1L7rXHHT

1# Configuration file for Wireshark 2.2.6.
2#
3# This file is regenerated each time preferences are saved within
4# Wireshark. Making manual changes should be safe, however.
5# Preferences that have been commented out have not been
6# changed from their default value.
7
8####### User Interface ########
9
10# Open a console window (Windows only)
11# One of: NEVER, AUTOMATIC, ALWAYS
12# (case-insensitive).
13#gui.console_open: NEVER
14
15# Alternating colors in TreeViews?
16# TRUE or FALSE (case-insensitive)
17#gui.tree_view_altern_colors: FALSE
18
19# Display Icons on Expert Composite Dialog Tabs?
20# TRUE or FALSE (case-insensitive)
21#gui.expert_composite_eyecandy: FALSE
22
23# Place filter toolbar inside the statusbar?
24# TRUE or FALSE (case-insensitive)
25#gui.filter_toolbar_show_in_statusbar: FALSE
26
27# Protocol-tree line style
28# One of: NONE, SOLID, DOTTED, TABBED
29# (case-insensitive).
30#gui.protocol_tree_line_style: NONE
31
32# Protocol-tree expander style
33# One of: NONE, SQUARE, TRIANGLE, CIRCULAR
34# (case-insensitive).
35#gui.protocol_tree_expander_style: SQUARE
36
37# Hex dump highlight style
38# One of: BOLD, INVERSE
39# (case-insensitive).
40#gui.hex_dump_highlight_style: INVERSE
41
42# Where to start the File Open dialog box
43# One of: LAST_OPENED, SPECIFIED
44# (case-insensitive).
45#gui.fileopen.style: LAST_OPENED
46
47# The max. number of items in the open recent files list
48# A decimal number
49#gui.recent_files_count.max: 10
50
51# The max. number of entries in the display filter list
52# A decimal number
53#gui.recent_display_filter_entries.max: 10
54
55# Directory to start in when opening File Open dialog.
56# A path to a directory
57#gui.fileopen.dir: 
58
59# The preview timeout in the File Open dialog
60# A decimal number
61#gui.fileopen.preview: 3
62
63# Ask to save unsaved capture files?
64# TRUE or FALSE (case-insensitive)
65#gui.ask_unsaved: TRUE
66
67# Wrap to beginning/end of file during search?
68# TRUE or FALSE (case-insensitive)
69#gui.find_wrap: TRUE
70
71# Settings dialogs use a save button?
72# TRUE or FALSE (case-insensitive)
73#gui.use_pref_save: FALSE
74
75# Save window position at exit?
76# TRUE or FALSE (case-insensitive)
77#gui.geometry.save.position: TRUE
78
79# Save window size at exit?
80# TRUE or FALSE (case-insensitive)
81#gui.geometry.save.size: TRUE
82
83# Save window maximized state at exit?
84# TRUE or FALSE (case-insensitive)
85#gui.geometry.save.maximized: TRUE
86
87# Use OS X style (OS X with native GTK only)?
88# TRUE or FALSE (case-insensitive)
89#gui.macosx_style: TRUE
90
91# Main Toolbar style
92# One of: ICONS, TEXT, BOTH
93# (case-insensitive).
94#gui.toolbar_main_style: ICONS
95
96# Filter Toolbar style
97# One of: ICONS, TEXT, BOTH
98# (case-insensitive).
99#gui.toolbar_filter_style: TEXT
100
101# The path to the webbrowser (Ex: mozilla)
102# A string
103#gui.webbrowser: 
104
105# Check for updates (Windows only)
106# TRUE or FALSE (case-insensitive)
107#gui.update.enabled: TRUE
108
109# The type of update to fetch. You should probably leave this set to UPDATE_CHANNEL_STABLE.
110# One of: DEVELOPMENT, STABLE
111# (case-insensitive).
112#gui.update.channel: STABLE
113
114# How often to check for software updates in seconds
115# A decimal number
116#gui.update.interval: 86400
117
118# Custom window title to be appended to the existing title
119# %P = profile name
120# %V = version info
121# A string
122#gui.window_title: 
123
124# Custom window title to be prepended to the existing title
125# %P = profile name
126# %V = version info
127# A string
128#gui.prepend_window_title: 
129
130# Custom start page title
131# A string
132#gui.start_title: The World's Most Popular Network Protocol Analyzer
133
134# Show version in the start page and/or main screen's title bar
135# One of: WELCOME, TITLE, BOTH, NEITHER
136# (case-insensitive).
137#gui.version_placement: WELCOME
138
139# Automatically scroll the recently expanded item
140# TRUE or FALSE (case-insensitive)
141#gui.auto_scroll_on_expand: FALSE
142
143# The percentage down the view the recently expanded item should be scrolled
144# A decimal number
145#gui.auto_scroll_percentage: 0
146
147# Enable Packet Editor (Experimental)
148# TRUE or FALSE (case-insensitive)
149#gui.packet_editor.enabled: FALSE
150
151# The position of "..." in packet list text.
152# One of: LEFT, RIGHT, MIDDLE, NONE
153# (case-insensitive).
154#gui.packet_list_elide_mode: RIGHT
155
156####### User Interface: Colors ########
157
158# Color preferences for a marked frame
159# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
160#gui.marked_frame.fg: ffffff
161
162# Color preferences for a marked frame
163# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
164#gui.marked_frame.bg: 00202a
165
166# Color preferences for a ignored frame
167# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
168#gui.ignored_frame.fg: 7f7f7f
169
170# Color preferences for a ignored frame
171# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
172#gui.ignored_frame.bg: ffffff
173
174# TCP stream window color preference
175# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
176#gui.stream.client.fg: 7f0000
177
178# TCP stream window color preference
179# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
180#gui.stream.client.bg: fbeded
181
182# TCP stream window color preference
183# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
184#gui.stream.server.fg: 00007f
185
186# TCP stream window color preference
187# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
188#gui.stream.server.bg: ededfb
189
190# Valid color filter background
191# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
192#gui.color_filter_bg.valid: afffaf
193
194# Invalid color filter background
195# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
196#gui.color_filter_bg.invalid: ffafaf
197
198# Deprecated color filter background
199# A six-digit hexadecimal RGB color triplet (e.g. fce94f)
200#gui.color_filter_bg.deprecated: ffffaf
201
202####### User Interface: Columns ########
203
204# Packet list hidden columns
205# List all columns to hide in the packet list.
206gui.column.hidden: %m,%p,%L
207
208# Packet list column format
209# Each pair of strings consists of a column title and its format
210gui.column.format: 
211	"Time", "%t",
212	"Source", "%s",
213	"Source Port", "%uS",
214	"Destination", "%d",
215	"Dest Port", "%uD",
216	"Info", "%i",
217	"No.", "%m",
218	"Protocol", "%p",
219	"Length", "%L"
220
221####### User Interface: Font ########
222
223# Font name for packet list, protocol tree, and hex dump panes. (GTK+)
224# A string
225#gui.gtk2.font_name: Monospace 10
226
227# Font name for packet list, protocol tree, and hex dump panes. (Qt)
228# A string
229gui.qt.font_name: Liberation Mono,11,-1,5,50,0,0,0,0,0
230
231####### User Interface: Layout ########
232
233# Layout type (1-6)
234# A decimal number
235#gui.layout_type: 1
236
237# Layout content of the pane 1
238# One of: NONE, PLIST, PDETAILS, PBYTES
239# (case-insensitive).
240#gui.layout_content_1: PLIST
241
242# Layout content of the pane 2
243# One of: NONE, PLIST, PDETAILS, PBYTES
244# (case-insensitive).
245#gui.layout_content_2: PDETAILS
246
247# Layout content of the pane 3
248# One of: NONE, PLIST, PDETAILS, PBYTES
249# (case-insensitive).
250#gui.layout_content_3: PBYTES
251
252# Enable Packet List Separator
253# TRUE or FALSE (case-insensitive)
254#gui.packet_list_separator.enabled: FALSE
255
256# Show related packet indicators in the first column
257# TRUE or FALSE (case-insensitive)
258#gui.packet_list_show_related: TRUE
259
260# Show the intelligent scroll bar (a minimap of packet list colors in the scrollbar)
261# TRUE or FALSE (case-insensitive)
262#gui.packet_list_show_minimap: TRUE
263
264####### Capture ########
265
266# Default capture device
267# A string
268#capture.device: 
269
270# Interface link-layer header types (Ex: en0(1),en1(143),...)
271# A string
272#capture.devices_linktypes: 
273
274# Interface descriptions (Ex: eth0(eth0 descr),eth1(eth1 descr),...)
275# A string
276#capture.devices_descr: 
277
278# Hide interface? (Ex: eth0,eth3,...)
279# A string
280#capture.devices_hide: 
281
282# By default, capture in monitor mode on interface? (Ex: eth0,eth3,...)
283# A string
284#capture.devices_monitor_mode: 
285
286# Interface buffer size (Ex: en0(1),en1(143),...)
287# A string
288#capture.devices_buffersize: 
289
290# Interface snap length (Ex: en0(65535),en1(1430),...)
291# A string
292#capture.devices_snaplen: 
293
294# Interface promiscuous mode (Ex: en0(0),en1(1),...)
295# A string
296#capture.devices_pmode: 
297
298# Capture in promiscuous mode?
299# TRUE or FALSE (case-insensitive)
300#capture.prom_mode: TRUE
301
302# Interface capture filter (Ex: en0(tcp),en1(udp),...)
303# A string
304#capture.devices_filter: 
305
306# Capture in Pcap-NG format?
307# TRUE or FALSE (case-insensitive)
308#capture.pcap_ng: TRUE
309
310# Update packet list in real time during capture?
311# TRUE or FALSE (case-insensitive)
312#capture.real_time_update: TRUE
313
314# Scroll packet list during capture?
315# TRUE or FALSE (case-insensitive)
316#capture.auto_scroll: TRUE
317
318# Show capture info dialog while capturing?
319# TRUE or FALSE (case-insensitive)
320#capture.show_info: FALSE
321
322# Column list
323# List of columns to be displayed in the capture options dialog.
324# Possible values: INTERFACE, LINK, PMODE, SNAPLEN, MONITOR, BUFFER, FILTER
325# 
326#capture.columns: 
327#	"INTERFACE", "LINK",
328#	"PMODE", "SNAPLEN",
329#	"MONITOR", "BUFFER",
330#	"FILTER"
331
332####### Console ########
333
334# Log level
335# Console log level (for debugging)
336# A bitmask of log levels:
337# ERROR    = 4
338# CRITICAL = 8
339# WARNING  = 16
340# MESSAGE  = 32
341# INFO     = 64
342# DEBUG    = 128
343#console.log.level: 28
344
345####### Extcap Utilities ########
346
347# Save arguments on start of capture
348# TRUE or FALSE (case-insensitive)
349#extcap.gui_save_on_start: TRUE
350
351# Remote SSH server address
352# A string
353#extcap.cisco.remotehost: 
354
355# Remote SSH server port
356# A string
357#extcap.cisco.remoteport: 22
358
359# Remote SSH server username
360# A string
361#extcap.cisco.remoteusername: sansforensics
362
363# Path to SSH private key
364# A string
365#extcap.cisco.sshkey: 
366
367# Remote interface
368# A string
369#extcap.cisco.remoteinterface: 
370
371# Remote capture filter
372# A string
373#extcap.cisco.remotefilter: deny tcp host fe80::6d98:8e03:5803:ddb4 any eq 22, deny tcp any eq 22 host fe80::6d98:8e03:5803:ddb4, deny tcp host 172.17.0.1 any eq 22, deny tcp any eq 22 host 172.17.0.1, deny tcp host 10.0.2.15 any eq 22, deny tcp any eq 22 host 10.0.2.15, permit ip any any
374
375# Packets to capture
376# A string
377#extcap.cisco.remotecount: 
378
379# Max bytes in a packet
380# A string
381#extcap.randpkt.maxbytes: 5000
382
383# Number of packets
384# A string
385#extcap.randpkt.count: 1000
386
387# Random type
388# A string
389#extcap.randpkt.randomtype: false
390
391# All random packets
392# A string
393#extcap.randpkt.allrandom: false
394
395# Type of packet
396# A string
397#extcap.randpkt.type: 
398
399# Remote SSH server address
400# A string
401#extcap.ssh.remotehost: 
402
403# Remote SSH server port
404# A string
405#extcap.ssh.remoteport: 22
406
407# Remote SSH server username
408# A string
409#extcap.ssh.remoteusername: sansforensics
410
411# Path to SSH private key
412# A string
413#extcap.ssh.sshkey: 
414
415# Remote interface
416# A string
417#extcap.ssh.remoteinterface: eth0
418
419# Remote capture binary
420# A string
421#extcap.ssh.remotecapturebin: dumpcap
422
423# Remote capture filter
424# A string
425#extcap.ssh.remotefilter: not ((host fe80::6d98:8e03:5803:ddb4 or host 172.17.0.1 or host 10.0.2.15) and port 22)
426
427# Packets to capture
428# A string
429#extcap.ssh.remotecount: 0
430
431####### Name Resolution ########
432
433# Resolve Ethernet MAC address to manufacturer names
434# TRUE or FALSE (case-insensitive)
435#nameres.mac_name: TRUE
436
437# Resolve TCP/UDP ports into service names
438# TRUE or FALSE (case-insensitive)
439#nameres.transport_name: FALSE
440
441# Resolve IPv4, IPv6, and IPX addresses into host names. The next set of check boxes determines how name resolution should be performed. If no other options are checked name resolution is made from Wireshark's host file, capture file name resolution blocks and DNS packets in the capture.
442# TRUE or FALSE (case-insensitive)
443#nameres.network_name: FALSE
444
445# Whether address/name pairs found in captured DNS packets should be used by Wireshark for name resolution.
446# TRUE or FALSE (case-insensitive)
447#nameres.dns_pkt_addr_resolution: TRUE
448
449# Use your system's configured name resolver (usually DNS) to resolve network names. Only applies when network name resolution is enabled.
450# TRUE or FALSE (case-insensitive)
451#nameres.use_external_name_resolver: TRUE
452
453# The maximum number of DNS requests that may be active at any time. A large value (many thousands) might overload the network or make your DNS server behave badly.
454# A decimal number
455#nameres.name_resolve_concurrency: 500
456
457# By default "hosts" files will be loaded from multiple sources. Checking this box only loads the "hosts" in the current profile.
458# TRUE or FALSE (case-insensitive)
459#nameres.hosts_file_handling: FALSE
460
461# Resolve VLAN IDs to describing names. To do so you need a file called vlans in your user preference directory. Format of the file is:  "ID<Tab>Name" One line per VLAN.
462# TRUE or FALSE (case-insensitive)
463#nameres.vlan_name: FALSE
464
465# You must restart Wireshark for this change to take effect
466# TRUE or FALSE (case-insensitive)
467#nameres.load_smi_modules: FALSE
468
469# Some errors can be ignored. If unsure, set to false.
470# TRUE or FALSE (case-insensitive)
471#nameres.suppress_smi_errors: FALSE
472
473####### Printing ########
474
475# Can be one of "text" or "postscript"
476# One of: Plain Text, Postscript
477# (case-insensitive).
478#print.format: Plain Text
479
480# Can be one of "command" or "file"
481# One of: Command, File
482# (case-insensitive).
483#print.destination: Command
484
485# Output gets piped to this command when the destination is set to "command"
486# A string
487#print.command: lpr
488
489# This is the file that gets written to when the destination is set to "file"
490# A path to a file
491#print.file: wireshark.out
492
493####### Protocols ########
494
495# Display all hidden protocol items in the packet list.
496# TRUE or FALSE (case-insensitive)
497#protocols.display_hidden_proto_items: FALSE
498
499# Display all byte fields with a space character between each byte in the packet list.
500# TRUE or FALSE (case-insensitive)
501#protocols.display_byte_fields_with_spaces: FALSE
502
503# Look for dissectors that left some bytes undecoded.
504# TRUE or FALSE (case-insensitive)
505#protocols.enable_incomplete_dissectors_check: FALSE
506
507# TCP port used by source of IEC104, usually 2404
508# A decimal number
509#104apci.tcp.port: 2404
510
511# Use a registered heuristic sub-dissector to decode the data payload
512# TRUE or FALSE (case-insensitive)
513#lbmc.use_heuristic_subdissectors: TRUE
514
515# Reassemble data message fragments
516# TRUE or FALSE (case-insensitive)
517#lbmc.reassemble_fragments: FALSE
518
519# Recognize and dissect payloads containing LBMPDM messages (requires reassembly to be enabled)
520# TRUE or FALSE (case-insensitive)
521#lbmc.dissect_lbmpdm: FALSE
522
523# Set the low end of the TCP port range
524# A decimal number
525#lbmpdm_tcp.port_low: 14371
526
527# Set the high end of the port range
528# A decimal number
529#lbmpdm_tcp.port_high: 14390
530
531# Use table of LBMPDM-TCP tags to decode the packet instead of above values
532# TRUE or FALSE (case-insensitive)
533#lbmpdm_tcp.use_lbmpdm_tcp_domain: FALSE
534
535# Set the UDP port for incoming multicast topic resolution (context resolver_multicast_incoming_port)
536# A decimal number
537#lbmr.mc_incoming_port: 12965
538
539# Set the multicast address for incoming multicast topic resolution (context resolver_multicast_incoming_address)
540# A string
541#lbmr.mc_incoming_address: 224.9.10.11
542
543# Set the UDP port for outgoing multicast topic resolution (context resolver_multicast_outgoing_port)
544# A decimal number
545#lbmr.mc_outgoing_port: 12965
546
547# Set the multicast address for outgoing multicast topic resolution (context resolver_multicast_outgoing_address)
548# A string
549#lbmr.mc_outgoing_address: 224.9.10.11
550
551# Set the low UDP port for unicast topic resolution (context resolver_unicast_port_low)
552# A decimal number
553#lbmr.uc_port_low: 14402
554
555# Set the high UDP port for unicast topic resolution (context resolver_unicast_port_high)
556# A decimal number
557#lbmr.uc_port_high: 14406
558
559# Set the destination port for unicast topic resolution (context resolver_unicast_destination_port)
560# A decimal number
561#lbmr.uc_dest_port: 15380
562
563# Set the address of the unicast resolver daemon (context resolver_unicast_address)
564# A string
565#lbmr.uc_address: 0.0.0.0
566
567# Use table of LBMR tags to decode the packet instead of above values
568# TRUE or FALSE (case-insensitive)
569#lbmr.use_lbmr_domain: FALSE
570
571# Set the low end of the LBT-RM multicast address range (context transport_lbtrm_multicast_address_low)
572# A string
573#lbtrm.mc_address_low: 224.10.10.10
574
575# Set the high end of the LBT-RM multicast address range (context transport_lbtrm_multicast_address_high)
576# A string
577#lbtrm.mc_address_high: 224.10.10.14
578
579# Set the low end of the LBT-RM UDP destination port range (source transport_lbtrm_destination_port)
580# A decimal number
581#lbtrm.dport_low: 14400
582
583# Set the high end of the LBT-RM UDP destination port range (source transport_lbtrm_destination_port)
584# A decimal number
585#lbtrm.dport_high: 14400
586
587# Set the low end of the LBT-RM UDP source port range (context transport_lbtrm_source_port_low)
588# A decimal number
589#lbtrm.sport_low: 14390
590
591# Set the high end of the LBT-RM UDP source port range (context transport_lbtrm_source_port_high)
592# A decimal number
593#lbtrm.sport_high: 14399
594
595# Set the incoming MIM multicast address (context mim_incoming_address)
596# A string
597#lbtrm.mim_incoming_address: 224.10.10.21
598
599# Set the outgoing MIM multicast address (context mim_outgoing_address)
600# A string
601#lbtrm.mim_outgoing_address: 224.10.10.21
602
603# Set the incoming MIM UDP port (context mim_incoming_destination_port)
604# A decimal number
605#lbtrm.mim_incoming_dport: 14401
606
607# Set the outgoing MIM UDP port (context mim_outgoing_destination_port)
608# A decimal number
609#lbtrm.mim_outgoing_dport: 14401
610
611# Separate multiple NAKs from a single packet into distinct Expert Info entries
612# TRUE or FALSE (case-insensitive)
613#lbtrm.expert_separate_naks: FALSE
614
615# Separate multiple NCFs from a single packet into distinct Expert Info entries
616# TRUE or FALSE (case-insensitive)
617#lbtrm.expert_separate_ncfs: FALSE
618
619# Perform analysis on LBT-RM sequence numbers to determine out-of-order, gaps, loss, etc
620# TRUE or FALSE (case-insensitive)
621#lbtrm.sequence_analysis: FALSE
622
623# Use table of LBT-RM tags to decode the packet instead of above values
624# TRUE or FALSE (case-insensitive)
625#lbtrm.use_lbtrm_domain: FALSE
626
627# Set the low end of the LBT-RU source UDP port range (context transport_lbtru_port_low)
628# A decimal number
629#lbtru.source_port_low: 14380
630
631# Set the high end of the LBT-RU source UDP port range (context transport_lbtru_port_high)
632# A decimal number
633#lbtru.source_port_high: 14389
634
635# Set the low end of the LBT-RU receiver UDP port range (receiver transport_lbtru_port_low)
636# A decimal number
637#lbtru.receiver_port_low: 14360
638
639# Set the high end of the LBT-RU receiver UDP port range (receiver transport_lbtru_port_high)
640# A decimal number
641#lbtru.receiver_port_high: 14379
642
643# Separate multiple NAKs from a single packet into distinct Expert Info entries
644# TRUE or FALSE (case-insensitive)
645#lbtru.expert_separate_naks: FALSE
646
647# Separate multiple NCFs from a single packet into distinct Expert Info entries
648# TRUE or FALSE (case-insensitive)
649#lbtru.expert_separate_ncfs: FALSE
650
651# Perform analysis on LBT-RU sequence numbers to determine out-of-order, gaps, loss, etc
652# TRUE or FALSE (case-insensitive)
653#lbtru.sequence_analysis: FALSE
654
655# Use table of LBT-RU tags to decode the packet instead of above values
656# TRUE or FALSE (case-insensitive)
657#lbtru.use_lbtru_domain: FALSE
658
659# Set the low end of the LBT-TCP source TCP port range (context transport_tcp_port_low)
660# A decimal number
661#lbttcp.source_port_low: 14371
662
663# Set the high end of the LBT-TCP source TCP port range (context transport_tcp_port_high)
664# A decimal number
665#lbttcp.source_port_high: 14390
666
667# Set the low end of the LBT-TCP request TCP port range (context request_tcp_port_low)
668# A decimal number
669#lbttcp.request_port_low: 14391
670
671# Set the high end of the LBT-TCP request TCP port range (context request_tcp_port_high)
672# A decimal number
673#lbttcp.request_port_high: 14395
674
675# Set the low end of the LBT-TCP UME Store TCP port range
676# A decimal number
677#lbttcp.store_port_low: 0
678
679# Set the high end of the LBT-TCP UME Store TCP port range
680# A decimal number
681#lbttcp.store_port_high: 0
682
683# Use table of LBT-TCP tags to decode the packet instead of above values
684# TRUE or FALSE (case-insensitive)
685#lbttcp.use_lbttcp_domain: FALSE
686
687# Enable this option to recognise all traffic on RTP dynamic payload type 96 (0x60) as FEC data corresponding to Pro-MPEG Code of Practice #3 release 2
688# TRUE or FALSE (case-insensitive)
689#2dparityfec.enable: FALSE
690
691# Derive IID from a short 16-bit address according to RFC 4944 (using the PAN ID).
692# TRUE or FALSE (case-insensitive)
693#6lowpan.rfc4944_short_address_format: FALSE
694
695# IPv6 prefix to use for stateful address decompression.
696# A string
697#6lowpan.context0: 
698
699# IPv6 prefix to use for stateful address decompression.
700# A string
701#6lowpan.context1: 
702
703# IPv6 prefix to use for stateful address decompression.
704# A string
705#6lowpan.context2: 
706
707# IPv6 prefix to use for stateful address decompression.
708# A string
709#6lowpan.context3: 
710
711# IPv6 prefix to use for stateful address decompression.
712# A string
713#6lowpan.context4: 
714
715# IPv6 prefix to use for stateful address decompression.
716# A string
717#6lowpan.context5: 
718
719# IPv6 prefix to use for stateful address decompression.
720# A string
721#6lowpan.context6: 
722
723# IPv6 prefix to use for stateful address decompression.
724# A string
725#6lowpan.context7: 
726
727# IPv6 prefix to use for stateful address decompression.
728# A string
729#6lowpan.context8: 
730
731# IPv6 prefix to use for stateful address decompression.
732# A string
733#6lowpan.context9: 
734
735# IPv6 prefix to use for stateful address decompression.
736# A string
737#6lowpan.context10: 
738
739# IPv6 prefix to use for stateful address decompression.
740# A string
741#6lowpan.context11: 
742
743# IPv6 prefix to use for stateful address decompression.
744# A string
745#6lowpan.context12: 
746
747# IPv6 prefix to use for stateful address decompression.
748# A string
749#6lowpan.context13: 
750
751# IPv6 prefix to use for stateful address decompression.
752# A string
753#6lowpan.context14: 
754
755# IPv6 prefix to use for stateful address decompression.
756# A string
757#6lowpan.context15: 
758
759# Radiotap has a bit to indicate whether the FCS is still on the frame or not. Some generators (e.g. AirPcap) use a non-standard radiotap flag 14 to put the FCS into the header.
760# TRUE or FALSE (case-insensitive)
761#radiotap.bit14_fcs_in_header: FALSE
762
763# Some generators use rates with bit 7 set to indicate an MCS, e.g. BSD. others (Linux, AirPcap) do not.
764# TRUE or FALSE (case-insensitive)
765#radiotap.interpret_high_rates_as_mcs: FALSE
766
767# Use ipaccess nanoBTS specific definitions for OML
768# One of: ETSI/3GPP TS 12.21, Siemens, ip.access, Ericsson OM2000
769# (case-insensitive).
770#gsm_abis_oml.oml_dialect: ETSI/3GPP TS 12.21
771
772# UDP port used by A21, usually 23272
773# A decimal number
774#a21.udp.port: 0
775
776# Enable Streaming DMX extension dissector (ANSI BSR E1.31)
777# TRUE or FALSE (case-insensitive)
778#acn.dmx_enable: FALSE
779
780# Display format
781# One of: Hex    , Decimal, Percent
782# (case-insensitive).
783#acn.dmx_display_view: Hex    
784
785# Display zeros instead of dots
786# TRUE or FALSE (case-insensitive)
787#acn.dmx_display_zeros: FALSE
788
789# Display leading zeros on levels
790# TRUE or FALSE (case-insensitive)
791#acn.dmx_display_leading_zeros: FALSE
792
793# Display line format
794# One of: 20 per line, 16 per line
795# (case-insensitive).
