Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
spoolss.textstatus |
Text status |
String |
spoolss.time.day |
Day |
Unsigned 32-bit integer |
spoolss.time.dow |
Day of week |
Unsigned 32-bit integer |
spoolss.time.hour |
Hour |
Unsigned 32-bit integer |
spoolss.time.minute |
Minute |
Unsigned 32-bit integer |
spoolss.time.month |
Month |
Unsigned 32-bit integer |
spoolss.time.msec |
Millisecond |
Unsigned 32-bit integer |
spoolss.time.second |
Second |
Unsigned 32-bit integer |
spoolss.time.year |
Year |
Unsigned 32-bit integer |
spoolss.username |
User name |
String |
spoolss.writeprinter.numwrittenNum |
written |
Unsigned 32-bit integer |
|
|
|
Microsoft Telephony API Service (tapi)
Table A-140. Microsoft Telephony API Service (tapi)
Field |
Field Name |
Type |
tapi.hnd |
Context Handle |
Byte array |
tapi.rc |
Return code |
Unsigned 32-bit integer |
tapi.unknown.bytes |
Unknown bytes |
Byte array |
tapi.unknown.long |
Unknown long |
Unsigned 32-bit integer |
tapi.unknown.string |
Unknown string |
String |
Microsoft Windows Browser Protocol (browser)
Table A-141. Microsoft Windows Browser Protocol (browser)
Field |
Field Name |
Type |
browser.backup.count |
Backup List Requested |
Unsigned 8-bit integer |
|
Count |
|
browser.backup.server |
Backup Server |
String |
browser.backup.token |
Backup Request Token |
Unsigned 32-bit integer |
browser.browser_to_promoteBrowser to Promote |
String |
|
|
|
|
browser.command |
Command |
Unsigned 8-bit integer |
225
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
browser.comment |
Host Comment |
String |
browser.election.criteria |
Election Criteria |
Unsigned 32-bit integer |
browser.election.desire |
Election Desire |
Unsigned 8-bit integer |
browser.election.desire.backupBackup |
|
Boolean |
|
|
|
browser.election.desire.domainDomain |
masterMaster |
Boolean |
|
|
|
browser.election.desire.masterMaster |
|
Boolean |
|
|
|
browser.election.desire.nt |
NT |
Boolean |
browser.election.desire.standbyStandby |
|
Boolean |
|
|
|
browser.election.desire.winsWINS |
|
Boolean |
|
|
|
browser.election.os |
Election OS |
Unsigned 8-bit integer |
browser.election.os.nts |
NT Server |
Boolean |
browser.election.os.ntw |
NT Workstation |
Boolean |
browser.election.os.wfw |
WfW |
Boolean |
browser.election.revision |
Election Revision |
Unsigned 16-bit integer |
browser.election.version |
Election Version |
Unsigned 8-bit integer |
browser.mb_server |
Master Browser Server |
String |
|
Name |
|
browser.os_major |
OS Major Version |
Unsigned 8-bit integer |
browser.os_minor |
OS Minor Version |
Unsigned 8-bit integer |
browser.period |
Update Periodicity |
Unsigned 32-bit integer |
browser.proto_major |
Browser Protocol Major |
Unsigned 8-bit integer |
|
Version |
|
browser.proto_minor |
Browser Protocol Minor |
Unsigned 8-bit integer |
|
Version |
|
browser.response_computerResponsename Computer Name |
String |
|
|
|
|
browser.server |
Server Name |
String |
browser.server_type |
Server Type |
Unsigned 32-bit integer |
browser.server_type.apple |
Apple |
Boolean |
browser.server_type.backupBackupcontrollerController |
Boolean |
|
|
|
|
browser.server_type.browserBackup.backupBrowser |
Boolean |
|
|
|
|
226
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
browser.server_type.browserDomain.domainMastermasterBrowser |
Boolean |
|
|
|
|
browser.server_type.browserMaster.masterBrowser |
Boolean |
|
|
|
|
browser.server_type.browserPotential.potentialBrowser |
Boolean |
|
|
|
|
browser.server_type.dialin |
Dialin |
Boolean |
browser.server_type.domainDomaincontrollerController |
Boolean |
|
|
|
|
browser.server_type.domainenumDomain Enum |
Boolean |
|
|
|
|
browser.server_type.local |
Local |
Boolean |
browser.server_type.memberMember |
Boolean |
|
|
|
|
browser.server_type.novell Novell |
Boolean |
|
|
|
|
browser.server_type.nts |
NT Server |
Boolean |
browser.server_type.ntw |
NT Workstation |
Boolean |
browser.server_type.osf |
OSF |
Boolean |
browser.server_type.print |
Boolean |
|
browser.server_type.server |
Server |
Boolean |
|
|
|
browser.server_type.sql |
SQL |
Boolean |
browser.server_type.time |
Time Source |
Boolean |
browser.server_type.vms |
VMS |
Boolean |
browser.server_type.w95 |
Windows 95+ |
Boolean |
browser.server_type.wfw |
WfW |
Boolean |
