Display Filter Reference: Hypertext Transfer Protocol

Protocol field name: http

Versions: 1.0.0 to 1.10.8

Back to Display Filter Reference

Field name Description Type Versions
http.accept Accept Character string 1.0.0 to 1.10.8
http.accept_encoding Accept Encoding Character string 1.0.0 to 1.10.8
http.accept_language Accept-Language Character string 1.0.0 to 1.10.8
http.authbasic Credentials Character string 1.0.0 to 1.10.8
http.authorization Authorization Character string 1.0.0 to 1.10.8
http.cache_control Cache-Control Character string 1.0.0 to 1.10.8
http.connection Connection Character string 1.0.0 to 1.10.8
http.content_encoding Content-Encoding Character string 1.0.0 to 1.10.8
http.content_length Content length Unsigned integer, 8 bytes 1.0.0 to 1.10.8
http.content_length_header Content-Length Character string 1.0.5 to 1.10.8
http.content_type Content-Type Character string 1.0.0 to 1.10.8
http.cookie Cookie Character string 1.0.0 to 1.10.8
http.date Date Character string 1.0.0 to 1.10.8
http.host Host Character string 1.0.0 to 1.10.8
http.last_modified Last-Modified Character string 1.0.0 to 1.10.8
http.location Location Character string 1.0.0 to 1.10.8
http.next_request_in Next request in frame Frame number 1.10.0 to 1.10.8
http.next_response_in Next response in frame Frame number 1.10.0 to 1.10.8
http.notification Notification Boolean 1.0.0 to 1.10.8
http.prev_request_in Prev request in frame Frame number 1.10.0 to 1.10.8
http.prev_response_in Prev response in frame Frame number 1.10.0 to 1.10.8
http.proxy_authenticate Proxy-Authenticate Character string 1.0.0 to 1.10.8
http.proxy_authorization Proxy-Authorization Character string 1.0.0 to 1.10.8
http.proxy_connect_host Proxy-Connect-Hostname Character string 1.0.0 to 1.10.8
http.proxy_connect_port Proxy-Connect-Port Unsigned integer, 2 bytes 1.0.0 to 1.10.8
http.referer Referer Character string 1.0.0 to 1.10.8
http.request Request Boolean 1.0.0 to 1.10.8
http.request.full_uri Full request URI Character string 1.6.0 to 1.10.8
http.request.method Request Method Character string 1.0.0 to 1.10.8
http.request.uri Request URI Character string 1.0.0 to 1.10.8
http.request.version Request Version Character string 1.0.0 to 1.10.8
http.request_in Request in frame Frame number 1.10.0 to 1.10.8
http.response Response Boolean 1.0.0 to 1.10.8
http.response.code Status Code Unsigned integer, 2 bytes 1.0.0 to 1.10.8
http.response.phrase Response Phrase Character string 1.6.0 to 1.10.8
http.response_in Response in frame Frame number 1.10.0 to 1.10.8
http.sec_websocket_accept Sec-WebSocket-Accept Character string 1.8.0 to 1.10.8
http.sec_websocket_extensions Sec-WebSocket-Extensions Character string 1.8.0 to 1.10.8
http.sec_websocket_key Sec-WebSocket-Key Character string 1.8.0 to 1.10.8
http.sec_websocket_protocol Sec-WebSocket-Protocol Character string 1.8.0 to 1.10.8
http.sec_websocket_version Sec-WebSocket-Version Character string 1.8.0 to 1.10.8
http.server Server Character string 1.0.0 to 1.10.8
http.set_cookie Set-Cookie Character string 1.0.0 to 1.10.8
http.time Time since request Time offset 1.10.0 to 1.10.8
http.transfer_encoding Transfer-Encoding Character string 1.0.0 to 1.10.8
http.upgrade Upgrade Character string 1.8.0 to 1.10.8
http.user_agent User-Agent Character string 1.0.0 to 1.10.8
http.www_authenticate WWW-Authenticate Character string 1.0.0 to 1.10.8
http.x_forwarded_for X-Forwarded-For Character string 1.0.0 to 1.10.8
Enhance Wireshark

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products.

Troubleshoot your Network

Free 30 day trial

Free 30 day trial

  • Save hours on network and application issue diagnoses
  • Monitor physical and virtual environments
  • GUI packet capture and analysis
  • Fully integrated with Wireshark

Try Cascade Shark VE & Cascade Pilot Free for 30 Days

802.11 Packet Capture

Riverbed AirPcap
  • WLAN packet capture and transmission
  • Full 802.11 a/b/g/n support
  • View management, control and data frames
  • Multi-channel aggregation (with multiple adapters)

Learn More

Buy Now

Packet Analysis Made Easy

    Cascade Pilot Personal Edition graphs
  • Visually rich, powerful LAN analyzer
  • Quickly access very large pcap files
  • Professional, customizable reports
  • Advanced triggers and alerts
  • Fully integrated with Wireshark

Try Cascade Pilot PE FREE for 10 days

Buy Now