Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Datagram Transport Layer Security

Protocol field name: dtls
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
dtls.alert_message Label Alert Message 1.0.0 to 1.6.5
dtls.alert_message.desc Unsigned integer, 1 byte Description 1.0.0 to 1.6.5
dtls.alert_message.level Unsigned integer, 1 byte Level 1.0.0 to 1.6.5
dtls.app_data Sequence of bytes Encrypted Application Data 1.0.0 to 1.6.5
dtls.change_cipher_spec Label Change Cipher Spec Message 1.0.0 to 1.6.5
dtls.fragment Frame number Message fragment 1.0.0 to 1.6.5
dtls.fragment.error Frame number Message defragmentation error 1.0.0 to 1.6.5
dtls.fragment.multiple_tails Boolean Message has multiple tail fragments 1.0.0 to 1.6.5
dtls.fragment.overlap Boolean Message fragment overlap 1.0.0 to 1.6.5
dtls.fragment.overlap.conflicts Boolean Message fragment overlapping with conflicting data 1.0.0 to 1.6.5
dtls.fragment.too_long_fragment Boolean Message fragment too long 1.0.0 to 1.6.5
dtls.fragments Label Message fragments 1.0.0 to 1.6.5
dtls.handshake Label Handshake Protocol 1.0.0 to 1.6.5
dtls.handshake.cert_type Unsigned integer, 1 byte Certificate type 1.0.0 to 1.6.5
dtls.handshake.cert_types Label Certificate types 1.0.0 to 1.6.5
dtls.handshake.cert_types_count Unsigned integer, 1 byte Certificate types count 1.0.0 to 1.6.5
dtls.handshake.certificate Sequence of bytes Certificate 1.0.0 to 1.6.5
dtls.handshake.certificate_length Unsigned integer, 3 bytes Certificate Length 1.0.0 to 1.6.5
dtls.handshake.certificates Label Certificates 1.0.0 to 1.6.5
dtls.handshake.certificates_length Unsigned integer, 3 bytes Certificates Length 1.0.0 to 1.6.5
dtls.handshake.cipher_suites_length Unsigned integer, 2 bytes Cipher Suites Length 1.0.0 to 1.6.5
dtls.handshake.ciphersuite Unsigned integer, 2 bytes Cipher Suite 1.0.0 to 1.6.5
dtls.handshake.ciphersuites Label Cipher Suites 1.0.0 to 1.6.5
dtls.handshake.comp_method Unsigned integer, 1 byte Compression Method 1.0.0 to 1.6.5
dtls.handshake.comp_methods Label Compression Methods 1.0.0 to 1.6.5
dtls.handshake.comp_methods_length Unsigned integer, 1 byte Compression Methods Length 1.0.0 to 1.6.5
dtls.handshake.cookie Sequence of bytes Cookie 1.0.0 to 1.6.5
dtls.handshake.cookie_length Unsigned integer, 1 byte Cookie Length 1.0.0 to 1.6.5
dtls.handshake.dname Sequence of bytes Distinguished Name 1.0.0 to 1.6.5
dtls.handshake.dname_len Unsigned integer, 2 bytes Distinguished Name Length 1.0.0 to 1.6.5
dtls.handshake.dnames Label Distinguished Names 1.0.0 to 1.6.5
dtls.handshake.dnames_len Unsigned integer, 2 bytes Distinguished Names Length 1.0.0 to 1.6.5
dtls.handshake.extension.data Sequence of bytes Data 1.0.0 to 1.6.5
dtls.handshake.extension.len Unsigned integer, 2 bytes Length 1.0.0 to 1.6.5
dtls.handshake.extension.type Unsigned integer, 2 bytes Type 1.0.0 to 1.6.5
dtls.handshake.extensions_length Unsigned integer, 2 bytes Extensions Length 1.0.0 to 1.6.5
dtls.handshake.fragment_length Unsigned integer, 3 bytes Fragment Length 1.0.0 to 1.6.5
dtls.handshake.fragment_offset Unsigned integer, 3 bytes Fragment Offset 1.0.0 to 1.6.5
dtls.handshake.length Unsigned integer, 3 bytes Length 1.0.0 to 1.6.5
dtls.handshake.md5_hash Label MD5 Hash 1.0.0 to 1.6.5
dtls.handshake.message_seq Unsigned integer, 2 bytes Message Sequence 1.0.0 to 1.6.5
dtls.handshake.random Label Random.bytes 1.0.0 to 1.6.5
dtls.handshake.random_time Date and time Random.gmt_unix_time 1.0.0 to 1.6.5
dtls.handshake.session_id Sequence of bytes Session ID 1.0.0 to 1.6.5
dtls.handshake.session_id_length Unsigned integer, 1 byte Session ID Length 1.0.0 to 1.6.5
dtls.handshake.sha_hash Label SHA-1 Hash 1.0.0 to 1.6.5
dtls.handshake.type Unsigned integer, 1 byte Handshake Type 1.0.0 to 1.6.5
dtls.handshake.verify_data Label Verify Data 1.0.0 to 1.6.5
dtls.handshake.version Unsigned integer, 2 bytes Version 1.0.0 to 1.6.5
dtls.reassembled.in Frame number Reassembled in 1.0.0 to 1.6.5
dtls.reassembled.length Unsigned integer, 4 bytes Reassembled DTLS length 1.4.0 to 1.6.5
dtls.record Label Record Layer 1.0.0 to 1.6.5
dtls.record.content_type Unsigned integer, 1 byte Content Type 1.0.0 to 1.6.5
dtls.record.epoch Unsigned integer, 2 bytes Epoch 1.0.0 to 1.6.5
dtls.record.length Unsigned integer, 2 bytes Length 1.0.0 to 1.6.5
dtls.record.sequence_number Floating point (double-precision) Sequence Number 1.0.0 to 1.6.5
dtls.record.version Unsigned integer, 2 bytes Version 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation