Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
nisplus.ping.dir |
directory |
String |
nisplus.ping.time |
time |
Date/Time stamp |
nisplus.server |
server |
No value |
nisplus.server.name |
name |
String |
nisplus.servers |
nis servers |
No value |
nisplus.status |
status |
Unsigned 32-bit integer |
nisplus.table |
table |
No value |
nisplus.table.col |
column |
No value |
nisplus.table.col.flags |
flags |
No value |
nisplus.table.col.name |
column name |
String |
nisplus.table.cols |
columns |
No value |
nisplus.table.flags.asn |
asn |
Boolean |
nisplus.table.flags.binary |
binary |
Boolean |
nisplus.table.flags.casesensitivecasesensitive |
Boolean |
|
|
|
|
nisplus.table.flags.encryptedencrypted |
Boolean |
|
|
|
|
nisplus.table.flags.modified modified |
Boolean |
|
|
|
|
nisplus.table.flags.searchablesearchable |
Boolean |
|
|
|
|
nisplus.table.flags.xdr |
xdr |
Boolean |
nisplus.table.maxcol |
max columns |
Unsigned 16-bit integer |
nisplus.table.path |
path |
String |
nisplus.table.separator |
separator |
Unsigned 8-bit integer |
nisplus.table.type |
type |
String |
nisplus.tag |
tag |
No value |
nisplus.tag.type |
type |
Unsigned 32-bit integer |
nisplus.tag.value |
value |
String |
nisplus.taglist |
taglist |
No value |
nisplus.zticks |
zticks |
Unsigned 32-bit integer |
NIS+ Callback (nispluscb)
Table A-154. NIS+ Callback (nispluscb)
Field |
Field Name |
Type |
239
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
nispluscb.entries |
entries |
No value |
nispluscb.entry |
entry |
No value |
NSPI (nspi)
Table A-155. NSPI (nspi)
Field |
Field Name |
Type |
nspi.opnum |
Operation |
Unsigned 16-bit integer |
NTLM Secure Service Provider (ntlmssp)
Table A-156. NTLM Secure Service Provider (ntlmssp)
Field |
Field Name |
Type |
dcerpc.negotiateflags |
Flags |
Unsigned 32-bit integer |
ntlmssp.auth.domain |
Domain name |
String |
ntlmssp.auth.domain.maxlenDomain |
name max length |
Unsigned 16-bit integer |
|
|
|
ntlmssp.auth.domain.offset |
Domain name offset |
Unsigned 32-bit integer |
|
|
|
ntlmssp.auth.domain.strlen |
Domain name length |
Unsigned 16-bit integer |
|
|
|
ntlmssp.auth.hostname |
Host name |
String |
ntlmssp.auth.hostname.maxlenHostname max length |
Unsigned 16-bit integer |
|
|
|
|
ntlmssp.auth.hostname.offsetHostname offset |
Unsigned 32-bit integer |
|
|
|
|
ntlmssp.auth.hostname.strlenHostname length |
Unsigned 16-bit integer |
|
|
|
|
ntlmssp.auth.lmresponse |
Lan Manager Response |
Byte array |
ntlmssp.auth.lmresponse.maxlenLan Manager response |
Unsigned 16-bit integer |
|
|
max length |
|
ntlmssp.auth.lmresponse.offsetLan Manager response |
Unsigned 16-bit integer |
|
|
offset |
|
ntlmssp.auth.lmresponse.strlenLan Manager response |
Unsigned 16-bit integer |
|
|
length |
|
ntlmssp.auth.ntresponse |
NTLM Response |
Byte array |
240
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
|
Type |
ntlmssp.auth.ntresponse.maxlenNTLM |
response max |
Unsigned 16-bit integer |
|
|
length |
|
|
ntlmssp.auth.ntresponse.offsetNTLM |
response offset |
Unsigned 32-bit integer |
|
|
|
|
|
ntlmssp.auth.ntresponse.strlenNTLM |
response length |
Unsigned 16-bit integer |
|
|
|
|
|
ntlmssp.auth.unknown1 |
Unknown1 |
|
Byte array |
ntlmssp.auth.unknown1.maxlenUnknown1 max length |
Unsigned 16-bit integer |
||
|
|
|
|
ntlmssp.auth.unknown1.offsetUnknown1 offset |
|
