TShark 관한 자세한 설명이 없어 Field 찾는데 쉽지 않네요.
https://www.wireshark.org/docs/dfref/f/frame.html
| FIELD NAME | DESCRIPTION | TYPE | VERSIONS |
|---|---|---|---|
| comment | Comment | Character string | 1.8.0 to 1.8.15 |
| frame.cap_len | Frame length stored into the capture file | Unsigned integer, 4 bytes | 1.0.0 to 2.0.2 |
| frame.coloring_rule.name | Coloring Rule Name | Character string | 1.0.0 to 2.0.2 |
| frame.coloring_rule.string | Coloring Rule String | Character string | 1.0.0 to 2.0.2 |
| frame.comment | Comment | Character string | 1.10.0 to 2.0.2 |
| frame.comment.expert | Expert Info | Label | 1.12.0 to 2.0.2 |
| frame.dlt | WTAP_ENCAP | Signed integer, 2 bytes | 1.8.0 to 1.8.15 |
| frame.encap_type | Encapsulation type | Signed integer, 2 bytes | 1.10.0 to 2.0.2 |
| frame.file_off | File Offset | Signed integer, 8 bytes | 1.0.0 to 2.0.2 |
| frame.ignored | Frame is ignored | Boolean | 1.4.0 to 2.0.2 |
| frame.incomplete | Expert Info | Label | 2.0.0 to 2.0.2 |
| frame.interface_id | Interface id | Unsigned integer, 4 bytes | 1.8.0 to 2.0.2 |
| frame.len | Frame length on the wire | Unsigned integer, 4 bytes | 1.0.0 to 2.0.2 |
| frame.link_nr | Link Number | Unsigned integer, 2 bytes | 1.0.0 to 2.0.2 |
| frame.marked | Frame is marked | Boolean | 1.0.0 to 2.0.2 |
| frame.md5_hash | Frame MD5 Hash | Character string | 1.2.0 to 2.0.2 |
| frame.number | Frame Number | Unsigned integer, 4 bytes | 1.0.0 to 2.0.2 |
| frame.offset_shift | Time shift for this packet | Time offset | 1.8.0 to 2.0.2 |
| frame.p2p_dir | Point-to-Point Direction | Signed integer, 1 byte | 1.0.0 to 2.0.2 |
| frame.p_prot_data | Number of per-protocol-data | Unsigned integer, 4 bytes | 1.10.0 to 1.12.10 |
| frame.packet_flags | Packet flags | Unsigned integer, 4 bytes | 1.10.0 to 2.0.2 |
| frame.packet_flags_crc_error | CRC error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags_direction | Direction | Unsigned integer, 4 bytes | 1.10.0 to 2.0.2 |
| frame.packet_flags_fcs_length | FCS length | Unsigned integer, 4 bytes | 1.10.0 to 2.0.2 |
| frame.packet_flags_packet_too_error | Packet too long error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags_packet _too_short_error | Packet too short error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags_preamble_error | Preamble error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags_reception_type | Reception type | Unsigned integer, 4 bytes | 1.10.0 to 2.0.2 |
| frame.packet_flags_reserved | Reserved | Unsigned integer, 4 bytes | 1.10.0 to 2.0.2 |
| frame.packet_flags_start _frame_delimiter_error | Start frame delimiter error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags_symbol_error | Symbol error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags _unaligned_frame_error | Unaligned frame error | Boolean | 1.10.0 to 2.0.2 |
| frame.packet_flags_wrong _inter_frame_gap_error | Wrong interframe gap error | Boolean | 1.10.0 to 2.0.2 |
| frame.pkt_len | Frame length on the wire | Unsigned integer, 4 bytes | 1.0.0 to 1.0.16 |
| frame.protocols | Protocols in frame | Character string | 1.0.0 to 2.0.2 |
| frame.ref_time | This is a Time Reference frame | Label | 1.0.0 to 2.0.2 |
| frame.time | Arrival Time | Date and time | 1.0.0 to 2.0.2 |
| frame.time_delta | Time delta from previous captured frame | Time offset | 1.0.0 to 2.0.2 |
| frame.time_delta_displayed | Time delta from previous displayed frame | Time offset | 1.0.0 to 2.0.2 |
| frame.time_epoch | Epoch Time | Time offset | 1.4.0 to 2.0.2 |
| frame.time_invalid | Expert Info | Label | 1.0.0 to 2.0.2 |
| frame.time_relative | Time since reference or first frame | Time offset | 1.0.0 to 2.0.2 |
