Try again using ip.addr==echo.websocket.org as display filter. What shows up is a TLS/TCP/IP connection, your web socket is in there.