796#acn.dmx_display_line_format: 20 per line
797
798# Set the UDP port for AudioCodes Trunk Traces.Use http://x.x.x.x/TrunkTraces to enable the traces in the Blade
799# A decimal number
800#actrace.udp_port: 2428
801
802# Server Port
803# A decimal number
804#adb_cs.server_port: 5037
805
806# Dissect more detail for framebuffer service
807# TRUE or FALSE (case-insensitive)
808#adb_service.framebuffer_more_details: FALSE
809
810# Set the UDP port for ADwin packets (if other than the default of 6543)
811# A decimal number
812#adwin.udp.port: 6543
813
814# Specify if the Data sections of packets should be dissected or not
815# TRUE or FALSE (case-insensitive)
816#adwin.dissect_data: TRUE
817
818# Include next/previous frame for channel, stream, and term, and other transport sequence analysis.
819# TRUE or FALSE (case-insensitive)
820#aeron.sequence_analysis: FALSE
821
822# Include stream analysis, tracking publisher and subscriber positions. Requires "Analyze transport sequencing".
823# TRUE or FALSE (case-insensitive)
824#aeron.stream_analysis: FALSE
825
826# Reassemble fragmented data messages. Requires "Analyze transport sequencing" and "Analyze stream sequencing".
827# TRUE or FALSE (case-insensitive)
828#aeron.reassemble_fragments: FALSE
829
830# Use a registered heuristic sub-dissector to decode the payload data. Requires "Analyze transport sequencing", "Analyze stream sequencing", and "Reassemble fragmented data".
831# TRUE or FALSE (case-insensitive)
832#aeron.use_heuristic_subdissectors: FALSE
833
834# Set the TCP port for AgentX(if other than the default of 705)
835# A decimal number
836#agentx.tcp.agentx_port: 705
837
838# Whether the AIM dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
839# TRUE or FALSE (case-insensitive)
840#aim.desegment: TRUE
841
842# Specifies the UDP destination port for automatic dissection of ALC packets
843# A decimal number
844#alc.default.udp_port: 0
845
846# Whether the LCT header Codepoint field should be considered the FEC Encoding ID of carried object
847# TRUE or FALSE (case-insensitive)
848#alc.lct.codepoint_as_fec_id: TRUE
849
850# How to decode LCT header extension 192
851# One of: Don't decode, Decode as FLUTE extension (EXT_FDT)
852# (case-insensitive).
853#alc.lct.ext.192: Decode as FLUTE extension (EXT_FDT)
854
855# How to decode LCT header extension 193
856# One of: Don't decode, Decode as FLUTE extension (EXT_CENC)
857# (case-insensitive).
858#alc.lct.ext.193: Decode as FLUTE extension (EXT_CENC)
859
860# Whether persistent call leg information is to be kept
861# TRUE or FALSE (case-insensitive)
862#alcap.leg_info: TRUE
863
864# Set the TCP port for AMQP(if other than the default of 5672)
865# A decimal number
866#amqp.tcp.port: 5672
867
868# Set the TCP port for AMQP over TLS/SSL(if other than the default of 5671)
869# A decimal number
870#amqp.ssl.port: 5671
871
872# The dynamic payload type which will be interpreted as AMR; The value must be greater than 95
873# A decimal number
874#amr.dynamic.payload.type: 0
875
876# Type of AMR encoding of the payload
877# One of: RFC 3267 octet aligned, RFC 3267 BW-efficient, AMR IF1, AMR IF2
878# (case-insensitive).
879#amr.encoding.version: RFC 3267 octet aligned
880
881# The AMR mode
882# One of: Narrowband AMR, Wideband AMR
883# (case-insensitive).
884#amr.mode: Narrowband AMR
885
886# (if other than the default of IOS 4.0.1)
887# One of: IS-634 rev. 0, TSB-80, IS-634-A, IOS 2.x, IOS 3.x, IOS 4.0.1, IOS 5.0.1
888# (case-insensitive).
889#ansi_a_bsmap.global_variant: IOS 4.0.1
890
891# Whether the mobile ID and service options are displayed in the INFO column
892# TRUE or FALSE (case-insensitive)
893#ansi_a_bsmap.top_display_mid_so: TRUE
894
895# ANSI MAP SSNs to decode as ANSI MAP
896# A string denoting an positive integer range (e.g., "1-20,30-40")
897#ansi_map.map.ssn: 5-14
898
899# Type of matching invoke/response, risk of mismatch if loose matching chosen
900# One of: Transaction ID only, Transaction ID and Source, Transaction ID Source and Destination
901# (case-insensitive).
902#ansi_map.transaction.matchtype: Transaction ID and Source
903
904# Type of matching invoke/response, risk of mismatch if loose matching chosen
905# One of: Transaction ID only, Transaction ID and Source, Transaction ID Source and Destination
906# (case-insensitive).
907#ansi_tcap.transaction.matchtype: Transaction ID only
908
909# Whether the AOL dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
910# TRUE or FALSE (case-insensitive)
911#aol.desegment: TRUE
912
913# Attempt to display common APRS protocol violations correctly
914# TRUE or FALSE (case-insensitive)
915#aprs.showaprslax: FALSE
916
917# AR Drone UDP port
918# A decimal number
919#ar_drone.udp.port: 0
920
921# Attempt to detect excessive rate of ARP requests
922# TRUE or FALSE (case-insensitive)
923#arp.detect_request_storms: FALSE
924
925# Number of requests needed within period to indicate a storm
926# A decimal number
927#arp.detect_storm_number_of_packets: 30
928
929# Period in milliseconds during which a packet storm may be detected
930# A decimal number
931#arp.detect_storm_period: 100
932
933# Attempt to detect duplicate use of IP addresses
934# TRUE or FALSE (case-insensitive)
935#arp.detect_duplicate_ips: TRUE
936
937# Try to resolve physical addresses to host names from ARP requests/responses
938# TRUE or FALSE (case-insensitive)
939#arp.register_network_address_binding: TRUE
940
941# Set the UDP port numbers (typically the range 5555 to 5560) used for Aruba Networks encapsulated remote mirroring frames;
942# 0 (default) means that the ARUBA_ERM dissector is not active
943# 
944# A string denoting an positive integer range (e.g., "1-20,30-40")
945#aruba_erm.udp.ports: 0
946
947# Select the CAT001 version
948# One of: Version 1.2
949# (case-insensitive).
950#asterix.i001_version: Version 1.2
951
952# Select the CAT001 version
953# One of: Version 1.0
954# (case-insensitive).
955#asterix.i002_version: Version 1.0
956
957# Select the CAT004 version
958# One of: Version 1.7
959# (case-insensitive).
960#asterix.i004_version: Version 1.7
961
962# Select the CAT008 version
963# One of: Version 1.1
964# (case-insensitive).
965#asterix.i008_version: Version 1.1
966
967# Select the CAT009 version
968# One of: Version 2.0
969# (case-insensitive).
970#asterix.i009_version: Version 2.0
971
972# Select the CAT021 version
973# One of: Version 2.3, Version 2.1
974# (case-insensitive).
975#asterix.i021_version: Version 2.3
976
977# Select the CAT023 version
978# One of: Version 1.2
979# (case-insensitive).
980#asterix.i023_version: Version 1.2
981
982# Select the CAT025 version
983# One of: Version 1.1
984# (case-insensitive).
985#asterix.i025_version: Version 1.1
986
987# Select the CAT034 version
988# One of: Version 1.27
989# (case-insensitive).
990#asterix.i034_version: Version 1.27
991
992# Select the CAT048 version
993# One of: Version 1.17
994# (case-insensitive).
995#asterix.i048_version: Version 1.17
996
997# Select the CAT062 version
998# One of: Version 1.16, Version 0.17
999# (case-insensitive).
1000#asterix.i062_version: Version 1.16
1001
1002# Select the CAT063 version
1003# One of: Version 1.3
1004# (case-insensitive).
1005#asterix.i063_version: Version 1.3
1006
1007# Select the CAT065 version
1008# One of: Version 1.3
1009# (case-insensitive).
1010#asterix.i065_version: Version 1.3
1011
1012# Autodection between LANE and SSCOP is hard. As default LANE is preferred
1013# TRUE or FALSE (case-insensitive)
1014#atm.dissect_lane_as_sscop: FALSE
1015
1016# ATMTCP TCP port if other than the default
1017# A decimal number
1018#atmtcp.tcp.port: 2812
1019
1020# Whether the ATP dissector should reassemble messages spanning multiple DDP packets
1021# TRUE or FALSE (case-insensitive)
1022#atp.desegment: TRUE
1023
1024# Enable checksum calculation.
1025# TRUE or FALSE (case-insensitive)
1026#ax25_kiss.showcksum: FALSE
1027
1028# Enable decoding of the payload as APRS.
1029# TRUE or FALSE (case-insensitive)
1030#ax25_nol3.showaprs: FALSE
1031
1032# Enable decoding of the payload as DX cluster info.
1033# TRUE or FALSE (case-insensitive)
1034#ax25_nol3.showcluster: FALSE
1035
1036# Banana TCP Port range
1037# A string denoting an positive integer range (e.g., "1-20,30-40")
1038#banana.tcp.port: 
1039
1040# Set the port for B.A.T.M.A.N. BAT messages (if other than the default of 4305)
1041# A decimal number
1042#bat.batman.bat.port: 4305
1043
1044# Set the port for B.A.T.M.A.N. Gateway messages (if other than the default of 4306)
1045# A decimal number
1046#bat.batman.gw.port: 4306
1047
1048# Set the port for B.A.T.M.A.N. VIS messages (if other than the default of 4307)
1049# A decimal number
1050#bat.batman.vis.port: 4307
1051
1052# Ethertype used to indicate B.A.T.M.A.N. packet.
1053# A hexadecimal number
1054#batadv.batmanadv.ethertype: 0x4305
1055
1056# Whether the Bazaar dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1057# TRUE or FALSE (case-insensitive)
1058#bzr.desegment: TRUE
1059
1060# Set the port for BEEP messages (if other than the default of 10288)
1061# A decimal number
1062#beep.tcp.port: 10288
1063
1064# Specifies that BEEP requires CRLF as a terminator, and not just CR or LF
1065# TRUE or FALSE (case-insensitive)
1066#beep.strict_header_terminator: TRUE
1067
1068# Whether the dissector should also display internal ASN.1 BER details such as Identifier and Length fields
1069# TRUE or FALSE (case-insensitive)
1070#ber.show_internals: FALSE
1071
1072# Whether the dissector should decode unexpected tags as ASN.1 BER encoded data
1073# TRUE or FALSE (case-insensitive)
1074#ber.decode_unexpected: FALSE
1075
1076# Whether the dissector should try decoding OCTET STRINGs as constructed ASN.1 BER encoded data
1077# TRUE or FALSE (case-insensitive)
1078#ber.decode_octetstring: FALSE
1079
1080# Whether the dissector should try decoding unknown primitive as constructed ASN.1 BER encoded data
1081# TRUE or FALSE (case-insensitive)
1082#ber.decode_primitive: FALSE
1083
1084# Whether the dissector should warn if excessive leading zero (0) bits
1085# TRUE or FALSE (case-insensitive)
1086#ber.warn_too_many_bytes: FALSE
1087
1088# Whether the BGP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1089# TRUE or FALSE (case-insensitive)
1090#bgp.desegment: TRUE
1091
1092# BGP dissector detect the length of the AS number in AS_PATH attributes automatically or manually (NOTE: Automatic detection is not 100% accurate)
1093# One of: Auto-detect, 2 octet, 4 octet
1094# (case-insensitive).
1095#bgp.asn_len: Auto-detect
1096
1097# Whether the Bitcoin dissector should desegment all messages spanning multiple TCP segments
1098# TRUE or FALSE (case-insensitive)
1099#bitcoin.desegment: TRUE
1100
1101# Whether the BitTorrent dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1102# TRUE or FALSE (case-insensitive)
1103#bittorrent.desegment: TRUE
1104
1105# Enabling this will tell which BitTorrent client that produced the handshake message
1106# TRUE or FALSE (case-insensitive)
1107#bittorrent.decode_client: FALSE
1108
1109# Whether the BMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1110# TRUE or FALSE (case-insensitive)
1111#bmp.desegment: TRUE
1112
1113# Novell Servers option 85 can be configured as a string instead of address
1114# TRUE or FALSE (case-insensitive)
1115#bootp.novellserverstring: FALSE
1116
1117# The PacketCable CCC protocol version
1118# One of: PKT-SP-PROV-I05-021127, IETF Draft 5, RFC 3495
1119# (case-insensitive).
1120#bootp.pkt.ccc.protocol_version: RFC 3495
1121
1122# Option Number for PacketCable CableLabs Client Configuration
1123# A decimal number
1124#bootp.pkt.ccc.option: 122
1125
1126# Endianness applied to UUID fields
1127# One of: Little Endian, Big Endian
1128# (case-insensitive).
1129#bootp.uuid.endian: Little Endian
1130
1131# Set the UDP port for BRP messages
1132# A decimal number
1133#brp.port: 0
1134
1135# For the sake of sub-dissectors registering to accept data from the BSSAP/BSAP dissector, this defines whether it is identified as BSSAP or BSAP.
1136# One of: BSSAP, BSAP
1137# (case-insensitive).
1138#bssap.bsap_or_bssap: BSSAP
1139
1140# GSM-A is the interface between the BSC and the MSC. Lb is the interface between the BSC and the SMLC.
1141# One of: GSM A, Lb
1142# (case-insensitive).
1143#bssap.gsm_or_lb_interface: GSM A
1144
1145# Set Subsystem number used for BSSAP/BSSAP+
1146# A decimal number
1147#bssap.ssn: 98
1148
1149# Decode NRI (for use with SGSN in Pool)
1150# TRUE or FALSE (case-insensitive)
1151#bssgp.decode_nri: FALSE
1152
1153# NRI length, in bits
1154# A decimal number
1155#bssgp.nri_length: 4
1156
1157# Force decoding stream as A2DP with Content Protection SCMS-T 
1158# TRUE or FALSE (case-insensitive)
1159#bta2dp.a2dp.content_protection.scms_t: FALSE
1160
1161# Force decoding stream as A2DP with specified codec
1162# One of: Default, SBC, MPEG12 AUDIO, MPEG24 AAC, APT-X
1163# (case-insensitive).
1164#bta2dp.a2dp.codec: Default
1165
1166# Dissecting the top protocols
1167# TRUE or FALSE (case-insensitive)
1168#btbnep.bnep.top_dissect: TRUE
1169
1170# If "yes" localhost will be treat as Client, "no" as Server
1171# One of: Default, Yes, No
1172# (case-insensitive).
1173#bthcrp.hcrp.force_client: Default
1174
1175# L2CAP PSM for Control
1176# A decimal number
1177#bthcrp.hcrp.control.psm: 0
1178
1179# L2CAP PSM for Data
1180# A decimal number
1181#bthcrp.hcrp.data.psm: 0
1182
1183# L2CAP PSM for Notification
1184# A decimal number
1185#bthcrp.hcrp.notification.psm: 0
1186
1187# Force treat packets as AG or HS role
1188# One of: Off, Sent is AG, Rcvd is HS, Sent is HS, Rcvd is AG
1189# (case-insensitive).
1190#bthfp.hfp.hfp_role: Off
1191
1192# Show what is deprecated in HID 1.1
1193# TRUE or FALSE (case-insensitive)
1194#bthid.hid.deprecated: FALSE
1195
1196# Force treat packets as AG or HS role
1197# One of: Off, Sent is AG, Rcvd is HS, Sent is HS, Rcvd is AG
1198# (case-insensitive).
1199#bthsp.hsp.hsp_role: Off
1200
1201# Turn on/off decode by next rules
1202# TRUE or FALSE (case-insensitive)
1203#btrfcomm.rfcomm.decode_by.enabled: FALSE
1204
1205# Dissecting the top protocols
1206# One of: off, Put higher dissectors under this one, On top
1207# (case-insensitive).
1208#btsap.sap.top_dissect: Put higher dissectors under this one
1209
1210# Force decoding stream as VDP with Content Protection SCMS-T 
1211# TRUE or FALSE (case-insensitive)
1212#btvdp.vdp.content_protection.scms_t: FALSE
1213
1214# Force decoding stream as VDP with specified codec
1215# One of: H263, MPEG4 VSP
1216# (case-insensitive).
1217#btvdp.vdp.codec: H263
1218
1219# Dissect next layer
1220# TRUE or FALSE (case-insensitive)
1221#btsnoop.dissect_next_layer: FALSE
1222
1223# TCP Port to Accept Bundle Protocol Connections
1224# A decimal number
1225#bundle.tcp.port: 4556
1226
1227# UDP Port to Accept Bundle Protocol Connections
1228# A decimal number
1229#bundle.udp.port: 4556
1230
1231# Set an additional UDP port, besides the standard X'BAC0' (47808) port.
1232# A decimal number
1233#bvlc.additional_udp_port: 0
1234
1235# Whether the C12.22 dissector should reassemble all messages spanning multiple TCP segments
1236# TRUE or FALSE (case-insensitive)
1237#c1222.desegment: TRUE
1238
1239# Base object identifier for use in resolving relative object identifiers
1240# A string
1241#c1222.baseoid: 
1242
1243# Whether the C12.22 dissector should verify the crypto for all relevant messages
1244# TRUE or FALSE (case-insensitive)
1245#c1222.decrypt: TRUE
1246
1247# The date format: (DD/MM) or (MM/DD)
1248# One of: DD/MM/YYYY, MM/DD/YYYY
1249# (case-insensitive).
1250#camel.date.format: DD/MM/YYYY
1251
1252# TCAP Subsystem numbers used for Camel
1253# A string denoting an positive integer range (e.g., "1-20,30-40")
1254#camel.tcap.ssn: 146
1255
1256# Enable response time analysis
1257# TRUE or FALSE (case-insensitive)
1258#camel.srt: FALSE
1259
1260# Statistics for Response Time
1261# TRUE or FALSE (case-insensitive)
1262#camel.persistentsrt: FALSE
1263
1264# Whether the CAN ID/flags field should be byte-swapped
1265# TRUE or FALSE (case-insensitive)
1266#can.byte_swap: FALSE
1267
1268# Set the port for CAPWAP Control messages (if other than the default of 5246)
1269# A decimal number
1270#capwap.udp.port.control: 5246
1271
1272# Set the port for CAPWAP Data messages (if other than the default of 5247)
1273# A decimal number
1274#capwap.udp.port.data: 5247
1275
1276# Enable support of Cisco Wireless Controller (based on old 8 draft revision).
1277# TRUE or FALSE (case-insensitive)
1278#capwap.draft_8_cisco: FALSE
1279
1280# Reassemble fragmented CAPWAP packets.
1281# TRUE or FALSE (case-insensitive)
1282#capwap.reassemble: TRUE
1283
1284# Swap frame control bytes (needed for some APs).
1285# TRUE or FALSE (case-insensitive)
1286#capwap.swap_fc: TRUE
1287
1288# Whether the CAST dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1289# TRUE or FALSE (case-insensitive)
1290#cast.reassembly: TRUE
1291
1292# Whether the checksum of all messages should be validated or not
1293# TRUE or FALSE (case-insensitive)
1294#cattp.checksum: TRUE
1295
1296# Specify how the dissector should handle the CCSDS checkword
1297# One of: Use header flag, Override header flag to be false, Override header flag to be true
1298# (case-insensitive).
1299#ccsds.global_pref_checkword: Use header flag
1300
1301# Set the port(s) for NetFlow messages (default: 2055,9996)
1302# A string denoting an positive integer range (e.g., "1-20,30-40")
1303#cflow.netflow.ports: 2055,9996
1304
1305# Set the port(s) for IPFIX messages (default: 4739)
1306# A string denoting an positive integer range (e.g., "1-20,30-40")
1307#cflow.ipfix.ports: 4739
1308
1309# Set the number of fields allowed in a template.  Use 0 (zero) for unlimited.   (default: 60)
1310# A decimal number
1311#cflow.max_template_fields: 60
1312
1313# The type of CHDLC frame checksum (none, 16-bit, 32-bit)
1314# One of: None, 16-Bit, 32-Bit
1315# (case-insensitive).
1316#chdlc.fcs_type: None
1317
1318# The version of CIGI with which to dissect packets
1319# One of: From Packet, CIGI 2, CIGI 3
1320# (case-insensitive).
1321#cigi.version: From Packet
1322
1323# The byte order with which to dissect CIGI packets (CIGI3)
1324# One of: From Packet, Big-Endian, Little-Endian
1325# (case-insensitive).
1326#cigi.byte_order: From Packet
1327
1328# IPv4 address or hostname of the host
1329# A string
1330#cigi.host: 
1331
1332# IPv4 address or hostname of the image generator
1333# A string
1334#cigi.ig: 
1335
1336# Whether the CIP dissector should display enhanced/verbose data in the Info column for CIP explicit messages
1337# TRUE or FALSE (case-insensitive)
1338#cip.enhanced_info_column: TRUE
1339
1340# NSAP selector for Transport Protocol (last byte in hex)
1341# A hexadecimal number
1342#clnp.tp_nsap_selector: 0x21
1343
1344# Always try to decode NSDU as transport PDUs
1345# TRUE or FALSE (case-insensitive)
1346#clnp.always_decode_transport: FALSE
1347
1348# Whether segmented CLNP datagrams should be reassembled
1349# TRUE or FALSE (case-insensitive)
1350#clnp.reassemble: TRUE
1351
1352# Whether ATN security label should be decoded
1353# TRUE or FALSE (case-insensitive)
1354#clnp.decode_atn_options: FALSE
1355
1356# Whether the CMP-over-TCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1357# TRUE or FALSE (case-insensitive)
1358#cmp.desegment: TRUE
1359
1360# Decode this TCP port's traffic as CMP. Set to "0" to disable.
1361# A decimal number
1362#cmp.tcp_alternate_port: 0
1363
1364# Decode this TCP port's traffic as CMP-over-HTTP. Set to "0" to disable. Use this if the Content-Type is not set correctly.
1365# A decimal number
1366#cmp.http_alternate_port: 0
1367
1368# Decode this TCP port's traffic as TCP-transport-style CMP-over-HTTP. Set to "0" to disable. Use this if the Content-Type is not set correctly.
1369# A decimal number
1370#cmp.tcp_style_http_alternate_port: 0
1371
1372# Port number used for CoAP traffic
1373# A decimal number
1374#coap.udp_port: 5683
1375
1376# Set the UDP port for collectd messages
1377# A decimal number
1378#collectd.udp.port: 25826
1379
1380# Set the TCP port for COPS messages
1381# A decimal number
1382#cops.tcp.cops_port: 3288
1383
1384# Whether the COPS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1385# TRUE or FALSE (case-insensitive)
1386#cops.desegment: TRUE
1387
1388# Decode the COPS messages using PacketCable clients. (Select port 2126)
1389# TRUE or FALSE (case-insensitive)
1390#cops.packetcable: TRUE
1391
1392# Set the UDP port for totem ring protocol implemented in corosync cluster engine
1393# A decimal number
1394#corosync_totemnet.udp.port: 5405
1395
1396# Semicolon-separated  list of keys for decryption(e.g. key1;key2;...
1397# A string
1398#corosync_totemnet.private_keys: 
1399
1400# Whether segmented COTP datagrams should be reassembled. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1401# TRUE or FALSE (case-insensitive)
1402#cotp.reassemble: TRUE
1403
1404# How TSAPs should be displayed
1405# One of: As strings if printable, As strings, As bytes
1406# (case-insensitive).
1407#cotp.tsap_display: As strings if printable
1408
1409# Whether to decode OSI TPDUs with ATN (Aereonautical Telecommunications Network) extensions. To use this option, you must also enable "Always try to decode NSDU as transport PDUs" in the CLNP protocol settings.
1410# TRUE or FALSE (case-insensitive)
1411#cotp.decode_atn: FALSE
1412
1413# Whether the memcache dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1414# TRUE or FALSE (case-insensitive)
1415#couchbase.desegment_pdus: TRUE
1416
1417# TCP ports to be decoded as Couchbase (default is 11210)
1418# A string denoting an positive integer range (e.g., "1-20,30-40")
1419#couchbase.tcp.ports: 11210
1420
1421# Set the TCP port for CP 2179 Protocol packets (if other than the default of 0)
1422# A decimal number
1423#cp2179.tcp.port: 0
1424
1425# Whether the SEL Protocol dissector should automatically pre-process Telnet data to remove IAC bytes
1426# TRUE or FALSE (case-insensitive)
1427#cp2179.telnetclean: TRUE
1428
1429# Set the port for CPFI messages (if other than the default of 5000)
1430# A decimal number
1431#cpfi.udp.port: 5000
1432
1433# Set the port for InstanceToInstance messages (if other than the default of 5001)
1434# A decimal number
1435#cpfi.udp.port2: 5001
1436
1437# Control the way the '-->' is displayed. When enabled, keeps the 'lowest valued' endpoint of the src-dest pair on the left, and the arrow moves to distinguish source from dest. When disabled, keeps the arrow pointing right so the source of the frame is always on the left.
1438# TRUE or FALSE (case-insensitive)
1439#cpfi.arrow_ctl: TRUE
1440
1441# Set the destination UDP port Cisco wireless IDS messages
1442# A decimal number
1443#cwids.udp.port: 0
1444
1445# Show not dissected data on new Packet Bytes pane
1446# TRUE or FALSE (case-insensitive)
1447#data.datapref.newpane: FALSE
1448
1449# Show data as text in the Packet Details pane
1450# TRUE or FALSE (case-insensitive)
1451#data.show_as_text: FALSE
1452
1453# Whether or not MD5 hashes should be generated and shown for each payload.
