Wireshark • Display Filter Reference: Datagram Transport Layer Security

Display Filter Reference: Datagram Transport Layer Security

Protocol field name: dtls

Versions: 1.0.0 to 4.6.0

Field name	Description	Type	Versions
dtls.ack.record_numbers	Record Numbers	Label	4.4.0 to 4.6.0
dtls.ack.record_numbers_length	Record Numbers Length	Unsigned integer (16 bits)	4.4.0 to 4.6.0
dtls.ack_message	Acknowledgement Message	Label	4.4.0 to 4.6.0
dtls.alert_message	Alert Message	Label	1.0.0 to 4.6.0
dtls.alert_message.desc	Description	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.alert_message.level	Level	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.app_data	Encrypted Application Data	Byte sequence	1.0.0 to 4.6.0
dtls.app_data_proto	Application Data Protocol	Character string	3.4.0 to 4.6.0
dtls.change_cipher_spec	Change Cipher Spec Message	Label	1.0.0 to 4.6.0
dtls.cid.content_type.invalid	Invalid real content type	Label	3.4.0 to 4.6.0
dtls.cid.enc_content.invalid	Invalid encrypted content	Label	3.4.0 to 3.6.24
dtls.compress_certificate.algorithm	Algorithm	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.compress_certificate.algorithms_length	Algorithms Length	Unsigned integer (8 bits)	3.0.0 to 4.6.0
dtls.compress_certificate.compressed_certificate_message	Compressed Certificate Message	Byte sequence	3.0.0 to 4.6.0
dtls.compress_certificate.compressed_certificate_message.length	Length	Unsigned integer (24 bits)	3.0.0 to 4.6.0
dtls.compress_certificate.uncompressed_length	Uncompressed Length	Unsigned integer (24 bits)	3.0.0 to 4.6.0
dtls.connection_id	Connection ID	Byte sequence	3.4.0 to 4.6.0
dtls.connection_id_length	Connection ID length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.decompression_error	Decompression error	Label	3.6.0 to 4.6.0
dtls.early_data.max_early_data_size	Maximum Early Data Size	Unsigned integer (32 bits)	2.4.0 to 4.6.0
dtls.ech.cipher_suite	Cipher Suite	Label	4.2.0 to 4.6.0
dtls.ech.client_hello_type	Client Hello type	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.ech.config_id	Config Id	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.ech.confirmation	Confirmation	Byte sequence	4.2.0 to 4.6.0
dtls.ech.echconfig	ECHConfig	Label	4.2.0 to 4.6.0
dtls.ech.echconfig.length	Length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.echconfig.version	Version	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.echconfigcontents.extensions	Extensions	Byte sequence	4.2.0 to 4.6.0
dtls.ech.echconfigcontents.extensions_length	Extensions length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.echconfigcontents.maximum_name_length	Maximum Name Length	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.ech.echconfigcontents.public_name	Public Name	Character string	4.2.0 to 4.6.0
dtls.ech.echconfigcontents.public_name_length	Public Name length	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.ech.echconfiglist	ECHConfigList	Label	4.2.0 to 4.6.0
dtls.ech.echconfiglist_length	ECHConfigList length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.enc	Enc	Byte sequence	4.2.0 to 4.6.0
dtls.ech.enc_length	Enc length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.encrypted_padding	ECH Encrypted Padding	Byte sequence	4.6.0
dtls.ech.hpke.keyconfig	HPKE Key Config	Label	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.cipher_suite	Cipher Suite	Label	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.cipher_suite.aead_id	AEAD Id	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.cipher_suite.kdf_id	KDF Id	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.cipher_suites	Cipher Suites	Label	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.cipher_suites_length	Cipher Suites length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.config_id	Config Id	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.kem_id	KEM Id	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.public_key	Public Key	Byte sequence	4.2.0 to 4.6.0
dtls.ech.hpke.keyconfig.public_key_length	Public Key length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.payload	Payload	Byte sequence	4.2.0 to 4.6.0
dtls.ech.payload_length	Payload length	Unsigned integer (16 bits)	4.2.0 to 4.6.0
dtls.ech.retry_configs	Retry Configs	Label	4.2.0 to 4.6.0
dtls.ech_accepted	Calculated ECH Confirmation matches Server Random bytes, ECH was accepted	Label	4.6.0
