NAME

ethereal - Interactively browse network traffic


SYNOPSYS

ethereal-a capture autostop condition ] ... [ -b number of ring buffer files ] [ -B byte view height ] [ -c count ] [ -f capture filter expression ] [ -h ] [ -i interface ] [ -k ] [ -l ] [ -m font ] [ -n ] [ -N resolving flags ]  [ -o preference setting ] ... [ -p ] [ -P packet list height ] [ -Q ] [ -r infile ] [ -R display filter expression ] [ -S ] [ -s snaplen ] [ -T tree view height ] [ -t time stamp format ] [ -v ] [ -w savefile] [ infile ]


DESCRIPTION

Ethereal is a GUI network protocol analyzer. It lets you interactively browse packet data from a live network or from a previously saved capture file. Ethereal's native capture file format is libpcap format, which is also the format used by tcpdump and various other tools. In addition, Ethereal can read capture files from snoop and atmsnoop, Shomiti/Finisar Surveyor, Novell LANalyzer, Network General/Network Associates DOS-based Sniffer (compressed or uncompressed), Microsoft Network Monitor, AIX's iptrace, Cinco Networks NetXRay, Network Associates Windows-based Sniffer, AG Group/WildPackets EtherPeek/TokenPeek/AiroPeek, RADCOM's WAN/LAN analyzer, Lucent/Ascend router debug output, HP-UX's nettl, the dump output from Toshiba's ISDN routers, the output from i4btrace from the ISDN4BSD project, the output in IPLog format from the Cisco Secure Intrusion Detection System, pppd logs (pppdump format), the output from VMS's TCPIPtrace utility, the text output from the DBS Etherwatch VMS utility, traffic capture files from Visual Networks' Visual UpTime, and the output from CoSine L2 debug. There is no need to tell Ethereal what type of file you are reading; it will determine the file type by itself. Ethereal is also capable of reading any of these file formats if they are compressed using gzip. Ethereal recognizes this directly from the file; the '.gz' extension is not required for this purpose.

Like other protocol analyzers, Ethereal's main window shows 3 views of a packet. It shows a summary line, briefly describing what the packet is. A protocol tree is shown, allowing you to drill down to exact protocol or field that you interested in. Finally, a hex dump shows you exactly what the packet looks like when it goes over the wire.

In addition, Ethereal has some features that make it unique. It can assemble all the packets in a TCP conversation and show you the ASCII (or EBCDIC, or hex) data in that conversation. Display filters in Ethereal are very powerful; more fields are filterable in Ethereal than in other protocol analyzers, and the syntax you can use to create your filters is richer. As Ethereal progresses, expect more and more protocol fields to be allowed in display filters.

Packet capturing is performed with the pcap library. The capture filter syntax follows the rules of the pcap library. This syntax is different from the display filter syntax.

Compressed file support uses (and therefore requires) the zlib library. If the zlib library is not present, Ethereal will compile, but will be unable to read compressed files.

The pathname of a capture file to be read can be specified with the -r option or can be specified as a command-line argument.


OPTIONS

Most users will want to start Ethereal without options and configure it from the menus instead. Those users may just skip this section.

-a
Specify a criterion that specifies when Ethereal is to stop writing to a capture file. The criterion is of the form test:value, where test is one of:

duration
Stop writing to a capture file after value seconds have elapsed.

filesize
Stop writing to a capture file after it reaches a size of value kilobytes (where a kilobyte is 1000 bytes, not 1024 bytes).

-b
If a maximum capture file size was specified, cause Ethereal to run in ``ring buffer'' mode, with the specified number of files. In ``ring buffer'' mode, Ethereal will write to several capture files; the name of the first file, while the capture is in progress, will be the name specified by the -w flag, and subsequent files with have .n appended, with n counting up.

When the first capture file fills up, Ethereal will switch to writing to the next file, until it fills up the last file, at which point it'll discard the data in the first file and start writing to that file. When that file fills up, Ethereal will discard the data in the next file and start writing to it, and so on.

When the capture completes, the files will be renamed to have names based on the number of the file and on the date and time at which packets most recently started being written to the file.

-B
Set the initial height of the byte view (bottom) pane.

-c
Set the default number of packets to read when capturing live data.

-f
Set the capture filter expression.

-h
Print the version and options and exit.

-i
Set the name of the network interface or pipe to use for live packet capture. Network interface names should match one of the names listed in ``netstat -i'' or ``ifconfig -a''. Pipe names should be either the name of a FIFO (named pipe) or ``-'' to read data from the standard input. Data read from pipes must be in libpcap format.

-k
Start the capture session immediately. If the -i flag was specified, the capture uses the specified interface. Otherwise, Ethereal searches the list of interfaces, choosing the first non-loopback interface if there are any non-loopback interfaces, and choosing the first loopback interface if there are no non-loopback interfaces; if there are no interfaces, Ethereal reports an error and doesn't start the capture.

-l
Turn on automatic scrolling if the packet display is being updated automatically as packets arrive during a capture (as specified by the -S flag).

-m
Set the name of the font used by Ethereal for most text. Ethereal will construct the name of the bold font used for the data in the byte view pane that corresponds to the field selected in the protocol tree pane from the name of the main text font.

-n
Disable network object name resolution (such as hostname, TCP and UDP port names).

-N
Turn on name resolving for particular types of addresses and port numbers, with name resolving for other types of addresses and port numbers turned off; the argument is a string that may contain the letters m to enable MAC address resolution, n to enable network address resolution, and t to enable transport-layer port number resolution. This overrides -n if both -N and -n are present.

-o
Set a preference value, overriding the default value and any value read from a preference file. The argument to the flag is a string of the form prefname:value, where prefname is the name of the preference (which is the same name that would appear in the preference file), and value is the value to which it should be set.

-p
Don't put the interface into promiscuous mode. Note that the interface might be in promiscuous mode for some other reason; hence, -p cannot be used to ensure that the only traffic that is captured is traffic sent to or from the machine on which Ethereal is running, broadcast traffic, and multicast traffic to addresses received by that machine.

-P
Set the initial height of the packet list (top) pane.

-Q
Cause Ethereal to exit after the end of capture session (useful in batch mode with -c option for instance); this option requires the -i and -w parameters.

-r
Read packet data from infile.

-R
When reading a capture file specified with the -r flag, causes the specified filter (which uses the syntax of display filters, rather than that of capture filters) to be applied to all packets read from the capture file; packets not matching the filter are discarded.

-S
Perform the live packet capture in a separate process, and automatically update the packet display as packets are seen.

-s
Set the default snapshot length to use when capturing live data. No more than snaplen bytes of each network packet will be read into memory, or saved to disk.

-T
Set the initial height of the tree view (middle) pane.

-t
Set the format of the packet timestamp displayed in the packet list window. The format can be one of 'r' (relative), 'a' (absolute), 'ad' (absolute with date), or 'd' (delta). The relative time is the time elapsed between the first packet and the current packet. The absolute time is the actual time the packet was captured, with no date displayed; the absolute date and time is the actual time and date the packet was captured. The delta time is the time since the previous packet was captured. The default is relative.

-v
Print the version and exit.

-w
Set the default capture file name.


INTERFACE

MENU ITEMS

File:Open, File:Close, File:Reload
Open, close, or reload a capture file. The File:Open dialog box allows a filter to be specified; when the capture file is read, the filter is applied to all packets read from the file, and packets not matching the filter are discarded.

File:Save, File:Save As
Save the current capture, or the packets currently displayed from that capture, to a file. Check boxes let you select whether to save all packets, or just those that have passed the current display filter and/or those that are currently marked, and an option menu lets you select (from a list of file formats in which at particular capture, or the packets currently displayed from that capture, can be saved), a file format in which to save it.

File:Print
Print, for all the packets in the current capture, either the summary line for the packet or the protocol tree view of the packet; when printing the protocol tree view, the hex dump of the packet can be printed as well. Printing options can be set with the Edit:Preferences menu item, or in the dialog box popped up by this item.

File:Print Packet
Print a fully-expanded protocol tree view of the currently-selected packet. Printing options can be set with the Edit:Preferences menu item.

File:Quit
Exit the application.

Edit:Find Frame
Search forward or backward, starting with the currently selected packet (or the most recently selected packet, if no packet is selected), for a packet matching a given display filter expression.

Edit:Find Next
Search forward, starting with the currently selected packet (or the most recently selected packet, if no packet is selected), for a packet matching the filter from the previous search.

Edit:Find Previous
Search backward, starting with the currently selected packet (or the most recently selected packet, if no packet is selected), for a packet matching the filter from the previous search.

Edit:Go To Frame
Go to a particular numbered packet.

Edit:Mark Frame
Mark (or unmark if currently marked) the selected packet. The field ``frame.marked'' is set for frames that are marked, so that, for example, a display filters can be used to display only marked frames, and so that the Find Frame menu item can be used to find the next or previous marked frame.

Edit:Mark All Frames
Mark all packets that are currently displayed.

Edit:Unmark All Frames
Unmark all packets that are currently displayed.

Edit:Preferences
Set the packet printing, column display, TCP stream coloring, and GUI options (see Preferences below).

Edit:Capture Filters
Edit the saved list of capture filters, allowing filters to be added, changed, or deleted.

Edit:Display Filters
Edit the saved list of display filters, allowing filters to be added, changed, or deleted.

Edit:Protocols
Edit the list of protocols, allowing protocol dissection to be enabled or disabled.

Capture:Start
Initiate a live packet capture (see Capture Options below). A temporary file will be created to hold the capture. The location of the file can be chosen by setting your TMPDIR environment variable before starting Ethereal. Otherwise, the default TMPDIR location is system-dependent, but is likely either /var/tmp or /tmp.

Capture:Stop
In a capture that updates the packet display as packets arrive (so that Ethereal responds to user input other than pressing the ``Stop'' button in the capture packet statistics dialog box), stop the capture.

Display:Options
Pop up a dialog allowing you to set the format of the packet timestamp displayed in the packet list window to relative, absolute, absolute date and time, or delta, to enable or disable the automatic scrolling of the packet list while a live capture is in progress or to enable or disable translation of addresses to names in the display.

Display:Match
Create a display filter, or add to the display filter strip at the bottom, a display filter based on the data currently highlighted in the protocol tree, and apply the filter.

If that data is a field that can be tested in a display filter expression, the display filter will test that field; otherwise, the display filter will be based on absolute offset within the packet, and so could be unreliable if the packet contains protocols with variable-length headers, such as a source-routed token-ring packet.

The Selected option creates a display filter that tests for a match of the data; the Not Selected option creates a display filter that tests for a non-match of the data. The And Selected, Or Selected, And Not Selected, and Or Not Selected options add to the end of the display filter in the strip at the bottom an AND or OR operator followed by the new display filter expression.

Display:Prepare
Create a display filter, or add to the display filter strip at the bottom, a display filter based on the data currently highlighted in the protocol tree, but don't apply the filter.

Display:Colorize Display
Change the foreground and background colors of the packet information in the list of packets, based upon display filters. The list of display filters is applied to each packet sequentially. After the first display filter matches a packet, any additional display filters in the list are ignored. Therefore, if you are filtering on the existence of protocols, you should list the higher-level protocols first, and the lower-level protocols last.

Display:Collapse All
Collapse the protocol tree branches.

Display:Expand All
Expand all branches of the protocol tree.

Display:Expand All
Expands all branches of the protocol tree.

Display:Show Packet In New Window
Create a new window containing a protocol tree view and a hex dump window of the currently selected packet; this window will continue to display that packet's protocol tree and data even if another packet is selected.

Display:User Specified Decodes
Create a new window showing whether any protocol ID to dissector mappings have been changed by the user. This window also allows the user to reset all decodes to their default values.

Tools:Plugins
See what dynamically loadable dissector plugin modules have been loaded (see ``Plugins'' below).

Tools:Follow TCP Stream
If you have a TCP packet selected, display the contents of the data stream for the TCP connection to which that packet belongs, as text, in a separate window, and leave the list of packets in a filtered state, with only those packets that are part of that TCP connection being displayed. You can revert to your old view by pressing ENTER in the display filter text box, thereby invoking your old display filter (or resetting it back to no display filter).

The window in which the data stream is displayed lets you select whether to display:

whether to display the entire conversation, or one or the other side of it;

whether the data being displayed is to be treated as ASCII or EBCDIC text or as raw hex data;

and lets you print what's currently being displayed, using the same print options that are used for the File:Print Packet menu item, or save it as text to a file.

Tools:Decode As
If you have a packet selected, present a dialog allowing you to change which dissectors are used to decode this packet. The dialog has one panel each for the link layer, network layer and transport layer protocol/port numbers, and will allow each of these to be changed independently. For example, if the selected packet is a TCP packet to port 12345, using this dialog you can instruct Ethereal to decode all packets to or from that TCP port as HTTP packets.

Tools:Protocol Hierarchy Statistics
Show the number of packets, and the number of bytes in those packets, for each protocol in the trace. It organizes the protocols in the same hierarchy in which they were found in the trace. Besides counting the packets in which the protocol exists, a count is also made for packets in which the protocol is the last protocol in the stack. These last-protocol counts show you how many packets (and the byte count associated with those packets) ended in a particular protocol. In the table, they are listed under ``End Packets'' and ``End Bytes''.

WINDOWS

Main Window
The main window is split into three panes. You can resize each pane using a ``thumb'' at the right end of each divider line. Below the panes is a strip that shows the current filter and informational text.
Top Pane
The top pane contains the list of network packets that you can scroll through and select. By default, the packet number, packet timestamp, source and destination addresses, protocol, and description are displayed for each packet; the Columns page in the dialog box popped up by Edit:Preferences lets you change this (although, unfortunately, you currently have to save the preferences, and exit and restart Ethereal, for those changes to take effect).

If you click on the heading for a column, the display will be sorted by that column; clicking on the heading again will reverse the sort order for that column.

An effort is made to display information as high up the protocol stack as possible, e.g. IP addresses are displayed for IP packets, but the MAC layer address is displayed for unknown packet types.

The right mouse button can be used to pop up a menu of operations.

The middle mouse button can be used to mark a packet.

Middle Pane
The middle pane contains a protocol tree for the currently-selected packet. The tree displays each field and its value in each protocol header in the stack. The right mouse button can be used to pop up a menu of operations.

Bottom Pane
The lowest pane contains a hex dump of the actual packet data. Selecting a field in the protocol tree highlights the corresponding bytes in this section.

The right mouse button can be used to pop up a menu of operations.

Current Filter
A display filter can be entered into the strip at the bottom. A filter for HTTP, HTTPS, and DNS traffic might look like this:
  tcp.port == 80 || tcp.port == 443 || tcp.port == 53

Selecting the Filter: button lets you choose from a list of named filters that you can optionally save. Pressing the Return or Enter keys, or selecting the Apply button, will cause the filter to be applied to the current list of packets. Selecting the Reset button clears the display filter so that all packets are displayed.

Preferences
The Preferences dialog lets you control various personal preferences for the behavior of Ethereal.
Printing Preferences
The radio buttons at the top of the Printing page allow you choose between printing packets with the File:Print Packet menu item as text or PostScript, and sending the output directly to a command or saving it to a file. The Command: text entry box, on UNIX-compatible systems, is the command to send files to (usually lpr), and the File: entry box lets you enter the name of the file you wish to save to. Additionally, you can select the File: button to browse the file system for a particular save file.

Column Preferences
The Columns page lets you specify the number, title, and format of each column in the packet list.

The Column title entry is used to specify the title of the column displayed at the top of the packet list. The type of data that the column displays can be specified using the Column format option menu. The row of buttons on the left perform the following actions:

Add New
Adds a new column to the list.

Delete
Deletes the currently selected list item.

Up / Down
Moves the selected list item up or down one position.

OK
Currently has no effect.

Save
Saves the current column format as the default.

Cancel
Closes the dialog without making any changes.

TCP Streams Preferences
The TCP Streams page can be used to change the color of the text displayed in the TCP stream window. To change a color, simply select an attribute from the ``Set:'' menu and use the color selector to get the desired color. The new text colors are displayed in a sample window.

User Interface Preferences
The User Interface page is used to modify small aspects of the GUI to your own personal taste:
Scrollbars
The vertical scrollbars in the three panes can be set to be either on the left or the right.

Selection Bars
The selection bar in the packet list and protocol tree can have either a ``browse'' or ``select'' behavior. If the selection bar has a ``browse'' behavior, the arrow keys will move an outline of the selection bar, allowing you to browse the rest of the list or tree without changing the selection until you press the space bar. If the selection bar has a ``select'' behavior, the arrow keys will move the selection bar and change the selection to the new item in the packet list or protocol tree.

Tree Line Style
Trees can be drawn with no lines, solid lines, or dotted lines between items, or can be drawn with ``tab'' headings.

Tree Expander Style
The expander item that can be clicked to show or hide items under a tree item can be omitted (note that this will prevent you from changing whether those items are shown or hidden!), or can be drawn as squares, triangles, or circles.

Hex Display
The highlight method in the hex dump display for the selected protocol item can be set to use either inverse video, or bold characters.

Save Window Position
If this item is selected, the position of the main Ethereal window will be saved when Ethereal exits, and used when Ethereal is started again.

Save Window Size
If this item is selected, the size of the main Ethereal window will be saved when Ethereal exits, and used when Ethereal is started again.

Fonts
The ``Font...'' button lets you select the font to be used for most text.

Colors
The ``Colors...'' button lets you select the colors to be used for instance for the marked frames.

Capture Preferences
The Capture page lets you specify various parameters for capturing live packet data; these are used the first time a capture is started.

The Interface: combo box lets you specify the interface from which to capture packet data, or the name of a FIFO from which to get the packet data. You can specify whether the interface is to be put in promiscuous mode or not with the Capture packets in promiscuous mode check box, can specify that the display should be updated as packets are captured with the Update list of packets in real time check box, and can specify whether in such a capture the packet list pane should scroll to show the most recently captured packets with the Automatic scrolling in live capture check box.

Protocol Preferences
There are also pages for various protocols that Ethereal dissects, controlling the way Ethereal handles those protocols.

Edit Capture Filter List
Edit Display Filter List
Capture Filter
Display Filter
Read Filter
Search Filter
The Edit Capture Filter List dialog lets you create, modify, and delete capture filters, and the Edit Display Filter List dialog lets you create, modify, and delete display filters.

The Capture Filter dialog lets you do all of the editing operations listed, and also lets you choose or construct a filter to be used when capturing packets.

The Display Filter dialog lets you do all of the editing operations listed, and also lets you choose or construct a filter to be used to filter the current capture being viewed.

The Read Filter dialog lets you do all of the editing operations listed, and also lets you choose or construct a filter to be used to as a read filter for a capture file you open.

The Search Filter dialog lets you do all of the editing operations listed, and also lets you choose or construct a filter expression to be used in a find operation.

In all of those dialogs, the Filter name entry specifies a descriptive name for a filter, e.g. Web and DNS traffic. The Filter string entry is the text that actually describes the filtering action to take, as described above.The dialog buttons perform the following actions:

New
If there is text in the two entry boxes, creates a new associated list item.

Change
Modifies the currently selected list item to match what's in the entry boxes.

Copy
Makes a copy of the currently selected list item.

Delete
Deletes the currently selected list item.

Add Expression...
For display filter expressions, pops up a dialog box to allow you to construct a filter expression to test a particular field; it offers lists of field names, and, when appropriate, lists from which to select tests to perform on the field and values with which to compare it. In that dialog box, the OK button will cause the filter expression you constructed to be entered into the Filter string entry at the current cursor position.

OK
In the Capture Filter dialog, closes the dialog box and makes the filter in the Filter string entry the filter in the Capture Preferences dialog. In the Display Filter dialog, closes the dialog box and makes the filter in the Filter string entry the current display filter, and applies it to the current capture. In the Read Filter dialog, closes the dialog box and makes the filter in the Filter string entry the filter in the Open Capture File dialog. In the Search Filter dialog, closes the dialog box and makes the filter in the Filter string entry the filter in the Find Frame dialog.

Apply
Makes the filter in the Filter string entry the current display filter, and applies it to the current capture.

Save
Saves the current filter list in $HOME/.ethereal/cfilters on UNIX-compatible systems, and %APPDATA%\Ethereal\cfilters (or, if %APPDATA% isn't defined, %USERPROFILE%\Application Data\Ethereal\cfilters) on Windows systems, if the list of filters being edited is the list of capture filters, or in $HOME/.ethereal/dfilters on UNIX-compatible systems, and %APPDATA%\Ethereal\dfilters (or, if %APPDATA% isn't defined, %USERPROFILE%\Application Data\Ethereal\dfilters) on Windows systems, if the list of filters being edited is the list of display filters.

Close
Closes the dialog without doing anything with the filter in the Filter string entry.

Capture Options
The Capture Options dialog lets you specify various parameters for capturing live packet data.

The Interface: field lets you specify the interface from which to capture packet data or a command from which to get the packet data via a pipe.

The Limit each packet to ... bytes check box and field lets you specify a maximum number of bytes per packet to capture and save; if the check box is not checked, the limit will be 65535 bytes.

The Capture packets in promiscuous mode check box lets you specify whether the interface should be put into promiscuous mode when capturing.

The Filter: entry lets you specify the capture filter using a tcpdump-style filter string as described above.

The File: entry lets you specify the file into which captured packets should be saved, as in the Printer Options dialog above. If not specified, the captured packets will be saved in a temporary file; you can save those packets to a file with the File:Save As menu item.

The Use ring buffer check box lets you specify that the capture should be done in ``ring buffer'' mode; the Number of files field lets you specify the number of files in the ring buffer.

The Update list of packets in real time check box lets you specify whether the display should be updated as packets are captured and, if you specify that, the Automatic scrolling in live capture check box lets you specify the packet list pane should automatically scroll to show the most recently captured packets as new packets arrive.

The Stop capture after ... packet(s) captured check box and field let you specify that Ethereal should stop capturing after having captured some number of packets; if the check box is not checked, Ethereal will not stop capturing at some fixed number of captured packets.

If ``ring buffer'' mode is not specified, the Stop capture after ... kilobyte(s) captured check box and field let you specify that Ethereal should stop capturing after the the file to which captured packets are being saved grows as large as or larger than some specified number of kilobytes (where a kilobyte is 1000 bytes, not 1024 bytes). If the check box is not checked, Ethereal will not stop capturing at some capture file size (although the operating system on which Ethereal is running, or the available disk space, may still limit the maximum size of a capture file).

If ``ring buffer'' mode is specified, that field becomes the Rotate capture file very ... kilobyte(s) field, and specifies the number of kilobytes at which to start writing to a new ring buffer file; the check box is forced to be checked, as ``ring buffer'' mode requires a file size to be specified.

The Stop capture after ... second(s) check box and field let you specify that Ethereal should stop capturing after it has been capturing for some number of seconds; if the check box is not checked, Ethereal will not stop capturing after some fixed time has elapsed.

The Enable MAC name resolution, Enable network name resolution and Enable transport name resolution check boxes let you specify whether MAC addresses, network addresses, and transport-layer port numbers should be translated to names.

Display Options
The Display Options dialog lets you specify the format of the time stamp in the packet list. You can select ``Time of day'' for absolute time stamps, ``Date and time of day'' for absolute time stamps with the date, ``Seconds since beginning of capture'' for relative time stamps, or ``Seconds since previous frame'' for delta time stamps. You can also specify whether, when the display is updated as packets are captured, the list should automatically scroll to show the most recently captured packets or not and whether addresses or port numbers should be translated to names in the display on a MAC, network and transport layer basis.

Plugins
The Plugins dialog lets you view the dissector plugin modules available on your system.

The Plugins List shows the name and version of each dissector plugin module found on your system. The plugins are searched in the following directories: the lib/ethereal/plugins/$VERSION directory under the main installation directory (for example, /usr/local/lib/ethereal/plugins/$VERSION), /usr/lib/ethereal/plugins/$VERSION, /usr/local/lib/ethereal/plugins/$VERSION, and $HOME/.ethereal/plugins on UNIX-compatible systems, and in the plugins\$VERSION directory under the main installation directory (for example, C:\Program Files\Ethereal\plugins\$VERSION) and %APPDATA%\Ethereal\plugins\$VERSION (or, if %APPDATA% isn't defined, %USERPROFILE%\Application Data\Ethereal\plugins\$VERSION) on Windows systems; $VERSION is the version number of the plugin interface, which is typically the version number of Ethereal. Note that a dissector plugin module may support more than one protocol; there is not necessarily a one-to-one correspondence between dissector plugin modules and protocols. Protocols supported by a dissector plugin module are enabled and disabled using the Edit:Protocols dialog box, just as protocols built into Ethereal are.


CAPTURE FILTER SYNTAX

See manual page of tcpdump(8).


DISPLAY FILTER SYNTAX

Display filters help you remove the noise from a packet trace and let you see only the packets that interest you. If a packet meets the requirements expressed in your display filter, then it is displayed in the list of packets. Display filters let you compare the fields within a protocol against a specific value, compare fields against fields, and to check the existence of specified fields or protocols.

The simplest display filter allows you to check for the existence of a protocol or field. If you want to see all packets which contain the IPX protocol, the filter would be ``ipx''. (Without the quotation marks) To see all packets that contain a Token-Ring RIF field, use ``tr.rif''.

Fields can also be compared against values. The comparison operators can be expressed either through C-like symbols, or through English-like abbreviations:

    eq, ==    Equal
    ne, !=    Not equal
    gt, >     Greater than
    lt, <     Less Than
    ge, >=    Greater than or Equal to
    le, <=    Less than or Equal to

Furthermore, each protocol field is typed. The types are:

    Unsigned integer (either 8-bit, 16-bit, 24-bit, or 32-bit)
    Signed integer (either 8-bit, 16-bit, 24-bit, or 32-bit)
    Boolean
    Ethernet address (6 bytes)
    Byte string (n-number of bytes)
    IPv4 address
    IPv6 address
    IPX network number
    String (text)
    Double-precision floating point number

An integer may be expressed in decimal, octal, or hexadecimal notation. The following three display filters are equivalent:

    frame.pkt_len > 10
    frame.pkt_len > 012
    frame.pkt_len > 0xa

Boolean values are either true or false. In a display filter expression testing the value of a Boolean field, ``true'' is expressed as 1 or any other non-zero value, and ``false'' is expressed as zero. For example, a token-ring packet's source route field is boolean. To find any source-routed packets, a display filter would be:

    tr.sr == 1

Non source-routed packets can be found with:

    tr.sr == 0

Ethernet addresses, as well as a string of bytes, are represented in hex digits. The hex digits may be separated by colons, periods, or hyphens:

    fddi.dst eq ff:ff:ff:ff:ff:ff
    ipx.srcnode == 0.0.0.0.0.1
    eth.src == aa-aa-aa-aa-aa-aa

If a string of bytes contains only one byte, then it is represented as an unsigned integer. That is, if you are testing for hex value 'ff' in a one-byte byte-string, you must compare it agains '0xff' and not 'ff'.

IPv4 addresses can be represented in either dotted decimal notation, or by using the hostname:

    ip.dst eq www.mit.edu
    ip.src == 192.168.1.1

IPv4 addresses can be compared with the same logical relations as numbers: eq, ne, gt, ge, lt, and le. The IPv4 address is stored in host order, so you do not have to worry about how the endianness of an IPv4 address when using it in a display filter.

Classless InterDomain Routing (CIDR) notation can be used to test if an IPv4 address is in a certain subnet. For example, this display filter will find all packets in the 129.111 Class-B network:

    ip.addr == 129.111.0.0/16

Remember, the number after the slash represents the number of bits used to represent the network. CIDR notation can also be used with hostnames, in this example of finding IP addresses on the same Class C network as 'sneezy':

    ip.addr eq sneezy/24

The CIDR notation can only be used on IP addresses or hostnames, not in variable names. So, a display filter like ``ip.src/24 == ip.dst/24'' is not valid. (yet)

IPX networks are represented by unsigned 32-bit integers. Most likely you will be using hexadecimal when testing for IPX network values:

    ipx.srcnet == 0xc0a82c00

A slice operator also exists. You can check the substring (byte-string) of any protocol or field. For example, you can filter on the vendor portion of an ethernet address (the first three bytes) like this:

    eth.src[0:3] == 00:00:83

If the length of your byte-slice is only one byte, then it is still represented in hex, but without the preceding ``0x'':

    llc[3] == aa

You can use the slice operator on a protocol name, too. And remember, the ``frame'' protocol encompasses the entire packet, allowing you to look at the nth byte of a packet regardless of its frame type (Ethernet, token-ring, etc.).

    token[0:5] ne 0.0.0.1.1
    ipx[0:2] == ff:ff
    llc[3:1] eq 0xaa

The following syntax governs slices:

        [i:j]   i = start_offset, j = length
        [i-j]   i = start_offet, j = end_offset, inclusive.
        [i]     i = start_offset, length = 1
        [:j]    start_offset = 0, length = j
        [i:]    start_offset = i, end_offset = end_of_field

Offsets and lengths can be negative, in which case they indicate the offset from the end of the field. Here's how to check the last 4 bytes of a frame:

    frame[-4:4] == 0.1.2.3

or

    frame[-4:] == 0.1.2.3

You can create complex concatenations of slices using the comma operator:

        field[1,3-5,9:] == 01:03:04:05:09:0a:0b

All the above tests can be combined together with logical expressions. These too are expressable in C-like syntax or with English-like abbreviations:

    and, &&   Logical AND
    or, ||    Logical OR
    not, !    Logical NOT

Expressions can be grouped by parentheses as well. The following are all valid display filter expression:

    tcp.port == 80 and ip.src == 192.168.2.1
    not llc
    (ipx.srcnet == 0xbad && ipx.srnode == 0.0.0.0.0.1) || ip
    tr.dst[0:3] == 0.6.29 xor tr.src[0:3] == 0.6.29

A special caveat must be given regarding fields that occur more than once per packet. ``ip.addr'' occurs twice per IP packet, once for the source address, and once for the destination address. Likewise, tr.rif.ring fields can occur more than once per packet. The following two expressions are not equivalent:

        ip.addr ne 192.168.4.1
    not ip.addr eq 192.168.4.1

The first filter says ``show me IP packets where an ip.addr exists that does not equal 192.168.4.1''. That is, as long as one ip.addr in the packet does not equal 192.168.44.1, the packet passes the display filter. The second filter ``don't show me any packets that have at least one ip.addr field equal to 192.168.4.1''. If one ip.addr is 192.168.4.1, the packet does not pass. If neither ip.addr fields is 192.168.4.1, then the packet passes.

It is easy to think of the 'ne' and 'eq' operators as having an implict ``exists'' modifier when dealing with multiply-recurring fields. ``ip.addr ne 192.168.4.1'' can be thought of as ``there exists an ip.addr that does not equal 192.168.4.1''.

Be careful with multiply-recurring fields; they can be confusing.

Care must also be taken when using the display filter to remove noise from the packet trace. If you want to e.g. filter out all IP multicast packets to address 224.1.2.3, then using:

    ip.dst ne 224.1.2.3

may be too restrictive. Filtering with ``ip.dst'' selects only those IP packets that satisfy the rule. Any other packets, including all non-IP packets, will not displayed. For displaying also the non-IP packets, you can use one of the following two expressions:

    not ip or ip.dst ne 224.1.2.3
    not ip.addr eq 224.1.2.3

The first filter uses ``not ip'' to include all non-IP packets and then lets ``ip.dst ne 224.1.2.3'' to filter out the unwanted IP packets. The second filter has already been explained above where filtering with multiply occuring fields was discussed.

The following is a table of protocol and protocol fields that are filterable in Ethereal. The abbreviation of the protocol or field is given. This abbreviation is what you use in the display filter. The type of the field is also given.

802.1q Virtual LAN (vlan)

    vlan.cfi  CFI
        Unsigned 16-bit integer
        CFI
    vlan.etype  Type
        Unsigned 16-bit integer
        Type
    vlan.id  ID
        Unsigned 16-bit integer
        ID
    vlan.len  Length
        Unsigned 16-bit integer
        Length
    vlan.priority  Priority
        Unsigned 16-bit integer
        Priority
    vlan.trailer  Trailer
        Byte array
        VLAN Trailer

802.1x Authentication (eapol)

    eapol.keydes.index.indexnum  Index Number
        Unsigned 8-bit integer
        Key Index number
    eapol.keydes.index.keytype  Key Type
        Boolean
        Key Type (unicast/broadcast)
    eapol.keydes.key  Key
        Byte array
        Key
    eapol.keydes.key_iv  Key IV
        Byte array
        Key Initialization Vector
    eapol.keydes.key_signature  Key Signature
        Byte array
        Key Signature
    eapol.keydes.keylen  Key Length
        Unsigned 16-bit integer
        Key Length
    eapol.keydes.replay_counter  Replay Counter
        Unsigned 64-bit integer
        Replay Counter
    eapol.keydes.type  Descriptor Type
        Unsigned 8-bit integer
        Key Descriptor Type
    eapol.len  Length
        Unsigned 16-bit integer
        Length
    eapol.type  Type
        Unsigned 8-bit integer
    eapol.version  Version
        Unsigned 8-bit integer

AOL Instant Messenger (aim)

    aim.channel  Channel ID
        Unsigned 8-bit integer
    aim.cmd_start  Command Start
        Unsigned 8-bit integer
    aim.datalen  Data Field Length
        Unsigned 16-bit integer
    aim.fnac.family  FNAC Family ID
        Unsigned 16-bit integer
    aim.fnac.subtype  FNAC Subtype ID
        Unsigned 16-bit integer
    aim.seqno  Sequence Number
        Unsigned 16-bit integer

ATM (atm)

    atm.vci  VCI
        Unsigned 16-bit integer
    atm.vpi  VPI
        Unsigned 8-bit integer

ATM LAN Emulation (lane)

Ad hoc On-demand Distance Vector Routing Protocol (aodv)

    aodv.dest_ip  Destination IP
        IPv4 address
        Destination IP Address
    aodv.dest_seqno  Destination Sequence Number
        Unsigned 32-bit integer
        Destination Sequence Number
    aodv.destcount  Destination Count
        Unsigned 8-bit integer
        Unreachable Destinations Count
    aodv.flags  Flags
        Unsigned 16-bit integer
        Flags
    aodv.flags.rerr_nodelete  RERR No Delete
        Boolean
    aodv.flags.rrep_ack  RREP Acknowledgement
        Boolean
    aodv.flags.rrep_repair  RREP Repair
        Boolean
    aodv.flags.rreq_gratuitous  RREQ Gratuitous
        Boolean
    aodv.flags.rreq_join  RREQ Join
        Boolean
    aodv.flags.rreq_repair  RREQ Repair
        Boolean
    aodv.hopcount  Hop Count
        Unsigned 8-bit integer
        Hop Count
    aodv.lifetime  Lifetime
        Unsigned 32-bit integer
        Lifetime
    aodv.orig_ip  Originator IP
        IPv4 address
        Originator IP Address
    aodv.orig_seqno  Originator Sequence Number
        Unsigned 32-bit integer
        Originator Sequence Number
    aodv.rreq_id  RREQ Id
        Unsigned 32-bit integer
        RREQ Id
    aodv.type  Type
        Unsigned 8-bit integer
        AODV packet type
    aodv.unreach_dest_ip  Unreachable Destination IP
        IPv4 address
        Unreachable Destination  IP Address
    aodv.unreach_dest_seqno  Unreachable Destination Sequence Number
        Unsigned 32-bit integer
        Unreachable Destination Sequence Number

Ad hoc On-demand Distance Vector Routing Protocol v6 (aodv6)

    aodv6.dest_ip  Destination IP
        IPv6 address
        Destination IP Address
    aodv6.dest_seqno  Destination Sequence Number
        Unsigned 32-bit integer
        Destination Sequence Number
    aodv6.destcount  Destination Count
        Unsigned 8-bit integer
        Unreachable Destinations Count
    aodv6.ext_length  Extension Length
        Unsigned 8-bit integer
        Extension Data Length
    aodv6.ext_type  Extension Type
        Unsigned 8-bit integer
        Extension Format Type
    aodv6.flags  Flags
        Unsigned 16-bit integer
        Flags
    aodv6.flags.rerr_nodelete  RERR No Delete
        Boolean
    aodv6.flags.rrep_ack  RREP Acknowledgment
        Boolean
    aodv6.flags.rrep_repair  RREP Repair
        Boolean
    aodv6.flags.rreq_gratuitous  RREQ Gratuitous
        Boolean
    aodv6.flags.rreq_join  RREQ Join
        Boolean
    aodv6.flags.rreq_repair  RREQ Repair
        Boolean
    aodv6.hello_interval  Hello Interval
        Unsigned 32-bit integer
        Hello Interval Extension
    aodv6.hopcount  Hop Count
        Unsigned 8-bit integer
        Hop Count
    aodv6.lifetime  Lifetime
        Unsigned 32-bit integer
        Lifetime
    aodv6.orig_ip  Originator IP
        IPv6 address
        Originator IP Address
    aodv6.orig_seqno  Originator Sequence Number
        Unsigned 32-bit integer
        Originator Sequence Number
    aodv6.rreq_id  RREQ ID
        Unsigned 32-bit integer
        RREQ ID
    aodv6.timestamp  Timestamp
        Unsigned 64-bit integer
        Timestamp Extension
    aodv6.type  Type
        Unsigned 8-bit integer
        AODV6 packet type
    aodv6.unreach_dest_ip  Unreachable Destination IP
        IPv6 address
        Unreachable Destination  IP Address
    aodv6.unreach_dest_seqno  Unreachable Destination Sequence Number
        Unsigned 32-bit integer
        Unreachable Destination Sequence Number

Address Resolution Protocol (arp)

    arp.dst.atm_num_e164  Target ATM number (E.164)
        String
    arp.dst.atm_num_nsap  Target ATM number (NSAP)
        Byte array
    arp.dst.atm_subaddr  Target ATM subaddress
        Byte array
    arp.dst.hlen  Target ATM number length
        Unsigned 8-bit integer
    arp.dst.htype  Target ATM number type
        Boolean
    arp.dst.hw  Target hardware address
        Byte array
    arp.dst.hw_mac  Target MAC address
        6-byte Hardware (MAC) Address
    arp.dst.pln  Target protocol size
        Unsigned 8-bit integer
    arp.dst.proto  Target protocol address
        Byte array
    arp.dst.proto_ipv4  Target IP address
        IPv4 address
    arp.dst.slen  Target ATM subaddress length
        Unsigned 8-bit integer
    arp.dst.stype  Target ATM subaddress type
        Boolean
    arp.hw.size  Hardware size
        Unsigned 8-bit integer
    arp.hw.type  Hardware type
        Unsigned 16-bit integer
    arp.opcode  Opcode
        Unsigned 16-bit integer
    arp.proto.size  Protocol size
        Unsigned 8-bit integer
    arp.proto.type  Protocol type
        Unsigned 16-bit integer
    arp.src.atm_num_e164  Sender ATM number (E.164)
        String
    arp.src.atm_num_nsap  Sender ATM number (NSAP)
        Byte array
    arp.src.atm_subaddr  Sender ATM subaddress
        Byte array
    arp.src.hlen  Sender ATM number length
        Unsigned 8-bit integer
    arp.src.htype  Sender ATM number type
        Boolean
    arp.src.hw  Sender hardware address
        Byte array
    arp.src.hw_mac  Sender MAC address
        6-byte Hardware (MAC) Address
    arp.src.pln  Sender protocol size
        Unsigned 8-bit integer
    arp.src.proto  Sender protocol address
        Byte array
    arp.src.proto_ipv4  Sender IP address
        IPv4 address
    arp.src.slen  Sender ATM subaddress length
        Unsigned 8-bit integer
    arp.src.stype  Sender ATM subaddress type
        Boolean

Aggregate Server Access Protocol (asap)

    asap.cause.code  Cause code
        Unsigned 16-bit integer
    asap.cause.info  Cause info
        Byte array
    asap.cause.length  Cause length
        Unsigned 16-bit integer
    asap.cause.padding  Padding
        Byte array
    asap.cookie.cookie  Cookie
        Byte array
    asap.ipv4_address.ipv4_address  IP Version 4 address
        IPv4 address
    asap.ipv6_address.ipv6_address  IP Version 6 address
        IPv6 address
    asap.message_flags  Flags
        Unsigned 8-bit integer
    asap.message_length  Length
        Unsigned 16-bit integer
    asap.message_type  Type
        Unsigned 8-bit integer
    asap.parameter.length  Parameter length
        Unsigned 16-bit integer
    asap.parameter.padding  Padding
        Byte array
    asap.parameter.type  Parameter Type
        Unsigned 16-bit integer
    asap.parameter.value  Parameter value
        Byte array
    asap.pe_identifier.pe_identifier  PE identifier
        Unsigned 32-bit integer
    asap.pool_element.home_enrp_server_identifier  Home ENRP server identifier
        Unsigned 32-bit integer
    asap.pool_element.pe_identifier  PE identifier
        Unsigned 32-bit integer
    asap.pool_element.registration_life  Registration life
        Signed 32-bit integer
    asap.pool_handle.pool_handle  Pool handle
        Byte array
    asap.pool_member_slection_policy.type  Policy type
        Unsigned 8-bit integer
    asap.pool_member_slection_policy.value  Policy value
        Signed 24-bit integer
    asap.sctp_transport.port  Port
        Unsigned 16-bit integer
    asap.sctp_transport.reserved  Reserved
        Unsigned 16-bit integer
    asap.server_information.m_bit  M-Bit
        Boolean
    asap.server_information.reserved  Reserved
        Unsigned 32-bit integer
    asap.server_information.server_identifier  Server identifier
        Unsigned 32-bit integer
    asap.tcp_transport.port  Port
        Unsigned 16-bit integer
    asap.tcp_transport.reserved  Reserved
        Unsigned 16-bit integer
    asap.udp_transport.port  Port
        Unsigned 16-bit integer
    asap.udp_transport.reserved  Reserved
        Unsigned 16-bit integer

Andrew File System (AFS) (afs)

    afs.backup  Backup
        Boolean
        Backup Server
    afs.backup.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.backup.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.bos  BOS
        Boolean
        Basic Oversee Server
    afs.bos.baktime  Backup Time
        Date/Time stamp
        Backup Time
    afs.bos.cell  Cell
        String
        Cell
    afs.bos.cmd  Command
        String
        Command
    afs.bos.content  Content
        String
        Content
    afs.bos.data  Data
        Byte array
        Data
    afs.bos.date  Date
        Unsigned 32-bit integer
        Date
    afs.bos.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.bos.error  Error
        String
        Error
    afs.bos.file  File
        String
        File
    afs.bos.flags  Flags
        Unsigned 32-bit integer
        Flags
    afs.bos.host  Host
        String
        Host
    afs.bos.instance  Instance
        String
        Instance
    afs.bos.key  Key
        Byte array
        key
    afs.bos.keychecksum  Key Checksum
        Unsigned 32-bit integer
        Key Checksum
    afs.bos.keymodtime  Key Modification Time
        Date/Time stamp
        Key Modification Time
    afs.bos.keyspare2  Key Spare 2
        Unsigned 32-bit integer
        Key Spare 2
    afs.bos.kvno  Key Version Number
        Unsigned 32-bit integer
        Key Version Number
    afs.bos.newtime  New Time
        Date/Time stamp
        New Time
    afs.bos.number  Number
        Unsigned 32-bit integer
        Number
    afs.bos.oldtime  Old Time
        Date/Time stamp
        Old Time
    afs.bos.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.bos.parm  Parm
        String
        Parm
    afs.bos.path  Path
        String
        Path
    afs.bos.size  Size
        Unsigned 32-bit integer
        Size
    afs.bos.spare1  Spare1
        String
        Spare1
    afs.bos.spare2  Spare2
        String
        Spare2
    afs.bos.spare3  Spare3
        String
        Spare3
    afs.bos.status  Status
        Signed 32-bit integer
        Status
    afs.bos.statusdesc  Status Description
        String
        Status Description
    afs.bos.type  Type
        String
        Type
    afs.bos.user  User
        String
        User
    afs.cb  Callback
        Boolean
        Callback
    afs.cb.callback.expires  Expires
        Date/Time stamp
        Expires
    afs.cb.callback.type  Type
        Unsigned 32-bit integer
        Type
    afs.cb.callback.version  Version
        Unsigned 32-bit integer
        Version
    afs.cb.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.cb.fid.uniq  FileID (Uniqifier)
        Unsigned 32-bit integer
        File ID (Uniqifier)
    afs.cb.fid.vnode  FileID (VNode)
        Unsigned 32-bit integer
        File ID (VNode)
    afs.cb.fid.volume  FileID (Volume)
        Unsigned 32-bit integer
        File ID (Volume)
    afs.cb.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.error  Error
        Boolean
        Error
    afs.error.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.fs  File Server
        Boolean
        File Server
    afs.fs.acl.a  _A_dminister
        Boolean
        Administer
    afs.fs.acl.count.negative  ACL Count (Negative)
        Unsigned 32-bit integer
        Number of Negative ACLs
    afs.fs.acl.count.positive  ACL Count (Positive)
        Unsigned 32-bit integer
        Number of Positive ACLs
    afs.fs.acl.d  _D_elete
        Boolean
        Delete
    afs.fs.acl.datasize  ACL Size
        Unsigned 32-bit integer
        ACL Data Size
    afs.fs.acl.entity  Entity (User/Group)
        String
        ACL Entity (User/Group)
    afs.fs.acl.i  _I_nsert
        Boolean
        Insert
    afs.fs.acl.k  _L_ock
        Boolean
        Lock
    afs.fs.acl.l  _L_ookup
        Boolean
        Lookup
    afs.fs.acl.r  _R_ead
        Boolean
        Read
    afs.fs.acl.w  _W_rite
        Boolean
        Write
    afs.fs.callback.expires  Expires
        Date/Time stamp
        Expires
    afs.fs.callback.type  Type
        Unsigned 32-bit integer
        Type
    afs.fs.callback.version  Version
        Unsigned 32-bit integer
        Version
    afs.fs.cps.spare1  CPS Spare1
        Unsigned 32-bit integer
        CPS Spare1
    afs.fs.cps.spare2  CPS Spare2
        Unsigned 32-bit integer
        CPS Spare2
    afs.fs.cps.spare3  CPS Spare3
        Unsigned 32-bit integer
        CPS Spare3
    afs.fs.data  Data
        Byte array
        Data
    afs.fs.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.fs.fid.uniq  FileID (Uniqifier)
        Unsigned 32-bit integer
        File ID (Uniqifier)
    afs.fs.fid.vnode  FileID (VNode)
        Unsigned 32-bit integer
        File ID (VNode)
    afs.fs.fid.volume  FileID (Volume)
        Unsigned 32-bit integer
        File ID (Volume)
    afs.fs.flength  FLength
        Unsigned 32-bit integer
        FLength
    afs.fs.ipaddr  IP Address
        IPv4 address
        IP Address
    afs.fs.length  Length
        Unsigned 32-bit integer
        Length
    afs.fs.motd  Message of the Day
        String
        Message of the Day
    afs.fs.name  Name
        String
        Name
    afs.fs.newname  New Name
        String
        New Name
    afs.fs.offlinemsg  Offline Message
        String
        Volume Name
    afs.fs.offset  Offset
        Unsigned 32-bit integer
        Offset
    afs.fs.oldname  Old Name
        String
        Old Name
    afs.fs.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.fs.status.anonymousaccess  Anonymous Access
        Unsigned 32-bit integer
        Anonymous Access
    afs.fs.status.author  Author
        Unsigned 32-bit integer
        Author
    afs.fs.status.calleraccess  Caller Access
        Unsigned 32-bit integer
        Caller Access
    afs.fs.status.clientmodtime  Client Modification Time
        Date/Time stamp
        Client Modification Time
    afs.fs.status.dataversion  Data Version
        Unsigned 32-bit integer
        Data Version
    afs.fs.status.dataversionhigh  Data Version (High)
        Unsigned 32-bit integer
        Data Version (High)
    afs.fs.status.filetype  File Type
        Unsigned 32-bit integer
        File Type
    afs.fs.status.group  Group
        Unsigned 32-bit integer
        Group
    afs.fs.status.interfaceversion  Interface Version
        Unsigned 32-bit integer
        Interface Version
    afs.fs.status.length  Length
        Unsigned 32-bit integer
        Length
    afs.fs.status.linkcount  Link Count
        Unsigned 32-bit integer
        Link Count
    afs.fs.status.mask  Mask
        Unsigned 32-bit integer
        Mask
    afs.fs.status.mask.fsync  FSync
        Boolean
        FSync
    afs.fs.status.mask.setgroup  Set Group
        Boolean
        Set Group
    afs.fs.status.mask.setmode  Set Mode
        Boolean
        Set Mode
    afs.fs.status.mask.setmodtime  Set Modification Time
        Boolean
        Set Modification Time
    afs.fs.status.mask.setowner  Set Owner
        Boolean
        Set Owner
    afs.fs.status.mask.setsegsize  Set Segment Size
        Boolean
        Set Segment Size
    afs.fs.status.mode  Unix Mode
        Unsigned 32-bit integer
        Unix Mode
    afs.fs.status.owner  Owner
        Unsigned 32-bit integer
        Owner
    afs.fs.status.parentunique  Parent Unique
        Unsigned 32-bit integer
        Parent Unique
    afs.fs.status.parentvnode  Parent VNode
        Unsigned 32-bit integer
        Parent VNode
    afs.fs.status.segsize  Segment Size
        Unsigned 32-bit integer
        Segment Size
    afs.fs.status.servermodtime  Server Modification Time
        Date/Time stamp
        Server Modification Time
    afs.fs.status.spare2  Spare 2
        Unsigned 32-bit integer
        Spare 2
    afs.fs.status.spare3  Spare 3
        Unsigned 32-bit integer
        Spare 3
    afs.fs.status.spare4  Spare 4
        Unsigned 32-bit integer
        Spare 4
    afs.fs.status.synccounter  Sync Counter
        Unsigned 32-bit integer
        Sync Counter
    afs.fs.symlink.content  Symlink Content
        String
        Symlink Content
    afs.fs.symlink.name  Symlink Name
        String
        Symlink Name
    afs.fs.timestamp  Timestamp
        Date/Time stamp
        Timestamp
    afs.fs.token  Token
        Byte array
        Token
    afs.fs.viceid  Vice ID
        Unsigned 32-bit integer
        Vice ID
    afs.fs.vicelocktype  Vice Lock Type
        Unsigned 32-bit integer
        Vice Lock Type
    afs.fs.volid  Volume ID
        Unsigned 32-bit integer
        Volume ID
    afs.fs.volname  Volume Name
        String
        Volume Name
    afs.fs.volsync.spare1  Volume Creation Timestamp
        Date/Time stamp
        Volume Creation Timestamp
    afs.fs.volsync.spare2  Spare 2
        Unsigned 32-bit integer
        Spare 2
    afs.fs.volsync.spare3  Spare 3
        Unsigned 32-bit integer
        Spare 3
    afs.fs.volsync.spare4  Spare 4
        Unsigned 32-bit integer
        Spare 4
    afs.fs.volsync.spare5  Spare 5
        Unsigned 32-bit integer
        Spare 5
    afs.fs.volsync.spare6  Spare 6
        Unsigned 32-bit integer
        Spare 6
    afs.fs.xstats.clientversion  Client Version
        Unsigned 32-bit integer
        Client Version
    afs.fs.xstats.collnumber  Collection Number
        Unsigned 32-bit integer
        Collection Number
    afs.fs.xstats.timestamp  XStats Timestamp
        Unsigned 32-bit integer
        XStats Timestamp
    afs.fs.xstats.version  XStats Version
        Unsigned 32-bit integer
        XStats Version
    afs.kauth  KAuth
        Boolean
        Kerberos Auth Server
    afs.kauth.data  Data
        Byte array
        Data
    afs.kauth.domain  Domain
        String
        Domain
    afs.kauth.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.kauth.kvno  Key Version Number
        Unsigned 32-bit integer
        Key Version Number
    afs.kauth.name  Name
        String
        Name
    afs.kauth.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.kauth.princ  Principal
        String
        Principal
    afs.kauth.realm  Realm
        String
        Realm
    afs.prot  Protection
        Boolean
        Protection Server
    afs.prot.count  Count
        Unsigned 32-bit integer
        Count
    afs.prot.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.prot.flag  Flag
        Unsigned 32-bit integer
        Flag
    afs.prot.gid  Group ID
        Unsigned 32-bit integer
        Group ID
    afs.prot.id  ID
        Unsigned 32-bit integer
        ID
    afs.prot.maxgid  Maximum Group ID
        Unsigned 32-bit integer
        Maximum Group ID
    afs.prot.maxuid  Maximum User ID
        Unsigned 32-bit integer
        Maximum User ID
    afs.prot.name  Name
        String
        Name
    afs.prot.newid  New ID
        Unsigned 32-bit integer
        New ID
    afs.prot.oldid  Old ID
        Unsigned 32-bit integer
        Old ID
    afs.prot.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.prot.pos  Position
        Unsigned 32-bit integer
        Position
    afs.prot.uid  User ID
        Unsigned 32-bit integer
        User ID
    afs.rmtsys  Rmtsys
        Boolean
        Rmtsys
    afs.rmtsys.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.ubik  Ubik
        Boolean
        Ubik
    afs.ubik.activewrite  Active Write
        Unsigned 32-bit integer
        Active Write
    afs.ubik.addr  Address
        IPv4 address
        Address
    afs.ubik.amsyncsite  Am Sync Site
        Unsigned 32-bit integer
        Am Sync Site
    afs.ubik.anyreadlocks  Any Read Locks
        Unsigned 32-bit integer
        Any Read Locks
    afs.ubik.anywritelocks  Any Write Locks
        Unsigned 32-bit integer
        Any Write Locks
    afs.ubik.beaconsincedown  Beacon Since Down
        Unsigned 32-bit integer
        Beacon Since Down
    afs.ubik.currentdb  Current DB
        Unsigned 32-bit integer
        Current DB
    afs.ubik.currenttran  Current Transaction
        Unsigned 32-bit integer
        Current Transaction
    afs.ubik.epochtime  Epoch Time
        Date/Time stamp
        Epoch Time
    afs.ubik.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.ubik.file  File
        Unsigned 32-bit integer
        File
    afs.ubik.interface  Interface Address
        IPv4 address
        Interface Address
    afs.ubik.isclone  Is Clone
        Unsigned 32-bit integer
        Is Clone
    afs.ubik.lastbeaconsent  Last Beacon Sent
        Date/Time stamp
        Last Beacon Sent
    afs.ubik.lastvote  Last Vote
        Unsigned 32-bit integer
        Last Vote
    afs.ubik.lastvotetime  Last Vote Time
        Date/Time stamp
        Last Vote Time
    afs.ubik.lastyesclaim  Last Yes Claim
        Date/Time stamp
        Last Yes Claim
    afs.ubik.lastyeshost  Last Yes Host
        IPv4 address
        Last Yes Host
    afs.ubik.lastyesstate  Last Yes State
        Unsigned 32-bit integer
        Last Yes State
    afs.ubik.lastyesttime  Last Yes Time
        Date/Time stamp
        Last Yes Time
    afs.ubik.length  Length
        Unsigned 32-bit integer
        Length
    afs.ubik.lockedpages  Locked Pages
        Unsigned 32-bit integer
        Locked Pages
    afs.ubik.locktype  Lock Type
        Unsigned 32-bit integer
        Lock Type
    afs.ubik.lowesthost  Lowest Host
        IPv4 address
        Lowest Host
    afs.ubik.lowesttime  Lowest Time
        Date/Time stamp
        Lowest Time
    afs.ubik.now  Now
        Date/Time stamp
        Now
    afs.ubik.nservers  Number of Servers
        Unsigned 32-bit integer
        Number of Servers
    afs.ubik.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.ubik.position  Position
        Unsigned 32-bit integer
        Position
    afs.ubik.recoverystate  Recovery State
        Unsigned 32-bit integer
        Recovery State
    afs.ubik.site  Site
        IPv4 address
        Site
    afs.ubik.state  State
        Unsigned 32-bit integer
        State
    afs.ubik.synchost  Sync Host
        IPv4 address
        Sync Host
    afs.ubik.syncsiteuntil  Sync Site Until
        Date/Time stamp
        Sync Site Until
    afs.ubik.synctime  Sync Time
        Date/Time stamp
        Sync Time
    afs.ubik.tidcounter  TID Counter
        Unsigned 32-bit integer
        TID Counter
    afs.ubik.up  Up
        Unsigned 32-bit integer
        Up
    afs.ubik.version.counter  Counter
        Unsigned 32-bit integer
        Counter
    afs.ubik.version.epoch  Epoch
        Date/Time stamp
        Epoch
    afs.ubik.voteend  Vote Ends
        Date/Time stamp
        Vote Ends
    afs.ubik.votestart  Vote Started
        Date/Time stamp
        Vote Started
    afs.ubik.votetype  Vote Type
        Unsigned 32-bit integer
        Vote Type
    afs.ubik.writelockedpages  Write Locked Pages
        Unsigned 32-bit integer
        Write Locked Pages
    afs.ubik.writetran  Write Transaction
        Unsigned 32-bit integer
        Write Transaction
    afs.update  Update
        Boolean
        Update Server
    afs.update.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.vldb  VLDB
        Boolean
        Volume Location Database Server
    afs.vldb.bkvol  Backup Volume ID
        Unsigned 32-bit integer
        Read-Only Volume ID
    afs.vldb.bump  Bumped Volume ID
        Unsigned 32-bit integer
        Bumped Volume ID
    afs.vldb.clonevol  Clone Volume ID
        Unsigned 32-bit integer
        Clone Volume ID
    afs.vldb.count  Volume Count
        Unsigned 32-bit integer
        Volume Count
    afs.vldb.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.vldb.flags  Flags
        Unsigned 32-bit integer
        Flags
    afs.vldb.flags.bkexists  Backup Exists
        Boolean
        Backup Exists
    afs.vldb.flags.dfsfileset  DFS Fileset
        Boolean
        DFS Fileset
    afs.vldb.flags.roexists  Read-Only Exists
        Boolean
        Read-Only Exists
    afs.vldb.flags.rwexists  Read/Write Exists
        Boolean
        Read/Write Exists
    afs.vldb.id  Volume ID
        Unsigned 32-bit integer
        Volume ID
    afs.vldb.index  Volume Index
        Unsigned 32-bit integer
        Volume Index
    afs.vldb.name  Volume Name
        String
        Volume Name
    afs.vldb.nextindex  Next Volume Index
        Unsigned 32-bit integer
        Next Volume Index
    afs.vldb.numservers  Number of Servers
        Unsigned 32-bit integer
        Number of Servers
    afs.vldb.opcode  Operation
        Unsigned 32-bit integer
        Operation
    afs.vldb.partition  Partition
        String
        Partition
    afs.vldb.rovol  Read-Only Volume ID
        Unsigned 32-bit integer
        Read-Only Volume ID
    afs.vldb.rwvol  Read-Write Volume ID
        Unsigned 32-bit integer
        Read-Only Volume ID
    afs.vldb.server  Server
        IPv4 address
        Server
    afs.vldb.serverflags  Server Flags
        Unsigned 32-bit integer
        Server Flags
    afs.vldb.serverip  Server IP
        IPv4 address
        Server IP
    afs.vldb.serveruniq  Server Unique Address
        Unsigned 32-bit integer
        Server Unique Address
    afs.vldb.serveruuid  Server UUID
        Byte array
        Server UUID
    afs.vldb.spare1  Spare 1
        Unsigned 32-bit integer
        Spare 1
    afs.vldb.spare2  Spare 2
        Unsigned 32-bit integer
        Spare 2
    afs.vldb.spare3  Spare 3
        Unsigned 32-bit integer
        Spare 3
    afs.vldb.spare4  Spare 4
        Unsigned 32-bit integer
        Spare 4
    afs.vldb.spare5  Spare 5
        Unsigned 32-bit integer
        Spare 5
    afs.vldb.spare6  Spare 6
        Unsigned 32-bit integer
        Spare 6
    afs.vldb.spare7  Spare 7
        Unsigned 32-bit integer
        Spare 7
    afs.vldb.spare8  Spare 8
        Unsigned 32-bit integer
        Spare 8
    afs.vldb.spare9  Spare 9
        Unsigned 32-bit integer
        Spare 9
    afs.vldb.type  Volume Type
        Unsigned 32-bit integer
        Volume Type
    afs.vol  Volume Server
        Boolean
        Volume Server
    afs.vol.count  Volume Count
        Unsigned 32-bit integer
        Volume Count
    afs.vol.errcode  Error Code
        Unsigned 32-bit integer
        Error Code
    afs.vol.id  Volume ID
        Unsigned 32-bit integer
        Volume ID
    afs.vol.name  Volume Name
        String
        Volume Name
    afs.vol.opcode  Operation
        Unsigned 32-bit integer
        Operation

Apache JServ Protocol v1.3 (ajp13)

    ajp13.code  Code
        String
        Type Code
    ajp13.data  Data
        String
        Data
    ajp13.hname  HNAME
        String
        Header Name
    ajp13.hval  HVAL
        String
        Header Value
    ajp13.len  Length
        Unsigned 16-bit integer
        Data Length
    ajp13.magic  Magic
        Byte array
        Magic Number
    ajp13.method  Method
        String
        HTTP Method
    ajp13.nhdr  NHDR
        Unsigned 16-bit integer
        Num Headers
    ajp13.port  PORT
        Unsigned 16-bit integer
        Port
    ajp13.raddr  RADDR
        String
        Remote Address
    ajp13.reusep  REUSEP
        Unsigned 8-bit integer
        Reuse Connection?
    ajp13.rhost  RHOST
        String
        Remote Host
    ajp13.rlen  RLEN
        Unsigned 16-bit integer
        Requested Length
    ajp13.rmsg  RSMSG
        String
        HTTP Status Message
    ajp13.rstatus  RSTATUS
        Unsigned 16-bit integer
        HTTP Status Code
    ajp13.srv  SRV
        String
        Server
    ajp13.sslp  SSLP
        Unsigned 8-bit integer
        Is SSL?
    ajp13.uri  URI
        String
        HTTP URI
    ajp13.ver  Version
        String
        HTTP Version

AppleTalk Filing Protocol (afp)

    afp.AFPVersion  AFP Version
        String
        Client AFP version
    afp.UAM  UAM
        String
        User Authentication Method
    afp.access  Access mode
        Unsigned 8-bit integer
        Fork access mode
    afp.access.deny_read  Deny read
        Boolean
        Deny read
    afp.access.deny_write  Deny write
        Boolean
        Deny write
    afp.access.read  Read
        Boolean
        Open for reading
    afp.access.write  Write
        Boolean
        Open for writing
    afp.actual_count  Count
        Signed 32-bit integer
        Number of bytes returned by read/write
    afp.appl_index  Index
        Unsigned 16-bit integer
        Application index
    afp.appl_tag  Tag
        Unsigned 32-bit integer
        Application tag
    afp.backup_date  Backup date
        Date/Time stamp
        Backup date
    afp.cat_count  Cat count
        Unsigned 32-bit integer
        Number of structures returned
    afp.cat_position  Position
        Byte array
        Reserved
    afp.cat_req_matches  Max answers
        Signed 32-bit integer
        Maximum number of matches to return.
    afp.command  Command
        Unsigned 8-bit integer
        AFP function
    afp.comment  Comment
        String
        File/folder comment
    afp.create_flag  Hard create
        Boolean
        Soft/hard create file
    afp.creation_date  Creation date
        Date/Time stamp
        Creation date
    afp.data_fork_len  Data fork size
        Unsigned 32-bit integer
        Data fork size
    afp.did  DID
        Unsigned 32-bit integer
        Parent directory ID
    afp.dir_ar  Access rights
        Unsigned 32-bit integer
        Directory access rights
    afp.dir_ar.blank  Blank access right
        Boolean
        Blank access right
    afp.dir_ar.e_read  Everyone has read access
        Boolean
        Everyone has read access
    afp.dir_ar.e_search  Everyone has search access
        Boolean
        Everyone has search access
    afp.dir_ar.e_write  Everyone has write access
        Boolean
        Everyone has write access
    afp.dir_ar.g_read  Group has read access
        Boolean
        Group has read access
    afp.dir_ar.g_search  Group has search access
        Boolean
        Group has search access
    afp.dir_ar.g_write  Group has write access
        Boolean
        Group has write access
    afp.dir_ar.o_read  Owner has read access
        Boolean
        Owner has read access
    afp.dir_ar.o_search  Owner has search access
        Boolean
        Owner has search access
    afp.dir_ar.o_write  Owner has write access
        Boolean
        Gwner has write access
    afp.dir_ar.u_owner  User is the owner
        Boolean
        Current user is the directory owner
    afp.dir_ar.u_read  User has read access
        Boolean
        User has read access
    afp.dir_ar.u_search  User has search access
        Boolean
        User has search access
    afp.dir_ar.u_write  User has write access
        Boolean
        User has write access
    afp.dir_attribute.backup_needed  Backup needed
        Boolean
        Directory needs to be backed up
    afp.dir_attribute.delete_inhibit  Delete inhibit
        Boolean
        Delete inhibit
    afp.dir_attribute.in_exported_folder  Shared area
        Boolean
        Directory is in a shared area
    afp.dir_attribute.invisible  Invisible
        Boolean
        Directory is not visible
    afp.dir_attribute.mounted  Mounted
        Boolean
        Directory is mounted
    afp.dir_attribute.rename_inhibit  Rename inhibit
        Boolean
        Rename inhibit
    afp.dir_attribute.set_clear  Set
        Boolean
        Clear/set attribute
    afp.dir_attribute.share  Share point
        Boolean
        Directory is a share point
    afp.dir_attribute.system  System
        Boolean
        Directory is a system directory
    afp.dir_bitmap  Directory bitmap
        Unsigned 16-bit integer
        Directory bitmap
    afp.dir_bitmap.UTF8_name  UTF-8 name
        Boolean
        Return UTF-8 name if diectory
    afp.dir_bitmap.access_rights  Access rights
        Boolean
        Return access rights if directory
    afp.dir_bitmap.attributes  Attributes
        Boolean
        Return attributes if directory
    afp.dir_bitmap.backup_date  Backup date
        Boolean
        Return backup date if directory
    afp.dir_bitmap.create_date  Creation date
        Boolean
        Return creation date if directory
    afp.dir_bitmap.did  DID
        Boolean
        Return parent directory ID if directory
    afp.dir_bitmap.fid  File ID
        Boolean
        Return file ID if directory
    afp.dir_bitmap.finder_info  Finder info
        Boolean
        Return finder info if directory
    afp.dir_bitmap.group_id  Group id
        Boolean
        Return group id if directory
    afp.dir_bitmap.long_name  Long name
        Boolean
        Return long name if directory
    afp.dir_bitmap.mod_date  Modification date
        Boolean
        Return modification date if directory
    afp.dir_bitmap.offspring_count  Offspring count
        Boolean
        Return offspring count if directory
    afp.dir_bitmap.owner_id  Owner id
        Boolean
        Return owner id if directory
    afp.dir_bitmap.short_name  Short name
        Boolean
        Return short name if directory
    afp.dir_bitmap.unix_privs  UNIX privileges
        Boolean
        Return UNIX privileges if directory
    afp.dir_group_id  Group ID
        Signed 32-bit integer
        Directory group ID
    afp.dir_offspring  Offspring
        Unsigned 16-bit integer
        Directory offspring
    afp.dir_owner_id  Owner ID
        Signed 32-bit integer
        Directory owner ID
    afp.dt_ref  DT ref
        Unsigned 16-bit integer
        Desktop database reference num
    afp.ext_data_fork_len  Extended data fork size
        Unsigned 64-bit integer
        Extended (>2GB) data fork length
    afp.ext_resource_fork_len  Extended resource fork size
        Unsigned 64-bit integer
        Extended (>2GB) resource fork length
    afp.file_attribute.backup_needed  Backup needed
        Boolean
        File needs to be backed up
    afp.file_attribute.copy_protect  Copy protect
        Boolean
        copy protect
    afp.file_attribute.delete_inhibit  Delete inhibit
        Boolean
        delete inhibit
    afp.file_attribute.df_open  Data fork open
        Boolean
        Data fork already open
    afp.file_attribute.invisible  Invisible
        Boolean
        File is not visible
    afp.file_attribute.multi_user  Multi user
        Boolean
        multi user
    afp.file_attribute.rename_inhibit  Rename inhibit
        Boolean
        rename inhibit
    afp.file_attribute.rf_open  Resource fork open
        Boolean
        Resource fork already open
    afp.file_attribute.set_clear  Set
        Boolean
        Clear/set attribute
    afp.file_attribute.system  System
        Boolean
        File is a system file
    afp.file_attribute.write_inhibit  Write inhibit
        Boolean
        Write inhibit
    afp.file_bitmap  File bitmap
        Unsigned 16-bit integer
        File bitmap
    afp.file_bitmap.UTF8_name  UTF-8 name
        Boolean
        Return UTF-8 name if file
    afp.file_bitmap.attributes  Attributes
        Boolean
        Return attributes if file
    afp.file_bitmap.backup_date  Backup date
        Boolean
        Return backup date if file
    afp.file_bitmap.create_date  Creation date
        Boolean
        Return creation date if file
    afp.file_bitmap.data_fork_len  Data fork size
        Boolean
        Return data fork size if file
    afp.file_bitmap.did  DID
        Boolean
        Return parent directory ID if file
    afp.file_bitmap.ex_data_fork_len  Extended data fork size
        Boolean
        Return extended (>2GB) data fork size if file
    afp.file_bitmap.ex_resource_fork_len  Extended resource fork size
        Boolean
        Return extended (>2GB) resource fork size if file
    afp.file_bitmap.fid  File ID
        Boolean
        Return file ID if file
    afp.file_bitmap.finder_info  Finder info
        Boolean
        Return finder info if file
    afp.file_bitmap.launch_limit  Launch limit
        Boolean
        Return launch limit if file
    afp.file_bitmap.long_name  Long name
        Boolean
        Return long name if file
    afp.file_bitmap.mod_date  Modification date
        Boolean
        Return modification date if file
    afp.file_bitmap.resource_fork_len  Resource fork size
        Boolean
        Return resource fork size if file
    afp.file_bitmap.short_name  Short name
        Boolean
        Return short name if file
    afp.file_bitmap.unix_privs  UNIX privileges
        Boolean
        Return UNIX privileges if file
    afp.file_creator  File creator
        String
        File creator
    afp.file_flag  Dir
        Boolean
        Is a dir
    afp.file_id  File ID
        Unsigned 32-bit integer
        File/directory ID
    afp.file_type  File type
        String
        File type
    afp.finder_info  Finder info
        Byte array
        Finder info
    afp.flag  From
        Unsigned 8-bit integer
        Offset is relative to start/end of the fork
    afp.fork_type  Resource fork
        Boolean
        Data/resource fork
    afp.group_ID  Group ID
        Unsigned 32-bit integer
        Group ID
    afp.icon_index  Index
        Unsigned 16-bit integer
        Icon index in desktop database
    afp.icon_length  Size
        Unsigned 16-bit integer
        Size for icon bitmap
    afp.icon_tag  Tag
        Unsigned 32-bit integer
        Icon tag
    afp.icon_type  Icon type
        Unsigned 8-bit integer
        Icon type
    afp.last_written  Last written
        Unsigned 32-bit integer
        Offset of the last byte written
    afp.last_written64  Last written
        Unsigned 64-bit integer
        Offset of the last byte written (64 bits)
    afp.lock_from  End
        Boolean
        Offset is relative to the end of the fork
    afp.lock_len  Length
        Signed 32-bit integer
        Number of bytes to be locked/unlocked
    afp.lock_len64  Length
        Signed 64-bit integer
        Number of bytes to be locked/unlocked (64 bits)
    afp.lock_offset  Offset
        Signed 32-bit integer
        First byte to be locked
    afp.lock_offset64  Offset
        Signed 64-bit integer
        First byte to be locked (64 bits)
    afp.lock_op  unlock
        Boolean
        Lock/unlock op
    afp.lock_range_start  Start
        Signed 32-bit integer
        First byte locked/unlocked
    afp.lock_range_start64  Start
        Signed 64-bit integer
        First byte locked/unlocked (64 bits)
    afp.long_name_offset  Long name offset
        Unsigned 16-bit integer
        Long name offset in packet
    afp.map_id  ID
        Unsigned 32-bit integer
        User/Group ID
    afp.map_id_type  Type
        Unsigned 8-bit integer
        Map ID type
    afp.map_name  Name
        String
        User/Group name
    afp.map_name_type  Type
        Unsigned 8-bit integer
        Map name type
    afp.modification_date  Modification date
        Date/Time stamp
        Modification date
    afp.newline_char  Newline char
        Unsigned 8-bit integer
        Value to compare ANDed bytes with when looking for newline
    afp.newline_mask  Newline mask
        Unsigned 8-bit integer
        Value to AND bytes with when looking for newline
    afp.offset  Offset
        Signed 32-bit integer
        Offset
    afp.offset64  Offset
        Signed 64-bit integer
        Offset (64 bits)
    afp.ofork  Fork
        Unsigned 16-bit integer
        Open fork reference number
    afp.ofork_len  New length
        Signed 32-bit integer
        New length
    afp.pad  Pad
        No value
        Pad Byte
    afp.passwd  Password
        String
        Password
    afp.path_len  Len
        Unsigned 8-bit integer
        Path length
    afp.path_name  Name
        String
        Path name
    afp.path_type  Type
        Unsigned 8-bit integer
        Type of names
    afp.reply_size  Reply size
        Unsigned 16-bit integer
        First structure returned
    afp.req_count  Req count
        Unsigned 16-bit integer
        Maximum number of structures returned
    afp.reserved  Reserved
        Byte array
        Reserved
    afp.resource_fork_len  Resource fork size
        Unsigned 32-bit integer
        Resource fork size
    afp.rw_count  Count
        Signed 32-bit integer
        Number of bytes to be read/written
    afp.rw_count64  Count
        Signed 64-bit integer
        Number of bytes to be read/written (64 bits)
    afp.server_time  Server time
        Date/Time stamp
        Server time
    afp.session_token  Token
        Byte array
        Session token
    afp.session_token_len  Len
        Unsigned 32-bit integer
        Session token length
    afp.session_token_type  Type
        Unsigned 16-bit integer
        Session token type
    afp.short_name_offset  Short name offset
        Unsigned 16-bit integer
        Short name offset in packet
    afp.start_index  Start index
        Unsigned 16-bit integer
        First structure returned
    afp.struct_size  Struct size
        Unsigned 8-bit integer
        Sizeof of struct
    afp.unicode_name_offset  Unicode name offset
        Unsigned 16-bit integer
        Unicode name offset in packet
    afp.unix_privs.gid  GID
        Unsigned 32-bit integer
        Group ID
    afp.unix_privs.permissions  Permissions
        Unsigned 32-bit integer
        Permissions
    afp.unix_privs.ua_permissions  User's access rights
        Unsigned 32-bit integer
        User's access rights
    afp.unix_privs.uid  UID
        Unsigned 32-bit integer
        User ID
    afp.user  User
        String
        User
    afp.user_ID  User ID
        Unsigned 32-bit integer
        User ID
    afp.user_bitmap  Bitmap
        Unsigned 16-bit integer
        User Info bitmap
    afp.user_bitmap.GID  Primary group ID
        Boolean
        Primary group ID
    afp.user_bitmap.UID  User ID
        Boolean
        User ID
    afp.user_flag  Flag
        Unsigned 8-bit integer
        User Info flag
    afp.vol_attribute.blank_access_privs  Blank access privileges
        Boolean
        Supports blank access privileges
    afp.vol_attribute.cat_search  Catalog search
        Boolean
        Supports catalog search operations
    afp.vol_attribute.fileIDs  File IDs
        Boolean
        Supports file IDs
    afp.vol_attribute.passwd  Volume password
        Boolean
        Has a volume password
    afp.vol_attribute.read_only  Read only
        Boolean
        Read only volume
    afp.vol_attribute.unix_privs  UNIX access privileges
        Boolean
        Supports UNIX access privileges
    afp.vol_attribute.utf8_names  UTF-8 names
        Boolean
        Supports UTF-8 names
    afp.vol_attributes  Attributes
        Unsigned 16-bit integer
        Volume attributes
    afp.vol_backup_date  Backup date
        Date/Time stamp
        Volume backup date
    afp.vol_bitmap  Bitmap
        Unsigned 16-bit integer
        Volume bitmap
    afp.vol_bitmap.attributes  Attributes
        Boolean
        Volume attributes
    afp.vol_bitmap.backup_date  Backup date
        Boolean
        Volume backup date
    afp.vol_bitmap.block_size  Block size
        Boolean
        Volume block size
    afp.vol_bitmap.bytes_free  Bytes free
        Boolean
        Volume free bytes
    afp.vol_bitmap.bytes_total  Bytes total
        Boolean
        Volume total bytes
    afp.vol_bitmap.create_date  Creation date
        Boolean
        Volume creation date
    afp.vol_bitmap.ex_bytes_free  Extended bytes free
        Boolean
        Volume extended (>2GB) free bytes
    afp.vol_bitmap.ex_bytes_total  Extended bytes total
        Boolean
        Volume extended (>2GB) total bytes
    afp.vol_bitmap.id  ID
        Boolean
        Volume ID
    afp.vol_bitmap.mod_date  Modification date
        Boolean
        Volume modification date
    afp.vol_bitmap.name  Name
        Boolean
        Volume name
    afp.vol_bitmap.signature  Signature
        Boolean
        Volume signature
    afp.vol_block_size  Block size
        Unsigned 32-bit integer
        Volume block size
    afp.vol_bytes_free  Bytes free
        Unsigned 32-bit integer
        Free space
    afp.vol_bytes_total  Bytes total
        Unsigned 32-bit integer
        Volume size
    afp.vol_creation_date  Creation date
        Date/Time stamp
        Volume creation date
    afp.vol_ex_bytes_free  Extended bytes free
        Unsigned 64-bit integer
        Extended (>2GB) free space
    afp.vol_ex_bytes_total  Extended bytes total
        Unsigned 64-bit integer
        Extended (>2GB) volume size
    afp.vol_flag_passwd  Password
        Boolean
        Volume is password-protected
    afp.vol_flag_unix_priv  Unix privs
        Boolean
        Volume has unix privileges
    afp.vol_id  Volume id
        Unsigned 16-bit integer
        Volume id
    afp.vol_modification_date  Modification date
        Date/Time stamp
        Volume modification date
    afp.vol_name  Volume
        String
        Volume name
    afp.vol_name_offset  Volume name offset
        Unsigned 16-bit integer
        Volume name offset in packet
    afp.vol_signature  Signature
        Unsigned 16-bit integer
        Volume signature

AppleTalk Session Protocol (asp)

    asp.attn_code  Attn code
        Unsigned 16-bit integer
        asp attention code
    asp.error  asp error
        Signed 32-bit integer
        return error code
    asp.function  asp function
        Unsigned 8-bit integer
        asp function
    asp.init_error  Error
        Unsigned 16-bit integer
        asp init error
    asp.seq  Sequence
        Unsigned 16-bit integer
        asp sequence number
    asp.server_addr.len  Length
        Unsigned 8-bit integer
        Address length.
    asp.server_addr.type  Type
        Unsigned 8-bit integer
        Address type.
    asp.server_addr.value  Value
        Byte array
        Address value
    asp.server_directory  Directory service
        String
        Server directory service
    asp.server_flag  Flag
        Unsigned 16-bit integer
        Server capabilities flag
    asp.server_flag.copyfile  Support copyfile
        Boolean
        Server support copyfile
    asp.server_flag.directory  Support directory services
        Boolean
        Server support directory services
    asp.server_flag.fast_copy  Support fast copy
        Boolean
        Server support fast copy
    asp.server_flag.no_save_passwd  Don't allow save password
        Boolean
        Don't allow save password
    asp.server_flag.notify  Support server notifications
        Boolean
        Server support notifications
    asp.server_flag.passwd  Support change password
        Boolean
        Server support change password
    asp.server_flag.reconnect  Support server reconnect
        Boolean
        Server support reconnect
    asp.server_flag.srv_msg  Support server message
        Boolean
        Support server message
    asp.server_flag.srv_sig  Support server signature
        Boolean
        Support server signature
    asp.server_flag.tcpip  Support TCP/IP
        Boolean
        Server support TCP/IP
    asp.server_icon  Icon bitmap
        Byte array
        Server icon bitmap
    asp.server_name  Server name
        String
        Server name
    asp.server_signature  Server signature
        Byte array
        Server signature
    asp.server_type  Server type
        String
        Server type
    asp.server_uams  UAM
        String
        UAM
    asp.server_vers  AFP version
        String
        AFP version
    asp.session_id  Session ID
        Unsigned 8-bit integer
        asp session id
    asp.size  size
        Unsigned 16-bit integer
        asp available size for reply
    asp.socket  Socket
        Unsigned 8-bit integer
        asp socket
    asp.version  Version
        Unsigned 16-bit integer
        asp version
    asp.zero_value  Pad (0)
        Byte array
        Pad

AppleTalk Transaction Protocol packet (atp)

    atp.bitmap  Bitmap
        Unsigned 8-bit integer
        Bitmap or sequence number
    atp.ctrlinfo  Control info
        Unsigned 8-bit integer
        control info
    atp.eom  EOM
        Boolean
        End-of-message
    atp.fragment  ATP Fragment
        No value
        ATP Fragment
    atp.fragments  ATP Fragments
        No value
        ATP Fragments
    atp.function  Function
        Unsigned 8-bit integer
        function code
    atp.segment.error   Desegmentation error
        No value
        Desegmentation error due to illegal segments
    atp.segment.multipletails  Multiple tail segments found
        Boolean
        Several tails were found when desegmenting the packet
    atp.segment.overlap  Segment overlap
        Boolean
        Segment overlaps with other segments
    atp.segment.overlap.conflict  Conflicting data in seagment overlap
        Boolean
        Overlapping segments contained conflicting data
    atp.segment.toolongsegment  Segment too long
        Boolean
        Segment contained data past end of packet
    atp.sts  STS
        Boolean
        Send transaction status
    atp.tid  TID
        Unsigned 16-bit integer
        Transaction id
    atp.treltimer  TRel timer
        Unsigned 8-bit integer
        TRel timer
    atp.user_bytes  User bytes
        Unsigned 32-bit integer
        User bytes
    atp.xo  XO
        Boolean
        Exactly-once flag

Appletalk Address Resolution Protocol (aarp)

    aarp.dst.hw  Target hardware address
        Byte array
    aarp.dst.hw_mac  Target MAC address
        6-byte Hardware (MAC) Address
    aarp.dst.proto  Target protocol address
        Byte array
    aarp.dst.proto_id  Target ID
        Byte array
    aarp.hard.size  Hardware size
        Unsigned 8-bit integer
    aarp.hard.type  Hardware type
        Unsigned 16-bit integer
    aarp.opcode  Opcode
        Unsigned 16-bit integer
    aarp.proto.size  Protocol size
        Unsigned 8-bit integer
    aarp.proto.type  Protocol type
        Unsigned 16-bit integer
    aarp.src.hw  Sender hardware address
        Byte array
    aarp.src.hw_mac  Sender MAC address
        6-byte Hardware (MAC) Address
    aarp.src.proto  Sender protocol address
        Byte array
    aarp.src.proto_id  Sender ID
        Byte array

Async data over ISDN (V.120) (v120)

    v120.address  Link Address
        Unsigned 16-bit integer
    v120.control  Control Field
        Unsigned 16-bit integer
    v120.header  Header Field
        String

Authentication Header (ah)

    ah.sequence  Sequence
        Unsigned 32-bit integer
    ah.spi  SPI
        Unsigned 32-bit integer

BACnet Virtual Link Control (bvlc)

    bvlc.bdt_ip  IP
        IPv4 address
        BDT IP
    bvlc.bdt_mask  Mask
        Byte array
        BDT Broadcast Distribution Mask
    bvlc.bdt_port  Port
        Unsigned 16-bit integer
        BDT Port
    bvlc.fdt_ip  IP
        IPv4 address
        FDT IP
    bvlc.fdt_port  Port
        Unsigned 16-bit integer
        FDT Port
    bvlc.fdt_timeout  Timeout
        Unsigned 16-bit integer
        Foreign Device Timeout (seconds)
    bvlc.fdt_ttl  TTL
        Unsigned 16-bit integer
        Foreign Device Time To Live
    bvlc.function  Function
        Unsigned 8-bit integer
        BLVC Function
    bvlc.fwd_ip  IP
        IPv4 address
        FWD IP
    bvlc.fwd_port  Port
        Unsigned 16-bit integer
        FWD Port
    bvlc.length  Length
        Unsigned 16-bit integer
        Length of BVLC
    bvlc.reg_ttl  TTL
        Unsigned 16-bit integer
        Foreign Device Time To Live
    bvlc.result  Result
        Unsigned 16-bit integer
        Result Code
    bvlc.type  Type
        Unsigned 8-bit integer
        Type

Banyan Vines (vines)

    vines.protocol  Protocol
        Unsigned 8-bit integer
        Vines protocol

Banyan Vines Fragmentation Protocol (vines_frp)

Banyan Vines SPP (vines_spp)

Blocks Extensible Exchange Protocol (beep)

    beep.ansno  Ansno
        Unsigned 32-bit integer
    beep.channel  Channel
        Unsigned 32-bit integer
    beep.end  End
        Boolean
    beep.more.complete  Complete
        Boolean
    beep.more.intermediate  Intermediate
        Boolean
    beep.msgno  Msgno
        Unsigned 32-bit integer
    beep.req  Request
        Boolean
    beep.req.channel  Request Channel Number
        Unsigned 32-bit integer
    beep.rsp  Response
        Boolean
    beep.rsp.channel  Response Channel Number
        Unsigned 32-bit integer
    beep.seq  Sequence
        Boolean
    beep.seq.ackno  Ackno
        Unsigned 32-bit integer
    beep.seq.channel  Sequence Channel Number
        Unsigned 32-bit integer
    beep.seq.window  Window
        Unsigned 32-bit integer
    beep.seqno  Seqno
        Unsigned 32-bit integer
    beep.size  Size
        Unsigned 32-bit integer
    beep.status.negative  Negative
        Boolean
    beep.status.positive  Positive
        Boolean
    beep.violation  Protocol Violation
        Boolean

Boot Parameters (bootparams)

    bootparams.domain  Client Domain
        String
        Client Domain
    bootparams.fileid  File ID
        String
        File ID
    bootparams.filepath  File Path
        String
        File Path
    bootparams.host  Client Host
        String
        Client Host
    bootparams.hostaddr  Client Address
        IPv4 address
        Address
    bootparams.routeraddr  Router Address
        IPv4 address
        Router Address
    bootparams.type  Address Type
        Unsigned 32-bit integer
        Address Type

Bootstrap Protocol (bootp)

    bootp.cookie  Magic cookie
        IPv4 address
    bootp.dhcp  Frame is DHCP
        Boolean
    bootp.file  Boot file name
        String
    bootp.flags  Bootp flags
        Unsigned 16-bit integer
    bootp.flags.bc  Broadcast flag
        Boolean
    bootp.flags.reserved  Reserved flags
        Unsigned 16-bit integer
    bootp.hops  Hops
        Unsigned 8-bit integer
    bootp.hw.addr  Client hardware address
        Byte array
    bootp.hw.len  Hardware address length
        Unsigned 8-bit integer
    bootp.hw.type  Hardware type
        Unsigned 8-bit integer
    bootp.id  Transaction ID
        Unsigned 32-bit integer
    bootp.ip.client  Client IP address
        IPv4 address
    bootp.ip.relay  Relay agent IP address
        IPv4 address
    bootp.ip.server  Next server IP address
        IPv4 address
    bootp.ip.your  Your (client) IP address
        IPv4 address
    bootp.secs  Seconds elapsed
        Unsigned 16-bit integer
    bootp.server  Server host name
        String
    bootp.type  Message type
        Unsigned 8-bit integer
    bootp.vendor  Bootp Vendor Options
        Byte array

Border Gateway Protocol (bgp)

    bgp.type  BGP message type
        Unsigned 8-bit integer
        BGP message type

Building Automation and Control Network APDU (bacapp)

    bacapp.bacapp_type  APDU Type
        Unsigned 8-bit integer
        APDU Type

Building Automation and Control Network NPDU (bacnet)

    bacnet.control  Control
        Unsigned 8-bit integer
        BACnet Control
    bacnet.control_dest  Destination Specifier
        Boolean
        BACnet Control
    bacnet.control_expect  Expecting Reply
        Boolean
        BACnet Control
    bacnet.control_net  NSDU contains
        Boolean
        BACnet Control
    bacnet.control_prio_high  Priority
        Boolean
        BACnet Control
    bacnet.control_prio_low  Priority
        Boolean
        BACnet Control
    bacnet.control_res1  Reserved
        Boolean
        BACnet Control
    bacnet.control_res2  Reserved
        Boolean
        BACnet Control
    bacnet.control_src  Source specifier
        Boolean
        BACnet Control
    bacnet.dadr_eth  Destination ISO 8802-3 MAC Address
        6-byte Hardware (MAC) Address
        Destination ISO 8802-3 MAC Address
    bacnet.dadr_tmp  Unknown Destination MAC
        Byte array
        Unknown Destination MAC
    bacnet.dlen  Destination MAC Layer Address Length
        Unsigned 8-bit integer
        Destination MAC Layer Address Length
    bacnet.dnet  Destination Network Address
        Unsigned 16-bit integer
        Destination Network Address
    bacnet.hopc  Hop Count
        Unsigned 8-bit integer
        Hop Count
    bacnet.mesgtyp  Message Type
        Unsigned 8-bit integer
        Message Type
    bacnet.perf  Performance Index
        Unsigned 8-bit integer
        Performance Index
    bacnet.pinfo  Port Info
        Unsigned 8-bit integer
        Port Info
    bacnet.pinfolen  Port Info Length
        Unsigned 8-bit integer
        Port Info Length
    bacnet.portid  Port ID
        Unsigned 8-bit integer
        Port ID
    bacnet.rejectreason  Reject Reason
        Unsigned 8-bit integer
        Reject Reason
    bacnet.rportnum  Number of Port Mappings
        Unsigned 8-bit integer
        Number of Port Mappings
    bacnet.sadr_eth  SADR
        6-byte Hardware (MAC) Address
        Source ISO 8802-3 MAC Address
    bacnet.sadr_tmp  Unknown Source MAC
        Byte array
        Unknown Source MAC
    bacnet.slen  Source MAC Layer Address Length
        Unsigned 8-bit integer
        Source MAC Layer Address Length
    bacnet.snet  Source Network Address
        Unsigned 16-bit integer
        Source Network Address
    bacnet.vendor  Vendor ID
        Unsigned 16-bit integer
        Vendor ID
    bacnet.version  Version
        Unsigned 8-bit integer
        BACnet Version

Check Point High Availability Protocol (cpha)

    cpha.ifn  Interface Number
        Unsigned 32-bit integer
    cphap.cluster_number  Cluster Number
        Unsigned 16-bit integer
        Cluster Number
    cphap.dst_id  Destination Machine ID
        Unsigned 16-bit integer
        Destination Machine ID
    cphap.ethernet_addr  Ethernet Address
        6-byte Hardware (MAC) Address
        Ethernet Address
    cphap.filler  Filler
        Unsigned 16-bit integer
    cphap.ha_mode  HA mode
        Unsigned 16-bit integer
        HA Mode
    cphap.ha_time_unit  HA Time unit (ms)
        Unsigned 16-bit integer
        HA Time unit
    cphap.hash_len  Hash list length
        Signed 32-bit integer
        Hash list length
    cphap.id_num  Number of IDs reported
        Unsigned 16-bit integer
        Number of IDs reported
    cphap.if_trusted  Interface Trusted
        Boolean
        Interface Trusted
    cphap.in_assume_up  Interfaces assumed up in the Inbound
        Signed 8-bit integer
    cphap.in_up  Interfaces up in the Inbound
        Signed 8-bit integer
        Interfaces up in the Inbound
    cphap.ip  IP Address
        IPv4 address
        IP Address
    cphap.machine_num  Machine Number
        Signed 16-bit integer
        Machine Number
    cphap.magic_number  CPHAP Magic Number
        Unsigned 16-bit integer
        CPHAP Magic Number
    cphap.opcode  OpCode
        Unsigned 16-bit integer
        OpCode
    cphap.out_assume_up  Interfaces assumed up in the Outbound
        Signed 8-bit integer
    cphap.out_up  Interfaces up in the Outbound
        Signed 8-bit integer
    cphap.policy_id  Policy ID
        Unsigned 16-bit integer
        Policy ID
    cphap.random_id  Random ID
        Unsigned 16-bit integer
        Random ID
    cphap.reported_ifs  Reported Interfaces
        Unsigned 32-bit integer
        Reported Interfaces
    cphap.seed  Seed
        Unsigned 32-bit integer
        Seed
    cphap.slot_num  Slot Number
        Signed 16-bit integer
        Slot Number
    cphap.src_id  Source Machine ID
        Unsigned 16-bit integer
        Source Machine ID
    cphap.src_if  Source Interface
        Unsigned 16-bit integer
        Source Interface
    cphap.status  Status
        Unsigned 32-bit integer
    cphap.version  Protocol Version
        Unsigned 16-bit integer
        CPHAP Version

Checkpoint FW-1 (fw1)

    fw1.direction  Direction
        String
        Direction
    fw1.interface  Interface
        String
        Interface
    fw1.type  Type
        Unsigned 16-bit integer

Cisco Auto-RP (auto_rp)

    auto_rp.group_prefix  Prefix
        IPv4 address
        Group prefix
    auto_rp.holdtime  Holdtime
        Unsigned 16-bit integer
        The amount of time in seconds this announcement is valid
    auto_rp.mask_len  Mask length
        Unsigned 8-bit integer
        Length of group prefix
    auto_rp.pim_ver  Version
        Unsigned 8-bit integer
        RP's highest PIM version
    auto_rp.prefix_sign  Sign
        Unsigned 8-bit integer
        Group prefix sign
    auto_rp.rp_addr  RP address
        IPv4 address
        The unicast IP address of the RP
    auto_rp.rp_count  RP count
        Unsigned 8-bit integer
        The number of RP addresses contained in this message
    auto_rp.type  Packet type
        Unsigned 8-bit integer
        Auto-RP packet type
    auto_rp.version  Protocol version
        Unsigned 8-bit integer
        Auto-RP protocol version

Cisco Discovery Protocol (cdp)

    cdp.checksum  Checksum
        Unsigned 16-bit integer
    cdp.tlv.len  Length
        Unsigned 16-bit integer
    cdp.tlv.type  Type
        Unsigned 16-bit integer
    cdp.ttl  TTL
        Unsigned 16-bit integer
    cdp.version  Version
        Unsigned 8-bit integer

Cisco Group Management Protocol (cgmp)

    cgmp.count  Count
        Unsigned 8-bit integer
    cgmp.gda  Group Destination Address
        6-byte Hardware (MAC) Address
        Group Destination Address
    cgmp.type  Type
        Unsigned 8-bit integer
    cgmp.usa  Unicast Source Address
        6-byte Hardware (MAC) Address
        Unicast Source Address
    cgmp.version  Version
        Unsigned 8-bit integer

Cisco HDLC (chdlc)

    chdlc.address  Address
        Unsigned 8-bit integer
    chdlc.protocol  Protocol
        Unsigned 16-bit integer

