Display Filter Reference: Mongo Wire Protocol

Protocol field name: mongo

Versions: 1.6.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
mongo.collection_name Collection Name Character string 1.6.0 to 2.6.5
mongo.commandargs CommandArgs Label 2.4.0 to 2.6.5
mongo.commandname commandName Character string 2.4.0 to 2.6.5
mongo.commandreply CommandReply Label 2.4.0 to 2.6.5
mongo.compression Compression Info Label 2.6.0 to 2.6.5
mongo.compression.compressed_data Compressed Data Label 2.6.0 to 2.6.5
mongo.compression.compressor Compressor Signed integer, 1 byte 2.6.0 to 2.6.5
mongo.compression.original_opcode Original OpCode Signed integer, 4 bytes 2.6.0 to 2.6.5
mongo.compression.original_size Uncompressed Size Signed integer, 4 bytes 2.6.0 to 2.6.5
mongo.compression.unsupported_compressed Unsupported Compressed Data Label 2.6.0 to 2.6.5
mongo.cursor_id Cursor ID Signed integer, 8 bytes 1.6.0 to 2.6.5
mongo.database database Character string 2.4.0 to 2.6.5
mongo.database_name Database Name Character string 1.6.0 to 2.6.5
mongo.delete.flags Delete Flags Label 1.6.0 to 2.6.5
mongo.delete.flags.singleremove Single Remove Boolean 1.6.0 to 2.6.5
mongo.document Document Label 1.8.0 to 2.6.5
mongo.document.empty Empty Document Label 1.8.0 to 2.6.5
mongo.document.length Document length Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.document.length.bad BSON document length bad Label 1.12.0 to 2.6.5
mongo.document.recursion_exceeded BSON document recursion exceeds Label 1.12.0 to 2.6.5
mongo.document.zero Zero Sequence of bytes 1.6.0 to 2.6.5
mongo.documents Documents Sequence of bytes 1.6.0 to 1.6.16
mongo.element.length Length Signed integer, 4 bytes 1.8.0 to 2.6.5
mongo.element.name Element Character string 1.8.0 to 2.6.5
mongo.element.type Type Unsigned integer, 1 byte 1.8.0 to 2.6.5
mongo.element.value Value Boolean 1.8.0 to 1.8.15
mongo.element.value.bool Value Boolean 1.10.0 to 2.6.5
mongo.element.value.bytes Value Sequence of bytes 1.10.0 to 2.6.5
mongo.element.value.db_ptr ObjectID Sequence of bytes 1.8.0 to 2.6.5
mongo.element.value.double Value Floating point (double-precision) 1.10.0 to 2.6.5
mongo.element.value.int Value Signed integer, 4 bytes 1.10.0 to 2.6.5
mongo.element.value.int64 Value Signed integer, 8 bytes 1.10.0 to 2.6.5
mongo.element.value.js_code JavaScript code Label 1.8.0 to 2.6.5
mongo.element.value.js_scope JavaScript scope Label 1.8.0 to 2.6.5
mongo.element.value.length Length Signed integer, 4 bytes 1.8.0 to 2.6.5
mongo.element.value.objectid ObjectID Sequence of bytes 1.8.0 to 2.6.5
mongo.element.value.objectid.inc ObjectID inc Unsigned integer, 3 bytes 1.8.0 to 2.6.5
mongo.element.value.objectid.machine ObjectID Machine Unsigned integer, 3 bytes 1.8.0 to 2.6.5
mongo.element.value.objectid.pid ObjectID PID Unsigned integer, 2 bytes 1.8.0 to 2.6.5
mongo.element.value.objectid.time ObjectID Time Signed integer, 4 bytes 1.8.0 to 2.6.5
mongo.element.value.regex.options Value Character string 1.8.0 to 2.6.5
mongo.element.value.regex.pattern Value Character string 1.8.0 to 2.6.5
mongo.element.value.string Value Character string 1.10.0 to 2.6.5
mongo.elements Elements Label 1.8.0 to 2.6.5
mongo.full_collection_name fullCollectionName Character string 1.6.0 to 2.6.5
mongo.insert.flags Insert Flags Label 1.8.0 to 2.6.5
mongo.insert.flags.continueonerror ContinueOnError Boolean 1.8.0 to 2.6.5
mongo.message Message Character string 1.6.0 to 2.6.5
mongo.message_length Message Length Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.metadata metadata Label 2.4.0 to 2.6.5
mongo.msg.flags Message Flags Unsigned integer, 4 bytes 2.6.0 to 2.6.5
mongo.msg.flags.checksumpresent ChecksumPresent Boolean 2.6.0 to 2.6.5
mongo.msg.flags.exhaustallowed ExhaustAllowed Boolean 2.6.0 to 2.6.5
mongo.msg.flags.moretocome MoreToCome Boolean 2.6.0 to 2.6.5
mongo.msg.sections.section Section Label 2.6.0 to 2.6.5
mongo.msg.sections.section.body BodyDocument Label 2.6.0 to 2.6.5
mongo.msg.sections.section.doc_sequence DocumentSequence Label 2.6.0 to 2.6.5
mongo.msg.sections.section.doc_sequence_id SeqID Character string 2.6.0 to 2.6.5
mongo.msg.sections.section.kind Kind Signed integer, 4 bytes 2.6.0 to 2.6.5
mongo.msg.sections.section.size Size Signed integer, 4 bytes 2.6.0 to 2.6.5
mongo.number_returned Number Returned Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.number_to_cursor_ids Number of Cursor IDS Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.number_to_return Number to Return Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.number_to_skip Number To Skip Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.opcode OpCode Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.outputdocs OutputDocs Label 2.4.0 to 2.6.5
mongo.query Query Label 1.6.0 to 2.6.5
mongo.query.flags Query Flags Label 1.6.0 to 2.6.5
mongo.query.flags.awaitdata AwaitData Boolean 1.6.0 to 2.6.5
mongo.query.flags.exhaust Exhaust Boolean 1.6.0 to 2.6.5
mongo.query.flags.no_cursor_timeout No Cursor Timeout Boolean 1.6.0 to 2.6.5
mongo.query.flags.op_log_reply Op Log Reply Boolean 1.6.0 to 2.6.5
mongo.query.flags.partial Partial Boolean 1.6.0 to 2.6.5
mongo.query.flags.slave_ok Slave OK Boolean 1.6.0 to 2.6.5
mongo.query.flags.tailable_cursor Tailable Cursor Boolean 1.6.0 to 2.6.5
mongo.reply.flags Reply Flags Label 1.6.0 to 2.6.5
mongo.reply.flags.awaitcapable Await Capable Boolean 1.6.0 to 2.6.5
mongo.reply.flags.cursornotfound Cursor Not Found Boolean 1.6.0 to 2.6.5
mongo.reply.flags.queryfailure Query Failure Boolean 1.6.0 to 2.6.5
mongo.reply.flags.sharedconfigstale Shared Config Stale Boolean 1.6.0 to 2.6.5
mongo.request_id Request ID Unsigned integer, 4 bytes 1.6.0 to 2.6.5
mongo.response_to Response To Unsigned integer, 4 bytes 1.6.0 to 2.6.5
mongo.return_field_selector Return Field Selector Label 1.6.0 to 2.6.5
mongo.selector Selector Label 1.6.0 to 2.6.5
mongo.starting_from Starting From Signed integer, 4 bytes 1.6.0 to 2.6.5
mongo.too_large_compressed.expert The size of the uncompressed packet exceeded the maximum allowed value Label 2.6.0 to 2.6.5
mongo.unknown Unknown Sequence of bytes 1.6.0 to 2.6.5
mongo.unknown.expert Unknown Data (not interpreted) Label 1.12.0 to 2.6.5
mongo.unsupported_compression.expert This packet was compressed with an unsupported compressor Label 2.6.0 to 2.6.5
mongo.update Update Label 1.6.0 to 2.6.5
mongo.update.flags Update Flags Label 1.6.0 to 2.6.5
mongo.update.flags.multiupdate Multi Update Boolean 1.6.0 to 2.6.5
mongo.update.flags.upsert Upsert Boolean 1.6.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More