1454# TRUE or FALSE (case-insensitive)
1455#data.md5_hash: FALSE
1456
1457# Whether the LAN sync dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1458# TRUE or FALSE (case-insensitive)
1459#db-lsp.desegment_pdus: TRUE
1460
1461# Try to decode the payload using an heuristic sub-dissector
1462# TRUE or FALSE (case-insensitive)
1463#db-lsp.try_heuristic: TRUE
1464
1465# Whether the DCCP summary line should be shown in the protocol tree
1466# TRUE or FALSE (case-insensitive)
1467#dccp.summary_in_tree: TRUE
1468
1469# Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
1470# TRUE or FALSE (case-insensitive)
1471#dccp.try_heuristic_first: FALSE
1472
1473# Whether to check the validity of the DCCP checksum
1474# TRUE or FALSE (case-insensitive)
1475#dccp.check_checksum: TRUE
1476
1477# Whether the DCE/RPC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1478# TRUE or FALSE (case-insensitive)
1479#dcerpc.desegment_dcerpc: TRUE
1480
1481# Whether the DCE/RPC dissector should reassemble fragmented DCE/RPC PDUs
1482# TRUE or FALSE (case-insensitive)
1483#dcerpc.reassemble_dcerpc: TRUE
1484
1485# Display some DCOM unmarshalled fields usually hidden
1486# TRUE or FALSE (case-insensitive)
1487#dcom.display_unmarshalling_details: FALSE
1488
1489# If a payload looks like it's embedded in an IP primitive message, and there is a Wireshark dissector matching the DCT2000 protocol name, try parsing the payload using that dissector
1490# TRUE or FALSE (case-insensitive)
1491#dct2000.ipprim_heuristic: TRUE
1492
1493# If a payload looks like it's embedded in an SCTP primitive message, and there is a Wireshark dissector matching the DCT2000 protocol name, try parsing the payload using that dissector
1494# TRUE or FALSE (case-insensitive)
1495#dct2000.sctpprim_heuristic: TRUE
1496
1497# When set, attempt to decode LTE RRC frames. Note that this won't affect other protocols that also call the LTE RRC dissector
1498# TRUE or FALSE (case-insensitive)
1499#dct2000.decode_lte_rrc: TRUE
1500
1501# When set, attempt to decode LTE S1AP frames. Note that this won't affect other protocols that also call the LTE S1AP dissector
1502# TRUE or FALSE (case-insensitive)
1503#dct2000.decode_lte_s1ap: TRUE
1504
1505# When set, look for formatted messages indicating specific events.  This may be quite slow, so should be disabled if LTE MAC is not being analysed
1506# TRUE or FALSE (case-insensitive)
1507#dct2000.decode_mac_lte_oob_messages: TRUE
1508
1509# Set the port for DHCP failover communications
1510# A decimal number
1511#dhcpfo.tcp_port: 519
1512
1513# Whether the DHCP failover dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1514# TRUE or FALSE (case-insensitive)
1515#dhcpfo.desegment: TRUE
1516
1517# Whether Option 18 is dissected as CableLab or RFC 3315
1518# TRUE or FALSE (case-insensitive)
1519#dhcpv6.cablelabs_interface_id: FALSE
1520
1521# Whether the Bulk Leasequery dissector should desegment all messages spanning multiple TCP segments
1522# TRUE or FALSE (case-insensitive)
1523#dhcpv6.bulk_leasequery.desegment: TRUE
1524
1525# TCP ports to be decoded as Diameter (default: 3868)
1526# A string denoting an positive integer range (e.g., "1-20,30-40")
1527#diameter.tcp.ports: 3868
1528
1529# SCTP ports to be decoded as Diameter (default: 3868)
1530# A string denoting an positive integer range (e.g., "1-20,30-40")
1531#diameter.sctp.ports: 3868
1532
1533# Whether the Diameter dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1534# TRUE or FALSE (case-insensitive)
1535#diameter.desegment: TRUE
1536
1537# UDP ports to be decoded as Diameter (default: 0 as Diameter over UDP is nonstandard)
1538# A string denoting an positive integer range (e.g., "1-20,30-40")
1539#diameter.udp.ports: 
1540
1541# DICOM Ports range
1542# A string denoting an positive integer range (e.g., "1-20,30-40")
1543#dicom.tcp.port: 104
1544
1545# Create DICOM File Meta Header according to PS 3.10 on export for PDUs. If the captured PDV does not contain a SOP Class UID and SOP Instance UID (e.g. for command PDVs), wireshark specific ones will be created.
1546# TRUE or FALSE (case-insensitive)
1547#dicom.export_header: TRUE
1548
1549# Do not show items below this size in the export list. Set it to 0, to see DICOM commands and responses in the list. Set it higher, to just export DICOM IODs (i.e. CT Images, RT Structures).
1550# A decimal number
1551#dicom.export_minsize: 4096
1552
1553# Create a node for sequences and items, and show children in a hierarchy. Deselect this option, if you prefer a flat display or e.g. when using TShark to create a text output.
1554# TRUE or FALSE (case-insensitive)
1555#dicom.seq_tree: TRUE
1556
1557# Create a node for a tag and show tag details as single elements. This can be useful to debug a tag and to allow display filters on these attributes. When using TShark to create a text output, it's better to have it disabled. 
1558# TRUE or FALSE (case-insensitive)
1559#dicom.tag_tree: FALSE
1560
1561# Show message ID and number of completed, remaining, warned or failed operations in header and info column.
1562# TRUE or FALSE (case-insensitive)
1563#dicom.cmd_details: TRUE
1564
1565# Decode all DICOM tags in the last PDV. This will ensure the proper reassembly. When not set, the decoding may fail and the exports may become corrupt.
1566# TRUE or FALSE (case-insensitive)
1567#dicom.pdv_reassemble: TRUE
1568
1569# Set the UDP port for DIS messages
1570# A decimal number
1571#dis.udp.port: 3000
1572
1573# Set the TCP port for DISTCC messages
1574# A decimal number
1575#distcc.tcp.port: 3632
1576
1577# Whether the DISTCC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1578# TRUE or FALSE (case-insensitive)
1579#distcc.desegment_distcc_over_tcp: TRUE
1580
1581# Whether DJIUAV should reassemble messages spanning multiple TCP segments (required to get useful results)
1582# TRUE or FALSE (case-insensitive)
1583#djiuav.desegment: TRUE
1584
1585# Set the TCP port for Distributed Lock Manager
1586# A decimal number
1587#dlm3.tcp.port: 21064
1588
1589# Set the SCTP port for Distributed Lock Manager
1590# A decimal number
1591#dlm3.sctp.port: 21064
1592
1593# Port numbers used for DMP traffic
1594# A string denoting an positive integer range (e.g., "1-20,30-40")
1595#dmp.udp_ports: 5031
1596
1597# Select the type of decoding for nationally-defined values
1598# One of: None (raw data), As for regular, Thales XOmail
1599# (case-insensitive).
1600#dmp.national_decode: As for regular
1601
1602# Select the nation of sending server.  This is used when presenting security classification values in messages with security policy set to National (nation of local server)
1603# One of: None, Albania, Armenia, Austria, Azerbaijan, Belarus, Belgium, Bosnia and Hercegowina, Bulgaria, Canada, Croatia, Czech Republic, Denmark, Estonia, Euro-Atlantic Partnership Council (EAPC), European Union (EU), Finland, Former Yugoslav Republic of Macedonia, France, Georgia, Germany, Greece, Hungary, Iceland, International Security Assistance Force (ISAF), Ireland, Italy, Kazakhstan, Kyrgyztan, Latvia, Lithuania, Luxembourg, Malta, Moldova, Montenegro, Netherlands, Norway, Partnership for Peace (PfP), Poland, Portugal, Romania, Russian Federation, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Tajikistan, Turkey, Turkmenistan, United Kingdom, United States, Ukraine, Uzbekistan, Western European Union (WEU)
1604# (case-insensitive).
1605#dmp.local_nation: None
1606
1607# Calculate sequence/acknowledgement analysis
1608# TRUE or FALSE (case-insensitive)
1609#dmp.seq_ack_analysis: TRUE
1610
1611# Align identifiers in info list (does not align when retransmission or duplicate acknowledgement indication)
1612# TRUE or FALSE (case-insensitive)
1613#dmp.align_ids: FALSE
1614
1615# Print subject as body id in free text messages with subject
1616# TRUE or FALSE (case-insensitive)
1617#dmp.subject_as_id: FALSE
1618
1619# Format of the structured message id
1620# One of: None, 1 Byte value, 2 Byte value, 4 Byte value, 8 Byte value, Fixed text string, Zero terminated text string
1621# (case-insensitive).
1622#dmp.struct_print: None
1623
1624# Used to set where the structured message id starts in the User Data
1625# A decimal number
1626#dmp.struct_offset: 0
1627
1628# Used to set length of fixed text string in the structured message id format (maximum 128 characters)
1629# A decimal number
1630#dmp.struct_length: 1
1631
1632# The way DMX values are displayed
1633# One of: Percent, Hexadecimal, Decimal
1634# (case-insensitive).
1635#dmx_chan.dmx_disp_chan_val_type: Percent
1636
1637# The way DMX channel numbers are displayed
1638# One of: Hexadecimal, Decimal
1639# (case-insensitive).
1640#dmx_chan.dmx_disp_chan_nr_type: Hexadecimal
1641
1642# The number of columns for the DMX display
1643# One of: 6, 10, 12, 16, 24
1644# (case-insensitive).
1645#dmx_chan.dmx_disp_col_count: 16
1646
1647# Whether the DNP3 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1648# TRUE or FALSE (case-insensitive)
1649#dnp3.desegment: TRUE
1650
1651# TCP ports to be decoded as DNS (default: 53)
1652# A string denoting an positive integer range (e.g., "1-20,30-40")
1653#dns.tcp.ports: 53
1654
1655# UDP ports to be decoded as DNS (default: 53)
1656# A string denoting an positive integer range (e.g., "1-20,30-40")
1657#dns.udp.ports: 53
1658
1659# Whether the DNS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1660# TRUE or FALSE (case-insensitive)
1661#dns.desegment_dns_messages: TRUE
1662
1663# Specifies that decryption should be attempted on all packets, even if the session initialization wasn't captured.
1664# TRUE or FALSE (case-insensitive)
1665#dof.custom_dof_decrypt_all: FALSE
1666
1667# Specifies that operations should be tracked across multiple packets, providing summary lists. This takes time and memory.
1668# TRUE or FALSE (case-insensitive)
1669#dof.custom_dof_track_operations: FALSE
1670
1671# Limits the number of operations shown before and after the current operations
1672# A decimal number
1673#dof.custom_dof_track_operations_window: 5
1674
1675# Whether the DRDA dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1676# TRUE or FALSE (case-insensitive)
1677#drda.desegment: TRUE
1678
1679# Whether the DSI dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1680# TRUE or FALSE (case-insensitive)
1681#dsi.desegment: TRUE
1682
1683# TCP port number for DTCP-IP
1684# A decimal number
1685#dtcp-ip.tcp.port: 0
1686
1687# redirect dtls debug to file name; leave empty to disable debug, use "-" to redirect output to stderr
1688# 
1689# A path to a file
1690#dtls.debug_file: 
1691
1692# Pre-Shared-Key as HEX string. Should be 0 to 16 bytes.
1693# A string
1694#dtls.psk: 
1695
1696# The name of a file which contains a list of 
1697# (pre-)master secrets in one of the following formats:
1698# 
1699# RSA <EPMS> <PMS>
1700# RSA Session-ID:<SSLID> Master-Key:<MS>
1701# CLIENT_RANDOM <CRAND> <MS>
1702# PMS_CLIENT_RANDOM <CRAND> <PMS>
1703# 
1704# Where:
1705# <EPMS> = First 8 bytes of the Encrypted PMS
1706# <PMS> = The Pre-Master-Secret (PMS) used to derive the MS
1707# <SSLID> = The SSL Session ID
1708# <MS> = The Master-Secret (MS)
1709# <CRAND> = The Client's random number from the ClientHello message
1710# 
1711# (All fields are in hex notation)
1712# A path to a file
1713#dtls.keylog_file: 
1714
1715# Set the TDP port for the DTPT Server
1716# A decimal number
1717#dtpt.tcp.port: 5721
1718
1719# SAC Encryption Key (16 hex bytes)
1720# A string
1721#dvb-ci.sek: 
1722
1723# SAC Init Vector (16 hex bytes)
1724# A string
1725#dvb-ci.siv: 
1726
1727# Dissect the content of messages transmitted on the Low-Speed Communication resource. This requires a dissector for the protocol and target port contained in the connection descriptor.
1728# TRUE or FALSE (case-insensitive)
1729#dvb-ci.dissect_lsc_msg: FALSE
1730
1731# Check this to enable full protocol dissection of data above GSE Layer
1732# TRUE or FALSE (case-insensitive)
1733#dvb-s2_modeadapt.full_decode: FALSE
1734
1735# Allow only packets with Major=0x03//Minor=0xFF as DVMRP V3 packets
1736# TRUE or FALSE (case-insensitive)
1737#dvmrp.strict_v3: FALSE
1738
1739# Whether the eDonkey dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1740# TRUE or FALSE (case-insensitive)
1741#edonkey.desegment: TRUE
1742
1743# Whether the EtherNet/IP dissector should desegment all messages spanning multiple TCP segments
1744# TRUE or FALSE (case-insensitive)
1745#enip.desegment: TRUE
1746
1747# Determines whether all I/O connections will assume a 32-bit header in the O->T direction
1748# TRUE or FALSE (case-insensitive)
1749#enip.o2t_run_idle: TRUE
1750
1751# Determines whether all I/O connections will assume a 32-bit header in the T->O direction
1752# TRUE or FALSE (case-insensitive)
1753#enip.t2o_run_idle: FALSE
1754
1755# The UDP port on which ENTTEC packets will be sent
1756# A decimal number
1757#enttec.udp_port: 3333
1758
1759# The TCP port on which ENTTEC packets will be sent
1760# A decimal number
1761#enttec.tcp_port: 3333
1762
1763# The way DMX values are displayed
1764# One of: Percent, Hexadecimal, Decimal
1765# (case-insensitive).
1766#enttec.dmx_disp_chan_val_type: Percent
1767
1768# The way DMX channel numbers are displayed
1769# One of: Hexadecimal, Decimal
1770# (case-insensitive).
1771#enttec.dmx_disp_chan_nr_type: Hexadecimal
1772
1773# The number of columns for the DMX display
1774# One of: 6, 10, 12, 16, 24
1775# (case-insensitive).
1776#enttec.dmx_disp_col_count: 16
1777
1778# If you are capturing in networks with multiplexed or slow nodes, this can be useful
1779# TRUE or FALSE (case-insensitive)
1780#epl.show_soc_flags: FALSE
1781
1782# For analysis purposes one might want to show the command layer even if the dissectore assumes a duplicated frame
1783# TRUE or FALSE (case-insensitive)
1784#epl.show_duplicated_command_layer: FALSE
1785
1786# Protocol encapsulated in HDLC records
1787# One of: Cisco HDLC, PPP serial, Frame Relay, SS7 MTP2, Attempt to guess
1788# (case-insensitive).
1789#erf.hdlc_type: Attempt to guess
1790
1791# Whether raw ATM cells should be treated as the first cell of an AAL5 PDU
1792# TRUE or FALSE (case-insensitive)
1793#erf.rawcell_first: FALSE
1794
1795# Protocol encapsulated in ATM AAL5 packets
1796# One of: Attempt to guess, LLC multiplexed, Unspecified
1797# (case-insensitive).
1798#erf.aal5_type: Attempt to guess
1799
1800# When set, dissector will FORCE to decode directly Ethernet FrameSome vendor use fake ERSPAN frame (with not ERSPAN Header)
1801# TRUE or FALSE (case-insensitive)
1802#erspan.fake_erspan: FALSE
1803
1804# This is done only if the Decoding is not SET or the packet does not belong to a SA. Assumes a 12 byte auth (HMAC-SHA1-96/HMAC-MD5-96/AES-XCBC-MAC-96) and attempts decode based on the ethertype 13 bytes from packet end
1805# TRUE or FALSE (case-insensitive)
1806#esp.enable_null_encryption_decode_heuristic: FALSE
1807
1808# Check that successive frames increase sequence number by 1 within an SPI.  This should work OK when only one host is sending frames on an SPI
1809# TRUE or FALSE (case-insensitive)
1810#esp.do_esp_sequence_analysis: TRUE
1811
1812# Attempt to decode based on the SAD described hereafter.
1813# TRUE or FALSE (case-insensitive)
1814#esp.enable_encryption_decode: FALSE
1815
1816# Attempt to Check ESP Authentication based on the SAD described hereafter.
1817# TRUE or FALSE (case-insensitive)
1818#esp.enable_authentication_check: FALSE
1819
1820# Whether the E-Tag summary line should be shown in the protocol tree
1821# TRUE or FALSE (case-insensitive)
1822#etag.summary_in_tree: TRUE
1823
1824# Place the hash/symbol files (generated by the Apache Etch compiler) ending with .ewh here
1825# A path to a directory
1826#etch.file: 
1827
1828# Etch TCP port
1829# A decimal number
1830#etch.tcp.port: 0
1831
1832# Some devices add trailing data to frames. When this setting is checked the Ethernet dissector will assume there has been added padding to the frame before the trailer was added. Uncheck if a device added a trailer before the frame was padded.
1833# TRUE or FALSE (case-insensitive)
1834#eth.assume_padding: TRUE
1835
1836# Some TAPs add a fixed length ethernet trailer at the end of the frame, but before the (optional) FCS. Make sure it gets interpreted correctly.
1837# A decimal number
1838#eth.trailer_length: 0
1839
1840# Some Ethernet adapters and drivers include the FCS at the end of a packet, others do not.  The Ethernet dissector attempts to guess whether a captured packet has an FCS, but it cannot always guess correctly.
1841# TRUE or FALSE (case-insensitive)
1842#eth.assume_fcs: FALSE
1843
1844# Whether to validate the Frame Check Sequence
1845# TRUE or FALSE (case-insensitive)
1846#eth.check_fcs: TRUE
1847
1848# Whether packets should be interpreted as coming from CheckPoint FireWall-1 monitor file if they look as if they do
1849# TRUE or FALSE (case-insensitive)
1850#eth.interpret_as_fw1_monitor: FALSE
1851
1852# Set the condition that must be true for the CCSDS dissector to be called
1853# TRUE or FALSE (case-insensitive)
1854#eth.ccsds_heuristic_length: FALSE
1855
1856# Set the condition that must be true for the CCSDS dissector to be called
1857# TRUE or FALSE (case-insensitive)
1858#eth.ccsds_heuristic_version: FALSE
1859
1860# Set the condition that must be true for the CCSDS dissector to be called
1861# TRUE or FALSE (case-insensitive)
1862#eth.ccsds_heuristic_header: FALSE
1863
1864# Set the condition that must be true for the CCSDS dissector to be called
1865# TRUE or FALSE (case-insensitive)
1866#eth.ccsds_heuristic_bit: FALSE
1867
1868# Whether the EVRC dissector should process payload type 60 as legacy EVRC packets
1869# TRUE or FALSE (case-insensitive)
1870#evrc.legacy_pt_60: FALSE
1871
1872# Controls the display of the session's username in the info column.  This is only displayed if the packet containing it was seen during this capture session.
1873# TRUE or FALSE (case-insensitive)
1874#exec.info_show_username: TRUE
1875
1876# Controls the display of the command being run on the server by this session in the info column.  This is only displayed if the packet containing it was seen during this capture session.
1877# TRUE or FALSE (case-insensitive)
1878#exec.info_show_command: FALSE
1879
1880# If enabled, reassembly of multi-frame sequences is done
1881# TRUE or FALSE (case-insensitive)
1882#fc.reassemble: TRUE
1883
1884# This is the size of non-last frames in a multi-frame sequence
1885# A decimal number
1886#fc.max_frame_size: 1024
1887
1888# Set the TCP port for FastCGI traffic
1889# A decimal number
1890#fcgi.tcp.port: 0
1891
1892# When this option is enabled Wireshark will attempt to identify FCoIB packets automatically based on some common features (may generate false positives)
1893# TRUE or FALSE (case-insensitive)
1894#fcoib.heur_en: TRUE
1895
1896# Enables dissecting packets between the manually configured source/destination as FCoIB traffic
1897# TRUE or FALSE (case-insensitive)
1898#fcoib.manual_en: FALSE
1899
1900# Type of address specified
1901# One of: LID, GID
1902# (case-insensitive).
1903#fcoib.addr_a_type: LID
1904
1905# LID/GID of address A
1906# A string
1907#fcoib.addr_a_id: 
1908
1909# QP Number for address A
1910# A decimal number
1911#fcoib.addr_a_qp: 0
1912
1913# Type of address specified
1914# One of: LID, GID
1915# (case-insensitive).
1916#fcoib.addr_b_type: LID
1917
1918# LID/GID of address B
1919# A string
1920#fcoib.addr_b_id: 
1921
1922# QP Number for address B
1923# A decimal number
1924#fcoib.addr_b_qp: 0
1925
1926# Whether the FDDI dissector should add 3-byte padding to all captured FDDI packets (useful with e.g. Tru64 UNIX tcpdump)
1927# TRUE or FALSE (case-insensitive)
1928#fddi.padding: FALSE
1929
1930# Whether the FCIP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1931# TRUE or FALSE (case-insensitive)
1932#fcip.desegment: TRUE
1933
1934# Port number used for FCIP
1935# A decimal number
1936#fcip.target_port: 3225
1937
1938# Dissect next layer
1939# TRUE or FALSE (case-insensitive)
1940#file-pcap.dissect_next_layer: FALSE
1941
1942# Dissect next layer
1943# TRUE or FALSE (case-insensitive)
1944#file-pcapng.dissect_next_layer: FALSE
1945
1946# Whether the FIX dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
1947# TRUE or FALSE (case-insensitive)
1948#fix.desegment: TRUE
1949
1950# TCP Ports range
1951# A string denoting an positive integer range (e.g., "1-20,30-40")
1952#fix.tcp.port: 
1953
1954# With this option display filters for fmp fhandle a RPC call, even if the actual fhandle is only present in one of the packets
1955# TRUE or FALSE (case-insensitive)
1956#fmp.fhandle_find_both_reqrep: FALSE
1957
1958# Decode packets on this TCP port as ForCES
1959# A decimal number
1960#forces.tcp_alternate_port: 0
1961
1962# Decode packets on this UDP port as ForCES
1963# A decimal number
1964#forces.udp_alternate_port: 0
1965
1966# Decode packets on this sctp port as ForCES
1967# A decimal number
1968#forces.sctp_high_prio_port: 0
1969
1970# Decode packets on this sctp port as ForCES
1971# A decimal number
1972#forces.sctp_med_prio_port: 0
1973
1974# Decode packets on this sctp port as ForCES
1975# A decimal number
1976#forces.sctp_low_prio_port: 0
1977
1978# Show reported release info
1979# TRUE or FALSE (case-insensitive)
1980#fp.show_release_info: TRUE
1981
1982# Call MAC dissector for payloads
1983# TRUE or FALSE (case-insensitive)
1984#fp.call_mac: TRUE
1985
1986# Validate FP payload checksums
1987# TRUE or FALSE (case-insensitive)
1988#fp.payload_checksum: TRUE
1989
1990# Validate FP header checksums
1991# TRUE or FALSE (case-insensitive)
1992#fp.header_checksum: TRUE
1993
1994# Encapsulation
1995# One of: FRF 3.2/Cisco HDLC, GPRS Network Service, Raw Ethernet
1996# (case-insensitive).
1997#fr.encap: FRF 3.2/Cisco HDLC
1998
1999# Show offset of frame in capture file
2000# TRUE or FALSE (case-insensitive)
2001#frame.show_file_off: FALSE
2002
2003# Treat all frames as DOCSIS Frames
2004# TRUE or FALSE (case-insensitive)
2005#frame.force_docsis_encap: FALSE
2006
2007# Whether or not MD5 hashes should be generated for each frame, useful for finding duplicate frames.
2008# TRUE or FALSE (case-insensitive)
2009#frame.generate_md5_hash: FALSE
2010
2011# Whether or not an Epoch time entry should be generated for each frame.
2012# TRUE or FALSE (case-insensitive)
2013#frame.generate_epoch_time: TRUE
2014
2015# Whether or not the number of bits in the frame should be shown.
2016# TRUE or FALSE (case-insensitive)
2017#frame.generate_bits_field: TRUE
2018
2019# Whether or not 'packet size limited during capture' message in shown in Info column.
2020# TRUE or FALSE (case-insensitive)
2021#frame.disable_packet_size_limited_in_summary: FALSE
2022
2023# Whether the FireWall-1 summary line should be shown in the protocol tree
2024# TRUE or FALSE (case-insensitive)
2025#fw1.summary_in_tree: TRUE
2026
2027# Whether the Firewall-1 monitor file includes UUID information
2028# TRUE or FALSE (case-insensitive)
2029#fw1.with_uuid: FALSE
2030
2031# Whether the interface list includes the chain position
2032# TRUE or FALSE (case-insensitive)
2033#fw1.iflist_with_chain: FALSE
2034
2035# Whether the Gadu-Gadu dissector should reassemble messages spanning multiple TCP segments.To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2036# TRUE or FALSE (case-insensitive)
2037#gadu-gadu.desegment: TRUE
2038
2039# Whether the Gearman dissector should desegment all messages spanning multiple TCP segments
2040# TRUE or FALSE (case-insensitive)
2041#gearman.desegment: TRUE
2042
2043# Set up the TCP port for GED125
2044# A decimal number
2045#ged125.tcp_port: 0
2046
2047# Whether the GED125 dissector should desegment all messages spanning multiple TCP segments
2048# TRUE or FALSE (case-insensitive)
2049#ged125.desegment_body: TRUE
2050
2051# Whether the GIOP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2052# TRUE or FALSE (case-insensitive)
2053#giop.desegment_giop_messages: TRUE
2054
2055# Whether fragmented GIOP messages should be reassembled
2056# TRUE or FALSE (case-insensitive)
2057#giop.reassemble: TRUE
2058
2059# Maximum allowed message size in bytes (default=10485760)
2060# A decimal number
2061#giop.max_message_size: 10485760
2062
2063# File containing stringified IORs, one per line.
2064# A path to a file
2065#giop.ior_txt: IOR.txt
2066
2067# Whether the GIT dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2068# TRUE or FALSE (case-insensitive)
2069#git.desegment: TRUE
2070
2071# Whether the Gigamon header summary line should be shown in the protocol tree
2072# TRUE or FALSE (case-insensitive)
2073#gmhdr.summary_in_tree: TRUE
2074
2075# Whether the Gigamon Trailer summary line should be shown in the protocol tree
2076# TRUE or FALSE (case-insensitive)
2077#gmtrailer.summary_in_tree: TRUE
2078
2079# Whether the Gigamon trailer containing HW timestamp, source id and original CRC should be decoded
2080# TRUE or FALSE (case-insensitive)
2081#gmtrailer.decode_trailer_timestamp: TRUE
2082
2083# TCP Ports range
2084# A string denoting an positive integer range (e.g., "1-20,30-40")
2085#gopher.tcp.port: 70
2086
2087# Whether to autodetect the cipher bit (because it might be set on unciphered data)
2088# TRUE or FALSE (case-insensitive)
2089#llcgprs.autodetect_cipher_bit: FALSE
2090
2091# UDP ports to be decoded as GPRS-NS (default: 2157,19999)
2092# A string denoting an positive integer range (e.g., "1-20,30-40")
2093#gprs-ns.udp.ports: 2157,19999
2094
2095# Whether the Gryphon dissector should desegment all messages spanning multiple TCP segments
2096# TRUE or FALSE (case-insensitive)
2097#gryphon.desegment: TRUE
2098
2099# Set the port(s) for ip.access IPA (default: 3002,3003,3006,4249,4250,5000)
2100# A string denoting an positive integer range (e.g., "1-20,30-40")
2101#gsm_ipa.tcp_ports: 3002,3003,3006,4249,4250,5000
2102
2103# Set the port(s) for ip.access IPA (usually: 3006)
2104# A string denoting an positive integer range (e.g., "1-20,30-40")
2105#gsm_ipa.udp_ports: 0
2106
2107# No description
2108# TRUE or FALSE (case-insensitive)
2109#gsm_ipa.hsl_debug_in_root_tree: FALSE
2110
2111# No description
2112# TRUE or FALSE (case-insensitive)
2113#gsm_ipa.hsl_debug_in_info: FALSE
2114
2115# Whether the dissector should reassemble SMS spanning multiple packets
2116# TRUE or FALSE (case-insensitive)
2117#gsm_sms.reassemble: TRUE
2118
2119# Always decode a GSM Short Message as Connectionless WSP if a Port Number Information Element is present in the SMS User Data Header.