Cisco Hot Standby Router Protocol (hsrp)

    hsrp.auth_data  Authentication Data
        String
        Contains a clear-text 8 character reused password
    hsrp.group  Group
        Unsigned 8-bit integer
        This field identifies the standby group
    hsrp.hellotime  Hellotime
        Unsigned 8-bit integer
        The approximate period between the Hello messages that the router sends
    hsrp.holdtime  Holdtime
        Unsigned 8-bit integer
        Time that the current Hello message should be considered valid
    hsrp.opcode  Op Code
        Unsigned 8-bit integer
        The type of message contained in this packet
    hsrp.priority  Priority
        Unsigned 8-bit integer
        Used to elect the active and standby routers. Numerically higher priority wins vote
    hsrp.reserved  Reserved
        Unsigned 8-bit integer
        Reserved
    hsrp.state  State
        Unsigned 8-bit integer
        The current state of the router sending the message
    hsrp.version  Version
        Unsigned 8-bit integer
        The version of the HSRP messages
    hsrp.virt_ip  Virtual IP Address
        IPv4 address
        The virtual IP address used by this group

Cisco ISL (isl)

    isl.addr  Source or Destination Address
        6-byte Hardware (MAC) Address
        Source or Destination Hardware Address
    isl.bpdu  BPDU
        Boolean
        BPDU indicator
    isl.crc  CRC
        Unsigned 32-bit integer
        CRC field of encapsulated frame
    isl.dst  Destination
        6-byte Hardware (MAC) Address
        Destination Address
    isl.dst_route_desc  Destination route descriptor
        Unsigned 16-bit integer
        Route descriptor to be used for forwarding
    isl.esize  Esize
        Unsigned 8-bit integer
        Frame size for frames less than 64 bytes
    isl.explorer  Explorer
        Boolean
        Explorer
    isl.fcs_not_incl  FCS Not Included
        Boolean
        FCS not included
    isl.hsa  HSA
        Unsigned 24-bit integer
        High bits of source address
    isl.index  Index
        Unsigned 16-bit integer
        Port index of packet source
    isl.len  Length
        Unsigned 16-bit integer
    isl.src  Source
        6-byte Hardware (MAC) Address
        Source Hardware Address
    isl.src_route_desc  Source-route descriptor
        Unsigned 16-bit integer
        Route descriptor to be used for source learning
    isl.src_vlan_id  Source VLAN ID
        Unsigned 16-bit integer
        Source Virtual LAN ID
    isl.type  Type
        Unsigned 8-bit integer
        Type
    isl.user  User
        Unsigned 8-bit integer
        User-defined bits
    isl.user_eth  User
        Unsigned 8-bit integer
        Priority (for Ethernet)
    isl.vlan_id  VLAN ID
        Unsigned 16-bit integer
        Virtual LAN ID

Cisco Interior Gateway Routing Protocol (igrp)

    igrp.as  Autonomous System
        Unsigned 16-bit integer
        Autonomous System number
    igrp.update  Update Release
        Unsigned 8-bit integer
        Update Release number

Cisco SLARP (slarp)

    slarp.address  Address
        IPv4 address
    slarp.mysequence  Outgoing sequence number
        Unsigned 32-bit integer
    slarp.ptype  Packet type
        Unsigned 32-bit integer
    slarp.yoursequence  Returned sequence number
        Unsigned 32-bit integer

CoSine IPNOS L2 debug output (cosine)

    cosine.err  Error Code
        Unsigned 8-bit integer
    cosine.off  Offset
        Unsigned 8-bit integer
    cosine.pri  Priority
        Unsigned 8-bit integer
    cosine.pro  Protocol
        Unsigned 8-bit integer
    cosine.rm  Rate Marking
        Unsigned 8-bit integer

Common Open Policy Service (cops)

    cops.accttimer.value  Contents: ACCT Timer Value
        Unsigned 16-bit integer
        Accounting Timer Value in AcctTimer object
    cops.c_num  C-Num
        Unsigned 8-bit integer
        C-Num in COPS Object Header
    cops.c_type  C-Type
        Unsigned 8-bit integer
        C-Type in COPS Object Header
    cops.client_type  Client Type
        Unsigned 16-bit integer
        Client Type in COPS Common Header
    cops.context.m_type  M-Type
        Unsigned 16-bit integer
        M-Type in COPS Context Object
    cops.context.r_type  R-Type
        Unsigned 16-bit integer
        R-Type in COPS Context Object
    cops.cperror  Error
        Unsigned 16-bit integer
        Error in Error object
    cops.cperror_sub  Error Sub-code
        Unsigned 16-bit integer
        Error Sub-code in Error object
    cops.decision.cmd  Command-Code
        Unsigned 16-bit integer
        Command-Code in Decision/LPDP Decision object
    cops.decision.flags  Flags
        Unsigned 16-bit integer
        Flags in Decision/LPDP Decision object
    cops.error  Error
        Unsigned 16-bit integer
        Error in Error object
    cops.error_sub  Error Sub-code
        Unsigned 16-bit integer
        Error Sub-code in Error object
    cops.flags  Flags
        Unsigned 8-bit integer
        Flags in COPS Common Header
    cops.gperror  Error
        Unsigned 16-bit integer
        Error in Error object
    cops.gperror_sub  Error Sub-code
        Unsigned 16-bit integer
        Error Sub-code in Error object
    cops.in-int.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS IN-Int object
    cops.in-int.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS IN-Int object
    cops.in-out-int.ifindex  ifIndex
        Unsigned 32-bit integer
        If SNMP is supported, corresponds to MIB-II ifIndex
    cops.integrity.key_id  Contents: Key ID
        Unsigned 32-bit integer
        Key ID in Integrity object
    cops.integrity.seq_num  Contents: Sequence Number
        Unsigned 32-bit integer
        Sequence Number in Integrity object
    cops.katimer.value  Contents: KA Timer Value
        Unsigned 16-bit integer
        Keep-Alive Timer Value in KATimer object
    cops.lastpdpaddr.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS LastPDPAddr object
    cops.lastpdpaddr.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS LastPDPAddr object
    cops.msg_len  Message Length
        Unsigned 32-bit integer
        Message Length in COPS Common Header
    cops.obj.len  Object Length
        Unsigned 32-bit integer
        Object Length in COPS Object Header
    cops.op_code  Op Code
        Unsigned 8-bit integer
        Op Code in COPS Common Header
    cops.out-int.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS OUT-Int object
    cops.out-int.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS OUT-Int
    cops.pdp.tcp_port  TCP Port Number
        Unsigned 32-bit integer
        TCP Port Number of PDP in PDPRedirAddr/LastPDPAddr object
    cops.pdprediraddr.ipv4  IPv4 address
        IPv4 address
        IPv4 address in COPS PDPRedirAddr object
    cops.pdprediraddr.ipv6  IPv6 address
        IPv6 address
        IPv6 address in COPS PDPRedirAddr object
    cops.pepid.id  Contents: PEP Id
        String
        PEP Id in PEPID object
    cops.reason  Reason
        Unsigned 16-bit integer
        Reason in Reason object
    cops.reason_sub  Reason Sub-code
        Unsigned 16-bit integer
        Reason Sub-code in Reason object
    cops.report_type  Contents: Report-Type
        Unsigned 16-bit integer
        Report-Type in Report-Type object
    cops.s_num  S-Num
        Unsigned 8-bit integer
        S-Num in COPS-PR Object Header
    cops.s_type  S-Type
        Unsigned 8-bit integer
        S-Type in COPS-PR Object Header
    cops.ver_flags  Version and Flags
        Unsigned 8-bit integer
        Version and Flags in COPS Common Header
    cops.version  Version
        Unsigned 8-bit integer
        Version in COPS Common Header

Common Unix Printing System (CUPS) Browsing Protocol (cups)

    cups.ptype  Type
        Unsigned 32-bit integer
    cups.state  State
        Unsigned 8-bit integer

DCE RPC (dcerpc)

    dcerpc.array.actual_count  Actual Count
        Unsigned 32-bit integer
        Actual Count: Actual number of elements in the array
    dcerpc.array.max_count  Max Count
        Unsigned 32-bit integer
        Maximum Count: Number of elements in the array
    dcerpc.array.offset  Offset
        Unsigned 32-bit integer
        Offset for first element in array
    dcerpc.auth_ctx_id  Auth Context ID
        Unsigned 32-bit integer
    dcerpc.auth_level  Auth level
        Unsigned 8-bit integer
    dcerpc.auth_pad_len  Auth pad len
        Unsigned 8-bit integer
    dcerpc.auth_rsrvd  Auth Rsrvd
        Unsigned 8-bit integer
    dcerpc.auth_type  Auth type
        Unsigned 8-bit integer
    dcerpc.cn_ack_reason  Ack reason
        Unsigned 16-bit integer
    dcerpc.cn_ack_result  Ack result
        Unsigned 16-bit integer
    dcerpc.cn_ack_trans_id  Transfer Syntax
        String
    dcerpc.cn_ack_trans_ver  Syntax ver
        Unsigned 32-bit integer
    dcerpc.cn_alloc_hint  Alloc hint
        Unsigned 32-bit integer
    dcerpc.cn_assoc_group  Assoc Group
        Unsigned 32-bit integer
    dcerpc.cn_auth_len  Auth Length
        Unsigned 16-bit integer
    dcerpc.cn_bind_if_ver  Interface Ver
        Unsigned 16-bit integer
    dcerpc.cn_bind_if_ver_minor  Interface Ver Minor
        Unsigned 16-bit integer
    dcerpc.cn_bind_to_uuid  Interface UUID
        String
    dcerpc.cn_bind_trans_id  Transfer Syntax
        String
    dcerpc.cn_bind_trans_ver  Syntax ver
        Unsigned 32-bit integer
    dcerpc.cn_call_id  Call ID
        Unsigned 32-bit integer
    dcerpc.cn_cancel_count  Cancel count
        Unsigned 8-bit integer
    dcerpc.cn_ctx_id  Context ID
        Unsigned 16-bit integer
    dcerpc.cn_flags  Packet Flags
        Unsigned 8-bit integer
    dcerpc.cn_flags.cancel_pending  Cancel Pending
        Boolean
    dcerpc.cn_flags.dne  Did Not Execute
        Boolean
    dcerpc.cn_flags.first_frag  First Frag
        Boolean
    dcerpc.cn_flags.last_frag  Last Frag
        Boolean
    dcerpc.cn_flags.maybe  Maybe
        Boolean
    dcerpc.cn_flags.mpx  Multiplex
        Boolean
    dcerpc.cn_flags.object  Object
        Boolean
    dcerpc.cn_flags.reserved  Reserved
        Boolean
    dcerpc.cn_frag_len  Frag Length
        Unsigned 16-bit integer
    dcerpc.cn_max_recv  Max Recv Frag
        Unsigned 16-bit integer
    dcerpc.cn_max_xmit  Max Xmit Frag
        Unsigned 16-bit integer
    dcerpc.cn_num_ctx_items  Num Ctx Items
        Unsigned 8-bit integer
    dcerpc.cn_num_protocols  Number of protocols
        Unsigned 8-bit integer
    dcerpc.cn_num_results  Num results
        Unsigned 8-bit integer
    dcerpc.cn_num_trans_items  Num Trans Items
        Unsigned 16-bit integer
    dcerpc.cn_protocol_ver_major  Protocol major version
        Unsigned 8-bit integer
    dcerpc.cn_protocol_ver_minor  Protocol minor version
        Unsigned 8-bit integer
    dcerpc.cn_reject_reason  Reject reason
        Unsigned 16-bit integer
    dcerpc.cn_sec_addr  Scndry Addr
        String
    dcerpc.cn_sec_addr_len  Scndry Addr len
        Unsigned 16-bit integer
    dcerpc.cn_status  Status
        Unsigned 32-bit integer
    dcerpc.dg_act_id  Activitiy
        String
    dcerpc.dg_ahint  Activity Hint
        Unsigned 16-bit integer
    dcerpc.dg_auth_proto  Auth proto
        Unsigned 8-bit integer
    dcerpc.dg_cancel_id  Cancel ID
        Unsigned 32-bit integer
    dcerpc.dg_cancel_vers  Cancel Version
        Unsigned 32-bit integer
    dcerpc.dg_flags1  Flags1
        Unsigned 8-bit integer
    dcerpc.dg_flags1_broadcast  Broadcast
        Boolean
    dcerpc.dg_flags1_frag  Fragment
        Boolean
    dcerpc.dg_flags1_idempotent  Idempotent
        Boolean
    dcerpc.dg_flags1_last_frag  Last Fragment
        Boolean
    dcerpc.dg_flags1_maybe  Maybe
        Boolean
    dcerpc.dg_flags1_nofack  No Fack
        Boolean
    dcerpc.dg_flags1_rsrvd_01  Reserved
        Boolean
    dcerpc.dg_flags1_rsrvd_80  Reserved
        Boolean
    dcerpc.dg_flags2  Flags2
        Unsigned 8-bit integer
    dcerpc.dg_flags2_cancel_pending  Cancel Pending
        Boolean
    dcerpc.dg_flags2_rsrvd_01  Reserved
        Boolean
    dcerpc.dg_flags2_rsrvd_04  Reserved
        Boolean
    dcerpc.dg_flags2_rsrvd_08  Reserved
        Boolean
    dcerpc.dg_flags2_rsrvd_10  Reserved
        Boolean
    dcerpc.dg_flags2_rsrvd_20  Reserved
        Boolean
    dcerpc.dg_flags2_rsrvd_40  Reserved
        Boolean
    dcerpc.dg_flags2_rsrvd_80  Reserved
        Boolean
    dcerpc.dg_frag_len  Fragment len
        Unsigned 16-bit integer
    dcerpc.dg_frag_num  Fragment num
        Unsigned 16-bit integer
    dcerpc.dg_if_id  Interface
        String
    dcerpc.dg_if_ver  Interface Ver
        Unsigned 32-bit integer
    dcerpc.dg_ihint  Interface Hint
        Unsigned 16-bit integer
    dcerpc.dg_seqnum  Sequence num
        Unsigned 32-bit integer
    dcerpc.dg_serial_hi  Serial High
        Unsigned 8-bit integer
    dcerpc.dg_serial_lo  Serial Low
        Unsigned 8-bit integer
    dcerpc.dg_server_boot  Server boot time
        Unsigned 32-bit integer
    dcerpc.dg_status  Status
        Unsigned 32-bit integer
    dcerpc.drep  Data Representation
        Byte array
    dcerpc.drep.byteorder  Byte order
        Unsigned 8-bit integer
    dcerpc.drep.character  Character
        Unsigned 8-bit integer
    dcerpc.drep.fp  Floating-point
        Unsigned 8-bit integer
    dcerpc.fack_max_frag_size  Max Frag Size
        Unsigned 32-bit integer
    dcerpc.fack_max_tsdu  Max TSDU
        Unsigned 32-bit integer
    dcerpc.fack_selack  Selective ACK
        Unsigned 32-bit integer
    dcerpc.fack_selack_len  Selective ACK Len
        Unsigned 16-bit integer
    dcerpc.fack_serial_num  Serial Num
        Unsigned 16-bit integer
    dcerpc.fack_vers  FACK Version
        Unsigned 8-bit integer
    dcerpc.fack_window size  Window Size
        Unsigned 16-bit integer
    dcerpc.fragment  DCE/RPC Fragment
        No value
        DCE/RPC Fragment
    dcerpc.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    dcerpc.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    dcerpc.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    dcerpc.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    dcerpc.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    dcerpc.fragments  DCE/RPC Fragments
        No value
        DCE/RPC Fragments
    dcerpc.obj_id  Object
        String
    dcerpc.op  Operation
        Unsigned 16-bit integer
    dcerpc.opnum  Opnum
        Unsigned 16-bit integer
    dcerpc.pkt_type  Packet type
        Unsigned 8-bit integer
    dcerpc.referent_id  Referent ID
        Unsigned 32-bit integer
        Referent ID for this NDR encoded pointer
    dcerpc.request_in  Request in
        Unsigned 32-bit integer
        This packet is a response to the packet in this frame
    dcerpc.response_in  Response in
        Unsigned 32-bit integer
        The response to this packet is in this packet
    dcerpc.server_accepting_cancels  Server accepting cancels
        Boolean
    dcerpc.ver  Version
        Unsigned 8-bit integer
    dcerpc.ver_minor  Version (minor)
        Unsigned 8-bit integer

DCE/RPC Conversation Manager (conv)

DCE/RPC Endpoint Mapper (epm)

    epm.hnd  Handle
        Byte array
        Context handle
    epm.if_id  Interface
        String
    epm.if_id_p  Interface pointer
        Unsigned 32-bit integer
    epm.inq_type  Inquiry type
        Unsigned 32-bit integer
    epm.max_ents  Max entries
        Unsigned 32-bit integer
    epm.max_towers  Max Towers
        Unsigned 32-bit integer
        Maximum number of towers to return
    epm.num_ents  Num entries
        Unsigned 32-bit integer
    epm.num_towers  Num Towers
        Unsigned 32-bit integer
        Number number of towers to return
    epm.object  Object
        String
    epm.object_p  Object pointer
        Unsigned 32-bit integer
    epm.opnum  Operation
        Unsigned 16-bit integer
        Operation
    epm.rc  Return code
        Unsigned 32-bit integer
        EPM return value
    epm.tower  Tower
        Byte array
        Tower data
    epm.tower.len  Length
        Unsigned 32-bit integer
        Length of tower data
    epm.tower.lhs.len  LHS Length
        Unsigned 16-bit integer
        Length of LHS data
    epm.tower.num_floors  Number of floors
        Unsigned 16-bit integer
        Number of floors in tower
    epm.tower.proto_id  Protocol
        Unsigned 8-bit integer
        Protocol identifier
    epm.tower.rhs.len  RHS Length
        Unsigned 16-bit integer
        Length of RHS data
    epm.uuid  UUID
        String
        UUID
    epm.ver_maj  Version Major
        Unsigned 16-bit integer
    epm.ver_min  Version Minor
        Unsigned 16-bit integer
    epm.ver_opt  Version Option
        Unsigned 32-bit integer

DCE/RPC Remote Management (mgmt)

DCOM OXID Resolver (oxid)

DCOM Remote Activation (remact)

DEC Spanning Tree Protocol (dec_stp)

    dec_stp.bridge.mac  Bridge MAC
        6-byte Hardware (MAC) Address
    dec_stp.bridge.pri  Bridge Priority
        Unsigned 16-bit integer
    dec_stp.flags  BPDU flags
        Unsigned 8-bit integer
    dec_stp.flags.short_timers  Use short timers
        Boolean
    dec_stp.flags.tc  Topology Change
        Boolean
    dec_stp.flags.tcack  Topology Change Acknowledgment
        Boolean
    dec_stp.forward  Forward Delay
        Unsigned 8-bit integer
    dec_stp.hello  Hello Time
        Unsigned 8-bit integer
    dec_stp.max_age  Max Age
        Unsigned 8-bit integer
    dec_stp.msg_age  Message Age
        Unsigned 8-bit integer
    dec_stp.port  Port identifier
        Unsigned 8-bit integer
    dec_stp.protocol  Protocol Identifier
        Unsigned 8-bit integer
    dec_stp.root.cost  Root Path Cost
        Unsigned 16-bit integer
    dec_stp.root.mac  Root MAC
        6-byte Hardware (MAC) Address
    dec_stp.root.pri  Root Priority
        Unsigned 16-bit integer
    dec_stp.type  BPDU Type
        Unsigned 8-bit integer
    dec_stp.version  BPDU Version
        Unsigned 8-bit integer

DHCPv6 (dhcpv6)

    dhcpv6.msgtype  Message type
        Unsigned 8-bit integer

Data (data)

Data Link SWitching (dlsw)

Data Stream Interface (dsi)

    dsi.attn_flag  Flags
        Unsigned 16-bit integer
        Server attention flag
    dsi.attn_flag.crash  Crash
        Boolean
        Attention flag, server crash bit
    dsi.attn_flag.msg  Message
        Boolean
        Attention flag, server message bit
    dsi.attn_flag.reconnect  Don't reconnect
        Boolean
        Attention flag, don't reconnect bit
    dsi.attn_flag.shutdown  Shutdown
        Boolean
        Attention flag, server is shutting down
    dsi.attn_flag.time  Minutes
        Unsigned 16-bit integer
        Number of minutes
    dsi.command  Command
        Unsigned 8-bit integer
        Represents a DSI command.
    dsi.data_offset  Data offset
        Signed 32-bit integer
        Data offset
    dsi.error_code  Error code
        Signed 32-bit integer
        Error code
    dsi.flags  Flags
        Unsigned 8-bit integer
        Indicates request or reply.
    dsi.length  Length
        Unsigned 32-bit integer
        Total length of the data that follows the DSI header.
    dsi.open_len  Length
        Unsigned 8-bit integer
        Open session option len
    dsi.open_option  Option
        Byte array
        Open session options (undecoded)
    dsi.open_quantum  Quantum
        Unsigned 32-bit integer
        Server/Attention quantum
    dsi.open_type  Flags
        Unsigned 8-bit integer
        Open session option type.
    dsi.requestid  Request ID
        Unsigned 16-bit integer
        Keeps track of which request this is.  Replies must match a Request.  IDs must be generated in sequential order.
    dsi.reserved  Reserved
        Unsigned 32-bit integer
        Reserved for future use.  Should be set to zero.
    dsi.server_addr.len  Length
        Unsigned 8-bit integer
        Address length.
    dsi.server_addr.type  Type
        Unsigned 8-bit integer
        Address type.
    dsi.server_addr.value  Value
        Byte array
        Address value
    dsi.server_directory  Directory service
        String
        Server directory service
    dsi.server_flag  Flag
        Unsigned 16-bit integer
        Server capabilities flag
    dsi.server_flag.copyfile  Support copyfile
        Boolean
        Server support copyfile
    dsi.server_flag.directory  Support directory services
        Boolean
        Server support directory services
    dsi.server_flag.fast_copy  Support fast copy
        Boolean
        Server support fast copy
    dsi.server_flag.no_save_passwd  Don't allow save password
        Boolean
        Don't allow save password
    dsi.server_flag.notify  Support server notifications
        Boolean
        Server support notifications
    dsi.server_flag.passwd  Support change password
        Boolean
        Server support change password
    dsi.server_flag.reconnect  Support server reconnect
        Boolean
        Server support reconnect
    dsi.server_flag.srv_msg  Support server message
        Boolean
        Support server message
    dsi.server_flag.srv_sig  Support server signature
        Boolean
        Support server signature
    dsi.server_flag.tcpip  Support TCP/IP
        Boolean
        Server support TCP/IP
    dsi.server_icon  Icon bitmap
        Byte array
        Server icon bitmap
    dsi.server_name  Server name
        String
        Server name
    dsi.server_signature  Server signature
        Byte array
        Server signature
    dsi.server_type  Server type
        String
        Server type
    dsi.server_uams  UAM
        String
        UAM
    dsi.server_vers  AFP version
        String
        AFP version

Datagram Delivery Protocol (ddp)

    ddp.checksum  Checksum
        Unsigned 16-bit integer
    ddp.dst  Destination address
        String
    ddp.dst.net  Destination Net
        Unsigned 16-bit integer
    ddp.dst.node  Destination Node
        Unsigned 8-bit integer
    ddp.dst_socket  Destination Socket
        Unsigned 8-bit integer
    ddp.hopcount  Hop count
        Unsigned 8-bit integer
    ddp.len  Datagram length
        Unsigned 16-bit integer
    ddp.src  Source address
        String
    ddp.src.net  Source Net
        Unsigned 16-bit integer
    ddp.src.node  Source Node
        Unsigned 8-bit integer
    ddp.src_socket  Source Socket
        Unsigned 8-bit integer
    ddp.type  Protocol type
        Unsigned 8-bit integer

Diameter Protocol (diameter)

    diameter.avp.code  AVP Code
        Unsigned 32-bit integer
    diameter.avp.data.bytes  Value
        Byte array
    diameter.avp.data.int32  Value
        Signed 32-bit integer
    diameter.avp.data.int64  Value
        Signed 64-bit integer
    diameter.avp.data.string  Value
        String
    diameter.avp.data.time  Time
        Date/Time stamp
    diameter.avp.data.uint32  Value
        Unsigned 32-bit integer
    diameter.avp.data.uint64  Value
        Unsigned 64-bit integer
    diameter.avp.data.v4addr  IPv4 Address
        IPv4 address
    diameter.avp.data.v6addr  IPv6 Address
        IPv6 address
    diameter.avp.flags  AVP Flags
        Unsigned 8-bit integer
    diameter.avp.flags.protected  Protected
        Boolean
    diameter.avp.flags.reserved3  Reserved
        Boolean
    diameter.avp.flags.reserved4  Reserved
        Boolean
    diameter.avp.flags.reserved5  Reserved
        Boolean
    diameter.avp.flags.reserved6  Reserved
        Boolean
    diameter.avp.flags.reserved7  Reserved
        Boolean
    diameter.avp.length  AVP Length
        Unsigned 24-bit integer
    diameter.avp.vendorId  AVP Vendor Id
        Unsigned 32-bit integer
    diameter.code  Command Code
        Unsigned 24-bit integer
    diameter.endtoendid  End-to-End Identifier
        Unsigned 32-bit integer
    diameter.flags  Flags
        Unsigned 8-bit integer
    diameter.flags.error  Error
        Boolean
    diameter.flags.mandatory  Mandatory
        Boolean
    diameter.flags.proxyable  Proxyable
        Boolean
    diameter.flags.request  Request
        Boolean
    diameter.flags.reserved3  Reserved
        Boolean
    diameter.flags.reserved4  Reserved
        Boolean
    diameter.flags.reserved5  Reserved
        Boolean
    diameter.flags.reserved6  Reserved
        Boolean
    diameter.flags.reserved7  Reserved
        Boolean
    diameter.flags.vendorspecific  Vendor-Specific
        Boolean
    diameter.hopbyhopid  Hop-by-Hop Identifier
        Unsigned 32-bit integer
    diameter.length  Length
        Unsigned 24-bit integer
    diameter.vendorId  VendorId
        Unsigned 32-bit integer
    diameter.version  Version
        Unsigned 8-bit integer

Distance Vector Multicast Routing Protocol (dvmrp)

    dvmrp.afi  Address Family
        Unsigned 8-bit integer
        DVMRP Address Family Indicator
    dvmrp.cap.genid  Genid
        Boolean
        Genid capability
    dvmrp.cap.leaf  Leaf
        Boolean
        Leaf
    dvmrp.cap.mtrace  Mtrace
        Boolean
        Mtrace capability
    dvmrp.cap.netmask  Netmask
        Boolean
        Netmask capability
    dvmrp.cap.prune  Prune
        Boolean
        Prune capability
    dvmrp.cap.snmp  SNMP
        Boolean
        SNMP capability
    dvmrp.capabilities  Capabilities
        No value
        DVMRP V3 Capabilities
    dvmrp.checksum  Checksum
        Unsigned 16-bit integer
        DVMRP Checksum
    dvmrp.checksum_bad  Bad Checksum
        Boolean
        Bad DVMRP Checksum
    dvmrp.command  Command
        Unsigned 8-bit integer
        DVMRP V1 Command
    dvmrp.commands  Commands
        No value
        DVMRP V1 Commands
    dvmrp.count  Count
        Unsigned 8-bit integer
        Count
    dvmrp.dest_unreach  Destination Unreachable
        Boolean
        Destination Unreachable
    dvmrp.genid  Generation ID
        Unsigned 32-bit integer
        DVMRP Generation ID
    dvmrp.hold  Hold Time
        Unsigned 32-bit integer
        DVMRP Hold Time in seconds
    dvmrp.infinity  Infinity
        Unsigned 8-bit integer
        DVMRP Infinity
    dvmrp.lifetime  Prune lifetime
        Unsigned 32-bit integer
        DVMRP Prune Lifetime
    dvmrp.maj_ver  Major Version
        Unsigned 8-bit integer
        DVMRP Major Version
    dvmrp.metric  Metric
        Unsigned 8-bit integer
        DVMRP Metric
    dvmrp.min_ver  Minor Version
        Unsigned 8-bit integer
        DVMRP Minor Version
    dvmrp.route  Route
        No value
        DVMRP V3 Route Report
    dvmrp.split_horiz  Split Horizon
        Boolean
        Split Horizon concealed route
    dvmrp.type  Type
        Unsigned 8-bit integer
        DVMRP Packet Type
    dvmrp.v1.code  Code
        Unsigned 8-bit integer
        DVMRP Packet Code
    dvmrp.v3.code  Code
        Unsigned 8-bit integer
        DVMRP Packet Code
    dvmrp.version  DVMRP Version
        Unsigned 8-bit integer
        DVMRP Version
    igmp.daddr  Dest Addr
        IPv4 address
        DVMRP Destination Address
    igmp.maddr  Multicast Addr
        IPv4 address
        DVMRP Multicast Address
    igmp.neighbor  Neighbor Addr
        IPv4 address
        DVMRP Neighbor Address
    igmp.netmask  Netmask
        IPv4 address
        DVMRP Netmask
    igmp.saddr  Source Addr
        IPv4 address
        DVMRP Source Address

Distributed Checksum Clearinghouse Prototocl (dccp)

    dccp.adminop  Admin Op
        Unsigned 8-bit integer
        Admin Op
    dccp.adminval  Admin Value
        Unsigned 32-bit integer
        Admin Value
    dccp.brand  Server Brand
        String
        Server Brand
    dccp.checksum.length  Length
        Unsigned 8-bit integer
        Checksum Length
    dccp.checksum.sum  Sum
        Byte array
        Checksum
    dccp.checksum.type  Type
        Unsigned 8-bit integer
        Checksum Type
    dccp.clientid  Client ID
        Unsigned 32-bit integer
        Client ID
    dccp.date  Date
        Date/Time stamp
        Date
    dccp.floodop  Flood Control Operation
        Unsigned 32-bit integer
        Flood Control Operation
    dccp.len  Packet Length
        Unsigned 16-bit integer
        Packet Length
    dccp.max_pkt_vers  Maximum Packet Version
        Unsigned 8-bit integer
        Maximum Packet Version
    dccp.op  Operation Type
        Unsigned 8-bit integer
        Operation Type
    dccp.opnums.host  Host
        IPv4 address
        Host
    dccp.opnums.pid  Process ID
        Unsigned 32-bit integer
        Process ID
    dccp.opnums.report  Report
        Unsigned 32-bit integer
        Report
    dccp.opnums.retrans  Retransmission
        Unsigned 32-bit integer
        Retransmission
    dccp.pkt_vers  Packet Version
        Unsigned 16-bit integer
        Packet Version
    dccp.qdelay_ms  Client Delay
        Unsigned 16-bit integer
        Client Delay
    dccp.signature  Signature
        Byte array
        Signature
    dccp.target  Target
        Unsigned 32-bit integer
        Target
    dccp.trace  Trace Bits
        Unsigned 32-bit integer
        Trace Bits
    dccp.trace.admin  Admin Requests
        Unsigned 32-bit integer
        Admin Requests
    dccp.trace.anon  Anonymous Requests
        Unsigned 32-bit integer
        Anonymous Requests
    dccp.trace.client  Authenticated Client Requests
        Unsigned 32-bit integer
        Authenticated Client Requests
    dccp.trace.flood  Input/Output Flooding
        Unsigned 32-bit integer
        Input/Output Flooding
    dccp.trace.query  Queries and Reports
        Unsigned 32-bit integer
        Queries and Reports
    dccp.trace.ridc  RID Cache Messages
        Unsigned 32-bit integer
        RID Cache Messages
    dccp.trace.rlim  Rate-Limited Requests
        Unsigned 32-bit integer
        Rate-Limited Requests

Domain Name Service (dns)

    dns.count.add_rr  Additional RRs
        Unsigned 16-bit integer
        Number of additional records in packet
    dns.count.answers  Answer RRs
        Unsigned 16-bit integer
        Number of answers in packet
    dns.count.auth_rr  Authority RRs
        Unsigned 16-bit integer
        Number of authoritative records in packet
    dns.count.queries  Questions
        Unsigned 16-bit integer
        Number of queries in packet
    dns.flags  Flags
        Unsigned 16-bit integer
    dns.flags.authenticated  Answer authenticated
        Boolean
        Was the reply data authenticated by the server?
    dns.flags.authoritative  Authoritative
        Boolean
        Is the server is an authority for the domain?
    dns.flags.checkdisable  Non-authenticated data OK
        Boolean
        Is non-authenticated data acceptable?
    dns.flags.opcode  Opcode
        Unsigned 16-bit integer
        Operation code
    dns.flags.rcode  Reply code
        Unsigned 16-bit integer
        Reply code
    dns.flags.recavail  Recursion available
        Boolean
        Can the server do recursive queries?
    dns.flags.recdesired  Recursion desired
        Boolean
        Do query recursively?
    dns.flags.response  Response
        Boolean
        Is the message a response?
    dns.flags.truncated  Truncated
        Boolean
        Is the message truncated?
    dns.id  Transaction ID
        Unsigned 16-bit integer
        Identification of transaction
    dns.length  Length
        Unsigned 16-bit integer
        Length of DNS-over-TCP request or response

