Wireshark · Display Filter Reference: Transport Layer Security

Field name	Description	Type	Versions
tls.alert_message	Alert Message	Label	3.0.0 to 4.4.2
tls.alert_message.desc	Description	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.alert_message.level	Level	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.app_data	Encrypted Application Data	Byte sequence	3.0.0 to 4.4.2
tls.app_data_proto	Application Data Protocol	Character string	3.4.0 to 4.4.2
tls.change_cipher_spec	Change Cipher Spec Message	Label	3.0.0 to 4.4.2
tls.compress_certificate.algorithm	Algorithm	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.compress_certificate.algorithms_length	Algorithms Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.compress_certificate.compressed_certificate_message	Compressed Certificate Message	Byte sequence	3.0.0 to 4.4.2
tls.compress_certificate.compressed_certificate_message.length	Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.compress_certificate.uncompressed_length	Uncompressed Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.connection_id	Connection ID	Byte sequence	3.4.0 to 4.4.2
tls.connection_id_length	Connection ID length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.decompression_error	Decompression error	Label	3.6.0 to 4.4.2
tls.early_data.max_early_data_size	Maximum Early Data Size	Unsigned integer (32 bits)	3.0.0 to 4.4.2
tls.ech.cipher_suite	Cipher Suite	Label	4.2.0 to 4.4.2
tls.ech.client_hello_type	Client Hello type	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.ech.config_id	Config Id	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.ech.confirmation	Confirmation	Byte sequence	4.2.0 to 4.4.2
tls.ech.echconfig	ECHConfig	Label	4.2.0 to 4.4.2
tls.ech.echconfig.length	Length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.echconfig.version	Version	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.echconfigcontents.extensions	Extensions	Byte sequence	4.2.0 to 4.4.2
tls.ech.echconfigcontents.extensions_length	Extensions length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.echconfigcontents.maximum_name_length	Maximum Name Length	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.ech.echconfigcontents.public_name	Public Name	Character string	4.2.0 to 4.4.2
tls.ech.echconfigcontents.public_name_length	Public Name length	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.ech.echconfiglist	ECHConfigList	Label	4.2.0 to 4.4.2
tls.ech.echconfiglist_length	ECHConfigList length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.enc	Enc	Byte sequence	4.2.0 to 4.4.2
tls.ech.enc_length	Enc length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig	HPKE Key Config	Label	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.cipher_suite	Cipher Suite	Label	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.cipher_suite.aead_id	AEAD Id	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.cipher_suite.kdf_id	KDF Id	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.cipher_suites	Cipher Suites	Label	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.cipher_suites_length	Cipher Suites length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.config_id	Config Id	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.kem_id	KEM Id	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.public_key	Public Key	Byte sequence	4.2.0 to 4.4.2
tls.ech.hpke.keyconfig.public_key_length	Public Key length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.payload	Payload	Byte sequence	4.2.0 to 4.4.2
tls.ech.payload_length	Payload length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
tls.ech.retry_configs	Retry Configs	Label	4.2.0 to 4.4.2
tls.ech_echconfig_invalid_version	Invalid/unknown ECHConfig version	Label	4.2.0 to 4.4.2
tls.esni.encrypted_sni	Encrypted SNI	Byte sequence	3.0.0 to 4.4.2
tls.esni.encrypted_sni_length	Encrypted SNI Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.esni.nonce	Nonce	Byte sequence	3.0.0 to 4.4.2
tls.esni.record_digest	Record Digest	Byte sequence	3.0.0 to 4.4.2
tls.esni.record_digest_length	Record Digest Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.esni.suite	Cipher Suite	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.extension.oid_filters.oid	Certificate Extension OID	ASN.1 object identifier	3.0.0 to 4.4.2