2120# TRUE or FALSE (case-insensitive)
2121#gsm_sms_ud.port_number_udh_means_wsp: FALSE
2122
2123# Always try subdissection of the 1st fragment of a fragmented GSM Short Message. If reassembly is possible, the Short Message may be dissected twice (once as a short frame, once in its entirety).
2124# TRUE or FALSE (case-insensitive)
2125#gsm_sms_ud.try_dissect_1st_fragment: FALSE
2126
2127# Prevent sub-dissectors from replacing column data with their own. Eg. Prevent WSP dissector overwriting SMPP information.
2128# TRUE or FALSE (case-insensitive)
2129#gsm_sms_ud.prevent_dissectors_chg_cols: FALSE
2130
2131# Treat ARFCN 512-810 as DCS 1800 rather than PCS 1900
2132# TRUE or FALSE (case-insensitive)
2133#gsm_um.dcs1800: TRUE
2134
2135# TCAP Subsystem numbers used for GSM MAP
2136# A string denoting an positive integer range (e.g., "1-20,30-40")
2137#gsm_map.tcap.ssn: 6-9
2138
2139# How to treat Application context
2140# One of: Use application context from the trace, Treat as AC 1, Treat as AC 2, Treat as AC 3
2141# (case-insensitive).
2142#gsm_map.application.context.version: Use application context from the trace
2143
2144# When enabled, dissector will use the non 3GPP standard extensions from Ericsson (that can override the standard ones)
2145# TRUE or FALSE (case-insensitive)
2146#gsm_map.ericsson.proprietary.extensions: FALSE
2147
2148# Whether or not to try reassembling GSSAPI blobs spanning multiple (SMB/SessionSetup) PDUs
2149# TRUE or FALSE (case-insensitive)
2150#gss-api.gssapi_reassembly: TRUE
2151
2152# GTPv0 and GTP' port (default 3386)
2153# A decimal number
2154#gtp.v0_port: 3386
2155
2156# GTPv1 and GTPv2 control plane port (default 2123)
2157# A decimal number
2158#gtp.v1c_port: 2123
2159
2160# GTPv1 user plane port (default 2152)
2161# A decimal number
2162#gtp.v1u_port: 2152
2163
2164# Dissect T-PDU as
2165# One of: None, TPDU, SYNC
2166# (case-insensitive).
2167#gtp.dissect_tpdu_as: TPDU
2168
2169# GTP ETSI order
2170# TRUE or FALSE (case-insensitive)
2171#gtp.check_etsi: FALSE
2172
2173# Dissect GTP over TCP
2174# TRUE or FALSE (case-insensitive)
2175#gtp.dissect_gtp_over_tcp: TRUE
2176
2177# Track GTP session
2178# TRUE or FALSE (case-insensitive)
2179#gtp.track_gtp_session: FALSE
2180
2181# H.225 Server TLS Port
2182# A decimal number
2183#h225.tls.port: 1300
2184
2185# Whether the H.225 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2186# TRUE or FALSE (case-insensitive)
2187#h225.reassembly: TRUE
2188
2189# ON - display tunnelled H.245 inside H.225.0 tree, OFF - display tunnelled H.245 in root tree after H.225.0
2190# TRUE or FALSE (case-insensitive)
2191#h225.h245_in_tree: TRUE
2192
2193# ON - display tunnelled protocols inside H.225.0 tree, OFF - display tunnelled protocols in root tree after H.225.0
2194# TRUE or FALSE (case-insensitive)
2195#h225.tp_in_tree: TRUE
2196
2197# Whether the H.245 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2198# TRUE or FALSE (case-insensitive)
2199#h245.reassembly: TRUE
2200
2201# Whether the dissector should show short names or the long names from the standard
2202# TRUE or FALSE (case-insensitive)
2203#h245.shorttypes: FALSE
2204
2205# Whether the dissector should print items of h245 Info column in reversed order
2206# TRUE or FALSE (case-insensitive)
2207#h245.prepand: FALSE
2208
2209# Port to be decoded as h501
2210# A decimal number
2211#h501.udp.port: 2099
2212
2213# Port to be decoded as h501
2214# A decimal number
2215#h501.tcp.port: 2099
2216
2217# Desegment H.501 messages that span more TCP segments
2218# TRUE or FALSE (case-insensitive)
2219#h501.desegment: TRUE
2220
2221# Maintain relationships between transactions and contexts and display an extra tree showing context data
2222# TRUE or FALSE (case-insensitive)
2223#h248.ctx_info: FALSE
2224
2225# Port to be decoded as h248
2226# A decimal number
2227#h248.udp_port: 2945
2228
2229# Port to be decoded as h248
2230# A decimal number
2231#h248.tcp_port: 2945
2232
2233# Desegment H.248 messages that span more TCP segments
2234# TRUE or FALSE (case-insensitive)
2235#h248.desegment: TRUE
2236
2237# The dynamic payload type which will be interpreted as H264; The value must be greater than 95
2238# A decimal number
2239#h263p.dynamic.payload.type: 0
2240
2241# Dynamic payload types which will be interpreted as H264; Values must be in the range 96 - 127
2242# A string denoting an positive integer range (e.g., "1-20,30-40")
2243#h264.dynamic.payload.type: 
2244
2245# Whether the HART-IP dissector should desegment all messages spanning multiple TCP segments
2246# TRUE or FALSE (case-insensitive)
2247#hart_ip.desegment: TRUE
2248
2249# Whether the hazel dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2250# TRUE or FALSE (case-insensitive)
2251#hzlcst.desegment: TRUE
2252
2253#  Hazelcast TCP port if other than the default
2254# A decimal number
2255#hzlcst.tcp.port: 5701
2256
2257# Whether the ACL dissector should reassemble fragmented PDUs
2258# TRUE or FALSE (case-insensitive)
2259#bthci_acl.hci_acl_reassembly: TRUE
2260
2261# The UDP port used in L3 communications (default 47000)
2262# A string denoting an positive integer range (e.g., "1-20,30-40")
2263#hcrt.dissector_udp_port: 47000
2264
2265# The ethernet type used for L2 communications
2266# A decimal number
2267#hcrt.dissector_ethertype: 61522
2268
2269# Set the TCP port for HDFS
2270# A decimal number
2271#hdfs.tcp.port: 0
2272
2273# Set the TCP port for HDFSDATA
2274# A decimal number
2275#hdfsdata.tcp.port: 0
2276
2277# Set the TCP port for HiSLIP traffic if other than the default
2278# A decimal number
2279#hislip.tcp.port: 4880
2280
2281# Set the port for HNBAP messages (Default of 29169)
2282# A decimal number
2283#hnbap.port: 29169
2284
2285# Set the UDP port (source or destination) used for HP encapsulated remote mirroring frames;
2286# 0 (default) means that the HP_ERM dissector is not active
2287# A decimal number
2288#hp_erm.udp.port: 0
2289
2290# Whether the HPFEEDS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2291# TRUE or FALSE (case-insensitive)
2292#hpfeeds.desegment_hpfeeds_messages: TRUE
2293
2294# Set the TCP port for HPFEEDS messages
2295# A decimal number
2296#hpfeeds.dissector_port: 0
2297
2298# Try to decode the payload using an heuristic sub-dissector
2299# TRUE or FALSE (case-insensitive)
2300#hpfeeds.try_heuristic: TRUE
2301
2302# Whether the HTTP dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2303# TRUE or FALSE (case-insensitive)
2304#http.desegment_headers: TRUE
2305
2306# Whether the HTTP dissector should use the "Content-length:" value, if present, to reassemble the body of a request spanning multiple TCP segments, and reassemble chunked data spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2307# TRUE or FALSE (case-insensitive)
2308#http.desegment_body: TRUE
2309
2310# Whether to reassemble bodies of entities that are transferred using the "Transfer-Encoding: chunked" method
2311# TRUE or FALSE (case-insensitive)
2312#http.dechunk_body: TRUE
2313
2314# Whether to uncompress entity bodies that are compressed using "Content-Encoding: "
2315# TRUE or FALSE (case-insensitive)
2316#http.decompress_body: TRUE
2317
2318# TCP Ports range
2319# A string denoting an positive integer range (e.g., "1-20,30-40")
2320#http.tcp.port: 80,3128,3132,5985,8080,8088,11371,1900,2869,2710
2321
2322# SCTP Ports range
2323# A string denoting an positive integer range (e.g., "1-20,30-40")
2324#http.sctp.port: 80
2325
2326# SSL/TLS Ports range
2327# A string denoting an positive integer range (e.g., "1-20,30-40")
2328#http.ssl.port: 443
2329
2330# When set, dissector will attempt to identify unknown IBA payloads as containing an encapsulated ethertype, and parse them accordingly
2331# TRUE or FALSE (case-insensitive)
2332#infiniband.identify_payload: TRUE
2333
2334# When set, dissector will attempt to identify and parse Mellanox Ethernet-over-InfiniBand packets
2335# TRUE or FALSE (case-insensitive)
2336#infiniband.dissect_eoib: TRUE
2337
2338# when set the Analyser will consider this as RRoce UDP Port and parse it accordingly
2339# A decimal number
2340#infiniband.rroce.port: 0
2341
2342# ICEP TCP port
2343# A decimal number
2344#icep.tcp.port: 0
2345
2346# ICEP UDP port
2347# A decimal number
2348#icep.udp.port: 0
2349
2350# Maximum number of batch requests allowed
2351# A decimal number
2352#icep.max_batch_requests: 64
2353
2354# Maximum length allowed of an ICEP string
2355# A decimal number
2356#icep.max_ice_string_len: 512
2357
2358# Maximum number of context pairs allowed
2359# A decimal number
2360#icep.max_ice_context_pairs: 64
2361
2362# Whether the 128th and following bytes of the ICMP payload should be decoded as MPLS extensions or as a portion of the original packet
2363# TRUE or FALSE (case-insensitive)
2364#icmp.favor_icmp_mpls: FALSE
2365
2366# Whether fragmented 802.11 datagrams should be reassembled
2367# TRUE or FALSE (case-insensitive)
2368#wlan.defragment: TRUE
2369
2370# Don't dissect 802.11n draft HT elements (which might contain duplicate information).
2371# TRUE or FALSE (case-insensitive)
2372#wlan.ignore_draft_ht: FALSE
2373
2374# Whether retransmitted 802.11 frames should be subdissected
2375# TRUE or FALSE (case-insensitive)
2376#wlan.retransmitted: TRUE
2377
2378# Some 802.11 cards include the FCS at the end of a packet, others do not.
2379# TRUE or FALSE (case-insensitive)
2380#wlan.check_fcs: FALSE
2381
2382# Whether to validate the FCS checksum or not.
2383# TRUE or FALSE (case-insensitive)
2384#wlan.check_checksum: TRUE
2385
2386# Some 802.11 cards leave the Protection bit set even though the packet is decrypted, and some also leave the IV (initialization vector).
2387# One of: No, Yes - without IV, Yes - with IV
2388# (case-insensitive).
2389#wlan.ignore_wep: No
2390
2391# Enable WEP and WPA/WPA2 decryption
2392# TRUE or FALSE (case-insensitive)
2393#wlan.enable_decryption: TRUE
2394
2395# (Hexadecimal) Ethertype used to indicate IEEE 802.15.4 frame.
2396# A hexadecimal number
2397#wpan.802154_ethertype: 0x809a
2398
2399# Set if the FCS field is in TI CC24xx format.
2400# TRUE or FALSE (case-insensitive)
2401#wpan.802154_cc24xx: FALSE
2402
2403# Dissect payload only if FCS is valid.
2404# TRUE or FALSE (case-insensitive)
2405#wpan.802154_fcs_ok: TRUE
2406
2407# 128-bit decryption key in hexadecimal format
2408# A string
2409#wpan.802154_key: 
2410
2411# Specifies the security suite to use for 802.15.4-2003 secured frames (only supported suites are listed). Option ignored for 802.15.4-2006 and unsecured frames.
2412# One of: AES-128 Encryption, 128-bit Integrity Protection, AES-128 Encryption, 64-bit Integrity Protection, AES-128 Encryption, 32-bit Integrity Protection
2413# (case-insensitive).
2414#wpan.802154_sec_suite: AES-128 Encryption, 64-bit Integrity Protection
2415
2416# Set if the manufacturer extends the authentication data with the security header. Option ignored for 802.15.4-2006 and unsecured frames.
2417# TRUE or FALSE (case-insensitive)
2418#wpan.802154_extend_auth: TRUE
2419
2420# (Hexadecimal) Ethertype used to indicate IEEE 802.1ah tag.
2421# A hexadecimal number
2422#ieee8021ah.8021ah_ethertype: 0x88e7
2423
2424# Whether the iFCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2425# TRUE or FALSE (case-insensitive)
2426#ifcp.desegment: TRUE
2427
2428# Whether the ILP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2429# TRUE or FALSE (case-insensitive)
2430#ilp.desegment_ilp_messages: TRUE
2431
2432# Set the TCP port for ILP messages(IANA registered port is 7276)
2433# A decimal number
2434#ilp.tcp.port: 7276
2435
2436# Whether to use heuristics for post-STARTTLS detection of encrypted IMAP conversations
2437# TRUE or FALSE (case-insensitive)
2438#imap.ssl_heuristic: TRUE
2439
2440# TCAP Subsystem numbers used for INAP
2441# A string denoting an positive integer range (e.g., "1-20,30-40")
2442#inap.ssn: 106,241
2443
2444# Check to treat all traffic between the configured source/destination as SDP
2445# TRUE or FALSE (case-insensitive)
2446#infiniband_sdp.manual_en: FALSE
2447
2448# Type of address specified
2449# One of: LID, GID
2450# (case-insensitive).
2451#infiniband_sdp.addr_a_type: LID
2452
2453# LID/GID of address A
2454# A string
2455#infiniband_sdp.addr_a_id: 
2456
2457# QP Number for address A
2458# A decimal number
2459#infiniband_sdp.addr_a_qp: 0
2460
2461# Type of address specified
2462# One of: LID, GID
2463# (case-insensitive).
2464#infiniband_sdp.addr_b_type: LID
2465
2466# LID/GID of address B
2467# A string
2468#infiniband_sdp.addr_b_id: 
2469
2470# QP Number for address B
2471# A decimal number
2472#infiniband_sdp.addr_b_qp: 0
2473
2474# Whether the IPDC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2475# TRUE or FALSE (case-insensitive)
2476#ipdc.desegment_ipdc_messages: TRUE
2477
2478# Set the IPDC monitoring port
2479# A decimal number
2480#ipdc.tcp.port: 6668
2481
2482# FRU Language Code is English; strings are ASCII+LATIN1 (vs. Unicode)
2483# TRUE or FALSE (case-insensitive)
2484#ipmi.fru_langcode_is_english: TRUE
2485
2486# Do not search for responses coming after this timeout (milliseconds)
2487# A decimal number
2488#ipmi.response_after_req: 5000
2489
2490# Allow for responses before requests (milliseconds)
2491# A decimal number
2492#ipmi.response_before_req: 0
2493
2494# Format of messages embedded into Send/Get/Forward Message
2495# One of: None, IPMB, Session-based (LAN, ...), Use heuristics
2496# (case-insensitive).
2497#ipmi.msgfmt: Use heuristics
2498
2499# Selects which OEM format is used for commands that IPMI does not define
2500# One of: None, Pigeon Point Systems
2501# (case-insensitive).
2502#ipmi.selected_oem: None
2503
2504# Whether the IPv4 type-of-service field should be decoded as a Differentiated Services field (see RFC2474/RFC2475)
2505# TRUE or FALSE (case-insensitive)
2506#ip.decode_tos_as_diffserv: TRUE
2507
2508# Whether fragmented IPv4 datagrams should be reassembled
2509# TRUE or FALSE (case-insensitive)
2510#ip.defragment: TRUE
2511
2512# Whether the IPv4 summary line should be shown in the protocol tree
2513# TRUE or FALSE (case-insensitive)
2514#ip.summary_in_tree: TRUE
2515
2516# Whether to validate the IPv4 checksum
2517# TRUE or FALSE (case-insensitive)
2518#ip.check_checksum: FALSE
2519
2520# Whether to correct for TSO-enabled (TCP segmentation offload) hardware captures, such as spoofing the IP packet length
2521# TRUE or FALSE (case-insensitive)
2522#ip.tso_support: TRUE
2523
2524# Whether to look up IP addresses in each GeoIP database we have loaded
2525# TRUE or FALSE (case-insensitive)
2526#ip.use_geoip: TRUE
2527
2528# Whether to interpret the originally reserved flag as security flag
2529# TRUE or FALSE (case-insensitive)
2530#ip.security_flag: FALSE
2531
2532# Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
2533# TRUE or FALSE (case-insensitive)
2534#ip.try_heuristic_first: FALSE
2535
2536# Whether fragmented IPv6 datagrams should be reassembled
2537# TRUE or FALSE (case-insensitive)
2538#ipv6.defragment: TRUE
2539
2540# Whether the IPv6 summary line should be shown in the protocol tree
2541# TRUE or FALSE (case-insensitive)
2542#ipv6.summary_in_tree: TRUE
2543
2544# Whether to look up IPv6 addresses in each GeoIP database we have loaded
2545# TRUE or FALSE (case-insensitive)
2546#ipv6.use_geoip: TRUE
2547
2548# Whether to check that all RPL Source Routed packets do not visit a node more than once
2549# TRUE or FALSE (case-insensitive)
2550#ipv6.perform_strict_rpl_srh_rfc_checking: FALSE
2551
2552# Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
2553# TRUE or FALSE (case-insensitive)
2554#ipv6.try_heuristic_first: FALSE
2555
2556# Whether to display IPv6 extension headers as a separate protocol or a sub-protocol of the IPv6 packet
2557# TRUE or FALSE (case-insensitive)
2558#ipv6.exthdr_under_root_protocol_tree: FALSE
2559
2560# If enabled the Length field in octets will be hidden
2561# TRUE or FALSE (case-insensitive)
2562#ipv6.exthdr_hide_len_oct_field: FALSE
2563
2564# The iSCSI protocol version
2565# One of: Draft 08, Draft 09, Draft 11, Draft 12, Draft 13
2566# (case-insensitive).
2567#iscsi.protocol_version: Draft 13
2568
2569# Whether the iSCSI dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2570# TRUE or FALSE (case-insensitive)
2571#iscsi.desegment_iscsi_messages: TRUE
2572
2573# When enabled, packets that appear bogus are ignored
2574# TRUE or FALSE (case-insensitive)
2575#iscsi.bogus_pdu_filter: TRUE
2576
2577# Ignore packets that haven't set the F bit when they should have
2578# TRUE or FALSE (case-insensitive)
2579#iscsi.demand_good_f_bit: FALSE
2580
2581# Treat packets whose data segment length is greater than this value as bogus
2582# A decimal number
2583#iscsi.bogus_pdu_max_data_len: 262144
2584
2585# Range of iSCSI target ports(default 3260)
2586# A string denoting an positive integer range (e.g., "1-20,30-40")
2587#iscsi.target_ports: 3260
2588
2589# System port number of iSCSI target
2590# A decimal number
2591#iscsi.target_system_port: 860
2592
2593# The protocol running on the D channel
2594# One of: LAPD, DPNSS
2595# (case-insensitive).
2596#isdn.dchannel_protocol: LAPD
2597
2598# Check to treat all traffic between the configured source/destination as iSER
2599# TRUE or FALSE (case-insensitive)
2600#iser.manual_en: FALSE
2601
2602# Type of address specified
2603# One of: LID, GID
2604# (case-insensitive).
2605#iser.addr_a_type: LID
2606
2607# LID/GID of address A
2608# A string
2609#iser.addr_a_id: 
2610
2611# QP Number for address A
2612# A decimal number
2613#iser.addr_a_qp: 0
2614
2615# Type of address specified
2616# One of: LID, GID
2617# (case-insensitive).
2618#iser.addr_b_type: LID
2619
2620# LID/GID of address B
2621# A string
2622#iser.addr_b_id: 
2623
2624# QP Number for address B
2625# A decimal number
2626#iser.addr_b_qp: 0
2627
2628# Range of iSER target ports(default 3260)
2629# A string denoting an positive integer range (e.g., "1-20,30-40")
2630#iser.target_ports: 3260
2631
2632# The dynamic payload type which will be interpreted as ISMACryp
2633# A decimal number
2634#ismacryp.dynamic.payload.type: 0
2635
2636# ISMACryp version
2637# One of: ISMACryp v1.1, ISMACryp v2.0
2638# (case-insensitive).
2639#ismacryp.version: ISMACryp v1.1
2640
2641# Indicates whether or not the ISMACryp version deduced from RTP payload type, if present, is used or whether the version above is used
2642# TRUE or FALSE (case-insensitive)
2643#ismacryp.override_rtp_pt: FALSE
2644
2645# Set the length of the IV in the ISMACryp AU Header in bytes
2646# A decimal number
2647#ismacryp.iv_length: 4
2648
2649# Set the length of the Delta IV in the ISMACryp AU Header in bytes
2650# A decimal number
2651#ismacryp.delta_iv_length: 0
2652
2653# Set the length of the Key Indicator in the ISMACryp AU Header in bytes
2654# A decimal number
2655#ismacryp.key_indicator_length: 0
2656
2657# Indicates whether or not the Key Indicator is present in all AU Headers (T/F)
2658# TRUE or FALSE (case-insensitive)
2659#ismacryp.key_indicator_per_au_flag: FALSE
2660
2661# Indicates whether or not selective encryption is enabled (T/F)
2662# TRUE or FALSE (case-insensitive)
2663#ismacryp.selective_encryption: TRUE
2664
2665# Indicates whether or not slice start / end is present (T/F)
2666# TRUE or FALSE (case-insensitive)
2667#ismacryp.slice_indication: FALSE
2668
2669# Indicates whether or not padding information is present (T/F)
2670# TRUE or FALSE (case-insensitive)
2671#ismacryp.padding_indication: FALSE
2672
2673# RFC3640 mode
2674# One of: aac-hbr, mpeg4-video, avc-video
2675# (case-insensitive).
2676#ismacryp.rfc3640_mode: avc-video
2677
2678# Indicates use of user mode instead of RFC3640 modes (T/F)
2679# TRUE or FALSE (case-insensitive)
2680#ismacryp.user_mode: FALSE
2681
2682# Set the length of the AU size in the AU Header in bits
2683# A decimal number
2684#ismacryp.au_size_length: 0
2685
2686# Set the length of the AU index in the AU Header in bits
2687# A decimal number
2688#ismacryp.au_index_length: 0
2689
2690# Set the length of the AU delta index in the AU Header in bits
2691# A decimal number
2692#ismacryp.au_index_delta_length: 0
2693
2694# Set the length of the CTS delta field in the AU Header in bits
2695# A decimal number
2696#ismacryp.cts_delta_length: 0
2697
2698# Set the length of the DTS delta field in the AU Header in bits
2699# A decimal number
2700#ismacryp.dts_delta_length: 0
2701
2702# Indicates whether or not the RAP field is present in the AU Header (T/F)
2703# TRUE or FALSE (case-insensitive)
2704#ismacryp.random_access_indication: FALSE
2705
2706# Indicates the number of bits on which the stream state field is encoded in the AU Header (bits)
2707# A decimal number
2708#ismacryp.stream_state_indication: 0
2709
2710# Whether the iSNS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2711# TRUE or FALSE (case-insensitive)
2712#isns.desegment: TRUE
2713
2714# Endian of the length field. Big endian or Little endian
2715# One of: Big endian, Little endian
2716# (case-insensitive).
2717#iso8583.len_endian: Little endian
2718
2719#  iso8583 TCP port
2720# A decimal number
2721#iso8583.tcp.port: 0
2722
2723#  charset for numbers
2724# One of: Digits represented as ASCII Characters, Digits represented in nibbles
2725# (case-insensitive).
2726#iso8583.charset: Digits represented as ASCII Characters
2727
2728#  binary data representation
2729# One of: Bin data represented as Hex Ascii characters, Bin data not encoded
2730# (case-insensitive).
2731#iso8583.binencode: Bin data represented as Hex Ascii characters
2732
2733# Note national variants may not be fully supported
2734# One of: ITU Standard, French National Standard, Israeli National Standard, Russian National Standard, Japan National Standard, Japan National Standard (TTC)
2735# (case-insensitive).
2736#isup.variant: ITU Standard
2737
2738# Show the CIC value (in addition to the message type) in the Info column
2739# TRUE or FALSE (case-insensitive)
2740#isup.show_cic_in_info: TRUE
2741
2742# Whether APM messages datagrams should be reassembled
2743# TRUE or FALSE (case-insensitive)
2744#isup.defragment_apm: TRUE
2745
2746# The MPLS label (aka Flow Bundle ID) used by ITDM traffic.
2747# A hexadecimal number
2748#itdm.mpls_label: 0x99887
2749
2750# Flow Number used by I-TDM Control Protocol traffic.
2751# A decimal number
2752#itdm.ctl_flowno: 0
2753
2754# Support Implementers Guide (version 01)
2755# TRUE or FALSE (case-insensitive)
2756#iua.support_ig: FALSE
2757
2758# Use SAPI values as specified in TS 48 056
2759# TRUE or FALSE (case-insensitive)
2760#iua.use_gsm_sapi_values: TRUE
2761
2762# Whether IuUP Payload bits should be dissected
2763# TRUE or FALSE (case-insensitive)
2764#iuup.dissect_payload: FALSE
2765
2766# The payload contains a two byte pseudoheader indicating direction and circuit_id
2767# TRUE or FALSE (case-insensitive)
2768#iuup.two_byte_pseudoheader: FALSE
2769
2770# The dynamic payload type which will be interpreted as IuUP
2771# A decimal number
2772#iuup.dynamic.payload.type: 0
2773
2774# Whether the trailer summary line should be shown in the protocol tree
2775# TRUE or FALSE (case-insensitive)
2776#ixiatrailer.summary_in_tree: TRUE
2777
2778# Set the port for JMirror Port (if other than the default of 30030)
2779# A decimal number
2780#jmirror.udp.port: 30030
2781
2782# Enable to have correctly typed MIME media dissected as JXTA Messages.