dtls.ech_echconfig_invalid_version	Invalid/unknown ECHConfig version	Label	4.2.0 to 4.6.0
dtls.ech_rejected	Calculated ECH Confirmation does not match Server Random bytes, ECH was rejected	Label	4.6.0
dtls.enc_content	Encrypted Record Content	Byte sequence	3.4.0 to 4.6.0
dtls.esni.encrypted_sni	Encrypted SNI	Byte sequence	3.0.0 to 4.6.0
dtls.esni.encrypted_sni_length	Encrypted SNI Length	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.esni.nonce	Nonce	Byte sequence	3.0.0 to 4.6.0
dtls.esni.record_digest	Record Digest	Byte sequence	3.0.0 to 4.6.0
dtls.esni.record_digest_length	Record Digest Length	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.esni.suite	Cipher Suite	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.extension.draft_version_tls13	Draft version of TLS 1.3	Unsigned integer (16 bits)	2.4.0 to 2.6.20
dtls.extension.oid_filters.oid	Certificate Extension OID	ASN.1 object identifier	2.4.0 to 4.6.0
dtls.extension.oid_filters.oid_length	Certificate Extension OID Length	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.extension.oid_filters.values_length	Certificate Extension Values Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.extension.oid_filters_length	OID Filters Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.extension.psk_ke_mode	PSK Key Exchange Mode	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.extension.psk_ke_modes_length	PSK Key Exchange Modes Length	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.fragment	Message fragment	Frame number	1.0.0 to 4.6.0
dtls.fragment.count	Message fragment count	Unsigned integer (32 bits)	1.8.0 to 4.6.0
dtls.fragment.error	Message defragmentation error	Frame number	1.0.0 to 4.6.0
dtls.fragment.multiple_tails	Message has multiple tail fragments	Boolean	1.0.0 to 4.6.0
dtls.fragment.overlap	Message fragment overlap	Boolean	1.0.0 to 4.6.0
dtls.fragment.overlap.conflicts	Message fragment overlapping with conflicting data	Boolean	1.0.0 to 4.6.0
dtls.fragment.too_long_fragment	Message fragment too long	Boolean	1.0.0 to 4.6.0
dtls.fragments	Message fragments	Label	1.0.0 to 4.6.0
dtls.handshake	Handshake Protocol	Label	1.0.0 to 4.6.0
dtls.handshake.cert_type	Certificate type	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.cert_type.type	Certificate Type	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.cert_type.types	Certificate Type List	Label	1.12.0 to 4.6.0
dtls.handshake.cert_type.types_len	Certificate Type List Length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.cert_types	Certificate types	Label	1.0.0 to 4.6.0
dtls.handshake.cert_types_count	Certificate types count	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.cert_url.padding	Padding	Label	1.12.0 to 4.6.0
dtls.handshake.cert_url.sha1	SHA1 Hash	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.cert_url.url	URL	Character string	2.2.0 to 4.6.0
dtls.handshake.cert_url.url_hash	URL and Hash	Label	1.12.0 to 4.6.0
dtls.handshake.cert_url.url_hash_len	URL and Hash list Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.cert_url.url_len	URL Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.cert_url_type	Certificate Chain Type	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.certificate	Certificate	Byte sequence	1.0.0 to 4.6.0
dtls.handshake.certificate_length	Certificate Length	Unsigned integer (24 bits)	1.0.0 to 4.6.0
dtls.handshake.certificate_request_context	Certificate Request Context	Byte sequence	2.4.0 to 4.6.0
dtls.handshake.certificate_request_context_length	Certificate Request Context Length	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.handshake.certificates	Certificates	Label	1.0.0 to 4.6.0
dtls.handshake.certificates_length	Certificates Length	Unsigned integer (24 bits)	1.0.0 to 4.6.0
dtls.handshake.cipher_suites_length	Cipher Suites Length	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.cipher_suites_length.mult2	Expert Info	Label	2.0.0 to 2.2.17
dtls.handshake.ciphersuite	Cipher Suite	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.ciphersuite.undecoded	Ciphersuite not implemented, contact Wireshark developers if you want this to be supported	Label	4.4.0 to 4.6.0
dtls.handshake.ciphersuites	Cipher Suites	Label	1.0.0 to 4.6.0
dtls.handshake.client_cert_vrfy.sig	Signature	Byte sequence	2.0.0 to 4.6.0
dtls.handshake.client_cert_vrfy.sig_len	Signature length	Unsigned integer (16 bits)	2.0.0 to 4.6.0
