tcp.continuation_to - This is a contiuation to the PDU in frame.ipv6.reassembled_in - Reassembled in Frame.ipv6.addr - Source or Destination Address.ip.reassembled_in - Reassembled IPv4 in frame.ip.fragment.toolongfragment - Fragment too long.ip. - Confliting data in fragment overlap.ip.fragment.multipletails - Multiple tail fragment found.ip.fragment.error -Defragmentation error.ip.dsfield.dscp - Diferrentiated Services Codepoint.ip.dsfield - Diffrentiated Services Field.ip.addr - Source or Destination Address.

These filters and its powerful filter engine helps remove the noise from a packet trace and only see the packets of interest.ĭisplay filters allow us to compare fields within a protocol against a specific value, compare fields against fields and check the existence os specific fields or protocols.īellow you can find a small list of the most common protocols and fields when filtering traffic with Wireshark. There over 242000 fields in 3000 protocols that let you drill down to the exact traffic you want to see. Wireshark’s most powerful feature is it vast array of filters.

Wireshark filter http status code