2783# TRUE or FALSE (case-insensitive)
2784#jxta.msg.mediatype: TRUE
2785
2786# Whether the JXTA dissector should reassemble messages spanning multiple UDP/TCP/SCTP segments. To use this option you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings  and enable "Reassemble fragmented IP datagrams" in the IP protocol settings.
2787# TRUE or FALSE (case-insensitive)
2788#jxta.desegment: TRUE
2789
2790# TCP Ports range
2791# A string denoting an positive integer range (e.g., "1-20,30-40")
2792#kafka.tcp.ports: 
2793
2794# Set the port for Kismet Drone/Server messages (if other than the default of 2502)
2795# A decimal number
2796#kdsp.tcp.port: 2502
2797
2798# Set the port for Kismet Client/Server messages (if other than the default of 2501)
2799# A decimal number
2800#kismet.tcp.port: 2501
2801
2802# Set the SCTP port for kNet messages
2803# A decimal number
2804#knet.sctp.port: 2345
2805
2806# Set the TCP port for kNet messages
2807# A decimal number
2808#knet.tcp.port: 2345
2809
2810# Set the UDP port for kNet messages
2811# A decimal number
2812#knet.udp.port: 2345
2813
2814# Whether the Kpasswd dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2815# TRUE or FALSE (case-insensitive)
2816#kpasswd.desegment: TRUE
2817
2818# Whether the Kerberos dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2819# TRUE or FALSE (case-insensitive)
2820#kerberos.desegment: TRUE
2821
2822# Whether the dissector should try to decrypt encrypted Kerberos blobs. This requires that the proper keytab file is installed as well.
2823# TRUE or FALSE (case-insensitive)
2824#kerberos.decrypt: FALSE
2825
2826# The keytab file containing all the secrets
2827# A path to a file
2828#kerberos.file: 
2829
2830# TCP ports to be decoded as Kyoto Tycoon (binary protocol) (default: 1978-1979)
2831# A string denoting an positive integer range (e.g., "1-20,30-40")
2832#kt.tcp.ports: 1978-1979
2833
2834# KT allows binary values in keys and values. Attempt to show an ASCII representation anyway (which might be prematurely terminated by a NULL!
2835# TRUE or FALSE (case-insensitive)
2836#kt.present_key_val_as_ascii: FALSE
2837
2838# Whether the L&G 8979 dissector should desegment all messages spanning multiple TCP segments
2839# TRUE or FALSE (case-insensitive)
2840#lg8979.desegment: TRUE
2841
2842# Set the TCP port for L&G 8979 Protocol packets (if other than the default of 0)
2843# A decimal number
2844#lg8979.tcp.port: 0
2845
2846# L2TPv3 Cookie Size
2847# One of: Detect, None, 4 Byte Cookie, 8 Byte Cookie
2848# (case-insensitive).
2849#l2tp.cookie_size: Detect
2850
2851# L2TPv3 L2-Specific Sublayer
2852# One of: Detect, None, Default L2-Specific, ATM-Specific, LAPD-Specific, DOCSIS DMPT-Specific
2853# (case-insensitive).
2854#l2tp.l2_specific: Detect
2855
2856# Shared secret used for control message digest authentication
2857# A string
2858#l2tp.shared_secret: 
2859
2860# Use SAPI values as specified in TS 48 056
2861# TRUE or FALSE (case-insensitive)
2862#lapd.use_gsm_sapi_values: FALSE
2863
2864# RTP payload type for embedded LAPD. It must be one of the dynamic types from 96 to 127. Set it to 0 to disable.
2865# A decimal number
2866#lapd.rtp_payload_type: 0
2867
2868# SCTP Payload Protocol Identifier for LAPD. It is a 32 bits value from 0 to 4294967295. Set it to 0 to disable.
2869# A decimal number
2870#lapd.sctp_payload_protocol_identifier: 0
2871
2872# Whether the dissector should defragment LAPDm messages spanning multiple packets.
2873# TRUE or FALSE (case-insensitive)
2874#lapdm.reassemble: TRUE
2875
2876# Whether the Laplink dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2877# TRUE or FALSE (case-insensitive)
2878#laplink.desegment_laplink_over_tcp: TRUE
2879
2880# Set the SCTP port for LCSAP messages
2881# A decimal number
2882#lcsap.sctp.port: 9082
2883
2884# Whether the LDAP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2885# TRUE or FALSE (case-insensitive)
2886#ldap.desegment_ldap_messages: TRUE
2887
2888# Set the port for LDAP operations
2889# A decimal number
2890#ldap.tcp.port: 389
2891
2892# Set the port for LDAP operations over SSL
2893# A decimal number
2894#ldap.ssl.port: 636
2895
2896# Set the TCP port for messages (if other than the default of 646)
2897# A decimal number
2898#ldp.tcp.port: 646
2899
2900# Set the UDP port for messages (if other than the default of 646)
2901# A decimal number
2902#ldp.udp.port: 646
2903
2904# Whether the LDP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
2905# TRUE or FALSE (case-insensitive)
2906#ldp.desegment_ldp_messages: TRUE
2907
2908# The UDP port on which Local Download Sharing Service broadcasts will be sent
2909# A decimal number
2910#ldss.udp_port: 6087
2911
2912# Set UDP port for LGE Monitor messages
2913# A decimal number
2914#lge_monitor.udp.port: 0
2915
2916# TCP port used by ENEA LINX, usually 19790
2917# A decimal number
2918#linxtcp.tcp.port: 0
2919
2920# Dissect this ethertype as LLT traffic in addition to the default, 0xCAFE.
2921# A hexadecimal number
2922#llt.alternate_ethertype: 0
2923
2924# UDP port number to use for LMP
2925# A decimal number
2926#lmp.udp_port: 701
2927
2928# Whether LMP contains a checksum which can be checked
2929# TRUE or FALSE (case-insensitive)
2930#lmp.checksum: FALSE
2931
2932# Use oneline info column by replace all new line characters by spaces
2933# TRUE or FALSE (case-insensitive)
2934#logcat.oneline_info_column: TRUE
2935
2936# Set the TCP or UDP port for Pegasus LSC messages
2937# A decimal number
2938#lsc.port: 0
2939
2940# The UDP or DCCP port to accept LTP Connections
2941# A decimal number
2942#ltp.port: 1113
2943
2944# Swap frame control bytes (needed for some APs
2945# TRUE or FALSE (case-insensitive)
2946#lwapp.swap_fc: FALSE
2947
2948# Whether to validate the LWL4 crc when crc bit is not set
2949# TRUE or FALSE (case-insensitive)
2950#lwl4.check_crc: TRUE
2951
2952# 128-bit decryption key in hexadecimal format
2953# A string
2954#lwm.lwmes_key: 
2955
2956# Set the UDP port for lwres daemon(if other than the default of 921)
2957# A decimal number
2958#lwres.udp.lwres_port: 921
2959
2960# Version used by Wireshark
2961# One of: Internet Draft version 2, Internet Draft version 8, RFC 4165
2962# (case-insensitive).
2963#m2pa.version: RFC 4165
2964
2965# Set the port for M2PA messages (Default of 3565)
2966# A decimal number
2967#m2pa.port: 3565
2968
2969# The value of the parameter tag for protocol data 1
2970# One of: 0x000e (Draft 7), 0x0300 (RFC3331)
2971# (case-insensitive).
2972#m2ua.protocol_data_1_tag: 0x0300 (RFC3331)
2973
2974# Version used by Wireshark
2975# One of: Internet Draft version 5, Internet Draft version 6, Internet Draft version 7, RFC 4666
2976# (case-insensitive).
2977#m3ua.version: RFC 4666
2978
2979# TSN size in bits, either 6 or 14 bit
2980# One of: 6 bits, 14 bits
2981# (case-insensitive).
2982#mac.tsn_size: 6 bits
2983
2984# Number of Re-Transmits before expert warning triggered
2985# A decimal number
2986#mac-lte.retx_count_warn: 3
2987
2988# Attempt to decode BCH, PCH and CCCH data using LTE RRC dissector
2989# TRUE or FALSE (case-insensitive)
2990#mac-lte.attempt_rrc_decode: TRUE
2991
2992# Attempt to dissect frames that have failed CRC check
2993# TRUE or FALSE (case-insensitive)
2994#mac-lte.attempt_to_dissect_crc_failures: FALSE
2995
2996# Will call LTE RLC dissector with standard settings as per RRC spec
2997# TRUE or FALSE (case-insensitive)
2998#mac-lte.attempt_to_dissect_srb_sdus: TRUE
2999
3000# Will call LTE RLC dissector for MCH LCID 0
3001# TRUE or FALSE (case-insensitive)
3002#mac-lte.attempt_to_dissect_mcch: FALSE
3003
3004# Call RLC dissector MTCH LCIDs
3005# TRUE or FALSE (case-insensitive)
3006#mac-lte.call_rlc_for_mtch: FALSE
3007
3008# Set whether LCID -> drb Table is taken from static table (below) or from info learned from control protocol (e.g. RRC)
3009# One of: From static table, From configuration protocol
3010# (case-insensitive).
3011#mac-lte.lcid_to_drb_mapping_source: From static table
3012
3013# If any BSR report is >= this number, an expert warning will be added
3014# A decimal number
3015#mac-lte.bsr_warn_threshold: 50
3016
3017# Track status of SRs, providing links between requests, failure indications and grants
3018# TRUE or FALSE (case-insensitive)
3019#mac-lte.track_sr: TRUE
3020
3021# Can show PHY, MAC or RLC layer info in Info column
3022# One of: PHY Info, MAC Info, RLC Info
3023# (case-insensitive).
3024#mac-lte.layer_to_show: RLC Info
3025
3026# Attempt to decode 6 bytes of Contention Resolution body as an UL CCCH PDU
3027# TRUE or FALSE (case-insensitive)
3028#mac-lte.decode_cr_body: FALSE
3029
3030# Apply DRX config and show DRX state within each UE
3031# TRUE or FALSE (case-insensitive)
3032#mac-lte.show_drx: FALSE
3033
3034# Add as a generated field the middle of the range indicated by the BSR index
3035# TRUE or FALSE (case-insensitive)
3036#mac-lte.show_bsr_median: FALSE
3037
3038# MAC-Telnet UDP port if other than the default
3039# A decimal number
3040#mactelnet.port: 20561
3041
3042# The name of the file containing the mate module's configuration
3043# A path to a file
3044#mate.config: 
3045
3046# Set the port for Media Agnostic Packets
3047# A decimal number
3048#mausb.tcp.port: 0
3049
3050# Set the port for Media Agnostic Packets
3051# A decimal number
3052#mausb.udp.port: 0
3053
3054# Decode control data received on "usb.control" with an unknown interface class as MBIM
3055# TRUE or FALSE (case-insensitive)
3056#mbim.control_decode_unknown_itf: FALSE
3057
3058# Format used for SMS PDU decoding
3059# One of: Automatic, 3GPP, 3GPP2
3060# (case-insensitive).
3061#mbim.sms_pdu_format: Automatic
3062
3063# Set the UDP port for the MCPE Server
3064# A decimal number
3065#mcpe.udp.port: 19132
3066
3067# A frame is considered for decoding as MDSHDR if either ethertype is 0xFCFC or zero. Turn this flag off if you don't want ethertype zero to be decoded as MDSHDR. This might be useful to avoid problems with test frames.
3068# TRUE or FALSE (case-insensitive)
3069#mdshdr.decode_if_etype_zero: FALSE
3070
3071# Set the SCTP port for MEGACO text messages
3072# A decimal number
3073#megaco.sctp.txt_port: 2944
3074
3075# Set the TCP port for MEGACO text messages
3076# A decimal number
3077#megaco.tcp.txt_port: 2944
3078
3079# Set the UDP port for MEGACO text messages
3080# A decimal number
3081#megaco.udp.txt_port: 2944
3082
3083# Specifies that the raw text of the MEGACO message should be displayed instead of (or in addition to) the dissection tree
3084# TRUE or FALSE (case-insensitive)
3085#megaco.display_raw_text: TRUE
3086
3087# Specifies that the dissection tree of the MEGACO message should be displayed instead of (or in addition to) the raw text
3088# TRUE or FALSE (case-insensitive)
3089#megaco.display_dissect_tree: TRUE
3090
3091# Maintain relationships between transactions and contexts and display an extra tree showing context data
3092# TRUE or FALSE (case-insensitive)
3093#megaco.ctx_info: FALSE
3094
3095# Whether the MEMCACHE dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3096# TRUE or FALSE (case-insensitive)
3097#memcache.desegment_headers: TRUE
3098
3099# Whether the memcache dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3100# TRUE or FALSE (case-insensitive)
3101#memcache.desegment_pdus: TRUE
3102
3103# MEMCACHE TCP Port range
3104# A string denoting an positive integer range (e.g., "1-20,30-40")
3105#memcache.tcp.ports: 11211
3106
3107# MEMCACHE UDP Port range
3108# A string denoting an positive integer range (e.g., "1-20,30-40")
3109#memcache.udp.ports: 11211
3110
3111# Set the UDP port for gateway messages (if other than the default of 2427)
3112# A decimal number
3113#mgcp.tcp.gateway_port: 2427
3114
3115# Set the TCP port for gateway messages (if other than the default of 2427)
3116# A decimal number
3117#mgcp.udp.gateway_port: 2427
3118
3119# Set the TCP port for callagent messages (if other than the default of 2727)
3120# A decimal number
3121#mgcp.tcp.callagent_port: 2727
3122
3123# Set the UDP port for callagent messages (if other than the default of 2727)
3124# A decimal number
3125#mgcp.udp.callagent_port: 2727
3126
3127# Specifies that the raw text of the MGCP message should be displayed instead of (or in addition to) the dissection tree
3128# TRUE or FALSE (case-insensitive)
3129#mgcp.display_raw_text: FALSE
3130
3131# Display the number of MGCP messages found in a packet in the protocol column.
3132# TRUE or FALSE (case-insensitive)
3133#mgcp.display_mgcp_message_count: FALSE
3134
3135# Set the port for MIKEY messages (if other than the default of 2269)
3136# A decimal number
3137#mikey.udp.port: 2269
3138
3139# Set the port for MIKEY messages (if other than the default of 2269)
3140# A decimal number
3141#mikey.tcp.port: 2269
3142
3143# Display multipart bodies with no media type dissector as raw text (may cause problems with binary data).
3144# TRUE or FALSE (case-insensitive)
3145#mime_multipart.display_unknown_body_as_text: FALSE
3146
3147# Remove any base64 content-transfer encoding from bodies. This supports export of the body and its further dissection.
3148# TRUE or FALSE (case-insensitive)
3149#mime_multipart.remove_base64_encoding: FALSE
3150
3151# Register Format
3152# One of: UINT16     , INT16      , UINT32     , INT32      , IEEE FLT   , MODICON FLT
3153# (case-insensitive).
3154#modbus.mbus_register_format: UINT16     
3155
3156# Whether the Modbus RTU dissector should desegment all messages spanning multiple TCP segments
3157# TRUE or FALSE (case-insensitive)
3158#mbrtu.desegment: TRUE
3159
3160# Whether to validate the CRC
3161# TRUE or FALSE (case-insensitive)
3162#mbrtu.crc_verification: FALSE
3163
3164# Set the TCP/UDP port for encapsulated Modbus RTU packets
3165# A decimal number
3166#mbrtu.tcp.port: 0
3167
3168# Whether the Modbus RTU dissector should desegment all messages spanning multiple TCP segments
3169# TRUE or FALSE (case-insensitive)
3170#mbtcp.desegment: TRUE
3171
3172# Set the TCP port for Modbus/TCP packets (if other than the default of 502)
3173# A decimal number
3174#mbtcp.tcp.port: 502
3175
3176# Mojito UDP Port
3177# A decimal number
3178#mojito.udp.port: 0
3179
3180# MoldUDP UDP port to capture on.
3181# A decimal number
3182#moldudp.udp.port: 0
3183
3184# MoldUDP64 UDP port to dissect on.
3185# A decimal number
3186#moldudp64.udp.port: 0
3187
3188# MONGO TCP port if other than the default
3189# A decimal number
3190#mongo.tcp.port: 27017
3191
3192# The dynamic payload type which will be interpreted as MP4V-ES
3193# A decimal number
3194#mp4v-es.dynamic.payload.type: 0
3195
3196# Whether the section dissector should verify the CRC or checksum
3197# TRUE or FALSE (case-insensitive)
3198#mpeg_dsmcc.verify_crc: FALSE
3199
3200# Whether the section dissector should verify the CRC
3201# TRUE or FALSE (case-insensitive)
3202#mpeg_sect.verify_crc: FALSE
3203
3204# Lowest label is used to segregate flows inside a pseudowire
3205# TRUE or FALSE (case-insensitive)
3206#mpls.flowlabel_in_mpls_header: FALSE
3207
3208# Set the UDP port for messages (if other than the default of 3503)
3209# A decimal number
3210#mpls-echo.udp.port: 3503
3211
3212# Enable to allow non-zero Length in Control Word. This may be needed to correctly decode traffic from some legacy devices which generate non-zero Length even if there is no padding in the packet. Note that Length should have proper value (dissector checks this anyway).
3213# 
3214# Disable to blame all packets with CW.Length <> 0. This conforms to RFC4717.
3215# TRUE or FALSE (case-insensitive)
3216#mplspwatmaal5sdu.allow_cw_length_nonzero_aal5: FALSE
3217
3218# Enable to use reserved bits (8..9) of Control Word as an extension of CW.Length. This may be needed to correctly decode traffic from some legacy devices which uses reserved bits as extension of Length
3219# 
3220# Disable to blame all packets with CW.Reserved <> 0. This conforms to RFC4717.
3221# TRUE or FALSE (case-insensitive)
3222#mplspwatmaal5sdu.extend_cw_length_with_rsvd_aal5: FALSE
3223
3224# Enable to allow non-zero Length in Control Word. This may be needed to correctly decode traffic from some legacy devices which generate non-zero Length even if there is no padding in the packet. Note that Length should have proper value (dissector checks this anyway).
3225# 
3226# Disable to blame all packets with CW.Length <> 0. This conforms to RFC4717.
3227# TRUE or FALSE (case-insensitive)
3228#mplspwatmn1cw.allow_cw_length_nonzero: FALSE
3229
3230# Enable to use reserved bits (8..9) of Control Word as an extension of CW.Length. This may be needed to correctly decode traffic from some legacy devices which uses reserved bits as extension of Length
3231# 
3232# Disable to blame all packets with CW.Reserved <> 0. This conforms to RFC4717.
3233# TRUE or FALSE (case-insensitive)
3234#mplspwatmn1cw.extend_cw_length_with_rsvd: FALSE
3235
3236# To use this option you must also enable "Analyze TCP sequence numbers". 
3237# TRUE or FALSE (case-insensitive)
3238#mptcp.analyze_mptcp: TRUE
3239
3240# In case you don't capture the key, it will use the first DSN seen
3241# TRUE or FALSE (case-insensitive)
3242#mptcp.relative_sequence_numbers: TRUE
3243
3244# You need to capture the handshake for this to work."Map TCP subflows to their respective MPTCP connections"
3245# TRUE or FALSE (case-insensitive)
3246#mptcp.analyze_mappings: FALSE
3247
3248# You need to enable DSS mapping analysis for this option to work
3249# TRUE or FALSE (case-insensitive)
3250#mptcp.intersubflows_retransmission: FALSE
3251
3252# Whether the MQ dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3253# TRUE or FALSE (case-insensitive)
3254#mq.desegment: TRUE
3255
3256# Whether the MQ dissector should reassemble MQ messages spanning multiple TSH segments
3257# TRUE or FALSE (case-insensitive)
3258#mq.reassembly: TRUE
3259
3260# When dissecting PCF there can be a lot of parameters. You can limit the number of parameter decoded, before it continue with the next PCF.
3261# A decimal number
3262#mqpcf.maxprm: 999
3263
3264# When dissecting a parameter of a PCFm, if it is a StringList, IntegerList or Integer64 List,  You can limit the number of elements displayed, before it continues with the next Parameter.
3265# A decimal number
3266#mqpcf.maxlst: 20000
3267
3268# MRCPv2 TCP Ports Range
3269# A string denoting an positive integer range (e.g., "1-20,30-40")
3270#mrcpv2.tcp.port_range: 6075,30000-30200
3271
3272# Specifies that the raw text of the MSRP message should be displayed in addition to the dissection tree
3273# TRUE or FALSE (case-insensitive)
3274#msrp.display_raw_text: TRUE
3275
3276# Where available, show which protocol and frame caused this MSRP stream to be created
3277# TRUE or FALSE (case-insensitive)
3278#msrp.show_setup_info: TRUE
3279
3280# Whether the MTP2 dissector should use extended sequence numbers as described in Q.703, Annex A as a default.
3281# TRUE or FALSE (case-insensitive)
3282#mtp2.use_extended_sequence_numbers: FALSE
3283
3284# This only works for SCCP traffic for now
3285# TRUE or FALSE (case-insensitive)
3286#mtp3.heuristic_standard: FALSE
3287
3288# The SS7 standard used in MTP3 packets
3289# One of: ITU, ANSI, Chinese ITU, Japan
3290# (case-insensitive).
3291#mtp3.standard: ITU
3292
3293# The structure of the pointcodes in ITU networks
3294# One of: Unstructured, 3-8-3, 4-3-4-3
3295# (case-insensitive).
3296#mtp3.itu_pc_structure: Unstructured
3297
3298# The structure of the pointcodes in Japan networks
3299# One of: Unstructured, 7-4-5, 3-4-4-5
3300# (case-insensitive).
3301#mtp3.japan_pc_structure: Unstructured
3302
3303# Use 5-bit (instead of 8-bit) SLS in ANSI MTP3 packets
3304# TRUE or FALSE (case-insensitive)
3305#mtp3.ansi_5_bit_sls: FALSE
3306
3307# Use 5-bit (instead of 4-bit) SLS in Japan MTP3 packets
3308# TRUE or FALSE (case-insensitive)
3309#mtp3.japan_5_bit_sls: FALSE
3310
3311# Format for point code in the address columns
3312# One of: Decimal, Hexadecimal, NI-Decimal, NI-Hexadecimal, Dashed
3313# (case-insensitive).
3314#mtp3.addr_format: Dashed
3315
3316# Decode the spare bits of the SIO as the MSU priority (a national option in ITU)
3317# TRUE or FALSE (case-insensitive)
3318#mtp3.itu_priority: FALSE
3319
3320# Whether the MySQL dissector should reassemble MySQL buffers spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3321# TRUE or FALSE (case-insensitive)
3322#mysql.desegment_buffers: TRUE
3323
3324# Whether the MySQL dissector should display the SQL query string in the INFO column.
3325# TRUE or FALSE (case-insensitive)
3326#mysql.show_sql_query: FALSE
3327
3328# Always dissect NAS EPS messages as plain
3329# TRUE or FALSE (case-insensitive)
3330#nas-eps.dissect_plain: FALSE
3331
3332# This should work when the NAS security algorithm is NULL (128-EEA0).
3333# TRUE or FALSE (case-insensitive)
3334#nas-eps.null_decipher: TRUE
3335
3336# Whether the Nasdaq ITCH dissector should decode Chi X extensions.
3337# TRUE or FALSE (case-insensitive)
3338#nasdaq_itch.chi_x: TRUE
3339
3340# Whether the Nasdaq-SoupTCP dissector should reassemble messages spanning multiple TCP segments.
3341# TRUE or FALSE (case-insensitive)
3342#nasdaq_soup.desegment: TRUE
3343
3344# TCP Ports range
3345# A string denoting an positive integer range (e.g., "1-20,30-40")
3346#nasdaq_soup.tcp.port: 
3347
3348# UDP port numbers used for NB RTPMUX traffic (default 0)
3349# A string denoting an positive integer range (e.g., "1-20,30-40")
3350#nb_rtpmux.udp_ports: 0
3351
3352# foo
3353# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3354# (case-insensitive).
3355#nbap.lch1_content: MAC_CONTENT_DCCH
3356
3357# foo
3358# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3359# (case-insensitive).
3360#nbap.lch2_content: MAC_CONTENT_DCCH
3361
3362# foo
3363# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3364# (case-insensitive).
3365#nbap.lch3_content: MAC_CONTENT_DCCH
3366
3367# foo
3368# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3369# (case-insensitive).
3370#nbap.lch4_content: MAC_CONTENT_DCCH
3371
3372# foo
3373# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3374# (case-insensitive).
3375#nbap.lch5_content: MAC_CONTENT_CS_DTCH
3376
3377# foo
3378# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3379# (case-insensitive).
3380#nbap.lch6_content: MAC_CONTENT_CS_DTCH
3381
3382# foo
3383# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3384# (case-insensitive).
3385#nbap.lch7_content: MAC_CONTENT_CS_DTCH
3386
3387# foo
3388# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3389# (case-insensitive).
3390#nbap.lch8_content: MAC_CONTENT_DCCH
3391
3392# foo
3393# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3394# (case-insensitive).
3395#nbap.lch9_content: MAC_CONTENT_PS_DTCH
3396
3397# foo
3398# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3399# (case-insensitive).
3400#nbap.lch10_content: MAC_CONTENT_UNKNOWN
3401
3402# foo
3403# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3404# (case-insensitive).
3405#nbap.lch11_content: MAC_CONTENT_PS_DTCH
3406
3407# foo
3408# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3409# (case-insensitive).
3410#nbap.lch12_content: MAC_CONTENT_PS_DTCH
3411
3412# foo
3413# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3414# (case-insensitive).
3415#nbap.lch13_content: MAC_CONTENT_CS_DTCH
3416
3417# foo
3418# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3419# (case-insensitive).
3420#nbap.lch14_content: MAC_CONTENT_PS_DTCH
3421
3422# foo
3423# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3424# (case-insensitive).
3425#nbap.lch15_content: MAC_CONTENT_CCCH
3426
3427# foo
3428# One of: MAC_CONTENT_UNKNOWN, MAC_CONTENT_DCCH, MAC_CONTENT_PS_DTCH, MAC_CONTENT_CS_DTCH, MAC_CONTENT_CCCH
3429# (case-insensitive).