Unsigned 32-bit integer |
|
|
|
|
|
ntlmssp.auth.unknown1.strlenUnknown1 length |
|
Unsigned 16-bit integer |
|
|
|
|
|
ntlmssp.auth.username |
User name |
|
String |
ntlmssp.auth.username.maxlenUsername max length |
Unsigned 16-bit integer |
||
|
|
|
|
ntlmssp.auth.username.offsetUsername offset |
|
Unsigned 32-bit integer |
|
|
|
|
|
ntlmssp.auth.username.strlenUsername length |
|
Unsigned 16-bit integer |
|
|
|
|
|
ntlmssp.challenge.unknown1Unknown1 |
|
Unsigned 32-bit integer |
|
|
|
|
|
ntlmssp.challenge.unknown2Unknown2 |
|
Unsigned 32-bit integer |
|
|
|
|
|
ntlmssp.identifier |
NTLMSSP identifier |
|
String |
ntlmssp.messagetype |
NTLM Message Type |
Unsigned 32-bit integer |
|
ntlmssp.negotiate.callingworkstationCalling workstation name |
String |
||
|
|
||
ntlmssp.negotiate.callingworkstationCallingworkstation.buffer name |
Unsigned 32-bit integer |
||
|
buffer |
|
|
ntlmssp.negotiate.callingworkstationCallingworkstation.maxlen name |
Unsigned 16-bit integer |
||
|
max length |
|
|
ntlmssp.negotiate.callingworkstationCallingworkstationlen. |
name |
Unsigned 16-bit integer |
|
|
length |
|
|
ntlmssp.negotiate.domain |
Calling workstation |
|
String |
|
domain |
|
|
ntlmssp.negotiate.domain.bufferCalling workstation |
|
Unsigned 32-bit integer |
|
|
domain buffer |
|
|
ntlmssp.negotiate.domain.maxCallieng workstation |
|
Unsigned 16-bit integer |
|
|
domain max length |
|
|
241
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
|
ntlmssp.negotiate.domain.strlenCalling |
workstation |
Unsigned 16-bit integer |
|
|
domain length |
|
|
ntlmssp.negotiate00000008 |
Request 0x00000008 |
Boolean |
|
ntlmssp.negotiate00000400 |
Negotiate |
0x00000400 |
Boolean |
ntlmssp.negotiate00000800 |
Negotiate |
0x00000800 |
Boolean |
ntlmssp.negotiate128 |
Negotiate |
128 |
Boolean |
ntlmssp.negotiatealwayssignNegotiate |
Always Sign |
Boolean |
|
|
|
||
ntlmssp.negotiatechallengeacceptresponseNegotiate Challenge |
Boolean |
||
|
Accept Response |
|
|
ntlmssp.negotiatechallengeinitresponseNegotiate Challenge Init |
Boolean |
||
|
Response |
|
|
ntlmssp.negotiatechallengenonntsessionkeyNegotiate Challenge Non |
Boolean |
||
|
NT Session Key |
|
|
ntlmssp.negotiatedatagramstyleNegotiate Datagram Style |
Boolean |
||
|
|
||
ntlmssp.negotiatedomainsuppliedNegotiate Domain |
Boolean |
||
|
Supplied |
|
|
ntlmssp.negotiatekeyexch |
Negotiate Key Exchange |
Boolean |
|
ntlmssp.negotiatelmkey |
Negotiate Lan Manager |
Boolean |
|
|
Key |
|
|
ntlmssp.negotiatenetware |
Negotiate Netware |
Boolean |
|
ntlmssp.negotiatent00100000Negotiate |
0x00100000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent00200000Negotiate |
0x00200000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent00400000Negotiate |
0x00400000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent01000000Negotiate |
0x01000000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent02000000Negotiate |
0x02000000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent04000000Negotiate |
0x04000000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent08000000Negotiate |
0x08000000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent10000000Negotiate |
0x10000000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatent80000000Negotiate |
0x80000000 |
Boolean |
|
|
|
|
|
ntlmssp.negotiatentlm |
Negotiate NTLM key |
Boolean |
|
242