Display Filter Reference: Proprietary PCAP
Protocol field name: ppcap
Versions: 1.8.0 to 2.6.1
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| ppcap.address_type | Address Type | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.destination_address | Destination Node ID | Character string | 1.12.0 to 2.6.1 |
| ppcap.destination_address_value | Destination Node ID | Character string | 1.8.0 to 1.10.14 |
| ppcap.destination_ip_address1 | Destination IP Address | IPv4 address | 1.8.0 to 2.6.1 |
| ppcap.destination_ip_address2 | Destination IP Address | IPv6 address | 1.8.0 to 2.6.1 |
| ppcap.destreserved | Reserved | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.dpc | DPC | Unsigned integer, 4 bytes | 1.8.0 to 2.6.1 |
| ppcap.info | Info | Character string | 1.8.0 to 2.6.1 |
| ppcap.length | Length | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.local_port | Local Port | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| ppcap.opc | OPC | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.payload_data | Payload Data | Sequence of bytes | 1.8.0 to 2.6.1 |
| ppcap.payload_type | Payload Type | Character string | 1.8.0 to 2.6.1 |
| ppcap.remote_port | Remote Port | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| ppcap.reserved | Reserved | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.sctp_assoc | SCTP Association ID | Character string | 2.2.0 to 2.6.1 |
| ppcap.source_ip_address1 | Source IP Address | IPv4 address | 1.8.0 to 2.6.1 |
| ppcap.source_ip_address2 | Source IP Address | IPv6 address | 1.8.0 to 2.6.1 |
| ppcap.source_nodeid | Source Node ID | Character string | 1.8.0 to 2.6.1 |
| ppcap.spc | OPC | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.spc1 | DPC | Unsigned integer, 3 bytes | 1.8.0 to 2.6.1 |
| ppcap.ssn | SSN | Unsigned integer, 2 bytes | 1.8.0 to 2.6.1 |
| ppcap.ssn1 | SSN | Unsigned integer, 1 byte | 1.8.0 to 2.6.1 |
| ppcap.tcp_sip_type | Transport Protocol for SIP/SIP-I Message | Character string | 1.12.0 to 2.0.16 |
| ppcap.transport_prot | Transport Protocol | Character string | 2.2.0 to 2.6.1 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ NetShark appliance
- • Troubleshoot problems faster
- • Quickly identify the applications running on your network
- • Monitor your virtual machine traffic