Wireshark · Display Filter Reference: Mongo Wire Protocol

Field name	Description	Type	Versions
mongo.bad_checksum.expert	Bad checksum	Label	4.2.0 to 4.4.2
mongo.collection_name	Collection Name	Character string	1.6.0 to 4.4.2
mongo.commandargs	CommandArgs	Label	2.4.0 to 4.4.2
mongo.commandname	commandName	Character string	2.4.0 to 4.4.2
mongo.commandreply	CommandReply	Label	2.4.0 to 4.4.2
mongo.compression	Compression Info	Label	2.6.0 to 4.4.2
mongo.compression.compressed_data	Compressed Data	Label	2.6.0 to 4.4.2
mongo.compression.compressor	Compressor	Signed integer (8 bits)	2.6.0 to 4.4.2
mongo.compression.original_opcode	Original OpCode	Signed integer (32 bits)	2.6.0 to 4.4.2
mongo.compression.original_size	Uncompressed Size	Signed integer (32 bits)	2.6.0 to 4.4.2
mongo.compression.unsupported_compressed	Unsupported Compressed Data	Label	2.6.0 to 4.4.2
mongo.cursor_id	Cursor ID	Signed integer (64 bits)	1.6.0 to 4.4.2
mongo.database	database	Character string	2.4.0 to 4.4.2
mongo.database_name	Database Name	Character string	1.6.0 to 4.4.2
mongo.delete.flags	Delete Flags	Label	1.6.0 to 4.4.2
mongo.delete.flags.singleremove	Single Remove	Boolean	1.6.0 to 4.4.2
mongo.document	Document	Label	1.8.0 to 4.4.2
mongo.document.empty	Empty Document	Label	1.8.0 to 4.4.2
mongo.document.length	Document length	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.document.length.bad	BSON document length bad	Label	1.12.0 to 4.4.2
mongo.document.recursion_exceeded	BSON document recursion exceeds	Label	1.12.0 to 4.4.2
mongo.document.zero	Zero	Byte sequence	1.6.0 to 4.4.2
mongo.documents	Documents	Byte sequence	1.6.0 to 1.6.16
mongo.element.length	Length	Signed integer (32 bits)	1.8.0 to 4.4.2
mongo.element.name	Element	Character string	1.8.0 to 4.4.2
mongo.element.type	Type	Unsigned integer (8 bits)	1.8.0 to 4.4.2
mongo.element.value	Value	Boolean	1.8.0 to 1.8.15
mongo.element.value.bool	Value	Boolean	1.10.0 to 4.4.2
mongo.element.value.bytes	Value	Byte sequence	1.10.0 to 4.4.2
mongo.element.value.db_ptr	ObjectID	Byte sequence	1.8.0 to 4.4.2
mongo.element.value.decimal128	Value	Byte sequence	4.2.0 to 4.4.2
mongo.element.value.double	Value	Floating point (double-precision)	1.10.0 to 4.4.2
mongo.element.value.int	Value	Signed integer (32 bits)	1.10.0 to 4.4.2
mongo.element.value.int64	Value	Signed integer (64 bits)	1.10.0 to 4.4.2
mongo.element.value.js_code	JavaScript code	Label	1.8.0 to 4.4.2
mongo.element.value.js_scope	JavaScript scope	Label	1.8.0 to 4.4.2
mongo.element.value.length	Length	Signed integer (32 bits)	1.8.0 to 4.4.2
mongo.element.value.objectid	ObjectID	Byte sequence	1.8.0 to 4.4.2
mongo.element.value.objectid.host	ObjectID Host	Unsigned integer (24 bits)	3.0.0 to 4.4.2
mongo.element.value.objectid.inc	ObjectID Inc	Unsigned integer (24 bits)	1.8.0 to 4.4.2
mongo.element.value.objectid.machine	ObjectID Machine	Unsigned integer (24 bits)	1.8.0 to 2.6.20
mongo.element.value.objectid.machine_id	ObjectID Machine	Byte sequence	3.0.0 to 4.4.2
mongo.element.value.objectid.pid	ObjectID PID	Unsigned integer (16 bits)	1.8.0 to 4.4.2
mongo.element.value.objectid.time	ObjectID Time	Signed integer (32 bits)	1.8.0 to 4.4.2
mongo.element.value.regex.options	Value	Character string	1.8.0 to 4.4.2
mongo.element.value.regex.pattern	Value	Character string	1.8.0 to 4.4.2
mongo.element.value.string	Value	Character string	1.10.0 to 4.4.2
mongo.elements	Elements	Label	1.8.0 to 4.4.2
mongo.full_collection_name	fullCollectionName	Character string	1.6.0 to 4.4.2
