Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Mongo Wire Protocol

Protocol field name: mongo

Versions: 1.6.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
mongo.bad_checksum.expertBad checksumLabel4.2.0 to 4.6.0
mongo.collection_nameCollection NameCharacter string1.6.0 to 4.6.0
mongo.commandargsCommandArgsLabel2.4.0 to 4.6.0
mongo.commandnamecommandNameCharacter string2.4.0 to 4.6.0
mongo.commandreplyCommandReplyLabel2.4.0 to 4.6.0
mongo.compressionCompression InfoLabel2.6.0 to 4.6.0
mongo.compression.compressed_dataCompressed DataLabel2.6.0 to 4.6.0
mongo.compression.compressorCompressorSigned integer (8 bits)2.6.0 to 4.6.0
mongo.compression.original_opcodeOriginal OpCodeSigned integer (32 bits)2.6.0 to 4.6.0
mongo.compression.original_sizeUncompressed SizeSigned integer (32 bits)2.6.0 to 4.6.0
mongo.compression.unsupported_compressedUnsupported Compressed DataLabel2.6.0 to 4.6.0
mongo.cursor_idCursor IDSigned integer (64 bits)1.6.0 to 4.6.0
mongo.databasedatabaseCharacter string2.4.0 to 4.6.0
mongo.database_nameDatabase NameCharacter string1.6.0 to 4.6.0
mongo.delete.flagsDelete FlagsLabel1.6.0 to 4.6.0
mongo.delete.flags.singleremoveSingle RemoveBoolean1.6.0 to 4.6.0
mongo.documentDocumentLabel1.8.0 to 4.6.0
mongo.document.emptyEmpty DocumentLabel1.8.0 to 4.6.0
mongo.document.lengthDocument lengthSigned integer (32 bits)1.6.0 to 4.6.0
mongo.document.length.badBSON document length badLabel1.12.0 to 4.6.0
mongo.document.recursion_exceededBSON document recursion exceedsLabel1.12.0 to 4.6.0
mongo.document.zeroZeroByte sequence1.6.0 to 4.6.0
mongo.documentsDocumentsByte sequence1.6.0 to 1.6.16
mongo.element.lengthLengthSigned integer (32 bits)1.8.0 to 4.6.0
mongo.element.nameElementCharacter string1.8.0 to 4.6.0
mongo.element.typeTypeUnsigned integer (8 bits)1.8.0 to 4.6.0
mongo.element.valueValueBoolean1.8.0 to 1.8.15
mongo.element.value.boolValueBoolean1.10.0 to 4.6.0
mongo.element.value.bytesValueByte sequence1.10.0 to 4.6.0
mongo.element.value.db_ptrObjectIDByte sequence1.8.0 to 4.6.0
mongo.element.value.decimal128ValueByte sequence4.2.0 to 4.6.0
mongo.element.value.doubleValueFloating point (double-precision)1.10.0 to 4.6.0
mongo.element.value.intValueSigned integer (32 bits)1.10.0 to 4.6.0
mongo.element.value.int64ValueSigned integer (64 bits)1.10.0 to 4.6.0
mongo.element.value.js_codeJavaScript codeLabel1.8.0 to 4.6.0
mongo.element.value.js_scopeJavaScript scopeLabel1.8.0 to 4.6.0
mongo.element.value.lengthLengthSigned integer (32 bits)1.8.0 to 4.6.0
mongo.element.value.objectidObjectIDByte sequence1.8.0 to 4.6.0
mongo.element.value.objectid.hostObjectID HostUnsigned integer (24 bits)3.0.0 to 4.6.0
mongo.element.value.objectid.incObjectID IncUnsigned integer (24 bits)1.8.0 to 4.6.0
mongo.element.value.objectid.machineObjectID MachineUnsigned integer (24 bits)1.8.0 to 2.6.20
mongo.element.value.objectid.machine_idObjectID MachineByte sequence3.0.0 to 4.6.0
mongo.element.value.objectid.pidObjectID PIDUnsigned integer (16 bits)1.8.0 to 4.6.0
mongo.element.value.objectid.timeObjectID TimeSigned integer (32 bits)1.8.0 to 4.6.0
mongo.element.value.regex.optionsValueCharacter string1.8.0 to 4.6.0
mongo.element.value.regex.patternValueCharacter string1.8.0 to 4.6.0
mongo.element.value.stringValueCharacter string1.10.0 to 4.6.0
mongo.elementsElementsLabel1.8.0 to 4.6.0
