Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
srvsvc.transport.address |
Address |
Byte array |
srvsvc.transport.addresslen |
Address Len |
Unsigned 32-bit integer |
|
|
|
srvsvc.transport.name |
Name |
String |
srvsvc.transport.networkaddrN |
esstwork Address |
String |
|
|
|
srvsvc.transport.num_vcs |
VCs |
Unsigned 32-bit integer |
srvsvc.ulist_mtime |
Ulist mtime |
Unsigned 32-bit integer |
srvsvc.update_immediately |
Update Immediately |
Unsigned 32-bit integer |
|
|
|
srvsvc.user |
User |
String |
srvsvc.user_path |
User Path |
String |
srvsvc.users |
Users |
Unsigned 32-bit integer |
srvsvc.version.major |
Major Version |
Unsigned 32-bit integer |
srvsvc.version.minor |
Minor Version |
Unsigned 32-bit integer |
srvsvc.xactmemsize |
Xact Mem Size |
Unsigned 32-bit integer |
svrsvc.info_level |
Info Level |
Unsigned 32-bit integer |
Microsoft Spool Subsystem (spoolss)
Table A-139. Microsoft Spool Subsystem (spoolss)
Field |
Field Name |
Type |
spoolss.Datatype |
Datatype |
String |
spoolss.addform.level |
Level |
Unsigned 32-bit integer |
spoolss.architecture |
Architecture name |
String |
spoolss.buffer.data |
Buffer data |
Byte array |
spoolss.buffer.size |
Buffer size |
Unsigned 32-bit integer |
spoolss.clientmajorversion |
Client major version |
Unsigned 32-bit integer |
spoolss.clientminorversion |
Client minor version |
Unsigned 32-bit integer |
|
|
|
spoolss.configfile |
Config file |
String |
spoolss.datafile |
Data file |
String |
spoolss.defaultdatatype |
Default data type |
String |
spoolss.dependentfiles |
Dependent files |
String |
spoolss.document |
Document name |
String |
spoolss.drivername |
Driver name |
String |
219
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
spoolss.driverpath |
Driver path |
String |
spoolss.driverversion |
Driver version |
Unsigned 32-bit integer |
spoolss.enumforms.num |
Num |
Unsigned 32-bit integer |
spoolss.enumjobs.firstjob |
First job |
Unsigned 32-bit integer |
spoolss.enumjobs.level |
Info level |
Unsigned 32-bit integer |
spoolss.enumjobs.numjobs |
Num jobs |
Unsigned 32-bit integer |
|
|
|
spoolss.enumprinterdata.dataData |
needsizedneeded |
Unsigned 32-bit integer |
|
|
|
spoolss.enumprinterdata.dataData |
offeredsize offered |
Unsigned 32-bit integer |
|
|
|
spoolss.enumprinterdata.indexEnum |
index |
Unsigned 32-bit integer |
|
|
|
spoolss.enumprinterdata.valueValue |
needsizedneeded |
Unsigned 32-bit integer |
|
|
|
spoolss.enumprinterdata.valueValue |
offersizedoffered |
Unsigned 32-bit integer |
|
|
|
spoolss.form.flags |
Flags |
Unsigned 32-bit integer |
spoolss.form.height |
Height |
Unsigned 32-bit integer |
spoolss.form.horiz |
Horizontal |
Unsigned 32-bit integer |
spoolss.form.left |
Left margin |
Unsigned 32-bit integer |
spoolss.form.level |
Level |
Unsigned 32-bit integer |
spoolss.form.name |
Name |
String |
spoolss.form.top |
Top |
Unsigned 32-bit integer |
spoolss.form.unknown |
Unknown |
Unsigned 32-bit integer |
spoolss.form.vert |
Vertical |
Unsigned 32-bit integer |
spoolss.form.width |
Width |
Unsigned 32-bit integer |
spoolss.getform.level |
Level |
Unsigned 32-bit integer |
spoolss.helpfile |
Help file |
String |
spoolss.hnd |
Context handle |
Byte array |
spoolss.job.id |
Job ID |
Unsigned 32-bit integer |
spoolss.job.pagesprinted |
Job pages printed |
Unsigned 32-bit integer |
spoolss.job.position |
Job position |
Unsigned 32-bit integer |
spoolss.job.priority |
Job priority |
Unsigned 32-bit integer |
spoolss.job.status |
Job status |
