ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Display Filter Reference: SSH Protocol

Protocol field name: ssh

Versions: 1.0.0 to 4.2.5

Back to Display Filter Reference

Field name Description Type Versions
ssh.auth_failure_cont_listAuthentications that can continue listCharacter string4.0.0 to 4.2.5
ssh.auth_failure_cont_list_lengthAuthentications that can continue list lenUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.blob.ssh-rsa.essh-rsa public exponent (e)Byte sequence4.0.0 to 4.2.5
ssh.blob.ssh-rsa.nssh-rsa modulus (n)Byte sequence4.0.0 to 4.2.5
ssh.channel_data_lengthData lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.channel_request_want_replyChannel request want replyUnsigned integer (8 bits)4.0.0 to 4.2.5
ssh.channel_window_adjustBytes to addUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.compression_algorithms_client_to_servercompression_algorithms_client_to_server stringCharacter string1.0.0 to 4.2.5
ssh.compression_algorithms_client_to_server_lengthcompression_algorithms_client_to_server lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.compression_algorithms_server_to_clientcompression_algorithms_server_to_client stringCharacter string1.0.0 to 4.2.5
ssh.compression_algorithms_server_to_client_lengthcompression_algorithms_server_to_client lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.connection_initial_window_sizeInitial window sizeUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.connection_recipient_channelRecipient channelUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.connection_sender_channelSender channelUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.connection_type_nameChannel type nameCharacter string4.0.0 to 4.2.5
ssh.connection_type_name_lengthChannel type name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.cookieCookieByte sequence1.0.0 to 4.2.5
ssh.debug_always_displayAlways DisplayBoolean4.0.0 to 4.2.5
ssh.debug_nameDebug messageCharacter string4.0.0 to 4.2.5
ssh.debug_name_lengthDebug message lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.dh.eDH client eByte sequence1.2.0 to 4.2.5
ssh.dh.fDH server fByte sequence1.2.0 to 4.2.5
ssh.dh.gDH base (G)Byte sequence1.2.0 to 2.2.17
ssh.dh.pDH modulus (P)Byte sequence1.2.0 to 2.2.17
ssh.dh_gex.gDH GEX base (G)Byte sequence2.4.0 to 4.2.5
ssh.dh_gex.maxDH GEX MaxUnsigned integer (32 bits)1.2.0 to 4.2.5
ssh.dh_gex.minDH GEX MinUnsigned integer (32 bits)1.2.0 to 4.2.5
ssh.dh_gex.nbitsDH GEX Number of BitsUnsigned integer (32 bits)1.2.0 to 4.2.5
ssh.dh_gex.pDH GEX modulus (P)Byte sequence2.4.0 to 4.2.5
ssh.directionDirectionBoolean3.2.0 to 4.2.5
ssh.disconnect_descriptionDisconnect descriptionCharacter string4.0.0 to 4.2.5
ssh.disconnect_description_lengthDisconnect description lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.disconnect_reasonDisconnect reasonUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.ecdh.q_cECDH client's ephemeral public key (Q_C)Byte sequence2.4.0 to 4.2.5
ssh.ecdh.q_c_lengthECDH client's ephemeral public key lengthUnsigned integer (32 bits)2.4.0 to 4.2.5
ssh.ecdh.q_sECDH server's ephemeral public key (Q_S)Byte sequence2.4.0 to 4.2.5
ssh.ecdh.q_s_lengthECDH server's ephemeral public key lengthUnsigned integer (32 bits)2.4.0 to 4.2.5
ssh.encrypted_packetEncrypted PacketByte sequence1.0.0 to 4.2.5
ssh.encryption_algorithms_client_to_serverencryption_algorithms_client_to_server stringCharacter string1.0.0 to 4.2.5
ssh.encryption_algorithms_client_to_server_lengthencryption_algorithms_client_to_server lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.encryption_algorithms_server_to_clientencryption_algorithms_server_to_client stringCharacter string1.0.0 to 4.2.5
ssh.encryption_algorithms_server_to_client_lengthencryption_algorithms_server_to_client lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.exit_statusExit statusUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.first_kex_packet_followsFirst KEX Packet FollowsUnsigned integer (8 bits)2.4.0 to 4.2.5
ssh.global_request_hostkeysHost keys array lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.global_request_nameGlobal request nameCharacter string4.0.0 to 4.2.5
ssh.global_request_name_lengthGlobal request name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.global_request_want_replyGlobal request want replyUnsigned integer (8 bits)4.0.0 to 4.2.5
ssh.host_key.dataHost key dataByte sequence2.2.0 to 4.2.5
ssh.host_key.dsa.gDSA subgroup generator (g)Byte sequence2.4.0 to 4.2.5
ssh.host_key.dsa.pDSA prime modulus (p)Byte sequence2.4.0 to 4.2.5
ssh.host_key.dsa.qDSA prime divisor (q)Byte sequence2.4.0 to 4.2.5
ssh.host_key.dsa.yDSA public key (y)Byte sequence2.4.0 to 4.2.5
ssh.host_key.ecdsa.idECDSA elliptic curve identifierCharacter string2.4.0 to 4.2.5
ssh.host_key.ecdsa.id_lengthECDSA elliptic curve identifier lengthUnsigned integer (32 bits)2.4.0 to 4.2.5
ssh.host_key.ecdsa.qECDSA public key (Q)Byte sequence2.4.0 to 4.2.5
ssh.host_key.ecdsa.q_lengthECDSA public key lengthUnsigned integer (32 bits)2.4.0 to 4.2.5
ssh.host_key.eddsa.keyEdDSA public keyByte sequence3.4.0 to 4.2.5
ssh.host_key.eddsa.key_lengthEdDSA public key lengthUnsigned integer (32 bits)3.4.0 to 4.2.5
ssh.host_key.lengthHost key lengthUnsigned integer (32 bits)2.2.0 to 4.2.5
ssh.host_key.rsa.eRSA public exponent (e)Byte sequence2.2.0 to 4.2.5
ssh.host_key.rsa.nRSA modulus (N)Byte sequence2.2.0 to 4.2.5
ssh.host_key.typeHost key typeCharacter string2.2.0 to 4.2.5
ssh.host_key.type_lengthHost key type lengthUnsigned integer (32 bits)3.0.0 to 4.2.5
ssh.host_sig.dataHost signature dataByte sequence4.0.0 to 4.2.5
ssh.host_sig.dsaDSA signatureByte sequence4.0.0 to 4.2.5
ssh.host_sig.lengthHost signature lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.host_sig.rsaRSA signatureByte sequence4.0.0 to 4.2.5
ssh.host_sig.typeHost signature typeCharacter string4.0.0 to 4.2.5
ssh.host_sig.type_lengthHost signature type lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.ignore_dataIgnore dataByte sequence4.0.0 to 4.2.5
ssh.ignore_data_lengthDebug message lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.kex.first_packet_followsKEX First Packet FollowsUnsigned integer (8 bits)1.2.0 to 2.2.17
ssh.kex.h_sigKEX H signatureByte sequence2.4.0 to 3.6.24
ssh.kex.h_sig_lengthKEX H signature lengthUnsigned integer (32 bits)2.4.0 to 3.6.24
ssh.kex.hasshhasshCharacter string3.6.0 to 4.2.5
ssh.kex.hassh_algorithmshasshAlgorithmsCharacter string3.6.0 to 4.2.5
ssh.kex.hasshserverhasshServerCharacter string3.6.0 to 4.2.5
ssh.kex.hasshserver_algorithmshasshServerAlgorithmsCharacter string3.6.0 to 4.2.5
ssh.kex.reservedReservedByte sequence1.2.0 to 4.2.5
ssh.kex_algorithmskex_algorithms stringCharacter string1.0.0 to 4.2.5
ssh.kex_algorithms_lengthkex_algorithms lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.kexdh.h_sigKEX DH H signatureByte sequence1.2.0 to 2.2.17
ssh.kexdh.h_sig_lengthKEX DH H signature lengthUnsigned integer (32 bits)1.2.0 to 2.2.17
ssh.kexdh.host_keyKEX DH host keyByte sequence1.2.0 to 2.2.17
ssh.kexdh.host_key_lengthKEX DH host key lengthUnsigned integer (32 bits)1.2.0 to 2.0.16
ssh.key_length.errorInvalid key lengthLabel4.0.0 to 4.2.5
ssh.lang_tagLanguage tagCharacter string4.0.0 to 4.2.5
ssh.lang_tag_lengthLanguage tag lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.languages_client_to_serverlanguages_client_to_server stringCharacter string1.0.0 to 4.2.5
ssh.languages_client_to_server_lengthlanguages_client_to_server lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.languages_server_to_clientlanguages_server_to_client stringCharacter string1.0.0 to 4.2.5
ssh.languages_server_to_client_lengthlanguages_server_to_client lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.macMACByte sequence1.2.0 to 4.2.5
