Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
lanman.status |
Status |
Unsigned 16-bit integer |
lanman.timeinterval |
Time Interval |
Unsigned 16-bit integer |
lanman.tzoffset |
Time Zone Offset |
Signed 16-bit integer |
lanman.units_per_week |
Units Per Week |
Unsigned 16-bit integer |
lanman.user_comment |
User Comment |
String |
lanman.user_name |
User Name |
String |
lanman.ustruct_size |
Length of UStruct |
Unsigned 16-bit integer |
lanman.weekday |
Weekday |
Unsigned 8-bit integer |
lanman.workstation_domainWorkstation Domain |
String |
|
|
|
|
lanman.workstation_major Workstation Major Version |
Unsigned 8-bit integer |
|
|
|
|
lanman.workstation_minor Workstation Minor Version |
Unsigned 8-bit integer |
|
|
|
|
lanman.workstation_name |
Workstation Name |
String |
lanman.workstations |
Workstations |
String |
lanman.year |
Year |
Unsigned 16-bit integer |
Microsoft Windows Logon Protocol (netlogon)
Table A-143. Microsoft Windows Logon Protocol (netlogon)
Field |
Field Name |
Type |
netlogon.command |
Command |
Unsigned 8-bit integer |
netlogon.date_time |
Date/Time |
Unsigned 32-bit integer |
netlogon.db_count |
DB Count |
Unsigned 32-bit integer |
netlogon.db_index |
Database Index |
Unsigned 32-bit integer |
netlogon.domain_name |
Domain Name |
String |
netlogon.domain_sid_size |
Domain SID Size |
Unsigned 32-bit integer |
netlogon.flags.autolock |
Autolock |
Boolean |
netlogon.flags.enabled |
Enabled |
Boolean |
netlogon.flags.expire |
Expire |
Boolean |
netlogon.flags.homedir |
Homedir |
Boolean |
netlogon.flags.interdomain |
Interdomain Trust |
Boolean |
|
|
|
netlogon.flags.mns |
MNS User |
Boolean |
netlogon.flags.normal |
Normal User |
Boolean |
230
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
netlogon.flags.password |
Password |
Boolean |
netlogon.flags.server |
Server Trust |
Boolean |
netlogon.flags.temp_dup |
Temp Duplicate User |
Boolean |
netlogon.flags.workstation |
Workstation Trust |
Boolean |
netlogon.large_serial |
Large Serial Number |
|
netlogon.lm_token |
LM Token |
Unsigned 16-bit integer |
netlogon.lmnt_token |
LMNT Token |
Unsigned 16-bit integer |
netlogon.low_serial |
Low Serial Number |
Unsigned 32-bit integer |
netlogon.mailslot_name |
Mailslot Name |
String |
netlogon.major_version |
Workstation Major Version |
Unsigned 8-bit integer |
netlogon.minor_version |
Workstation Minor Version |
Unsigned 8-bit integer |
|
|
|
netlogon.nt_date_time |
NT Date/Time |
Date/Time stamp |
netlogon.nt_version |
NT Version |
Unsigned 32-bit integer |
netlogon.os_version |
Workstation OS Version |
Unsigned 8-bit integer |
netlogon.pdc_name |
PDC Name |
String |
netlogon.pulse |
Pulse |
Unsigned 32-bit integer |
netlogon.random |
Random |
Unsigned 32-bit integer |
netlogon.request_count |
Request Count |
Unsigned 16-bit integer |
netlogon.script_name |
Script Name |
String |
netlogon.server_name |
Server Name |
String |
netlogon.unicode_computerUnicodename Computer Name |
String |
|
|
|
|
netlogon.unicode_pdc_nameUnicode PDC Name |
String |
|
|
|
|
netlogon.update |
Update Type |
Unsigned 16-bit integer |
netlogon.user_name |
User Name |
String |
Microsoft Workstation Service (wkssvc)
Table A-144. Microsoft Workstation Service (wkssvc)
Field |
Field Name |
Type |
|
|
|
231
Appendix A. Ethereal Display Filter Fields
Mobile IP (mip)
Table A-145. Mobile IP (mip)
Field |
Field Name |
Type |
mip.auth.auth |
Authenticator |
Byte array |
mip.auth.spi |
SPI |
Unsigned 32-bit integer |
mip.b |
Broadcast Datagrams |
Boolean |
mip.coa |
Care of Address |
IPv4 address |
mip.code |
Reply Code |
Unsigned 8-bit integer |
mip.d |
Co-lcated Care-of Address |
Boolean |
mip.ext.auth.subtype |
Gen Auth Ext SubType |
Unsigned 8-bit integer |
mip.ext.len |
Extension Length |
Unsigned 16-bit integer |
mip.ext.type |
Extension Type |
Unsigned 8-bit integer |
mip.extension |
Extension |
Byte array |
mip.flags |
Flags |
Unsigned 8-bit integer |
mip.g |
GRE |
Boolean |
mip.haaddr |
Home Agent |
IPv4 address |
mip.homeaddr |
Home Address |
IPv4 address |
mip.ident |
Identification |
Date/Time stamp |
mip.life |
Lifetime |
Unsigned 16-bit integer |
mip.m |
Minimal Encapsulation |
Boolean |
mip.nai |
NAI |
String |
mip.s |
Simultaneous Bindings |
Boolean |
mip.t |
Reverse Tunneling |
Boolean |
mip.type |
Message Type |
Unsigned 8-bit integer |
mip.v |
Van Jacobson |
Boolean |
Modbus/TCP (mbtcp)
Table A-146. Modbus/TCP (mbtcp)
Field |
Field Name |
Type |
modbus_tcp.func_code |
function code |
Unsigned 8-bit integer |
modbus_tcp.len |
length |
Unsigned 16-bit integer |
modbus_tcp.prot_id |
protocol identifier |
Unsigned 16-bit integer |
modbus_tcp.trans_id |
transaction identifier |
Unsigned 16-bit integer |
232
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
modbus_tcp.unit_id |
unit identifier |
Unsigned 8-bit integer |
Mount Service (mount)
Table A-147. Mount Service (mount)
Field |
Field Name |
Type |
mount.dump.directory |
Directory |
String |
mount.dump.entry |
Mount List Entry |
No value |
mount.dump.hostname |
Hostname |
String |
mount.export.directory |
Directory |
String |
mount.export.entry |
Export List Entry |
No value |
mount.export.group |
Group |
String |
mount.export.groups |
Groups |
No value |
mount.flavor |
Flavor |
Unsigned 32-bit integer |
mount.flavors |
Flavors |
Unsigned 32-bit integer |
mount.path |
Path |
String |
mount.pathconf.link_max |
Maximum number of links |
Unsigned 32-bit integer |
|
to a file |
|
mount.pathconf.mask |
Reply error/status bits |
Unsigned 16-bit integer |
mount.pathconf.mask.chownCHOWNrestrictedRESTRICTED |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORall_ALL |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORlinkmaxLINK_MAX |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORmaxcanonMAX_CANON |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORmaxinputMAX_INPUT |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORnamemaxNAME_MAX |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORpathmaxPATH_MAX |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORpipebufPIPE_BUF |
Boolean |
|
|
|
|
mount.pathconf.mask.error_ERRORvdisableVDISABLE |
Boolean |
|
|
|
|
233