mongo.insert.flags	Insert Flags	Label	1.8.0 to 4.4.2
mongo.insert.flags.continueonerror	ContinueOnError	Boolean	1.8.0 to 4.4.2
mongo.message	Message	Character string	1.6.0 to 4.4.2
mongo.message_length	Message Length	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.metadata	metadata	Label	2.4.0 to 4.4.2
mongo.msg.checksum	Checksum	Unsigned integer (32 bits)	4.2.0 to 4.4.2
mongo.msg.checksum.status	Checksum Status	Unsigned integer (8 bits)	4.2.0 to 4.4.2
mongo.msg.flags	Message Flags	Unsigned integer (32 bits)	2.6.0 to 4.4.2
mongo.msg.flags.checksumpresent	ChecksumPresent	Boolean	2.6.0 to 4.4.2
mongo.msg.flags.exhaustallowed	ExhaustAllowed	Boolean	2.6.0 to 4.4.2
mongo.msg.flags.moretocome	MoreToCome	Boolean	2.6.0 to 4.4.2
mongo.msg.sections.section	Section	Label	2.6.0 to 4.4.2
mongo.msg.sections.section.body	BodyDocument	Label	2.6.0 to 4.4.2
mongo.msg.sections.section.doc_sequence	DocumentSequence	Label	2.6.0 to 4.4.2
mongo.msg.sections.section.doc_sequence_id	SeqID	Character string	2.6.0 to 4.4.2
mongo.msg.sections.section.kind	Kind	Signed integer (32 bits)	2.6.0 to 4.4.2
mongo.msg.sections.section.size	Size	Signed integer (32 bits)	2.6.0 to 4.4.2
mongo.number_returned	Number Returned	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.number_to_cursor_ids	Number of Cursor IDS	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.number_to_return	Number to Return	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.number_to_skip	Number To Skip	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.opcode	OpCode	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.outputdocs	OutputDocs	Label	2.4.0 to 4.4.2
mongo.query	Query	Label	1.6.0 to 4.4.2
mongo.query.flags	Query Flags	Label	1.6.0 to 4.4.2
mongo.query.flags.awaitdata	AwaitData	Boolean	1.6.0 to 4.4.2
mongo.query.flags.exhaust	Exhaust	Boolean	1.6.0 to 4.4.2
mongo.query.flags.no_cursor_timeout	No Cursor Timeout	Boolean	1.6.0 to 4.4.2
mongo.query.flags.op_log_reply	Op Log Reply	Boolean	1.6.0 to 4.4.2
mongo.query.flags.partial	Partial	Boolean	1.6.0 to 4.4.2
mongo.query.flags.slave_ok	Slave OK	Boolean	1.6.0 to 4.4.2
mongo.query.flags.tailable_cursor	Tailable Cursor	Boolean	1.6.0 to 4.4.2
mongo.reply.flags	Reply Flags	Label	1.6.0 to 4.4.2
mongo.reply.flags.awaitcapable	Await Capable	Boolean	1.6.0 to 4.4.2
mongo.reply.flags.cursornotfound	Cursor Not Found	Boolean	1.6.0 to 4.4.2
mongo.reply.flags.queryfailure	Query Failure	Boolean	1.6.0 to 4.4.2
mongo.reply.flags.sharedconfigstale	Shared Config Stale	Boolean	1.6.0 to 4.4.2
mongo.request_id	Request ID	Unsigned integer (32 bits)	1.6.0 to 4.4.2
mongo.response_to	Response To	Unsigned integer (32 bits)	1.6.0 to 4.4.2
mongo.return_field_selector	Return Field Selector	Label	1.6.0 to 4.4.2
mongo.selector	Selector	Label	1.6.0 to 4.4.2
mongo.starting_from	Starting From	Signed integer (32 bits)	1.6.0 to 4.4.2
mongo.too_large_compressed.expert	The size of the uncompressed packet exceeded the maximum allowed value	Label	2.6.0 to 4.4.2
mongo.unknown	Unknown	Byte sequence	1.6.0 to 4.4.2
mongo.unknown.expert	Unknown Data (not interpreted)	Label	1.12.0 to 4.4.2
mongo.unsupported_compression.expert	This packet was compressed with an unsupported compressor	Label	2.6.0 to 4.4.2
mongo.update	Update	Label	1.6.0 to 4.4.2
mongo.update.flags	Update Flags	Label	1.6.0 to 4.4.2
mongo.update.flags.multiupdate	Multi Update	Boolean	1.6.0 to 4.4.2
mongo.update.flags.upsert	Upsert	Boolean	1.6.0 to 4.4.2