Appendix A. Ethereal Display Filter Fields
DCE/RPC Endpoint Mapper (epm)
Table A-42. DCE/RPC Endpoint Mapper (epm)
Field |
Field Name |
Type |
epm.hnd |
Handle |
Byte array |
epm.if_id |
Interface |
String |
epm.if_id_p |
Interface pointer |
Unsigned 32-bit integer |
epm.inq_type |
Inquiry type |
Unsigned 32-bit integer |
epm.max_ents |
Max entries |
Unsigned 32-bit integer |
epm.max_towers |
Max Towers |
Unsigned 32-bit integer |
epm.num_ents |
Num entries |
Unsigned 32-bit integer |
epm.num_towers |
Num Towers |
Unsigned 32-bit integer |
epm.object |
Object |
String |
epm.object_p |
Object pointer |
Unsigned 32-bit integer |
epm.opnum |
Operation |
Unsigned 16-bit integer |
epm.rc |
Return code |
Unsigned 32-bit integer |
epm.tower |
Tower |
Byte array |
epm.tower.len |
Length |
Unsigned 32-bit integer |
epm.tower.lhs.len |
LHS Length |
Unsigned 16-bit integer |
epm.tower.num_floors |
Number of floors |
Unsigned 16-bit integer |
epm.tower.proto_id |
Protocol |
Unsigned 8-bit integer |
epm.tower.rhs.len |
RHS Length |
Unsigned 16-bit integer |
epm.uuid |
UUID |
String |
epm.ver_maj |
Version Major |
Unsigned 16-bit integer |
epm.ver_min |
Version Minor |
Unsigned 16-bit integer |
epm.ver_opt |
Version Option |
Unsigned 32-bit integer |
DCE/RPC Remote Management (mgmt)
Table A-43. DCE/RPC Remote Management (mgmt)
Field |
Field Name |
Type |
|
|
|
139
Appendix A. Ethereal Display Filter Fields
DCOM OXID Resolver (oxid)
Table A-44. DCOM OXID Resolver (oxid)
Field |
Field Name |
Type |
|
|
|
DCOM Remote Activation (remact)
Table A-45. DCOM Remote Activation (remact)
Field |
Field Name |
Type |
|
|
|
DEC Spanning Tree Protocol (dec_stp)
Table A-46. DEC Spanning Tree Protocol (dec_stp)
Field |
Field Name |
Type |
dec_stp.bridge.mac |
Bridge MAC |
6-byte Hardware (MAC) |
|
|
Address |
dec_stp.bridge.pri |
Bridge Priority |
Unsigned 16-bit integer |
dec_stp.flags |
BPDU flags |
Unsigned 8-bit integer |
dec_stp.flags.short_timers |
Use short timers |
Boolean |
dec_stp.flags.tc |
Topology Change |
Boolean |
dec_stp.flags.tcack |
Topology Change |
Boolean |
|
Acknowledgment |
|
dec_stp.forward |
Forward Delay |
Unsigned 8-bit integer |
dec_stp.hello |
Hello Time |
Unsigned 8-bit integer |
dec_stp.max_age |
Max Age |
Unsigned 8-bit integer |
dec_stp.msg_age |
Message Age |
Unsigned 8-bit integer |
dec_stp.port |
Port identifier |
Unsigned 8-bit integer |
dec_stp.protocol |
Protocol Identifier |
Unsigned 8-bit integer |
dec_stp.root.cost |
Root Path Cost |
Unsigned 16-bit integer |
dec_stp.root.mac |
Root MAC |
6-byte Hardware (MAC) |
|
|
Address |
dec_stp.root.pri |
Root Priority |
Unsigned 16-bit integer |
dec_stp.type |
BPDU Type |
Unsigned 8-bit integer |
140
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
dec_stp.version |
BPDU Version |
Unsigned 8-bit integer |
DHCPv6 (dhcpv6)
Table A-47. DHCPv6 (dhcpv6)
Field |
Field Name |
Type |
dhcpv6.msgtype |
Message type |
Unsigned 8-bit integer |
Data (data)
Table A-48. Data (data)
Field |
Field Name |
Type |
|
|
|
Data Link SWitching (dlsw)
Table A-49. Data Link SWitching (dlsw)
Field |
Field Name |
Type |
|
|
|
Data Stream Interface (dsi)
Table A-50. Data Stream Interface (dsi)
Field |
Field Name |
Type |
dsi.attn_flag |
Flags |
Unsigned 16-bit integer |
dsi.attn_flag.crash |
Crash |
Boolean |
dsi.attn_flag.msg |
Message |
Boolean |
dsi.attn_flag.reconnect |
Don’t reconnect |
Boolean |
dsi.attn_flag.shutdown |
Shutdown |
Boolean |
dsi.attn_flag.time |
Minutes |
Unsigned 16-bit integer |
dsi.command |
Command |
Unsigned 8-bit integer |
141
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
dsi.data_offset |
Data offset |
Signed 32-bit integer |
dsi.error_code |
Error code |
Signed 32-bit integer |
dsi.flags |
Flags |
Unsigned 8-bit integer |
dsi.length |
Length |
Unsigned 32-bit integer |
dsi.open_len |
Length |
Unsigned 8-bit integer |
dsi.open_option |
Option |
Byte array |
dsi.open_quantum |
Quantum |
Unsigned 32-bit integer |
dsi.open_type |
Flags |
Unsigned 8-bit integer |
dsi.requestid |
Request ID |
Unsigned 16-bit integer |
dsi.reserved |
Reserved |
Unsigned 32-bit integer |
dsi.server_addr.len |
Length |
Unsigned 8-bit integer |
dsi.server_addr.type |
Type |
Unsigned 8-bit integer |
dsi.server_addr.value |
Value |
Byte array |
dsi.server_directory |
Directory service |
|
dsi.server_flag |
Flag |
Unsigned 16-bit integer |
dsi.server_flag.copyfile |
Support copyfile |
Boolean |
dsi.server_flag.directory |
Support directory services |
Boolean |
dsi.server_flag.fast_copy |
Support fast copy |
Boolean |
dsi.server_flag.no_save_passwdDon’t allow save password |
Boolean |
|
|
|
|
dsi.server_flag.notify |
Support server |
Boolean |
|
notifications |
|
dsi.server_flag.passwd |
Support change password |
Boolean |
dsi.server_flag.reconnect |
Support server reconnect |
Boolean |
dsi.server_flag.srv_msg |
Support server message |
Boolean |
dsi.server_flag.srv_sig |
Support server signature |
Boolean |
dsi.server_flag.tcpip |
Support TCP/IP |
Boolean |
dsi.server_icon |
Icon bitmap |
Byte array |
dsi.server_name |
Server name |
|
dsi.server_signature |
Server signature |
Byte array |
dsi.server_type |
Server type |
|
dsi.server_uams |
UAM |
|
dsi.server_vers |
AFP version |
|
142