3430#nbap.lch16_content: MAC_CONTENT_DCCH
3431
3432# Whether the NBD dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings
3433# TRUE or FALSE (case-insensitive)
3434#nbd.desegment_nbd_messages: TRUE
3435
3436# Whether the NBSS dissector should reassemble packets spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3437# TRUE or FALSE (case-insensitive)
3438#nbss.desegment_nbss_commands: TRUE
3439
3440# Whether the NCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3441# TRUE or FALSE (case-insensitive)
3442#ncp.desegment: TRUE
3443
3444# Whether the NCP dissector should defragment NDS messages spanning multiple reply packets.
3445# TRUE or FALSE (case-insensitive)
3446#ncp.defragment_nds: TRUE
3447
3448# Dissect the NetWare Information Structure as NetWare 5.x or higher or as older NetWare 3.x.
3449# TRUE or FALSE (case-insensitive)
3450#ncp.newstyle: TRUE
3451
3452# Whether the NCP dissector should echo the NDS Entry ID to name resolves to the expert table.
3453# TRUE or FALSE (case-insensitive)
3454#ncp.eid_2_expert: TRUE
3455
3456# Whether the NCP dissector should echo NCP connection information to the expert table.
3457# TRUE or FALSE (case-insensitive)
3458#ncp.connection_2_expert: FALSE
3459
3460# Whether the NCP dissector should echo protocol errors to the expert table.
3461# TRUE or FALSE (case-insensitive)
3462#ncp.error_2_expert: TRUE
3463
3464# Whether the NCP dissector should echo server information to the expert table.
3465# TRUE or FALSE (case-insensitive)
3466#ncp.server_2_expert: TRUE
3467
3468# Whether the NCP dissector should echo file open/close/oplock information to the expert table.
3469# TRUE or FALSE (case-insensitive)
3470#ncp.file_2_expert: FALSE
3471
3472# Version of the NDMP protocol to assume if the version can not be automatically detected from the capture
3473# One of: Version 2, Version 3, Version 4, Version 5
3474# (case-insensitive).
3475#ndmp.default_protocol_version: Version 4
3476
3477# Whether the NDMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3478# TRUE or FALSE (case-insensitive)
3479#ndmp.desegment: TRUE
3480
3481# Whether the dissector should defragment NDMP messages spanning multiple packets.
3482# TRUE or FALSE (case-insensitive)
3483#ndmp.defragment: TRUE
3484
3485# Whether the NDPS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3486# TRUE or FALSE (case-insensitive)
3487#ndps.desegment_tcp: TRUE
3488
3489# Whether the NDPS dissector should reassemble fragmented NDPS messages spanning multiple SPX packets
3490# TRUE or FALSE (case-insensitive)
3491#ndps.desegment_spx: TRUE
3492
3493# Whether or not the NDPS dissector should show object id's and other details
3494# TRUE or FALSE (case-insensitive)
3495#ndps.show_oid: FALSE
3496
3497# Whether the NetBIOS dissector should defragment messages spanning multiple frames
3498# TRUE or FALSE (case-insensitive)
3499#netbios.defragment: TRUE
3500
3501# port if other than the default
3502# A decimal number
3503#netdump.udp.port: 0
3504
3505# The TCP port on which Monotone Netsync packets will be sent
3506# A decimal number
3507#netsync.tcp_port: 5253
3508
3509# Whether the Netsync dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3510# TRUE or FALSE (case-insensitive)
3511#netsync.desegment_netsync_messages: TRUE
3512
3513# Always dissect this port's traffic as newmail notifications. Additional ports will be dynamically registered as they are seen in MAPI register push notification packets.
3514# A decimal number
3515#newmail.default_port: 0
3516
3517# Whether the dissector should snoop the FH to filename mappings by looking inside certain packets
3518# TRUE or FALSE (case-insensitive)
3519#nfs.file_name_snooping: FALSE
3520
3521# Whether the dissector should snoop the full pathname for files for matching FH's
3522# TRUE or FALSE (case-insensitive)
3523#nfs.file_full_name_snooping: FALSE
3524
3525# With this option display filters for nfs fhandles (nfs.fh.{name|full_name|hash}) will find both the request and response packets for a RPC call, even if the actual fhandle is only present in one of the packets
3526# TRUE or FALSE (case-insensitive)
3527#nfs.fhandle_find_both_reqrep: FALSE
3528
3529# When enabled, this option will print the NFSv4 tag (if one exists) in the Info column in the Summary pane
3530# TRUE or FALSE (case-insensitive)
3531#nfs.display_nfsv4_tag: TRUE
3532
3533# When enabled, shows only the significant NFSv4 Operations in the info column.  Others (like GETFH, PUTFH, etc) are not displayed
3534# TRUE or FALSE (case-insensitive)
3535#nfs.display_major_nfsv4_ops: TRUE
3536
3537# Whether the Authentication Extension data contains the source address. Some Cisco IOS implementations forgo this part of RFC2332.
3538# TRUE or FALSE (case-insensitive)
3539#nhrp.auth_ext_has_addr: TRUE
3540
3541# Whether the dissector will track and match MSG and RES calls for asynchronous NLM
3542# TRUE or FALSE (case-insensitive)
3543#nlm.msg_res_matching: FALSE
3544
3545# NT Password (used to decrypt payloads)
3546# A string
3547#ntlmssp.nt_password: 
3548
3549# Dissect custom olsr.org message types (compatible with rfc routing agents)
3550# TRUE or FALSE (case-insensitive)
3551#olsr.ff_olsrorg: TRUE
3552
3553# Dissect custom nrlolsr tc message (incompatible with rfc routing agents)
3554# TRUE or FALSE (case-insensitive)
3555#olsr.nrlolsr: TRUE
3556
3557# SSL/TLS Ports range
3558# A string denoting an positive integer range (e.g., "1-20,30-40")
3559#opa.fe.ssl.port: 3249-3252
3560
3561# TCP Ports range
3562# A string denoting an positive integer range (e.g., "1-20,30-40")
3563#opa.fe.tcp.port: 3245-3248
3564
3565# Attempt to parse mad payload even when MAD.Status is non-zero
3566# TRUE or FALSE (case-insensitive)
3567#opa.mad.parse_mad_error: FALSE
3568
3569# The TCP ports for the OPC UA TCP Binary Protocol (comma separated list)
3570# A string denoting an positive integer range (e.g., "1-20,30-40")
3571#opcua.tcp_ports: 4840
3572
3573# OpenFlow TCP port (6653 is the IANA assigned port)
3574# A decimal number
3575#openflow.tcp.port: 6653
3576
3577# Whether the OpenFlow dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3578# TRUE or FALSE (case-insensitive)
3579#openflow.desegment: TRUE
3580
3581# To be able to fully dissect SSDO and SPDO packages, a valid UDID for the SCM has to be provided
3582# A string
3583#opensafety.scm_udid: 00:00:00:00:00:00
3584
3585# Automatically assign a detected SCM UDID (by reading SNMT->SNTM_assign_UDID_SCM) and set it for the file
3586# TRUE or FALSE (case-insensitive)
3587#opensafety.scm_udid_autoset: TRUE
3588
3589# Port used by any UDP demo implementation to transport data
3590# A decimal number
3591#opensafety.network_udp_port: 9877
3592
3593# UDP port used by SercosIII to transport data
3594# A decimal number
3595#opensafety.network_udp_port_sercosiii: 8755
3596
3597# In an SercosIII/UDP transport stream, openSAFETY frame 2 will be expected before frame 1
3598# TRUE or FALSE (case-insensitive)
3599#opensafety.network_udp_frame_first_sercosiii: FALSE
3600
3601# In the transport stream, openSAFETY frame 2 will be expected before frame 1
3602# TRUE or FALSE (case-insensitive)
3603#opensafety.network_udp_frame_first: FALSE
3604
3605# Modbus/TCP words can be transcoded either big- or little endian. Default will be little endian
3606# TRUE or FALSE (case-insensitive)
3607#opensafety.mbtcp_big_endian: FALSE
3608
3609# Enables additional information in the dissection for better debugging an openSAFETY trace
3610# TRUE or FALSE (case-insensitive)
3611#opensafety.debug_verbose: FALSE
3612
3613# Enable heuristic dissection for openSAFETY over UDP encoded traffic
3614# TRUE or FALSE (case-insensitive)
3615#opensafety.enable_udp: TRUE
3616
3617# Enable heuristic dissection for Modbus/TCP
3618# TRUE or FALSE (case-insensitive)
3619#opensafety.enable_mbtcp: TRUE
3620
3621# Display the data between openSAFETY packets
3622# TRUE or FALSE (case-insensitive)
3623#opensafety.display_intergap_data: FALSE
3624
3625# SPDOs may only be found in cyclic data, SSDOs/SNMTS only in acyclic data
3626# TRUE or FALSE (case-insensitive)
3627#opensafety.classify_transport: TRUE
3628
3629# TCP Port of the OpenVPN tunnel
3630# A decimal number
3631#openvpn.tcp.port: 1194
3632
3633# UDP Port of the OpenVPN tunnel
3634# A decimal number
3635#openvpn.udp.port: 1194
3636
3637# If tls-auth detection fails, you can choose to override detection and set tls-auth yourself
3638# TRUE or FALSE (case-insensitive)
3639#openvpn.tls_auth_detection_override: FALSE
3640
3641# If the parameter --tls-auth is used, the following preferences must also be defined.
3642# TRUE or FALSE (case-insensitive)
3643#openvpn.tls_auth: FALSE
3644
3645# If the parameter --tls-auth is used, a HMAC header is being inserted.
3646# The default HMAC algorithm is SHA-1 which generates a 160 bit HMAC, therefore 20 bytes should be ok.
3647# The value must be between 20 (160 bits) and 64 (512 bits).
3648# A decimal number
3649#openvpn.tls_auth_hmac_size: 20
3650
3651# If the parameter --tls-auth is used, an additional packet-id for replay protection is inserted after the HMAC signature. This field can either be 4 bytes or 8 bytes including an optional time_t timestamp long.
3652#  This option is only evaluated if tls_auth_hmac_size > 0.
3653#  The default value is TRUE.
3654# TRUE or FALSE (case-insensitive)
3655#openvpn.long_format: TRUE
3656
3657# Whether the Openwire dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3658# TRUE or FALSE (case-insensitive)
3659#openwire.desegment: TRUE
3660
3661# Whether verbose type and length information are displayed in the protocol tree
3662# TRUE or FALSE (case-insensitive)
3663#openwire.verbose_type: FALSE
3664
3665# Whether the OPSI dissector should desegment all messages spanning multiple TCP segments
3666# TRUE or FALSE (case-insensitive)
3667#opsi.desegment_opsi_messages: TRUE
3668
3669#  OptoMMP TCP or UDP port if other than the default
3670# A decimal number
3671#optommp.tcp.port: 0
3672
3673# Set the TCP port for OSC
3674# A decimal number
3675#osc.tcp.port: 0
3676
3677# TCP port for OSI over TPKT
3678# A decimal number
3679#osi.tpkt_port: 0
3680
3681# Whether segmented TPKT datagrams should be reassembled
3682# TRUE or FALSE (case-insensitive)
3683#osi.tpkt_reassemble: FALSE
3684
3685# Whether segmented RTSE datagrams should be reassembled. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3686# TRUE or FALSE (case-insensitive)
3687#rtse.reassemble: TRUE
3688
3689# Set the port for P1 operations (if other than the default of 102)
3690# A decimal number
3691#p1.tcp.port: 102
3692
3693# Set the port for P7 operations (if other than the default of 102)
3694# A decimal number
3695#p7.tcp.port: 102
3696
3697# Set the port for DAP operations (if other than the default of 102)
3698# A decimal number
3699#dap.tcp.port: 102
3700
3701# Set the port for DISP operations (if other than the default of 102)
3702# A decimal number
3703#disp.tcp.port: 102
3704
3705# Set the port for DOP operations (if other than the default of 102)
3706# A decimal number
3707#dop.tcp.port: 102
3708
3709# Set the port for DSP operations (if other than the default of 102)
3710# A decimal number
3711#dsp.tcp.port: 102
3712
3713# Whether the IDMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3714# TRUE or FALSE (case-insensitive)
3715#idmp.desegment_idmp_messages: TRUE
3716
3717# Whether segmented IDMP datagrams should be reassembled. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3718# TRUE or FALSE (case-insensitive)
3719#idmp.reassemble: TRUE
3720
3721# Set the port for Internet Directly Mapped Protocol requests/responses
3722# A decimal number
3723#idmp.tcp.port: 1102
3724
3725# TCP Ports range
3726# A string denoting an positive integer range (e.g., "1-20,30-40")
3727#ouch.tcp.port: 
3728
3729# Port numbers used for P_Mul traffic
3730# A string denoting an positive integer range (e.g., "1-20,30-40")
3731#p_mul.udp_ports: 
3732
3733# Reassemble fragmented P_Mul packets
3734# TRUE or FALSE (case-insensitive)
3735#p_mul.reassemble: TRUE
3736
3737# Make the P_Mul dissector use relative message id number instead of absolute ones
3738# TRUE or FALSE (case-insensitive)
3739#p_mul.relative_msgid: TRUE
3740
3741# Calculate sequence/acknowledgement analysis
3742# TRUE or FALSE (case-insensitive)
3743#p_mul.seq_ack_analysis: TRUE
3744
3745# Type of content in Data_PDU
3746# One of: No decoding, BER encoded ASN.1, Compressed Data Type
3747# (case-insensitive).
3748#p_mul.decode: No decoding
3749
3750# UDP communication port for packetbb PDUs
3751# A decimal number
3752#packetbb.communication_port: 269
3753
3754# Attempt to decode parts of the message that aren't fully understood yet
3755# TRUE or FALSE (case-insensitive)
3756#papi.experimental_decode: FALSE
3757
3758# SCCP (and SUA) SSNs to decode as PCAP
3759# A string denoting an positive integer range (e.g., "1-20,30-40")
3760#pcap.ssn: 
3761
3762# Whether the PCLI summary line should be shown in the protocol tree
3763# TRUE or FALSE (case-insensitive)
3764#pcli.summary_in_tree: TRUE
3765
3766# PDC Port if other then the default
3767# A decimal number
3768#pdc.tcp.port: 0
3769
3770# Show uncompressed User-Plane data as IP
3771# TRUE or FALSE (case-insensitive)
3772#pdcp-lte.show_user_plane_as_ip: TRUE
3773
3774# Show unciphered Signalling-Plane data as RRC
3775# TRUE or FALSE (case-insensitive)
3776#pdcp-lte.show_signalling_plane_as_rrc: TRUE
3777
3778# Do sequence number analysis
3779# One of: No-Analysis, Only-RLC-frames, Only-PDCP-frames
3780# (case-insensitive).
3781#pdcp-lte.check_sequence_numbers: Only-RLC-frames
3782
3783# Attempt to decode ROHC data
3784# TRUE or FALSE (case-insensitive)
3785#pdcp-lte.dissect_rohc: FALSE
3786
3787# Can show RLC, PDCP or Traffic layer info in Info column
3788# One of: RLC Info, PDCP Info, Traffic Info
3789# (case-insensitive).
3790#pdcp-lte.layer_to_show: RLC Info
3791
3792# If RRC Security Info not seen, e.g. in Handover
3793# One of: EEA0 (NULL), EEA1 (SNOW3G), EEA2 (AES), EEA3 (ZUC)
3794# (case-insensitive).
3795#pdcp-lte.default_ciphering_algorithm: EEA0 (NULL)
3796
3797# If RRC Security Info not seen, e.g. in Handover
3798# One of: EIA0 (NULL), EIA1 (SNOW3G), EIA2 (AES), EIA3 (ZUC)
3799# (case-insensitive).
3800#pdcp-lte.default_integrity_algorithm: EIA0 (NULL)
3801
3802# N.B. only possible if build with algorithm support, and have key available and configured
3803# TRUE or FALSE (case-insensitive)
3804#pdcp-lte.decipher_signalling: TRUE
3805
3806# N.B. only possible if build with algorithm support, and have key available and configured
3807# TRUE or FALSE (case-insensitive)
3808#pdcp-lte.decipher_userplane: FALSE
3809
3810# N.B. only possible if build with algorithm support, and have key available and configured
3811# TRUE or FALSE (case-insensitive)
3812#pdcp-lte.verify_integrity: TRUE
3813
3814# Whether the dissector should put the internal PER data in the tree or if it should hide it
3815# TRUE or FALSE (case-insensitive)
3816#per.display_internal_per_fields: FALSE
3817
3818# Whether or not UID and PID fields are dissected in big or little endian
3819# TRUE or FALSE (case-insensitive)
3820#pflog.uid_endian: TRUE
3821
3822# Whether to check the validity of the PGM checksum
3823# TRUE or FALSE (case-insensitive)
3824#pgm.check_checksum: TRUE
3825
3826# PGM Encap is PGM packets encapsulated in UDP packets (Note: This option is off, i.e. port is 0, by default)
3827# A decimal number
3828#pgm.udp.encap_ucast_port: 0
3829
3830# PGM Encap is PGM packets encapsulated in UDP packets (Note: This option is off, i.e. port is 0, by default)
3831# A decimal number
3832#pgm.udp.encap_mcast_port: 0
3833
3834# Set the port for PGSQL messages (if different from the default of 5432)
3835# A decimal number
3836#pgsql.tcp.port: 5432
3837
3838# Whether the PIM payload is shown off of the main tree or encapsulated within the PIM options
3839# TRUE or FALSE (case-insensitive)
3840#pim.payload_tree: TRUE
3841
3842# The password to used to decrypt the encrypted elements within the PKCS#12 file
3843# A string
3844#pkcs12.password: 
3845
3846# Whether to try and decrypt the encrypted data within the PKCS#12 with a NULL password
3847# TRUE or FALSE (case-insensitive)
3848#pkcs12.try_null_password: FALSE
3849
3850# Decode packets on this UDP port as PacketCable CCC
3851# A decimal number
3852#pkt_ccc.udp_port: 0
3853
3854# Whether the PN-RT summary line should be shown in the protocol tree
3855# TRUE or FALSE (case-insensitive)
3856#pn_rt.summary_in_tree: TRUE
3857
3858# Reassemble PNIO Fragments and get them decoded
3859# TRUE or FALSE (case-insensitive)
3860#pn_rt.desegment: TRUE
3861
3862# Protocol payload type
3863# One of: Data, Sony FeliCa, NXP MiFare, ISO 7816
3864# (case-insensitive).
3865#pn532.prtype532: Data
3866
3867# Whether the PNIO dissector is allowed to use detailed PROFIsafe dissection of cyclic data frames
3868# TRUE or FALSE (case-insensitive)
3869#pn_io.pnio_ps_selection: TRUE
3870
3871# Select your Networkpath to your GSD-Files.
3872# A path to a directory
3873#pn_io.pnio_ps_networkpath: 
3874
3875# Whether the POP dissector should reassemble RETR and TOP responses and spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3876# TRUE or FALSE (case-insensitive)
3877#pop.desegment_data: TRUE
3878
3879# Whether fragmented 802.11 aggregated MPDUs should be reassembled
3880# TRUE or FALSE (case-insensitive)
3881#ppi.reassemble: TRUE
3882
3883# The type of PPP frame checksum (none, 16-bit, 32-bit)
3884# One of: None, 16-Bit, 32-Bit
3885# (case-insensitive).
3886#ppp.fcs_type: None
3887
3888# Default Protocol ID to be used for PPPMuxCP
3889# A hexadecimal number
3890#ppp.default_proto_id: 0
3891
3892# Whether PPP Multilink frames use 12-bit sequence numbers
3893# TRUE or FALSE (case-insensitive)
3894#mp.short_seqno: FALSE
3895
3896# Show values of tags and lengths of data fields
3897# TRUE or FALSE (case-insensitive)
3898#pppoed.show_tags_and_lengths: FALSE
3899
3900# Enable this dissector (default is false)
3901# TRUE or FALSE (case-insensitive)
3902#prp.enable: FALSE
3903
3904# Properly translates vendor specific opcodes
3905# One of: Unknown vendor, Eastman Kodak, Canon, Nikon, Casio EX-F1, Microsoft / MTP, Olympus E series
3906# (case-insensitive).
3907#ptpip.vendor: Unknown vendor
3908
3909# Set the UDP port for pulse
3910# A decimal number
3911#pulse.udp.port: 539
3912
3913# Whether the PVFS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3914# TRUE or FALSE (case-insensitive)
3915#pvfs.desegment: TRUE
3916
3917# Whether the Q.931 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
3918# TRUE or FALSE (case-insensitive)
3919#q931.desegment_h323_messages: TRUE
3920
3921# Reassemble segmented Q.931 messages (Q.931 - Annex H)
3922# TRUE or FALSE (case-insensitive)
3923#q931.reassembly: TRUE
3924
3925# Decode ISO/IEC cause coding standard as ITU-T
3926# TRUE or FALSE (case-insensitive)
3927#q931.iso_iec_cause_coding: FALSE
3928
3929# Type of Facility encoding
3930# One of: Dissect facility as QSIG, Dissect facility as ETSI
3931# (case-insensitive).
3932#q932.facility_encoding: Dissect facility as QSIG
3933
3934# Set the UDP port for the Quake Server
3935# A decimal number
3936#quake.udp.port: 26000
3937
3938# Set the UDP port for the Quake II Server
3939# A decimal number
3940#quake2.udp.port: 27910
3941
3942# Set the UDP base port for the Quake III Arena Server
3943# A decimal number
3944#quake3.udp.arena_port: 27960
3945
3946# Set the UDP base port for the Quake III Arena Master Server
3947# A decimal number
3948#quake3.udp.master_port: 27950
3949
3950# Set the UDP port for the QuakeWorld Server
3951# A decimal number
3952#quakeworld.udp.port: 27500
3953
3954# QUIC UDP port if other than the default
3955# A decimal number
3956#quic.udp.quic.port: 80
3957
3958# QUICS (Secure) UDP port if other than the default
3959# A decimal number
3960#quic.udp.quics.port: 443
3961
3962# Shared secret used to decode User Passwords and validate Response Authenticators
3963# A string
3964#radius.shared_secret: 
3965
3966# Whether to check or not if Response Authenticator is correct. You need to define shared secret for this to work.
3967# TRUE or FALSE (case-insensitive)
3968#radius.validate_authenticator: FALSE
3969
3970# Whether to add or not to the tree the AVP's payload length
3971# TRUE or FALSE (case-insensitive)
3972#radius.show_length: FALSE
3973
3974# A list of UDP ports to decode as RADIUS
3975# A string denoting an positive integer range (e.g., "1-20,30-40")
3976#radius.ports: 1645,1646,1700,1812,1813,3799
3977
3978# The SCCP SubSystem Number for RANAP (default 142)
3979# A decimal number
3980#ranap.sccp_ssn: 142
3981
3982# Attempt to dissect RRC message embedded in RRC-Container IE
3983# TRUE or FALSE (case-insensitive)
3984#ranap.dissect_rrc_container: FALSE
3985
3986# Set the port for RDP operations (if other than the default of 3389)
3987# A decimal number
3988#rdp.tcp.port: 3389
3989
3990# Where available, show which protocol and frame caused this RDT stream to be created
3991# TRUE or FALSE (case-insensitive)
3992#rdt.show_setup_info: TRUE
3993
3994# Register a client UDP port for RDT traffic
3995# TRUE or FALSE (case-insensitive)
3996#rdt.register_udp_port: FALSE
3997
3998# Set the UDP port for clients
3999# A decimal number
4000#rdt.default_udp_port: 6970
4001
4002# Whether fragmented RELOAD datagrams should be reassembled
4003# TRUE or FALSE (case-insensitive)
4004#reload.defragment: TRUE
4005
4006# Length of the NodeId as defined in the overlay.
4007# A decimal number
4008#reload.nodeid_length: 16
4009
4010# topology plugin defined in the overlay
4011# A string
4012#reload.topology_plugin: CHORD-RELOAD
4013
4014#  riemann UDP port if other than the default
4015# A decimal number
4016#riemann.udp.port: 0
4017
4018#  riemann TCP port if other than the default
4019# A decimal number
4020#riemann.tcp.port: 0
4021
4022# Display the third and forth bytes of the RIPv2 header as the Routing Domain field (introduced in RFC 1388 [January 1993] and obsolete as of RFC 1723 [November 1994])
4023# TRUE or FALSE (case-insensitive)
4024#rip.display_routing_domain: FALSE
4025
4026# When enabled, try to reassemble SDUs from the various PDUs received
4027# TRUE or FALSE (case-insensitive)
4028#rlc.perform_reassembly: TRUE
4029
4030# When enabled, if data is not present, don't report as an error, but instead add expert info to indicate that headers were omitted
4031# TRUE or FALSE (case-insensitive)
4032#rlc.header_only_mode: FALSE
4033
4034# When enabled, rlc will assume all data is ciphered
4035# TRUE or FALSE (case-insensitive)
4036#rlc.ciphered_data: FALSE
4037
4038# When enabled, rlc will try to decipher data. (Experimental)
4039# TRUE or FALSE (case-insensitive)
4040#rlc.try_decipher: FALSE
4041
4042# LI size in bits, either 7 or 15 bit
4043# One of: 7 bits, 15 bits, Let upper layers decide
4044# (case-insensitive).
4045#rlc.li_size: Let upper layers decide
4046
4047# Attempt to keep track of PDUs for AM channels, and point out problems
4048# One of: No-Analysis, Only-MAC-frames, Only-RLC-frames
4049# (case-insensitive).
4050#rlc-lte.do_sequence_analysis_am: Only-MAC-frames
4051
4052# Attempt to keep track of PDUs for UM channels, and point out problems
4053# One of: No-Analysis, Only-MAC-frames, Only-RLC-frames
4054# (case-insensitive).
4055#rlc-lte.do_sequence_analysis: Only-MAC-frames
4056
4057# Call PDCP dissector for signalling PDUs.  Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
4058# TRUE or FALSE (case-insensitive)
4059#rlc-lte.call_pdcp_for_srb: TRUE
4060
4061# Call PDCP dissector for user-plane PDUs.  Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
4062# One of: Off, 7-bit SN, 12-bit SN, 15-bit SN, 18-bit SN, Use signalled value
4063# (case-insensitive).
4064#rlc-lte.call_pdcp_for_drb: Use signalled value
4065
4066# Call RRC dissector for CCCH PDUs
4067# TRUE or FALSE (case-insensitive)
4068#rlc-lte.call_rrc_for_ccch: TRUE
4069
4070# Call RRC dissector for MCCH PDUs  Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
4071# TRUE or FALSE (case-insensitive)
4072#rlc-lte.call_rrc_for_mcch: FALSE
4073
4074# Call ip dissector for MTCH PDUs  Note that without reassembly, it canonly be called for complete PDUs (i.e. not segmented over RLC)
4075# TRUE or FALSE (case-insensitive)
4076#rlc-lte.call_ip_for_mtch: FALSE
4077
4078# When enabled, if data is not present, don't report as an error, but instead add expert info to indicate that headers were omitted
4079# TRUE or FALSE (case-insensitive)
4080#rlc-lte.header_only_mode: FALSE
4081
4082# When enabled, attempts to re-assemble upper-layer SDUs that are split over more than one RLC PDU.  Note: does not currently support out-of-order or re-segmentation. N.B. sequence analysis must also be turned on in order for reassembly to work
4083# TRUE or FALSE (case-insensitive)
4084#rlc-lte.reassembly: TRUE
4085
4086# Whether the RPC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4087# TRUE or FALSE (case-insensitive)
4088#rpc.desegment_rpc_over_tcp: TRUE
4089
4090# Whether the RPC dissector should defragment RPC-over-TCP messages.
