Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Cisco Wireless IDS Captures

Protocol field name: cwids

Versions: 1.0.0 to 4.4.8

Back to Display Filter Reference

Field name Description Type Versions
cwids.caplenCapture lengthUnsigned integer (16 bits)1.0.0 to 4.4.8
cwids.channelChannelUnsigned integer (8 bits)1.0.0 to 4.4.8
cwids.ieee80211_malformedMalformed or short IEEE80211 subpacketLabel2.0.0 to 4.4.8
cwids.reallenOriginal lengthUnsigned integer (16 bits)1.0.0 to 4.4.8
cwids.timestampTimestamp [us]Byte sequence2.2.0 to 4.4.8
cwids.unknown1Unknown1Byte sequence1.0.0 to 4.4.8
cwids.unknown2Unknown2Byte sequence1.0.0 to 4.4.8
cwids.unknown3Unknown3Byte sequence1.0.0 to 4.4.8
cwids.versionCapture VersionUnsigned integer (16 bits)1.0.0 to 4.4.8

WCA Logo

Find out more about the new WCA certification