ssh.mac.statusMAC StatusUnsigned integer (8 bits)4.0.0 to 4.2.5
ssh.mac_algorithms_client_to_servermac_algorithms_client_to_server stringCharacter string1.0.0 to 4.2.5
ssh.mac_algorithms_client_to_server_lengthmac_algorithms_client_to_server lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.mac_algorithms_server_to_clientmac_algorithms_server_to_client stringCharacter string1.0.0 to 4.2.5
ssh.mac_algorithms_server_to_client_lengthmac_algorithms_server_to_client lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.mac_bad.expertBad MACLabel4.0.0 to 4.2.5
ssh.mac_stringMAC StringCharacter string1.0.0 to 1.0.16
ssh.message_codeMessage CodeUnsigned integer (8 bits)1.0.0 to 4.2.5
ssh.mpint_lengthMulti Precision Integer LengthUnsigned integer (32 bits)1.2.0 to 4.2.5
ssh.packet_decode.errorPacket decoded length not equal to packet lengthLabel4.0.0 to 4.2.5
ssh.packet_lengthPacket LengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.packet_length.errorOverly large numberLabel1.12.0 to 4.2.5
ssh.packet_length_encryptedPacket Length (encrypted)Byte sequence1.12.0 to 4.2.5
ssh.padding_lengthPadding LengthUnsigned integer (8 bits)1.0.0 to 4.2.5
ssh.padding_stringPadding StringByte sequence1.0.0 to 4.2.5
ssh.payloadPayloadByte sequence1.0.0 to 4.2.5
ssh.pk_blob_lengthPublic key blob lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.pk_blob_namePublic key blob algorithm nameCharacter string4.0.0 to 4.2.5
ssh.pk_blob_name_lengthPublic key blob algorithm name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.pk_sig_blob_lengthPublic key signature blob lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.pk_sig_blob_namePublic key signature blob algorithm nameCharacter string4.0.0 to 4.2.5
ssh.pk_sig_blob_name_lengthPublic key signature blob algorithm name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.protocolProtocolCharacter string1.0.0 to 4.2.5
ssh.seq_numSequence numberUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.server_host_key_algorithmsserver_host_key_algorithms stringCharacter string1.0.0 to 4.2.5
ssh.server_host_key_algorithms_lengthserver_host_key_algorithms lengthUnsigned integer (32 bits)1.0.0 to 4.2.5
ssh.service_nameService NameCharacter string4.0.0 to 4.2.5
ssh.service_name_lengthService Name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.sig.ssh-rsa.lengthssh-rsa signature lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.sig.ssh-rsa.sssh-rsa signature (s)Byte sequence4.0.0 to 4.2.5
ssh.subsystem_nameSubsystem nameCharacter string4.0.0 to 4.2.5
ssh.subsystem_name_lengthSubsystem name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth.change_passwordChange passwordBoolean4.0.0 to 4.2.5
ssh.userauth.have_signatureHave signatureBoolean4.0.0 to 4.2.5
ssh.userauth.partial_successPartial successBoolean4.0.0 to 4.2.5
ssh.userauth_maximum_packet_sizeMaximum packet sizeUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth_method_nameMethod NameCharacter string4.0.0 to 4.2.5
ssh.userauth_method_name_lengthMethod Name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth_new_passwordNew passwordCharacter string4.0.0 to 4.2.5
ssh.userauth_new_password_lengthNew password lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth_passwordPasswordCharacter string4.0.0 to 4.2.5
ssh.userauth_password_lengthPassword lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth_pka_namePublic key algorithm nameCharacter string4.0.0 to 4.2.5
ssh.userauth_pka_name_lengthPublic key algorithm name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth_service_nameService NameCharacter string4.0.0 to 4.2.5
ssh.userauth_service_name_lengthService Name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5
ssh.userauth_user_nameUser NameCharacter string4.0.0 to 4.2.5
ssh.userauth_user_name_lengthUser Name lengthUnsigned integer (32 bits)4.0.0 to 4.2.5