Unsigned 32-bit integer |
spoolss.job.status.blocked |
Blocked |
Boolean |
spoolss.job.status.deleted |
Deleted |
Boolean |
220
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
spoolss.job.status.deleting |
Deleting |
Boolean |
spoolss.job.status.error |
Error |
Boolean |
spoolss.job.status.offline |
Offline |
Boolean |
spoolss.job.status.paperout |
Paperout |
Boolean |
|
|
|
spoolss.job.status.paused |
Paused |
Boolean |
spoolss.job.status.printed |
Printed |
Boolean |
spoolss.job.status.printing |
Printing |
Boolean |
spoolss.job.status.spooling |
Spooling |
Boolean |
spoolss.job.status.user_interventionUser intervention |
Boolean |
|
|
|
|
spoolss.job.totalpages |
Job total pages |
Unsigned 32-bit integer |
spoolss.monitorname |
Monitor name |
String |
spoolss.needed |
Needed |
Unsigned 32-bit integer |
spoolss.notify_field |
Field |
Unsigned 16-bit integer |
spoolss.notify_info.count |
Count |
Unsigned 32-bit integer |
spoolss.notify_info.flags |
Flags |
Unsigned 32-bit integer |
spoolss.notify_info.version |
Version |
Unsigned 32-bit integer |
|
|
|
spoolss.notify_info_data.bufferBuffer |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_info_data.bufferBuffer.datadata |
Byte array |
|
|
|
|
spoolss.notify_info_data.bufferBuff.lenr length |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_info_data.bufsizeBuffer size |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_info_data.countCount |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_info_data.jobidJob Id |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_info_data.typeType |
Unsigned 16-bit integer |
|
|
|
|
spoolss.notify_info_data.value1Value1 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_info_data.value2Value2 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_option.count Count |
Unsigned 32-bit integer |
|
|
|
|
221
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
spoolss.notify_option.reserved1Reserved1 |
Unsigned 16-bit integer |
|
|
|
|
spoolss.notify_option.reserved2Reserved2 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_option.reserved3Reserved3 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_option.type |
Type |
Unsigned 16-bit integer |
spoolss.notify_option_data.countCount |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_options.countCount |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_options.flags Flags |
Unsigned 32-bit integer |
|
|
|
|
spoolss.notify_options.versionVersion |
Unsigned 32-bit integer |
|
|
|
|
spoolss.offered |
Offered |
Unsigned 32-bit integer |
spoolss.opnum |
Operation |
Unsigned 16-bit integer |
spoolss.outputfile |
Output file |
String |
spoolss.printer_attributes |
Attributes |
Unsigned 32-bit integer |
spoolss.printer_attributes.defaultDefault (9x/ME only) |
Boolean |
|
|
|
|
spoolss.printer_attributes.directDirect |
Boolean |
|
|
|
|
spoolss.printer_attributes.doDocompletetefirst |
Boolean |
|
|
|
|
spoolss.printer_attributes.enableEnablebidibidi (9x/ME only) |
Boolean |
|
|
|
|
spoolss.printer_attributes.enableEnabledevqdevq |
Boolean |
|
|
|
|
spoolss.printer_attributes.hiddenHidden |
Boolean |
|
|
|
|
spoolss.printer_attributes.keepKeepprintedjobs |
Boolean |
|
|
|
|
spoolss.printer_attributes.localLocal |
Boolean |
|
|
|
|
spoolss.printer_attributes.networkNetwork |
Boolean |
|
|
|
|
spoolss.printer_attributes.publishedPublished |
Boolean |
|
|
|
|
spoolss.printer_attributes.queQueued |
Boolean |
|
|
|
|
222
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