dtls.handshake.client_point	Pubkey	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.client_point_len	Pubkey Length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.client_version	Version	Unsigned integer (16 bits)	1.8.0 to 1.12.13
dtls.handshake.client_version_error	Client Hello legacy version field specifies version 1.3, not version 1.2; some servers may not be able to handle that.	Label	4.2.0 to 4.6.0
dtls.handshake.comp_method	Compression Method	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.comp_methods	Compression Methods	Label	1.0.0 to 4.6.0
dtls.handshake.comp_methods_length	Compression Methods Length	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.cookie	Cookie	Byte sequence	1.0.0 to 4.6.0
dtls.handshake.cookie_length	Cookie Length	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.cred.pubkey	Subject Public Key Info	Byte sequence	3.6.0 to 4.6.0
dtls.handshake.cred.pubkey_len	Subject Public Key Info Length	Unsigned integer (24 bits)	3.6.0 to 4.6.0
dtls.handshake.cred.signature	Signature	Byte sequence	3.6.0 to 4.6.0
dtls.handshake.cred.signature_len	Signature Length	Unsigned integer (16 bits)	3.6.0 to 4.6.0
dtls.handshake.cred.valid_time	Valid Time	Unsigned integer (16 bits)	3.6.0 to 4.6.0
dtls.handshake.dname	Distinguished Name	Label	1.0.0 to 4.6.0
dtls.handshake.dname_len	Distinguished Name Length	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.dnames	Distinguished Names	Label	1.0.0 to 4.6.0
dtls.handshake.dnames_len	Distinguished Names Length	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.dnames_truncated	Tree view truncated	Label	3.2.3 to 4.6.0
dtls.handshake.ech_confirm	ECH Confirmation Bytes	Byte sequence	4.6.0
dtls.handshake.ech_confirm_compute	Computed ECH Confirmation Bytes	Byte sequence	4.6.0
dtls.handshake.epms	Encrypted PreMaster	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.epms_len	Encrypted PreMaster length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.exponent	Exponent	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.exponent_len	Exponent Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extension	Extension	Label	4.4.6 to 4.6.0
dtls.handshake.extension.data	Data	Byte sequence	1.0.0 to 4.6.0
dtls.handshake.extension.heartbeat.mode	Mode	Unsigned integer (8 bits)	1.8.0 to 4.6.0
dtls.handshake.extension.len	Length	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.extension.type	Type	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.extensions.cookie	Cookie	Byte sequence	2.4.0 to 4.6.0
dtls.handshake.extensions.cookie_len	Cookie length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.binder	PSK Binder	Label	4.6.0
dtls.handshake.extensions.psk.binder.binder	Binder	Byte sequence	4.6.0
dtls.handshake.extensions.psk.binder.binder_length	Binder Length	Unsigned integer (8 bits)	4.6.0
dtls.handshake.extensions.psk.binders	PSK Binders	Label	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.binders_len	PSK Binders length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.identities.length	Identities Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.identity.identity	Identity	Byte sequence	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.identity.identity_length	Identity Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.identity.obfuscated_ticket_age	Obfuscated Ticket Age	Unsigned integer (32 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions.psk.identity.selected	Selected Identity	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions.session_ticket	Session Ticket	Byte sequence	4.2.0 to 4.6.0
dtls.handshake.extensions.supported_version	Supported Version	Unsigned integer (16 bits)	2.4.3 to 4.6.0
dtls.handshake.extensions.supported_versions	Supported Versions	Unsigned integer (16 bits)	2.4.0 to 2.4.2
dtls.handshake.extensions.supported_versions_len	Supported Versions length	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions_alpn_len	ALPN Extension Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_alpn_list	ALPN Protocol	Label	1.12.0 to 4.6.0
dtls.handshake.extensions_alpn_str	ALPN Next Protocol	Character string	1.12.0 to 4.6.0
dtls.handshake.extensions_alpn_str_len	ALPN string length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_alps.settings	ALPN Opaque Settings	Byte sequence	3.6.0 to 4.6.0
dtls.handshake.extensions_alps_alpn_list	Supported ALPN List	Label	3.6.0 to 4.6.0
dtls.handshake.extensions_alps_alpn_str	Supported ALPN	Character string	3.6.0 to 4.6.0
