Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Display Filter Reference: Socks Protocol

Protocol field name: socks

Versions: 1.0.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
socks.address_typeAddress TypeUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.auth_accepted_methodAccepted Auth MethodUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.auth_methodMethodUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.auth_method_countAuthentication Method CountUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.auth_statusStatusUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.commandCommandUnsigned integer (8 bits)1.0.0 to 4.2.4
socks.dstRemote AddressIPv4 address1.0.0 to 4.2.4
socks.dstportRemote PortUnsigned integer (16 bits)1.0.0 to 4.2.4
socks.dstV6Remote Address(ipv6)IPv6 address1.0.0 to 4.2.4
socks.fragment_numberFragment NumberUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.gssapi.commandSOCKS/GSSAPI commandUnsigned integer (8 bits)1.2.0 to 4.2.4
socks.gssapi.dataGSSAPI dataByte sequence1.2.0 to 4.2.4
socks.gssapi.lengthSOCKS/GSSAPI data lengthUnsigned integer (16 bits)1.2.0 to 4.2.4
socks.passwordPasswordCharacter string1.10.0 to 4.2.4
socks.ping_end_commandPing: End commandLabel2.0.0 to 4.2.4
socks.ping_resultsPing ResultsLabel2.0.0 to 4.2.4
socks.portPortUnsigned integer (16 bits)1.10.0 to 4.2.4
socks.remote_host_portRemote Host PortUnsigned integer (16 bits)1.10.0 to 4.2.4
socks.remote_nameRemote nameCharacter string1.10.0 to 4.2.4
socks.reservedReservedUnsigned integer (8 bits)1.10.0 to 4.2.4
socks.resultsResults(V4)Unsigned integer (8 bits)1.0.0 to 4.2.4
socks.results_v4Results(V4)Unsigned integer (8 bits)1.0.0 to 1.8.15
socks.results_v5Results(V5)Unsigned integer (8 bits)1.0.0 to 1.8.15
socks.subnegotation_versionSubnegotiation VersionUnsigned integer (8 bits)2.6.0 to 3.2.18
socks.subnegotiation_versionSubnegotiation VersionUnsigned integer (8 bits)3.4.0 to 4.2.4
socks.traceroute_end_commandTraceroute: End commandLabel2.0.0 to 4.2.4
socks.traceroute_resultsTraceroute ResultsLabel2.0.0 to 4.2.4
socks.usernameUser nameCharacter string1.0.0 to 4.2.4
socks.v4a_dns_nameSOCKS v4a Remote Domain NameCharacter string1.0.0 to 4.2.4
socks.versionVersionUnsigned integer (8 bits)1.0.0 to 4.2.4