Display Filter Reference: Bitcoin protocol

Protocol field name: bitcoin

Versions: 1.10.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
bitcoin.addr Address message Label 1.10.0 to 2.6.5
bitcoin.addr.address Address Sequence of bytes 1.10.0 to 2.6.5
bitcoin.addr.count Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.addr.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.addr.timestamp Address timestamp Date and time 1.10.0 to 2.6.5
bitcoin.address.address Node address IPv6 address 1.10.0 to 2.6.5
bitcoin.address.port Node port Unsigned integer, 2 bytes 1.10.0 to 2.6.5
bitcoin.address.services Node services Unsigned integer, 8 bytes 1.10.0 to 2.6.5
bitcoin.block Block message Label 1.10.0 to 2.6.5
bitcoin.block.bits Bits Unsigned integer, 4 bytes 1.12.3 to 2.6.5
bitcoin.block.merkle_root Merkle root Sequence of bytes 1.10.0 to 2.6.5
bitcoin.block.nonce Nonce Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.block.num_transactions Number of transactions Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.block.num_transactions64 Number of transactions Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.block.prev_block Previous block Sequence of bytes 1.10.0 to 2.6.5
bitcoin.block.timestamp Block timestamp Date and time 1.10.0 to 2.6.5
bitcoin.block.version Block version Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.checksum Payload checksum Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.command Command name Character string 1.10.0 to 2.6.5
bitcoin.command.unknown Unknown command Label 1.12.0 to 2.6.5
bitcoin.data.count Count Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.data.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.data.value Data Sequence of bytes 2.0.0 to 2.6.5
bitcoin.filteradd Filteradd message Label 2.0.0 to 2.6.5
bitcoin.filteradd.data Data Label 2.0.0 to 2.6.5
bitcoin.filterload Filterload message Label 2.0.0 to 2.6.5
bitcoin.filterload.filter Filter Label 2.0.0 to 2.6.5
bitcoin.filterload.nflags nFlags Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.filterload.nhashfunc nHashFunc Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.filterload.ntweak nTweak Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.getblocks Getdata message Label 1.10.0 to 2.6.5
bitcoin.getblocks.count Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.getblocks.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.getblocks.hash_start Starting hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.getblocks.hash_stop Stopping hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.getdata Getdata message Label 1.10.0 to 2.6.5
bitcoin.getdata.count Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.getdata.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.getdata.hash Data hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.getdata.type Type Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.getheaders Getheaders message Label 1.10.0 to 2.6.5
bitcoin.getheaders.count Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.getheaders.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.getheaders.hash_start Starting hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.getheaders.hash_stop Stopping hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.headers Headers message Label 2.0.0 to 2.6.5
bitcoin.headers.bits Bits Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.headers.count Count Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.headers.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.headers.merkle_root Merkle root Sequence of bytes 2.0.0 to 2.6.5
bitcoin.headers.nonce Nonce Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.headers.prev_block Previous block Sequence of bytes 2.0.0 to 2.6.5
bitcoin.headers.timestamp Block timestamp Date and time 2.0.0 to 2.6.5
bitcoin.headers.version Block version Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.inv Inventory message Label 1.10.0 to 2.6.5
bitcoin.inv.count Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.inv.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.inv.hash Data hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.inv.type Type Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.length Payload Length Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.magic Packet magic Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.merkleblock Merkleblock message Label 2.0.0 to 2.6.5
