135. # Set the port for MIKEY messages (if other than the default of 2269)
  3136. # A decimal number
  3137. #mikey.udp.port: 2269
  3138.  
  3139. # Set the port for MIKEY messages (if other than the default of 2269)
  3140. # A decimal number
  3141. #mikey.tcp.port: 2269
  3142.  
  3143. # Display multipart bodies with no media type dissector as raw text (may cause problems with binary data).
  3144. # TRUE or FALSE (case-insensitive)
  3145. #mime_multipart.display_unknown_body_as_text: FALSE
  3146.  
  3147. # Remove any base64 content-transfer encoding from bodies. This supports export of the body and its further dissection.
  3148. # TRUE or FALSE (case-insensitive)
  3149. #mime_multipart.remove_base64_encoding: FALSE
  3150.  
  3151. # Register Format
  3152. # One of: UINT16 , INT16 , UINT32 , INT32 , IEEE FLT , MODICON FLT
  3153. # (case-insensitive).
  3154. #modbus.mbus_register_format: UINT16
  3155.  
  3156. # Whether the Modbus RTU dissector should desegment all messages spanning multiple TCP segments
  3157. # TRUE or FALSE (case-insensitive)
  3158. #mbrtu.desegment: TRUE
  3159.  
  3160. # Whether to validate the CRC
  3161. # TRUE or FALSE (case-insensitive)
  3162. #mbrtu.crc_verification: FALSE
  3163.  
  3164. # Set the TCP/UDP port for encapsulated Modbus RTU packets
  3165. # A decimal number
  3166. #mbrtu.tcp.port: 0
  3167.  
  3168. # Whether the Modbus RTU dissector should desegment all messages spanning multiple TCP segments
  3169. # TRUE or FALSE (case-insensitive)
  3170. #mbtcp.desegment: TRUE
  3171.  
  3172. # Set the TCP port for Modbus/TCP packets (if other than the default of 502)
  3173. # A decimal number
  3174. #mbtcp.tcp.port: 502
  3175.  
  3176. # Mojito UDP Port
  3177. # A decimal number
  3178. #mojito.udp.port: 0
  3179.  
  3180. # MoldUDP UDP port to capture on.
  3181. # A decimal number
  3182. #moldudp.udp.port: 0
  3183.  
  3184. # MoldUDP64 UDP port to dissect on.
  3185. # A decimal number
  3186. #moldudp64.udp.port: 0
  3187.  
  3188. # MONGO TCP port if other than the default
  3189. # A decimal number
  3190. #mongo.tcp.port: 27017
  3191.  
  3192. # The dynamic payload type which will be interpreted as MP4V-ES
  3193. # A decimal number
  3194. #mp4v-es.dynamic.payload.type: 0
  3195.  
  3196. # Whether the section dissector should verify the CRC or checksum
  3197. # TRUE or FALSE (case-insensitive)
  3198. #mpeg_dsmcc.verify_crc: FALSE
  3199.  
  3200. # Whether the section dissector should verify the CRC
  3201. # TRUE or FALSE (case-insensitive)
  3202. #mpeg_sect.verify_crc: FALSE
  3203.  
  3204. # Lowest label is used to segregate flows inside a pseudowire
  3205. # TRUE or FALSE (case-insensitive)
  3206. #mpls.flowlabel_in_mpls_header: FALSE
  3207.  
  3208. # Set the UDP port for messages (if other than the default of 3503)
  3209. # A decimal number
  3210. #mpls-echo.udp.port: 3503
  3211.  
  3212. # Enable to allow non-zero Length in Control Word. This may be needed to correctly decode traffic from some legacy devices which generate non-zero Length even if there is no padding in the packet. Note that Length should have proper value (dissector checks this anyway).
  3213. #
  3214. # Disable to blame all packets with CW.Length <> 0. This conforms to RFC4717.
  3215. # TRUE or FALSE (case-insensitive)
  3216. #mplspwatmaal5sdu.allow_cw_length_nonzero_aal5: FALSE
  3217.  
  3218. # Enable to use reserved bits (8..9) of Control Word as an extension of CW.Length. This may be needed to correctly decode traffic from some legacy devices which uses reserved bits as extension of Length
  3219. #
  3220. # Disable to blame all packets with CW.Reserved <> 0. This conforms to RFC4717.
  3221. # TRUE or FALSE (case-insensitive)
  3222. #mplspwatmaal5sdu.extend_cw_length_with_rsvd_aal5: FALSE
  3223.  
  3224. # Enable to allow non-zero Length in Control Word. This may be needed to correctly decode traffic from some legacy devices which generate non-zero Length even if there is no padding in the packet. Note that Length should have proper value (dissector checks this anyway).
  3225. #
  3226. # Disable to blame all packets with CW.Length <> 0. This conforms to RFC4717.
  3227. # TRUE or FALSE (case-insensitive)
  3228. #mplspwatmn1cw.allow_cw_length_nonzero: FALSE
  3229.  
  3230. # Enable to use reserved bits (8..9) of Control Word as an extension of CW.Length. This may be needed to correctly decode traffic from some legacy devices which uses reserved bits as extension of Length
  3231. #
  3232. # Disable to blame all packets with CW.Reserved <> 0. This conforms to RFC4717.
  3233. # TRUE or FALSE (case-insensitive)
  3234. #mplspwatmn1cw.extend_cw_length_with_rsvd: FALSE
  3235.  
  3236. # To use this option you must also enable "Analyze TCP sequence numbers".
  3237. # TRUE or FALSE (case-insensitive)
  3238. #mptcp.analyze_mptcp: TRUE
  3239.  
  3240. # In case you don't capture the key, it will use the first DSN seen
  3241. # TRUE or FALSE (case-insensitive)
  3242. #mptcp.relative_sequence_numbers: TRUE
  3243.  
  3244. # You need to capture the handshake for this to work."Map TCP subflows to their respective MPTCP connections"
  3245. # TRUE or FALSE (case-insensitive)
  3246. #mptcp.analyze_mappings: FALSE
  3247.  
  3248. # You need to enable DSS mapping analysis for this option to work
  3249. # TRUE or FALSE (case-insensitive)
  3250. #mptcp.intersubflows_retransmission: FALSE
  3251.  
  3252. # Whether the MQ dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3253. # TRUE or FALSE (case-insensitive)
  3254. #mq.desegment: TRUE
  3255.  
  3256. # Whether the MQ dissector should reassemble MQ messages spanning multiple TSH segments
  3257. # TRUE or FALSE (case-insensitive)
  3258. #mq.reassembly: TRUE
  3259.  
  3260. # When dissecting PCF there can be a lot of parameters. You can limit the number of parameter decoded, before it continue with the next PCF.
  3261. # A decimal number
  3262. #mqpcf.maxprm: 999
  3263.  
  3264. # When dissecting a parameter of a PCFm, if it is a StringList, IntegerList or Integer64 List, You can limit the number of elements displayed, before it continues with the next Parameter.
  3265. # A decimal number
  3266. #mqpcf.maxlst: 20000
  3267.  
  3268. # MRCPv2 TCP Ports Range
  3269. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3270. #mrcpv2.tcp.port_range: 6075,30000-30200
  3271.  
  3272. # Specifies that the raw text of the MSRP message should be displayed in addition to the dissection tree
  3273. # TRUE or FALSE (case-insensitive)
  3274. #msrp.display_raw_text: TRUE
  3275.  
  3276. # Where available, show which protocol and frame caused this MSRP stream to be created
  3277. # TRUE or FALSE (case-insensitive)
  3278. #msrp.show_setup_info: TRUE
  3279.  
  3280. # Whether the MTP2 dissector should use extended sequence numbers as described in Q.703, Annex A as a default.
  3281. # TRUE or FALSE (case-insensitive)
  3282. #mtp2.use_extended_sequence_numbers: FALSE
  3283.  
  3284. # This only works for SCCP traffic for now
  3285. # TRUE or FALSE (case-insensitive)
  3286. #mtp3.heuristic_standard: FALSE
  3287.  
  3288. # The SS7 standard used in MTP3 packets
  3289. # One of: ITU, ANSI, Chinese ITU, Japan
  3290. # (case-insensitive).
  3291. #mtp3.standard: ITU
  3292.  
  3293. # The structure of the pointcodes in ITU networks
  3294. # One of: Unstructured, 3-8-3, 4-3-4-3
  3295. # (case-insensitive).
  3296. #mtp3.itu_pc_structure: Unstructured
  3297.  
  3298. # The structure of the pointcodes in Japan networks
  3299. # One of: Unstructured, 7-4-5, 3-4-4-5
  3300. # (case-insensitive).
  3301. #mtp3.japan_pc_structure: Unstructured
  3302.  
  3303. # Use 5-bit (instead of 8-bit) SLS in ANSI MTP3 packets
  3304. # TRUE or FALSE (case-insensitive)
  3305. #mtp3.ansi_5_bit_sls: FALSE
  3306.  
  3307. # Use 5-bit (instead of 4-bit) SLS in Japan MTP3 packets
  3308. # TRUE or FALSE (case-insensitive)
  3309. #mtp3.japan_5_bit_sls: FALSE
  3310.  
  3311. # Format for point code in the address columns
  3312. # One of: Decimal, Hexadecimal, NI-Decimal, NI-Hexadecimal, Dashed
  3313. # (case-insensitive).
  3314. #mtp3.addr_format: Dashed
  3315.  
  3316. # Decode the spare bits of the SIO as the MSU priority (a national option in ITU)
  3317. # TRUE or FALSE (case-insensitive)
  3318. #mtp3.itu_priority: FALSE
  3319.  
  3320. # Whether the MySQL dissector should reassemble MySQL buffers spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3321. # TRUE or FALSE (case-insensitive)
  3322. #mysql.desegment_buffers: TRUE
  3323.  
  3324. # Whether the MySQL dissector should display the SQL query string in the INFO column.
  3325. # TRUE or FALSE (case-insensitive)
  3326. #mysql.show_sql_query: FALSE
  3327.  
  3328. # Always dissect NAS EPS messages as plain
  3329. # TRUE or FALSE (case-insensitive)
  3330. #nas-eps.dissect_plain: FALSE
  3331.  
  3332. # This should work when the NAS security algorithm is NULL (128-EEA0).
  3333. # TRUE or FALSE (case-insensitive)
  3334. #nas-eps.null_decipher: TRUE
  3335.  
  3336. # Whether the Nasdaq ITCH dissector should decode Chi X extensions.
  3337. # TRUE or FALSE (case-insensitive)
  3338. #nasdaq_itch.chi_x: TRUE
  3339.  
  3340. # Whether the Nasdaq-SoupTCP dissector should reassemble messages spanning multiple TCP segments.
  3341. # TRUE or FALSE (case-insensitive)
  3342. #nasdaq_soup.desegment: TRUE
  3343.  
  3344. # TCP Ports range
  3345. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3346. #nasdaq_soup.tcp.port:
  3347.  
  3348. # UDP port numbers used for NB RTPMUX traffic (default 0)
  3349. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3350. #nb_rtpmux.udp_ports: 0
  3351.  
  3352. # foo
  3353. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3354. # (case-insensitive).
  3355. #nbap.lch1_content: MAC_CONTENT_DCCH
  3356.  
  3357. # foo
  3358. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3359. # (case-insensitive).
  3360. #nbap.lch2_content: MAC_CONTENT_DCCH
  3361.  
  3362. # foo
  3363. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3364. # (case-insensitive).
  3365. #nbap.lch3_content: MAC_CONTENT_DCCH
  3366.  
  3367. # foo
  3368. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3369. # (case-insensitive).
  3370. #nbap.lch4_content: MAC_CONTENT_DCCH
  3371.  
  3372. # foo
  3373. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3374. # (case-insensitive).
  3375. #nbap.lch5_content: MAC_CONTENT_CS_DTCH
  3376.  
  3377. # foo
  3378. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3379. # (case-insensitive).
  3380. #nbap.lch6_content: MAC_CONTENT_CS_DTCH
  3381.  
  3382. # foo
  3383. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3384. # (case-insensitive).
  3385. #nbap.lch7_content: MAC_CONTENT_CS_DTCH
  3386.  
  3387. # foo
  3388. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3389. # (case-insensitive).
  3390. #nbap.lch8_content: MAC_CONTENT_DCCH
  3391.  
  3392. # foo
  3393. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3394. # (case-insensitive).
  3395. #nbap.lch9_content: MAC_CONTENT_PS_DTCH
  3396.  
  3397. # foo
  3398. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3399. # (case-insensitive).
  3400. #nbap.lch10_content: MAC_CONTENT_UNKNOWN
  3401.  
  3402. # foo
  3403. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3404. # (case-insensitive).
  3405. #nbap.lch11_content: MAC_CONTENT_PS_DTCH
  3406.  
  3407. # foo
  3408. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3409. # (case-insensitive).
  3410. #nbap.lch12_content: MAC_CONTENT_PS_DTCH
  3411.  
