Writing Security Tools and Exploits

ansi_map ANSI 41 Mobile Application Part (IS41 MAP)
bootp Just the DHCP (Dynamic Host Control Protocol) message type
dcerpc DCE RPC
eth Ethernet fields
fc Frame Control fields
fddi FDDI (Fiber Distributed Data Interface) fields
frame Sends no info; this is useful for counting packets.
gsm_a GSM A Interface
gsm_map GSM Mobile Application Part
h225 H225 information
h245 H245 information, when sent over TCP (Transmission Control Protocol)
h245dg H245 information, when sent over UDP (User Datagram Protocol)
http HTTP information
ip IP (Internet Protocol) fields
ipx IPX (Internetwork Packet Exchange) fields
isup ISDN (Integrated Services Digital Network) User Part information
ldap LDAP (Lightweight Directory Access Protocol) call response information
mtp3 Message Transfer Part Level 3 fields
q931 Q.931 call information
rpc Remote Procedure call information
rtp Lots of data about Real-Time Transport Protocol (RTP)
rtpevent Information about RTP events
sctp Lots of information about Stream Control Transmission Protocol (SCTP)
sdp The Session Description Protocol summary string for VoIP calls graph analysis
sip Information about Session Initiation Protocol
smb Information about SMB packets. The smb_info_t structure is defined in smb.h in the top-level Ethereal directory.
tcp The entire TCP header
teredo Teredo IPv6 over UDP tunneling information. The e_teredohdr struct is defined in packet-teredo.c, so your tap module needs its own private copy. Better yet, the source code should be fixed to move the struct definition to a header file.
tr Token-ring fields
udp The entire UDP header
wlan 802.11 wireless LAN fields
wsp Information about Wireless Session Protocol