Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.
Wireshark logo

Display Filter Reference: Who

Protocol field name: who

Versions: 1.0.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
who.boottimeBoot TimeDate and time1.0.0 to 4.2.4
who.entryWho utmp EntryLabel1.8.0 to 4.2.4
who.hostnameHostnameCharacter string1.0.0 to 4.2.4
who.idleTime IdleUnsigned integer (32 bits)1.0.0 to 4.2.4
who.loadav_10Load Average Over Past 10 MinutesFloating point (double-precision)1.0.0 to 4.2.4
who.loadav_15Load Average Over Past 15 MinutesFloating point (double-precision)1.0.0 to 4.2.4
who.loadav_5Load Average Over Past 5 MinutesFloating point (double-precision)1.0.0 to 4.2.4
who.recvtimeReceive TimeDate and time1.0.0 to 4.2.4
who.sendtimeSend TimeDate and time1.0.0 to 4.2.4
who.timeonTime OnDate and time1.0.0 to 4.2.4
who.ttyTTY NameCharacter string1.0.0 to 4.2.4
who.typeTypeUnsigned integer (8 bits)1.0.0 to 4.2.4
who.uidUser IDCharacter string1.0.0 to 4.2.4
who.versVersionUnsigned integer (8 bits)1.0.0 to 4.2.4
who.whoentWho utmp EntryLabel1.0.0 to 1.6.16

Wireshark logo footer

© Wireshark Foundation · Privacy Policy

Facebook·Mastodon·Twitter·YouTube