dtls.handshake.extensions_alps_alpn_str_len	Supported ALPN Length	Unsigned integer (8 bits)	3.6.0 to 4.6.0
dtls.handshake.extensions_alps_len	ALPS Extension Length	Unsigned integer (16 bits)	3.6.0 to 4.6.0
dtls.handshake.extensions_ec_point_format	EC point format	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_ec_point_formats	EC point formats	Label	2.4.0 to 4.6.0
dtls.handshake.extensions_ec_point_formats_length	EC point formats Length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_ech_outer_extensions	Outer Extensions List	Label	4.6.0
dtls.handshake.extensions_ech_outer_extensions_length	Outer Extensions List Length	Unsigned integer (8 bits)	4.6.0
dtls.handshake.extensions_elliptic_curve	Elliptic curve	Unsigned integer (16 bits)	1.12.0 to 2.2.17
dtls.handshake.extensions_elliptic_curves	Elliptic Curves List	Label	1.12.0 to 2.2.17
dtls.handshake.extensions_elliptic_curves_length	Elliptic Curves Length	Unsigned integer (16 bits)	1.12.0 to 2.2.17
dtls.handshake.extensions_key_share_client_length	Client Key Share Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions_key_share_group	Group	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions_key_share_key_exchange	Key Exchange	Byte sequence	2.4.0 to 4.6.0
dtls.handshake.extensions_key_share_key_exchange_length	Key Exchange Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions_key_share_selected_group	Selected Group	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions_length	Extensions Length	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.extensions_npn	Next Protocol	Character string	1.12.0 to 4.6.0
dtls.handshake.extensions_npn_str_len	Protocol string length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_padding	Padding	Label	1.12.0 to 2.0.5, 2.2.0
dtls.handshake.extensions_padding_data	Padding Data	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.extensions_padding_len	Padding length	Unsigned integer (16 bits)	1.12.0 to 2.0.5, 2.2.0
dtls.handshake.extensions_reneg_info	Renegotiation info	Byte sequence	2.0.0 to 4.6.0
dtls.handshake.extensions_reneg_info_len	Renegotiation info extension length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_server_name	Server Name	Character string	1.12.0 to 4.6.0
dtls.handshake.extensions_server_name_len	Server Name length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_server_name_list_len	Server Name list length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_server_name_type	Server Name Type	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_srp_len	SRP username length	Unsigned integer (8 bits)	3.6.0 to 4.6.0
dtls.handshake.extensions_srp_username	SRP username	Character string	3.6.0 to 4.6.0
dtls.handshake.extensions_status_request_exts_len	Request Extensions Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_status_request_len	Certificate Status Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_status_request_list_len	Certificate Status List Length	Unsigned integer (16 bits)	2.6.0 to 4.6.0
dtls.handshake.extensions_status_request_responder_ids_len	Responder ID list Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_status_request_type	Certificate Status Type	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.extensions_supported_group	Supported Group	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.extensions_supported_groups	Supported Groups List	Label	2.4.0 to 4.6.0
dtls.handshake.extensions_supported_groups_length	Supported Groups List Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.handshake.fragment_length	Fragment Length	Unsigned integer (24 bits)	1.0.0 to 4.6.0
dtls.handshake.fragment_length.too_long	Fragment length is larger than message length	Label	1.12.0 to 4.6.0
dtls.handshake.fragment_length.zero	Zero-length fragment length for fragmented message	Label	2.0.0 to 4.6.0
dtls.handshake.fragment_offset	Fragment Offset	Unsigned integer (24 bits)	1.0.0 to 4.6.0
dtls.handshake.fragment_past_end_msg	Fragment runs past the end of the message	Label	1.12.0 to 4.6.0
dtls.handshake.g	g	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.g_len	g Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.hint	Hint	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.hint_len	Hint Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.identity	Identity	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.identity_len	Identity Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.ja3	JA3	Character string	3.6.0 to 4.6.0