  3412. # foo
  3413. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3414. # (case-insensitive).
  3415. #nbap.lch13_content: MAC_CONTENT_CS_DTCH
  3416.  
  3417. # foo
  3418. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3419. # (case-insensitive).
  3420. #nbap.lch14_content: MAC_CONTENT_PS_DTCH
  3421.  
  3422. # foo
  3423. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3424. # (case-insensitive).
  3425. #nbap.lch15_content: MAC_CONTENT_CCCH
  3426.  
  3427. # foo
  3428. # One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
  3429. # (case-insensitive).
  3430. #nbap.lch16_content: MAC_CONTENT_DCCH
  3431.  
  3432. # Whether the NBD dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings
  3433. # TRUE or FALSE (case-insensitive)
  3434. #nbd.desegment_nbd_messages: TRUE
  3435.  
  3436. # Whether the NBSS dissector should reassemble packets spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3437. # TRUE or FALSE (case-insensitive)
  3438. #nbss.desegment_nbss_commands: TRUE
  3439.  
  3440. # Whether the NCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3441. # TRUE or FALSE (case-insensitive)
  3442. #ncp.desegment: TRUE
  3443.  
  3444. # Whether the NCP dissector should defragment NDS messages spanning multiple reply packets.
  3445. # TRUE or FALSE (case-insensitive)
  3446. #ncp.defragment_nds: TRUE
  3447.  
  3448. # Dissect the NetWare Information Structure as NetWare 5.x or higher or as older NetWare 3.x.
  3449. # TRUE or FALSE (case-insensitive)
  3450. #ncp.newstyle: TRUE
  3451.  
  3452. # Whether the NCP dissector should echo the NDS Entry ID to name resolves to the expert table.
  3453. # TRUE or FALSE (case-insensitive)
  3454. #ncp.eid_2_expert: TRUE
  3455.  
  3456. # Whether the NCP dissector should echo NCP connection information to the expert table.
  3457. # TRUE or FALSE (case-insensitive)
  3458. #ncp.connection_2_expert: FALSE
  3459.  
  3460. # Whether the NCP dissector should echo protocol errors to the expert table.
  3461. # TRUE or FALSE (case-insensitive)
  3462. #ncp.error_2_expert: TRUE
  3463.  
  3464. # Whether the NCP dissector should echo server information to the expert table.
  3465. # TRUE or FALSE (case-insensitive)
  3466. #ncp.server_2_expert: TRUE
  3467.  
  3468. # Whether the NCP dissector should echo file open/close/oplock information to the expert table.
  3469. # TRUE or FALSE (case-insensitive)
  3470. #ncp.file_2_expert: FALSE
  3471.  
  3472. # Version of the NDMP protocol to assume if the version can not be automatically detected from the capture
  3473. # One of: Version 2, Version 3, Version 4, Version 5
  3474. # (case-insensitive).
  3475. #ndmp.default_protocol_version: Version 4
  3476.  
  3477. # Whether the NDMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3478. # TRUE or FALSE (case-insensitive)
  3479. #ndmp.desegment: TRUE
  3480.  
  3481. # Whether the dissector should defragment NDMP messages spanning multiple packets.
  3482. # TRUE or FALSE (case-insensitive)
  3483. #ndmp.defragment: TRUE
  3484.  
  3485. # Whether the NDPS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3486. # TRUE or FALSE (case-insensitive)
  3487. #ndps.desegment_tcp: TRUE
  3488.  
  3489. # Whether the NDPS dissector should reassemble fragmented NDPS messages spanning multiple SPX packets
  3490. # TRUE or FALSE (case-insensitive)
  3491. #ndps.desegment_spx: TRUE
  3492.  
  3493. # Whether or not the NDPS dissector should show object id's and other details
  3494. # TRUE or FALSE (case-insensitive)
  3495. #ndps.show_oid: FALSE
  3496.  
  3497. # Whether the NetBIOS dissector should defragment messages spanning multiple frames
  3498. # TRUE or FALSE (case-insensitive)
  3499. #netbios.defragment: TRUE
  3500.  
  3501. # port if other than the default
  3502. # A decimal number
  3503. #netdump.udp.port: 0
  3504.  
  3505. # The TCP port on which Monotone Netsync packets will be sent
  3506. # A decimal number
  3507. #netsync.tcp_port: 5253
  3508.  
  3509. # Whether the Netsync dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3510. # TRUE or FALSE (case-insensitive)
  3511. #netsync.desegment_netsync_messages: TRUE
  3512.  
  3513. # Always dissect this port's traffic as newmail notifications. Additional ports will be dynamically registered as they are seen in MAPI register push notification packets.
  3514. # A decimal number
  3515. #newmail.default_port: 0
  3516.  
  3517. # Whether the dissector should snoop the FH to filename mappings by looking inside certain packets
  3518. # TRUE or FALSE (case-insensitive)
  3519. #nfs.file_name_snooping: FALSE
  3520.  
  3521. # Whether the dissector should snoop the full pathname for files for matching FH's
  3522. # TRUE or FALSE (case-insensitive)
  3523. #nfs.file_full_name_snooping: FALSE
  3524.  
  3525. # With this option display filters for nfs fhandles (nfs.fh.{name|full_name|hash}) will find both the request and response packets for a RPC call, even if the actual fhandle is only present in one of the packets
  3526. # TRUE or FALSE (case-insensitive)
  3527. #nfs.fhandle_find_both_reqrep: FALSE
  3528.  
  3529. # When enabled, this option will print the NFSv4 tag (if one exists) in the Info column in the Summary pane
  3530. # TRUE or FALSE (case-insensitive)
  3531. #nfs.display_nfsv4_tag: TRUE
  3532.  
  3533. # When enabled, shows only the significant NFSv4 Operations in the info column. Others (like GETFH, PUTFH, etc) are not displayed
  3534. # TRUE or FALSE (case-insensitive)
  3535. #nfs.display_major_nfsv4_ops: TRUE
  3536.  
  3537. # Whether the Authentication Extension data contains the source address. Some Cisco IOS implementations forgo this part of RFC2332.
  3538. # TRUE or FALSE (case-insensitive)
  3539. #nhrp.auth_ext_has_addr: TRUE
  3540.  
  3541. # Whether the dissector will track and match MSG and RES calls for asynchronous NLM
  3542. # TRUE or FALSE (case-insensitive)
  3543. #nlm.msg_res_matching: FALSE
  3544.  
  3545. # NT Password (used to decrypt payloads)
  3546. # A string
  3547. #ntlmssp.nt_password:
  3548.  
  3549. # Dissect custom olsr.org message types (compatible with rfc routing agents)
  3550. # TRUE or FALSE (case-insensitive)
  3551. #olsr.ff_olsrorg: TRUE
  3552.  
  3553. # Dissect custom nrlolsr tc message (incompatible with rfc routing agents)
  3554. # TRUE or FALSE (case-insensitive)
  3555. #olsr.nrlolsr: TRUE
  3556.  
  3557. # SSL/TLS Ports range
  3558. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3559. #opa.fe.ssl.port: 3249-3252
  3560.  
  3561. # TCP Ports range
  3562. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3563. #opa.fe.tcp.port: 3245-3248
  3564.  
  3565. # Attempt to parse mad payload even when MAD.Status is non-zero
  3566. # TRUE or FALSE (case-insensitive)
  3567. #opa.mad.parse_mad_error: FALSE
  3568.  
  3569. # The TCP ports for the OPC UA TCP Binary Protocol (comma separated list)
  3570. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3571. #opcua.tcp_ports: 4840
  3572.  
  3573. # OpenFlow TCP port (6653 is the IANA assigned port)
  3574. # A decimal number
  3575. #openflow.tcp.port: 6653
  3576.  
  3577. # Whether the OpenFlow dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3578. # TRUE or FALSE (case-insensitive)
  3579. #openflow.desegment: TRUE
  3580.  
  3581. # To be able to fully dissect SSDO and SPDO packages, a valid UDID for the SCM has to be provided
  3582. # A string
  3583. #opensafety.scm_udid: 00:00:00:00:00:00
  3584.  
  3585. # Automatically assign a detected SCM UDID (by reading SNMT->SNTM_assign_UDID_SCM) and set it for the file
  3586. # TRUE or FALSE (case-insensitive)
  3587. #opensafety.scm_udid_autoset: TRUE
  3588.  
  3589. # Port used by any UDP demo implementation to transport data
  3590. # A decimal number
  3591. #opensafety.network_udp_port: 9877
  3592.  
  3593. # UDP port used by SercosIII to transport data
  3594. # A decimal number
  3595. #opensafety.network_udp_port_sercosiii: 8755
  3596.  
  3597. # In an SercosIII/UDP transport stream, openSAFETY frame 2 will be expected before frame 1
  3598. # TRUE or FALSE (case-insensitive)
  3599. #opensafety.network_udp_frame_first_sercosiii: FALSE
  3600.  
  3601. # In the transport stream, openSAFETY frame 2 will be expected before frame 1
  3602. # TRUE or FALSE (case-insensitive)
  3603. #opensafety.network_udp_frame_first: FALSE
  3604.  
  3605. # Modbus/TCP words can be transcoded either big- or little endian. Default will be little endian
  3606. # TRUE or FALSE (case-insensitive)
  3607. #opensafety.mbtcp_big_endian: FALSE
  3608.  
  3609. # Enables additional information in the dissection for better debugging an openSAFETY trace
  3610. # TRUE or FALSE (case-insensitive)
  3611. #opensafety.debug_verbose: FALSE
  3612.  
  3613. # Enable heuristic dissection for openSAFETY over UDP encoded traffic
  3614. # TRUE or FALSE (case-insensitive)
  3615. #opensafety.enable_udp: TRUE
  3616.  
  3617. # Enable heuristic dissection for Modbus/TCP
  3618. # TRUE or FALSE (case-insensitive)
  3619. #opensafety.enable_mbtcp: TRUE
  3620.  
  3621. # Display the data between openSAFETY packets
  3622. # TRUE or FALSE (case-insensitive)
  3623. #opensafety.display_intergap_data: FALSE
  3624.  
  3625. # SPDOs may only be found in cyclic data, SSDOs/SNMTS only in acyclic data
  3626. # TRUE or FALSE (case-insensitive)
  3627. #opensafety.classify_transport: TRUE
  3628.  
  3629. # TCP Port of the OpenVPN tunnel
  3630. # A decimal number
  3631. #openvpn.tcp.port: 1194
  3632.  
  3633. # UDP Port of the OpenVPN tunnel
  3634. # A decimal number
  3635. #openvpn.udp.port: 1194
  3636.  
  3637. # If tls-auth detection fails, you can choose to override detection and set tls-auth yourself
  3638. # TRUE or FALSE (case-insensitive)
  3639. #openvpn.tls_auth_detection_override: FALSE
  3640.  
  3641. # If the parameter --tls-auth is used, the following preferences must also be defined.
  3642. # TRUE or FALSE (case-insensitive)
  3643. #openvpn.tls_auth: FALSE
  3644.  
  3645. # If the parameter --tls-auth is used, a HMAC header is being inserted.
  3646. # The default HMAC algorithm is SHA-1 which generates a 160 bit HMAC, therefore 20 bytes should be ok.
  3647. # The value must be between 20 (160 bits) and 64 (512 bits).
  3648. # A decimal number
  3649. #openvpn.tls_auth_hmac_size: 20
  3650.  
  3651. # If the parameter --tls-auth is used, an additional packet-id for replay protection is inserted after the HMAC signature. This field can either be 4 bytes or 8 bytes including an optional time_t timestamp long.
  3652. # This option is only evaluated if tls_auth_hmac_size > 0.
  3653. # The default value is TRUE.
  3654. # TRUE or FALSE (case-insensitive)
  3655. #openvpn.long_format: TRUE
  3656.  
  3657. # Whether the Openwire dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3658. # TRUE or FALSE (case-insensitive)
  3659. #openwire.desegment: TRUE
  3660.  
  3661. # Whether verbose type and length information are displayed in the protocol tree
  3662. # TRUE or FALSE (case-insensitive)
  3663. #openwire.verbose_type: FALSE
  3664.  
  3665. # Whether the OPSI dissector should desegment all messages spanning multiple TCP segments
  3666. # TRUE or FALSE (case-insensitive)
  3667. #opsi.desegment_opsi_messages: TRUE
  3668.  
  3669. # OptoMMP TCP or UDP port if other than the default
  3670. # A decimal number
  3671. #optommp.tcp.port: 0
  3672.  
  3673. # Set the TCP port for OSC
  3674. # A decimal number
  3675. #osc.tcp.port: 0
  3676.  
  3677. # TCP port for OSI over TPKT
  3678. # A decimal number
  3679. #osi.tpkt_port: 0
  3680.  
  3681. # Whether segmented TPKT datagrams should be reassembled
  3682. # TRUE or FALSE (case-insensitive)
  3683. #osi.tpkt_reassemble: FALSE
  3684.  