Dynamic DNS Tools Protocol (ddtp)

    ddtp.encrypt  Encryption
        Unsigned 32-bit integer
        Encryption type
    ddtp.hostid  Hostid
        Unsigned 32-bit integer
        Host ID
    ddtp.ipaddr  IP address
        IPv4 address
        IP address
    ddtp.msgtype  Message type
        Unsigned 32-bit integer
        Message Type
    ddtp.opcode  Opcode
        Unsigned 32-bit integer
        Update query opcode
    ddtp.status  Status
        Unsigned 32-bit integer
        Update reply status
    ddtp.version  Version
        Unsigned 32-bit integer
        Version

Encapsulating Security Payload (esp)

    esp.sequence  Sequence
        Unsigned 32-bit integer
    esp.spi  SPI
        Unsigned 32-bit integer

Enhanced Interior Gateway Routing Protocol (eigrp)

    eigrp.as  Autonomous System  
        Unsigned 16-bit integer
        Autonomous System number
    eigrp.opcode  Opcode
        Unsigned 8-bit integer
        Opcode number
    eigrp.tlv  Entry  
        Unsigned 16-bit integer
        Type/Length/Value

Ethernet (eth)

    eth.addr  Source or Destination Address
        6-byte Hardware (MAC) Address
        Source or Destination Hardware Address
    eth.dst  Destination
        6-byte Hardware (MAC) Address
        Destination Hardware Address
    eth.len  Length
        Unsigned 16-bit integer
    eth.src  Source
        6-byte Hardware (MAC) Address
        Source Hardware Address
    eth.trailer  Trailer
        Byte array
        Ethernet Trailer or Checksum
    eth.type  Type
        Unsigned 16-bit integer

Extensible Authentication Protocol (eap)

    eap.code  Code
        Unsigned 8-bit integer
    eap.id  Id
        Unsigned 8-bit integer
    eap.len  Length
        Unsigned 16-bit integer
    eap.type  Type
        Unsigned 8-bit integer
    eaptls.fragment  EAP-TLS Fragment
        No value
        EAP-TLS Fragment
    eaptls.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    eaptls.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    eaptls.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    eaptls.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    eaptls.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    eaptls.fragments  EAP-TLS Fragments
        No value
        EAP-TLS Fragments

FTP Data (ftp-data)

Fiber Distributed Data Interface (fddi)

    fddi.addr  Source or Destination Address
        6-byte Hardware (MAC) Address
        Source or Destination Hardware Address
    fddi.dst  Destination
        6-byte Hardware (MAC) Address
        Destination Hardware Address
    fddi.fc  Frame Control
        Unsigned 8-bit integer
    fddi.fc.clf  Class/Length/Format
        Unsigned 8-bit integer
    fddi.fc.mac_subtype  MAC Subtype
        Unsigned 8-bit integer
    fddi.fc.prio  Priority
        Unsigned 8-bit integer
    fddi.fc.smt_subtype  SMT Subtype
        Unsigned 8-bit integer
    fddi.src  Source
        6-byte Hardware (MAC) Address

File Transfer Protocol (FTP) (ftp)

    ftp.request  Request
        Boolean
        TRUE if FTP request
    ftp.request.arg  Request arg
        String
    ftp.request.command  Request command
        String
    ftp.response  Response
        Boolean
        TRUE if FTP response
    ftp.response.arg  Response arg
        String
    ftp.response.code  Response code
        Unsigned 32-bit integer

Frame (frame)

    frame.cap_len  Capture Frame Length
        Unsigned 32-bit integer
    frame.file_off  File Offset
        Signed 32-bit integer
    frame.marked  Frame is marked
        Boolean
        Frame is marked in the GUI
    frame.number  Frame Number
        Unsigned 32-bit integer
    frame.p2p_dir  Point-to-Point Direction
        Unsigned 8-bit integer
    frame.pkt_len  Total Frame Length
        Unsigned 32-bit integer
    frame.time  Arrival Time
        Date/Time stamp
    frame.time_delta  Time delta from previous packet
        Time duration
    frame.time_relative  Time relative to first packet
        Time duration

Frame Relay (fr)

    fr.becn  BECN
        Boolean
        Backward Explicit Congestion Notification
    fr.chdlctype  Type
        Unsigned 16-bit integer
        FrameRelay Cisco HDLC Encapsulated Protocol
    fr.cr  CR
        Boolean
        Command/Response
    fr.dc  DC
        Boolean
        Address/Control
    fr.de  DE
        Boolean
        Discard Eligibility
    fr.dlci  DLCI
        Unsigned 16-bit integer
        Data-Link Connection Identifier
    fr.ea  EA
        Boolean
        Extended Address
    fr.fecn  FECN
        Boolean
        Forward Explicit Congestion Notification
    fr.nlpid  NLPID
        Unsigned 8-bit integer
        FrameRelay Encapsulated Protocol NLPID
    fr.snap.oui  Organization Code
        Unsigned 24-bit integer
    fr.snap.pid  Protocol ID
        Unsigned 16-bit integer
    fr.snaptype  Type
        Unsigned 16-bit integer
        FrameRelay SNAP Encapsulated Protocol

GARP Multicast Registration Protocol (gmrp)

    garp.attribute_event  Event
        Unsigned 8-bit integer
    garp.attribute_length  Length
        Unsigned 8-bit integer
    garp.attribute_type  Type
        Unsigned 8-bit integer
    garp.attribute_value_group_membership  Value
        6-byte Hardware (MAC) Address
    garp.attribute_value_service_requirement  Value
        Unsigned 8-bit integer
    garp.protocol_id  Protocol ID
        Unsigned 16-bit integer

GARP VLAN Registration Protocol (gvrp)

    garp.attribute_value  Value
        Unsigned 16-bit integer

GPRS Tunneling Protocol (gtp)

GPRS Tunnelling Protocol v0 (gtpv0)

    gtpv0.apn  APN
        String
        Access Point Name
    gtpv0.cause  Cause
        Unsigned 8-bit integer
        Cause of operation
    gtpv0.chrg_id  Charging ID 
        Unsigned 32-bit integer
        Charging ID
    gtpv0.chrg_ipv4  CG address IPv4
        IPv4 address
        Charging Gateway address IPv4
    gtpv0.chrg_ipv6  CG address IPv6
        IPv6 address
        Charging Gateway address IPv6
    gtpv0.ext_flow_label  Flow Label Data I
        Unsigned 16-bit integer
        Flow label data
    gtpv0.ext_id  Extension identifier
        Unsigned 16-bit integer
        Extension Identifier
    gtpv0.ext_val  Extension value
        String
        Extension Value
    gtpv0.flags  Flags
        Unsigned 8-bit integer
        Ver/PT/Spare/SNN
    gtpv0.flags.payload  Protocol type
        Unsigned 8-bit integer
        Protocol Type (1 = GTP, 0 = GTP' )
    gtpv0.flags.reserved  Reserved
        Unsigned 8-bit integer
        Reserved (shall be sent as '111' )
    gtpv0.flags.snn  Is SNDCP N-PDU included?
        Boolean
        Is SNDCP N-PDU LLC Number included? (1 = yes, 0 = no)
    gtpv0.flags.version  Version
        Unsigned 8-bit integer
        GTP Version
    gtpv0.flow_ii  Flow Label Data II 
        Unsigned 16-bit integer
        Downlink flow label data
    gtpv0.flow_label  Flow label
        Unsigned 16-bit integer
        Flow label
    gtpv0.flow_sig  Flow label Signalling
        Unsigned 16-bit integer
        Flow label signalling
    gtpv0.gsn_addr_len  GSN address length
        Unsigned 8-bit integer
        GSN Address Length
    gtpv0.gsn_addr_type  GSN address type
        Unsigned 8-bit integer
        GSN Address Type
    gtpv0.gsn_ipv4  GSN address IPv4
        IPv4 address
        GSN address IPv4
    gtpv0.gsn_ipv6  GSN address IPv6
        IPv6 address
        GSN address IPv6
    gtpv0.imsi  IMSI
        String
        International Mobile Subscriber Identity number
    gtpv0.lac  LAC
        Unsigned 16-bit integer
        Location Area Code
    gtpv0.length  Length
        Unsigned 16-bit integer
        Length (i.e. number of octets after TID or TEID)
    gtpv0.map_cause  MAP cause
        Unsigned 8-bit integer
        MAP cause
    gtpv0.mcc  MCC
        Unsigned 16-bit integer
        Mobile Country Code
    gtpv0.message  Message type
        Unsigned 8-bit integer
        GTP Message Type
    gtpv0.mnc  MNC
        Unsigned 8-bit integer
        Mobile Network Code
    gtpv0.ms_reason  MS not reachable reason
        Unsigned 8-bit integer
        MS Not Reachable Reason
    gtpv0.ms_valid  MS validated
        Boolean
        MS validated
    gtpv0.msisdn  MSISDN
        String
        MS international PSTN/ISDN number
    gtpv0.node_ipv4  Node address IPv4
        IPv4 address
        Recommended node address IPv4
    gtpv0.node_ipv6  Node address IPv6
        IPv6 address
        Recommended node address IPv6
    gtpv0.nsapi  NSAPI 
        Unsigned 8-bit integer
        Network layer Service Access Point Identifier
    gtpv0.ptmsi  P-TMSI
        Unsigned 32-bit integer
        Packet-Temporary Mobile Subscriber Identity
    gtpv0.ptmsi_sig  P-TMSI signature
        Unsigned 24-bit integer
        P-TMSI Signature
    gtpv0.qos_delay  QoS delay
        Unsigned 8-bit integer
        Quality of Service Delay Class
    gtpv0.qos_mean  QoS mean
        Unsigned 8-bit integer
        Quality of Service Mean Throughput
    gtpv0.qos_peak  QoS peak
        Unsigned 8-bit integer
        Quality of Service Peak Throughput
    gtpv0.qos_precedence  QoS precedence
        Unsigned 8-bit integer
        Quality of Service Precedence Class
    gtpv0.qos_reliabilty  QoS reliability
        Unsigned 8-bit integer
        Quality of Service Reliability Class
    gtpv0.qos_spare1  Spare
        Unsigned 8-bit integer
        Spare (shall be sent as '00' )
    gtpv0.qos_spare2  Spare
        Unsigned 8-bit integer
        Spare (shall be sent as 0)
    gtpv0.qos_spare3  Spare
        Unsigned 8-bit integer
        Spare (shall be sent as '000' )
    gtpv0.rac  RAC
        Unsigned 8-bit integer
        Routing Area Code
    gtpv0.recovery  Recovery
        Unsigned 8-bit integer
        Restart counter
    gtpv0.reorder  Reordering required
        Boolean
        Reordering required
    gtpv0.sel_mode  Selection mode
        Unsigned 8-bit integer
        Selection Mode
    gtpv0.seq_number  Sequence number
        Unsigned 16-bit integer
        Sequence Number
    gtpv0.sndcp_number  SNDCP N-PDU LLC Number
        Unsigned 8-bit integer
        SNDCP N-PDU LLC Number
    gtpv0.tid  TID
        String
        Tunnel Identifier
    gtpv0.tlli  TLLI
        Unsigned 32-bit integer
        Temporary Logical Link Identity
    gtpv0.tr_comm  Packet transfer command
        Unsigned 8-bit integer
        Packat transfer command
    gtpv0.unknown  Unknown data (length)
        Unsigned 16-bit integer
        Unknown data
    gtpv0.user_addr_pdp_org  PDP type organization
        Unsigned 8-bit integer
        PDP type organization
    gtpv0.user_addr_pdp_type  PDP type number
        Unsigned 8-bit integer
        PDP type
    gtpv0.user_ipv4  End user address IPv4
        IPv4 address
        End user address IPv4
    gtpv0.user_ipv6  End user address IPv6
        IPv6 address
        End user address IPv6

GPRS Tunnelling Protocol v1 (gtpv1)

    gtpv1.apn  APN
        String
        Access Point Name
    gtpv1.cause  Cause 
        Unsigned 8-bit integer
        Cause of operation
    gtpv1.chrg_char_f  Flat rate charging
        Unsigned 8-bit integer
        Flat rate charging
    gtpv1.chrg_char_h  Hot billing charging
        Unsigned 8-bit integer
        Hot billing charging
    gtpv1.chrg_char_n  Normal charging
        Unsigned 8-bit integer
        Normal charging
    gtpv1.chrg_char_p  Prepaid charging
        Unsigned 8-bit integer
        Prepaid charging
    gtpv1.chrg_char_r  Reserved
        Unsigned 8-bit integer
        Reserved
    gtpv1.chrg_char_s  Spare
        Unsigned 8-bit integer
        Spare
    gtpv1.chrg_id  Charging ID
        Unsigned 32-bit integer
        Charging ID
    gtpv1.chrg_ipv4  CG address IPv4
        IPv4 address
        Charging Gateway address IPv4
    gtpv1.chrg_ipv6  CG address IPv6
        IPv6 address
        Charging Gateway address IPv6
    gtpv1.ext_id  Extensio Identifier
        Unsigned 16-bit integer
        Extension Identifier
    gtpv1.ext_val  Extension Value
        String
        Extension Value
    gtpv1.flags  Flags
        Unsigned 8-bit integer
        Ver/PT/Spare/E/S/PN
    gtpv1.flags.e  Is Next Extension Header present?
        Boolean
        Is Next Extension Header present? (1 = yes, 0 = no)
    gtpv1.flags.payload_type  Protocol type
        Unsigned 8-bit integer
        Protocol Type (1 = GTP, 0 = GPRS charging protocol : GTP' )
    gtpv1.flags.pn  Is N-PDU number present?
        Boolean
        Is N-PDU number present? (1 = yes, 0 = no)
    gtpv1.flags.s  Is Sequence Number present?
        Boolean
        Is Sequence Number present? (1 = yes, 0 = no)
    gtpv1.flags.spare  Spare bit
        Unsigned 8-bit integer
        Spare bit (shall be sent as 0)
    gtpv1.flags.version  Version
        Unsigned 8-bit integer
        GTP Version
    gtpv1.gsn_addr_len  GSN Address Length
        Unsigned 8-bit integer
        GSN Address Length
    gtpv1.gsn_addr_type  GSN Address Type
        Unsigned 8-bit integer
        GSN Address Type
    gtpv1.gsn_ipv4  GSN address IPv4
        IPv4 address
        GSN address IPv4
    gtpv1.gsn_ipv6  GSN address IPv6
        IPv6 address
        GSN address IPv6
    gtpv1.imsi  IMSI
        String
        International Mobile Subscriber Identity number
    gtpv1.lac  LAC
        Unsigned 16-bit integer
        Location Area Code
    gtpv1.length  Length
        Unsigned 16-bit integer
        Length (i.e. number of octets after TID or TEID)
    gtpv1.map_cause  MAP cause
        Unsigned 8-bit integer
        MAP cause
    gtpv1.mcc  MCC
        Unsigned 16-bit integer
        Mobile Country Code
    gtpv1.message  Message Type
        Unsigned 8-bit integer
        GTP Message Type
    gtpv1.mnc  MNC
        Unsigned 8-bit integer
        Mobile Network Code
    gtpv1.ms_reason  MS not reachable reason
        Unsigned 8-bit integer
        MS not reachable reason
    gtpv1.ms_valid  MS validated
        Boolean
        MS validated
    gtpv1.msisdn  MSISDN
        String
        MS international PSTN/ISDN number
    gtpv1.next  Next extension header type
        Unsigned 8-bit integer
        Next Extension Header Type
    gtpv1.node_ipv4  Node address IPv4
        IPv4 address
        Recommended node address IPv4
    gtpv1.node_ipv6  Node address IPv6
        IPv6 address
        Recommended node address IPv6
    gtpv1.npdu_number  N-PDU Number
        Unsigned 8-bit integer
        N-PDU Number
    gtpv1.nsapi  NSAPI
        Unsigned 8-bit integer
        Network layer Service Access Point Identifier
    gtpv1.pkt_flow_id  Packet Flow ID
        Unsigned 8-bit integer
        Packet Flow ID
    gtpv1.ptmsi  P-TMSI
        Unsigned 32-bit integer
        Packet-Temporary Mobile Subscriber Identity
    gtpv1.ptmsi_sig  P-TMSI Signature
        Unsigned 24-bit integer
        P-TMSI Signature
    gtpv1.qos_al_ret_priority  Allocation/Retention priority 
        Unsigned 8-bit integer
        Allocation/Retention Priority
    gtpv1.qos_del_err_sdu  Delivery of erroneous SDU
        Unsigned 8-bit integer
        Delivery of Erroneous SDU
    gtpv1.qos_del_order  Delivery order
        Unsigned 8-bit integer
        Delivery Order
    gtpv1.qos_delay  QoS Delay
        Unsigned 8-bit integer
        Quality of Service Delay Class
    gtpv1.qos_guar_dl  Guaranteed bit rate for downlink
        Unsigned 8-bit integer
        Guaranteed bit rate for downlink
    gtpv1.qos_guar_ul  Guaranteed bit rate for uplink
        Unsigned 8-bit integer
        Guaranteed bit rate for uplink
    gtpv1.qos_max_dl  Maximum bit rate for downlink
        Unsigned 8-bit integer
        Maximum bit rate for downlink
    gtpv1.qos_max_sdu_size  Maximum SDU size
        Unsigned 8-bit integer
        Maximum SDU size
    gtpv1.qos_max_ul  Maximum bit rate for uplink
        Unsigned 8-bit integer
        Maximum bit rate for uplink
    gtpv1.qos_mean  QoS Mean
        Unsigned 8-bit integer
        Quality of Service Mean Throughput
    gtpv1.qos_peak  QoS Peak
        Unsigned 8-bit integer
        Quality of Service Peak Throughput
    gtpv1.qos_precedence  QoS Precedence
        Unsigned 8-bit integer
        Quality of Service Precedence Class
    gtpv1.qos_reliabilty  QoS Reliability
        Unsigned 8-bit integer
        Quality of Service Reliability Class
    gtpv1.qos_res_ber  Residual BER
        Unsigned 8-bit integer
        Residual Bit Error Rate
    gtpv1.qos_sdu_err_ratio  SDU Error ratio
        Unsigned 8-bit integer
        SDU Error Ratio
    gtpv1.qos_spare1  Spare
        Unsigned 8-bit integer
        Spare (shall be sent as '00' )
    gtpv1.qos_spare2  Spare
        Unsigned 8-bit integer
        Spare (shall be sent as 0)
    gtpv1.qos_spare3  Spare
        Unsigned 8-bit integer
        Spare (shall be sent as '000' )
    gtpv1.qos_traf_class  Traffic class
        Unsigned 8-bit integer
        Traffic Class
    gtpv1.qos_traf_handl_prio  Traffic handling priority
        Unsigned 8-bit integer
        Traffic Handling Priority
    gtpv1.qos_trans_delay  Transfer delay
        Unsigned 8-bit integer
        Transfer Delay
    gtpv1.rab_gtp_dn  Downlink GTP-U seq number
        Unsigned 16-bit integer
        Downlink GTP-U sequence number
    gtpv1.rab_gtp_up  Uplink GTP-U seq number
        Unsigned 16-bit integer
        Uplink GTP-U sequence number
    gtpv1.rab_pdu_dn  Downlink next PDCP-PDU seq number
        Unsigned 8-bit integer
        Downlink next PDCP-PDU sequence number
    gtpv1.rab_pdu_up  Uplink next PDCP-PDU seq number
        Unsigned 8-bit integer
        Uplink next PDCP-PDU sequence number
    gtpv1.rac  RAC
        Unsigned 8-bit integer
        Routing Area Code
    gtpv1.ranap_cause  RANAP cause
        Unsigned 8-bit integer
        RANAP cause
    gtpv1.recovery  Recovery
        Unsigned 8-bit integer
        Restart counter
    gtpv1.reorder  Reordering required
        Boolean
        Reordering required
    gtpv1.rnc_ipv4  RNC address IPv4
        IPv4 address
        Radio Network Controller address IPv4
    gtpv1.rnc_ipv6  RNC address IPv6
        IPv6 address
        Radio Network Controller address IPv6
    gtpv1.rp  Radio Priority
        Unsigned 8-bit integer
        Radio Priority for uplink tx
    gtpv1.rp_nsapi  NSAPI in Radio Priority
        Unsigned 8-bit integer
        Network layer Service Access Point Identifier in Radio Priority
    gtpv1.rp_sms  Radio Priority SMS
        Unsigned 8-bit integer
        Radio Priority for MO SMS
    gtpv1.rp_spare  Reserved
        Unsigned 8-bit integer
        Spare bit
    gtpv1.sel_mode  Selection Mode
        Unsigned 8-bit integer
        Selection Mode
    gtpv1.seq_number  Sequence Number
        Unsigned 16-bit integer
        Sequence Number
    gtpv1.tear_ind  Teardown indication
        Boolean
        Teardown Indication
    gtpv1.teid  TEID
        Unsigned 32-bit integer
        Tunnel Endpoint Identifier
    gtpv1.teid_cp  TEID Control Plane
        Unsigned 32-bit integer
        Tunnel Endpoint Identifier Control Plane
    gtpv1.teid_data  TEID Data I
        Unsigned 32-bit integer
        Tunnel Endpoint Identifier Data I
    gtpv1.teid_ii  TEID Data II
        Unsigned 32-bit integer
        Tunnel Endpoint Identifier Data II
    gtpv1.tft_code  TFT operation code
        Unsigned 8-bit integer
        TFT operation code
    gtpv1.tft_eval  Evaluation precedence
        Unsigned 8-bit integer
        Evaluation precedence
    gtpv1.tft_number  Number of packet filters
        Unsigned 8-bit integer
        Number of packet filters
    gtpv1.tft_spare  TFT spare bit
        Unsigned 8-bit integer
        TFT spare bit
    gtpv1.tlli  TLLI
        Unsigned 32-bit integer
        Temporary Logical Link Identity
    gtpv1.tr_comm  Packet transfer command
        Unsigned 8-bit integer
        Packat transfer command
    gtpv1.trace_ref  Trace reference
        Unsigned 16-bit integer
        Trace reference
    gtpv1.trace_type  Trace type
        Unsigned 16-bit integer
        Trace type
    gtpv1.unknown  Unknown data (length)
        Unsigned 16-bit integer
        Unknown data
    gtpv1.user_addr_pdp_org  PDP type organization
        Unsigned 8-bit integer
        PDP type organization
    gtpv1.user_addr_pdp_type  PDP type number
        Unsigned 8-bit integer
        PDP type
    gtpv1.user_ipv4  End user address IPv4
        IPv4 address
        End user address IPv4
    gtpv1.user_ipv6  End user address IPv6
        IPv6 address
        End user address IPv6

General Inter-ORB Protocol (giop)

    giop.TCKind  TypeCode enum
        Unsigned 32-bit integer
    giop.endianess  Endianess
        Unsigned 8-bit integer
    giop.iiop.host  IIOP::Profile_host
        String
    giop.iiop.port  IIOP::Profile_port
        Unsigned 16-bit integer
    giop.iiop.scid  SCID
        Unsigned 32-bit integer
    giop.iiop.vscid  VSCID
        Unsigned 32-bit integer
    giop.iiop_vmaj  IIOP Major Version
        Unsigned 8-bit integer
    giop.iiop_vmin  IIOP Minor Version
        Unsigned 8-bit integer
    giop.iioptag  IIOP Component TAG
        Unsigned 32-bit integer
    giop.iortag  IOR Profile TAG
        Unsigned 8-bit integer
    giop.len  Message size
        Unsigned 32-bit integer
    giop.profid  Profile ID
        Unsigned 32-bit integer
    giop.repoid  Repository ID
        String
    giop.seqlen  Sequence Length
        Unsigned 32-bit integer
    giop.strlen  String Length
        Unsigned 32-bit integer
    giop.tcValueModifier  ValueModifier
        Signed 16-bit integer
    giop.tcVisibility  Visibility
        Signed 16-bit integer
    giop.tcboolean  TypeCode boolean data
        Boolean
    giop.tcchar  TypeCode char data
        Unsigned 8-bit integer
    giop.tccount  TypeCode count
        Unsigned 32-bit integer
    giop.tcdefault_used  default_used
        Signed 32-bit integer
    giop.tcdigits  Digits
        Unsigned 16-bit integer
    giop.tcdouble  TypeCode double data
        Double-precision floating point
    giop.tcenumdata  TypeCode enum data
        Unsigned 32-bit integer
    giop.tcfloat  TypeCode float data
        Double-precision floating point
    giop.tclength  Length
        Unsigned 32-bit integer
    giop.tclongdata  TypeCode long data
        Signed 32-bit integer
    giop.tcmaxlen  Maximum length
        Unsigned 32-bit integer
    giop.tcmemname  TypeCode member name
        String
    giop.tcname  TypeCode name
        String
    giop.tcoctet  TypeCode octet data
        Unsigned 8-bit integer
    giop.tcscale  Scale
        Signed 16-bit integer
    giop.tcshortdata  TypeCode short data
        Signed 16-bit integer
    giop.tcstring  TypeCode string data
        String
    giop.tculongdata  TypeCode ulong data
        Unsigned 32-bit integer
    giop.tcushortdata  TypeCode ushort data
        Unsigned 16-bit integer
    giop.type  Message type
        Unsigned 8-bit integer
    giop.typeid  IOR::type_id
        String

Generic Routing Encapsulation (gre)

    gre.proto  Protocol Type
        Unsigned 16-bit integer
        The protocol that is GRE encapsulated

Gnutella Protocol (gnutella)

    gnutella.header  Descriptor Header
        No value
        Gnutella Descriptor Header
    gnutella.header.hops  Hops
        Unsigned 8-bit integer
        Gnutella Descriptor Hop Count
    gnutella.header.id  ID
        Byte array
        Gnutella Descriptor ID
    gnutella.header.payload  Payload
        Unsigned 8-bit integer
        Gnutella Descriptor Payload
    gnutella.header.size  Length
        Unsigned 8-bit integer
        Gnutella Descriptor Payload Length
    gnutella.header.ttl  TTL
        Unsigned 8-bit integer
        Gnutella Descriptor Time To Live
    gnutella.pong.files  Files Shared
        Unsigned 32-bit integer
        Gnutella Pong Files Shared
    gnutella.pong.ip  IP
        IPv4 address
        Gnutella Pong IP Address
    gnutella.pong.kbytes  KBytes Shared
        Unsigned 32-bit integer
        Gnutella Pong KBytes Shared
    gnutella.pong.payload  Pong
        No value
        Gnutella Pong Payload
    gnutella.pong.port  Port
        Unsigned 16-bit integer
        Gnutella Pong TCP Port
    gnutella.push.index  Index
        Unsigned 32-bit integer
        Gnutella Push Index
    gnutella.push.ip  IP
        IPv4 address
        Gnutella Push IP Address
    gnutella.push.payload  Push
        No value
        Gnutella Push Payload
    gnutella.push.port  Port
        Unsigned 16-bit integer
        Gnutella Push Port
    gnutella.push.servent_id  Servent ID
        Byte array
        Gnutella Push Servent ID
    gnutella.query.min_speed  Min Speed
        Unsigned 32-bit integer
        Gnutella Query Minimum Speed
    gnutella.query.payload  Query
        No value
        Gnutella Query Payload
    gnutella.query.search  Search
        String
        Gnutella Query Search
    gnutella.queryhit.count  Count
        Unsigned 8-bit integer
        Gnutella QueryHit Count
    gnutella.queryhit.extra  Extra
        Byte array
        Gnutella QueryHit Extra
    gnutella.queryhit.hit  Hit
        No value
        Gnutella QueryHit
    gnutella.queryhit.hit.extra  Extra
        Byte array
        Gnutella Query Extra
    gnutella.queryhit.hit.index  Index
        Unsigned 32-bit integer
        Gnutella QueryHit Index
    gnutella.queryhit.hit.name  Name
        String
        Gnutella Query Name
    gnutella.queryhit.hit.size  Size
        Unsigned 32-bit integer
        Gnutella QueryHit Size
    gnutella.queryhit.ip  IP
        IPv4 address
        Gnutella QueryHit IP Address
    gnutella.queryhit.payload  QueryHit
        No value
        Gnutella QueryHit Payload
    gnutella.queryhit.port  Port
        Unsigned 16-bit integer
        Gnutella QueryHit Port
    gnutella.queryhit.servent_id  Servent ID
        Byte array
        Gnutella QueryHit Servent ID
    gnutella.queryhit.speed  Speed
        Unsigned 32-bit integer
        Gnutella QueryHit Speed
    gnutella.stream  Gnutella Upload / Download Stream
        No value
        Gnutella Upload / Download Stream
    gnutella.truncated  Truncated Frame
        No value
        The Gnutella Frame Was Truncated

Hummingbird NFS Daemon (hclnfsd)

    hclnfsd.access  Access
        Unsigned 32-bit integer
        Access
    hclnfsd.authorize.ident.obscure  Obscure Ident
        String
        Authentication Obscure Ident
    hclnfsd.cookie  Cookie
        Unsigned 32-bit integer
        Cookie
    hclnfsd.copies  Copies
        Unsigned 32-bit integer
        Copies
    hclnfsd.device  Device
        String
        Device
    hclnfsd.exclusive  Exclusive
        Unsigned 32-bit integer
        Exclusive
    hclnfsd.fileext  File Extension
        Unsigned 32-bit integer
        File Extension
    hclnfsd.filename  Filename
        String
        Filename
    hclnfsd.gid  GID
        Unsigned 32-bit integer
        Group ID
    hclnfsd.group  Group
        String
        Group
    hclnfsd.host_ip  Host IP
        IPv4 address
        Host IP
    hclnfsd.hostname  Hostname
        String
        Hostname
    hclnfsd.jobstatus  Job Status
        Unsigned 32-bit integer
        Job Status
    hclnfsd.length  Length
        Unsigned 32-bit integer
        Length
    hclnfsd.lockname  Lockname
        String
        Lockname
    hclnfsd.lockowner  Lockowner
        Byte array
        Lockowner
    hclnfsd.logintext  Login Text
        String
        Login Text
    hclnfsd.mode  Mode
        Unsigned 32-bit integer
        Mode
    hclnfsd.npp  Number of Physical Printers
        Unsigned 32-bit integer
        Number of Physical Printers
    hclnfsd.offset  Offset
        Unsigned 32-bit integer
        Offset
    hclnfsd.pqn  Print Queue Number
        Unsigned 32-bit integer
        Print Queue Number
    hclnfsd.printername  Printer Name
        String
        Printer name
    hclnfsd.printparameters  Print Parameters
        String
        Print Parameters
    hclnfsd.printqueuecomment  Comment
        String
        Print Queue Comment
    hclnfsd.printqueuename  Name
        String
        Print Queue Name
    hclnfsd.queuestatus  Queue Status
        Unsigned 32-bit integer
        Queue Status
    hclnfsd.request_type  Request Type
        Unsigned 32-bit integer
        Request Type
    hclnfsd.sequence  Sequence
        Unsigned 32-bit integer
        Sequence
    hclnfsd.server_ip  Server IP
        IPv4 address
        Server IP
    hclnfsd.size  Size
        Unsigned 32-bit integer
        Size
    hclnfsd.status  Status
        Unsigned 32-bit integer
        Status
    hclnfsd.timesubmitted  Time Submitted
        Unsigned 32-bit integer
        Time Submitted
    hclnfsd.uid  UID
        Unsigned 32-bit integer
        User ID
    hclnfsd.unknown_data  Unknown
        Byte array
        Data
    hclnfsd.username  Username
        String
        Username

Hypertext Transfer Protocol (http)

    http.notification  Notification
        Boolean
        TRUE if HTTP notification
    http.request  Request
        Boolean
        TRUE if HTTP request
    http.response  Response
        Boolean
        TRUE if HTTP response

ICQ Protocol (icq)

    icq.checkcode  Checkcode
        Unsigned 32-bit integer
    icq.client_cmd  Client command
        Unsigned 16-bit integer
    icq.decode  Decode
        String
    icq.server_cmd  Server command
        Unsigned 16-bit integer
    icq.sessionid  Session ID
        Unsigned 32-bit integer
    icq.type  Type
        Unsigned 16-bit integer
    icq.uin  UIN
        Unsigned 32-bit integer

IEEE 802.11 wireless LAN (wlan)

    wlan.addr  Source or Destination address
        6-byte Hardware (MAC) Address
        Source or Destination Hardware Address
    wlan.aid  Association ID
        Unsigned 16-bit integer
        Association-ID field
    wlan.bssid  BSS Id
        6-byte Hardware (MAC) Address
        Basic Service Set ID
    wlan.channel  Channel
        Unsigned 8-bit integer
        Radio channel
    wlan.da  Destination address
        6-byte Hardware (MAC) Address
        Destination Hardware Address
    wlan.data_rate  Data Rate
        Unsigned 8-bit integer
        Data rate (.5 Mb/s units)
    wlan.duration  Duration
        Unsigned 16-bit integer
        Duration field
    wlan.fc  Frame Control Field
        Unsigned 16-bit integer
        MAC Frame control
    wlan.fc.ds  DS status
        Unsigned 8-bit integer
        Data-frame DS-traversal status
    wlan.fc.frag  More Fragments
        Boolean
        More Fragments flag
    wlan.fc.fromds  From DS
        Boolean
        From DS flag
    wlan.fc.moredata  More Data
        Boolean
        More data flag
    wlan.fc.order  Order flag
        Boolean
        Strictly ordered flag
    wlan.fc.pwrmgt  PWR MGT
        Boolean
        Power management status
    wlan.fc.retry  Retry
        Boolean
        Retransmission flag
    wlan.fc.subtype  Subtype
        Unsigned 8-bit integer
        Frame subtype
    wlan.fc.tods  To DS
        Boolean
        To DS flag
    wlan.fc.type  Type
        Unsigned 8-bit integer
        Frame type
    wlan.fc.type_subtype  Type/Subtype
        Unsigned 16-bit integer
        Type and subtype combined
    wlan.fc.version  Version
        Unsigned 8-bit integer
        MAC Protocol version
    wlan.fc.wep  WEP flag
        Boolean
        WEP flag
    wlan.fcs  Frame check sequence
        Unsigned 32-bit integer
        FCS
    wlan.flags  Protocol Flags
        Unsigned 8-bit integer
        Protocol flags
    wlan.frag  Fragment number
        Unsigned 16-bit integer
        Fragment number
    wlan.fragment  802.11 Fragment
        No value
        802.11 Fragment
    wlan.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    wlan.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    wlan.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    wlan.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    wlan.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    wlan.fragments  802.11 Fragments
        No value
        802.11 Fragments
    wlan.ra  Receiver address
        6-byte Hardware (MAC) Address
        Receiving Station Hardware Address
    wlan.sa  Source address
        6-byte Hardware (MAC) Address
        Source Hardware Address
    wlan.seq  Sequence number
        Unsigned 16-bit integer
        Sequence number
    wlan.signal_strength  Signal Strength
        Unsigned 8-bit integer
        Signal strength (percentage)
    wlan.ta  Transmitter address
        6-byte Hardware (MAC) Address
        Transmitting Station Hardware Address
    wlan.wep.icv  WEP ICV (not verified)
        Unsigned 32-bit integer
        WEP ICV
    wlan.wep.iv  Initialization Vector
        Unsigned 24-bit integer
        Initialization Vector
    wlan.wep.key  Key
        Unsigned 8-bit integer
        Key

IEEE 802.11 wireless LAN management frame (wlan_mgt)

    wlan_mgt.fixed.aid  Association ID
        Unsigned 16-bit integer
        Association ID
    wlan_mgt.fixed.all  Fixed parameters
        Unsigned 16-bit integer
    wlan_mgt.fixed.auth.alg  Authentication Algorithm
        Unsigned 16-bit integer
    wlan_mgt.fixed.auth_seq  Authentication SEQ
        Unsigned 16-bit integer
        Authentication sequence number
    wlan_mgt.fixed.beacon  Beacon Interval
        Double-precision floating point
    wlan_mgt.fixed.capabilities  Capabilities
        Unsigned 16-bit integer
        Capability information
    wlan_mgt.fixed.capabilities.agility  Channel Agility
        Boolean
        Channel Agility
    wlan_mgt.fixed.capabilities.cfpoll.ap  CFP participation capabilities
        Unsigned 16-bit integer
        CF-Poll capabilities for an AP
    wlan_mgt.fixed.capabilities.cfpoll.sta  CFP participation capabilities
        Unsigned 16-bit integer
        CF-Poll capabilities for a STA
    wlan_mgt.fixed.capabilities.ess  ESS capabilities
        Boolean
        ESS capabilities
    wlan_mgt.fixed.capabilities.ibss  IBSS status
        Boolean
        IBSS participation
    wlan_mgt.fixed.capabilities.pbcc  PBCC
        Boolean
        PBCC Modulation
    wlan_mgt.fixed.capabilities.preamble  Short Preamble
        Boolean
        Short Preamble
    wlan_mgt.fixed.capabilities.privacy  Privacy
        Boolean
        WEP support
    wlan_mgt.fixed.current_ap  Current AP
        6-byte Hardware (MAC) Address
        MAC address of current AP
    wlan_mgt.fixed.listen_ival  Listen Interval
        Unsigned 16-bit integer
        Listen Interval
    wlan_mgt.fixed.reason_code  Reason code
        Unsigned 16-bit integer
        Reason for unsolicited notification
    wlan_mgt.fixed.status_code  Status code
        Unsigned 16-bit integer
        Status of requested event
    wlan_mgt.fixed.timestamp  Timestamp
        String
    wlan_mgt.tag.interpretation  Tag interpretation
        String
        Interpretation of tag
    wlan_mgt.tag.length  Tag length
        Unsigned 16-bit integer
        Length of tag
    wlan_mgt.tag.number  Tag
        Unsigned 16-bit integer
        Element ID
    wlan_mgt.tagged.all  Tagged parameters
        Unsigned 16-bit integer

ILMI (ilmi)

IP Payload Compression (ipcomp)

    ipcomp.cpi  CPI
        Unsigned 16-bit integer
    ipcomp.flags  Flags
        Unsigned 8-bit integer

IPX Message (ipxmsg)

    ipxmsg.conn  Connection Number
        Unsigned 8-bit integer
        Connection Number
    ipxmsg.sigchar  Signature Char
        Unsigned 8-bit integer
        Signature Char

IPX Routing Information Protocol (ipxrip)

    ipxrip.request  Request
        Boolean
        TRUE if IPX RIP request
    ipxrip.response  Response
        Boolean
        TRUE if IPX RIP response

ISDN Q.921-User Adaptation Layer (iua)

    iua.asp_identifier  ASP identifier
        Unsigned 32-bit integer
    iua.asp_reason  Reason
        Unsigned 32-bit integer
    iua.diagnostic_information  Diagnostic information
        Byte array
    iua.dlci_one_bit  One bit
        Boolean
    iua.dlci_sapi  SAPI
        Unsigned 8-bit integer
    iua.dlci_spare  Spare
        Unsigned 16-bit integer
    iua.dlci_spare_bit  Spare bit
        Boolean
    iua.dlci_tei  TEI
        Unsigned 8-bit integer
    iua.dlci_zero_bit  Zero bit
        Boolean
    iua.error_code  Error code
        Unsigned 32-bit integer
    iua.heartbeat_data  Heartbeat data
        Byte array
    iua.info_string  Info string
        String
    iua.int_interface_identifier  Integer interface identifier
        Signed 32-bit integer
    iua.interface_range_end  End
        Unsigned 32-bit integer
    iua.interface_range_start  Start
        Unsigned 32-bit integer
    iua.message_class  Message class
        Unsigned 8-bit integer
    iua.message_length  Message length
        Unsigned 32-bit integer
    iua.message_type  Message Type
        Unsigned 8-bit integer
    iua.parameter_length  Parameter length
        Unsigned 16-bit integer
    iua.parameter_padding  Parameter padding
        Byte array
    iua.parameter_tag  Parameter Tag
        Unsigned 16-bit integer
    iua.parameter_value  Parameter value
        Byte array
    iua.release_reason  Reason
        Unsigned 32-bit integer
    iua.reserved  Reserved
        Unsigned 8-bit integer
    iua.status_identification  Status identification
        Unsigned 16-bit integer
    iua.status_type  Status type
        Unsigned 16-bit integer
    iua.tei_status  TEI status
        Unsigned 32-bit integer
    iua.text_interface_identifier  Text interface identifier
        String
    iua.traffic_mode_type  Traffic mode type
        Unsigned 32-bit integer
    iua.version  Version
        Unsigned 8-bit integer

ISDN User Part (isup)

    isup.access_delivery_ind  Access delivery indicator
        Boolean
    isup.address_presentation_restricted_indicator  Address presentation restricted indicator
        Unsigned 8-bit integer
    isup.automatic_congestion_level  Automatic congestion level
        Unsigned 8-bit integer
    isup.backw_call_echo_control_device_indicator  Echo Control Device Indicator
        Boolean
    isup.backw_call_end_to_end_information_indicator  End-to-end information indicator
        Boolean
    isup.backw_call_end_to_end_method_indicator  End-to-end method indicator
        Unsigned 16-bit integer
    isup.backw_call_holding_indicator  Holding indicator
        Boolean
    isup.backw_call_interworking_indicator  Interworking indicator
        Boolean
    isup.backw_call_isdn_access_indicator  ISDN access indicator
        Boolean
    isup.backw_call_isdn_user_part_indicator  ISDN user part indicator
        Boolean
    isup.backw_call_sccp_method_indicator  SCCP method indicator
        Unsigned 16-bit integer
    isup.call_diversion_may_occur_ind  Call diversion may occur indicator
        Boolean
    isup.call_processing_state  Call processing state
        Unsigned 8-bit integer
    isup.call_to_be_diverted_ind  Call to be diverted indicator
        Unsigned 8-bit integer
    isup.call_to_be_offered_ind  Call to be offered indicator
        Unsigned 8-bit integer
    isup.called_party_even_address_signal_digit  Address signal digit
        Unsigned 8-bit integer
    isup.called_party_nature_of_address_indicator  Nature of address indicator
        Unsigned 8-bit integer
    isup.called_party_odd_address_signal_digit  Address signal digit
        Unsigned 8-bit integer
    isup.called_partys_category_indicator  Called party's category indicator
        Unsigned 16-bit integer
    isup.called_partys_status_indicator  Called party's status indicator
        Unsigned 16-bit integer
    isup.calling_party_address_request_indicator  Calling party address request indicator
        Boolean
    isup.calling_party_address_response_indicator  Calling party address response indicator
        Unsigned 16-bit integer
    isup.calling_party_even_address_signal_digit  Address signal digit
        Unsigned 8-bit integer
    isup.calling_party_nature_of_address_indicator  Nature of address indicator
        Unsigned 8-bit integer
    isup.calling_party_odd_address_signal_digit  Address signal digit
        Unsigned 8-bit integer
    isup.calling_partys_category  Calling Party's category
        Unsigned 8-bit integer
    isup.calling_partys_category_request_indicator  Calling party's category request indicator
        Boolean
    isup.calling_partys_category_response_indicator  Calling party's category response indicator
        Boolean
    isup.cgs_message_type  Circuit group supervision message type
        Unsigned 8-bit integer
    isup.charge_indicator  Charge indicator
        Unsigned 16-bit integer
    isup.charge_information_request_indicator  Charge information request indicator
        Boolean
    isup.charge_information_response_indicator  Charge information response indicator
        Boolean
    isup.cic  CIC
        Unsigned 16-bit integer
    isup.clg_call_ind  Closed user group call indicator
        Unsigned 8-bit integer
    isup.conference_acceptance_ind  Conference acceptance indicator
        Unsigned 8-bit integer
    isup.connected_line_identity_request_ind  Connected line identity request indicator
        Boolean
    isup.continuity_check_indicator  Continuity Check Indicator
        Unsigned 8-bit integer
    isup.continuity_indicator  Continuity indicator
        Boolean
    isup.echo_control_device_indicator  Echo Control Device Indicator
        Boolean
    isup.event_ind  Event indicator
        Unsigned 8-bit integer
    isup.event_presentatiation_restr_ind  Event presentation restricted indicator
        Boolean
    isup.extension_ind  Extension indicator
        Boolean
    isup.forw_call_end_to_end_information_indicator  End-to-end information indicator
        Boolean
    isup.forw_call_end_to_end_method_indicator  End-to-end method indicator
        Unsigned 16-bit integer
    isup.forw_call_interworking_indicator  Interworking indicator
        Boolean
    isup.forw_call_isdn_access_indicator  ISDN access indicator
        Boolean
    isup.forw_call_isdn_user_part_indicator  ISDN user part indicator
        Boolean
    isup.forw_call_natnl_inatnl_call_indicator  National/international call indicator
        Boolean
    isup.forw_call_preferences_indicator  ISDN user part preference indicator
        Unsigned 16-bit integer
    isup.forw_call_sccp_method_indicator  SCCP method indicator
        Unsigned 16-bit integer
    isup.hold_provided_indicator  Hold provided indicator
        Boolean
    isup.hw_blocking_state  HW blocking state
        Unsigned 8-bit integer
    isup.inband_information_ind  In-band information indicator
        Boolean
    isup.info_req_holding_indicator  Holding indicator
        Boolean
    isup.inn_indicator  INN indicator
        Boolean
    isup.isdn_odd_even_indicator  Odd/even indicator
        Boolean
    isup.loop_prevention_response_ind  Response indicator
        Unsigned 8-bit integer
    isup.malicious_call_ident_request_indicator  Malicious call identification request indicator (ISUP'88)
        Boolean
    isup.mandatory_variable_parameter_pointer  Pointer to Parameter
        Unsigned 8-bit integer
    isup.map_type  Map Type
        Unsigned 8-bit integer
    isup.message_type  Message Type
        Unsigned 8-bit integer
    isup.mlpp_user  MLPP user indicator
        Boolean
    isup.mtc_blocking_state  Maintenance blocking state
        Unsigned 8-bit integer
    isup.network_identification_plan  Network identification plan
        Unsigned 8-bit integer
    isup.ni_indicator  NI indicator
        Boolean
    isup.numbering_plan_indicator  Numbering plan indicator
        Unsigned 8-bit integer
    isup.optional_parameter_part_pointer  Pointer to optional parameter part
        Unsigned 8-bit integer
    isup.original_redirection_reason  Original redirection reason
        Unsigned 16-bit integer
    isup.parameter_length  Parameter Length
        Unsigned 8-bit integer
    isup.parameter_type  Parameter Type
        Unsigned 8-bit integer
    isup.range_indicator  Range indicator
        Unsigned 8-bit integer
    isup.redirecting_ind  Redirection indicator
        Unsigned 16-bit integer
    isup.redirection_counter  Redirection counter
        Unsigned 16-bit integer
    isup.redirection_reason  Redirection reason
        Unsigned 16-bit integer
    isup.satellite_indicator  Satellite Indicator
        Unsigned 8-bit integer
    isup.screening_indicator  Screening indicator
        Unsigned 8-bit integer
    isup.screening_indicator_enhanced  Screening indicator
        Unsigned 8-bit integer
    isup.simple_segmentation_ind  Simple segmentation indicator
        Boolean
    isup.solicided_indicator  Solicited indicator
        Boolean
    isup.suspend_resume_indicator  Suspend/Resume indicator
        Boolean
    isup.temporary_alternative_routing_ind  Temporary alternative routing indicator
        Boolean
    isup.transmission_medium_requirement  Transmission medium requirement
        Unsigned 8-bit integer
    isup.transmission_medium_requirement_prime  Transmission medium requirement prime
        Unsigned 8-bit integer
    isup.type_of_network_identification  Type of network identification
        Unsigned 8-bit integer

ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol (isis)

    isis.csnp.pdu_length  PDU length
        Unsigned 16-bit integer
    isis.hello.circuit_type  Circuit type              
        Unsigned 8-bit integer
    isis.hello.clv_ipv4_int_addr  IPv4 interface address    
        IPv4 address
    isis.hello.clv_ipv6_int_addr  IPv6 interface address    
        IPv6 address
    isis.hello.clv_mt  MT-ID                     
        Unsigned 16-bit integer
    isis.hello.clv_ptp_adj  Point-to-point Adjacency  
        Unsigned 8-bit integer
    isis.hello.holding_timer  Holding timer             
        Unsigned 16-bit integer
    isis.hello.lan_id  SystemID{ Designated IS } 
        Byte array
    isis.hello.local_circuit_id  Local circuit ID          
        Unsigned 8-bit integer
    isis.hello.pdu_length  PDU length                
        Unsigned 16-bit integer
    isis.hello.priority  Priority                 
        Unsigned 8-bit integer
    isis.hello.source_id  SystemID{ Sender of PDU } 
        Byte array
    isis.irpd  Intra Domain Routing Protocol Discriminator
        Unsigned 8-bit integer
    isis.len  PDU Header Length  
        Unsigned 8-bit integer
    isis.lsp.checksum  Checksum
        Unsigned 16-bit integer
    isis.lsp.clv_ipv4_int_addr  IPv4 interface address
        IPv4 address
    isis.lsp.clv_ipv6_int_addr  IPv6 interface address
        IPv6 address
    isis.lsp.clv_mt  MT-ID                     
        Unsigned 16-bit integer
    isis.lsp.clv_te_router_id  Traffic Engineering Router ID
        IPv4 address
    isis.lsp.pdu_length  PDU length
        Unsigned 16-bit integer
    isis.lsp.remaining_life  Remaining lifetime
        Unsigned 16-bit integer
    isis.lsp.sequence_number  Sequence number
        Unsigned 32-bit integer
    isis.max_area_adr  Max.AREAs: (0==3)  
        Unsigned 8-bit integer
    isis.psnp.pdu_length  PDU length
        Unsigned 16-bit integer
    isis.reserved  Reserved (==0)     
        Unsigned 8-bit integer
    isis.sysid_len  System ID Length   
        Unsigned 8-bit integer
    isis.type  PDU Type           
        Unsigned 8-bit integer
    isis.version  Version (==1)      
        Unsigned 8-bit integer
    isis.version2  Version2 (==1)     
        Unsigned 8-bit integer

ISO 8073 COTP Connection-Oriented Transport Protocol (cotp)

ISO 8473 CLNP ConnectionLess Network Protocol (clnp)

    clnp.checksum  Checksum     
        Unsigned 16-bit integer
    clnp.dsap   DA 
        Byte array
    clnp.dsap.len  DAL 
        Unsigned 8-bit integer
    clnp.len  HDR Length   
        Unsigned 8-bit integer
    clnp.nlpi  Network Layer Protocol Identifier
        Unsigned 8-bit integer
    clnp.pdu.len  PDU length   
        Unsigned 16-bit integer
    clnp.segment  CLNP Segment
        No value
        CLNP Segment
    clnp.segment.error  Reassembly error
        No value
        Reassembly error due to illegal segments
    clnp.segment.multipletails  Multiple tail segments found
        Boolean
        Several tails were found when reassembling the packet
    clnp.segment.overlap  Segment overlap
        Boolean
        Segment overlaps with other segments
    clnp.segment.overlap.conflict  Conflicting data in segment overlap
        Boolean
        Overlapping segments contained conflicting data
    clnp.segment.toolongsegment  Segment too long
        Boolean
        Segment contained data past end of packet
    clnp.segments  CLNP Segments
        No value
        CLNP Segments
    clnp.ssap   SA 
        Byte array
    clnp.ssap.len  SAL 
        Unsigned 8-bit integer
    clnp.ttl  Holding Time 
        Unsigned 8-bit integer
    clnp.type  PDU Type     
        Unsigned 8-bit integer
    clnp.version  Version      
        Unsigned 8-bit integer

ISO 8602 CLTP ConnectionLess Transport Protocol (cltp)

ISO 9542 ESIS Routeing Information Exchange Protocol (esis)

    esis.chksum  Checksum      
        Unsigned 16-bit integer
    esis.htime  Holding Time  
        Unsigned 16-bit integer
         s
    esis.length  PDU Length    
        Unsigned 8-bit integer
    esis.nlpi  Network Layer Protocol Identifier
        Unsigned 8-bit integer
    esis.res  Reserved(==0) 
        Unsigned 8-bit integer
    esis.type  PDU Type      
        Unsigned 8-bit integer
    esis.ver  Version (==1) 
        Unsigned 8-bit integer

ITU-T Recommendation H.261 (h261)

    h261.ebit  End bit position
        Unsigned 8-bit integer
    h261.gobn  GOB Number
        Unsigned 8-bit integer
    h261.hmvd  Horizontal motion vector data
        Unsigned 8-bit integer
    h261.i  Intra frame encoded data flag
        Boolean
    h261.mbap  Macroblock address predictor
        Unsigned 8-bit integer
    h261.quant  Quantizer
        Unsigned 8-bit integer
    h261.sbit  Start bit position
        Unsigned 8-bit integer
    h261.stream  H.261 stream
        Byte array
    h261.v  Motion vector flag
        Boolean
    h261.vmvd  Vertical motion vector data
        Unsigned 8-bit integer

Inter-Access-Point Protocol (iapp)

    iapp.type  type
        Unsigned 8-bit integer
    iapp.version  Version
        Unsigned 8-bit integer

Internet Cache Protocol (icp)

    icp.length  Length
        Unsigned 16-bit integer
    icp.nr  Request Number
        Unsigned 32-bit integer
    icp.opcode  Opcode
        Unsigned 8-bit integer
    icp.version  Version
        Unsigned 8-bit integer

Internet Content Adaptation Protocol (icap)

    icap.options  Options
        Boolean
        TRUE if ICAP options
    icap.other  Other
        Boolean
        TRUE if ICAP other
    icap.reqmod  Reqmod
        Boolean
        TRUE if ICAP reqmod
    icap.respmod  Respmod
        Boolean
        TRUE if ICAP respmod
    icap.response  Response
        Boolean
        TRUE if ICAP response

Internet Control Message Protocol (icmp)

    icmp.checksum  Checksum
        Unsigned 16-bit integer
    icmp.checksum_bad  Bad Checksum
        Boolean
    icmp.code  Code
        Unsigned 8-bit integer
    icmp.mip.b  Busy
        Boolean
        This FA will not accept requests at this time
    icmp.mip.challenge  Challenge
        Byte array
    icmp.mip.coa  Care-Of-Address
        IPv4 address
    icmp.mip.f  Foreign Agent
        Boolean
        Foreign Agent Services Offered
    icmp.mip.flags  Flags
        Unsigned 8-bit integer
    icmp.mip.g  GRE
        Boolean
        GRE encapsulated tunneled datagram support
    icmp.mip.h  Home Agent
        Boolean
        Home Agent Services Offered
    icmp.mip.length  Length
        Unsigned 8-bit integer
    icmp.mip.life  Registration Lifetime
        Unsigned 16-bit integer
    icmp.mip.m  Minimal Encapsulation
        Boolean
        Minimal encapsulation tunneled datagram support
    icmp.mip.prefixlength  Prefix Length
        Unsigned 8-bit integer
    icmp.mip.r  Registration Required
        Boolean
        Registration with this FA is required
    icmp.mip.res  Reserved
        Boolean
        Reserved
    icmp.mip.reserved  Reserved
        Unsigned 8-bit integer
    icmp.mip.seq  Sequence Number
        Unsigned 16-bit integer
    icmp.mip.type  Extension Type
        Unsigned 8-bit integer
    icmp.mip.v  VJ Comp
        Boolean
        Van Jacobson Header Compression Support
    icmp.type  Type
        Unsigned 8-bit integer

Internet Control Message Protocol v6 (icmpv6)

    icmpv6.checksum  Checksum
        Unsigned 16-bit integer
    icmpv6.checksum_bad  Bad Checksum
        Boolean
    icmpv6.code  Code
        Unsigned 8-bit integer
    icmpv6.type  Type
        Unsigned 8-bit integer

Internet Group Management Protocol (igmp)

    igmp.access_key  Access Key
        Byte array
        IGMP V0 Access Key
    igmp.aux_data  Aux Data
        Byte array
        IGMP V3 Auxiliary Data
    igmp.aux_data_len  Aux Data Len
        Unsigned 8-bit integer
        Aux Data Len, In units of 32bit words
    igmp.checksum  Checksum
        Unsigned 16-bit integer
        IGMP Checksum
    igmp.checksum_bad  Bad Checksum
        Boolean
        Bad IGMP Checksum
    igmp.group_type  Type Of Group
        Unsigned 8-bit integer
        IGMP V0 Type Of Group
    igmp.identifier  Identifier
        Unsigned 32-bit integer
        IGMP V0 Identifier
    igmp.max_resp  Max Resp Time
        Unsigned 8-bit integer
        Max Response Time
    igmp.max_resp.exp  Exponent
        Unsigned 8-bit integer
        Maxmimum Response Time, Exponent
    igmp.max_resp.mant  Mantissa
        Unsigned 8-bit integer
        Maxmimum Response Time, Mantissa
    igmp.mtrace.max_hops  # hops
        Unsigned 8-bit integer
        Maxmimum Number of Hops to Trace
    igmp.mtrace.q_arrival  Query Arrival
        Unsigned 32-bit integer
        Query Arrival Time
    igmp.mtrace.q_fwd_code  Forwarding Code
        Unsigned 8-bit integer
        Forwarding information/error code
    igmp.mtrace.q_fwd_ttl  FwdTTL
        Unsigned 8-bit integer
        TTL required for forwarding
    igmp.mtrace.q_id  Query ID
        Unsigned 24-bit integer
        Identifier for this Traceroute Request
    igmp.mtrace.q_inaddr  In itf addr
        IPv4 address
        Incoming Interface Address
    igmp.mtrace.q_inpkt  In pkts
        Unsigned 32-bit integer
        Input packet count on incoming interface
    igmp.mtrace.q_mbz  MBZ
        Unsigned 8-bit integer
        Must be zeroed on transmission and ignored on reception
    igmp.mtrace.q_outaddr  Out itf addr
        IPv4 address
        Outgoing Interface Address
    igmp.mtrace.q_outpkt  Out pkts
        Unsigned 32-bit integer
        Output packet count on outgoing interface
    igmp.mtrace.q_prevrtr  Previous rtr addr
        IPv4 address
        Previous-Hop Router Address
    igmp.mtrace.q_rtg_proto  Rtg Protocol
        Unsigned 8-bit integer
        Routing protocol between this and previous hop rtr
    igmp.mtrace.q_s  S
        Unsigned 8-bit integer
        Set if S,G packet count is for source network
    igmp.mtrace.q_src_mask  Src Mask
        Unsigned 8-bit integer
        Source mask length. 63 when forwarding on group state
    igmp.mtrace.q_total  S,G pkt count
        Unsigned 32-bit integer
        Total number of packets for this source-group pair
    igmp.mtrace.raddr  Receiver Address
        IPv4 address
        Multicast Receiver for the Path Being Traced
    igmp.mtrace.resp_ttl  Response TTL
        Unsigned 8-bit integer
        TTL for Multicasted Responses
    igmp.mtrace.rspaddr  Response Address
        IPv4 address
        Destination of Completed Traceroute Response
    igmp.mtrace.saddr  Source Address
        IPv4 address
        Multicast Source for the Path Being Traced
    igmp.num_grp_recs  Num Group Records
        Unsigned 16-bit integer
        Number Of Group Records
    igmp.num_src  Num Src
        Unsigned 16-bit integer
        Number Of Sources
    igmp.qqic  QQIC
        Unsigned 8-bit integer
        Querier's Query Interval Code
    igmp.qrv  QRV
        Unsigned 8-bit integer
        Querier's Robustness Value
    igmp.record_type  Record Type
        Unsigned 8-bit integer
        Record Type
    igmp.reply  Reply
        Unsigned 8-bit integer
        IGMP V0 Reply
    igmp.reply.pending  Reply Pending
        Unsigned 8-bit integer
        IGMP V0 Reply Pending, Retry in this many seconds
    igmp.s  S
        Boolean
        Supress Router Side Processing
    igmp.type  Type
        Unsigned 8-bit integer
        IGMP Packet Type
    igmp.version  IGMP Version
        Unsigned 8-bit integer
        IGMP Version

Internet Message Access Protocol (imap)

    imap.request  Request
        Boolean
        TRUE if IMAP request
    imap.response  Response
        Boolean
        TRUE if IMAP response

Internet Printing Protocol (ipp)

Internet Protocol (ip)

    ip.addr  Source or Destination Address
        IPv4 address
    ip.checksum  Header checksum
        Unsigned 16-bit integer
    ip.checksum_bad  Bad Header checksum
        Boolean
    ip.dsfield  Differentiated Services field
        Unsigned 8-bit integer
    ip.dsfield.ce  ECN-CE
        Unsigned 8-bit integer
    ip.dsfield.dscp  Differentiated Services Codepoint
        Unsigned 8-bit integer
    ip.dsfield.ect  ECN-Capable Transport (ECT)
        Unsigned 8-bit integer
    ip.dst  Destination
        IPv4 address
    ip.flags  Flags
        Unsigned 8-bit integer
    ip.flags.df  Don't fragment
        Boolean
    ip.flags.mf  More fragments
        Boolean
    ip.frag_offset  Fragment offset
        Unsigned 16-bit integer
    ip.fragment  IP Fragment
        No value
        IP Fragment
    ip.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    ip.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    ip.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    ip.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    ip.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    ip.fragments  IP Fragments
        No value
        IP Fragments
    ip.hdr_len  Header Length
        Unsigned 8-bit integer
    ip.id  Identification
        Unsigned 16-bit integer
    ip.len  Total Length
        Unsigned 16-bit integer
    ip.proto  Protocol
        Unsigned 8-bit integer
    ip.src  Source
        IPv4 address
    ip.tos  Type of Service
        Unsigned 8-bit integer
    ip.tos.cost  Cost
        Boolean
    ip.tos.delay  Delay
        Boolean
    ip.tos.precedence  Precedence
        Unsigned 8-bit integer
    ip.tos.reliability  Reliability
        Boolean
    ip.tos.throughput  Throughput
        Boolean
    ip.ttl  Time to live
        Unsigned 8-bit integer
    ip.version  Version
        Unsigned 8-bit integer

Internet Protocol Version 6 (ipv6)

    ipv6.addr  Address
        IPv6 address
        Source or Destination IPv6 Address
    ipv6.class  Traffic class
        Unsigned 8-bit integer
    ipv6.dst  Destination
        IPv6 address
        Destination IPv6 Address
    ipv6.flow  Flowlabel
        Unsigned 32-bit integer
    ipv6.fragment  IPv6 Fragment
        No value
        IPv6 Fragment
    ipv6.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    ipv6.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    ipv6.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    ipv6.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    ipv6.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    ipv6.fragments  IPv6 Fragments
        No value
        IPv6 Fragments
    ipv6.hlim  Hop limit
        Unsigned 8-bit integer
    ipv6.mipv6_a_flag  Acknowledge (A) 
        Boolean
    ipv6.mipv6_b_flag  Bicasting all (B) 
        Boolean
    ipv6.mipv6_d_flag  Duplicate Address Detection (D) 
        Boolean
    ipv6.mipv6_h_flag  Home Registration (H) 
        Boolean
    ipv6.mipv6_home_address  Home Address 
        IPv6 address
    ipv6.mipv6_length  Option Length 
        Unsigned 8-bit integer
    ipv6.mipv6_life_time  Life Time 
        Unsigned 32-bit integer
    ipv6.mipv6_m_flag  MAP Registration (M) 
        Boolean
    ipv6.mipv6_prefix_length  Prefix Length 
        Unsigned 8-bit integer
    ipv6.mipv6_r_flag  Router (R) 
        Boolean
    ipv6.mipv6_refresh  Refresh 
        Unsigned 32-bit integer
    ipv6.mipv6_sequence_number  Sequence Number 
        Unsigned 16-bit integer
    ipv6.mipv6_status  Status 
        Unsigned 8-bit integer
    ipv6.mipv6_sub_alternative_COA  Alternative Care of Address 
        IPv6 address
    ipv6.mipv6_sub_length  Sub-Option Length 
        Unsigned 8-bit integer
    ipv6.mipv6_sub_type  Sub-Option Type 
        Unsigned 8-bit integer
    ipv6.mipv6_sub_unique_ID  Unique Identifier 
        Unsigned 16-bit integer
    ipv6.mipv6_type  Option Type 
        Unsigned 8-bit integer
    ipv6.nxt  Next header
        Unsigned 8-bit integer
    ipv6.plen  Payload length
        Unsigned 16-bit integer
    ipv6.src  Source
        IPv6 address
        Source IPv6 Address
    ipv6.version  Version
        Unsigned 8-bit integer