dtls.handshake.ja3_full	JA3 Fullstring	Character string	3.6.0 to 4.6.0
dtls.handshake.ja3s	JA3S	Character string	3.6.0 to 4.6.0
dtls.handshake.ja3s_full	JA3S Fullstring	Character string	3.6.0 to 4.6.0
dtls.handshake.ja4	JA4	Character string	4.2.0 to 4.6.0
dtls.handshake.ja4_r	JA4_r	Character string	4.2.0 to 4.6.0
dtls.handshake.key_update.request_update	Key Update Request	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.handshake.legacy_version	This legacy_version field MUST be ignored. The supported_versions extension is present and MUST be used instead.	Label	4.4.0 to 4.6.0
dtls.handshake.length	Length	Unsigned integer (24 bits)	1.0.0 to 4.6.0
dtls.handshake.max_fragment_length	Maximum Fragment Length	Unsigned integer (8 bits)	3.2.0 to 4.6.0
dtls.handshake.md5_hash	MD5 Hash	Label	1.0.0 to 1.8.15
dtls.handshake.message_seq	Message Sequence	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.handshake.modulus	Modulus	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.modulus_len	Modulus Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.ocsp_response_len	OCSP Response Length	Unsigned integer (24 bits)	2.6.0 to 4.6.0
dtls.handshake.ocsp_response_list_len	OCSP Response List Length	Unsigned integer (24 bits)	2.6.0 to 4.6.0
dtls.handshake.p	p	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.p_len	p Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.random	Random	Byte sequence	1.0.0 to 4.6.0
dtls.handshake.random_bytes	Random Bytes	Byte sequence	2.4.0 to 4.6.0
dtls.handshake.random_time	GMT Unix Time	Date and time	1.0.0 to 4.6.0
dtls.handshake.rc	Schnorr signature	Byte sequence	3.4.0 to 4.6.0
dtls.handshake.rc_len	Schnorr signature Length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.handshake.rs	Schnorr signature	Byte sequence	3.4.0 to 4.6.0
dtls.handshake.rs_len	Schnorr signature Length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.handshake.server_curve_type	Curve Type	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.server_keyex_illegal	It is not legal to send the ServerKeyExchange message for this ciphersuite	Label	4.4.0 to 4.6.0
dtls.handshake.server_named_curve	Named Curve	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.server_point	Pubkey	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.server_point_len	Pubkey Length	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.server_version	Version	Unsigned integer (16 bits)	1.8.0 to 1.12.13
dtls.handshake.server_version_error	Server Hello legacy version field specifies version 1.3, not version 1.2; some middleboxes may not be able to handle that.	Label	4.4.0 to 4.6.0
dtls.handshake.session_id	Session ID	Byte sequence	1.0.0 to 4.6.0
dtls.handshake.session_id_length	Session ID Length	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.session_ticket	Session Ticket	Byte sequence	1.8.0 to 4.6.0
dtls.handshake.session_ticket_age_add	Session Ticket Age Add	Unsigned integer (32 bits)	2.4.0 to 4.6.0
dtls.handshake.session_ticket_length	Session Ticket Length	Unsigned integer (16 bits)	1.8.0 to 4.6.0
dtls.handshake.session_ticket_lifetime_hint	Session Ticket Lifetime Hint	Unsigned integer (32 bits)	1.8.0 to 4.6.0
dtls.handshake.session_ticket_nonce	Session Ticket Nonce	Byte sequence	2.4.0 to 4.6.0
dtls.handshake.session_ticket_nonce_length	Session Ticket Nonce Length	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.handshake.sha_hash	SHA-1 Hash	Label	1.0.0 to 1.8.15
dtls.handshake.sig	Signature	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.sig_hash_alg	Signature Algorithm	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.sig_hash_alg_len	Signature Hash Algorithms Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.sig_hash_alg_len.bad	Expert Info	Label	1.12.0 to 1.12.13
dtls.handshake.sig_hash_alg_len.mult2	Expert Info	Label	2.0.0 to 2.2.17
dtls.handshake.sig_hash_algs	Signature Algorithms	Label	1.12.0 to 4.6.0
dtls.handshake.sig_hash_algs.mult2	Expert Info	Label	2.0.0 to 2.2.17
dtls.handshake.sig_hash_hash	Signature Hash Algorithm Hash	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.sig_hash_sig	Signature Hash Algorithm Signature	Unsigned integer (8 bits)	1.12.0 to 4.6.0
dtls.handshake.sig_len	Signature Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.status_request.undecoded	Responder ID list or Request Extensions are not implemented, contact Wireshark developers if you want this to be supported	Label	1.12.0 to 4.6.0
dtls.handshake.trusted_ca.key	Trusted CA key	Label	4.6.0
dtls.handshake.trusted_ca.key_dname	Distinguished Name	Label	4.6.0
dtls.handshake.trusted_ca.key_dname_len	Distinguished Name Length	Unsigned integer (16 bits)	4.6.0
dtls.handshake.trusted_ca.key_hash	Trusted CA key hash	Byte sequence	4.6.0
dtls.handshake.trusted_ca.key_type	Trusted CA key type	Unsigned integer (8 bits)	4.6.0
dtls.handshake.trusted_ca.keys	Trusted CA keys	Label	4.6.0
dtls.handshake.trusted_ca.keys_length	Trusted CA keys length	Unsigned integer (16 bits)	4.6.0
dtls.handshake.type	Handshake Type	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.handshake.vc	Ephemeral Pubkey	Byte sequence	3.4.0 to 4.6.0
dtls.handshake.vc_len	Ephemeral Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.handshake.verify_data	Verify Data	Byte sequence	1.0.0 to 4.6.0
dtls.handshake.version	Version	Unsigned integer (16 bits)	1.0.0 to 1.6.16, 2.0.0 to 4.6.0
dtls.handshake.vs	Ephemeral Pubkey	Byte sequence	3.4.0 to 4.6.0
dtls.handshake.vs_len	Ephemeral Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.handshake.xc	Pubkey	Byte sequence	3.4.0 to 4.6.0
dtls.handshake.xc_len	Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.handshake.xs	Pubkey	Byte sequence	3.4.0 to 4.6.0
dtls.handshake.xs_len	Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.handshake.yc	Pubkey	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.yc_len	Pubkey Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.handshake.ys	Pubkey	Byte sequence	1.12.0 to 4.6.0
dtls.handshake.ys_len	Pubkey Length	Unsigned integer (16 bits)	1.12.0 to 4.6.0
dtls.heartbeat_message	Heartbeat Message	Label	1.8.0 to 4.6.0
dtls.heartbeat_message.padding	Payload Length	Byte sequence	1.8.0 to 4.6.0
dtls.heartbeat_message.payload	Payload Length	Byte sequence	1.8.0 to 4.6.0
dtls.heartbeat_message.payload_length	Payload Length	Unsigned integer (16 bits)	1.8.0 to 4.6.0
dtls.heartbeat_message.payload_length.invalid	Invalid heartbeat payload length	Label	1.12.0 to 4.6.0
dtls.heartbeat_message.type	Type	Unsigned integer (8 bits)	1.8.0 to 4.6.0
dtls.malformed.buffer_too_small	Malformed message, not enough data is available	Label	2.4.0 to 4.6.0
dtls.malformed.trailing_data	Undecoded trailing data is present	Label	2.4.0 to 4.6.0
dtls.malformed.vector_length	Variable vector length is outside the permitted range	Label	2.4.0 to 4.6.0
dtls.msg_len_diff_fragment	Message length differs from value in earlier fragment	Label	1.12.0 to 4.6.0
dtls.quic.initial_version	Initial Version	Unsigned integer (32 bits)	2.6.0 to 3.0.14
dtls.quic.len	Parameters Length	Unsigned integer (16 bits)	2.6.0 to 4.6.0
dtls.quic.negotiated_version	Negotiated Version	Unsigned integer (32 bits)	2.6.0 to 3.0.14
dtls.quic.parameter	Parameter	Label	2.6.0 to 4.6.0
dtls.quic.parameter.ack_delay_exponent	ack_delay_exponent	Unsigned integer (64 bits)	2.6.0 to 4.6.0
dtls.quic.parameter.active_connection_id_limit	Active Connection ID Limit	Unsigned integer (64 bits)	3.2.0 to 4.6.0
dtls.quic.parameter.address_discovery	address_discovery	Unsigned integer (64 bits)	4.6.0
dtls.quic.parameter.cibir_encoding.length	length	Unsigned integer (64 bits)	4.0.0 to 4.6.0
dtls.quic.parameter.cibir_encoding.offset	offset	Unsigned integer (64 bits)	4.0.0 to 4.6.0
dtls.quic.parameter.enable_multipath	Enable Multipath	Unsigned integer (64 bits)	4.2.0 to 4.6.0
dtls.quic.parameter.enable_time_stamp_v2	Enable TimestampV2	Unsigned integer (64 bits)	3.4.0 to 4.6.0
dtls.quic.parameter.facebook.partial_reliability	Facebook Partial Reliability	Unsigned integer (64 bits)	3.4.0 to 4.6.0
dtls.quic.parameter.google.connection_options	Google Connection options	Byte sequence	3.4.0 to 4.6.0
dtls.quic.parameter.google.initial_rtt	Google Initial RTT	Unsigned integer (64 bits)	3.4.0 to 4.6.0
dtls.quic.parameter.google.key_update_not_yet_supported	Google Key Update not yet supported	Label	3.4.0 to 4.6.0
dtls.quic.parameter.google.quic_params	Google QUIC parameters	Byte sequence	3.4.0 to 4.6.0
dtls.quic.parameter.google.quic_params_unknown_field	Google Unknown Field	Byte sequence	3.4.0 to 4.6.0
dtls.quic.parameter.google.quic_version	Google QUIC version	Unsigned integer (32 bits)	3.4.0 to 4.6.0
dtls.quic.parameter.google.support_handshake_done	Google Support Handshake Done	Label	3.4.0 to 4.6.0
