Display Filter Reference: Proprietary PCAP

Protocol field name: ppcap

Versions: 1.8.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
ppcap.address_type Address Type Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.destination_address Destination Node ID Character string 1.12.0 to 2.6.1
ppcap.destination_address_value Destination Node ID Character string 1.8.0 to 1.10.14
ppcap.destination_ip_address1 Destination IP Address IPv4 address 1.8.0 to 2.6.1
ppcap.destination_ip_address2 Destination IP Address IPv6 address 1.8.0 to 2.6.1
ppcap.destreserved Reserved Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.dpc DPC Unsigned integer, 4 bytes 1.8.0 to 2.6.1
ppcap.info Info Character string 1.8.0 to 2.6.1
ppcap.length Length Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.local_port Local Port Unsigned integer, 2 bytes 1.12.0 to 2.6.1
ppcap.opc OPC Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.payload_data Payload Data Sequence of bytes 1.8.0 to 2.6.1
ppcap.payload_type Payload Type Character string 1.8.0 to 2.6.1
ppcap.remote_port Remote Port Unsigned integer, 2 bytes 1.12.0 to 2.6.1
ppcap.reserved Reserved Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.sctp_assoc SCTP Association ID Character string 2.2.0 to 2.6.1
ppcap.source_ip_address1 Source IP Address IPv4 address 1.8.0 to 2.6.1
ppcap.source_ip_address2 Source IP Address IPv6 address 1.8.0 to 2.6.1
ppcap.source_nodeid Source Node ID Character string 1.8.0 to 2.6.1
ppcap.spc OPC Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.spc1 DPC Unsigned integer, 3 bytes 1.8.0 to 2.6.1
ppcap.ssn SSN Unsigned integer, 2 bytes 1.8.0 to 2.6.1
ppcap.ssn1 SSN Unsigned integer, 1 byte 1.8.0 to 2.6.1
ppcap.tcp_sip_type Transport Protocol for SIP/SIP-I Message Character string 1.12.0 to 2.0.16
ppcap.transport_prot Transport Protocol Character string 2.2.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More