Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| dtls.alert_message | Label | Alert Message | 1.0.0 to 1.6.5 |
| dtls.alert_message.desc | Unsigned integer, 1 byte | Description | 1.0.0 to 1.6.5 |
| dtls.alert_message.level | Unsigned integer, 1 byte | Level | 1.0.0 to 1.6.5 |
| dtls.app_data | Sequence of bytes | Encrypted Application Data | 1.0.0 to 1.6.5 |
| dtls.change_cipher_spec | Label | Change Cipher Spec Message | 1.0.0 to 1.6.5 |
| dtls.fragment | Frame number | Message fragment | 1.0.0 to 1.6.5 |
| dtls.fragment.error | Frame number | Message defragmentation error | 1.0.0 to 1.6.5 |
| dtls.fragment.multiple_tails | Boolean | Message has multiple tail fragments | 1.0.0 to 1.6.5 |
| dtls.fragment.overlap | Boolean | Message fragment overlap | 1.0.0 to 1.6.5 |
| dtls.fragment.overlap.conflicts | Boolean | Message fragment overlapping with conflicting data | 1.0.0 to 1.6.5 |
| dtls.fragment.too_long_fragment | Boolean | Message fragment too long | 1.0.0 to 1.6.5 |
| dtls.fragments | Label | Message fragments | 1.0.0 to 1.6.5 |
| dtls.handshake | Label | Handshake Protocol | 1.0.0 to 1.6.5 |
| dtls.handshake.cert_type | Unsigned integer, 1 byte | Certificate type | 1.0.0 to 1.6.5 |
| dtls.handshake.cert_types | Label | Certificate types | 1.0.0 to 1.6.5 |
| dtls.handshake.cert_types_count | Unsigned integer, 1 byte | Certificate types count | 1.0.0 to 1.6.5 |
| dtls.handshake.certificate | Sequence of bytes | Certificate | 1.0.0 to 1.6.5 |
| dtls.handshake.certificate_length | Unsigned integer, 3 bytes | Certificate Length | 1.0.0 to 1.6.5 |
| dtls.handshake.certificates | Label | Certificates | 1.0.0 to 1.6.5 |
| dtls.handshake.certificates_length | Unsigned integer, 3 bytes | Certificates Length | 1.0.0 to 1.6.5 |
| dtls.handshake.cipher_suites_length | Unsigned integer, 2 bytes | Cipher Suites Length | 1.0.0 to 1.6.5 |
| dtls.handshake.ciphersuite | Unsigned integer, 2 bytes | Cipher Suite | 1.0.0 to 1.6.5 |
| dtls.handshake.ciphersuites | Label | Cipher Suites | 1.0.0 to 1.6.5 |
| dtls.handshake.comp_method | Unsigned integer, 1 byte | Compression Method | 1.0.0 to 1.6.5 |
| dtls.handshake.comp_methods | Label | Compression Methods | 1.0.0 to 1.6.5 |
| dtls.handshake.comp_methods_length | Unsigned integer, 1 byte | Compression Methods Length | 1.0.0 to 1.6.5 |
| dtls.handshake.cookie | Sequence of bytes | Cookie | 1.0.0 to 1.6.5 |
| dtls.handshake.cookie_length | Unsigned integer, 1 byte | Cookie Length | 1.0.0 to 1.6.5 |
| dtls.handshake.dname | Sequence of bytes | Distinguished Name | 1.0.0 to 1.6.5 |
| dtls.handshake.dname_len | Unsigned integer, 2 bytes | Distinguished Name Length | 1.0.0 to 1.6.5 |
| dtls.handshake.dnames | Label | Distinguished Names | 1.0.0 to 1.6.5 |
| dtls.handshake.dnames_len | Unsigned integer, 2 bytes | Distinguished Names Length | 1.0.0 to 1.6.5 |
| dtls.handshake.extension.data | Sequence of bytes | Data | 1.0.0 to 1.6.5 |
| dtls.handshake.extension.len | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.6.5 |
| dtls.handshake.extension.type | Unsigned integer, 2 bytes | Type | 1.0.0 to 1.6.5 |
| dtls.handshake.extensions_length | Unsigned integer, 2 bytes | Extensions Length | 1.0.0 to 1.6.5 |
| dtls.handshake.fragment_length | Unsigned integer, 3 bytes | Fragment Length | 1.0.0 to 1.6.5 |
| dtls.handshake.fragment_offset | Unsigned integer, 3 bytes | Fragment Offset | 1.0.0 to 1.6.5 |
| dtls.handshake.length | Unsigned integer, 3 bytes | Length | 1.0.0 to 1.6.5 |
| dtls.handshake.md5_hash | Label | MD5 Hash | 1.0.0 to 1.6.5 |
| dtls.handshake.message_seq | Unsigned integer, 2 bytes | Message Sequence | 1.0.0 to 1.6.5 |
| dtls.handshake.random | Label | Random.bytes | 1.0.0 to 1.6.5 |
| dtls.handshake.random_time | Date and time | Random.gmt_unix_time | 1.0.0 to 1.6.5 |
| dtls.handshake.session_id | Sequence of bytes | Session ID | 1.0.0 to 1.6.5 |
| dtls.handshake.session_id_length | Unsigned integer, 1 byte | Session ID Length | 1.0.0 to 1.6.5 |
| dtls.handshake.sha_hash | Label | SHA-1 Hash | 1.0.0 to 1.6.5 |
| dtls.handshake.type | Unsigned integer, 1 byte | Handshake Type | 1.0.0 to 1.6.5 |
| dtls.handshake.verify_data | Label | Verify Data | 1.0.0 to 1.6.5 |
| dtls.handshake.version | Unsigned integer, 2 bytes | Version | 1.0.0 to 1.6.5 |
| dtls.reassembled.in | Frame number | Reassembled in | 1.0.0 to 1.6.5 |
| dtls.reassembled.length | Unsigned integer, 4 bytes | Reassembled DTLS length | 1.4.0 to 1.6.5 |
| dtls.record | Label | Record Layer | 1.0.0 to 1.6.5 |
| dtls.record.content_type | Unsigned integer, 1 byte | Content Type | 1.0.0 to 1.6.5 |
| dtls.record.epoch | Unsigned integer, 2 bytes | Epoch | 1.0.0 to 1.6.5 |
| dtls.record.length | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.6.5 |
| dtls.record.sequence_number | Floating point (double-precision) | Sequence Number | 1.0.0 to 1.6.5 |
| dtls.record.version | Unsigned integer, 2 bytes | Version | 1.0.0 to 1.6.5 |