dtls.quic.parameter.google.supported_version	Google Supported Version	Unsigned integer (32 bits)	3.6.0 to 4.6.0
dtls.quic.parameter.google.supported_versions_length	Google Supported Versions Length	Unsigned integer (8 bits)	3.6.0 to 4.6.0
dtls.quic.parameter.google.user_agent	Google UserAgent	Character string	3.4.0 to 4.6.0
dtls.quic.parameter.idle_timeout	idle_timeout	Unsigned integer (64 bits)	2.6.0 to 3.2.1
dtls.quic.parameter.initial_max_data	initial_max_data	Unsigned integer (64 bits)	2.6.0 to 4.6.0
dtls.quic.parameter.initial_max_path_id	Initial Max Path ID	Unsigned integer (64 bits)	4.4.0 to 4.6.0
dtls.quic.parameter.initial_max_paths	Initial Max Paths	Unsigned integer (64 bits)	4.4.0 to 4.6.0
dtls.quic.parameter.initial_max_stream_data	initial_max_stream_data	Unsigned integer (32 bits)	2.6.0 to 2.6.20
dtls.quic.parameter.initial_max_stream_data_bidi_local	initial_max_stream_data_bidi_local	Unsigned integer (64 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.initial_max_stream_data_bidi_remote	initial_max_stream_data_bidi_remote	Unsigned integer (64 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.initial_max_stream_data_uni	initial_max_stream_data_uni	Unsigned integer (64 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.initial_max_stream_id_bidi	initial_max_stream_id_bidi	Unsigned integer (32 bits)	2.6.0 to 2.6.20
dtls.quic.parameter.initial_max_stream_id_uni	initial_max_stream_id_uni	Unsigned integer (32 bits)	2.6.0 to 2.6.20
dtls.quic.parameter.initial_max_streams_bidi	initial_max_streams_bidi	Unsigned integer (64 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.initial_max_streams_uni	initial_max_streams_uni	Unsigned integer (64 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.initial_source_connection_id	Initial Source Connection ID	Byte sequence	3.4.0 to 4.6.0
dtls.quic.parameter.lengt.old	Length	Unsigned integer (16 bits)	3.4.0 to 4.2.14
dtls.quic.parameter.length	Length	Unsigned integer (64 bits)	2.6.0 to 4.6.0
dtls.quic.parameter.length.old	Length	Unsigned integer (16 bits)	4.4.0 to 4.6.0
dtls.quic.parameter.loss_bits	loss_bits	Unsigned integer (64 bits)	3.2.2 to 4.6.0
dtls.quic.parameter.max_ack_delay	max_ack_delay	Unsigned integer (64 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.max_datagram_frame_size	max_datagram_frame_size	Unsigned integer (64 bits)	3.2.0 to 4.6.0
dtls.quic.parameter.max_idle_timeout	max_idle_timeout	Unsigned integer (64 bits)	3.2.2 to 4.6.0
dtls.quic.parameter.max_packet_size	max_packet_size	Unsigned integer (64 bits)	2.6.0 to 3.2.18
dtls.quic.parameter.max_udp_payload_size	max_udp_payload_size	Unsigned integer (64 bits)	3.4.0 to 4.6.0
dtls.quic.parameter.min_ack_delay	min_ack_delay	Unsigned integer (64 bits)	3.2.2 to 4.6.0
dtls.quic.parameter.ocid	original_connection_id	Byte sequence	3.0.0 to 3.2.18
dtls.quic.parameter.original_destination_connection_id	original_destination_connection_id	Byte sequence	3.4.0 to 4.6.0
dtls.quic.parameter.preferred_address.connectionid	connectionId	Byte sequence	3.0.0 to 4.6.0
dtls.quic.parameter.preferred_address.connectionid.length	Length	Unsigned integer (8 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.preferred_address.ipaddress.length	Length	Unsigned integer (8 bits)	3.0.0 to 3.0.14
dtls.quic.parameter.preferred_address.ipv4address	ipv4Address	IPv4 address	3.0.0 to 4.6.0
dtls.quic.parameter.preferred_address.ipv4port	ipv4Port	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.preferred_address.ipv6address	ipv6Address	IPv6 address	3.0.0 to 4.6.0
dtls.quic.parameter.preferred_address.ipv6port	ipv6Port	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.quic.parameter.preferred_address.ipversion	ipVersion	Unsigned integer (8 bits)	3.0.0 to 3.0.14
dtls.quic.parameter.preferred_address.statelessresettoken	statelessResetToken	Byte sequence	3.0.0 to 4.6.0
dtls.quic.parameter.retry_source_connection_id	Retry Source Connection ID	Byte sequence	3.4.0 to 4.6.0
dtls.quic.parameter.stateless_reset_token	stateless_reset_token	Byte sequence	2.6.0 to 4.6.0
dtls.quic.parameter.type	Type	Unsigned integer (64 bits)	2.6.0 to 4.6.0
dtls.quic.parameter.value	Value	Byte sequence	2.6.0 to 4.6.0
dtls.quic.parameter.vi.chosen_version	Chosen Version	Unsigned integer (32 bits)	4.0.0 to 4.6.0
dtls.quic.parameter.vi.other_version	Other Version	Unsigned integer (32 bits)	4.0.0 to 4.6.0