  3685. # Whether segmented RTSE datagrams should be reassembled. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3686. # TRUE or FALSE (case-insensitive)
  3687. #rtse.reassemble: TRUE
  3688.  
  3689. # Set the port for P1 operations (if other than the default of 102)
  3690. # A decimal number
  3691. #p1.tcp.port: 102
  3692.  
  3693. # Set the port for P7 operations (if other than the default of 102)
  3694. # A decimal number
  3695. #p7.tcp.port: 102
  3696.  
  3697. # Set the port for DAP operations (if other than the default of 102)
  3698. # A decimal number
  3699. #dap.tcp.port: 102
  3700.  
  3701. # Set the port for DISP operations (if other than the default of 102)
  3702. # A decimal number
  3703. #disp.tcp.port: 102
  3704.  
  3705. # Set the port for DOP operations (if other than the default of 102)
  3706. # A decimal number
  3707. #dop.tcp.port: 102
  3708.  
  3709. # Set the port for DSP operations (if other than the default of 102)
  3710. # A decimal number
  3711. #dsp.tcp.port: 102
  3712.  
  3713. # Whether the IDMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3714. # TRUE or FALSE (case-insensitive)
  3715. #idmp.desegment_idmp_messages: TRUE
  3716.  
  3717. # Whether segmented IDMP datagrams should be reassembled. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3718. # TRUE or FALSE (case-insensitive)
  3719. #idmp.reassemble: TRUE
  3720.  
  3721. # Set the port for Internet Directly Mapped Protocol requests/responses
  3722. # A decimal number
  3723. #idmp.tcp.port: 1102
  3724.  
  3725. # TCP Ports range
  3726. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3727. #ouch.tcp.port:
  3728.  
  3729. # Port numbers used for P_Mul traffic
  3730. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3731. #p_mul.udp_ports:
  3732.  
  3733. # Reassemble fragmented P_Mul packets
  3734. # TRUE or FALSE (case-insensitive)
  3735. #p_mul.reassemble: TRUE
  3736.  
  3737. # Make the P_Mul dissector use relative message id number instead of absolute ones
  3738. # TRUE or FALSE (case-insensitive)
  3739. #p_mul.relative_msgid: TRUE
  3740.  
  3741. # Calculate sequence/acknowledgement analysis
  3742. # TRUE or FALSE (case-insensitive)
  3743. #p_mul.seq_ack_analysis: TRUE
  3744.  
  3745. # Type of content in Data_PDU
  3746. # One of: No decoding, BER encoded ASN.1, Compressed Data Type
  3747. # (case-insensitive).
  3748. #p_mul.decode: No decoding
  3749.  
  3750. # UDP communication port for packetbb PDUs
  3751. # A decimal number
  3752. #packetbb.communication_port: 269
  3753.  
  3754. # Attempt to decode parts of the message that aren't fully understood yet
  3755. # TRUE or FALSE (case-insensitive)
  3756. #papi.experimental_decode: FALSE
  3757.  
  3758. # SCCP (and SUA) SSNs to decode as PCAP
  3759. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3760. #pcap.ssn:
  3761.  
  3762. # Whether the PCLI summary line should be shown in the protocol tree
  3763. # TRUE or FALSE (case-insensitive)
  3764. #pcli.summary_in_tree: TRUE
  3765.  
  3766. # PDC Port if other then the default
  3767. # A decimal number
  3768. #pdc.tcp.port: 0
  3769.  
  3770. # Show uncompressed User-Plane data as IP
  3771. # TRUE or FALSE (case-insensitive)
  3772. #pdcp-lte.show_user_plane_as_ip: TRUE
  3773.  
  3774. # Show unciphered Signalling-Plane data as RRC
  3775. # TRUE or FALSE (case-insensitive)
  3776. #pdcp-lte.show_signalling_plane_as_rrc: TRUE
  3777.  
  3778. # Do sequence number analysis
  3779. # One of: No-Analysis, Only-RLC-frames, Only-PDCP-frames
  3780. # (case-insensitive).
  3781. #pdcp-lte.check_sequence_numbers: Only-RLC-frames
  3782.  
  3783. # Attempt to decode ROHC data
  3784. # TRUE or FALSE (case-insensitive)
  3785. #pdcp-lte.dissect_rohc: FALSE
  3786.  
  3787. # Can show RLC, PDCP or Traffic layer info in Info column
  3788. # One of: RLC Info, PDCP Info, Traffic Info
  3789. # (case-insensitive).
  3790. #pdcp-lte.layer_to_show: RLC Info
  3791.  
  3792. # If RRC Security Info not seen, e.g. in Handover
  3793. # One of: EEA0 (NULL), EEA1 (SNOW3G), EEA2 (AES), EEA3 (ZUC)
  3794. # (case-insensitive).
  3795. #pdcp-lte.default_ciphering_algorithm: EEA0 (NULL)
  3796.  
  3797. # If RRC Security Info not seen, e.g. in Handover
  3798. # One of: EIA0 (NULL), EIA1 (SNOW3G), EIA2 (AES), EIA3 (ZUC)
  3799. # (case-insensitive).
  3800. #pdcp-lte.default_integrity_algorithm: EIA0 (NULL)
  3801.  
  3802. # N.B. only possible if build with algorithm support, and have key available and configured
  3803. # TRUE or FALSE (case-insensitive)
  3804. #pdcp-lte.decipher_signalling: TRUE
  3805.  
  3806. # N.B. only possible if build with algorithm support, and have key available and configured
  3807. # TRUE or FALSE (case-insensitive)
  3808. #pdcp-lte.decipher_userplane: FALSE
  3809.  
  3810. # N.B. only possible if build with algorithm support, and have key available and configured
  3811. # TRUE or FALSE (case-insensitive)
  3812. #pdcp-lte.verify_integrity: TRUE
  3813.  
  3814. # Whether the dissector should put the internal PER data in the tree or if it should hide it
  3815. # TRUE or FALSE (case-insensitive)
  3816. #per.display_internal_per_fields: FALSE
  3817.  
  3818. # Whether or not UID and PID fields are dissected in big or little endian
  3819. # TRUE or FALSE (case-insensitive)
  3820. #pflog.uid_endian: TRUE
  3821.  
  3822. # Whether to check the validity of the PGM checksum
  3823. # TRUE or FALSE (case-insensitive)
  3824. #pgm.check_checksum: TRUE
  3825.  
  3826. # PGM Encap is PGM packets encapsulated in UDP packets (Note: This option is off, i.e. port is 0, by default)
  3827. # A decimal number
  3828. #pgm.udp.encap_ucast_port: 0
  3829.  
  3830. # PGM Encap is PGM packets encapsulated in UDP packets (Note: This option is off, i.e. port is 0, by default)
  3831. # A decimal number
  3832. #pgm.udp.encap_mcast_port: 0
  3833.  
  3834. # Set the port for PGSQL messages (if different from the default of 5432)
  3835. # A decimal number
  3836. #pgsql.tcp.port: 5432
  3837.  
  3838. # Whether the PIM payload is shown off of the main tree or encapsulated within the PIM options
  3839. # TRUE or FALSE (case-insensitive)
  3840. #pim.payload_tree: TRUE
  3841.  
  3842. # The password to used to decrypt the encrypted elements within the PKCS#12 file
  3843. # A string
  3844. #pkcs12.password:
  3845.  
  3846. # Whether to try and decrypt the encrypted data within the PKCS#12 with a NULL password
  3847. # TRUE or FALSE (case-insensitive)
  3848. #pkcs12.try_null_password: FALSE
  3849.  
  3850. # Decode packets on this UDP port as PacketCable CCC
  3851. # A decimal number
  3852. #pkt_ccc.udp_port: 0
  3853.  
  3854. # Whether the PN-RT summary line should be shown in the protocol tree
  3855. # TRUE or FALSE (case-insensitive)
  3856. #pn_rt.summary_in_tree: TRUE
  3857.  
  3858. # Reassemble PNIO Fragments and get them decoded
  3859. # TRUE or FALSE (case-insensitive)
  3860. #pn_rt.desegment: TRUE
  3861.  
  3862. # Protocol payload type
  3863. # One of: Data, Sony FeliCa, NXP MiFare, ISO 7816
  3864. # (case-insensitive).
  3865. #pn532.prtype532: Data
  3866.  
  3867. # Whether the PNIO dissector is allowed to use detailed PROFIsafe dissection of cyclic data frames
  3868. # TRUE or FALSE (case-insensitive)
  3869. #pn_io.pnio_ps_selection: TRUE
  3870.  
  3871. # Select your Networkpath to your GSD-Files.
  3872. # A path to a directory
  3873. #pn_io.pnio_ps_networkpath:
  3874.  
  3875. # Whether the POP dissector should reassemble RETR and TOP responses and spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3876. # TRUE or FALSE (case-insensitive)
  3877. #pop.desegment_data: TRUE
  3878.  
  3879. # Whether fragmented 802.11 aggregated MPDUs should be reassembled
  3880. # TRUE or FALSE (case-insensitive)
  3881. #ppi.reassemble: TRUE
  3882.  
  3883. # The type of PPP frame checksum (none, 16-bit, 32-bit)
  3884. # One of: None, 16-Bit, 32-Bit
  3885. # (case-insensitive).
  3886. #ppp.fcs_type: None
  3887.  
  3888. # Default Protocol ID to be used for PPPMuxCP
  3889. # A hexadecimal number
  3890. #ppp.default_proto_id: 0
  3891.  
  3892. # Whether PPP Multilink frames use 12-bit sequence numbers
  3893. # TRUE or FALSE (case-insensitive)
  3894. #mp.short_seqno: FALSE
  3895.  
  3896. # Show values of tags and lengths of data fields
  3897. # TRUE or FALSE (case-insensitive)
  3898. #pppoed.show_tags_and_lengths: FALSE
  3899.  
  3900. # Enable this dissector (default is false)
  3901. # TRUE or FALSE (case-insensitive)
  3902. #prp.enable: FALSE
  3903.  
  3904. # Properly translates vendor specific opcodes
  3905. # One of: Unknown vendor, Eastman Kodak, Canon, Nikon, Casio EX-F1, Microsoft / MTP, Olympus E series
  3906. # (case-insensitive).
  3907. #ptpip.vendor: Unknown vendor
  3908.  
  3909. # Set the UDP port for pulse
  3910. # A decimal number
  3911. #pulse.udp.port: 539
  3912.  
  3913. # Whether the PVFS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3914. # TRUE or FALSE (case-insensitive)
  3915. #pvfs.desegment: TRUE
  3916.  
  3917. # Whether the Q.931 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  3918. # TRUE or FALSE (case-insensitive)
  3919. #q931.desegment_h323_messages: TRUE
  3920.  
  3921. # Reassemble segmented Q.931 messages (Q.931 - Annex H)
  3922. # TRUE or FALSE (case-insensitive)
  3923. #q931.reassembly: TRUE
  3924.  
  3925. # Decode ISO/IEC cause coding standard as ITU-T
  3926. # TRUE or FALSE (case-insensitive)
  3927. #q931.iso_iec_cause_coding: FALSE
  3928.  
  3929. # Type of Facility encoding
  3930. # One of: Dissect facility as QSIG, Dissect facility as ETSI
  3931. # (case-insensitive).
  3932. #q932.facility_encoding: Dissect facility as QSIG
  3933.  
  3934. # Set the UDP port for the Quake Server
  3935. # A decimal number
  3936. #quake.udp.port: 26000
  3937.  
  3938. # Set the UDP port for the Quake II Server
  3939. # A decimal number
  3940. #quake2.udp.port: 27910
  3941.  
  3942. # Set the UDP base port for the Quake III Arena Server
  3943. # A decimal number
  3944. #quake3.udp.arena_port: 27960
  3945.  
  3946. # Set the UDP base port for the Quake III Arena Master Server
  3947. # A decimal number
  3948. #quake3.udp.master_port: 27950
  3949.  
  3950. # Set the UDP port for the QuakeWorld Server
  3951. # A decimal number
  3952. #quakeworld.udp.port: 27500
  3953.  
  3954. # QUIC UDP port if other than the default
  3955. # A decimal number
  3956. #quic.udp.quic.port: 80
  3957.  
  3958. # QUICS (Secure) UDP port if other than the default
  3959. # A decimal number
  3960. #quic.udp.quics.port: 443
  3961.  
  3962. # Shared secret used to decode User Passwords and validate Response Authenticators
  3963. # A string
  3964. #radius.shared_secret:
  3965.  
  3966. # Whether to check or not if Response Authenticator is correct. You need to define shared secret for this to work.
  3967. # TRUE or FALSE (case-insensitive)
  3968. #radius.validate_authenticator: FALSE
  3969.  
  3970. # Whether to add or not to the tree the AVP's payload length
  3971. # TRUE or FALSE (case-insensitive)
  3972. #radius.show_length: FALSE
  3973.  