4091# TRUE or FALSE (case-insensitive)
4092#rpc.defragment_rpc_over_tcp: TRUE
4093
4094# Set the maximum size of RPCoverTCP PDUs.  If the size field of the record marker is larger than this value it will not be considered a valid RPC PDU.
4095# A decimal number
4096#rpc.max_tcp_pdu_size: 4194304
4097
4098# Whether the RPC dissector should attempt to dissect RPC PDUs containing programs that are not known to Wireshark. This will make the heuristics significantly weaker and elevate the risk for falsely identifying and misdissecting packets significantly.
4099# TRUE or FALSE (case-insensitive)
4100#rpc.dissect_unknown_programs: FALSE
4101
4102# Whether the RPC dissector should attempt to locate RPC PDU boundaries when initial fragment alignment is not known.  This may cause false positives, or slow operation.
4103# TRUE or FALSE (case-insensitive)
4104#rpc.find_fragment_start: FALSE
4105
4106# Whether the RPCAP dissector should reassemble PDUs spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4107# TRUE or FALSE (case-insensitive)
4108#rpcap.desegment_pdus: TRUE
4109
4110# Whether the packets should be decoded according to the link-layer type.
4111# TRUE or FALSE (case-insensitive)
4112#rpcap.decode_content: TRUE
4113
4114# Default link-layer type to use if an Open Reply packet has not been received.
4115# A decimal number
4116#rpcap.linktype: 4294967295
4117
4118# Check to treat all traffic between the configured source/destination as RPCoRDMA
4119# TRUE or FALSE (case-insensitive)
4120#rpcordma.manual_en: FALSE
4121
4122# Type of address specified
4123# One of: LID, GID
4124# (case-insensitive).
4125#rpcordma.addr_a_type: LID
4126
4127# LID/GID of address A
4128# A string
4129#rpcordma.addr_a_id: 
4130
4131# QP Number for address A
4132# A decimal number
4133#rpcordma.addr_a_qp: 0
4134
4135# Type of address specified
4136# One of: LID, GID
4137# (case-insensitive).
4138#rpcordma.addr_b_type: LID
4139
4140# LID/GID of address B
4141# A string
4142#rpcordma.addr_b_id: 
4143
4144# QP Number for address B
4145# A decimal number
4146#rpcordma.addr_b_qp: 0
4147
4148# Range of RPCoRDMA server ports(default 20049,2050)
4149# A string denoting an positive integer range (e.g., "1-20,30-40")
4150#rpcordma.target_ports: 20049,2050
4151
4152# RPKI-Router Protocol TCP port if other than the default
4153# A decimal number
4154#rpkirtr.tcp.rpkirtr.port: 323
4155
4156# RPKI-Router Protocol TCP TLS port if other than the default
4157# A decimal number
4158#rpkirtr.tcp.rpkirtr_tls.port: 324
4159
4160# Controls the display of the session's client username in the info column.  This is only displayed if the packet containing it was seen during this capture session.
4161# TRUE or FALSE (case-insensitive)
4162#rsh.info_show_client_username: FALSE
4163
4164# Controls the display of the session's server username in the info column.  This is only displayed if the packet containing it was seen during this capture session.
4165# TRUE or FALSE (case-insensitive)
4166#rsh.info_show_server_username: TRUE
4167
4168# Controls the display of the command being run on the server by this session in the info column.  This is only displayed if the packet containing it was seen during this capture session.
4169# TRUE or FALSE (case-insensitive)
4170#rsh.info_show_command: FALSE
4171
4172# Use ipaccess nanoBTS specific definitions for RSL
4173# TRUE or FALSE (case-insensitive)
4174#gsm_abis_rsl.use_ipaccess_rsl: FALSE
4175
4176# Specifies whether Wireshark should decode and display sub-messages within BUNDLE messages
4177# TRUE or FALSE (case-insensitive)
4178#rsvp.process_bundle: TRUE
4179
4180# Specifies how Wireshark should dissect generalized labels
4181# One of: data (no interpretation), SONET/SDH ("S, U, K, L, M" scheme), Wavelength Label (G.694 frequency grid), ODUk Label
4182# (case-insensitive).
4183#rsvp.generalized_label_options: data (no interpretation)
4184
4185# Set the TCP port for RSYNC messages
4186# A decimal number
4187#rsync.tcp_port: 873
4188
4189# Whether the RSYNC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4190# TRUE or FALSE (case-insensitive)
4191#rsync.desegment: TRUE
4192
4193# RTCDC SCTP PPID if other than the default
4194# A decimal number
4195#rtcdc.sctp.ppi: 50
4196
4197# Where available, show which protocol and frame caused this RTCP stream to be created
4198# TRUE or FALSE (case-insensitive)
4199#rtcp.show_setup_info: TRUE
4200
4201# Try to work out network delay by comparing time between packets as captured and delays as seen by endpoint
4202# TRUE or FALSE (case-insensitive)
4203#rtcp.show_roundtrip_calculation: FALSE
4204
4205# Minimum (absolute) calculated roundtrip delay time in milliseconds that should be reported
4206# A decimal number
4207#rtcp.roundtrip_min_threshhold: 10
4208
4209# Whether the RTMPT dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4210# TRUE or FALSE (case-insensitive)
4211#rtmpt.desegment: TRUE
4212
4213# The largest acceptable packet size for reassembly
4214# A decimal number
4215#rtmpt.max_packet_size: 32768
4216
4217# Where available, show which protocol and frame caused this RTP stream to be created
4218# TRUE or FALSE (case-insensitive)
4219#rtp.show_setup_info: TRUE
4220
4221# Whether subdissector can request RTP streams to be reassembled
4222# TRUE or FALSE (case-insensitive)
4223#rtp.desegment_rtp_streams: TRUE
4224
4225# If an RTP version 0 packet is encountered, it can be treated as an invalid or ZRTP packet, a CLASSIC-STUN packet, or a T.38 packet
4226# One of: Invalid or ZRTP packets, STUN packets, CLASSIC-STUN packets, T.38 packets, SPRT packets
4227# (case-insensitive).
4228#rtp.version0_type: Invalid or ZRTP packets
4229
4230# Payload Type for RFC2198 Redundant Audio Data
4231# A decimal number
4232#rtp.rfc2198_payload_type: 99
4233
4234# This is the value of the Payload Type field that specifies RTP Events
4235# A decimal number
4236#rtpevent.event_payload_type_value: 101
4237
4238# This is the value of the Payload Type field that specifies Cisco Named Signaling Events
4239# A decimal number
4240#rtpevent.cisco_nse_payload_type_value: 100
4241
4242# This is the value of the Payload Type field that specifies RTP-MIDI
4243# A decimal number
4244#rtpmidi.midi_payload_type_value: 0
4245
4246# RTPproxy TCP Port
4247# A decimal number
4248#rtpproxy.tcp.port: 22222
4249
4250# RTPproxy UDP Port
4251# A decimal number
4252#rtpproxy.udp.port: 22222
4253
4254# Specifies that RTP/RTCP/T.38/MSRP/etc streams are decoded based upon port numbers found in RTPproxy answers
4255# TRUE or FALSE (case-insensitive)
4256#rtpproxy.establish_conversation: TRUE
4257
4258# Maximum timeout value in waiting for reply from RTPProxy (in milliseconds).
4259# A decimal number
4260#rtpproxy.reply.timeout: 1000
4261
4262# Specifies the maximum number of samples dissected in a DATA_BATCH submessage. Increasing this value may affect performances if the trace has a lot of big batched samples.
4263# A decimal number
4264#rtps.max_batch_samples_dissected: 16
4265
4266# Shows the Topic Name and Type Name of the samples.
4267# TRUE or FALSE (case-insensitive)
4268#rtps.enable_topic_info: FALSE
4269
4270# RTSP TCP Ports range
4271# A string denoting an positive integer range (e.g., "1-20,30-40")
4272#rtsp.tcp.port_range: 554,8554,7236
4273
4274# Whether the RTSP dissector should reassemble headers of a request spanning multiple TCP segments.  To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4275# TRUE or FALSE (case-insensitive)
4276#rtsp.desegment_headers: TRUE
4277
4278# Whether the RTSP dissector should use the "Content-length:" value to desegment the body of a request spanning multiple TCP segments
4279# TRUE or FALSE (case-insensitive)
4280#rtsp.desegment_body: TRUE
4281
4282# Set the port for RUA messages (Default of 29169)
4283# A decimal number
4284#rua.port: 29169
4285
4286# Set the UDP port for Reliable UDP traffic
4287# A decimal number
4288#rudp.udp.port: 0
4289
4290# Set the SCTP port for S1AP messages
4291# A decimal number
4292#s1ap.sctp.port: 36412
4293
4294# Dissect TransparentContainers that are opaque to S1AP
4295# TRUE or FALSE (case-insensitive)
4296#s1ap.dissect_container: TRUE
4297
4298# Show length of text field
4299# TRUE or FALSE (case-insensitive)
4300#sametime.show_length: FALSE
4301
4302# reassemble packets
4303# TRUE or FALSE (case-insensitive)
4304#sametime.reassemble: TRUE
4305
4306# port number for sametime traffic
4307# A decimal number
4308#sametime.tcp_port: 1533
4309
4310# Whether the SASP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4311# TRUE or FALSE (case-insensitive)
4312#sasp.desegment_sasp_messages: TRUE
4313
4314# The source point code (usually MSC) (to determine whether message is uplink or downlink)
4315# A hexadecimal number
4316#sccp.source_pc: 0
4317
4318# Show parameter length in the protocol tree
4319# TRUE or FALSE (case-insensitive)
4320#sccp.show_length: FALSE
4321
4322# Whether SCCP messages should be reassembled
4323# TRUE or FALSE (case-insensitive)
4324#sccp.defragment_xudt: TRUE
4325
4326# Whether to keep information about messages and their associations
4327# TRUE or FALSE (case-insensitive)
4328#sccp.trace_sccp: FALSE
4329
4330# Show SLR, DLR, and CAUSE Parameters in the Information Column of the Summary
4331# TRUE or FALSE (case-insensitive)
4332#sccp.show_more_info: FALSE
4333
4334# Set the source and destination addresses to the GT digits (if present).  This may affect TCAP's ability to recognize which messages belong to which TCAP session.
4335# TRUE or FALSE (case-insensitive)
4336#sccp.set_addresses: FALSE
4337
4338# The protocol which should be used to dissect the payload if nothing else has claimed it
4339# A string
4340#sccp.default_payload: 
4341
4342# Set the port for SCoP
4343# 
4344# A decimal number
4345#scop.port: 17755
4346
4347# Set the port for secured SCoP
4348# 
4349# A decimal number
4350#scop.port_secure: 17756
4351
4352# When Target Cannot Be Identified, Decode SCSI Messages As
4353# One of: Block Device, Sequential Device, Object Based Storage Device, Medium Changer Device, Multimedia Device
4354# (case-insensitive).
4355#scsi.decode_scsi_messages_as: Block Device
4356
4357# Whether fragmented SCSI DATA IN/OUT transfers should be reassembled
4358# TRUE or FALSE (case-insensitive)
4359#scsi.defragment: FALSE
4360
4361# Show source and destination port numbers in the protocol tree
4362# TRUE or FALSE (case-insensitive)
4363#sctp.show_port_numbers_in_tree: TRUE
4364
4365# The type of checksum used in SCTP packets
4366# One of: None, Adler 32, CRC 32c, Automatic
4367# (case-insensitive).
4368#sctp.checksum: None
4369
4370# Show always SCTP control chunks in the Info column
4371# TRUE or FALSE (case-insensitive)
4372#sctp.show_always_control_chunks: TRUE
4373
4374# Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port or PPI
4375# TRUE or FALSE (case-insensitive)
4376#sctp.try_heuristic_first: FALSE
4377
4378# Whether fragmented SCTP user messages should be reassembled
4379# TRUE or FALSE (case-insensitive)
4380#sctp.reassembly: TRUE
4381
4382# Match TSNs and their SACKs
4383# TRUE or FALSE (case-insensitive)
4384#sctp.tsn_analysis: TRUE
4385
4386# Dissect upper layer protocols
4387# TRUE or FALSE (case-insensitive)
4388#sctp.ulp_dissection: TRUE
4389
4390# Data rate
4391# One of: Attempt to guess, OC-3, OC-12, OC-24, OC-48
4392# (case-insensitive).
4393#sdh.data.rate: OC-3
4394
4395# Specifies that RTP/RTCP/T.38/MSRP/etc streams are decoded based upon port numbers found in SDP payload
4396# TRUE or FALSE (case-insensitive)
4397#sdp.establish_conversation: TRUE
4398
4399# Whether the SEL Protocol dissector should desegment all messages spanning multiple TCP segments
4400# TRUE or FALSE (case-insensitive)
4401#selfm.desegment: TRUE
4402
4403# Whether the SEL Protocol dissector should automatically pre-process Telnet data to remove duplicate 0xFF IAC bytes
4404# TRUE or FALSE (case-insensitive)
4405#selfm.telnetclean: TRUE
4406
4407# Set the TCP port for SEL FM Protocol packets (if other than the default of 0)
4408# A decimal number
4409#selfm.tcp.port: 0
4410
4411# Perform CRC16 validation on Fast Messages
4412# TRUE or FALSE (case-insensitive)
4413#selfm.crc_verification: FALSE
4414
4415# List of word bits contained in SER equations (Comma-separated, no Quotes or Checksums)
4416# A string
4417#selfm.ser_list: 
4418
4419# Whether the session dissector should reassemble messages spanning multiple SES segments
4420# TRUE or FALSE (case-insensitive)
4421#ses.desegment: TRUE
4422
4423# Set the port(s) for sFlow messages (default: 6343)
4424# A string denoting an positive integer range (e.g., "1-20,30-40")
4425#sflow.ports: 6343
4426
4427# Enabling dissection makes it easy to view protocol details in each of the sampled headers.  Disabling dissection may reduce noise caused when display filters match the contents of any sampled header(s).
4428# TRUE or FALSE (case-insensitive)
4429#sflow.enable_dissection: TRUE
4430
4431# This option only makes sense if dissection of sampled headers is enabled and probably not even then.
4432# TRUE or FALSE (case-insensitive)
4433#sflow.enable_analysis: FALSE
4434
4435# Port numbers used for SGsAP traffic (default 29118)
4436# A string denoting an positive integer range (e.g., "1-20,30-40")
4437#sgsap.sctp_ports: 29118
4438
4439# Set UDP port 1 for SigComp messages
4440# A decimal number
4441#sigcomp.udp.port: 5555
4442
4443# Set UDP port 2 for SigComp messages
4444# A decimal number
4445#sigcomp.udp.port2: 6666
4446
4447# Set TCP port 1 for SigComp messages
4448# A decimal number
4449#sigcomp.tcp.port: 5555
4450
4451# Set TCP port 2 for SigComp messages
4452# A decimal number
4453#sigcomp.tcp.port2: 6666
4454
4455# Preference whether to Dissect the UDVM code or not
4456# TRUE or FALSE (case-insensitive)
4457#sigcomp.display.udvm.code: TRUE
4458
4459# preference whether to display the bytecode in UDVM operands or not
4460# TRUE or FALSE (case-insensitive)
4461#sigcomp.display.bytecode: FALSE
4462
4463# preference whether to decompress message or not
4464# TRUE or FALSE (case-insensitive)
4465#sigcomp.decomp.msg: TRUE
4466
4467# preference whether to display the decompressed message as raw text or not
4468# TRUE or FALSE (case-insensitive)
4469#sigcomp.display.decomp.msg.as.txt: FALSE
4470
4471# 'No-Printout' = UDVM executes silently, then increasing detail about execution of UDVM instructions; Warning! CPU intense at high detail
4472# One of: No-Printout, Low-detail, Medium-detail, High-detail
4473# (case-insensitive).
4474#sigcomp.show.udvm.execution: No-Printout
4475
4476# Set the TCP port for Simulcrypt messages ('0' means no port is assigned)
4477# A decimal number
4478#simulcrypt.tcp.port: 0
4479
4480# Set the UDP port for Simulcrypt messages ('0' means no port is assigned)
4481# A decimal number
4482#simulcrypt.udp.port: 0
4483
4484# Set the CA_system_ID used to decode ECM datagram as MIKEY
4485# A hexadecimal number
4486#simulcrypt.ca_system_id_mikey: 0x9999
4487
4488# TCP ports to be decoded as SIP (default: 5060)
4489# A string denoting an positive integer range (e.g., "1-20,30-40")
4490#sip.tcp.ports: 5060
4491
4492# SIP Server TLS Port
4493# A decimal number
4494#sip.tls.port: 5061
4495
4496# Specifies that the raw text of the SIP message should be displayed in addition to the dissection tree
4497# TRUE or FALSE (case-insensitive)
4498#sip.display_raw_text: FALSE
4499
4500# If the raw text of the SIP message is displayed, the trailing carriage return and line feed are not shown
4501# TRUE or FALSE (case-insensitive)
4502#sip.display_raw_text_without_crlf: FALSE
4503
4504# If enabled, only SIP/2.0 traffic will be dissected as SIP. Disable it to allow SIP traffic with a different version to be dissected as SIP.
4505# TRUE or FALSE (case-insensitive)
4506#sip.strict_sip_version: TRUE
4507
4508# Whether the SIP dissector should reassemble headers of a request spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4509# TRUE or FALSE (case-insensitive)
4510#sip.desegment_headers: TRUE
4511
4512# Whether the SIP dissector should use the "Content-length:" value, if present, to reassemble the body of a request spanning multiple TCP segments, and reassemble chunked data spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4513# TRUE or FALSE (case-insensitive)
4514#sip.desegment_body: TRUE
4515
4516# Whether retransmissions are detected coming from the same source port only.
4517# TRUE or FALSE (case-insensitive)
4518#sip.retrans_the_same_sport: TRUE
4519
4520# Whether SIP should delay tracking the media (e.g., RTP/RTCP) until an SDP offer is answered. If enabled, mid-dialog changes to SDP and media state only take effect if and when an SDP offer is successfully answered; however enabling this prevents tracking media in early-media call scenarios
4521# TRUE or FALSE (case-insensitive)
4522#sip.delay_sdp_changes: FALSE
4523
4524# Whether the SCCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4525# TRUE or FALSE (case-insensitive)
4526#skinny.desegment: TRUE
4527
4528# Whether the dissector should reassemble the payload of SMB Transaction commands spanning multiple SMB PDUs
4529# TRUE or FALSE (case-insensitive)
4530#smb.trans_reassembly: TRUE
4531
4532# Whether the dissector should reassemble DCERPC over SMB commands
4533# TRUE or FALSE (case-insensitive)
4534#smb.dcerpc_reassembly: TRUE
4535
4536# Whether the dissector should snoop SMB and related CIFS protocols to discover and display Names associated with SIDs
4537# TRUE or FALSE (case-insensitive)
4538#smb.sid_name_snooping: FALSE
4539
4540# Whether the dissector should display SIDs and RIDs in hexadecimal rather than decimal
4541# TRUE or FALSE (case-insensitive)
4542#smb.sid_display_hex: FALSE
4543
4544# Whether the export object functionality will take the full path file name as file identifier
4545# TRUE or FALSE (case-insensitive)
4546#smb.eosmb_take_name_as_fid: FALSE
4547
4548# Whether the export object functionality will take the full path file name as file identifier
4549# TRUE or FALSE (case-insensitive)
4550#smb2.eosmb2_take_name_as_fid: FALSE
4551
4552# Whether the dissector should reassemble Named Pipes over SMB2 commands
4553# TRUE or FALSE (case-insensitive)
4554#smb2.pipe_reassembly: TRUE
4555
4556# Whether the SMB Direct dissector should reassemble fragmented payloads
4557# TRUE or FALSE (case-insensitive)
4558#smb_direct.reassemble_smb_direct: TRUE
4559
4560# Enable reassembling (default is enabled)
4561# TRUE or FALSE (case-insensitive)
4562#sml.reassemble: TRUE
4563
4564# Enable crc (default is disabled)
4565# TRUE or FALSE (case-insensitive)
4566#sml.crc: FALSE
4567
4568# Set the TCP port for SML (Default is 0), recommended port is 7259
4569# A decimal number
4570#sml.tcp.port: 0
4571
4572# Set the UDP port for SML (Default is 0), recommended port is 7259
4573# A decimal number
4574#sml.udp.port: 0
4575
4576# Whether the SMPP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4577# TRUE or FALSE (case-insensitive)
4578#smpp.reassemble_smpp_over_tcp: TRUE
4579
4580# Whether the SMTP dissector should reassemble command and response lines spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4581# TRUE or FALSE (case-insensitive)
4582#smtp.desegment_lines: TRUE
4583
4584# Whether the SMTP dissector should reassemble DATA command and lines spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4585# TRUE or FALSE (case-insensitive)
4586#smtp.desegment_data: TRUE
4587
4588# Whether the SMTP dissector should decode base-64-encoded AUTH parameters
4589# TRUE or FALSE (case-insensitive)
4590#smtp.decryption: FALSE
4591
4592# Whether fragmented BIUs should be reassembled
4593# TRUE or FALSE (case-insensitive)
4594#sna.defragment: TRUE
4595
4596# Whether the SNMP OID should be shown in the info column
4597# TRUE or FALSE (case-insensitive)
4598#snmp.display_oid: TRUE
4599
4600# Whether the SNMP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4601# TRUE or FALSE (case-insensitive)
4602#snmp.desegment: TRUE
4603
4604# ON - display dissected variables inside SNMP tree, OFF - display dissected variables in root tree after SNMP
4605# TRUE or FALSE (case-insensitive)
4606#snmp.var_in_tree: TRUE
4607
4608# Whether the SoulSeek dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4609# TRUE or FALSE (case-insensitive)
4610#slsk.desegment: TRUE
4611
4612# Whether the SoulSeek dissector should decompress all zlib compressed packets inside messages
4613# TRUE or FALSE (case-insensitive)
4614#slsk.decompress: TRUE
4615
4616# Whether the SoupBinTCP dissector should reassemble messages spanning multiple TCP segments.
4617# TRUE or FALSE (case-insensitive)
4618#soupbintcp.desegment: TRUE
4619
4620# TCP Ports range
4621# A string denoting an positive integer range (e.g., "1-20,30-40")
4622#soupbintcp.tcp.port: 
4623
4624# Whether the SPDY dissector should reassemble multiple data frames into an entity body.
4625# TRUE or FALSE (case-insensitive)
4626#spdy.assemble_data_frames: TRUE
4627
4628# Whether to uncompress SPDY headers.
4629# TRUE or FALSE (case-insensitive)
4630#spdy.decompress_headers: TRUE
4631
4632# Whether to uncompress entity bodies that are compressed using "Content-Encoding: "
4633# TRUE or FALSE (case-insensitive)
4634#spdy.decompress_body: TRUE
4635
4636# Where available, show which protocol and frame caused this SPRT stream to be created
4637# TRUE or FALSE (case-insensitive)
4638#sprt.show_setup_info: TRUE
4639
4640# Show the DLCI field in I_OCTET messages as well as the frame that enabled/disabled the DLCI
4641# TRUE or FALSE (case-insensitive)
4642#sprt.show_dlci_info: TRUE
4643
4644# Whether the SRVLOC dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4645# TRUE or FALSE (case-insensitive)
4646#srvloc.desegment_tcp: TRUE
4647
4648# Set the UDP port for SSCOP messages encapsulated in UDP (0 to disable)
4649# A string denoting an positive integer range (e.g., "1-20,30-40")
4650#sscop.udp.ports: 
4651
4652# SSCOP payload (dissector to call on SSCOP payload)
4653# One of: Data (no further dissection), Q.2931, SSCF-NNI (MTP3-b), ALCAP, NBAP
4654# (case-insensitive).
4655#sscop.payload: Q.2931
4656
4657# Whether the SSH dissector should reassemble SSH buffers spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4658# TRUE or FALSE (case-insensitive)
4659#ssh.desegment_buffers: TRUE
4660
4661# Redirect SSL debug to the file specified. Leave empty to disable debugging or use "-" to redirect output to stderr.
4662# A path to a file
4663#ssl.debug_file: 
4664
4665# Whether the SSL dissector should reassemble SSL records spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4666# TRUE or FALSE (case-insensitive)
4667#ssl.desegment_ssl_records: TRUE
4668
4669# Whether the SSL dissector should reassemble SSL Application Data spanning multiple SSL records. 
4670# TRUE or FALSE (case-insensitive)
4671#ssl.desegment_ssl_application_data: TRUE
4672
4673# For troubleshooting ignore the mac check result and decrypt also if the Message Authentication Code (MAC) fails.
4674# TRUE or FALSE (case-insensitive)
4675#ssl.ignore_ssl_mac_failed: FALSE
4676
4677# Pre-Shared-Key as HEX string. Should be 0 to 16 bytes.
4678# A string
4679#ssl.psk: 
4680
4681# The name of a file which contains a list of 
4682# (pre-)master secrets in one of the following formats:
4683# 
4684# RSA <EPMS> <PMS>
4685# RSA Session-ID:<SSLID> Master-Key:<MS>
4686# CLIENT_RANDOM <CRAND> <MS>
4687# PMS_CLIENT_RANDOM <CRAND> <PMS>
4688# 
4689# Where:
4690# <EPMS> = First 8 bytes of the Encrypted PMS
4691# <PMS> = The Pre-Master-Secret (PMS) used to derive the MS
4692# <SSLID> = The SSL Session ID
4693# <MS> = The Master-Secret (MS)
4694# <CRAND> = The Client's random number from the ClientHello message
4695# 
4696# (All fields are in hex notation)
4697# A path to a file
4698#ssl.keylog_file: 
4699
4700# Whether the STANAG 5066 DTS Layer dissector should reassemble DPDUs spanning multiple TCP segments
4701# TRUE or FALSE (case-insensitive)
4702#s5066dts.proto_desegment: TRUE
4703
4704# Set the port for STANAG 5066 DTS Layer. (If other than the default 5067.)
4705# A decimal number
4706#s5066dts.tcp.port: 0
4707
4708# Whether the S5066 SIS dissector should reassemble PDUs spanning multiple TCP segments. The default is to use reassembly.
