| ss.handshake.dname | Distinguished Name | String |
| ssl.alert_message | Alert Message | No value |
| ssl.alert_message.desc | Description | Unsigned 8-bit integer |
| ssl.alert_message.level | Level | Unsigned 8-bit integer |
| ssl.app_data | Application Data | No value |
| ssl.change_cipher_spec | Change Cipher Spec Message | No value |
| ssl.handshake | Handshake Protocol | No value |
| ssl.handshake.cert_type | Certificate type | Unsigned 8-bit integer |
| ssl.handshake.cert_types | Certificate types | String |
| ssl.handshake.certificate | Certificate | String |
| ssl.handshake.certificate_length | Certificate Length | Unsigned 24-bit integer |
| ssl.handshake.challenge | Challenge | No value |
| ssl.handshake.challenge_length | Challenge Length | Unsigned 16-bit integer |
| ssl.handshake.cipher_spec_len | Cipher Spec Length | Unsigned 16-bit integer |
| ssl.handshake.cipherspec | Cipher Spec | Unsigned 24-bit integer |
| ssl.handshake.cipherspecs | Cipher Suites | String |
| ssl.handshake.ciphersuite | Cipher Suite | Unsigned 16-bit integer |
| ssl.handshake.clear_key_data | Clear Key Data | No value |
| ssl.handshake.clear_key_length | Clear Key Data Length | Unsigned 16-bit integer |
| ssl.handshake.comp_method | Compression Method | Unsigned 8-bit integer |
| ssl.handshake.comp_methods | Compression Methods | String |
| ssl.handshake.connection_id | Connection ID | No value |
| ssl.handshake.connection_id_length | Connection ID Length | Unsigned 16-bit integer |
| ssl.handshake.dname_len | Distinguished Name Length | Unsigned 16-bit integer |
| ssl.handshake.dnames | Distinguished Names | String |
| ssl.handshake.encrypted_key | Encrypted Key | No value |
| ssl.handshake.encrypted_key_length | Encrypted Key Data Length | Unsigned 16-bit integer |
| ssl.handshake.key_arg | Key Argument | No value |
| ssl.handshake.key_arg_length | Key Argument Length | Unsigned 16-bit integer |
| ssl.handshake.length | Length | Unsigned 24-bit integer |
| ssl.handshake.md5_hash | MD5 Hash | No value |
| ssl.handshake.random | Random.bytes | No value |
| ssl.handshake.random_time | Random.gmt_unix_time | Date/Time stamp |
| ssl.handshake.session_id | Session ID | String |
| ssl.handshake.session_id_hit | Session ID Hit | Boolean |
| ssl.handshake.session_id_length | Session ID Length | Unsigned 8-bit integer |
| ssl.handshake.sha_hash | SHA-1 Hash | No value |
| ssl.handshake.type | Handshake Message Type | Unsigned 8-bit integer |
| ssl.handshake.verify_data | Verify Data | No value |
| ssl.handshake.version | Version | Unsigned 16-bit integer |
| ssl.record | Record Layer | No value |
| ssl.record.content_type | Content Type | Unsigned 8-bit integer |
| ssl.record.is_escape | Is Escape | Boolean |
| ssl.record.length | Length | Unsigned 16-bit integer |
| ssl.record.padding_length | Padding Length | Unsigned 8-bit integer |
| ssl.record.version | Version | Unsigned 16-bit integer |