bitcoin.merkleblock.bits Bits Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.flags.count Size Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.merkleblock.flags.count64 Size Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.merkleblock.flags.data Data Sequence of bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.hashes.count Count Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.merkleblock.hashes.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.merkleblock.hashes.hash Hash Sequence of bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.merkle_root Merkle root Sequence of bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.nonce Nonce Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.num_transactions Number of transactions Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.prev_block Previous block Sequence of bytes 2.0.0 to 2.6.5
bitcoin.merkleblock.timestamp Block timestamp Date and time 2.0.0 to 2.6.5
bitcoin.merkleblock.version Block version Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.notfound Getdata message Label 2.0.0 to 2.6.5
bitcoin.notfound.count Count Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.notfound.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.notfound.hash Data hash Sequence of bytes 2.0.0 to 2.6.5
bitcoin.notfound.type Type Unsigned integer, 4 bytes 2.0.0 to 2.6.5
bitcoin.ping Ping message Label 2.0.0 to 2.6.5
bitcoin.ping.nonce Random nonce Unsigned integer, 8 bytes 2.0.0 to 2.6.5
bitcoin.pong Pong message Label 2.0.0 to 2.6.5
bitcoin.pong.nonce Random nonce Unsigned integer, 8 bytes 2.0.0 to 2.6.5
bitcoin.reject Reject message Label 2.0.0 to 2.6.5
bitcoin.reject.ccode CCode Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.reject.data Data Sequence of bytes 2.0.0 to 2.6.5
bitcoin.reject.message Message rejected Label 2.0.0 to 2.6.5
bitcoin.reject.reason Reason Label 2.0.0 to 2.6.5
bitcoin.script_length.invalid script_len too large Label 2.2.0 to 2.6.5
bitcoin.services.network Network node Boolean 1.10.0 to 2.6.5
bitcoin.string.count Count Unsigned integer, 1 byte 1.12.0 to 2.6.5
bitcoin.string.count64 Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.string.value String value Character string 1.12.0 to 2.6.5
bitcoin.tx Tx message Label 1.10.0 to 2.6.5
bitcoin.tx.in Transaction input Label 1.10.0 to 2.6.5
bitcoin.tx.in.prev_output Previous output Label 1.10.0 to 2.6.5
bitcoin.tx.in.prev_output.hash Hash Sequence of bytes 1.10.0 to 2.6.5
bitcoin.tx.in.prev_output.index Index Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.tx.in.script_length Script Length Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.tx.in.script_length64 Script Length Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.tx.in.seq Sequence Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.tx.in.sig_script Signature script Sequence of bytes 1.10.0 to 2.6.5
bitcoin.tx.input_count Input Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.tx.input_count64 Input Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.tx.lock_time Block lock time or block ID Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.tx.num_transactions Number of transactions Unsigned integer, 2 bytes 1.10.0 to 1.12.13
bitcoin.tx.out Transaction output Label 1.10.0 to 2.6.5
bitcoin.tx.out.script Script Sequence of bytes 1.10.0 to 2.6.5
bitcoin.tx.out.script_length Script Length Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.tx.out.script_length64 Script Length Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.tx.out.value Value Unsigned integer, 8 bytes 1.10.0 to 2.6.5
bitcoin.tx.output_count Output Count Unsigned integer, 1 byte 1.10.0 to 2.6.5
bitcoin.tx.output_count64 Output Count Unsigned integer, 8 bytes 2.2.0 to 2.6.5
bitcoin.tx.version Transaction version Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.version Version message Label 1.10.0 to 2.6.5
bitcoin.version.addr_me Address of emmitting node Label 1.10.0 to 2.6.5
bitcoin.version.addr_you Address as receiving node Label 1.10.0 to 2.6.5
bitcoin.version.nonce Random nonce Unsigned integer, 8 bytes 1.10.0 to 2.6.5
bitcoin.version.relay Relay flag Unsigned integer, 1 byte 2.0.0 to 2.6.5
bitcoin.version.services Node services Unsigned integer, 8 bytes 1.10.0 to 2.6.5
bitcoin.version.start_height Block start height Unsigned integer, 4 bytes 1.10.0 to 2.6.5
bitcoin.version.subver Sub-version string Character string 1.10.0 to 1.10.14
bitcoin.version.timestamp Node timestamp Date and time 1.10.0 to 2.6.5
bitcoin.version.user_agent User agent Label 1.12.0 to 2.6.5
bitcoin.version.version Protocol version Unsigned integer, 4 bytes 1.10.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More