tls.extension.oid_filters.oid_length	Certificate Extension OID Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.extension.oid_filters.values_length	Certificate Extension Values Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.extension.oid_filters_length	OID Filters Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.extension.psk_ke_mode	PSK Key Exchange Mode	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.extension.psk_ke_modes_length	PSK Key Exchange Modes Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake	Handshake Protocol	Label	3.0.0 to 4.4.2
tls.handshake.cert_type	Certificate type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.cert_type.type	Certificate Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.cert_type.types	Certificate Type List	Label	3.0.0 to 4.4.2
tls.handshake.cert_type.types_len	Certificate Type List Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.cert_types	Certificate types	Label	3.0.0 to 4.4.2
tls.handshake.cert_types_count	Certificate types count	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.cert_url.padding	Padding	Label	3.0.0 to 4.4.2
tls.handshake.cert_url.sha1	SHA1 Hash	Byte sequence	3.0.0 to 4.4.2
tls.handshake.cert_url.url	URL	Character string	3.0.0 to 4.4.2
tls.handshake.cert_url.url_hash	URL and Hash	Label	3.0.0 to 4.4.2
tls.handshake.cert_url.url_hash_len	URL and Hash list Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.cert_url.url_len	URL Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.cert_url_type	Certificate Chain Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.certificate	Certificate	Byte sequence	3.0.0 to 4.4.2
tls.handshake.certificate_length	Certificate Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.handshake.certificate_request_context	Certificate Request Context	Byte sequence	3.0.0 to 4.4.2
tls.handshake.certificate_request_context_length	Certificate Request Context Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.certificates	Certificates	Label	3.0.0 to 4.4.2
tls.handshake.certificates_length	Certificates Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.handshake.challenge	Challenge	Label	3.0.0 to 4.4.2
tls.handshake.challenge_length	Challenge Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.cipher_spec_len	Cipher Spec Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.cipher_suites_length	Cipher Suites Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.cipherspec	Cipher Spec	Unsigned integer (24 bits)	3.0.0 to 4.0.17
tls.handshake.ciphersuite	Cipher Suite	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.ciphersuite.undecoded	Ciphersuite not implemented, contact Wireshark developers if you want this to be supported	Label	4.4.0 to 4.4.2
tls.handshake.ciphersuites	Cipher Suites	Label	3.0.0 to 4.4.2
tls.handshake.clear_key_data	Clear Key Data	Label	3.0.0 to 4.4.2
tls.handshake.clear_key_length	Clear Key Data Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.client_cert_vrfy.sig	Signature	Byte sequence	3.0.0 to 4.4.2
tls.handshake.client_cert_vrfy.sig_len	Signature length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.client_point	Pubkey	Byte sequence	3.0.0 to 4.4.2
tls.handshake.client_point_len	Pubkey Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.client_version_error	Client Hello legacy version field specifies version 1.3, not version 1.2; some servers may not be able to handle that.	Label	4.2.0 to 4.4.2
tls.handshake.comp_method	Compression Method	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.comp_methods	Compression Methods	Label	3.0.0 to 4.4.2
tls.handshake.comp_methods_length	Compression Methods Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.connection_id	Connection ID	Label	3.0.0 to 4.4.2
tls.handshake.connection_id_length	Connection ID Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.cred.pubkey	Subject Public Key Info	Byte sequence	3.6.0 to 4.4.2
tls.handshake.cred.pubkey_len	Subject Public Key Info Length	Unsigned integer (24 bits)	3.6.0 to 4.4.2
tls.handshake.cred.signature	Signature	Byte sequence	3.6.0 to 4.4.2
tls.handshake.cred.signature_len	Signature Length	Unsigned integer (16 bits)	3.6.0 to 4.4.2
tls.handshake.cred.valid_time	Valid Time	Unsigned integer (16 bits)	3.6.0 to 4.4.2
tls.handshake.dname	Distinguished Name	Label	3.0.0 to 4.4.2
tls.handshake.dname_len	Distinguished Name Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.dnames	Distinguished Names	Label	3.0.0 to 4.4.2
tls.handshake.dnames_len	Distinguished Names Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.dnames_truncated	Tree view truncated	Label	3.2.3 to 4.4.2