  3974. # A list of UDP ports to decode as RADIUS
  3975. # A string denoting an positive integer range (e.g., "1-20,30-40")
  3976. #radius.ports: 1645,1646,1700,1812,1813,3799
  3977.  
  3978. # The SCCP SubSystem Number for RANAP (default 142)
  3979. # A decimal number
  3980. #ranap.sccp_ssn: 142
  3981.  
  3982. # Attempt to dissect RRC message embedded in RRC-Container IE
  3983. # TRUE or FALSE (case-insensitive)
  3984. #ranap.dissect_rrc_container: FALSE
  3985.  
  3986. # Set the port for RDP operations (if other than the default of 3389)
  3987. # A decimal number
  3988. #rdp.tcp.port: 3389
  3989.  
  3990. # Where available, show which protocol and frame caused this RDT stream to be created
  3991. # TRUE or FALSE (case-insensitive)
  3992. #rdt.show_setup_info: TRUE
  3993.  
  3994. # Register a client UDP port for RDT traffic
  3995. # TRUE or FALSE (case-insensitive)
  3996. #rdt.register_udp_port: FALSE
  3997.  
  3998. # Set the UDP port for clients
  3999. # A decimal number
  4000. #rdt.default_udp_port: 6970
  4001.  
  4002. # Whether fragmented RELOAD datagrams should be reassembled
  4003. # TRUE or FALSE (case-insensitive)
  4004. #reload.defragment: TRUE
  4005.  
  4006. # Length of the NodeId as defined in the overlay.
  4007. # A decimal number
  4008. #reload.nodeid_length: 16
  4009.  
  4010. # topology plugin defined in the overlay
  4011. # A string
  4012. #reload.topology_plugin: CHORD-RELOAD
  4013.  
  4014. # riemann UDP port if other than the default
  4015. # A decimal number
  4016. #riemann.udp.port: 0
  4017.  
  4018. # riemann TCP port if other than the default
  4019. # A decimal number
  4020. #riemann.tcp.port: 0
  4021.  
  4022. # Display the third and forth bytes of the RIPv2 header as the Routing Domain field (introduced in RFC 1388 [January 1993] and obsolete as of RFC 1723 [November 1994])
  4023. # TRUE or FALSE (case-insensitive)
  4024. #rip.display_routing_domain: FALSE
  4025.  
  4026. # When enabled, try to reassemble SDUs from the various PDUs received
  4027. # TRUE or FALSE (case-insensitive)
  4028. #rlc.perform_reassembly: TRUE
  4029.  
  4030. # When enabled, if data is not present, don't report as an error, but instead add expert info to indicate that headers were omitted
  4031. # TRUE or FALSE (case-insensitive)
  4032. #rlc.header_only_mode: FALSE
  4033.  
  4034. # When enabled, rlc will assume all data is ciphered
  4035. # TRUE or FALSE (case-insensitive)
  4036. #rlc.ciphered_data: FALSE
  4037.  
  4038. # When enabled, rlc will try to decipher data. (Experimental)
  4039. # TRUE or FALSE (case-insensitive)
  4040. #rlc.try_decipher: FALSE
  4041.  
  4042. # LI size in bits, either 7 or 15 bit
  4043. # One of: 7 bits, 15 bits, Let upper layers decide
  4044. # (case-insensitive).
  4045. #rlc.li_size: Let upper layers decide
  4046.  
  4047. # Attempt to keep track of PDUs for AM channels, and point out problems
  4048. # One of: No-Analysis, Only-MAC-frames, Only-RLC-frames
  4049. # (case-insensitive).
  4050. #rlc-lte.do_sequence_analysis_am: Only-MAC-frames
  4051.  
  4052. # Attempt to keep track of PDUs for UM channels, and point out problems
  4053. # One of: No-Analysis, Only-MAC-frames, Only-RLC-frames
  4054. # (case-insensitive).
  4055. #rlc-lte.do_sequence_analysis: Only-MAC-frames
  4056.  
  4057. # Call PDCP dissector for signalling PDUs. Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
  4058. # TRUE or FALSE (case-insensitive)
  4059. #rlc-lte.call_pdcp_for_srb: TRUE
  4060.  
  4061. # Call PDCP dissector for user-plane PDUs. Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
  4062. # One of: Off, 7-bit SN, 12-bit SN, 15-bit SN, 18-bit SN, Use signalled value
  4063. # (case-insensitive).
  4064. #rlc-lte.call_pdcp_for_drb: Use signalled value
  4065.  
  4066. # Call RRC dissector for CCCH PDUs
  4067. # TRUE or FALSE (case-insensitive)
  4068. #rlc-lte.call_rrc_for_ccch: TRUE
  4069.  
  4070. # Call RRC dissector for MCCH PDUs Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
  4071. # TRUE or FALSE (case-insensitive)
  4072. #rlc-lte.call_rrc_for_mcch: FALSE
  4073.  
  4074. # Call ip dissector for MTCH PDUs Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
  4075. # TRUE or FALSE (case-insensitive)
  4076. #rlc-lte.call_ip_for_mtch: FALSE
  4077.  
  4078. # When enabled, if data is not present, don't report as an error, but instead add expert info to indicate that headers were omitted
  4079. # TRUE or FALSE (case-insensitive)
  4080. #rlc-lte.header_only_mode: FALSE
  4081.  
  4082. # When enabled, attempts to re-assemble upper-layer SDUs that are split over more than one RLC PDU. Note: does not currently support out-of-order or re-segmentation. N.B. sequence analysis must also be turned on in order for reassembly to work
  4083. # TRUE or FALSE (case-insensitive)
  4084. #rlc-lte.reassembly: TRUE
  4085.  
  4086. # Whether the RPC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4087. # TRUE or FALSE (case-insensitive)
  4088. #rpc.desegment_rpc_over_tcp: TRUE
  4089.  
  4090. # Whether the RPC dissector should defragment RPC-over-TCP messages.
  4091. # TRUE or FALSE (case-insensitive)
  4092. #rpc.defragment_rpc_over_tcp: TRUE
  4093.  
  4094. # Set the maximum size of RPCoverTCP PDUs. If the size field of the record marker is larger than this value it will not be considered a valid RPC PDU.
  4095. # A decimal number
  4096. #rpc.max_tcp_pdu_size: 4194304
  4097.  
  4098. # Whether the RPC dissector should attempt to dissect RPC PDUs containing programs that are not known to Wireshark. This will make the heuristics significantly weaker and elevate the risk for falsely identifying and misdissecting packets significantly.
  4099. # TRUE or FALSE (case-insensitive)
  4100. #rpc.dissect_unknown_programs: FALSE
  4101.  
  4102. # Whether the RPC dissector should attempt to locate RPC PDU boundaries when initial fragment alignment is not known. This may cause false positives, or slow operation.
  4103. # TRUE or FALSE (case-insensitive)
  4104. #rpc.find_fragment_start: FALSE
  4105.  
  4106. # Whether the RPCAP dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4107. # TRUE or FALSE (case-insensitive)
  4108. #rpcap.desegment_pdus: TRUE
  4109.  
  4110. # Whether the packets should be decoded according to the link-layer type.
  4111. # TRUE or FALSE (case-insensitive)
  4112. #rpcap.decode_content: TRUE
  4113.  
  4114. # Default link-layer type to use if an Open Reply packet has not been received.
  4115. # A decimal number
  4116. #rpcap.linktype: 4294967295
  4117.  
  4118. # Check to treat all traffic between the configured source/destination as RPCoRDMA
  4119. # TRUE or FALSE (case-insensitive)
  4120. #rpcordma.manual_en: FALSE
  4121.  
  4122. # Type of address specified
  4123. # One of: LID, GID
  4124. # (case-insensitive).
  4125. #rpcordma.addr_a_type: LID
  4126.  
  4127. # LID/GID of address A
  4128. # A string
  4129. #rpcordma.addr_a_id:
  4130.  
  4131. # QP Number for address A
  4132. # A decimal number
  4133. #rpcordma.addr_a_qp: 0
  4134.  
  4135. # Type of address specified
  4136. # One of: LID, GID
  4137. # (case-insensitive).
  4138. #rpcordma.addr_b_type: LID
  4139.  
  4140. # LID/GID of address B
  4141. # A string
  4142. #rpcordma.addr_b_id:
  4143.  
  4144. # QP Number for address B
  4145. # A decimal number
  4146. #rpcordma.addr_b_qp: 0
  4147.  
  4148. # Range of RPCoRDMA server ports(default 20049,2050)
  4149. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4150. #rpcordma.target_ports: 20049,2050
  4151.  
  4152. # RPKI-Router Protocol TCP port if other than the default
  4153. # A decimal number
  4154. #rpkirtr.tcp.rpkirtr.port: 323
  4155.  
  4156. # RPKI-Router Protocol TCP TLS port if other than the default
  4157. # A decimal number
  4158. #rpkirtr.tcp.rpkirtr_tls.port: 324
  4159.  
  4160. # Controls the display of the session's client username in the info column. This is only displayed if the packet containing it was seen during this capture session.
  4161. # TRUE or FALSE (case-insensitive)
  4162. #rsh.info_show_client_username: FALSE
  4163.  
  4164. # Controls the display of the session's server username in the info column. This is only displayed if the packet containing it was seen during this capture session.
  4165. # TRUE or FALSE (case-insensitive)
  4166. #rsh.info_show_server_username: TRUE
  4167.  
  4168. # Controls the display of the command being run on the server by this session in the info column. This is only displayed if the packet containing it was seen during this capture session.
  4169. # TRUE or FALSE (case-insensitive)
  4170. #rsh.info_show_command: FALSE
  4171.  
  4172. # Use ipaccess nanoBTS specific definitions for RSL
  4173. # TRUE or FALSE (case-insensitive)
  4174. #gsm_abis_rsl.use_ipaccess_rsl: FALSE
  4175.  
  4176. # Specifies whether Wireshark should decode and display sub-messages within BUNDLE messages
  4177. # TRUE or FALSE (case-insensitive)
  4178. #rsvp.process_bundle: TRUE
  4179.  
  4180. # Specifies how Wireshark should dissect generalized labels
  4181. # One of: data (no interpretation), SONET/SDH ("S, U, K, L, M" scheme), Wavelength Label (G.694 frequency grid), ODUk Label
  4182. # (case-insensitive).
  4183. #rsvp.generalized_label_options: data (no interpretation)
  4184.  
  4185. # Set the TCP port for RSYNC messages
  4186. # A decimal number
  4187. #rsync.tcp_port: 873
  4188.  
  4189. # Whether the RSYNC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4190. # TRUE or FALSE (case-insensitive)
  4191. #rsync.desegment: TRUE
  4192.  
  4193. # RTCDC SCTP PPID if other than the default
  4194. # A decimal number
  4195. #rtcdc.sctp.ppi: 50
  4196.  
  4197. # Where available, show which protocol and frame caused this RTCP stream to be created
  4198. # TRUE or FALSE (case-insensitive)
  4199. #rtcp.show_setup_info: TRUE
  4200.  
  4201. # Try to work out network delay by comparing time between packets as captured and delays as seen by endpoint
  4202. # TRUE or FALSE (case-insensitive)
  4203. #rtcp.show_roundtrip_calculation: FALSE
  4204.  
  4205. # Minimum (absolute) calculated roundtrip delay time in milliseconds that should be reported
  4206. # A decimal number
  4207. #rtcp.roundtrip_min_threshhold: 10
  4208.  
  4209. # Whether the RTMPT dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4210. # TRUE or FALSE (case-insensitive)
  4211. #rtmpt.desegment: TRUE
  4212.  
  4213. # The largest acceptable packet size for reassembly
  4214. # A decimal number
  4215. #rtmpt.max_packet_size: 32768
  4216.  
  4217. # Where available, show which protocol and frame caused this RTP stream to be created
  4218. # TRUE or FALSE (case-insensitive)
  4219. #rtp.show_setup_info: TRUE
  4220.  
  4221. # Whether subdissector can request RTP streams to be reassembled
  4222. # TRUE or FALSE (case-insensitive)
  4223. #rtp.desegment_rtp_streams: TRUE
  4224.  
  4225. # If an RTP version 0 packet is encountered, it can be treated as an invalid or ZRTP packet, a CLASSIC-STUN packet, or a T.38 packet
  4226. # One of: Invalid or ZRTP packets, STUN packets, CLASSIC-STUN packets, T.38 packets, SPRT packets
  4227. # (case-insensitive).
  4228. #rtp.version0_type: Invalid or ZRTP packets
  4229.  
  4230. # Payload Type for RFC2198 Redundant Audio Data
  4231. # A decimal number
  4232. #rtp.rfc2198_payload_type: 99
  4233.  
  4234. # This is the value of the Payload Type field that specifies RTP Events
  4235. # A decimal number
  4236. #rtpevent.event_payload_type_value: 101
  4237.  
  4238. # This is the value of the Payload Type field that specifies Cisco Named Signaling Events
  4239. # A decimal number
  4240. #rtpevent.cisco_nse_payload_type_value: 100
  4241.  
  4242. # This is the value of the Payload Type field that specifies RTP-MIDI
  4243. # A decimal number
  4244. #rtpmidi.midi_payload_type_value: 0
  4245.  
  4246. # RTPproxy TCP Port
  4247. # A decimal number
  4248. #rtpproxy.tcp.port: 22222
  4249.  
  4250. # RTPproxy UDP Port
  4251. # A decimal number
  4252. #rtpproxy.udp.port: 22222
  4253.  
  4254. # Specifies that RTP/RTCP/T.38/MSRP/etc streams are decoded based upon port numbers found in RTPproxy answers
  4255. # TRUE or FALSE (case-insensitive)
  4256. #rtpproxy.establish_conversation: TRUE
  4257.  
  4258. # Maximum timeout value in waiting for reply from RTPProxy (in milliseconds).
  4259. # A decimal number
  4260. #rtpproxy.reply.timeout: 1000
  4261.  
  4262. # Specifies the maximum number of samples dissected in a DATA_BATCH submessage. Increasing this value may affect performances if the trace has a lot of big batched samples.
  4263. # A decimal number
  4264. #rtps.max_batch_samples_dissected: 16
  4265.  
  4266. # Shows the Topic Name and Type Name of the samples.
  4267. # TRUE or FALSE (case-insensitive)
  4268. #rtps.enable_topic_info: FALSE
  4269.  
  4270. # RTSP TCP Ports range
  4271. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4272. #rtsp.tcp.port_range: 554,8554,7236
  4273.  
  4274. # Whether the RTSP dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4275. # TRUE or FALSE (case-insensitive)
  4276. #rtsp.desegment_headers: TRUE
  4277.  
  4278. # Whether the RTSP dissector should use the "Content-length:" value to desegment the body of a request spanning multiple TCP segments
  4279. # TRUE or FALSE (case-insensitive)
  4280. #rtsp.desegment_body: TRUE
  4281.  
  4282. # Set the port for RUA messages (Default of 29169)
  4283. # A decimal number
  4284. #rua.port: 29169
  4285.  
  4286. # Set the UDP port for Reliable UDP traffic
  4287. # A decimal number
  4288. #rudp.udp.port: 0
  4289.  
  4290. # Set the SCTP port for S1AP messages
  4291. # A decimal number
  4292. #s1ap.sctp.port: 36412
  4293.  
  4294. # Dissect TransparentContainers that are opaque to S1AP
  4295. # TRUE or FALSE (case-insensitive)
  4296. #s1ap.dissect_container: TRUE
  4297.  
  4298. # Show length of text field
  4299. # TRUE or FALSE (case-insensitive)
  4300. #sametime.show_length: FALSE
  4301.  
  4302. # reassemble packets
  4303. # TRUE or FALSE (case-insensitive)
  4304. #sametime.reassemble: TRUE
  4305.  
  4306. # port number for sametime traffic
  4307. # A decimal number
  4308. #sametime.tcp_port: 1533
  4309.  
  4310. # Whether the SASP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4311. # TRUE or FALSE (case-insensitive)
  4312. #sasp.desegment_sasp_messages: TRUE
  4313.  
  4314. # The source point code (usually MSC) (to determine whether message is uplink or downlink)
  4315. # A hexadecimal number
  4316. #sccp.source_pc: 0
  4317.  
  4318. # Show parameter length in the protocol tree
  4319. # TRUE or FALSE (case-insensitive)
  4320. #sccp.show_length: FALSE
  4321.  
  4322. # Whether SCCP messages should be reassembled
  4323. # TRUE or FALSE (case-insensitive)
  4324. #sccp.defragment_xudt: TRUE
  4325.  
  4326. # Whether to keep information about messages and their associations
  4327. # TRUE or FALSE (case-insensitive)
  4328. #sccp.trace_sccp: FALSE
  4329.  
  4330. # Show SLR, DLR, and CAUSE Parameters in the Information Column of the Summary
  4331. # TRUE or FALSE (case-insensitive)
  4332. #sccp.show_more_info: FALSE
  4333.  
  4334. # Set the source and destination addresses to the GT digits (if present). This may affect TCAP's ability to recognize which messages belong to which TCAP session.
  4335. # TRUE or FALSE (case-insensitive)
  4336. #sccp.set_addresses: FALSE
  4337.  
  4338. # The protocol which should be used to dissect the payload if nothing else has claimed it
  4339. # A string
  4340. #sccp.default_payload:
  4341.  
  4342. # Set the port for SCoP
  4343. #
  4344. # A decimal number
  4345. #scop.port: 17755
  4346.  
  4347. # Set the port for secured SCoP
  4348. #
  4349. # A decimal number
  4350. #scop.port_secure: 17756
  4351.  
  4352. # When Target Cannot Be Identified, Decode SCSI Messages As
  4353. # One of: Block Device, Sequential Device, Object Based Storage Device, Medium Changer Device, Multimedia Device
  4354. # (case-insensitive).
  4355. #scsi.decode_scsi_messages_as: Block Device
  4356.  
  4357. # Whether fragmented SCSI DATA IN/OUT transfers should be reassembled
  4358. # TRUE or FALSE (case-insensitive)
  4359. #scsi.defragment: FALSE
  4360.  
  4361. # Show source and destination port numbers in the protocol tree
  4362. # TRUE or FALSE (case-insensitive)
  4363. #sctp.show_port_numbers_in_tree: TRUE
  4364.  
  4365. # The type of checksum used in SCTP packets
  4366. # One of: None, Adler 32, CRC 32c, Automatic
  4367. # (case-insensitive).
  4368. #sctp.checksum: None
  4369.  
  4370. # Show always SCTP control chunks in the Info column
  4371. # TRUE or FALSE (case-insensitive)
  4372. #sctp.show_always_control_chunks: TRUE
  4373.  
  4374. # Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port or PPI
  4375. # TRUE or FALSE (case-insensitive)
  4376. #sctp.try_heuristic_first: FALSE
  4377.  
  4378. # Whether fragmented SCTP user messages should be reassembled
  4379. # TRUE or FALSE (case-insensitive)
  4380. #sctp.reassembly: TRUE
  4381.  
  4382. # Match TSNs and their SACKs
  4383. # TRUE or FALSE (case-insensitive)
  4384. #sctp.tsn_analysis: TRUE
  4385.  
  4386. # Dissect upper layer protocols
  4387. # TRUE or FALSE (case-insensitive)
  4388. #sctp.ulp_dissection: TRUE
  4389.  
  4390. # Data rate
  4391. # One of: Attempt to guess, OC-3, OC-12, OC-24, OC-48
  4392. # (case-insensitive).
  4393. #sdh.data.rate: OC-3
  4394.  
  4395. # Specifies that RTP/RTCP/T.38/MSRP/etc streams are decoded based upon port numbers found in SDP payload
  4396. # TRUE or FALSE (case-insensitive)
  4397. #sdp.establish_conversation: TRUE
  4398.  
  4399. # Whether the SEL Protocol dissector should desegment all messages spanning multiple TCP segments
  4400. # TRUE or FALSE (case-insensitive)
  4401. #selfm.desegment: TRUE
  4402.  
  4403. # Whether the SEL Protocol dissector should automatically pre-process Telnet data to remove duplicate 0xFF IAC bytes
  4404. # TRUE or FALSE (case-insensitive)
  4405. #selfm.telnetclean: TRUE
  4406.  
  4407. # Set the TCP port for SEL FM Protocol packets (if other than the default of 0)
  4408. # A decimal number
  4409. #selfm.tcp.port: 0
  4410.  
  4411. # Perform CRC16 validation on Fast Messages
  4412. # TRUE or FALSE (case-insensitive)
  4413. #selfm.crc_verification: FALSE
  4414.  
  4415. # List of word bits contained in SER equations (Comma-separated, no Quotes or Checksums)
  4416. # A string
  4417. #selfm.ser_list:
  4418.  
  4419. # Whether the session dissector should reassemble messages spanning multiple SES segments
  4420. # TRUE or FALSE (case-insensitive)
  4421. #ses.desegment: TRUE
  4422.  
  4423. # Set the port(s) for sFlow messages (default: 6343)
  4424. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4425. #sflow.ports: 6343
  4426.  
  4427. # Enabling dissection makes it easy to view protocol details in each of the sampled headers. Disabling dissection may reduce noise caused when display filters match the contents of any sampled header(s).
  4428. # TRUE or FALSE (case-insensitive)
  4429. #sflow.enable_dissection: TRUE
  4430.  
  4431. # This option only makes sense if dissection of sampled headers is enabled and probably not even then.
  4432. # TRUE or FALSE (case-insensitive)
  4433. #sflow.enable_analysis: FALSE
  4434.  
  4435. # Port numbers used for SGsAP traffic (default 29118)
  4436. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4437. #sgsap.sctp_ports: 29118
  4438.  
  4439. # Set UDP port 1 for SigComp messages
  4440. # A decimal number
  4441. #sigcomp.udp.port: 5555
  4442.  
  4443. # Set UDP port 2 for SigComp messages
  4444. # A decimal number
  4445. #sigcomp.udp.port2: 6666
  4446.  
  4447. # Set TCP port 1 for SigComp messages
  4448. # A decimal number
  4449. #sigcomp.tcp.port: 5555
  4450.  
  4451. # Set TCP port 2 for SigComp messages
  4452. # A decimal number
  4453. #sigcomp.tcp.port2: 6666
  4454.  
  4455. # Preference whether to Dissect the UDVM code or not
  4456. # TRUE or FALSE (case-insensitive)
  4457. #sigcomp.display.udvm.code: TRUE
  4458.  
  4459. # preference whether to display the bytecode in UDVM operands or not
  4460. # TRUE or FALSE (case-insensitive)
  4461. #sigcomp.display.bytecode: FALSE
  4462.  
  4463. # preference whether to decompress message or not
  4464. # TRUE or FALSE (case-insensitive)
  4465. #sigcomp.decomp.msg: TRUE
  4466.  
  4467. # preference whether to display the decompressed message as raw text or not
  4468. # TRUE or FALSE (case-insensitive)
  4469. #sigcomp.display.decomp.msg.as.txt: FALSE
  4470.  
  4471. # 'No-Printout' = UDVM executes silently, then increasing detail about execution of UDVM instructions; Warning! CPU intense at high detail
  4472. # One of: No-Printout, Low-detail, Medium-detail, High-detail
  4473. # (case-insensitive).
  4474. #sigcomp.show.udvm.execution: No-Printout
  4475.  
  4476. # Set the TCP port for Simulcrypt messages ('0' means no port is assigned)
  4477. # A decimal number
  4478. #simulcrypt.tcp.port: 0
  4479.  
  4480. # Set the UDP port for Simulcrypt messages ('0' means no port is assigned)
  4481. # A decimal number
  4482. #simulcrypt.udp.port: 0
  4483.  
  4484. # Set the CA_system_ID used to decode ECM datagram as MIKEY
  4485. # A hexadecimal number
  4486. #simulcrypt.ca_system_id_mikey: 0x9999
  4487.  
  4488. # TCP ports to be decoded as SIP (default: 5060)
  4489. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4490. #sip.tcp.ports: 5060
  4491.  
  4492. # SIP Server TLS Port
  4493. # A decimal number
  4494. #sip.tls.port: 5061
  4495.  
  4496. # Specifies that the raw text of the SIP message should be displayed in addition to the dissection tree
  4497. # TRUE or FALSE (case-insensitive)
  4498. #sip.display_raw_text: FALSE
  4499.  
  4500. # If the raw text of the SIP message is displayed, the trailing carriage return and line feed are not shown
  4501. # TRUE or FALSE (case-insensitive)
  4502. #sip.display_raw_text_without_crlf: FALSE
  4503.  
  4504. # If enabled, only SIP/2.0 traffic will be dissected as SIP. Disable it to allow SIP traffic with a different version to be dissected as SIP.
  4505. # TRUE or FALSE (case-insensitive)
  4506. #sip.strict_sip_version: TRUE
  4507.  
  4508. # Whether the SIP dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4509. # TRUE or FALSE (case-insensitive)
  4510. #sip.desegment_headers: TRUE
  4511.  
  4512. # Whether the SIP dissector should use the "Content-length:" value, if present, to reassemble the body of a request spanning multiple TCP segments, and reassemble chunked data spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4513. # TRUE or FALSE (case-insensitive)
  4514. #sip.desegment_body: TRUE
  4515.  
  4516. # Whether retransmissions are detected coming from the same source port only.
  4517. # TRUE or FALSE (case-insensitive)
  4518. #sip.retrans_the_same_sport: TRUE
  4519.  
  4520. # Whether SIP should delay tracking the media (e.g., RTP/RTCP) until an SDP offer is answered. If enabled, mid-dialog changes to SDP and media state only take effect if and when an SDP offer is successfully answered; however enabling this prevents tracking media in early-media call scenarios
  4521. # TRUE or FALSE (case-insensitive)
  4522. #sip.delay_sdp_changes: FALSE
  4523.  
