Display Filter Reference: WireGuard Protocol

Protocol field name: wg

Versions: 3.0.0 to 3.0.5

Back to Display Filter Reference

Field name Description Type Versions
wg.bad_packet_length Packet length is too small Label 3.0.0 to 3.0.5
wg.counter Counter Unsigned integer, 8 bytes 3.0.0 to 3.0.5
wg.decryption_error Packet data decryption failed Label 3.0.0 to 3.0.5
wg.encrypted_cookie Encrypted Cookie Sequence of bytes 3.0.0 to 3.0.5
wg.encrypted_empty Encrypted Empty Label 3.0.0 to 3.0.5
wg.encrypted_packet Encrypted Packet Label 3.0.0 to 3.0.5
wg.encrypted_static Encrypted Static Label 3.0.0 to 3.0.5
wg.encrypted_timestamp Encrypted Timestamp Label 3.0.0 to 3.0.5
wg.ephemeral Ephemeral Character string 3.0.0 to 3.0.5
wg.ephemeral.known_privkey Has Private Key Boolean 3.0.0 to 3.0.5
wg.handshake_ok Handshake decryption successful Boolean 3.0.0 to 3.0.5
wg.keepalive This is a Keepalive message Label 3.0.0 to 3.0.5
wg.mac1 mac1 Sequence of bytes 3.0.0 to 3.0.5
wg.mac2 mac2 Sequence of bytes 3.0.0 to 3.0.5
wg.nonce Nonce Sequence of bytes 3.0.0 to 3.0.5
wg.receiver Receiver Unsigned integer, 4 bytes 3.0.0 to 3.0.5
wg.receiver_pubkey Receiver Static Public Key Character string 3.0.0 to 3.0.5
wg.receiver_pubkey.known_privkey Has Private Key Boolean 3.0.0 to 3.0.5
wg.reserved Reserved Label 3.0.0 to 3.0.5
wg.response_in Response in Frame Frame number 3.0.0 to 3.0.5
wg.response_to Response to Frame Frame number 3.0.0 to 3.0.5
wg.sender Sender Unsigned integer, 4 bytes 3.0.0 to 3.0.5
wg.static Static Public Key Character string 3.0.0 to 3.0.5
wg.static.known_privkey Has Private Key Boolean 3.0.0 to 3.0.5
wg.static.known_pubkey Known Public Key Boolean 3.0.0 to 3.0.5
wg.stream Stream index Unsigned integer, 4 bytes 3.0.0 to 3.0.5
wg.timestamp.nanoseconds Nanoseconds Unsigned integer, 4 bytes 3.0.0 to 3.0.5
wg.timestamp.tai64_label TAI64 Label Unsigned integer, 8 bytes 3.0.0 to 3.0.5
wg.timestamp.value Timestamp Date and time 3.0.0 to 3.0.5
wg.type Type Unsigned integer, 1 byte 3.0.0 to 3.0.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More