Display Filter Reference: Hypertext Transfer Protocol

Protocol field name: http

Versions: 1.0.0 to 1.12.6

Back to Display Filter Reference

Field name Description Type Versions
http.accept Accept Character string 1.0.0 to 1.12.6
http.accept_encoding Accept Encoding Character string 1.0.0 to 1.12.6
http.accept_language Accept-Language Character string 1.0.0 to 1.12.6
http.authbasic Credentials Character string 1.0.0 to 1.12.6
http.authorization Authorization Character string 1.0.0 to 1.12.6
http.cache_control Cache-Control Character string 1.0.0 to 1.12.6
http.chat Expert Info Label 1.12.0 to 1.12.6
http.chunkd_and_length Expert Info Label 1.12.0 to 1.12.6
http.chunked_trailer_part trailer-part Character string 1.12.4 to 1.12.6
http.connection Connection Character string 1.0.0 to 1.12.6
http.content_encoding Content-Encoding Character string 1.0.0 to 1.12.6
http.content_length Content length Unsigned integer, 8 bytes 1.0.0 to 1.12.6
http.content_length_header Content-Length Character string 1.0.5 to 1.12.6
http.content_type Content-Type Character string 1.0.0 to 1.12.6
http.cookie Cookie Character string 1.0.0 to 1.12.6
http.cookie_pair Cookie pair Character string 1.12.0 to 1.12.6
http.date Date Character string 1.0.0 to 1.12.6
http.host Host Character string 1.0.0 to 1.12.6
http.last_modified Last-Modified Character string 1.0.0 to 1.12.6
http.location Location Character string 1.0.0 to 1.12.6
http.next_request_in Next request in frame Frame number 1.10.0 to 1.12.6
http.next_response_in Next response in frame Frame number 1.10.0 to 1.12.6
http.notification Notification Boolean 1.0.0 to 1.12.6
http.prev_request_in Prev request in frame Frame number 1.10.0 to 1.12.6
http.prev_response_in Prev response in frame Frame number 1.10.0 to 1.12.6
http.proxy_authenticate Proxy-Authenticate Character string 1.0.0 to 1.12.6
http.proxy_authorization Proxy-Authorization Character string 1.0.0 to 1.12.6
http.proxy_connect_host Proxy-Connect-Hostname Character string 1.0.0 to 1.12.6
http.proxy_connect_port Proxy-Connect-Port Unsigned integer, 2 bytes 1.0.0 to 1.12.6
http.referer Referer Character string 1.0.0 to 1.12.6
http.request Request Boolean 1.0.0 to 1.12.6
http.request.full_uri Full request URI Character string 1.6.0 to 1.12.6
http.request.line Request line Character string 1.12.0 to 1.12.6
http.request.method Request Method Character string 1.0.0 to 1.12.6
http.request.uri Request URI Character string 1.0.0 to 1.12.6
http.request.version Request Version Character string 1.0.0 to 1.12.6
http.request_in Request in frame Frame number 1.10.0 to 1.12.6
http.response Response Boolean 1.0.0 to 1.12.6
http.response.code Status Code Unsigned integer, 2 bytes 1.0.0 to 1.12.6
http.response.line Response line Character string 1.12.0 to 1.12.6
http.response.phrase Response Phrase Character string 1.6.0 to 1.12.6
http.response_in Response in frame Frame number 1.10.0 to 1.12.6
http.sec_websocket_accept Sec-WebSocket-Accept Character string 1.8.0 to 1.12.6
http.sec_websocket_extensions Sec-WebSocket-Extensions Character string 1.8.0 to 1.12.6
http.sec_websocket_key Sec-WebSocket-Key Character string 1.8.0 to 1.12.6
http.sec_websocket_protocol Sec-WebSocket-Protocol Character string 1.8.0 to 1.12.6
http.sec_websocket_version Sec-WebSocket-Version Character string 1.8.0 to 1.12.6
http.server Server Character string 1.0.0 to 1.12.6
http.set_cookie Set-Cookie Character string 1.0.0 to 1.12.6
http.subdissector_failed Expert Info Label 1.12.0 to 1.12.6
http.time Time since request Time offset 1.10.0 to 1.12.6
http.transfer_encoding Transfer-Encoding Character string 1.0.0 to 1.12.6
http.upgrade Upgrade Character string 1.8.0 to 1.12.6
http.user_agent User-Agent Character string 1.0.0 to 1.12.6
http.www_authenticate WWW-Authenticate Character string 1.0.0 to 1.12.6
http.x_forwarded_for X-Forwarded-For Character string 1.0.0 to 1.12.6
Enhance Wireshark

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products.

802.11 Packet Capture

Riverbed AirPcap
  • WLAN packet capture and transmission
  • Full 802.11 a/b/g/n support
  • View management, control and data frames
  • Multi-channel aggregation (with multiple adapters)

Learn More

Buy Now

Packet Analysis Made Easy

    SteelCentral Packet Analyzer Personal Edition graphs
  • Visually rich, powerful LAN analyzer
  • Quickly access very large pcap files
  • Professional, customizable reports
  • Advanced triggers and alerts
  • Fully integrated with Wireshark

Try Packet Analyzer PE FREE for 10 days

Buy Now