Internet Relay Chat (irc)

    irc.command  Command
        String
        Command associated with request
    irc.request  Request
        Boolean
        TRUE if IRC request
    irc.response  Response
        Boolean
        TRUE if IRC response

Internet Security Association and Key Management Protocol (isakmp)

Internetwork Packet eXchange (ipx)

    ipx.checksum  Checksum
        Unsigned 16-bit integer
    ipx.dst.net  Destination Network
        IPX network or server name
    ipx.dst.node  Destination Node
        6-byte Hardware (MAC) Address
    ipx.dst.socket  Destination Socket
        Unsigned 16-bit integer
    ipx.hops  Transport Control (Hops)
        Unsigned 8-bit integer
    ipx.len  Length
        Unsigned 16-bit integer
    ipx.packet_type  Packet Type
        Unsigned 8-bit integer
    ipx.src.net  Source Network
        IPX network or server name
    ipx.src.node  Source Node
        6-byte Hardware (MAC) Address
    ipx.src.socket  Source Socket
        Unsigned 16-bit integer

Java RMI (rmi)

    rmi.endpoint_id.hostname  Hostname
        String
        RMI Endpointidentifier Hostname
    rmi.endpoint_id.length  Length
        Unsigned 16-bit integer
        RMI Endpointidentifier Length
    rmi.endpoint_id.port  Port
        Unsigned 16-bit integer
        RMI Endpointindentifier Port
    rmi.inputstream.message  Input Stream Message
        String
        RMI Inputstream Message Token
    rmi.magic  Magic
        Unsigned 32-bit integer
        RMI Header Magic
    rmi.outputstream.message  Output Stream Message
        String
        RMI Outputstream Message token
    rmi.protocol  Protocol
        String
        RMI Protocol Type
    rmi.ser.magic  Magic
        Unsigned 16-bit integer
        Java Serialization Magic
    rmi.ser.version  Version
        Unsigned 16-bit integer
        Java Serialization Version
    rmi.version  Version
        Unsigned 16-bit integer
        RMI Protocol Version

Java Serialization (serialization)

Kerberos (kerberos)

Kernel Lock Manager (klm)

    klm.block  block
        Boolean
        Block
    klm.exclusive  exclusive
        Boolean
        Exclusive lock
    klm.holder  holder
        No value
        KLM lock holder
    klm.len  length
        Unsigned 32-bit integer
        Length of lock region
    klm.lock  lock
        No value
        KLM lock structure
    klm.offset  offset
        Unsigned 32-bit integer
        File offset
    klm.pid  pid
        Unsigned 32-bit integer
        ProcessID
    klm.servername  server name
        String
        Server name
    klm.stats  stats
        Unsigned 32-bit integer
        stats

Label Distribution Protocol (ldp)

    ldp,msg.tlv.hello.requested  Hello Requested
        Boolean
        Hello Common Parameters Hello Requested Bit
    ldp.hdr.ldpid.lsid  Label Space ID
        Unsigned 16-bit integer
        LDP Label Space ID
    ldp.hdr.ldpid.lsr  LSR ID
        IPv4 address
        LDP Label Space Router ID
    ldp.hdr.pdu_len  PDU Length
        Unsigned 16-bit integer
        LDP PDU Length
    ldp.hdr.version  Version
        Unsigned 16-bit integer
        LDP Version Number
    ldp.msg.experiment.id  Experiment ID
        Unsigned 32-bit integer
        LDP Experimental Message ID
    ldp.msg.id  Message ID
        Unsigned 32-bit integer
        LDP Message ID
    ldp.msg.len  Message Length
        Unsigned 16-bit integer
        LDP Message Length (excluding message type and len)
    ldp.msg.tlv.addrl.addr  Address
        String
        Address
    ldp.msg.tlv.addrl.addr_family  Address Family
        Unsigned 16-bit integer
        Address Family List
    ldp.msg.tlv.atm.label.vbits  V-bits
        Unsigned 8-bit integer
        ATM Label V Bits
    ldp.msg.tlv.atm.label.vci  VCI
        Unsigned 16-bit integer
        ATM Label VCI
    ldp.msg.tlv.atm.label.vpi  VPI
        Unsigned 16-bit integer
        ATM Label VPI
    ldp.msg.tlv.cbs  CBS
        Double-precision floating point
        Committed Burst Size
    ldp.msg.tlv.cdr  CDR
        Double-precision floating point
        Committed Data Rate
    ldp.msg.tlv.ebs  EBS
        Double-precision floating point
        Excess Burst Size
    ldp.msg.tlv.er_hop.as  AS Number
        Unsigned 16-bit integer
        AS Number
    ldp.msg.tlv.er_hop.locallspid  Local CR-LSP ID
        Unsigned 16-bit integer
        Local CR-LSP ID
    ldp.msg.tlv.er_hop.loose  Loose route bit
        Unsigned 24-bit integer
        Loose route bit
    ldp.msg.tlv.er_hop.lsrid  Local CR-LSP ID
        IPv4 address
        Local CR-LSP ID
    ldp.msg.tlv.er_hop.prefix4  IPv4 Address
        IPv4 address
        IPv4 Address
    ldp.msg.tlv.er_hop.prefix6  IPv6 Address
        IPv6 address
        IPv6 Address
    ldp.msg.tlv.er_hop.prefixlen  Prefix length
        Unsigned 8-bit integer
        Prefix len
    ldp.msg.tlv.experiment_id  Experiment ID
        Unsigned 32-bit integer
        Experiment ID
    ldp.msg.tlv.extstatus.data  Extended Status Data
        Unsigned 32-bit integer
        Extended Status Data
    ldp.msg.tlv.fec.af  FEC Element Address Type
        Unsigned 16-bit integer
        Forwarding Equivalence Class Element Address Family
    ldp.msg.tlv.fec.hoval  FEC Element Host Address Value
        String
        Forwarding Equivalence Class Element Address
    ldp.msg.tlv.fec.len  FEC Element Length
        Unsigned 8-bit integer
        Forwarding Equivalence Class Element Length
    ldp.msg.tlv.fec.pfval  FEC Element Prefix Value
        String
        Forwarding Equivalence Class Element Prefix
    ldp.msg.tlv.fec.type  FEC Element Type
        Unsigned 8-bit integer
        Forwarding Equivalence Class Element Types
    ldp.msg.tlv.fec.vc.controlword  C-bit
        Boolean
        Control Word Present
    ldp.msg.tlv.fec.vc.groupid  Group ID
        Unsigned 32-bit integer
        VC FEC Group ID
    ldp.msg.tlv.fec.vc.infolength  VC Info Length
        Unsigned 8-bit integer
        VC FEC Info Length
    ldp.msg.tlv.fec.vc.intparam.cembytes  Payload Bytes
        Unsigned 16-bit integer
        VC FEC Interface Param CEM Payload Bytes
    ldp.msg.tlv.fec.vc.intparam.desc  Description
        String
        VC FEC Interface Description
    ldp.msg.tlv.fec.vc.intparam.id  ID
        Unsigned 8-bit integer
        VC FEC Interface Paramater ID
    ldp.msg.tlv.fec.vc.intparam.length  Length
        Unsigned 8-bit integer
        VC FEC Interface Paramater Length
    ldp.msg.tlv.fec.vc.intparam.maxatm  Number of Cells
        Unsigned 16-bit integer
        VC FEC Interface Param Max ATM Concat Cells
    ldp.msg.tlv.fec.vc.intparam.mtu  MTU
        Unsigned 16-bit integer
        VC FEC Interface Paramater MTU
    ldp.msg.tlv.fec.vc.vcid  VC ID
        Unsigned 32-bit integer
        VC FEC VCID
    ldp.msg.tlv.fec.vc.vctype  VC Type
        Unsigned 16-bit integer
        Virtual Circuit Type
    ldp.msg.tlv.flags_cbs  CBS
        Boolean
        CBS negotiability flag
    ldp.msg.tlv.flags_cdr  CDR
        Boolean
        CDR negotiability flag
    ldp.msg.tlv.flags_ebs  EBS
        Boolean
        EBS negotiability flag
    ldp.msg.tlv.flags_pbs  PBS
        Boolean
        PBS negotiability flag
    ldp.msg.tlv.flags_pdr  PDR
        Boolean
        PDR negotiability flag
    ldp.msg.tlv.flags_reserv  Reserved
        Unsigned 8-bit integer
        Reserved
    ldp.msg.tlv.flags_weight  Weight
        Boolean
        Weight negotiability flag
    ldp.msg.tlv.fr.label.dlci  DLCI
        Unsigned 24-bit integer
        FRAME RELAY Label DLCI
    ldp.msg.tlv.fr.label.len  Number of DLCI bits
        Unsigned 16-bit integer
        DLCI Number of bits
    ldp.msg.tlv.frequency  Frequency
        Unsigned 8-bit integer
        Frequency
    ldp.msg.tlv.generic.label  Generic Label
        Unsigned 32-bit integer
        Generic Label
    ldp.msg.tlv.hc.value  Hop Count Value
        Unsigned 8-bit integer
        Hop Count
    ldp.msg.tlv.hello.cnf_seqno  Configuration Sequence Number
        Unsigned 32-bit integer
        Hello Configuration Sequence Number
    ldp.msg.tlv.hello.hold  Hold Time
        Unsigned 16-bit integer
        Hello Common Parameters Hold Time
    ldp.msg.tlv.hello.res  Reserved
        Unsigned 16-bit integer
        Hello Common Parameters Reserved Field
    ldp.msg.tlv.hello.targeted  Targeted Hello
        Boolean
        Hello Common Parameters Targeted Bit
    ldp.msg.tlv.hold_prio  Hold Prio
        Unsigned 8-bit integer
        LSP hold priority
    ldp.msg.tlv.ipv4.taddr  IPv4 Transport Address
        IPv4 address
        IPv4 Transport Address
    ldp.msg.tlv.ipv6.taddr  IPv6 Transport Address
        IPv6 address
        IPv6 Transport Address
    ldp.msg.tlv.len  TLV Length
        Unsigned 16-bit integer
        TLV Length Field
    ldp.msg.tlv.lspid.actflg  Action Indicator Flag
        Unsigned 16-bit integer
        Action Indicator Flag
    ldp.msg.tlv.lspid.locallspid  Local CR-LSP ID
        Unsigned 16-bit integer
        Local CR-LSP ID
    ldp.msg.tlv.lspid.lsrid  Ingress LSR Router ID
        IPv4 address
        Ingress LSR Router ID
    ldp.msg.tlv.pbs  PBS
        Double-precision floating point
        Peak Burst Size
    ldp.msg.tlv.pdr  PDR
        Double-precision floating point
        Peak Data Rate
    ldp.msg.tlv.pv.lsrid  LSR Id
        IPv4 address
        Path Vector LSR Id
    ldp.msg.tlv.resource_class  Resource Class
        Unsigned 32-bit integer
        Resource Class (Color)
    ldp.msg.tlv.returned.ldpid.lsid  Returned PDU Label Space ID
        Unsigned 16-bit integer
        LDP Label Space ID
    ldp.msg.tlv.returned.ldpid.lsr  Returned PDU LSR ID
        IPv4 address
        LDP Label Space Router ID
    ldp.msg.tlv.returned.msg.id  Returned Message ID
        Unsigned 32-bit integer
        LDP Message ID
    ldp.msg.tlv.returned.msg.len  Returned Message Length
        Unsigned 16-bit integer
        LDP Message Length (excluding message type and len)
    ldp.msg.tlv.returned.msg.type  Returned Message Type
        Unsigned 16-bit integer
        LDP message type
    ldp.msg.tlv.returned.msg.ubit  Returned Message Unknown bit
        Unsigned 8-bit integer
        Message Unknown bit
    ldp.msg.tlv.returned.pdu_len  Returned PDU Length
        Unsigned 16-bit integer
        LDP PDU Length
    ldp.msg.tlv.returned.version  Returned PDU Version
        Unsigned 16-bit integer
        LDP Version Number
    ldp.msg.tlv.route_pinning  Route Pinning
        Unsigned 32-bit integer
        Route Pinning
    ldp.msg.tlv.sess.advbit  Session Label Advertisement Discipline
        Boolean
        Common Session Parameters Label Advertisement Discipline
    ldp.msg.tlv.sess.atm.dir  Directionality
        Boolean
        Lablel Directionality
    ldp.msg.tlv.sess.atm.lr  Number of ATM Label Ranges
        Unsigned 8-bit integer
        Number of Label Ranges
    ldp.msg.tlv.sess.atm.maxvci  Maximum VCI
        Unsigned 16-bit integer
        Maximum VCI
    ldp.msg.tlv.sess.atm.maxvpi  Maximum VPI
        Unsigned 16-bit integer
        Maximum VPI
    ldp.msg.tlv.sess.atm.merge  Session ATM Merge Parameter
        Unsigned 8-bit integer
        Merge ATM Session Parameters
    ldp.msg.tlv.sess.atm.minvci  Minimum VCI
        Unsigned 16-bit integer
        Minimum VCI
    ldp.msg.tlv.sess.atm.minvpi  Minimum VPI
        Unsigned 16-bit integer
        Minimum VPI
    ldp.msg.tlv.sess.fr.dir  Directionality
        Boolean
        Lablel Directionality
    ldp.msg.tlv.sess.fr.len  Number of DLCI bits
        Unsigned 16-bit integer
        DLCI Number of bits
    ldp.msg.tlv.sess.fr.lr  Number of Frame Relay Label Ranges
        Unsigned 8-bit integer
        Number of Label Ranges
    ldp.msg.tlv.sess.fr.maxdlci  Maximum DLCI
        Unsigned 24-bit integer
        Maximum DLCI
    ldp.msg.tlv.sess.fr.merge  Session Frame Relay Merge Parameter
        Unsigned 8-bit integer
        Merge Frame Relay Session Parameters
    ldp.msg.tlv.sess.fr.mindlci  Minimum DLCI
        Unsigned 24-bit integer
        Minimum DLCI
    ldp.msg.tlv.sess.ka  Session KeepAlive Time
        Unsigned 16-bit integer
        Common Session Parameters KeepAlive Time
    ldp.msg.tlv.sess.ldetbit  Session Loop Detection
        Boolean
        Common Session Parameters Loop Detection
    ldp.msg.tlv.sess.mxpdu  Session Max PDU Length
        Unsigned 16-bit integer
        Common Session Parameters Max PDU Length
    ldp.msg.tlv.sess.pvlim  Session Path Vector Limit
        Unsigned 8-bit integer
        Common Session Parameters Path Vector Limit
    ldp.msg.tlv.sess.rxlsr  Session Receiver LSR Identifier
        IPv4 address
        Common Session Parameters LSR Identifier
    ldp.msg.tlv.sess.ver  Session Protocol Version
        Unsigned 16-bit integer
        Common Session Parameters Protocol Version
    ldp.msg.tlv.set_prio  Set Prio
        Unsigned 8-bit integer
        LSP setup priority
    ldp.msg.tlv.status.data  Status Data
        Unsigned 32-bit integer
        Status Data
    ldp.msg.tlv.status.ebit  E Bit
        Boolean
        Fatal Error Bit
    ldp.msg.tlv.status.fbit  F Bit
        Boolean
        Forward Bit
    ldp.msg.tlv.status.msg.id  Message ID
        Unsigned 32-bit integer
        Identifies peer message to which Status TLV refers
    ldp.msg.tlv.status.msg.type  Message Type
        Unsigned 16-bit integer
        Type of peer message to which Status TLV refers
    ldp.msg.tlv.type  TLV Type
        Unsigned 16-bit integer
        TLV Type Field
    ldp.msg.tlv.unknown  TLV Unknown bits
        Unsigned 8-bit integer
        TLV Unknown bits Field
    ldp.msg.tlv.value  TLV Value
        Byte array
        TLV Value Bytes
    ldp.msg.tlv.vendor_id  Vendor ID
        Unsigned 32-bit integer
        IEEE 802 Assigned Vendor ID
    ldp.msg.tlv.weight  Weight
        Unsigned 8-bit integer
        Weight of the CR-LSP
    ldp.msg.type  Message Type
        Unsigned 16-bit integer
        LDP message type
    ldp.msg.ubit  U bit
        Boolean
        Unknown Message Bit
    ldp.msg.vendor.id  Vendor ID
        Unsigned 32-bit integer
        LDP Vendor-private Message ID
    ldp.req  Request
        Boolean
    ldp.rsp  Response
        Boolean
    ldp.tlv.lbl_req_msg_id  Label Request Message ID
        Unsigned 32-bit integer
        Label Request Message to be aborted

Layer 2 Tunneling Protocol (l2tp)

    l2tp.Nr  Nr
        Unsigned 16-bit integer
    l2tp.Ns  Ns
        Unsigned 16-bit integer
    l2tp.avp.hidden  Hidden
        Boolean
        Hidden AVP
    l2tp.avp.length  Length
        Unsigned 16-bit integer
        AVP Length
    l2tp.avp.mandatory  Mandatory
        Boolean
        Mandatory AVP
    l2tp.avp.type  Type
        Unsigned 16-bit integer
        AVP Type
    l2tp.avp.vendor_id  Vendor ID
        Unsigned 16-bit integer
        AVP Vendor ID
    l2tp.length  Length
        Unsigned 16-bit integer
    l2tp.length_bit  Length Bit
        Boolean
        Length bit
    l2tp.offset  Offset
        Unsigned 16-bit integer
        Number of octest past the L2TP header at which thepayload data starts.
    l2tp.offset_bit  Offset bit
        Boolean
        Offset bit
    l2tp.priority  Priority
        Boolean
        Priority bit
    l2tp.seq_bit  Sequence Bit
        Boolean
        Sequence bit
    l2tp.session  Session ID
        Unsigned 16-bit integer
        Session ID
    l2tp.tie_breaker  Tie Breaker
        Unsigned 64-bit integer
        Tie Breaker
    l2tp.tunnel  Tunnel ID
        Unsigned 16-bit integer
        Tunnel ID
    l2tp.type  Type
        Unsigned 16-bit integer
        Type bit
    l2tp.version  Version
        Unsigned 16-bit integer
        Version

Lightweight Directory Access Protocol (ldap)

    ldap.abandon.msgid  Abandon Msg Id
        Unsigned 32-bit integer
        LDAP Abandon Msg Id
    ldap.attribute  Attribute
        String
        LDAP Attribute
    ldap.bind.auth_type  Auth Type
        Unsigned 8-bit integer
        LDAP Bind Auth Type
    ldap.bind.dn  DN
        String
        LDAP Bind Distinguished Name
    ldap.bind.password  Password
        String
        LDAP Bind Password
    ldap.bind.version  Version
        Unsigned 32-bit integer
        LDAP Bind Version
    ldap.compare.test  Test
        String
        LDAP Compare Test
    ldap.dn  Distinguished Name
        String
        LDAP Distinguished Name
    ldap.length  Length
        Unsigned 32-bit integer
        LDAP Length
    ldap.message_id  Message Id
        Unsigned 32-bit integer
        LDAP Message Id
    ldap.message_length  Message Length
        Unsigned 32-bit integer
        LDAP Message Length
    ldap.message_type  Message Type
        Unsigned 8-bit integer
        LDAP Message Type
    ldap.modify.add  Add
        String
        LDAP Add
    ldap.modify.delete  Delete
        String
        LDAP Delete
    ldap.modify.replace  Replace
        String
        LDAP Replace
    ldap.modrdn.delete  Delete Values
        Boolean
        LDAP Modify RDN - Delete original values
    ldap.modrdn.name  New Name
        String
        LDAP New Name
    ldap.modrdn.superior  New Location
        String
        LDAP Modify RDN - New Location
    ldap.result.code  Result Code
        Unsigned 8-bit integer
        LDAP Result Code
    ldap.result.errormsg  Error Message
        String
        LDAP Result Error Message
    ldap.result.matcheddn  Matched DN
        String
        LDAP Result Matched DN
    ldap.result.referral  Referral
        String
        LDAP Result Referral URL
    ldap.search.basedn  Base DN
        String
        LDAP Search Base Distinguished Name
    ldap.search.dereference  Dereference
        Unsigned 8-bit integer
        LDAP Search Dereference
    ldap.search.filter  Filter
        String
        LDAP Search Filter
    ldap.search.scope  Scope
        Unsigned 8-bit integer
        LDAP Search Scope
    ldap.search.sizelimit  Size Limit
        Unsigned 32-bit integer
        LDAP Search Size Limit
    ldap.search.timelimit  Time Limit
        Unsigned 32-bit integer
        LDAP Search Time Limit
    ldap.search.typesonly  Attributes Only
        Boolean
        LDAP Search Attributes Only
    ldap.value  Value
        String
        LDAP Value

Line Printer Daemon Protocol (lpd)

    lpd.request  Request
        Boolean
        TRUE if LPD request
    lpd.response  Response
        Boolean
        TRUE if LPD response

Link Access Procedure Balanced (LAPB) (lapb)

    lapb.address  Address Field
        Unsigned 8-bit integer
        Address
    lapb.control  Control Field
        Unsigned 8-bit integer
        Control field

Link Access Procedure Balanced Ethernet (LAPBETHER) (lapbether)

    lapbether.length  Length Field
        Unsigned 16-bit integer
        LAPBEther Length Field

Link Access Procedure, Channel D (LAPD) (lapd)

    lapd.address  Address Field
        Unsigned 16-bit integer
        Address
    lapd.control  Control Field
        Unsigned 16-bit integer
        Control field
    lapd.cr  C/R
        Unsigned 16-bit integer
        Command/Response bit
    lapd.ea1  EA1
        Unsigned 16-bit integer
        First Address Extension bit
    lapd.ea2  EA2
        Unsigned 16-bit integer
        Second Address Extension bit
    lapd.sapi  SAPI
        Unsigned 16-bit integer
        Service Access Point Identifier
    lapd.tei  TEI
        Unsigned 16-bit integer
        Terminal Endpoint Identifier

Link Aggregation Control Protocol (lacp)

    lacp.actorInfo  Actor Information
        Unsigned 8-bit integer
        TLV type = Actor
    lacp.actorInfoLen  Actor Information Length
        Unsigned 8-bit integer
        The length of the Actor TLV
    lacp.actorKey  Actor Key
        Unsigned 16-bit integer
        The operational Key value assigned to the port by the Actor
    lacp.actorPort  Actor Port
        Unsigned 16-bit integer
        The port number assigned to the port by the Actor (via Management or Admin)
    lacp.actorPortPriority  Actor Port Priority
        Unsigned 16-bit integer
        The priority assigned to the port by the Actor (via Management or Admin)
    lacp.actorState  Actor State
        Unsigned 8-bit integer
        The Actor's state variables for the port, encoded as bits within a single octet
    lacp.actorState.activity  LACP Activity
        Boolean
        Activity control value for this link. Active = 1, Passive = 0
    lacp.actorState.aggregation  Aggregation
        Boolean
        Aggregatable = 1, Individual = 0
    lacp.actorState.collecting  Collecting
        Boolean
        Collection of incoming frames is: Enabled = 1, Disabled = 0
    lacp.actorState.defaulted  Defaulted
        Boolean
        1 = Actor Rx machine is using DEFAULT Partner info, 0 = using info in Rx'd LACPDU
    lacp.actorState.distributing  Distributing
        Boolean
        Distribution of outgoing frames is: Enabled = 1, Disabled = 0
    lacp.actorState.expired  Expired
        Boolean
        1 = Actor Rx machine is EXPIRED, 0 = is NOT EXPIRED
    lacp.actorState.synchronization  Synchronization
        Boolean
        In Sync = 1, Out of Sync = 0
    lacp.actorState.timeout  LACP Timeout
        Boolean
        Timeout control value for this link. Short Timeout = 1, Long Timeout = 0
    lacp.actorSysPriority  Actor System Priority
        Unsigned 16-bit integer
        The priority assigned to this System by management or admin
    lacp.actorSystem  Actor System
        6-byte Hardware (MAC) Address
        The Actor's System ID encoded as a MAC address
    lacp.collectorInfo  Collector Information
        Unsigned 8-bit integer
        TLV type = Collector
    lacp.collectorInfoLen  Collector Information Length
        Unsigned 8-bit integer
        The length of the Collector TLV
    lacp.collectorMaxDelay  Collector Max Delay
        Unsigned 16-bit integer
        The max delay of the station tx'ing the LACPDU (in tens of usecs)
    lacp.partnerInfo  Partner Information
        Unsigned 8-bit integer
        TLV type = Partner
    lacp.partnerInfoLen  Partner Information Length
        Unsigned 8-bit integer
        The length of the Partner TLV
    lacp.partnerKey  Partner Key
        Unsigned 16-bit integer
        The operational Key value assigned to the port associated with this link by the Partner
    lacp.partnerPort  Partner Port
        Unsigned 16-bit integer
        The port number associated with this link assigned to the port by the Partner (via Management or Admin)
    lacp.partnerPortPriority  Partner Port Priority
        Unsigned 16-bit integer
        The priority assigned to the port by the Partner (via Management or Admin)
    lacp.partnerState  Partner State
        Unsigned 8-bit integer
        The Partner's state variables for the port, encoded as bits within a single octet
    lacp.partnerState.activity  LACP Activity
        Boolean
        Activity control value for this link. Active = 1, Passive = 0
    lacp.partnerState.aggregation  Aggregation
        Boolean
        Aggregatable = 1, Individual = 0
    lacp.partnerState.collecting  Collecting
        Boolean
        Collection of incoming frames is: Enabled = 1, Disabled = 0
    lacp.partnerState.defaulted  Defaulted
        Boolean
        1 = Actor Rx machine is using DEFAULT Partner info, 0 = using info in Rx'd LACPDU
    lacp.partnerState.distributing  Distributing
        Boolean
        Distribution of outgoing frames is: Enabled = 1, Disabled = 0
    lacp.partnerState.expired  Expired
        Boolean
        1 = Actor Rx machine is EXPIRED, 0 = is NOT EXPIRED
    lacp.partnerState.synchronization  Synchronization
        Boolean
        In Sync = 1, Out of Sync = 0
    lacp.partnerState.timeout  LACP Timeout
        Boolean
        Timeout control value for this link. Short Timeout = 1, Long Timeout = 0
    lacp.partnerSysPriority  Partner System Priority
        Unsigned 16-bit integer
        The priority assigned to the Partner System by management or admin
    lacp.partnerSystem  Partner System
        6-byte Hardware (MAC) Address
        The Partner's System ID encoded as a MAC address
    lacp.reserved  Reserved
        Byte array
    lacp.subtype  Subtype
        Unsigned 8-bit integer
        The specific Slow Protocol being used
    lacp.termInfo  Terminator Information
        Unsigned 8-bit integer
        TLV type = Terminator
    lacp.termLen  Terminator Length
        Unsigned 8-bit integer
        The length of the Terminator TLV
    lacp.version  LACP Version Number
        Unsigned 8-bit integer
        Identifies the LACP version

Link Management Protocol (LMP) (lmp)

    lmp.begin_verify.all_links  Verify All Links
        Boolean
    lmp.begin_verify.enctype  Encoding Type
        Unsigned 8-bit integer
    lmp.begin_verify.flags  Flags
        Unsigned 16-bit integer
    lmp.begin_verify.link_type  Data Link Type
        Boolean
    lmp.data_link.link_verify  Data-Link is Allocated
        Boolean
    lmp.data_link.local_ipv4  Data-Link Local ID - IPv4
        IPv4 address
    lmp.data_link.local_unnum  Data-Link Local ID - Unnumbered
        Unsigned 32-bit integer
    lmp.data_link.port  Data-Link is Individual Port
        Boolean
    lmp.data_link.remote_ipv4  Data-Link Remote ID - IPv4
        IPv4 address
    lmp.data_link.remote_unnum  Data-Link Remote ID - Unnumbered
        Unsigned 32-bit integer
    lmp.data_link_encoding  LSP Encoding Type
        Unsigned 8-bit integer
    lmp.data_link_flags  Data-Link Flags
        Unsigned 8-bit integer
    lmp.data_link_subobj  Subobject
        No value
    lmp.data_link_switching  Interface Switching Capability
        Unsigned 8-bit integer
    lmp.error  Error Code
        Unsigned 32-bit integer
    lmp.error.config_bad_ccid  Config - Bad CC ID
        Boolean
    lmp.error.config_bad_params  Config - Unacceptable non-negotiable parameters
        Boolean
    lmp.error.config_renegotiate  Config - Renegotiate Parametere
        Boolean
    lmp.error.summary_bad_data_link  Summary - Bad Data Link Object
        Boolean
    lmp.error.summary_bad_params  Summary - Unacceptable non-negotiable parameters
        Boolean
    lmp.error.summary_bad_remote_linkid  Summary - Bad Remote Link ID
        Boolean
    lmp.error.summary_bad_te_link  Summary - Bad TE Link Object
        Boolean
    lmp.error.summary_renegotiate  Summary - Renegotiate Parametere
        Boolean
    lmp.error.verify_te_link_id  Verification - TE Link ID Configuration Error
        Boolean
    lmp.error.verify_unsupported_link  Verification - Unsupported for this TE-Link
        Boolean
    lmp.error.verify_unsupported_transport  Verification - Transport Unsupported
        Boolean
    lmp.error.verify_unwilling  Verification - Unwilling to Verify at this time
        Boolean
    lmp.hdr.auth  Authentication
        Boolean
    lmp.hdr.ccdown  ControlChannelDown
        Boolean
    lmp.hdr.dwdm  DWDM Node
        Boolean
    lmp.hdr.flags  LMP Header - Flags
        Unsigned 8-bit integer
    lmp.hdr.reboot  Reboot
        Boolean
    lmp.hellodeadinterval  HelloDeadInterval
        Unsigned 32-bit integer
    lmp.hellointerval  HelloInterval
        Unsigned 32-bit integer
    lmp.local_ccid  Local CCID Value
        Unsigned 32-bit integer
    lmp.local_interfaceid_ipv4  Local Interface ID - IPv4
        IPv4 address
    lmp.local_interfaceid_unnum  Local Interface ID - Unnumbered
        Unsigned 32-bit integer
    lmp.local_linkid_ipv4  Local Link ID - IPv4
        IPv4 address
    lmp.local_linkid_unnum  Local Link ID - Unnumbered
        Unsigned 32-bit integer
    lmp.local_nodeid  Local Node ID Value
        IPv4 address
    lmp.messageid  Message-ID Value
        Unsigned 32-bit integer
    lmp.messageid_ack  Message-ID Ack Value
        Unsigned 32-bit integer
    lmp.msg  Message Type
        Unsigned 8-bit integer
    lmp.msg.beginverify  BeginVerify Message
        Boolean
    lmp.msg.beginverifyack  BeginVerifyAck Message
        Boolean
    lmp.msg.beginverifynack  BeginVerifyNack Message
        Boolean
    lmp.msg.channelfail  ChannelFail Message
        Boolean
    lmp.msg.channelfailack  ChannelFailAck Message
        Boolean
    lmp.msg.channelfailnack  ChannelFailNack Message
        Boolean
    lmp.msg.channelstatus  ChannelStatus Message
        Boolean
    lmp.msg.channelstatusack  ChannelStatusAck Message
        Boolean
    lmp.msg.channelstatusrequest  ChannelStatusRequest Message
        Boolean
    lmp.msg.channelstatusresponse  ChannelStatusResponse Message
        Boolean
    lmp.msg.config  Config Message
        Boolean
    lmp.msg.configack  ConfigAck Message
        Boolean
    lmp.msg.confignack  ConfigNack Message
        Boolean
    lmp.msg.endverify  EndVerify Message
        Boolean
    lmp.msg.hello  HELLO Message
        Boolean
    lmp.msg.linksummary  LinkSummary Message
        Boolean
    lmp.msg.linksummaryack  LinkSummaryAck Message
        Boolean
    lmp.msg.linksummarynack  LinkSummaryNack Message
        Boolean
    lmp.msg.test  Test Message
        Boolean
    lmp.msg.teststatusack  TestStatusAck Message
        Boolean
    lmp.msg.teststatusfailure  TestStatusFailure Message
        Boolean
    lmp.msg.teststatussuccess  TestStatusSuccess Message
        Boolean
    lmp.obj.begin_verify  BEGIN_VERIFY
        No value
    lmp.obj.begin_verify_ack  BEGIN_VERIFY_ACK
        No value
    lmp.obj.channel_status  CHANNEL_STATUS
        No value
    lmp.obj.channel_status_request  CHANNEL_STATUS_REQUEST
        No value
    lmp.obj.config  CONFIG
        No value
    lmp.obj.ctype  Object C-Type
        Unsigned 8-bit integer
    lmp.obj.data_link  DATA_LINK
        No value
    lmp.obj.error  ERROR
        No value
    lmp.obj.hello  HELLO
        No value
    lmp.obj.local_ccid  LOCAL_CCID
        No value
    lmp.obj.local_interfaceid  LOCAL_INTERFACE_ID
        No value
    lmp.obj.local_linkid  LOCAL_LINK_ID
        No value
    lmp.obj.local_nodeid  LOCAL_NODE_ID
        No value
    lmp.obj.messageid  MESSAGE_ID
        No value
    lmp.obj.messageid_ack  MESSAGE_ID_ACK
        No value
    lmp.obj.remote_ccid  REMOTE_CCID
        No value
    lmp.obj.remote_interfaceid  REMOTE_INTERFACE_ID
        No value
    lmp.obj.remote_linkid  REMOTE_LINK_ID
        No value
    lmp.obj.remote_nodeid  REMOTE_NODE_ID
        No value
    lmp.obj.te_link  TE_LINK
        No value
    lmp.obj.verifyid  VERIFY_ID
        No value
    lmp.object  LOCAL_CCID
        Unsigned 8-bit integer
    lmp.remote_ccid  Remote CCID Value
        Unsigned 32-bit integer
    lmp.remote_interfaceid_ipv4  Remote Interface ID - IPv4
        IPv4 address
    lmp.remote_interfaceid_unnum  Remote Interface ID - Unnumbered
        Unsigned 32-bit integer
    lmp.remote_linkid_ipv4  Remote Link ID - IPv4
        Unsigned 32-bit integer
    lmp.remote_linkid_unnum  Remote Link ID - Unnumbered
        Unsigned 32-bit integer
    lmp.remote_nodeid  Remote Node ID Value
        IPv4 address
    lmp.rxseqnum  RxSeqNum
        Unsigned 32-bit integer
    lmp.te_link.fault_mgmt  Fault Management Supported
        Boolean
    lmp.te_link.link_verify  Link Verification Supported
        Boolean
    lmp.te_link.local_ipv4  TE-Link Local ID - IPv4
        IPv4 address
    lmp.te_link.local_unnum  TE-Link Local ID - Unnumbered
        Unsigned 32-bit integer
    lmp.te_link.remote_ipv4  TE-Link Remote ID - IPv4
        IPv4 address
    lmp.te_link.remote_unnum  TE-Link Remote ID - Unnumbered
        Unsigned 32-bit integer
    lmp.te_link_flags  TE-Link Flags
        Unsigned 8-bit integer
    lmp.txseqnum  TxSeqNum
        Unsigned 32-bit integer
    lmp.verifyid  Verify-ID
        Unsigned 32-bit integer