mongo.full_collection_namefullCollectionNameCharacter string1.6.0 to 4.6.0
mongo.insert.flagsInsert FlagsLabel1.8.0 to 4.6.0
mongo.insert.flags.continueonerrorContinueOnErrorBoolean1.8.0 to 4.6.0
mongo.messageMessageCharacter string1.6.0 to 4.6.0
mongo.message_lengthMessage LengthSigned integer (32 bits)1.6.0 to 4.6.0
mongo.metadatametadataLabel2.4.0 to 4.6.0
mongo.msg.checksumChecksumUnsigned integer (32 bits)4.2.0 to 4.6.0
mongo.msg.checksum.statusChecksum StatusUnsigned integer (8 bits)4.2.0 to 4.6.0
mongo.msg.flagsMessage FlagsUnsigned integer (32 bits)2.6.0 to 4.6.0
mongo.msg.flags.checksumpresentChecksumPresentBoolean2.6.0 to 4.6.0
mongo.msg.flags.exhaustallowedExhaustAllowedBoolean2.6.0 to 4.6.0
mongo.msg.flags.moretocomeMoreToComeBoolean2.6.0 to 4.6.0
mongo.msg.sections.sectionSectionLabel2.6.0 to 4.6.0
mongo.msg.sections.section.bodyBodyDocumentLabel2.6.0 to 4.6.0
mongo.msg.sections.section.doc_sequenceDocumentSequenceLabel2.6.0 to 4.6.0
mongo.msg.sections.section.doc_sequence_idSeqIDCharacter string2.6.0 to 4.6.0
mongo.msg.sections.section.kindKindSigned integer (32 bits)2.6.0 to 4.6.0
mongo.msg.sections.section.sizeSizeSigned integer (32 bits)2.6.0 to 4.6.0
mongo.msg.sections.section.size.badBogus Mongo message section sizeLabel4.2.14, 4.4.10 to 4.6.0
mongo.number_returnedNumber ReturnedSigned integer (32 bits)1.6.0 to 4.6.0
mongo.number_to_cursor_idsNumber of Cursor IDSSigned integer (32 bits)1.6.0 to 4.6.0
mongo.number_to_returnNumber to ReturnSigned integer (32 bits)1.6.0 to 4.6.0
mongo.number_to_skipNumber To SkipSigned integer (32 bits)1.6.0 to 4.6.0
mongo.opcodeOpCodeSigned integer (32 bits)1.6.0 to 4.6.0
mongo.outputdocsOutputDocsLabel2.4.0 to 4.6.0
mongo.queryQueryLabel1.6.0 to 4.6.0
mongo.query.flagsQuery FlagsLabel1.6.0 to 4.6.0
mongo.query.flags.awaitdataAwaitDataBoolean1.6.0 to 4.6.0
mongo.query.flags.exhaustExhaustBoolean1.6.0 to 4.6.0
mongo.query.flags.no_cursor_timeoutNo Cursor TimeoutBoolean1.6.0 to 4.6.0
mongo.query.flags.op_log_replyOp Log ReplyBoolean1.6.0 to 4.6.0
mongo.query.flags.partialPartialBoolean1.6.0 to 4.6.0
mongo.query.flags.slave_okSlave OKBoolean1.6.0 to 4.6.0
mongo.query.flags.tailable_cursorTailable CursorBoolean1.6.0 to 4.6.0
mongo.reply.flagsReply FlagsLabel1.6.0 to 4.6.0
mongo.reply.flags.awaitcapableAwait CapableBoolean1.6.0 to 4.6.0
mongo.reply.flags.cursornotfoundCursor Not FoundBoolean1.6.0 to 4.6.0
mongo.reply.flags.queryfailureQuery FailureBoolean1.6.0 to 4.6.0
mongo.reply.flags.sharedconfigstaleShared Config StaleBoolean1.6.0 to 4.6.0
mongo.request_idRequest IDUnsigned integer (32 bits)1.6.0 to 4.6.0
mongo.response_toResponse ToUnsigned integer (32 bits)1.6.0 to 4.6.0
mongo.return_field_selectorReturn Field SelectorLabel1.6.0 to 4.6.0
mongo.selectorSelectorLabel1.6.0 to 4.6.0
mongo.starting_fromStarting FromSigned integer (32 bits)1.6.0 to 4.6.0
mongo.too_large_compressed.expertThe size of the uncompressed packet exceeded the maximum allowed valueLabel2.6.0 to 4.6.0
mongo.unknownUnknownByte sequence1.6.0 to 4.6.0
mongo.unknown.expertUnknown Data (not interpreted)Label1.12.0 to 4.6.0
mongo.unsupported_compression.expertThis packet was compressed with an unsupported compressorLabel2.6.0 to 4.6.0
mongo.updateUpdateLabel1.6.0 to 4.6.0
mongo.update.flagsUpdate FlagsLabel1.6.0 to 4.6.0
mongo.update.flags.multiupdateMulti UpdateBoolean1.6.0 to 4.6.0
mongo.update.flags.upsertUpsertBoolean1.6.0 to 4.6.0