Display Filter Reference: Hypertext Transfer Protocol

Protocol field name: http

Versions: 1.0.0 to 1.8.7

Back to Display Filter Reference

Field name Description Type Versions
http.accept Accept Character string 1.0.0 to 1.8.7
http.accept_encoding Accept Encoding Character string 1.0.0 to 1.8.7
http.accept_language Accept-Language Character string 1.0.0 to 1.8.7
http.authbasic Credentials Character string 1.0.0 to 1.8.7
http.authorization Authorization Character string 1.0.0 to 1.8.7
http.cache_control Cache-Control Character string 1.0.0 to 1.8.7
http.connection Connection Character string 1.0.0 to 1.8.7
http.content_encoding Content-Encoding Character string 1.0.0 to 1.8.7
http.content_length Content length Unsigned integer, 8 bytes 1.0.0 to 1.8.7
http.content_length_header Content-Length Character string 1.0.5 to 1.8.7
http.content_type Content-Type Character string 1.0.0 to 1.8.7
http.cookie Cookie Character string 1.0.0 to 1.8.7
http.date Date Character string 1.0.0 to 1.8.7
http.host Host Character string 1.0.0 to 1.8.7
http.last_modified Last-Modified Character string 1.0.0 to 1.8.7
http.location Location Character string 1.0.0 to 1.8.7
http.notification Notification Boolean 1.0.0 to 1.8.7
http.proxy_authenticate Proxy-Authenticate Character string 1.0.0 to 1.8.7
http.proxy_authorization Proxy-Authorization Character string 1.0.0 to 1.8.7
http.proxy_connect_host Proxy-Connect-Hostname Character string 1.0.0 to 1.8.7
http.proxy_connect_port Proxy-Connect-Port Unsigned integer, 2 bytes 1.0.0 to 1.8.7
http.referer Referer Character string 1.0.0 to 1.8.7
http.request Request Boolean 1.0.0 to 1.8.7
http.request.full_uri Full request URI Character string 1.6.0 to 1.8.7
http.request.method Request Method Character string 1.0.0 to 1.8.7
http.request.uri Request URI Character string 1.0.0 to 1.8.7
http.request.version Request Version Character string 1.0.0 to 1.8.7
http.response Response Boolean 1.0.0 to 1.8.7
http.response.code Status Code Unsigned integer, 2 bytes 1.0.0 to 1.8.7
http.response.phrase Response Phrase Character string 1.6.0 to 1.8.7
http.sec_websocket_accept Sec-WebSocket-Accept Character string 1.8.0 to 1.8.7
http.sec_websocket_extensions Sec-WebSocket-Extensions Character string 1.8.0 to 1.8.7
http.sec_websocket_key Sec-WebSocket-Key Character string 1.8.0 to 1.8.7
http.sec_websocket_protocol Sec-WebSocket-Protocol Character string 1.8.0 to 1.8.7
http.sec_websocket_version Sec-WebSocket-Version Character string 1.8.0 to 1.8.7
http.server Server Character string 1.0.0 to 1.8.7
http.set_cookie Set-Cookie Character string 1.0.0 to 1.8.7
http.transfer_encoding Transfer-Encoding Character string 1.0.0 to 1.8.7
http.upgrade Upgrade Character string 1.8.0 to 1.8.7
http.user_agent User-Agent Character string 1.0.0 to 1.8.7
http.www_authenticate WWW-Authenticate Character string 1.0.0 to 1.8.7
http.x_forwarded_for X-Forwarded-For Character string 1.0.0 to 1.8.7
Enhance Wireshark

Troubleshoot your Network

Free 30 day trial

Free 30 day trial

  • Save hours on network and application issue diagnoses
  • Monitor physical and virtual environments
  • GUI packet capture and analysis
  • Fully integrated with Wireshark

Try Cascade Shark VE & Cascade Pilot Free for 30 Days

802.11 Packet Capture

Riverbed AirPcap
  • WLAN packet capture and transmission
  • Full 802.11 a/b/g/n support
  • View management, control and data frames
  • Multi-channel aggregation (with multiple adapters)

Learn More

Buy Now

Packet Analysis Made Easy

    Cascade Pilot Personal Edition graphs
  • Visually rich, powerful LAN analyzer
  • Quickly access very large pcap files
  • Professional, customizable reports
  • Advanced triggers and alerts
  • Fully integrated with Wireshark

Try Cascade Pilot PE FREE for 10 days

Buy Now