Display Filter Reference: WebSocket

Protocol field name: websocket

Versions: 1.8.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
websocket.decompression.failed.expert Decompression failed Label 2.6.0 to 2.6.5
websocket.fin Fin Boolean 1.8.0 to 2.6.5
websocket.mask Mask Boolean 1.8.0 to 2.6.5
websocket.masked_payload Masked payload Label 2.0.0 to 2.6.5
websocket.masking_key Masking-Key Sequence of bytes 1.8.0 to 2.6.5
websocket.opcode Opcode Unsigned integer, 1 byte 1.8.0 to 2.6.5
websocket.payload Payload Label 1.8.0 to 2.6.5
websocket.payload.binary Binary Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.binary_mask Binary Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.binary_unmask Binary Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.close Close Label 1.8.0 to 2.6.5
websocket.payload.close.reason Reason Character string 1.8.0 to 2.6.5
websocket.payload.close.status_code Status code Unsigned integer, 2 bytes 1.8.0 to 2.6.5
websocket.payload.close_mask Close Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.close_unmask Unmask Close Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.continue Continue Sequence of bytes 1.8.0 to 2.6.5
websocket.payload.ping Ping Sequence of bytes 1.8.0 to 2.6.5
websocket.payload.ping_mask Ping Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.ping_unmask Ping Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.pong Pong Sequence of bytes 1.8.0 to 2.6.5
websocket.payload.pong_mask Pong Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.pong_unmask Pong Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.text Text Character string 1.8.0 to 1.12.13
websocket.payload.text_mask Text Sequence of bytes 1.8.0 to 1.12.13
websocket.payload.text_unmask Text unmask Character string 1.8.0 to 1.12.13
websocket.payload.unknown Unknown Sequence of bytes 1.8.0 to 2.6.5
websocket.payload.unknown.expert Dissector for Websocket Opcode Label 1.12.0 to 2.6.5
websocket.payload.unmask Unmask Payload Label 1.8.0 to 1.12.13
websocket.payload_length Payload length Unsigned integer, 1 byte 1.8.0 to 2.6.5
websocket.payload_length_ext_16 Extended Payload length (16 bits) Unsigned integer, 2 bytes 1.8.0 to 2.6.5
websocket.payload_length_ext_64 Extended Payload length (64 bits) Unsigned integer, 8 bytes 1.8.0 to 2.6.5
websocket.pmc Per-Message Compressed Boolean 2.6.0 to 2.6.5
websocket.rsv Reserved Unsigned integer, 1 byte 1.8.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More