  4524. # Whether the SCCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4525. # TRUE or FALSE (case-insensitive)
  4526. #skinny.desegment: TRUE
  4527.  
  4528. # Whether the dissector should reassemble the payload of SMB Transaction commands spanning multiple SMB PDUs
  4529. # TRUE or FALSE (case-insensitive)
  4530. #smb.trans_reassembly: TRUE
  4531.  
  4532. # Whether the dissector should reassemble DCERPC over SMB commands
  4533. # TRUE or FALSE (case-insensitive)
  4534. #smb.dcerpc_reassembly: TRUE
  4535.  
  4536. # Whether the dissector should snoop SMB and related CIFS protocols to discover and display Names associated with SIDs
  4537. # TRUE or FALSE (case-insensitive)
  4538. #smb.sid_name_snooping: FALSE
  4539.  
  4540. # Whether the dissector should display SIDs and RIDs in hexadecimal rather than decimal
  4541. # TRUE or FALSE (case-insensitive)
  4542. #smb.sid_display_hex: FALSE
  4543.  
  4544. # Whether the export object functionality will take the full path file name as file identifier
  4545. # TRUE or FALSE (case-insensitive)
  4546. #smb.eosmb_take_name_as_fid: FALSE
  4547.  
  4548. # Whether the export object functionality will take the full path file name as file identifier
  4549. # TRUE or FALSE (case-insensitive)
  4550. #smb2.eosmb2_take_name_as_fid: FALSE
  4551.  
  4552. # Whether the dissector should reassemble Named Pipes over SMB2 commands
  4553. # TRUE or FALSE (case-insensitive)
  4554. #smb2.pipe_reassembly: TRUE
  4555.  
  4556. # Whether the SMB Direct dissector should reassemble fragmented payloads
  4557. # TRUE or FALSE (case-insensitive)
  4558. #smb_direct.reassemble_smb_direct: TRUE
  4559.  
  4560. # Enable reassembling (default is enabled)
  4561. # TRUE or FALSE (case-insensitive)
  4562. #sml.reassemble: TRUE
  4563.  
  4564. # Enable crc (default is disabled)
  4565. # TRUE or FALSE (case-insensitive)
  4566. #sml.crc: FALSE
  4567.  
  4568. # Set the TCP port for SML (Default is 0), recommended port is 7259
  4569. # A decimal number
  4570. #sml.tcp.port: 0
  4571.  
  4572. # Set the UDP port for SML (Default is 0), recommended port is 7259
  4573. # A decimal number
  4574. #sml.udp.port: 0
  4575.  
  4576. # Whether the SMPP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4577. # TRUE or FALSE (case-insensitive)
  4578. #smpp.reassemble_smpp_over_tcp: TRUE
  4579.  
  4580. # Whether the SMTP dissector should reassemble command and response lines spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4581. # TRUE or FALSE (case-insensitive)
  4582. #smtp.desegment_lines: TRUE
  4583.  
  4584. # Whether the SMTP dissector should reassemble DATA command and lines spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4585. # TRUE or FALSE (case-insensitive)
  4586. #smtp.desegment_data: TRUE
  4587.  
  4588. # Whether the SMTP dissector should decode base-64-encoded AUTH parameters
  4589. # TRUE or FALSE (case-insensitive)
  4590. #smtp.decryption: FALSE
  4591.  
  4592. # Whether fragmented BIUs should be reassembled
  4593. # TRUE or FALSE (case-insensitive)
  4594. #sna.defragment: TRUE
  4595.  
  4596. # Whether the SNMP OID should be shown in the info column
  4597. # TRUE or FALSE (case-insensitive)
  4598. #snmp.display_oid: TRUE
  4599.  
  4600. # Whether the SNMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4601. # TRUE or FALSE (case-insensitive)
  4602. #snmp.desegment: TRUE
  4603.  
  4604. # ON - display dissected variables inside SNMP tree, OFF - display dissected variables in root tree after SNMP
  4605. # TRUE or FALSE (case-insensitive)
  4606. #snmp.var_in_tree: TRUE
  4607.  
  4608. # Whether the SoulSeek dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4609. # TRUE or FALSE (case-insensitive)
  4610. #slsk.desegment: TRUE
  4611.  
  4612. # Whether the SoulSeek dissector should decompress all zlib compressed packets inside messages
  4613. # TRUE or FALSE (case-insensitive)
  4614. #slsk.decompress: TRUE
  4615.  
  4616. # Whether the SoupBinTCP dissector should reassemble messages spanning multiple TCP segments.
  4617. # TRUE or FALSE (case-insensitive)
  4618. #soupbintcp.desegment: TRUE
  4619.  
  4620. # TCP Ports range
  4621. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4622. #soupbintcp.tcp.port:
  4623.  
  4624. # Whether the SPDY dissector should reassemble multiple data frames into an entity body.
  4625. # TRUE or FALSE (case-insensitive)
  4626. #spdy.assemble_data_frames: TRUE
  4627.  
  4628. # Whether to uncompress SPDY headers.
  4629. # TRUE or FALSE (case-insensitive)
  4630. #spdy.decompress_headers: TRUE
  4631.  
  4632. # Whether to uncompress entity bodies that are compressed using "Content-Encoding: "
  4633. # TRUE or FALSE (case-insensitive)
  4634. #spdy.decompress_body: TRUE
  4635.  
  4636. # Where available, show which protocol and frame caused this SPRT stream to be created
  4637. # TRUE or FALSE (case-insensitive)
  4638. #sprt.show_setup_info: TRUE
  4639.  
  4640. # Show the DLCI field in I_OCTET messages as well as the frame that enabled/disabled the DLCI
  4641. # TRUE or FALSE (case-insensitive)
  4642. #sprt.show_dlci_info: TRUE
  4643.  
  4644. # Whether the SRVLOC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4645. # TRUE or FALSE (case-insensitive)
  4646. #srvloc.desegment_tcp: TRUE
  4647.  
  4648. # Set the UDP port for SSCOP messages encapsulated in UDP (0 to disable)
  4649. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4650. #sscop.udp.ports:
  4651.  
  4652. # SSCOP payload (dissector to call on SSCOP payload)
  4653. # One of: Data (no further dissection), Q.2931, SSCF-NNI (MTP3-b), ALCAP, NBAP
  4654. # (case-insensitive).
  4655. #sscop.payload: Q.2931
  4656.  
  4657. # Whether the SSH dissector should reassemble SSH buffers spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4658. # TRUE or FALSE (case-insensitive)
  4659. #ssh.desegment_buffers: TRUE
  4660.  
  4661. # Redirect SSL debug to the file specified. Leave empty to disable debugging or use "-" to redirect output to stderr.
  4662. # A path to a file
  4663. #ssl.debug_file:
  4664.  
  4665. # Whether the SSL dissector should reassemble SSL records spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4666. # TRUE or FALSE (case-insensitive)
  4667. #ssl.desegment_ssl_records: TRUE
  4668.  
  4669. # Whether the SSL dissector should reassemble SSL Application Data spanning multiple SSL records.
  4670. # TRUE or FALSE (case-insensitive)
  4671. #ssl.desegment_ssl_application_data: TRUE
  4672.  
  4673. # For troubleshooting ignore the mac check result and decrypt also if the Message Authentication Code (MAC) fails.
  4674. # TRUE or FALSE (case-insensitive)
  4675. #ssl.ignore_ssl_mac_failed: FALSE
  4676.  
  4677. # Pre-Shared-Key as HEX string. Should be 0 to 16 bytes.
  4678. # A string
  4679. #ssl.psk:
  4680.  
  4681. # The name of a file which contains a list of
  4682. # (pre-)master secrets in one of the following formats:
  4683. #
  4684. # RSA <EPMS> <PMS>
  4685. # RSA Session-ID:<SSLID> Master-Key:<MS>
  4686. # CLIENT_RANDOM <CRAND> <MS>
  4687. # PMS_CLIENT_RANDOM <CRAND> <PMS>
  4688. #
  4689. # Where:
  4690. # <EPMS> = First 8 bytes of the Encrypted PMS
  4691. # <PMS> = The Pre-Master-Secret (PMS) used to derive the MS
  4692. # <SSLID> = The SSL Session ID
  4693. # <MS> = The Master-Secret (MS)
  4694. # <CRAND> = The Client's random number from the ClientHello message
  4695. #
  4696. # (All fields are in hex notation)
  4697. # A path to a file
  4698. #ssl.keylog_file:
  4699.  
  4700. # Whether the STANAG 5066 DTS Layer dissector should reassemble DPDUs spanning multiple TCP segments
  4701. # TRUE or FALSE (case-insensitive)
  4702. #s5066dts.proto_desegment: TRUE
  4703.  
  4704. # Set the port for STANAG 5066 DTS Layer. (If other than the default 5067.)
  4705. # A decimal number
  4706. #s5066dts.tcp.port: 0
  4707.  
  4708. # Whether the S5066 SIS dissector should reassemble PDUs spanning multiple TCP segments. The default is to use reassembly.
  4709. # TRUE or FALSE (case-insensitive)
  4710. #s5066sis.desegment_pdus: TRUE
  4711.  
  4712. # Whether the S5066 SIS dissector should dissect this edition of the STANAG. This edition was never formally approved and is very rare. The common edition is edition 1.2.
  4713. # TRUE or FALSE (case-insensitive)
  4714. #s5066sis.edition_one: FALSE
  4715.  
  4716. # Set the port for STANAG 5066 SIS. (If other than the default 5066. This number is registered with IANA.)
  4717. # A decimal number
  4718. #s5066sis.tcp.port: 5066
  4719.  
  4720. # Whether the StarTeam dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4721. # TRUE or FALSE (case-insensitive)
  4722. #starteam.desegment: TRUE
  4723.  
  4724. # Whether the BPDU dissector should use 802.1t System ID Extensions when dissecting the Bridge Identifier
  4725. # TRUE or FALSE (case-insensitive)
  4726. #stp.use_system_id_extension: TRUE
  4727.  
  4728. # Reassembles greater than MTU sized STT packets broken into segments on transmit
  4729. # TRUE or FALSE (case-insensitive)
  4730. #stt.reassemble: TRUE
  4731.  
  4732. # Whether to validate the STT checksum or not.
  4733. # TRUE or FALSE (case-insensitive)
  4734. #stt.check_checksum: FALSE
  4735.  
  4736. # Version used by Wireshark
  4737. # One of: Internet Draft version 08, RFC 3868
  4738. # (case-insensitive).
  4739. #sua.version: RFC 3868
  4740.  
  4741. # Set the source and destination addresses to the PC or GT digits, depending on the routing indicator. This may affect TCAP's ability to recognize which messages belong to which TCAP session.
  4742. # TRUE or FALSE (case-insensitive)
  4743. #sua.set_addresses: FALSE
  4744.  
  4745. # No description
  4746. # TRUE or FALSE (case-insensitive)
  4747. #sv.decode_data_as_phsmeas: FALSE
  4748.  
  4749. # Set the port number for synchrophasor frames over UDP(if other than the default of 4713)
  4750. # A decimal number
  4751. #synphasor.udp_port: 4713
  4752.  
  4753. # Set the port number for synchrophasor frames over TCP(if other than the default of 4712)
  4754. # A decimal number
  4755. #synphasor.tcp_port: 4712
  4756.  
  4757. # Whether the T.38 dissector should decode using the Pre-Corrigendum T.38 ASN.1 specification (1998).
  4758. # TRUE or FALSE (case-insensitive)
  4759. #t38.use_pre_corrigendum_asn1_specification: TRUE
  4760.  
  4761. # Whether a UDP packet that looks like RTP version 2 packet will be dissected as RTP packet or T.38 packet. If enabled there is a risk that T.38 UDPTL packets with sequence number higher than 32767 may be dissected as RTP.
  4762. # TRUE or FALSE (case-insensitive)
  4763. #t38.dissect_possible_rtpv2_packets_as_rtp: FALSE
  4764.  
  4765. # Whether the dissector should reassemble T.38 PDUs spanning multiple TCP segments when TPKT is used over TCP. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4766. # TRUE or FALSE (case-insensitive)
  4767. #t38.reassembly: TRUE
  4768.  
  4769. # Whether T.38 is used with TPKT for TCP
  4770. # One of: Never, Always, Maybe
  4771. # (case-insensitive).
  4772. #t38.tpkt_usage: Maybe
  4773.  
  4774. # Where available, show which protocol and frame caused this T.38 stream to be created
  4775. # TRUE or FALSE (case-insensitive)
  4776. #t38.show_setup_info: TRUE
  4777.  
  4778. # Whether the TACACS+ dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4779. # TRUE or FALSE (case-insensitive)
  4780. #tacplus.desegment: TRUE
  4781.  
  4782. # TACACS+ Encryption Key
  4783. # A string
  4784. #tacplus.key:
  4785.  