4709# TRUE or FALSE (case-insensitive)
4710#s5066sis.desegment_pdus: TRUE
4711
4712# Whether the S5066 SIS dissector should dissect this edition of the STANAG. This edition was never formally approved and is very rare. The common edition is edition 1.2.
4713# TRUE or FALSE (case-insensitive)
4714#s5066sis.edition_one: FALSE
4715
4716# Set the port for STANAG 5066 SIS. (If other than the default 5066. This number is registered with IANA.)
4717# A decimal number
4718#s5066sis.tcp.port: 5066
4719
4720# Whether the StarTeam dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4721# TRUE or FALSE (case-insensitive)
4722#starteam.desegment: TRUE
4723
4724# Whether the BPDU dissector should use 802.1t System ID Extensions when dissecting the Bridge Identifier
4725# TRUE or FALSE (case-insensitive)
4726#stp.use_system_id_extension: TRUE
4727
4728# Reassembles greater than MTU sized STT packets broken into segments on transmit
4729# TRUE or FALSE (case-insensitive)
4730#stt.reassemble: TRUE
4731
4732# Whether to validate the STT checksum or not.
4733# TRUE or FALSE (case-insensitive)
4734#stt.check_checksum: FALSE
4735
4736# Version used by Wireshark
4737# One of: Internet Draft version 08, RFC 3868
4738# (case-insensitive).
4739#sua.version: RFC 3868
4740
4741# Set the source and destination addresses to the PC or GT digits, depending on the routing indicator.  This may affect TCAP's ability to recognize which messages belong to which TCAP session.
4742# TRUE or FALSE (case-insensitive)
4743#sua.set_addresses: FALSE
4744
4745# No description
4746# TRUE or FALSE (case-insensitive)
4747#sv.decode_data_as_phsmeas: FALSE
4748
4749# Set the port number for synchrophasor frames over UDP(if other than the default of 4713)
4750# A decimal number
4751#synphasor.udp_port: 4713
4752
4753# Set the port number for synchrophasor frames over TCP(if other than the default of 4712)
4754# A decimal number
4755#synphasor.tcp_port: 4712
4756
4757# Whether the T.38 dissector should decode using the Pre-Corrigendum T.38 ASN.1 specification (1998).
4758# TRUE or FALSE (case-insensitive)
4759#t38.use_pre_corrigendum_asn1_specification: TRUE
4760
4761# Whether a UDP packet that looks like RTP version 2 packet will be dissected as RTP packet or T.38 packet. If enabled there is a risk that T.38 UDPTL packets with sequence number higher than 32767 may be dissected as RTP.
4762# TRUE or FALSE (case-insensitive)
4763#t38.dissect_possible_rtpv2_packets_as_rtp: FALSE
4764
4765# Whether the dissector should reassemble T.38 PDUs spanning multiple TCP segments when TPKT is used over TCP. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4766# TRUE or FALSE (case-insensitive)
4767#t38.reassembly: TRUE
4768
4769# Whether T.38 is used with TPKT for TCP
4770# One of: Never, Always, Maybe
4771# (case-insensitive).
4772#t38.tpkt_usage: Maybe
4773
4774# Where available, show which protocol and frame caused this T.38 stream to be created
4775# TRUE or FALSE (case-insensitive)
4776#t38.show_setup_info: TRUE
4777
4778# Whether the TACACS+ dissector should reassemble messages spanning multiple TCP segments.  To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4779# TRUE or FALSE (case-insensitive)
4780#tacplus.desegment: TRUE
4781
4782# TACACS+ Encryption Key
4783# A string
4784#tacplus.key: 
4785
4786# Whether the TALI dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4787# TRUE or FALSE (case-insensitive)
4788#tali.reassemble: TRUE
4789
4790# SCCP (and SUA) SSNs to decode as TCAP
4791# A string denoting an positive integer range (e.g., "1-20,30-40")
4792#tcap.ssn: 
4793
4794# Activate the analyse for Response Time
4795# TRUE or FALSE (case-insensitive)
4796#tcap.srt: FALSE
4797
4798# Statistics for Response Time
4799# TRUE or FALSE (case-insensitive)
4800#tcap.persistentsrt: FALSE
4801
4802# Maximal delay for message repetion
4803# A decimal number
4804#tcap.repetitiontimeout: 10
4805
4806# Maximal delay for message lost
4807# A decimal number
4808#tcap.losttimeout: 30
4809
4810# Whether the TCP summary line should be shown in the protocol tree
4811# TRUE or FALSE (case-insensitive)
4812#tcp.summary_in_tree: TRUE
4813
4814# Whether to validate the TCP checksum or not.  (Invalid checksums will cause reassembly, if enabled, to fail.)
4815# TRUE or FALSE (case-insensitive)
4816#tcp.check_checksum: FALSE
4817
4818# Whether subdissector can request TCP streams to be reassembled
4819# TRUE or FALSE (case-insensitive)
4820#tcp.desegment_tcp_streams: TRUE
4821
4822# Make the TCP dissector analyze TCP sequence numbers to find and flag segment retransmissions, missing segments and RTT
4823# TRUE or FALSE (case-insensitive)
4824#tcp.analyze_sequence_numbers: TRUE
4825
4826# Make the TCP dissector use relative sequence numbers instead of absolute ones. To use this option you must also enable "Analyze TCP sequence numbers". 
4827# TRUE or FALSE (case-insensitive)
4828#tcp.relative_sequence_numbers: TRUE
4829
4830# Make the TCP dissector use this scaling factor for streams where the signalled scaling factor is not visible in the capture
4831# One of: Not known, 0 (no scaling), 1 (multiply by 2), 2 (multiply by 4), 3 (multiply by 8), 4 (multiply by 16), 5 (multiply by 32), 6 (multiply by 64), 7 (multiply by 128), 8 (multiply by 256), 9 (multiply by 512), 10 (multiply by 1024), 11 (multiply by 2048), 12 (multiply by 4096), 13 (multiply by 8192), 14 (multiply by 16384)
4832# (case-insensitive).
4833#tcp.default_window_scaling: Not known
4834
4835# Make the TCP dissector track the number on un-ACKed bytes of data are in flight per packet. To use this option you must also enable "Analyze TCP sequence numbers". This takes a lot of memory but allows you to track how much data are in flight at a time and graphing it in io-graphs
4836# TRUE or FALSE (case-insensitive)
4837#tcp.track_bytes_in_flight: TRUE
4838
4839# Calculate timestamps relative to the first frame and the previous frame in the tcp conversation
4840# TRUE or FALSE (case-insensitive)
4841#tcp.calculate_timestamps: FALSE
4842
4843# Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
4844# TRUE or FALSE (case-insensitive)
4845#tcp.try_heuristic_first: FALSE
4846
4847# Do not place the TCP Timestamps in the summary line
4848# TRUE or FALSE (case-insensitive)
4849#tcp.ignore_tcp_timestamps: FALSE
4850
4851# Do not call any subdissectors for Retransmitted or OutOfOrder segments
4852# TRUE or FALSE (case-insensitive)
4853#tcp.no_subdissector_on_error: TRUE
4854
4855# Assume TCP Experimental Options (253, 254) have a Magic Number and use it for dissection
4856# TRUE or FALSE (case-insensitive)
4857#tcp.dissect_experimental_options_with_magic: TRUE
4858
4859# Collect and store process information retrieved from IPFIX dissector
4860# TRUE or FALSE (case-insensitive)
4861#tcp.display_process_info_from_ipfix: FALSE
4862
4863# Set the port for IPSEC/ISAKMP messages (typically 10000)
4864# A decimal number
4865#tcpencap.tcp.port: 0
4866
4867# Whether the TCPROS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4868# TRUE or FALSE (case-insensitive)
4869#tcpros.desegment_tcpros_messages: TRUE
4870
4871# The TDMoE channel that contains the D-Channel.
4872# A decimal number
4873#tdmoe.d_channel: 24
4874
4875# The TDMoD channel that contains the D-Channel.
4876# A decimal number
4877#tdmop.d_channel: 16
4878
4879# The bitmask of channels in uncompressed TDMoP frame
4880# A hexadecimal number
4881#tdmop.ts_mask: 0xffffffff
4882
4883# The ethertype assigned to TDMoP (without IP/UDP) stream
4884# A hexadecimal number
4885#tdmop.ethertype: 0
4886
4887# The udp port assigned to TDMoP stream
4888# A decimal number
4889#tdmop.udpport: 0
4890
4891# Whether the TDS dissector should reassemble TDS buffers spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4892# TRUE or FALSE (case-insensitive)
4893#tds.desegment_buffers: TRUE
4894
4895# Whether the TDS dissector should defragment messages spanning multiple Netlib buffers
4896# TRUE or FALSE (case-insensitive)
4897#tds.defragment: TRUE
4898
4899# Hint as to version of TDS protocol being decoded
4900# One of: Not Specified, TDS 4, TDS 5, TDS 7.0, TDS 7.1, TDS 7.2, TDS 7.3, TDS 7.3A, TDS 7.3B, TDS 7.4
4901# (case-insensitive).
4902#tds.protocol_type: Not Specified
4903
4904# Hint as to whether to decode TDS protocol as little-endian or big-endian. (TDS7/8 always decoded as little-endian)
4905# One of: Little Endian, Big Endian
4906# (case-insensitive).
4907#tds.endian_type: Little Endian
4908
4909# Additional TCP ports to decode as TDS
4910# A string denoting an positive integer range (e.g., "1-20,30-40")
4911#tds.tcp_ports: 
4912
4913# Whether the captured data include carrier number
4914# TRUE or FALSE (case-insensitive)
4915#tetra.include_carrier_number: TRUE
4916
4917# Port numbers used for TFTP traffic (default 69)
4918# A string denoting an positive integer range (e.g., "1-20,30-40")
4919#tftp.udp_ports: 69
4920
4921# Time display type
4922# One of: UTC, Local
4923# (case-insensitive).
4924#time.display_time_type: Local
4925
4926# UDP ports to be decoded as TIPC (default: 0)IANA have assigned port 6118 port for TIPC UDP transport.
4927# A string denoting an positive integer range (e.g., "1-20,30-40")
4928#tipc.udp.ports: 0
4929
4930# Whether TIPCv1 SEGMENTATION_MANAGER datagrams should be reassembled
4931# TRUE or FALSE (case-insensitive)
4932#tipc.defragment: TRUE
4933
4934# Whether to try to dissect TIPC data or not
4935# TRUE or FALSE (case-insensitive)
4936#tipc.dissect_tipc_data: TRUE
4937
4938# Try to decode a TIPCv2 packet using an heuristic sub-dissector before using a registered sub-dissector
4939# TRUE or FALSE (case-insensitive)
4940#tipc.try_heuristic_first: FALSE
4941
4942# TIPC 1.7 removes/adds fields (not) available in TIPC 1.5/1.6 while keeping the version number 2 in the packages. "ALL" shows all fields that were ever used in both versions.
4943# One of: ALL, TIPC 1.5/1.6, TIPC 1.7
4944# (case-insensitive).
4945#tipc.handle_v2_as: ALL
4946
4947# Decode this TCP ports traffic as TIPC. Set to "0" to disable.
4948# A decimal number
4949#tipc.alternate_port: 0
4950
4951# Whether the TIPC-over-TCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4952# TRUE or FALSE (case-insensitive)
4953#tipc.desegment: TRUE
4954
4955# Whether the TNS dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4956# TRUE or FALSE (case-insensitive)
4957#tns.desegment_tns_messages: TRUE
4958
4959# Whether Linux mangling of the link-layer header should be checked for and worked around
4960# TRUE or FALSE (case-insensitive)
4961#tr.fix_linux_botches: FALSE
4962
4963# Whether the TPKT dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
4964# TRUE or FALSE (case-insensitive)
4965#tpkt.desegment: TRUE
4966
4967# Whether to load the Database or not; not loading the DB disables the protocol; Wireshark has to be restarted for the setting to take effect.
4968# TRUE or FALSE (case-insensitive)
4969#tpncp.load_db: FALSE
4970
4971# No description
4972# A decimal number
4973#tpncp.tcp.trunkpack_port: 2424
4974
4975# No description
4976# A decimal number
4977#tpncp.udp.trunkpack_port: 2424
4978
4979# Critical Traffic Mask (base hex)
4980# A hexadecimal number
4981#tte.ct_mask_value: 0
4982
4983# Critical Traffic Marker (base hex)
4984# A hexadecimal number
4985#tte.ct_marker_value: 0xffffffff
4986
4987# Setup RTP/RTCP conversations when parsing Start RTP messages
4988# TRUE or FALSE (case-insensitive)
4989#ua.setup_conversations: TRUE
4990
4991# UA SIP Protocol enabled
4992# TRUE or FALSE (case-insensitive)
4993#uasip.aplication_octet_stream: FALSE
4994
4995# NOE SIP Protocol
4996# TRUE or FALSE (case-insensitive)
4997#uasip.noesip: FALSE
4998
4999# IPv4 address of the proxy (Invalid values will be ignored)
5000# A string
5001#uasip.proxy_ipaddr: 
5002
5003# Terminal UDP port (setting 1)
5004# A decimal number
5005#uaudp.port1: 32000
5006
5007# Terminal UDP port (setting 2)
5008# A decimal number
5009#uaudp.port2: 32512
5010
5011# Terminal UDP port (setting 3)
5012# A decimal number
5013#uaudp.port3: 0
5014
5015# Terminal UDP port (setting 4)
5016# A decimal number
5017#uaudp.port4: 0
5018
5019# IPv4 address of the DHS3 system. (Used only in case of identical source and destination ports)
5020# A string
5021#uaudp.system_ip: 
5022
5023# Whether the UCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5024# TRUE or FALSE (case-insensitive)
5025#ucp.desegment_ucp_messages: TRUE
5026
5027# Whether the UDP summary line should be shown in the protocol tree
5028# TRUE or FALSE (case-insensitive)
5029#udp.summary_in_tree: TRUE
5030
5031# Try to decode a packet using an heuristic sub-dissector before using a sub-dissector registered to a specific port
5032# TRUE or FALSE (case-insensitive)
5033#udp.try_heuristic_first: FALSE
5034
5035# Whether to validate the UDP checksum
5036# TRUE or FALSE (case-insensitive)
5037#udp.check_checksum: FALSE
5038
5039# Collect process flow information from IPFIX
5040# TRUE or FALSE (case-insensitive)
5041#udp.process_info: FALSE
5042
5043# Ignore an invalid checksum coverage field and continue dissection
5044# TRUE or FALSE (case-insensitive)
5045#udplite.ignore_checksum_coverage: TRUE
5046
5047# Whether to validate the UDP-Lite checksum
5048# TRUE or FALSE (case-insensitive)
5049#udplite.check_checksum: FALSE
5050
5051# The UDP port used by this dissector
5052# A decimal number
5053#uhd.dissector_port: 0
5054
5055# Whether the ULP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5056# TRUE or FALSE (case-insensitive)
5057#ulp.desegment_ulp_messages: TRUE
5058
5059# Set the TCP port for ULP messages (IANA registered port is 7275)
5060# A decimal number
5061#ulp.tcp.port: 7275
5062
5063# Set the UDP port for ULP messages (IANA registered port is 7275)
5064# A decimal number
5065#ulp.udp.port: 7275
5066
5067# Whether the UMA dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5068# TRUE or FALSE (case-insensitive)
5069#uma.desegment_ucp_messages: TRUE
5070
5071# TCP ports to be decoded as UMA (default: 14001)
5072# A string denoting an positive integer range (e.g., "1-20,30-40")
5073#uma.tcp.ports: 14001
5074
5075# UNISTIM port (default 5000)
5076# A decimal number
5077#unistim.udp.port: 0
5078
5079# Try to decode a packet using a heuristic sub-dissector before attempting to dissect the packet using the "usb.bulk", "usb.interrupt" or "usb.control" dissector tables.
5080# TRUE or FALSE (case-insensitive)
5081#usb.try_heuristics: TRUE
5082
5083# How commands from the PC to the reader are interpreted
5084# One of: Data, Generic ISO 7816, GSM SIM, NXP PN532, ACR122 PN532
5085# (case-insensitive).
5086#usbccid.prtype: Data
5087
5088# The UDP port used by this dissector
5089# A decimal number
5090#vrt.dissector_port: 4991
5091
5092# Whether the vlan summary line should be shown in the protocol tree
5093# TRUE or FALSE (case-insensitive)
5094#vlan.summary_in_tree: TRUE
5095
5096# The (hexadecimal) Ethertype used to indicate 802.1QinQ VLAN in VLAN tunneling.
5097# A hexadecimal number
5098#vlan.qinq_ethertype: 0x9100
5099
5100# Whether the VNC dissector should reassemble messages spanning multiple TCP segments.  To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5101# TRUE or FALSE (case-insensitive)
5102#vnc.desegment: TRUE
5103
5104# Decode this port's traffic as VNC in addition to the default ports (5500, 5501, 5900, 5901)
5105# A decimal number
5106#vnc.alternate_port: 0
5107
5108# Dynamic payload types which will be interpreted as vp8; Values must be in the range 96 - 127
5109# A string denoting an positive integer range (e.g., "1-20,30-40")
5110#vp8.dynamic.payload.type: 
5111
5112# There is some ambiguity on how to calculate V3 checksumsAs in V3 will use a pseudo header(which may only be implemented for IPv6 by some manufacturers)
5113# TRUE or FALSE (case-insensitive)
5114#vrrp.v3_checksum_as_in_v2: FALSE
5115
5116# Set the UDP port for Vuze DHT Protocol.
5117# A decimal number
5118#vuze-dht.udp_port: 11273
5119
5120# Enable this preference if you want to view the WBXML tokens without the representation in a media type (e.g., WML). Tokens will show up as Tag_0x12, attrStart_0x08 or attrValue_0x0B for example.
5121# TRUE or FALSE (case-insensitive)
5122#wbxml.skip_wbxml_token_mapping: FALSE
5123
5124# Enable this preference if you want to skip the parsing of the WBXML tokens that constitute the body of the WBXML document. Only the WBXML header will be dissected (and visualized) then.
5125# TRUE or FALSE (case-insensitive)
5126#wbxml.disable_wbxml_token_parsing: FALSE
5127
5128# Select dissector for websocket text
5129# One of: No subdissection, Line based text, As json, As SIP
5130# (case-insensitive).
5131#websocket.text_type: No subdissection
5132
5133# Set the maximum Basic CID used in the Wimax decoder (if other than the default of 320).  Note: The maximum Primary CID is double the maximum Basic CID.
5134# A decimal number
5135#wmx.basic_cid_max: 320
5136
5137# Set to TRUE to use the Corrigendum 2 version of Wimax message decoding. Set to FALSE to use the 802.16e-2005  version.
5138# TRUE or FALSE (case-insensitive)
5139#wmx.corrigendum_2_version: FALSE
5140
5141# Show transaction ID direction bit separately from the rest of the transaction ID field.
5142# TRUE or FALSE (case-insensitive)
5143#wimaxasncp.show_transaction_id_d_bit: FALSE
5144
5145# Print debug output to the console.
5146# TRUE or FALSE (case-insensitive)
5147#wimaxasncp.debug_enabled: FALSE
5148
5149# Set UDP port for WiMAX ASN Control Plane Protocol
5150# A decimal number
5151#wimaxasncp.udp.wimax_port: 2231
5152
5153# Version of the NWG that the R6 protocol complies with
5154# One of: R1.0 v1.0.0, R1.0 v1.2.0, R1.0 v1.2.1
5155# (case-insensitive).
5156#wimaxasncp.nwg_version: R1.0 v1.2.1
5157
5158# WiMAX MAX PHY UDP port
5159# A decimal number
5160#wimaxmacphy.udp.port: 0
5161
5162# Whether the WINS-Replication dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5163# TRUE or FALSE (case-insensitive)
5164#winsrepl.reassemble: TRUE
5165
5166# Whether the wow dissector should reassemble messages spanning multiple TCP segments.  To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5167# TRUE or FALSE (case-insensitive)
5168#wow.desegment: TRUE
5169
5170# If CALL REQUEST not seen or didn't specify protocol, dissect as QLLC/SNA
5171# TRUE or FALSE (case-insensitive)
5172#x25.payload_is_qllc_sna: FALSE
5173
5174# If CALL REQUEST has no data, assume the protocol handled is COTP
5175# TRUE or FALSE (case-insensitive)
5176#x25.call_request_nodata_is_cotp: FALSE
5177
5178# If CALL REQUEST not seen or didn't specify protocol, check user data before checking heuristic dissectors
5179# TRUE or FALSE (case-insensitive)
5180#x25.payload_check_data: FALSE
5181
5182# Reassemble fragmented X.25 packets
5183# TRUE or FALSE (case-insensitive)
5184#x25.reassemble: TRUE
5185
5186# Whether the X11 dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5187# TRUE or FALSE (case-insensitive)
5188#x11.desegment: TRUE
5189
5190# TCP ports to be decoded as X11 (default: 6000-6063)
5191# A string denoting an positive integer range (e.g., "1-20,30-40")
5192#x11.tcp.ports: 6000-6063
5193
5194# Set the SCTP port for X2AP messages
5195# A decimal number
5196#x2ap.sctp.port: 36422
5197
5198# Set the port for XMCP messages (if other than the default of 4788)
5199# A decimal number
5200#xmcp.tcp.port: 4788
5201
5202# TCP Ports range
5203# A string denoting an positive integer range (e.g., "1-20,30-40")
5204#xml.tcp.port: 
5205
5206# Try to recognize XML encoded in Unicode (UCS-2BE)
5207# TRUE or FALSE (case-insensitive)
5208#xml.heuristic_unicode: FALSE
5209
5210# Whether the XMPP dissector should reassemble messages. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings
5211# TRUE or FALSE (case-insensitive)
5212#xmpp.desegment: TRUE
5213
5214# Whether the X.25-over-TCP dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings
5215# TRUE or FALSE (case-insensitive)
5216#xot.desegment: TRUE
5217
5218# Whether the X.25-over-TCP dissector should reassemble all X.25 packets before calling the X25 dissector. If the TCP packets arrive out-of-order, the X.25 reassembly can otherwise fail. To use this option, you should also enable "Reassemble X.25-over-TCP messages spanning multiple TCP segments", "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings and "Reassemble fragmented X.25 packets" in the X.25 protocol settings.
5219# TRUE or FALSE (case-insensitive)
5220#xot.x25_desegment: FALSE
5221
5222# The TCP port on which YAMI messages will be read(3000)
5223# A decimal number
5224#yami.tcp.port: 0
5225
5226# The UDP port on which YAMI messages will be read(5000)
5227# A decimal number
5228#yami.udp.port: 0
5229
5230# Whether the YAMI dissector should reassemble messages spanning multiple TCP segments.To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5231# TRUE or FALSE (case-insensitive)
5232#yami.desegment: TRUE
5233
5234# Whether the YMSG dissector should reassemble messages spanning multiple TCP segments. To use this option, you must also enable "Allow subdissectors to reassemble TCP streams" in the TCP protocol settings.
5235# TRUE or FALSE (case-insensitive)
5236#ymsg.desegment: TRUE
5237
5238# Set the port for ZEP Protocol
5239# Default port is 17754
5240# A decimal number
5241#zep.udp.port: 17754
5242
5243# Specifies the security level to use in the
5244# decryption process. This value is ignored
5245# for ZigBee 2004 and unsecured networks.
5246# One of: No Security, No Encryption, 32-bit Integrity Protection, No Encryption, 64-bit Integrity Protection, No Encryption, 128-bit Integrity Protection, AES-128 Encryption, No Integrity Protection, AES-128 Encryption, 32-bit Integrity Protection, AES-128 Encryption, 64-bit Integrity Protection, AES-128 Encryption, 128-bit Integrity Protection
5247# (case-insensitive).
5248#zbee_nwk.seclevel: AES-128 Encryption, 32-bit Integrity Protection
5249
5250# Set the TCP port for ZVT messages (port 20007 according to the spec)
5251# A decimal number
5252#zvt.tcp.port: 0
5253
5254####### Statistics ########
5255
5256# Determines time between tap updates
5257# A decimal number
5258#statistics.update_interval: 3000
5259
5260# Determines maximum height of RTP Player window
5261# A decimal number
5262#statistics.rtp_player_max_visible: 4
5263
5264# If enabled burst rates will be calcuted for statistics that use the stats_tree system. Burst rates are calculated over a much shorter time interval than the rate column.
5265# TRUE or FALSE (case-insensitive)
5266#statistics.st_enable_burstinfo: TRUE
5267
5268# If selected the stats_tree statistics nodes will show the count of events within the burst window instead of a burst rate. Burst rate is calculated as number of events within burst window divided by the burst windown length.
5269# TRUE or FALSE (case-insensitive)
5270#statistics.st_burst_showcount: FALSE
5271
5272# Sets the duration of the time interval into which events are grouped when calculating the burst rate. Higher resolution (smaller number) increases processing overhead.
5273# A decimal number
5274#statistics.st_burst_resolution: 5
5275
5276# Sets the duration of the sliding window during which the burst rate is measured. Longer window relative to burst rate resolution increases processing overhead. Will be truncated to a multiple of burst resolution.
5277# A decimal number
5278#statistics.st_burst_windowlen: 100
5279
5280# Sets the default column by which stats based on the stats_tree system is sorted.
5281# One of: Node name (topic/item), Item count, Average value of the node, Minimum value of the node, Maximum value of the node, Burst rate of the node
5282# (case-insensitive).
5283#statistics.st_sort_defcolflag: Item count
5284
5285# When selected, statistics based on the stats_tree system will by default be sorted in descending order.
5286# TRUE or FALSE (case-insensitive)
5287#statistics.st_sort_defdescending: TRUE
5288
5289# When selected, the item/node names of statistics based on the stats_tree system will be sorted taking case into account. Else the case of the name will be ignored.
5290# TRUE or FALSE (case-insensitive)
5291#statistics.st_sort_casesensitve: TRUE
5292
5293# When selected, the stats_tree nodes representing a range of values (0-49, 50-100, etc.) will always be sorted by name (the range of the node). Else range nodes are sorted by the same column as the rest of  the tree.
5294# TRUE or FALSE (case-insensitive)
5295#statistics.st_sort_rng_nameonly: TRUE
5296
5297# When selected, the stats_tree nodes representing a range of values (0-49, 50-100, etc.) will always be sorted ascending; else it follows the sort direction of the tree. Only effective if "Always sort 'range' nodes by name" is also selected.
5298# TRUE or FALSE (case-insensitive)
5299#statistics.st_sort_rng_fixorder: TRUE
5300
5301# When selected, the full name (including menu path) of the stats_tree plug-in is show in windows. If cleared the plug-in name is shown without menu path (only the part of the name after last '/' character.)
5302# TRUE or FALSE (case-insensitive)
5303#statistics.st_sort_showfullname: FALSE