Display Filter Reference: WebSocket
Protocol field name: websocket
Versions: 1.8.0 to 2.6.3
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| websocket.decompression.failed.expert | Decompression failed | Label | 2.6.0 to 2.6.3 |
| websocket.fin | Fin | Boolean | 1.8.0 to 2.6.3 |
| websocket.mask | Mask | Boolean | 1.8.0 to 2.6.3 |
| websocket.masked_payload | Masked payload | Label | 2.0.0 to 2.6.3 |
| websocket.masking_key | Masking-Key | Sequence of bytes | 1.8.0 to 2.6.3 |
| websocket.opcode | Opcode | Unsigned integer, 1 byte | 1.8.0 to 2.6.3 |
| websocket.payload | Payload | Label | 1.8.0 to 2.6.3 |
| websocket.payload.binary | Binary | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.binary_mask | Binary | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.binary_unmask | Binary | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.close | Close | Label | 1.8.0 to 2.6.3 |
| websocket.payload.close.reason | Reason | Character string | 1.8.0 to 2.6.3 |
| websocket.payload.close.status_code | Status code | Unsigned integer, 2 bytes | 1.8.0 to 2.6.3 |
| websocket.payload.close_mask | Close | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.close_unmask | Unmask Close | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.continue | Continue | Sequence of bytes | 1.8.0 to 2.6.3 |
| websocket.payload.ping | Ping | Sequence of bytes | 1.8.0 to 2.6.3 |
| websocket.payload.ping_mask | Ping | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.ping_unmask | Ping | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.pong | Pong | Sequence of bytes | 1.8.0 to 2.6.3 |
| websocket.payload.pong_mask | Pong | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.pong_unmask | Pong | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.text | Text | Character string | 1.8.0 to 1.12.13 |
| websocket.payload.text_mask | Text | Sequence of bytes | 1.8.0 to 1.12.13 |
| websocket.payload.text_unmask | Text unmask | Character string | 1.8.0 to 1.12.13 |
| websocket.payload.unknown | Unknown | Sequence of bytes | 1.8.0 to 2.6.3 |
| websocket.payload.unknown.expert | Dissector for Websocket Opcode | Label | 1.12.0 to 2.6.3 |
| websocket.payload.unmask | Unmask Payload | Label | 1.8.0 to 1.12.13 |
| websocket.payload_length | Payload length | Unsigned integer, 1 byte | 1.8.0 to 2.6.3 |
| websocket.payload_length_ext_16 | Extended Payload length (16 bits) | Unsigned integer, 2 bytes | 1.8.0 to 2.6.3 |
| websocket.payload_length_ext_64 | Extended Payload length (64 bits) | Unsigned integer, 8 bytes | 1.8.0 to 2.6.3 |
| websocket.pmc | Per-Message Compressed | Boolean | 2.6.0 to 2.6.3 |
| websocket.rsv | Reserved | Unsigned integer, 1 byte | 1.8.0 to 2.6.3 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance