Wireshark · Display Filter Reference: SSH Protocol

Display Filter Reference: SSH Protocol

Protocol field name: ssh

Versions: 1.0.0 to 4.2.0

Field name	Description	Type	Versions
ssh.auth_failure_cont_list	Authentications that can continue list	Character string	4.0.0 to 4.2.0
ssh.auth_failure_cont_list_length	Authentications that can continue list len	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.blob.ssh-rsa.e	ssh-rsa public exponent (e)	Byte sequence	4.0.0 to 4.2.0
ssh.blob.ssh-rsa.n	ssh-rsa modulus (n)	Byte sequence	4.0.0 to 4.2.0
ssh.channel_data_length	Data length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.channel_request_want_reply	Channel request want reply	Unsigned integer (8 bits)	4.0.0 to 4.2.0
ssh.channel_window_adjust	Bytes to add	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.compression_algorithms_client_to_server	compression_algorithms_client_to_server string	Character string	1.0.0 to 4.2.0
ssh.compression_algorithms_client_to_server_length	compression_algorithms_client_to_server length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.compression_algorithms_server_to_client	compression_algorithms_server_to_client string	Character string	1.0.0 to 4.2.0
ssh.compression_algorithms_server_to_client_length	compression_algorithms_server_to_client length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.connection_initial_window_size	Initial window size	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.connection_recipient_channel	Recipient channel	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.connection_sender_channel	Sender channel	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.connection_type_name	Channel type name	Character string	4.0.0 to 4.2.0
ssh.connection_type_name_length	Channel type name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.cookie	Cookie	Byte sequence	1.0.0 to 4.2.0
ssh.debug_always_display	Always Display	Boolean	4.0.0 to 4.2.0
ssh.debug_name	Debug message	Character string	4.0.0 to 4.2.0
ssh.debug_name_length	Debug message length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.dh.e	DH client e	Byte sequence	1.2.0 to 4.2.0
ssh.dh.f	DH server f	Byte sequence	1.2.0 to 4.2.0
ssh.dh.g	DH base (G)	Byte sequence	1.2.0 to 2.2.17
ssh.dh.p	DH modulus (P)	Byte sequence	1.2.0 to 2.2.17
ssh.dh_gex.g	DH GEX base (G)	Byte sequence	2.4.0 to 4.2.0
ssh.dh_gex.max	DH GEX Max	Unsigned integer (32 bits)	1.2.0 to 4.2.0
ssh.dh_gex.min	DH GEX Min	Unsigned integer (32 bits)	1.2.0 to 4.2.0
ssh.dh_gex.nbits	DH GEX Number of Bits	Unsigned integer (32 bits)	1.2.0 to 4.2.0
ssh.dh_gex.p	DH GEX modulus (P)	Byte sequence	2.4.0 to 4.2.0
ssh.direction	Direction	Boolean	3.2.0 to 4.2.0
ssh.disconnect_description	Disconnect description	Character string	4.0.0 to 4.2.0
ssh.disconnect_description_length	Disconnect description length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.disconnect_reason	Disconnect reason	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.ecdh.q_c	ECDH client's ephemeral public key (Q_C)	Byte sequence	2.4.0 to 4.2.0
ssh.ecdh.q_c_length	ECDH client's ephemeral public key length	Unsigned integer (32 bits)	2.4.0 to 4.2.0
ssh.ecdh.q_s	ECDH server's ephemeral public key (Q_S)	Byte sequence	2.4.0 to 4.2.0
ssh.ecdh.q_s_length	ECDH server's ephemeral public key length	Unsigned integer (32 bits)	2.4.0 to 4.2.0
ssh.encrypted_packet	Encrypted Packet	Byte sequence	1.0.0 to 4.2.0
ssh.encryption_algorithms_client_to_server	encryption_algorithms_client_to_server string	Character string	1.0.0 to 4.2.0
ssh.encryption_algorithms_client_to_server_length	encryption_algorithms_client_to_server length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.encryption_algorithms_server_to_client	encryption_algorithms_server_to_client string	Character string	1.0.0 to 4.2.0
ssh.encryption_algorithms_server_to_client_length	encryption_algorithms_server_to_client length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.exit_status	Exit status	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.first_kex_packet_follows	First KEX Packet Follows	Unsigned integer (8 bits)	2.4.0 to 4.2.0
