This wiki has been migrated to and is now deprecated. Please use that site instead.

User Datagram Protocol (UDP)

The UDP layer provides datagram based connectionless transport layer (layer 4) functionality in the InternetProtocolFamily.

UDP is only a thin layer, and provides not much more than the described UDP port multiplexing.

Just like IP, UDP doesn't provide any mechanism to detect PacketLoss, DuplicatePackets, and the like.

There are a lot of protocols on top of UDP, including: BOOTP, DNS, NTP, SNMP, ...


Are you looking for Lightweight UDP? Then visit UDP-Lite.


XXX - add a brief description of UDP history

Protocol dependencies

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).


The UDP dissector is fully functional.

There are two statistical menu items for UDP available: Statistics/Endpoints which contains a tab showing all UDP endpoints (combination of IP address and UDP port) and Statistics/Conversations, which contains a tab showing all UDP conversations (combination of two endpoints).

Preference Settings

(XXX add links to preference settings affecting how UDP is dissected).

Example capture file

XXX - Add a simple example capture file. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

Display Filter

A complete list of UDP display filter fields can be found in the display filter reference

Capture Filter


User_Datagram_Protocol (last edited 2011-07-24 15:08:04 by LorenKellogg)