Wireshark · Display Filter Reference: WebSocket

Field name	Description	Type	Versions
websocket.decompression.failed.expert	Decompression failed	Label	2.6.0 to 4.4.2
websocket.fin	Fin	Boolean	1.8.0 to 4.4.2
websocket.fragment	Websocket Fragment	Frame number	3.6.0 to 4.4.2
websocket.fragment.count	Fragment count	Unsigned integer (32 bits)	3.6.0 to 4.4.2
websocket.fragment.error	Defragmentation error	Frame number	3.6.0 to 4.4.2
websocket.fragment.multipletails	Multiple tail fragments found	Boolean	3.6.0 to 4.4.2
websocket.fragment.overlap	Fragment overlap	Boolean	3.6.0 to 4.4.2
websocket.fragment.overlap.conflict	Conflicting data in fragment overlap	Boolean	3.6.0 to 4.4.2
websocket.fragment.toolongfragment	Fragment too long	Boolean	3.6.0 to 4.4.2
websocket.fragments	Reassembled websocket Fragments	Label	3.6.0 to 4.4.2
websocket.mask	Mask	Boolean	1.8.0 to 4.4.2
websocket.masked_payload	Masked payload	Label	2.0.0 to 4.4.2
websocket.masking_key	Masking-Key	Byte sequence	1.8.0 to 4.4.2
websocket.opcode	Opcode	Unsigned integer (8 bits)	1.8.0 to 4.4.2
websocket.payload	Payload	Label	1.8.0 to 4.4.2
websocket.payload.binary	Binary	Byte sequence	1.8.0 to 1.12.13
websocket.payload.binary_mask	Binary	Byte sequence	1.8.0 to 1.12.13
websocket.payload.binary_unmask	Binary	Byte sequence	1.8.0 to 1.12.13
websocket.payload.close	Close	Label	1.8.0 to 4.4.2
websocket.payload.close.reason	Reason	Character string	1.8.0 to 4.4.2
websocket.payload.close.status_code	Status code	Unsigned integer (16 bits)	1.8.0 to 4.4.2
websocket.payload.close_mask	Close	Byte sequence	1.8.0 to 1.12.13
websocket.payload.close_unmask	Unmask Close	Byte sequence	1.8.0 to 1.12.13
websocket.payload.continue	Continue	Byte sequence	1.8.0 to 4.4.2
websocket.payload.not.fully.unmasked	Payload not fully unmasked	Label	4.4.0 to 4.4.2
websocket.payload.ping	Ping	Byte sequence	1.8.0 to 4.4.2
websocket.payload.ping_mask	Ping	Byte sequence	1.8.0 to 1.12.13
websocket.payload.ping_unmask	Ping	Byte sequence	1.8.0 to 1.12.13
websocket.payload.pong	Pong	Byte sequence	1.8.0 to 4.4.2
websocket.payload.pong_mask	Pong	Byte sequence	1.8.0 to 1.12.13
websocket.payload.pong_unmask	Pong	Byte sequence	1.8.0 to 1.12.13
websocket.payload.text	Text	Character string	1.8.0 to 1.12.13, 4.0.8 to 4.4.2
websocket.payload.text_mask	Text	Byte sequence	1.8.0 to 1.12.13
websocket.payload.text_unmask	Text unmask	Character string	1.8.0 to 1.12.13
websocket.payload.unknown	Unknown	Byte sequence	1.8.0 to 4.4.2
websocket.payload.unknown.expert	Dissector for Websocket Opcode	Label	1.12.0 to 4.4.2
websocket.payload.unmask	Unmask Payload	Label	1.8.0 to 1.12.13
websocket.payload_length	Payload length	Unsigned integer (8 bits)	1.8.0 to 4.4.2
websocket.payload_length_ext_16	Extended Payload length (16 bits)	Unsigned integer (16 bits)	1.8.0 to 4.4.2
websocket.payload_length_ext_64	Extended Payload length (64 bits)	Unsigned integer (64 bits)	1.8.0 to 4.4.2
websocket.pmc	Per-Message Compressed	Boolean	2.6.0 to 4.4.2
websocket.reassembled.length	Reassembled websocket Payload length	Unsigned integer (32 bits)	3.6.0 to 4.4.2
websocket.rsv	Reserved	Unsigned integer (8 bits)	1.8.0 to 4.4.2