Display Filter Reference: Prism capture header

Protocol field name: prism

Versions: 1.0.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
prism.devname Device Name Character string 1.6.0 to 2.6.3
prism.did DID Label 1.12.3 to 2.6.3
prism.did.channel Channel Unsigned integer, 4 bytes 1.6.12 to 1.6.16, 1.8.4 to 2.6.3
prism.did.frmlen Frame Length Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.did.hosttime Host Time Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.did.istx IsTX Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.did.length Length Unsigned integer, 2 bytes 1.6.0 to 2.6.3
prism.did.mactime MAC timestamp (lower 32 bits) Unsigned integer, 4 bytes 1.6.12 to 1.6.16, 1.8.4 to 2.6.3
prism.did.noise Noise Signed integer, 4 bytes 1.6.0 to 2.6.3
prism.did.rate Data rate (Mb/s) Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.did.rssi RSSI Signed integer, 4 bytes 1.6.0 to 2.6.3
prism.did.siga1 SIG_A1 Unsigned integer, 4 bytes 2.4.0 to 2.6.3
prism.did.siga2 SIG_A2 Unsigned integer, 4 bytes 2.4.0 to 2.6.3
prism.did.sigab SIG Field Label 2.4.0 to 2.6.3
prism.did.sigb SIG Unsigned integer, 4 bytes 2.4.0 to 2.6.3
prism.did.signal Signal Signed integer, 4 bytes 1.6.0 to 2.6.3
prism.did.sq Signal Quality Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.did.status Status Unsigned integer, 2 bytes 1.6.0 to 2.6.3
prism.did.type DID Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.did.unknown Unknown DID Field Unsigned integer, 4 bytes 1.6.0 to 2.6.3
prism.frmlen.data Frame Length Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
prism.istx.data IsTX Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
prism.msgcode Message Code Unsigned integer, 4 bytes 1.0.0 to 2.6.3
prism.msglen Message Length Unsigned integer, 4 bytes 1.0.0 to 2.6.3
prism.noise.data Noise Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
prism.rate.data Rate Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
prism.rssi.data RSSI Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
prism.signal.data Signal Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
prism.sq.data SQ Field Unsigned integer, 4 bytes 1.0.0 to 1.4.15
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More