  4786. # Whether the TALI dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4787. # TRUE or FALSE (case-insensitive)
  4788. #tali.reassemble: TRUE
  4789.  
  4790. # SCCP (and SUA) SSNs to decode as TCAP
  4791. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4792. #tcap.ssn:
  4793.  
  4794. # Activate the analyse for Response Time
  4795. # TRUE or FALSE (case-insensitive)
  4796. #tcap.srt: FALSE
  4797.  
  4798. # Statistics for Response Time
  4799. # TRUE or FALSE (case-insensitive)
  4800. #tcap.persistentsrt: FALSE
  4801.  
  4802. # Maximal delay for message repetion
  4803. # A decimal number
  4804. #tcap.repetitiontimeout: 10
  4805.  
  4806. # Maximal delay for message lost
  4807. # A decimal number
  4808. #tcap.losttimeout: 30
  4809.  
  4810. # Whether the TCP summary line should be shown in the protocol tree
  4811. # TRUE or FALSE (case-insensitive)
  4812. #tcp.summary_in_tree: TRUE
  4813.  
  4814. # Whether to validate the TCP checksum or not. (Invalid checksums will cause reassembly, if enabled, to fail.)
  4815. # TRUE or FALSE (case-insensitive)
  4816. #tcp.check_checksum: FALSE
  4817.  
  4818. # Whether subdissector can request TCP streams to be reassembled
  4819. # TRUE or FALSE (case-insensitive)
  4820. #tcp.desegment_tcp_streams: TRUE
  4821.  
  4822. # Make the TCP dissector analyze TCP sequence numbers to find and flag segment retransmissions, missing segments and RTT
  4823. # TRUE or FALSE (case-insensitive)
  4824. #tcp.analyze_sequence_numbers: TRUE
  4825.  
  4826. # Make the TCP dissector use relative sequence numbers instead of absolute ones. To use this option you must also enable "Analyze TCP sequence numbers".
  4827. # TRUE or FALSE (case-insensitive)
  4828. #tcp.relative_sequence_numbers: TRUE
  4829.  
  4830. # Make the TCP dissector use this scaling factor for streams where the signalled scaling factor is not visible in the capture
  4831. # One of: Not known, 0 (no scaling), 1 (multiply by 2), 2 (multiply by 4), 3 (multiply by 8), 4 (multiply by 16), 5 (multiply by 32), 6 (multiply by 64), 7 (multiply by 128), 8 (multiply by 256), 9 (multiply by 512), 10 (multiply by 1024), 11 (multiply by 2048), 12 (multiply by 4096), 13 (multiply by 8192), 14 (multiply by 16384)
  4832. # (case-insensitive).
  4833. #tcp.default_window_scaling: Not known
  4834.  
  4835. # Make the TCP dissector track the number on un-ACKed bytes of data are in flight per packet. To use this option you must also enable "Analyze TCP sequence numbers". This takes a lot of memory but allows you to track how much data are in flight at a time and graphing it in io-graphs
  4836. # TRUE or FALSE (case-insensitive)
  4837. #tcp.track_bytes_in_flight: TRUE
  4838.  
  4839. # Calculate timestamps relative to the first frame and the previous frame in the tcp conversation
  4840. # TRUE or FALSE (case-insensitive)
  4841. #tcp.calculate_timestamps: FALSE
  4842.  
  4843. # Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
  4844. # TRUE or FALSE (case-insensitive)
  4845. #tcp.try_heuristic_first: FALSE
  4846.  
  4847. # Do not place the TCP Timestamps in the summary line
  4848. # TRUE or FALSE (case-insensitive)
  4849. #tcp.ignore_tcp_timestamps: FALSE
  4850.  
  4851. # Do not call any subdissectors for Retransmitted or OutOfOrder segments
  4852. # TRUE or FALSE (case-insensitive)
  4853. #tcp.no_subdissector_on_error: TRUE
  4854.  
  4855. # Assume TCP Experimental Options (253, 254) have a Magic Number and use it for dissection
  4856. # TRUE or FALSE (case-insensitive)
  4857. #tcp.dissect_experimental_options_with_magic: TRUE
  4858.  
  4859. # Collect and store process information retrieved from IPFIX dissector
  4860. # TRUE or FALSE (case-insensitive)
  4861. #tcp.display_process_info_from_ipfix: FALSE
  4862.  
  4863. # Set the port for IPSEC/ISAKMP messages (typically 10000)
  4864. # A decimal number
  4865. #tcpencap.tcp.port: 0
  4866.  
  4867. # Whether the TCPROS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4868. # TRUE or FALSE (case-insensitive)
  4869. #tcpros.desegment_tcpros_messages: TRUE
  4870.  
  4871. # The TDMoE channel that contains the D-Channel.
  4872. # A decimal number
  4873. #tdmoe.d_channel: 24
  4874.  
  4875. # The TDMoD channel that contains the D-Channel.
  4876. # A decimal number
  4877. #tdmop.d_channel: 16
  4878.  
  4879. # The bitmask of channels in uncompressed TDMoP frame
  4880. # A hexadecimal number
  4881. #tdmop.ts_mask: 0xffffffff
  4882.  
  4883. # The ethertype assigned to TDMoP (without IP/UDP) stream
  4884. # A hexadecimal number
  4885. #tdmop.ethertype: 0
  4886.  
  4887. # The udp port assigned to TDMoP stream
  4888. # A decimal number
  4889. #tdmop.udpport: 0
  4890.  
  4891. # Whether the TDS dissector should reassemble TDS buffers spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4892. # TRUE or FALSE (case-insensitive)
  4893. #tds.desegment_buffers: TRUE
  4894.  
  4895. # Whether the TDS dissector should defragment messages spanning multiple Netlib buffers
  4896. # TRUE or FALSE (case-insensitive)
  4897. #tds.defragment: TRUE
  4898.  
  4899. # Hint as to version of TDS protocol being decoded
  4900. # One of: Not Specified, TDS 4, TDS 5, TDS 7.0, TDS 7.1, TDS 7.2, TDS 7.3, TDS 7.3A, TDS 7.3B, TDS 7.4
  4901. # (case-insensitive).
  4902. #tds.protocol_type: Not Specified
  4903.  
  4904. # Hint as to whether to decode TDS protocol as little-endian or big-endian. (TDS7/8 always decoded as little-endian)
  4905. # One of: Little Endian, Big Endian
  4906. # (case-insensitive).
  4907. #tds.endian_type: Little Endian
  4908.  
  4909. # Additional TCP ports to decode as TDS
  4910. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4911. #tds.tcp_ports:
  4912.  
  4913. # Whether the captured data include carrier number
  4914. # TRUE or FALSE (case-insensitive)
  4915. #tetra.include_carrier_number: TRUE
  4916.  
  4917. # Port numbers used for TFTP traffic (default 69)
  4918. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4919. #tftp.udp_ports: 69
  4920.  
  4921. # Time display type
  4922. # One of: UTC, Local
  4923. # (case-insensitive).
  4924. #time.display_time_type: Local
  4925.  
  4926. # UDP ports to be decoded as TIPC (default: 0)IANA have assigned port 6118 port for TIPC UDP transport.
  4927. # A string denoting an positive integer range (e.g., "1-20,30-40")
  4928. #tipc.udp.ports: 0
  4929.  
  4930. # Whether TIPCv1 SEGMENTATION_MANAGER datagrams should be reassembled
  4931. # TRUE or FALSE (case-insensitive)
  4932. #tipc.defragment: TRUE
  4933.  
  4934. # Whether to try to dissect TIPC data or not
  4935. # TRUE or FALSE (case-insensitive)
  4936. #tipc.dissect_tipc_data: TRUE
  4937.  
  4938. # Try to decode a TIPCv2 packet using an heuristic sub-dissector before using a registered sub-dissector
  4939. # TRUE or FALSE (case-insensitive)
  4940. #tipc.try_heuristic_first: FALSE
  4941.  
  4942. # TIPC 1.7 removes/adds fields (not) available in TIPC 1.5/1.6 while keeping the version number 2 in the packages. "ALL" shows all fields that were ever used in both versions.
  4943. # One of: ALL, TIPC 1.5/1.6, TIPC 1.7
  4944. # (case-insensitive).
  4945. #tipc.handle_v2_as: ALL
  4946.  
  4947. # Decode this TCP ports traffic as TIPC. Set to "0" to disable.
  4948. # A decimal number
  4949. #tipc.alternate_port: 0
  4950.  
  4951. # Whether the TIPC-over-TCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4952. # TRUE or FALSE (case-insensitive)
  4953. #tipc.desegment: TRUE
  4954.  
  4955. # Whether the TNS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4956. # TRUE or FALSE (case-insensitive)
  4957. #tns.desegment_tns_messages: TRUE
  4958.  
  4959. # Whether Linux mangling of the link-layer header should be checked for and worked around
  4960. # TRUE or FALSE (case-insensitive)
  4961. #tr.fix_linux_botches: FALSE
  4962.  
  4963. # Whether the TPKT dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  4964. # TRUE or FALSE (case-insensitive)
  4965. #tpkt.desegment: TRUE
  4966.  
  4967. # Whether to load the Database or not; not loading the DB disables the protocol; Wireshark has to be restarted for the setting to take effect.
  4968. # TRUE or FALSE (case-insensitive)
  4969. #tpncp.load_db: FALSE
  4970.  
  4971. # No description
  4972. # A decimal number
  4973. #tpncp.tcp.trunkpack_port: 2424
  4974.  
  4975. # No description
  4976. # A decimal number
  4977. #tpncp.udp.trunkpack_port: 2424
  4978.  
  4979. # Critical Traffic Mask (base hex)
  4980. # A hexadecimal number
  4981. #tte.ct_mask_value: 0
  4982.  
  4983. # Critical Traffic Marker (base hex)
  4984. # A hexadecimal number
  4985. #tte.ct_marker_value: 0xffffffff
  4986.  
  4987. # Setup RTP/RTCP conversations when parsing Start RTP messages
  4988. # TRUE or FALSE (case-insensitive)
  4989. #ua.setup_conversations: TRUE
  4990.  
  4991. # UA SIP Protocol enabled
  4992. # TRUE or FALSE (case-insensitive)
  4993. #uasip.aplication_octet_stream: FALSE
  4994.  
  4995. # NOE SIP Protocol
  4996. # TRUE or FALSE (case-insensitive)
  4997. #uasip.noesip: FALSE
  4998.  
  4999. # IPv4 address of the proxy (Invalid values will be ignored)
  5000. # A string
  5001. #uasip.proxy_ipaddr:
  5002.  
  5003. # Terminal UDP port (setting 1)
  5004. # A decimal number
  5005. #uaudp.port1: 32000
  5006.  
  5007. # Terminal UDP port (setting 2)
  5008. # A decimal number
  5009. #uaudp.port2: 32512
  5010.  
  5011. # Terminal UDP port (setting 3)
  5012. # A decimal number
  5013. #uaudp.port3: 0
  5014.  
  5015. # Terminal UDP port (setting 4)
  5016. # A decimal number
  5017. #uaudp.port4: 0
  5018.  
  5019. # IPv4 address of the DHS3 system. (Used only in case of identical source and destination ports)
  5020. # A string
  5021. #uaudp.system_ip:
  5022.  
  5023. # Whether the UCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5024. # TRUE or FALSE (case-insensitive)
  5025. #ucp.desegment_ucp_messages: TRUE
  5026.  
  5027. # Whether the UDP summary line should be shown in the protocol tree
  5028. # TRUE or FALSE (case-insensitive)
  5029. #udp.summary_in_tree: TRUE
  5030.  
  5031. # Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
  5032. # TRUE or FALSE (case-insensitive)
  5033. #udp.try_heuristic_first: FALSE
  5034.  
  5035. # Whether to validate the UDP checksum
  5036. # TRUE or FALSE (case-insensitive)
  5037. #udp.check_checksum: FALSE
  5038.  
  5039. # Collect process flow information from IPFIX
  5040. # TRUE or FALSE (case-insensitive)
  5041. #udp.process_info: FALSE
  5042.  
  5043. # Ignore an invalid checksum coverage field and continue dissection
  5044. # TRUE or FALSE (case-insensitive)
  5045. #udplite.ignore_checksum_coverage: TRUE
  5046.  
  5047. # Whether to validate the UDP-Lite checksum
  5048. # TRUE or FALSE (case-insensitive)
  5049. #udplite.check_checksum: FALSE
  5050.  
  5051. # The UDP port used by this dissector
  5052. # A decimal number
  5053. #uhd.dissector_port: 0
  5054.  
  5055. # Whether the ULP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5056. # TRUE or FALSE (case-insensitive)
  5057. #ulp.desegment_ulp_messages: TRUE
  5058.  
  5059. # Set the TCP port for ULP messages (IANA registered port is 7275)
  5060. # A decimal number
  5061. #ulp.tcp.port: 7275
  5062.  
