Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Wireshark Columns

Protocol field name: _ws.col

Versions: 4.2.0 to 4.4.9

Back to Display Filter Reference

Field name Description Type Versions
_ws.col.cls_timeTime (format as specified)Character string4.2.0 to 4.4.9
_ws.col.def_dstDestination addressCharacter string4.2.0 to 4.4.9
_ws.col.def_srcSource addressCharacter string4.2.0 to 4.4.9
_ws.col.infoInformationCharacter string4.2.0 to 4.4.9
_ws.col.numberNumberCharacter string4.2.0 to 4.4.9
_ws.col.packet_lengthPacket length (bytes)Character string4.2.0 to 4.4.9
_ws.col.protocolProtocolCharacter string4.2.0 to 4.4.9