tls.handshake.encrypted_key	Encrypted Key	Label	3.0.0 to 4.4.2
tls.handshake.encrypted_key_length	Encrypted Key Data Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.epms	Encrypted PreMaster	Byte sequence	3.0.0 to 4.4.2
tls.handshake.epms_len	Encrypted PreMaster length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.exponent	Exponent	Byte sequence	3.0.0 to 4.4.2
tls.handshake.exponent_len	Exponent Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extension.data	Data	Byte sequence	3.0.0 to 4.4.2
tls.handshake.extension.heartbeat.mode	Mode	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extension.len	Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extension.type	Type	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.cookie	Cookie	Byte sequence	3.0.0 to 4.4.2
tls.handshake.extensions.cookie_len	Cookie length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.psk.binders	PSK Binders	Label	3.0.0 to 4.4.2
tls.handshake.extensions.psk.binders_len	PSK Binders length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.psk.identities.length	Identities Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.psk.identity.identity	Identity	Byte sequence	3.0.0 to 4.4.2
tls.handshake.extensions.psk.identity.identity_length	Identity Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.psk.identity.obfuscated_ticket_age	Obfuscated Ticket Age	Unsigned integer (32 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.psk.identity.selected	Selected Identity	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.session_ticket	Session Ticket	Byte sequence	4.2.0 to 4.4.2
tls.handshake.extensions.supported_version	Supported Version	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions.supported_versions_len	Supported Versions length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_alpn_len	ALPN Extension Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_alpn_list	ALPN Protocol	Label	3.0.0 to 4.4.2
tls.handshake.extensions_alpn_str	ALPN Next Protocol	Character string	3.0.0 to 4.4.2
tls.handshake.extensions_alpn_str_len	ALPN string length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_alps.settings	ALPN Opaque Settings	Byte sequence	3.6.0 to 4.4.2
tls.handshake.extensions_alps_alpn_list	Supported ALPN List	Label	3.6.0 to 4.4.2
tls.handshake.extensions_alps_alpn_str	Supported ALPN	Character string	3.6.0 to 4.4.2
tls.handshake.extensions_alps_alpn_str_len	Supported ALPN Length	Unsigned integer (8 bits)	3.6.0 to 4.4.2
tls.handshake.extensions_alps_len	ALPS Extension Length	Unsigned integer (16 bits)	3.6.0 to 4.4.2
tls.handshake.extensions_ec_point_format	EC point format	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_ec_point_formats	EC point formats	Label	3.0.0 to 4.4.2
tls.handshake.extensions_ec_point_formats_length	EC point formats Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_key_share_client_length	Client Key Share Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_key_share_group	Group	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_key_share_key_exchange	Key Exchange	Byte sequence	3.0.0 to 4.4.2
tls.handshake.extensions_key_share_key_exchange_length	Key Exchange Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_key_share_selected_group	Selected Group	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_length	Extensions Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_npn	Next Protocol	Character string	3.0.0 to 4.4.2
tls.handshake.extensions_npn_str_len	Protocol string length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_padding_data	Padding Data	Byte sequence	3.0.0 to 4.4.2
tls.handshake.extensions_reneg_info	Renegotiation info	Byte sequence	3.0.0 to 4.4.2
tls.handshake.extensions_reneg_info_len	Renegotiation info extension length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_server_name	Server Name	Character string	3.0.0 to 4.4.2
tls.handshake.extensions_server_name_len	Server Name length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_server_name_list_len	Server Name list length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_server_name_type	Server Name Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_srp_len	SRP username length	Unsigned integer (8 bits)	3.6.0 to 4.4.2
tls.handshake.extensions_srp_username	SRP username	Character string	3.6.0 to 4.4.2
tls.handshake.extensions_status_request_exts_len	Request Extensions Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_status_request_len	Certificate Status Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_status_request_list_len	Certificate Status List Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_status_request_responder_ids_len	Responder ID list Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_status_request_type	Certificate Status Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_supported_group	Supported Group	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.extensions_supported_groups	Supported Groups List	Label	3.0.0 to 4.4.2
tls.handshake.extensions_supported_groups_length	Supported Groups List Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.fragment	Handshake Fragment	Frame number	3.2.0 to 4.4.2
tls.handshake.fragment.count	Handshake Fragment count	Unsigned integer (32 bits)	3.2.0 to 4.4.2
tls.handshake.fragments	Reassembled Handshake Fragments	Label	3.2.0 to 4.4.2
tls.handshake.g	g	Byte sequence	3.0.0 to 4.4.2
tls.handshake.g_len	g Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.hint	Hint	Byte sequence	3.0.0 to 4.4.2
tls.handshake.hint_len	Hint Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.identity	Identity	Byte sequence	3.0.0 to 4.4.2
tls.handshake.identity_len	Identity Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.ja3	JA3	Character string	3.6.0 to 4.4.2
tls.handshake.ja3_full	JA3 Fullstring	Character string	3.6.0 to 4.4.2
tls.handshake.ja3s	JA3S	Character string	3.6.0 to 4.4.2
tls.handshake.ja3s_full	JA3S Fullstring	Character string	3.6.0 to 4.4.2
tls.handshake.ja4	JA4	Character string	4.2.0 to 4.4.2
tls.handshake.ja4_r	JA4_r	Character string	4.2.0 to 4.4.2
tls.handshake.key_arg	Key Argument	Label	3.0.0 to 4.4.2
tls.handshake.key_arg_length	Key Argument Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.key_update.request_update	Key Update Request	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.legacy_version	This legacy_version field MUST be ignored. The supported_versions extension is present and MUST be used instead.	Label	4.4.0 to 4.4.2
tls.handshake.length	Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.handshake.max_fragment_length	Maximum Fragment Length	Unsigned integer (8 bits)	3.2.0 to 4.4.2
tls.handshake.md5_hash	MD5 Hash	Label	3.0.0 to 4.4.2
tls.handshake.modulus	Modulus	Byte sequence	3.0.0 to 4.4.2
tls.handshake.modulus_len	Modulus Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.npn_padding	Padding	Byte sequence	3.0.0 to 4.4.2
tls.handshake.npn_padding_len	Padding Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.npn_selected_protocol	Selected Protocol	Character string	3.0.0 to 4.4.2
tls.handshake.npn_selected_protocol_len	Selected Protocol Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.ocsp_response_len	OCSP Response Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.handshake.ocsp_response_list_len	OCSP Response List Length	Unsigned integer (24 bits)	3.0.0 to 4.4.2
tls.handshake.p	p	Byte sequence	3.0.0 to 4.4.2
tls.handshake.p_len	p Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.random	Random	Byte sequence	3.0.0 to 4.4.2
tls.handshake.random_bytes	Random Bytes	Byte sequence	3.0.0 to 4.4.2
tls.handshake.random_time	GMT Unix Time	Date and time	3.0.0 to 4.4.2
tls.handshake.rc	Schnorr signature	Byte sequence	3.4.0 to 4.4.2
tls.handshake.rc_len	Schnorr signature Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.handshake.reassembled_in	Reassembled Handshake Message in frame	Frame number	3.2.0 to 4.4.2
tls.handshake.rs	Schnorr signature	Byte sequence	3.4.0 to 4.4.2
tls.handshake.rs_len	Schnorr signature Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.handshake.server_curve_type	Curve Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.server_keyex_illegal	It is not legal to send the ServerKeyExchange message for this ciphersuite	Label	4.4.0 to 4.4.2
tls.handshake.server_named_curve	Named Curve	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.server_point	Pubkey	Byte sequence	3.0.0 to 4.4.2
tls.handshake.server_point_len	Pubkey Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.server_version_error	Server Hello legacy version field specifies version 1.3, not version 1.2; some middleboxes may not be able to handle that.	Label	4.4.0 to 4.4.2
tls.handshake.session_id	Session ID	Byte sequence	3.0.0 to 4.4.2
tls.handshake.session_id_hit	Session ID Hit	Boolean	3.0.0 to 4.4.2
tls.handshake.session_id_length	Session ID Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.session_id_length.error	Session ID length error	Label	3.0.0 to 4.4.2
tls.handshake.session_ticket	Session Ticket	Byte sequence	3.0.0 to 4.4.2
tls.handshake.session_ticket_age_add	Session Ticket Age Add	Unsigned integer (32 bits)	3.0.0 to 4.4.2
tls.handshake.session_ticket_length	Session Ticket Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.session_ticket_lifetime_hint	Session Ticket Lifetime Hint	Unsigned integer (32 bits)	3.0.0 to 4.4.2
tls.handshake.session_ticket_nonce	Session Ticket Nonce	Byte sequence	3.0.0 to 4.4.2
tls.handshake.session_ticket_nonce_length	Session Ticket Nonce Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.sha_hash	SHA-1 Hash	Label	3.0.0 to 4.4.2
tls.handshake.sig	Signature	Byte sequence	3.0.0 to 4.4.2
tls.handshake.sig_hash_alg	Signature Algorithm	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.sig_hash_alg_len	Signature Hash Algorithms Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.sig_hash_algs	Signature Algorithms	Label	3.0.0 to 4.4.2
tls.handshake.sig_hash_hash	Signature Hash Algorithm Hash	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.sig_hash_sig	Signature Hash Algorithm Signature	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.sig_len	Signature Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.status_request.undecoded	Responder ID list or Request Extensions are not implemented, contact Wireshark developers if you want this to be supported	Label	3.0.0 to 4.4.2
tls.handshake.type	Handshake Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.handshake.vc	Ephemeral Pubkey	Byte sequence	3.4.0 to 4.4.2
tls.handshake.vc_len	Ephemeral Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.handshake.verify_data	Verify Data	Label	3.0.0 to 4.4.2
tls.handshake.version	Version	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.vs	Ephemeral Pubkey	Byte sequence	3.4.0 to 4.4.2
tls.handshake.vs_len	Ephemeral Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.handshake.xc	Pubkey	Byte sequence	3.4.0 to 4.4.2
tls.handshake.xc_len	Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.handshake.xs	Pubkey	Byte sequence	3.4.0 to 4.4.2
tls.handshake.xs_len	Pubkey Length	Unsigned integer (8 bits)	3.4.0 to 4.4.2
tls.handshake.yc	Pubkey	Byte sequence	3.0.0 to 4.4.2
tls.handshake.yc_len	Pubkey Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.handshake.ys	Pubkey	Byte sequence	3.0.0 to 4.4.2
tls.handshake.ys_len	Pubkey Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.heartbeat_message	Heartbeat Message	Label	3.0.0 to 4.4.2
tls.heartbeat_message.padding	Payload Length	Byte sequence	3.0.0 to 4.4.2
tls.heartbeat_message.payload	Payload Length	Byte sequence	3.0.0 to 4.4.2
tls.heartbeat_message.payload_length	Payload Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.heartbeat_message.payload_length.invalid	Invalid heartbeat payload length	Label	3.0.0 to 4.4.2
tls.heartbeat_message.type	Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.ignored_unknown_record	Ignored Unknown Record	Label	3.0.0 to 4.4.2
tls.malformed.buffer_too_small	Malformed message, not enough data is available	Label	3.0.0 to 4.4.2
tls.malformed.trailing_data	Undecoded trailing data is present	Label	3.0.0 to 4.4.2
tls.malformed.vector_length	Variable vector length is outside the permitted range	Label	3.0.0 to 4.4.2
tls.quic.initial_version	Initial Version	Unsigned integer (32 bits)	3.0.0 to 3.0.14
tls.quic.len	Parameters Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.quic.negotiated_version	Negotiated Version	Unsigned integer (32 bits)	3.0.0 to 3.0.14
tls.quic.parameter	Parameter	Label	3.0.0 to 4.4.2
tls.quic.parameter.ack_delay_exponent	ack_delay_exponent	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.active_connection_id_limit	Active Connection ID Limit	Unsigned integer (64 bits)	3.2.0 to 4.4.2
tls.quic.parameter.cibir_encoding.length	length	Unsigned integer (64 bits)	4.0.0 to 4.4.2
tls.quic.parameter.cibir_encoding.offset	offset	Unsigned integer (64 bits)	4.0.0 to 4.4.2
tls.quic.parameter.enable_multipath	Enable Multipath	Unsigned integer (64 bits)	4.2.0 to 4.4.2
tls.quic.parameter.enable_time_stamp_v2	Enable TimestampV2	Unsigned integer (64 bits)	3.4.0 to 4.4.2
tls.quic.parameter.facebook.partial_reliability	Facebook Partial Reliability	Unsigned integer (64 bits)	3.4.0 to 4.4.2
tls.quic.parameter.google.connection_options	Google Connection options	Byte sequence	3.4.0 to 4.4.2
tls.quic.parameter.google.initial_rtt	Google Initial RTT	Unsigned integer (64 bits)	3.4.0 to 4.4.2
tls.quic.parameter.google.key_update_not_yet_supported	Google Key Update not yet supported	Label	3.4.0 to 4.4.2
tls.quic.parameter.google.quic_params	Google QUIC parameters	Byte sequence	3.4.0 to 4.4.2
tls.quic.parameter.google.quic_params_unknown_field	Google Unknown Field	Byte sequence	3.4.0 to 4.4.2
tls.quic.parameter.google.quic_version	Google QUIC version	Unsigned integer (32 bits)	3.4.0 to 4.4.2
tls.quic.parameter.google.support_handshake_done	Google Support Handshake Done	Label	3.4.0 to 4.4.2
tls.quic.parameter.google.supported_version	Google Supported Version	Unsigned integer (32 bits)	3.6.0 to 4.4.2
tls.quic.parameter.google.supported_versions_length	Google Supported Versions Length	Unsigned integer (8 bits)	3.6.0 to 4.4.2
tls.quic.parameter.google.user_agent	Google UserAgent	Character string	3.4.0 to 4.4.2
tls.quic.parameter.idle_timeout	idle_timeout	Unsigned integer (64 bits)	3.0.0 to 3.2.1
tls.quic.parameter.initial_max_data	initial_max_data	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.initial_max_path_id	Initial Max Path ID	Unsigned integer (64 bits)	4.4.0 to 4.4.2
tls.quic.parameter.initial_max_paths	Initial Max Paths	Unsigned integer (64 bits)	4.4.0 to 4.4.2
tls.quic.parameter.initial_max_stream_data_bidi_local	initial_max_stream_data_bidi_local	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.initial_max_stream_data_bidi_remote	initial_max_stream_data_bidi_remote	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.initial_max_stream_data_uni	initial_max_stream_data_uni	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.initial_max_streams_bidi	initial_max_streams_bidi	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.initial_max_streams_uni	initial_max_streams_uni	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.initial_source_connection_id	Initial Source Connection ID	Byte sequence	3.4.0 to 4.4.2
tls.quic.parameter.lengt.old	Length	Unsigned integer (16 bits)	3.4.0 to 4.2.9
tls.quic.parameter.length	Length	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.length.old	Length	Unsigned integer (16 bits)	4.4.0 to 4.4.2
tls.quic.parameter.loss_bits	loss_bits	Unsigned integer (64 bits)	3.2.2 to 4.4.2
tls.quic.parameter.max_ack_delay	max_ack_delay	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.max_datagram_frame_size	max_datagram_frame_size	Unsigned integer (64 bits)	3.2.0 to 4.4.2
tls.quic.parameter.max_idle_timeout	max_idle_timeout	Unsigned integer (64 bits)	3.2.2 to 4.4.2
tls.quic.parameter.max_packet_size	max_packet_size	Unsigned integer (64 bits)	3.0.0 to 3.2.18
tls.quic.parameter.max_udp_payload_size	max_udp_payload_size	Unsigned integer (64 bits)	3.4.0 to 4.4.2
tls.quic.parameter.min_ack_delay	min_ack_delay	Unsigned integer (64 bits)	3.2.2 to 4.4.2
tls.quic.parameter.ocid	original_connection_id	Byte sequence	3.0.0 to 3.2.18
tls.quic.parameter.original_destination_connection_id	original_destination_connection_id	Byte sequence	3.4.0 to 4.4.2
tls.quic.parameter.preferred_address.connectionid	connectionId	Byte sequence	3.0.0 to 4.4.2
tls.quic.parameter.preferred_address.connectionid.length	Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.quic.parameter.preferred_address.ipaddress.length	Length	Unsigned integer (8 bits)	3.0.0 to 3.0.14
tls.quic.parameter.preferred_address.ipv4address	ipv4Address	IPv4 address	3.0.0 to 4.4.2
tls.quic.parameter.preferred_address.ipv4port	ipv4Port	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.quic.parameter.preferred_address.ipv6address	ipv6Address	IPv6 address	3.0.0 to 4.4.2
tls.quic.parameter.preferred_address.ipv6port	ipv6Port	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.quic.parameter.preferred_address.ipversion	ipVersion	Unsigned integer (8 bits)	3.0.0 to 3.0.14
tls.quic.parameter.preferred_address.statelessresettoken	statelessResetToken	Byte sequence	3.0.0 to 4.4.2
tls.quic.parameter.retry_source_connection_id	Retry Source Connection ID	Byte sequence	3.4.0 to 4.4.2
tls.quic.parameter.stateless_reset_token	stateless_reset_token	Byte sequence	3.0.0 to 4.4.2
tls.quic.parameter.type	Type	Unsigned integer (64 bits)	3.0.0 to 4.4.2
tls.quic.parameter.value	Value	Byte sequence	3.0.0 to 4.4.2
tls.quic.parameter.vi.chosen_version	Chosen Version	Unsigned integer (32 bits)	4.0.0 to 4.4.2
tls.quic.parameter.vi.other_version	Other Version	Unsigned integer (32 bits)	4.0.0 to 4.4.2
tls.quic.parameter.vn.compatible_version	Compatible Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.compatible_version_count	Compatible Version Count	Unsigned integer (64 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.currently_attempted_version	Currently Attempted Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.negotiated_version	Negotiated Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.previously_attempted_version	Previously Attempted Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.received_negotiation_version	Received Negotiation Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.received_negotiation_version_count	Received Negotiation Version Count	Unsigned integer (64 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.supported_version	Supported Version	Unsigned integer (32 bits)	3.6.0 to 3.6.24
tls.quic.parameter.vn.supported_version_count	Supported Version Count	Unsigned integer (64 bits)	3.6.0 to 3.6.24
tls.quic.supported_versions	Supported Versions	Unsigned integer (32 bits)	3.0.0 to 3.0.14
tls.quic.supported_versions.len	Supported Versions Length	Unsigned integer (16 bits)	3.0.0 to 3.0.14
tls.reassembled.data	Reassembled PDU data	Byte sequence	3.0.0 to 4.4.2
tls.reassembled.length	Reassembled PDU length	Unsigned integer (32 bits)	3.0.0 to 4.4.2
tls.reassembled_in	Reassembled PDU in frame	Frame number	3.0.0 to 4.4.2
tls.record	Record Layer	Label	3.0.0 to 4.4.2
tls.record.content_type	Content Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.record.is_escape	Is Escape	Boolean	3.0.0 to 4.4.2
tls.record.length	Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.record.length.invalid	Record fragment length is too small or too large	Label	3.0.0 to 4.4.2
tls.record.opaque_type	Opaque Type	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.record.padding_length	Padding Length	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.record.version	Version	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.record_size_limit	Record Size Limit	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.resumed	This session reuses previously negotiated keys (Session resumption)	Label	3.0.0 to 4.4.2
tls.sct.sct_extensions	Extensions	Label	3.0.0 to 4.4.2
tls.sct.sct_extensions_length	Extensions length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.sct.sct_length	Serialized SCT Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.sct.sct_logid	Log ID	Byte sequence	3.0.0 to 4.4.2
tls.sct.sct_signature	Signature	Byte sequence	3.0.0 to 4.4.2
tls.sct.sct_signature_length	Signature Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.sct.sct_timestamp	Timestamp	Date and time	3.0.0 to 4.4.2
tls.sct.sct_version	SCT Version	Unsigned integer (8 bits)	3.0.0 to 4.4.2
tls.sct.scts_length	Serialized SCT List Length	Unsigned integer (16 bits)	3.0.0 to 4.4.2
tls.segment	TLS segment	Frame number	3.0.0 to 4.4.2
tls.segment.count	Segment count	Unsigned integer (32 bits)	3.0.0 to 4.4.2
tls.segment.data	TLS segment data	Byte sequence	3.0.0 to 4.4.2
tls.segment.error	Reassembling error	Frame number	3.0.0 to 4.4.2
tls.segment.multipletails	Multiple tail segments found	Boolean	3.0.0 to 4.4.2
tls.segment.overlap	Segment overlap	Boolean	3.0.0 to 4.4.2
tls.segment.overlap.conflict	Conflicting data in segment overlap	Boolean	3.0.0 to 4.4.2
tls.segment.toolongfragment	Segment too long	Boolean	3.0.0 to 4.4.2
tls.segments	Reassembled TLS segments	Label	3.0.0 to 4.4.2
tls.ssl2.handshake.cert_type	Certificate Type	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.ssl2.handshake.cipherspec	Cipher Spec	Unsigned integer (24 bits)	4.2.0 to 4.4.2
tls.ssl2.handshake.type	Handshake Message Type	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.token_binding.key_parameter	Key Parameter	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.token_binding.key_parameters	Key Parameters	Label	4.2.0 to 4.4.2
tls.token_binding.key_parameters_length	Key Parameters Length	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.token_binding.version_major	Protocol Major Version	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.token_binding.version_minor	Protocol Minor Version	Unsigned integer (8 bits)	4.2.0 to 4.4.2
tls.unexpected_message	Unexpected message	Label	3.0.0 to 4.4.2