  5063. # Set the UDP port for ULP messages (IANA registered port is 7275)
  5064. # A decimal number
  5065. #ulp.udp.port: 7275
  5066.  
  5067. # Whether the UMA dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5068. # TRUE or FALSE (case-insensitive)
  5069. #uma.desegment_ucp_messages: TRUE
  5070.  
  5071. # TCP ports to be decoded as UMA (default: 14001)
  5072. # A string denoting an positive integer range (e.g., "1-20,30-40")
  5073. #uma.tcp.ports: 14001
  5074.  
  5075. # UNISTIM port (default 5000)
  5076. # A decimal number
  5077. #unistim.udp.port: 0
  5078.  
  5079. # Try to decode a packet using a heuristic sub-dissector before attempting to dissect the packet using the "usb.bulk", "usb.interrupt" or "usb.control" dissector tables.
  5080. # TRUE or FALSE (case-insensitive)
  5081. #usb.try_heuristics: TRUE
  5082.  
  5083. # How commands from the PC to the reader are interpreted
  5084. # One of: Data, Generic ISO 7816, GSM SIM, NXP PN532, ACR122 PN532
  5085. # (case-insensitive).
  5086. #usbccid.prtype: Data
  5087.  
  5088. # The UDP port used by this dissector
  5089. # A decimal number
  5090. #vrt.dissector_port: 4991
  5091.  
  5092. # Whether the vlan summary line should be shown in the protocol tree
  5093. # TRUE or FALSE (case-insensitive)
  5094. #vlan.summary_in_tree: TRUE
  5095.  
  5096. # The (hexadecimal) Ethertype used to indicate 802.1QinQ VLAN in VLAN tunneling.
  5097. # A hexadecimal number
  5098. #vlan.qinq_ethertype: 0x9100
  5099.  
  5100. # Whether the VNC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5101. # TRUE or FALSE (case-insensitive)
  5102. #vnc.desegment: TRUE
  5103.  
  5104. # Decode this port's traffic as VNC in addition to the default ports (5500, 5501, 5900, 5901)
  5105. # A decimal number
  5106. #vnc.alternate_port: 0
  5107.  
  5108. # Dynamic payload types which will be interpreted as vp8; Values must be in the range 96 - 127
  5109. # A string denoting an positive integer range (e.g., "1-20,30-40")
  5110. #vp8.dynamic.payload.type:
  5111.  
  5112. # There is some ambiguity on how to calculate V3 checksumsAs in V3 will use a pseudo header(which may only be implemented for IPv6 by some manufacturers)
  5113. # TRUE or FALSE (case-insensitive)
  5114. #vrrp.v3_checksum_as_in_v2: FALSE
  5115.  
  5116. # Set the UDP port for Vuze DHT Protocol.
  5117. # A decimal number
  5118. #vuze-dht.udp_port: 11273
  5119.  
  5120. # Enable this preference if you want to view the WBXML tokens without the representation in a media type (e.g., WML). Tokens will show up as Tag_0x12, attrStart_0x08 or attrValue_0x0B for example.
  5121. # TRUE or FALSE (case-insensitive)
  5122. #wbxml.skip_wbxml_token_mapping: FALSE
  5123.  
  5124. # Enable this preference if you want to skip the parsing of the WBXML tokens that constitute the body of the WBXML document. Only the WBXML header will be dissected (and visualized) then.
  5125. # TRUE or FALSE (case-insensitive)
  5126. #wbxml.disable_wbxml_token_parsing: FALSE
  5127.  
  5128. # Select dissector for websocket text
  5129. # One of: No subdissection, Line based text, As json, As SIP
  5130. # (case-insensitive).
  5131. #websocket.text_type: No subdissection
  5132.  
  5133. # Set the maximum Basic CID used in the Wimax decoder (if other than the default of 320). Note: The maximum Primary CID is double the maximum Basic CID.
  5134. # A decimal number
  5135. #wmx.basic_cid_max: 320
  5136.  
  5137. # Set to TRUE to use the Corrigendum 2 version of Wimax message decoding. Set to FALSE to use the 802.16e-2005 version.
  5138. # TRUE or FALSE (case-insensitive)
  5139. #wmx.corrigendum_2_version: FALSE
  5140.  
  5141. # Show transaction ID direction bit separately from the rest of the transaction ID field.
  5142. # TRUE or FALSE (case-insensitive)
  5143. #wimaxasncp.show_transaction_id_d_bit: FALSE
  5144.  
  5145. # Print debug output to the console.
  5146. # TRUE or FALSE (case-insensitive)
  5147. #wimaxasncp.debug_enabled: FALSE
  5148.  
  5149. # Set UDP port for WiMAX ASN Control Plane Protocol
  5150. # A decimal number
  5151. #wimaxasncp.udp.wimax_port: 2231
  5152.  
  5153. # Version of the NWG that the R6 protocol complies with
  5154. # One of: R1.0 v1.0.0, R1.0 v1.2.0, R1.0 v1.2.1
  5155. # (case-insensitive).
  5156. #wimaxasncp.nwg_version: R1.0 v1.2.1
  5157.  
  5158. # WiMAX MAX PHY UDP port
  5159. # A decimal number
  5160. #wimaxmacphy.udp.port: 0
  5161.  
  5162. # Whether the WINS-Replication dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5163. # TRUE or FALSE (case-insensitive)
  5164. #winsrepl.reassemble: TRUE
  5165.  
  5166. # Whether the wow dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5167. # TRUE or FALSE (case-insensitive)
  5168. #wow.desegment: TRUE
  5169.  
  5170. # If CALL REQUEST not seen or didn't specify protocol, dissect as QLLC/SNA
  5171. # TRUE or FALSE (case-insensitive)
  5172. #x25.payload_is_qllc_sna: FALSE
  5173.  
  5174. # If CALL REQUEST has no data, assume the protocol handled is COTP
  5175. # TRUE or FALSE (case-insensitive)
  5176. #x25.call_request_nodata_is_cotp: FALSE
  5177.  
  5178. # If CALL REQUEST not seen or didn't specify protocol, check user data before checking heuristic dissectors
  5179. # TRUE or FALSE (case-insensitive)
  5180. #x25.payload_check_data: FALSE
  5181.  
  5182. # Reassemble fragmented X.25 packets
  5183. # TRUE or FALSE (case-insensitive)
  5184. #x25.reassemble: TRUE
  5185.  
  5186. # Whether the X11 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5187. # TRUE or FALSE (case-insensitive)
  5188. #x11.desegment: TRUE
  5189.  
  5190. # TCP ports to be decoded as X11 (default: 6000-6063)
  5191. # A string denoting an positive integer range (e.g., "1-20,30-40")
  5192. #x11.tcp.ports: 6000-6063
  5193.  
  5194. # Set the SCTP port for X2AP messages
  5195. # A decimal number
  5196. #x2ap.sctp.port: 36422
  5197.  
  5198. # Set the port for XMCP messages (if other than the default of 4788)
  5199. # A decimal number
  5200. #xmcp.tcp.port: 4788
  5201.  
  5202. # TCP Ports range
  5203. # A string denoting an positive integer range (e.g., "1-20,30-40")
  5204. #xml.tcp.port:
  5205.  
  5206. # Try to recognize XML encoded in Unicode (UCS-2BE)
  5207. # TRUE or FALSE (case-insensitive)
  5208. #xml.heuristic_unicode: FALSE
  5209.  
  5210. # Whether the XMPP dissector should reassemble messages. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings
  5211. # TRUE or FALSE (case-insensitive)
  5212. #xmpp.desegment: TRUE
  5213.  
  5214. # Whether the X.25-over-TCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings
  5215. # TRUE or FALSE (case-insensitive)
  5216. #xot.desegment: TRUE
  5217.  
  5218. # Whether the X.25-over-TCP dissector should reassemble all X.25 packets before calling the X25 dissector. If the TCP packets arrive out-of-order, the X.25 reassembly can otherwise fail. To use this option, you should also enable "Reassemble X.25-over-TCP messages spanning multiple TCP segments", "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings and "Reassemble fragmented X.25 packets" in the X.25 protocol settings.
  5219. # TRUE or FALSE (case-insensitive)
  5220. #xot.x25_desegment: FALSE
  5221.  
  5222. # The TCP port on which YAMI messages will be read(3000)
  5223. # A decimal number
  5224. #yami.tcp.port: 0
  5225.  
  5226. # The UDP port on which YAMI messages will be read(5000)
  5227. # A decimal number
  5228. #yami.udp.port: 0
  5229.  
  5230. # Whether the YAMI dissector should reassemble messages spanning multiple TCP segments.To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5231. # TRUE or FALSE (case-insensitive)
  5232. #yami.desegment: TRUE
  5233.  
  5234. # Whether the YMSG dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
  5235. # TRUE or FALSE (case-insensitive)
  5236. #ymsg.desegment: TRUE
  5237.  
  5238. # Set the port for ZEP Protocol
  5239. # Default port is 17754
  5240. # A decimal number
  5241. #zep.udp.port: 17754
  5242.  
  5243. # Specifies the security level to use in the
  5244. # decryption process. This value is ignored
  5245. # for ZigBee 2004 and unsecured networks.
  5246. # One of: No Security, No Encryption, 32-bit Integrity Protection, No Encryption, 64-bit Integrity Protection, No Encryption, 128-bit Integrity Protection, AES-128 Encryption, No Integrity Protection, AES-128 Encryption, 32-bit Integrity Protection, AES-128 Encryption, 64-bit Integrity Protection, AES-128 Encryption, 128-bit Integrity Protection
  5247. # (case-insensitive).
  5248. #zbee_nwk.seclevel: AES-128 Encryption, 32-bit Integrity Protection
  5249.  
  5250. # Set the TCP port for ZVT messages (port 20007 according to the spec)
  5251. # A decimal number
  5252. #zvt.tcp.port: 0
  5253.  
  5254. ####### Statistics ########
  5255.  
  5256. # Determines time between tap updates
  5257. # A decimal number
  5258. #statistics.update_interval: 3000
  5259.  
  5260. # Determines maximum height of RTP Player window
  5261. # A decimal number
  5262. #statistics.rtp_player_max_visible: 4
  5263.  
  5264. # If enabled burst rates will be calcuted for statistics that use the stats_tree system. Burst rates are calculated over a much shorter time interval than the rate column.
  5265. # TRUE or FALSE (case-insensitive)
  5266. #statistics.st_enable_burstinfo: TRUE
  5267.  
  5268. # If selected the stats_tree statistics nodes will show the count of events within the burst window instead of a burst rate. Burst rate is calculated as number of events within burst window divided by the burst windown length.
  5269. # TRUE or FALSE (case-insensitive)
  5270. #statistics.st_burst_showcount: FALSE
  5271.  
  5272. # Sets the duration of the time interval into which events are grouped when calculating the burst rate. Higher resolution (smaller number) increases processing overhead.
  5273. # A decimal number
  5274. #statistics.st_burst_resolution: 5
  5275.  
  5276. # Sets the duration of the sliding window during which the burst rate is measured. Longer window relative to burst rate resolution increases processing overhead. Will be truncated to a multiple of burst resolution.
  5277. # A decimal number
  5278. #statistics.st_burst_windowlen: 100
  5279.  
  5280. # Sets the default column by which stats based on the stats_tree system is sorted.
  5281. # One of: Node name (topic/item), Item count, Average value of the node, Minimum value of the node, Maximum value of the node, Burst rate of the node
  5282. # (case-insensitive).
  5283. #statistics.st_sort_defcolflag: Item count
  5284.  
  5285. # When selected, statistics based on the stats_tree system will by default be sorted in descending order.
  5286. # TRUE or FALSE (case-insensitive)
  5287. #statistics.st_sort_defdescending: TRUE
  5288.  
  5289. # When selected, the item/node names of statistics based on the stats_tree system will be sorted taking case into account. Else the case of the name will be ignored.
  5290. # TRUE or FALSE (case-insensitive)
  5291. #statistics.st_sort_casesensitve: TRUE
  5292.  
  5293. # When selected, the stats_tree nodes representing a range of values (0-49, 50-100, etc.) will always be sorted by name (the range of the node). Else range nodes are sorted by the same column as the rest of the tree.
  5294. # TRUE or FALSE (case-insensitive)
  5295. #statistics.st_sort_rng_nameonly: TRUE
  5296.  
  5297. # When selected, the stats_tree nodes representing a range of values (0-49, 50-100, etc.) will always be sorted ascending; else it follows the sort direction of the tree. Only effective if "Always sort 'range' nodes by name" is also selected.
  5298. # TRUE or FALSE (case-insensitive)
  5299. #statistics.st_sort_rng_fixorder: TRUE
  5300.  
  5301. # When selected, the full name (including menu path) of the stats_tree plug-in is show in windows. If cleared the plug-in name is shown without menu path (only the part of the name after last '/' character.)
  5302. # TRUE or FALSE (case-insensitive)
  5303. #statistics.st_sort_showfullname: FALSE
Add Comment
Please, Sign In to add comment