Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: WebSocket

Protocol field name: websocket

Versions: 1.8.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
websocket.decompression.failed.expertDecompression failedLabel2.6.0 to 4.6.0
websocket.finFinBoolean1.8.0 to 4.6.0
websocket.fragmentWebsocket FragmentFrame number3.6.0 to 4.6.0
websocket.fragment.countFragment countUnsigned integer (32 bits)3.6.0 to 4.6.0
websocket.fragment.errorDefragmentation errorFrame number3.6.0 to 4.6.0
websocket.fragment.multipletailsMultiple tail fragments foundBoolean3.6.0 to 4.6.0
websocket.fragment.overlapFragment overlapBoolean3.6.0 to 4.6.0
websocket.fragment.overlap.conflictConflicting data in fragment overlapBoolean3.6.0 to 4.6.0
websocket.fragment.toolongfragmentFragment too longBoolean3.6.0 to 4.6.0
websocket.fragmentsReassembled websocket FragmentsLabel3.6.0 to 4.6.0
websocket.maskMaskBoolean1.8.0 to 4.6.0
websocket.masked_payloadMasked payloadByte sequence2.0.0 to 4.6.0
websocket.masking_keyMasking-KeyByte sequence1.8.0 to 4.6.0
websocket.opcodeOpcodeUnsigned integer (8 bits)1.8.0 to 4.6.0
websocket.payloadPayloadByte sequence1.8.0 to 4.6.0
websocket.payload.binaryBinaryByte sequence1.8.0 to 1.12.13
websocket.payload.binary_maskBinaryByte sequence1.8.0 to 1.12.13
websocket.payload.binary_unmaskBinaryByte sequence1.8.0 to 1.12.13
websocket.payload.closeCloseByte sequence1.8.0 to 4.6.0
websocket.payload.close.reasonReasonCharacter string1.8.0 to 4.6.0
websocket.payload.close.status_codeStatus codeUnsigned integer (16 bits)1.8.0 to 4.6.0
websocket.payload.close_maskCloseByte sequence1.8.0 to 1.12.13
websocket.payload.close_unmaskUnmask CloseByte sequence1.8.0 to 1.12.13
websocket.payload.continueContinueByte sequence1.8.0 to 4.6.0
websocket.payload.not.fully.unmaskedPayload not fully unmaskedLabel4.4.0 to 4.6.0
websocket.payload.pingPingByte sequence1.8.0 to 4.6.0
websocket.payload.ping_maskPingByte sequence1.8.0 to 1.12.13
websocket.payload.ping_unmaskPingByte sequence1.8.0 to 1.12.13
websocket.payload.pongPongByte sequence1.8.0 to 4.6.0
websocket.payload.pong_maskPongByte sequence1.8.0 to 1.12.13
websocket.payload.pong_unmaskPongByte sequence1.8.0 to 1.12.13
websocket.payload.textTextCharacter string1.8.0 to 1.12.13, 4.0.8 to 4.6.0
websocket.payload.text_maskTextByte sequence1.8.0 to 1.12.13
websocket.payload.text_unmaskText unmaskCharacter string1.8.0 to 1.12.13
websocket.payload.unknownUnknownByte sequence1.8.0 to 4.6.0
websocket.payload.unknown.expertDissector for Websocket OpcodeLabel1.12.0 to 4.6.0
websocket.payload.unmaskUnmask PayloadLabel1.8.0 to 1.12.13
websocket.payload_lengthPayload lengthUnsigned integer (8 bits)1.8.0 to 4.6.0
websocket.payload_length_ext_16Extended Payload length (16 bits)Unsigned integer (16 bits)1.8.0 to 4.6.0
websocket.payload_length_ext_64Extended Payload length (64 bits)Unsigned integer (64 bits)1.8.0 to 4.6.0
websocket.pmcPer-Message CompressedBoolean2.6.0 to 4.6.0
websocket.reassembled.lengthReassembled websocket Payload lengthUnsigned integer (32 bits)3.6.0 to 4.6.0
websocket.rsvReservedUnsigned integer (8 bits)1.8.0 to 4.6.0