dtls.quic.parameter.vn.compatible_version	Compatible Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.compatible_version_count	Compatible Version Count	Unsigned integer (64 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.currently_attempted_version	Currently Attempted Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.negotiated_version	Negotiated Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.previously_attempted_version	Previously Attempted Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.received_negotiation_version	Received Negotiation Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.received_negotiation_version_count	Received Negotiation Version Count	Unsigned integer (64 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.supported_version	Supported Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
dtls.quic.parameter.vn.supported_version_count	Supported Version Count	Unsigned integer (64 bits)	3.6.0 to 3.6.24
dtls.quic.supported_versions	Supported Versions	Unsigned integer (32 bits)	2.6.0 to 3.0.14
dtls.quic.supported_versions.len	Supported Versions Length	Unsigned integer (16 bits)	2.6.0 to 3.0.14
dtls.reassembled.in	Reassembled in	Frame number	1.0.0 to 4.6.0
dtls.reassembled.length	Reassembled DTLS length	Unsigned integer (32 bits)	1.4.0 to 4.6.0
dtls.record	Record Layer	Label	1.0.0 to 4.6.0
dtls.record.connection_id	Connection ID	Byte sequence	3.4.0 to 4.6.0
dtls.record.content_type	Content Type	Unsigned integer (8 bits)	1.0.0 to 4.6.0
dtls.record.epoch	Epoch	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.record.length	Length	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.record.length.invalid	Record fragment length is too small or too large	Label	2.4.0 to 4.6.0
dtls.record.sequence_number	Sequence Number	Unsigned integer (64 bits)	1.0.0 to 4.6.0
dtls.record.sequence_suffix	Sequence Number suffix	Unsigned integer (16 bits)	4.4.0 to 4.6.0
dtls.record.sequence_suffix_dec	Sequence Number suffix (decrypted)	Unsigned integer (16 bits)	4.4.0 to 4.6.0
dtls.record.special_type	Special Type	Unsigned integer (8 bits)	3.4.0 to 4.6.0
dtls.record.version	Version	Unsigned integer (16 bits)	1.0.0 to 4.6.0
dtls.record_size_limit	Record Size Limit	Unsigned integer (16 bits)	3.0.0 to 4.6.0
dtls.resumed	This session reuses previously negotiated keys (Session resumption)	Label	2.0.0 to 4.6.0
dtls.sct.sct_extensions	Extensions	Label	2.4.0 to 4.6.0
dtls.sct.sct_extensions_length	Extensions length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.sct.sct_length	Serialized SCT Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.sct.sct_logid	Log ID	Byte sequence	2.4.0 to 4.6.0
dtls.sct.sct_signature	Signature	Byte sequence	2.4.0 to 4.6.0
dtls.sct.sct_signature_length	Signature Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.sct.sct_timestamp	Timestamp	Date and time	2.4.0 to 4.6.0
dtls.sct.sct_version	SCT Version	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.sct.scts_length	Serialized SCT List Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.stream	Stream index	Unsigned integer (32 bits)	4.6.0
dtls.token_binding.key_parameter	Key Parameter	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.token_binding.key_parameters	Key Parameters	Label	4.2.0 to 4.6.0
dtls.token_binding.key_parameters_length	Key Parameters Length	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.token_binding.version_major	Protocol Major Version	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.token_binding.version_minor	Protocol Minor Version	Unsigned integer (8 bits)	4.2.0 to 4.6.0
dtls.unified_header.bitmask	Unified header bitmask	Unsigned integer (8 bits)	4.4.0 to 4.6.0
dtls.unified_header.cid_present	CID field	Boolean	4.4.0 to 4.6.0
dtls.unified_header.epoch_bits	Epoch lowest-order bits	Unsigned integer (8 bits)	4.4.0 to 4.6.0
dtls.unified_header.fixed	Fixed bits	Unsigned integer (8 bits)	4.4.0 to 4.6.0
dtls.unified_header.length	Length field	Boolean	4.4.0 to 4.6.0
dtls.unified_header.seq_size	Sequence number size	Boolean	4.4.0 to 4.6.0
dtls.use_srtp.mki	MKI	Byte sequence	2.4.0 to 4.6.0
dtls.use_srtp.mki_length	MKI Length	Unsigned integer (8 bits)	2.4.0 to 4.6.0
dtls.use_srtp.protection_profile	SRTP Protection Profile	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.use_srtp.protection_profiles_length	SRTP Protection Profiles Length	Unsigned integer (16 bits)	2.4.0 to 4.6.0
dtls.use_srtp.protection_profiles_length.invalid	Invalid protection profiles length	Label	4.0.0 to 4.6.0