browser.server_type.workstatiWorkstation |
Boolean |
|
|
|
|
browser.server_type.xenix |
Xenix |
Boolean |
browser.sig |
Signature |
Unsigned 16-bit integer |
browser.unused |
Unused flags |
Unsigned 8-bit integer |
browser.update_count |
Update Count |
Unsigned 8-bit integer |
browser.uptime |
Uptime |
Unsigned 32-bit integer |
227
Appendix A. Ethereal Display Filter Fields
Microsoft Windows Lanman Remote API Protocol (lanman)
Table A-142. Microsoft Windows Lanman Remote API Protocol (lanman)
Field |
Field Name |
Type |
lanman.aux_data_desc |
Auxiliary Data Descriptor |
String |
lanman.available_bytes |
Available Bytes |
Unsigned 16-bit integer |
lanman.available_count |
Available Entries |
Unsigned 16-bit integer |
lanman.bad_pw_count |
Bad Password Count |
Unsigned 16-bit integer |
lanman.code_page |
Code Page |
Unsigned 16-bit integer |
lanman.comment |
Comment |
String |
lanman.computer_name |
Computer Name |
String |
lanman.continuation_from |
Continuation from |
Unsigned 32-bit integer |
|
message in frame |
|
lanman.convert |
Convert |
Unsigned 16-bit integer |
lanman.country_code |
Country Code |
Unsigned 16-bit integer |
lanman.current_time |
Current Date/Time |
Date/Time stamp |
lanman.day |
Day |
Unsigned 8-bit integer |
lanman.duration |
Duration of Session |
Time duration |
lanman.entry_count |
Entry Count |
Unsigned 16-bit integer |
lanman.enumeration_domainEnumeration Domain |
String |
|
|
|
|
lanman.full_name |
Full Name |
String |
lanman.function_code |
Function Code |
Unsigned 16-bit integer |
lanman.group_name |
Group Name |
String |
lanman.homedir |
Home Directory |
String |
lanman.hour |
Hour |
Unsigned 8-bit integer |
lanman.hundredths |
Hundredths of a second |
Unsigned 8-bit integer |
lanman.kickoff_time |
Kickoff Date/Time |
Date/Time stamp |
lanman.last_logoff |
Last Logoff Date/Time |
Date/Time stamp |
lanman.last_logon |
Last Logon Date/Time |
Date/Time stamp |
lanman.level |
Detail Level |
Unsigned 16-bit integer |
lanman.logoff_code |
Logoff Code |
Unsigned 16-bit integer |
lanman.logoff_time |
Logoff Date/Time |
Date/Time stamp |
lanman.logon_code |
Logon Code |
Unsigned 16-bit integer |
lanman.logon_domain |
Logon Domain |
String |
lanman.logon_hours |
Logon Hours |
Byte array |
lanman.logon_server |
Logon Server |
String |
228
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
lanman.max_storage |
Max Storage |
Unsigned 32-bit integer |
lanman.minute |
Minute |
Unsigned 8-bit integer |
lanman.month |
Month |
Unsigned 8-bit integer |
lanman.msecs |
Milliseconds |
Unsigned 32-bit integer |
lanman.new_password |
New Password |
Byte array |
lanman.num_logons |
Number of Logons |
Unsigned 16-bit integer |
lanman.old_password |
Old Password |
Byte array |
lanman.operator_privileges |
Operator Privileges |
Unsigned 32-bit integer |
|
|
|
lanman.other_domains |
Other Domains |
String |
lanman.param_desc |
Parameter Descriptor |
String |
lanman.parameters |
Parameters |
String |
lanman.password |
Password |
String |
lanman.password_age |
Password Age |
Time duration |
lanman.password_can_changePassword Can Change |
Date/Time stamp |
|
|
|
|
lanman.password_must_changePassword Must Change |
Date/Time stamp |
|
|
|
|
lanman.privilege_level |
Privilege Level |
Unsigned 16-bit integer |
lanman.recv_buf_len |
Receive Buffer Length |
Unsigned 16-bit integer |
lanman.reserved |
Reserved |
Unsigned 32-bit integer |
lanman.ret_desc |
Return Descriptor |
String |
lanman.script_path |
Script Path |
String |
lanman.second |
Second |
Unsigned 8-bit integer |
lanman.send_buf_len |
Send Buffer Length |
Unsigned 16-bit integer |
lanman.server.comment |
Server Comment |
String |
lanman.server.major |
Major Version |
Unsigned 8-bit integer |
lanman.server.minor |
Minor Version |
Unsigned 8-bit integer |
lanman.server.name |
Server Name |
String |
lanman.share.comment |
Share Comment |
String |
lanman.share.current_uses |
Share Current Uses |
Unsigned 16-bit integer |
lanman.share.max_uses |
Share Max Uses |
Unsigned 16-bit integer |
lanman.share.name |
Share Name |
String |
lanman.share.password |
Share Password |
String |
lanman.share.path |
Share Path |
String |
lanman.share.permissions |
Share Permissions |
Unsigned 16-bit integer |
lanman.share.type |
Share Type |
Unsigned 16-bit integer |
229