ssh.global_request_hostkeys	Host keys array length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.global_request_name	Global request name	Character string	4.0.0 to 4.2.0
ssh.global_request_name_length	Global request name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.global_request_want_reply	Global request want reply	Unsigned integer (8 bits)	4.0.0 to 4.2.0
ssh.host_key.data	Host key data	Byte sequence	2.2.0 to 4.2.0
ssh.host_key.dsa.g	DSA subgroup generator (g)	Byte sequence	2.4.0 to 4.2.0
ssh.host_key.dsa.p	DSA prime modulus (p)	Byte sequence	2.4.0 to 4.2.0
ssh.host_key.dsa.q	DSA prime divisor (q)	Byte sequence	2.4.0 to 4.2.0
ssh.host_key.dsa.y	DSA public key (y)	Byte sequence	2.4.0 to 4.2.0
ssh.host_key.ecdsa.id	ECDSA elliptic curve identifier	Character string	2.4.0 to 4.2.0
ssh.host_key.ecdsa.id_length	ECDSA elliptic curve identifier length	Unsigned integer (32 bits)	2.4.0 to 4.2.0
ssh.host_key.ecdsa.q	ECDSA public key (Q)	Byte sequence	2.4.0 to 4.2.0
ssh.host_key.ecdsa.q_length	ECDSA public key length	Unsigned integer (32 bits)	2.4.0 to 4.2.0
ssh.host_key.eddsa.key	EdDSA public key	Byte sequence	3.4.0 to 4.2.0
ssh.host_key.eddsa.key_length	EdDSA public key length	Unsigned integer (32 bits)	3.4.0 to 4.2.0
ssh.host_key.length	Host key length	Unsigned integer (32 bits)	2.2.0 to 4.2.0
ssh.host_key.rsa.e	RSA public exponent (e)	Byte sequence	2.2.0 to 4.2.0
ssh.host_key.rsa.n	RSA modulus (N)	Byte sequence	2.2.0 to 4.2.0
ssh.host_key.type	Host key type	Character string	2.2.0 to 4.2.0
ssh.host_key.type_length	Host key type length	Unsigned integer (32 bits)	3.0.0 to 4.2.0
ssh.host_sig.data	Host signature data	Byte sequence	4.0.0 to 4.2.0
ssh.host_sig.dsa	DSA signature	Byte sequence	4.0.0 to 4.2.0
ssh.host_sig.length	Host signature length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.host_sig.rsa	RSA signature	Byte sequence	4.0.0 to 4.2.0
ssh.host_sig.type	Host signature type	Character string	4.0.0 to 4.2.0
ssh.host_sig.type_length	Host signature type length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.ignore_data	Ignore data	Byte sequence	4.0.0 to 4.2.0
ssh.ignore_data_length	Debug message length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.kex.first_packet_follows	KEX First Packet Follows	Unsigned integer (8 bits)	1.2.0 to 2.2.17
ssh.kex.h_sig	KEX H signature	Byte sequence	2.4.0 to 3.6.18
ssh.kex.h_sig_length	KEX H signature length	Unsigned integer (32 bits)	2.4.0 to 3.6.18
ssh.kex.hassh	hassh	Character string	3.6.0 to 4.2.0
ssh.kex.hassh_algorithms	hasshAlgorithms	Character string	3.6.0 to 4.2.0
ssh.kex.hasshserver	hasshServer	Character string	3.6.0 to 4.2.0
ssh.kex.hasshserver_algorithms	hasshServerAlgorithms	Character string	3.6.0 to 4.2.0
ssh.kex.reserved	Reserved	Byte sequence	1.2.0 to 4.2.0
ssh.kex_algorithms	kex_algorithms string	Character string	1.0.0 to 4.2.0
ssh.kex_algorithms_length	kex_algorithms length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.kexdh.h_sig	KEX DH H signature	Byte sequence	1.2.0 to 2.2.17
ssh.kexdh.h_sig_length	KEX DH H signature length	Unsigned integer (32 bits)	1.2.0 to 2.2.17
ssh.kexdh.host_key	KEX DH host key	Byte sequence	1.2.0 to 2.2.17
ssh.kexdh.host_key_length	KEX DH host key length	Unsigned integer (32 bits)	1.2.0 to 2.0.16
ssh.key_length.error	Invalid key length	Label	4.0.0 to 4.2.0
ssh.lang_tag	Language tag	Character string	4.0.0 to 4.2.0
ssh.lang_tag_length	Language tag length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.languages_client_to_server	languages_client_to_server string	Character string	1.0.0 to 4.2.0
ssh.languages_client_to_server_length	languages_client_to_server length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.languages_server_to_client	languages_server_to_client string	Character string	1.0.0 to 4.2.0
ssh.languages_server_to_client_length	languages_server_to_client length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.mac	MAC	Byte sequence	1.2.0 to 4.2.0
ssh.mac.status	MAC Status	Unsigned integer (8 bits)	4.0.0 to 4.2.0
ssh.mac_algorithms_client_to_server	mac_algorithms_client_to_server string	Character string	1.0.0 to 4.2.0
ssh.mac_algorithms_client_to_server_length	mac_algorithms_client_to_server length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.mac_algorithms_server_to_client	mac_algorithms_server_to_client string	Character string	1.0.0 to 4.2.0
ssh.mac_algorithms_server_to_client_length	mac_algorithms_server_to_client length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.mac_bad.expert	Bad MAC	Label	4.0.0 to 4.2.0
ssh.mac_string	MAC String	Character string	1.0.0 to 1.0.16
ssh.message_code	Message Code	Unsigned integer (8 bits)	1.0.0 to 4.2.0
ssh.mpint_length	Multi Precision Integer Length	Unsigned integer (32 bits)	1.2.0 to 4.2.0
ssh.packet_decode.error	Packet decoded length not equal to packet length	Label	4.0.0 to 4.2.0
ssh.packet_length	Packet Length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.packet_length.error	Overly large number	Label	1.12.0 to 4.2.0
ssh.packet_length_encrypted	Packet Length (encrypted)	Byte sequence	1.12.0 to 4.2.0
ssh.padding_length	Padding Length	Unsigned integer (8 bits)	1.0.0 to 4.2.0
ssh.padding_string	Padding String	Byte sequence	1.0.0 to 4.2.0
ssh.payload	Payload	Byte sequence	1.0.0 to 4.2.0
ssh.pk_blob_length	Public key blob length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.pk_blob_name	Public key blob algorithm name	Character string	4.0.0 to 4.2.0
ssh.pk_blob_name_length	Public key blob algorithm name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.pk_sig_blob_length	Public key signature blob length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.pk_sig_blob_name	Public key signature blob algorithm name	Character string	4.0.0 to 4.2.0
ssh.pk_sig_blob_name_length	Public key signature blob algorithm name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.protocol	Protocol	Character string	1.0.0 to 4.2.0
ssh.seq_num	Sequence number	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.server_host_key_algorithms	server_host_key_algorithms string	Character string	1.0.0 to 4.2.0
ssh.server_host_key_algorithms_length	server_host_key_algorithms length	Unsigned integer (32 bits)	1.0.0 to 4.2.0
ssh.service_name	Service Name	Character string	4.0.0 to 4.2.0
ssh.service_name_length	Service Name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.sig.ssh-rsa.length	ssh-rsa signature length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.sig.ssh-rsa.s	ssh-rsa signature (s)	Byte sequence	4.0.0 to 4.2.0
ssh.subsystem_name	Subsystem name	Character string	4.0.0 to 4.2.0
ssh.subsystem_name_length	Subsystem name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth.change_password	Change password	Boolean	4.0.0 to 4.2.0
ssh.userauth.have_signature	Have signature	Boolean	4.0.0 to 4.2.0
ssh.userauth.partial_success	Partial success	Boolean	4.0.0 to 4.2.0
ssh.userauth_maximum_packet_size	Maximum packet size	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth_method_name	Method Name	Character string	4.0.0 to 4.2.0
ssh.userauth_method_name_length	Method Name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth_new_password	New password	Character string	4.0.0 to 4.2.0
ssh.userauth_new_password_length	New password length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth_password	Password	Character string	4.0.0 to 4.2.0
ssh.userauth_password_length	Password length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth_pka_name	Public key algorithm name	Character string	4.0.0 to 4.2.0
ssh.userauth_pka_name_length	Public key algorithm name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth_service_name	Service Name	Character string	4.0.0 to 4.2.0
ssh.userauth_service_name_length	Service Name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0
ssh.userauth_user_name	User Name	Character string	4.0.0 to 4.2.0
ssh.userauth_user_name_length	User Name length	Unsigned integer (32 bits)	4.0.0 to 4.2.0