spoolss.printer_attributes.rawRawonlyonly |
Boolean |
|
|
|
|
spoolss.printer_attributes.sharedShared |
Boolean |
|
|
|
|
spoolss.printer_attributes.workWorkoffline (9x/ME only) |
Boolean |
|
|
|
|
spoolss.printer_local |
Printer local |
Unsigned 32-bit integer |
spoolss.printer_status |
Status |
Unsigned 32-bit integer |
spoolss.printerdata.data |
Data |
Byte array |
spoolss.printerdata.size |
Size |
Unsigned 32-bit integer |
spoolss.printerdata.type |
Printer data type |
Unsigned 32-bit integer |
spoolss.printerdata.value |
Printer data value |
String |
spoolss.printername |
Printer name |
String |
spoolss.rc |
Return code |
Unsigned 32-bit integer |
spoolss.relstr.offset |
Relative string offset |
Unsigned 32-bit integer |
spoolss.replyopenprinter.unk0Unknown 0 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.replyopenprinter.unk1Unknown 1 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.returned |
Returned |
Unsigned 32-bit integer |
spoolss.rffpcnex.flags |
RFFPCNEX flags |
Unsigned 32-bit integer |
spoolss.rffpcnex.flags.add_driverAdd driver |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.add_formAdd form |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.add_jobAdd job |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.add_portAdd port |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.add_printerAdd printer |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.add_processorAdd processor |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.configureConfigureport port |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.deleteDeletdriverdriver |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.deleteDeleteform form |
Boolean |
|
|
|
|
223
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
spoolss.rffpcnex.flags.delete |
Deletejob job |
Boolean |
|
|
|
spoolss.rffpcnex.flags.delete |
Deleporte port |
Boolean |
|
|
|
spoolss.rffpcnex.flags.delete |
Deleteprinterprinter |
Boolean |
|
|
|
spoolss.rffpcnex.flags.delete |
Deletproceprocessor |
Boolean |
|
|
|
spoolss.rffpcnex.flags.failed_Failedconnectionprinterprinterconnection |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.set_driverSet driver |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.set_formSet form |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.set_jobSet job |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.set_prinSeterprinter |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.timeoutTimeout |
Boolean |
|
|
|
|
spoolss.rffpcnex.flags.write_Writejob job |
Boolean |
|
|
|
|
spoolss.rffpcnex.options |
Options |
Unsigned 32-bit integer |
spoolss.routerreplyprinter.changeidChange id |
Unsigned 32-bit integer |
|
|
|
|
spoolss.routerreplyprinter.conditionCondition |
Unsigned 32-bit integer |
|
|
|
|
spoolss.routerreplyprinter.unknown1Unknown1 |
Unsigned 32-bit integer |
|
|
|
|
spoolss.rrpcn.changehigh |
Change high |
Unsigned 32-bit integer |
spoolss.rrpcn.changelow |
Change low |
Unsigned 32-bit integer |
spoolss.rrpcn.unk0 |
Unknown 0 |
Unsigned 32-bit integer |
spoolss.rrpcn.unk1 |
Unknown 1 |
Unsigned 32-bit integer |
spoolss.servermajorversion Server major version |
Unsigned 32-bit integer |
|
|
|
|
spoolss.serverminorversion Server minor version |
Unsigned 32-bit integer |
|
|
|
|
spoolss.servername |
Server name |
String |
spoolss.setform.level |
Level |
Unsigned 32-bit integer |
spoolss.setjob.cmd |
Set job command |
Unsigned 32-bit integer |
spoolss.setprinter_cmd |
Command |
Unsigned 32-bit integer |
224