Linux cooked-mode capture (sll)

    sll.etype  Protocol
        Unsigned 16-bit integer
        Ethernet protocol type
    sll.halen  Link-layer address length
        Unsigned 16-bit integer
        Link-layer address length
    sll.hatype  Link-layer address type
        Unsigned 16-bit integer
        Link-layer address type
    sll.ltype  Protocol
        Unsigned 16-bit integer
        Linux protocol type
    sll.pkttype  Packet type
        Unsigned 16-bit integer
        Packet type
    sll.src.eth  Source
        6-byte Hardware (MAC) Address
        Source link-layer address
    sll.src.other  Source
        Byte array
        Source link-layer address
    sll.trailer  Trailer
        Byte array
        Trailer

Local Management Interface (lmi)

    lmi.cmd  Call reference
        Unsigned 8-bit integer
        Call Reference
    lmi.dlci_act  DLCI Active
        Unsigned 8-bit integer
        DLCI Active Flag
    lmi.dlci_hi  DLCI High
        Unsigned 8-bit integer
        DLCI High bits
    lmi.dlci_low  DLCI Low
        Unsigned 8-bit integer
        DLCI Low bits
    lmi.dlci_new  DLCI New
        Unsigned 8-bit integer
        DLCI New Flag
    lmi.ele_rcd_type  Record Type
        Unsigned 8-bit integer
        Record Type
    lmi.inf_ele  Information Element
        Unsigned 8-bit integer
        Information Element
    lmi.inf_ele_len  Length
        Unsigned 8-bit integer
        Information Element Length
    lmi.inf_ele_type  Type
        Unsigned 8-bit integer
        Information Element Type
    lmi.msg_type  Message Type
        Unsigned 8-bit integer
        Message Type
    lmi.recv_seq  Recv Seq
        Unsigned 8-bit integer
        Receive Sequence
    lmi.send_seq  Send Seq
        Unsigned 8-bit integer
        Send Sequence

LocalTalk Link Access Protocol (llap)

    llap.dst  Destination Node
        Unsigned 8-bit integer
    llap.src  Source Node
        Unsigned 8-bit integer
    llap.type  Type
        Unsigned 8-bit integer

Logical-Link Control (llc)

    llc.control  Control
        Unsigned 16-bit integer
    llc.dsap  DSAP
        Unsigned 8-bit integer
    llc.dsap.ig  IG Bit
        Boolean
        Individual/Group
    llc.oui  Organization Code
        Unsigned 24-bit integer
    llc.pid  Protocol ID
        Unsigned 16-bit integer
    llc.ssap  SSAP
        Unsigned 8-bit integer
    llc.ssap.cr  CR Bit
        Boolean
        Command/Response
    llc.type  Type
        Unsigned 16-bit integer

Lucent/Ascend debug output (ascend)

    ascend.chunk  WDD Chunk
        Unsigned 32-bit integer
    ascend.number  Called number
        String
    ascend.sess  Session ID
        Unsigned 32-bit integer
    ascend.task  Task
        Unsigned 32-bit integer
    ascend.type  Link type
        Unsigned 32-bit integer
    ascend.user  User name
        String

MMS Message Encapsulation (mmse)

    mmse.bcc  Bcc
        String
        Blind carbon copy.
    mmse.cc  Cc
        String
        Carbon copy.
    mmse.content_location  Content-Location
        String
        Defines the location of the message.
    mmse.content_type  Data
        No value
        Media content of the message.
    mmse.date  Date
        Date/Time stamp
        Arrival timestamp of the message or sending timestamp.
    mmse.delivery_report  Delivery-Report
        Unsigned 8-bit integer
        Whether a report of message delivery is wanted or not.
    mmse.delivery_time.abs  Delivery-Time
        Date/Time stamp
        The time at which message delivery is desired.
    mmse.delivery_time.rel  Delivery-Time
        Time duration
        The desired message delivery delay.
    mmse.expiry.abs  Expiry
        Date/Time stamp
        Time when message expires and need not be delivered anymore.
    mmse.expiry.rel  Expiry
        Time duration
        Delay before message expires and need not be delivered anymore.
    mmse.ffheader  Free format (not encoded) header
        String
        Application header without corresponding encoding.
    mmse.from  From
        String
        Address of the message sender.
    mmse.message_class.id  Message-Class
        Unsigned 8-bit integer
        Of what category is the message.
    mmse.message_class.str  Message-Class
        String
        Of what category is the message.
    mmse.message_id  Message-Id
        String
        Unique identification of the message.
    mmse.message_size  Message-Size
        Unsigned 32-bit integer
        The size of the message in octets.
    mmse.message_type  Message-Type
        Unsigned 8-bit integer
        Specifies the transaction type. Effectively defines PDU.
    mmse.mms_version  MMS-Version
        String
        Version of the protocol used.
    mmse.priority  Priority
        Unsigned 8-bit integer
        Priority of the message.
    mmse.read_reply  Read-Reply
        Unsigned 8-bit integer
        Whether a read report from every recipient is wanted.
    mmse.report_allowed  Report-Allowed
        Unsigned 8-bit integer
        Sending of delivery report allowed or not.
    mmse.response_status  Response-Status
        Unsigned 8-bit integer
        MMS-specific result of a message submission or retrieval.
    mmse.response_text  Response-Text
        String
        Additional information on MMS-specific result.
    mmse.sender_visibility  Sender-Visibility
        Unsigned 8-bit integer
        Disclose sender identity to receiver or not.
    mmse.status  Status
        Unsigned 8-bit integer
        Current status of the message.
    mmse.subject  Subject
        String
        Subject of the message.
    mmse.to  To
        String
        Recipient(s) of the message.
    mmse.transaction_id  Transaction-ID
        String
        A unique identifier for this transaction. Identifies request and corresponding response only.

MS Proxy Protocol (msproxy)

    msproxy.bindaddr  Destination
        IPv4 address
    msproxy.bindid  Bound Port Id
        Unsigned 32-bit integer
    msproxy.bindport  Bind Port
        Unsigned 16-bit integer
    msproxy.boundport  Bound Port
        Unsigned 16-bit integer
    msproxy.clntport  Client Port
        Unsigned 16-bit integer
    msproxy.command  Command
        Unsigned 16-bit integer
    msproxy.dstaddr  Destination Address
        IPv4 address
    msproxy.dstport  Destination Port
        Unsigned 16-bit integer
    msproxy.resolvaddr  Address
        IPv4 address
    msproxy.server_ext_addr  Server External Address
        IPv4 address
    msproxy.server_ext_port  Server External Port
        Unsigned 16-bit integer
    msproxy.server_int_addr  Server Internal Address
        IPv4 address
    msproxy.server_int_port  Server Internal Port
        Unsigned 16-bit integer
    msproxy.serveraddr  Server Address
        IPv4 address
    msproxy.serverport  Server Port
        Unsigned 16-bit integer
    msproxy.srcport  Source Port
        Unsigned 16-bit integer

MSNIP: Multicast Source Notification of Interest Protocol (msnip)

    msnip.checksum  Checksum
        Unsigned 16-bit integer
        MSNIP Checksum
    msnip.checksum_bad  Bad Checksum
        Boolean
        Bad MSNIP Checksum
    msnip.count  Count
        Unsigned 8-bit integer
        MSNIP Number of groups
    msnip.genid  Generation ID
        Unsigned 16-bit integer
        MSNIP Generation ID
    msnip.groups  Groups
        No value
        MSNIP Groups
    msnip.holdtime  Holdtime
        Unsigned 32-bit integer
        MSNIP Holdtime in seconds
    msnip.holdtime16  Holdtime
        Unsigned 16-bit integer
        MSNIP Holdtime in seconds
    msnip.maddr  Multicast group
        IPv4 address
        MSNIP Multicast Group
    msnip.netmask  Netmask
        Unsigned 8-bit integer
        MSNIP Netmask
    msnip.rec_type  Record Type
        Unsigned 8-bit integer
        MSNIP Record Type
    msnip.type  Type
        Unsigned 8-bit integer
        MSNIP Packet Type

MTP 2 Transparent Proxy (m2tp)

    m2tp.diagnostic_info  Diagnostic information
        Byte array
    m2tp.error_code  Error code
        Unsigned 32-bit integer
    m2tp.heartbeat_data  Heartbeat data
        Byte array
    m2tp.info_string  Info string
        String
    m2tp.interface_identifier  Interface Identifier
        Unsigned 32-bit integer
    m2tp.master_slave  Master Slave Indicator
        Unsigned 32-bit integer
    m2tp.message_class  Message class
        Unsigned 8-bit integer
    m2tp.message_length  Message length
        Unsigned 32-bit integer
    m2tp.message_type  Message Type
        Unsigned 8-bit integer
    m2tp.parameter_length  Parameter length
        Unsigned 16-bit integer
    m2tp.parameter_padding  Padding
        Byte array
    m2tp.parameter_tag  Parameter Tag
        Unsigned 16-bit integer
    m2tp.parameter_value  Parameter Value
        Byte array
    m2tp.reason  Reason
        Unsigned 32-bit integer
    m2tp.reserved  Reserved
        Unsigned 8-bit integer
    m2tp.user_identifier  M2tp User Identifier
        Unsigned 32-bit integer
    m2tp.version  Version
        Unsigned 8-bit integer

MTP 2 User Adaptation Layer (m2ua)

    m2ua.action  Actions
        Unsigned 32-bit integer
    m2ua.asp_identifier  ASP identifier
        Unsigned 32-bit integer
    m2ua.congestion_status  Congestion status
        Unsigned 32-bit integer
    m2ua.correlation identifier  Correlation identifier
        Unsigned 32-bit integer
    m2ua.data_2_li  Length indicator
        Unsigned 8-bit integer
    m2ua.deregistration_status  Deregistration status
        Unsigned 32-bit integer
    m2ua.diagnostic_information  Diagnostic information
        Byte array
    m2ua.discard_status  Discard status
        Unsigned 32-bit integer
    m2ua.error_code  Error code
        Unsigned 32-bit integer
    m2ua.event  Event
        Unsigned 32-bit integer
    m2ua.heartbeat_data  Heartbeat data
        Byte array
    m2ua.info_string  Info string
        String
    m2ua.interface_identifier_int  Interface Identifier (integer)
        Unsigned 32-bit integer
    m2ua.interface_identifier_start  Interface Identifier (start)
        Unsigned 32-bit integer
    m2ua.interface_identifier_stop  Interface Identifier (stop)
        Unsigned 32-bit integer
    m2ua.interface_identifier_text  Interface identifier (text)
        String
    m2ua.local_lk_identifier  Local LK identifier
        Unsigned 32-bit integer
    m2ua.message_class  Message class
        Unsigned 8-bit integer
    m2ua.message_length  Message length
        Unsigned 32-bit integer
    m2ua.message_type  Message Type
        Unsigned 8-bit integer
    m2ua.parameter_length  Parameter length
        Unsigned 16-bit integer
    m2ua.parameter_padding  Padding
        Byte array
    m2ua.parameter_tag  Parameter Tag
        Unsigned 16-bit integer
    m2ua.parameter_value  Parameter value
        Byte array
    m2ua.registration_status  Registration status
        Unsigned 32-bit integer
    m2ua.reserved  Reserved
        Unsigned 8-bit integer
    m2ua.retrieval_result  Retrieval result
        Unsigned 32-bit integer
    m2ua.sdl_identifier  SDL identifier
        Unsigned 16-bit integer
    m2ua.sdl_reserved  Reserved
        Unsigned 16-bit integer
    m2ua.sdt_identifier  SDT identifier
        Unsigned 16-bit integer
    m2ua.sdt_reserved  Reserved
        Unsigned 16-bit integer
    m2ua.sequence_number  Sequence number
        Unsigned 32-bit integer
    m2ua.state  State
        Unsigned 32-bit integer
    m2ua.status_info  Status info
        Unsigned 16-bit integer
    m2ua.status_type  Status type
        Unsigned 16-bit integer
    m2ua.traffic_mode_type  Traffic mode Type
        Unsigned 32-bit integer
    m2ua.version  Version
        Unsigned 8-bit integer

MTP 3 User Adaptation Layer (m3ua)

    m3ua.affected_point_code_mask  Mask
        Unsigned 8-bit integer
    m3ua.affected_point_code_pc  Affected point code
        Unsigned 24-bit integer
    m3ua.asp_identifier  ASP identifier
        Unsigned 32-bit integer
    m3ua.cic_range_lower  Lower CIC value
        Unsigned 16-bit integer
    m3ua.cic_range_mask  Mask
        Unsigned 8-bit integer
    m3ua.cic_range_pc  Originating point code
        Unsigned 24-bit integer
    m3ua.cic_range_upper  Upper CIC value
        Unsigned 16-bit integer
    m3ua.concerned_dpc  Concerned DPC
        Unsigned 24-bit integer
    m3ua.concerned_reserved  Reserved
        Byte array
    m3ua.congestion_level  Congestion level
        Unsigned 8-bit integer
    m3ua.congestion_reserved  Reserved
        Byte array
    m3ua.correlation_identifier  Correlation Identifier
        Unsigned 32-bit integer
    m3ua.deregistration_result_routing_context  Routing context
        Unsigned 32-bit integer
    m3ua.deregistration_results_status  De-Registration status
        Unsigned 32-bit integer
    m3ua.deregistration_status  Deregistration status
        Unsigned 32-bit integer
    m3ua.diagnostic_information  Diagnostic information
        Byte array
    m3ua.dpc_mask  Mask
        Unsigned 8-bit integer
    m3ua.dpc_pc  Destination point code
        Unsigned 24-bit integer
    m3ua.error_code  Error code
        Unsigned 32-bit integer
    m3ua.heartbeat_data  Heartbeat data
        Byte array
    m3ua.info_string  Info string
        String
    m3ua.local_rk_identifier  Local routing key identifier
        Unsigned 32-bit integer
    m3ua.message_class  Message class
        Unsigned 8-bit integer
    m3ua.message_length  Message length
        Unsigned 32-bit integer
    m3ua.message_type  Message Type
        Unsigned 8-bit integer
    m3ua.network_appearance  Network appearance
        Unsigned 32-bit integer
    m3ua.opc_list_mask  Mask
        Unsigned 8-bit integer
    m3ua.opc_list_pc  Originating point code
        Unsigned 24-bit integer
    m3ua.parameter_length  Parameter length
        Unsigned 16-bit integer
    m3ua.parameter_padding  Padding
        Byte array
    m3ua.parameter_tag  Parameter Tag
        Unsigned 16-bit integer
    m3ua.parameter_value  Parameter value
        Byte array
    m3ua.protocol_data_2_li  Length indicator
        Unsigned 8-bit integer
    m3ua.protocol_data_dpc  DPC
        Unsigned 32-bit integer
    m3ua.protocol_data_mp  MP
        Unsigned 8-bit integer
    m3ua.protocol_data_ni  NI
        Unsigned 8-bit integer
    m3ua.protocol_data_opc  OPC
        Unsigned 32-bit integer
    m3ua.protocol_data_si  SI
        Unsigned 8-bit integer
    m3ua.protocol_data_sls  SLS
        Unsigned 8-bit integer
    m3ua.registration_result_identifier  Local RK-identifier value
        Unsigned 32-bit integer
    m3ua.registration_result_routing_context  Routing context
        Unsigned 32-bit integer
    m3ua.registration_results_status  Registration status
        Unsigned 32-bit integer
    m3ua.registration_status  Registration status
        Unsigned 32-bit integer
    m3ua.reserved  Reserved
        Unsigned 8-bit integer
    m3ua.routing_context  Routing context
        Unsigned 32-bit integer
    m3ua.status_info  Status info
        Unsigned 16-bit integer
    m3ua.status_type  Status type
        Unsigned 16-bit integer
    m3ua.traffic_mode_type  Traffic mode Type
        Unsigned 32-bit integer
    m3ua.unavailability_cause  Unavailability cause
        Unsigned 16-bit integer
    m3ua.user_identity  User Identity
        Unsigned 16-bit integer
    m3ua.version  Version
        Unsigned 8-bit integer
    m3ua_reason  Reason
        Unsigned 32-bit integer
    m3ua_si  Service indicator
        Unsigned 8-bit integer
    m3ua_ssn  Subsystem number
        Unsigned 8-bit integer

MTP2 Peer Adaptation Layer (m2pa)

    m2pa.bsn  BSN
        Unsigned 16-bit integer
    m2pa.class  Message Class
        Unsigned 8-bit integer
    m2pa.filler  Filler
        Byte array
    m2pa.fsn  FSN
        Unsigned 16-bit integer
    m2pa.length  Message length
        Unsigned 32-bit integer
    m2pa.li_priority  Priority
        Unsigned 8-bit integer
    m2pa.li_spare  Spare
        Unsigned 8-bit integer
    m2pa.spare  Spare
        Unsigned 8-bit integer
    m2pa.status  Link Status Status
        Unsigned 32-bit integer
    m2pa.type  Message Type
        Unsigned 8-bit integer
    m2pa.unknown_data  Unknown Data
        Byte array
    m2pa.version  Version
        Unsigned 8-bit integer

Malformed Packet (malformed)

Message Transfer Part Level 2 (mtp2)

    mtp2.bib  Backward indicator bit
        Unsigned 8-bit integer
    mtp2.bsn  Backward sequence number
        Unsigned 8-bit integer
    mtp2.fib  Forward indicator bit
        Unsigned 8-bit integer
    mtp2.fsn  Forward sequence number
        Unsigned 8-bit integer
    mtp2.li  Length Indicator
        Unsigned 8-bit integer
    mtp2.long_sf  Status field
        Unsigned 16-bit integer
    mtp2.sf  Status field
        Unsigned 8-bit integer
    mtp2.spare  Spare
        Unsigned 8-bit integer

Message Transfer Part Level 3 (mtp3)

    mtp3.dpc  DPC
        Unsigned 32-bit integer
    mtp3.dpc.cluster  DPC Cluster
        Unsigned 24-bit integer
    mtp3.dpc.member  DPC Member
        Unsigned 24-bit integer
    mtp3.dpc.network  DPC Network
        Unsigned 24-bit integer
    mtp3.network_indicator  Network indicator
        Unsigned 8-bit integer
    mtp3.opc  OPC
        Unsigned 32-bit integer
    mtp3.opc.cluster  OPC Cluster
        Unsigned 24-bit integer
    mtp3.opc.member  OPC Member
        Unsigned 24-bit integer
    mtp3.opc.network  OPC Network
        Unsigned 24-bit integer
    mtp3.priority  Priority
        Unsigned 8-bit integer
    mtp3.service_indicator  Service indicator
        Unsigned 8-bit integer
    mtp3.sls  Signalling Link Selector
        Unsigned 32-bit integer
    mtp3.spare  Spare
        Unsigned 8-bit integer

Microsoft Distributed File System (dfs)

    dfs.opnum  Operation
        Unsigned 16-bit integer
        Operation

Microsoft Exchange MAPI (mapi)

    mapi.decrypted.data  Decrypted data
        Byte array
        Decrypted data
    mapi.decrypted.data.len  Length
        Unsigned 32-bit integer
        Used size of buffer for decrypted data
    mapi.decrypted.data.maxlen  Max Length
        Unsigned 32-bit integer
        Maximum size of buffer for decrypted data
    mapi.decrypted.data.offset  Offset
        Unsigned 32-bit integer
        Offset into buffer for decrypted data
    mapi.encap_len  Length
        Unsigned 16-bit integer
        Length of encapsulated/encrypted data
    mapi.hnd  Context Handle
        Byte array
    mapi.pdu.extra_trailer  unknown
        Byte array
        If you know what this is, contact ethereal developers
    mapi.pdu.len  Length
        Unsigned 16-bit integer
        Size of the command PDU
    mapi.pdu.trailer  Trailer
        Unsigned 32-bit integer
        If you know what this is, contact ethereal developers
    mapi.rc  Return code
        Unsigned 32-bit integer
    mapi.unknown_data  unknown encrypted data
        Byte array
        Unknown data. If you know what this is, contact ethereal developers.
    mapi.unknown_short  Unknown short
        Unsigned 16-bit integer
        Unknown short. If you know what this is, contact ethereal developers.
    mapi.unknown_string  Unknown string
        String
        Unknown string. If you know what this is, contact ethereal developers.

Microsoft Local Security Architecture (lsa)

    lsa.access_mask  Access Mask
        Unsigned 32-bit integer
        LSA Access Mask
    lsa.acct  Account
        String
        Account
    lsa.attr  Attr
        Unsigned 64-bit integer
        LSA Attributes
    lsa.auth.blob  Auth blob
        Byte array
    lsa.auth.len  Auth Len
        Unsigned 32-bit integer
        Auth Info len
    lsa.auth.type  Auth Type
        Unsigned 32-bit integer
        Auth Info type
    lsa.auth.update  Update
        Unsigned 64-bit integer
        LSA Auth Info update
    lsa.controller  Controller
        String
        Name of Domain Controller
    lsa.count  Count
        Unsigned 32-bit integer
        Count of objects
    lsa.cur.mtime  Current MTime
        Date/Time stamp
        Current MTime to set
    lsa.domain  Domain
        String
        Domain
    lsa.flat_name  Flat Name
        String
    lsa.forest  Forest
        String
    lsa.hnd  Context Handle
        Byte array
        LSA policy handle
    lsa.index  Index
        Unsigned 32-bit integer
    lsa.info.level  Level
        Unsigned 16-bit integer
        Information level of requested data
    lsa.info_type  Info Type
        Unsigned 32-bit integer
    lsa.key  Key
        Byte array
    lsa.max_count  Max Count
        Unsigned 32-bit integer
    lsa.mod.mtime  MTime
        Date/Time stamp
        Time when this modification occured
    lsa.mod.seq_no  Seq No
        Unsigned 64-bit integer
        Sequence number for this modification
    lsa.name  Name
        String
    lsa.new_pwd  New Password
        Byte array
        New password
    lsa.num_mapped  Num Mapped
        Unsigned 32-bit integer
    lsa.obj_attr  Attributes
        Unsigned 32-bit integer
        LSA Attributes
    lsa.obj_attr.len  Length
        Unsigned 32-bit integer
        Length of object attribute structure
    lsa.obj_attr.name  Name
        String
        Name of object attribute
    lsa.old.mtime  Old MTime
        Date/Time stamp
        Old MTime for this object
    lsa.old_pwd  Old Password
        Byte array
        Old password
    lsa.opnum  Operation
        Unsigned 16-bit integer
        Operation
    lsa.paei.enabled  Enabled
        Unsigned 8-bit integer
        If Audit Events Information is Enabled or not
    lsa.paei.settings  Settings
        Unsigned 32-bit integer
        Audit Events Information settings
    lsa.pali.log_size  Log Size
        Unsigned 32-bit integer
        Size of audit log
    lsa.pali.next_audit_record  Next Audit Record
        Unsigned 32-bit integer
        Next audit record
    lsa.pali.percent_full  Percent Full
        Unsigned 32-bit integer
        How full audit log is in percentage
    lsa.pali.retention_period  Retention Period
        Time duration
    lsa.pali.shutdown_in_progress  Shutdown in progress
        Unsigned 8-bit integer
        Flag whether shutdown is in progress or not
    lsa.pali.time_to_shutdown  Time to shutdown
        Time duration
        Time to shutdown
    lsa.policy.info  Info Class
        Unsigned 16-bit integer
        Policy information class
    lsa.privilege.name  Name
        String
        LSA Privilege Name
    lsa.qos.effective_only  Effective only
        Unsigned 8-bit integer
        QOS Flag whether this is Effective Only or not
    lsa.qos.imp_lev  Impersonation level
        Unsigned 16-bit integer
        QOS Impersonation Level
    lsa.qos.len  Length
        Unsigned 32-bit integer
        Length of quality of service structure
    lsa.qos.track_ctx  Context Tracking
        Unsigned 8-bit integer
        QOS Context Tracking Mode
    lsa.quota.max_wss  Max WSS
        Unsigned 32-bit integer
        Size of Quota Max WSS
    lsa.quota.min_wss  Min WSS
        Unsigned 32-bit integer
        Size of Quota Min WSS
    lsa.quota.non_paged_pool  Non Paged Pool
        Unsigned 32-bit integer
        Size of Quota non-Paged Pool
    lsa.quota.paged_pool  Paged Pool
        Unsigned 32-bit integer
        Size of Quota Paged Pool
    lsa.quota.pagefile  Pagefile
        Unsigned 32-bit integer
        Size of quota pagefile usage
    lsa.rc  Return code
        Unsigned 32-bit integer
        LSA return status code
    lsa.remove_all  Remove All
        Unsigned 8-bit integer
        Flag whether all rights should be removed or only the specified ones
    lsa.resume_handle  Resume Handle
        Unsigned 32-bit integer
        Resume Handle
    lsa.rid  RID
        Unsigned 32-bit integer
        RID
    lsa.rid.offset  RID Offset
        Unsigned 32-bit integer
        RID Offset
    lsa.rights  Rights
        String
        Account Rights
    lsa.sd_size  Size
        Unsigned 32-bit integer
        Size of lsa security descriptor
    lsa.secret  LSA Secret
        Byte array
    lsa.server  Server
        String
        Name of Server
    lsa.server_role  Role
        Unsigned 16-bit integer
        LSA Server Role
    lsa.sid_type  SID Type
        Unsigned 16-bit integer
        Type of SID
    lsa.size  Size
        Unsigned 32-bit integer
    lsa.size_needed  Size Needed
        Unsigned 16-bit integer
    lsa.source  Source
        String
        Replica Source
    lsa.trust.attr  Trust Attr
        Unsigned 32-bit integer
        Trust attributes
    lsa.trust.attr.non_trans  Non Transitive
        Boolean
        Non Transitive trust
    lsa.trust.attr.tree_parent  Tree Parent
        Boolean
        Tree Parent trust
    lsa.trust.attr.tree_root  Tree Root
        Boolean
        Tree Root trust
    lsa.trust.attr.uplevel_only  Upleve only
        Boolean
        Uplevel only trust
    lsa.trust.direction  Trust Direction
        Unsigned 32-bit integer
        Trust direction
    lsa.trust.type  Trust Type
        Unsigned 32-bit integer
        Trust type
    lsa.trusted.info_level  Info Level
        Unsigned 16-bit integer
        Information level of requested Trusted Domain Information
    lsa.unknown.char  Unknown char
        Unsigned 8-bit integer
        Unknown char. If you know what this is, contact ethereal developers.
    lsa.unknown.hyper  Unknown hyper
        Unsigned 64-bit integer
        Unknown hyper. If you know what this is, contact ethereal developers.
    lsa.unknown.long  Unknown long
        Unsigned 32-bit integer
        Unknown long. If you know what this is, contact ethereal developers.
    lsa.unknown.short  Unknown short
        Unsigned 16-bit integer
        Unknown short. If you know what this is, contact ethereal developers.
    lsa.unknown_string  Unknown string
        String
        Unknown string. If you know what this is, contact ethereal developers.
    nt.luid.high  High
        Unsigned 32-bit integer
        LUID High component
    nt.luid.low  Low
        Unsigned 32-bit integer
        LUID Low component

Microsoft Network Logon (rpc_netlogon)

    netlogon.acct.expiry_time  Acct Expiry Time
        Date/Time stamp
        When this account will expire
    netlogon.acct_desc  Acct Desc
        String
        Account Description
    netlogon.acct_name  Acct Name
        String
        Account Name
    netlogon.alias_name  Alias Name
        String
        Alias Name
    netlogon.alias_rid  Alias RID
        Unsigned 32-bit integer
    netlogon.attrs  Attributes
        Unsigned 32-bit integer
        Attributes
    netlogon.audit_retention_period  Audit Retention Period
        Time duration
        Audit retention period
    netlogon.auditing_mode  Auditing Mode
        Unsigned 8-bit integer
        Auditing Mode
    netlogon.auth.data  Auth Data
        Byte array
        Auth Data
    netlogon.auth.size  Auth Size
        Unsigned 32-bit integer
        Size of AuthData in bytes
    netlogon.auth_flags  Auth Flags
        Unsigned 32-bit integer
    netlogon.authoritative  Authoritative
        Unsigned 8-bit integer
    netlogon.bad_pw_count  Bad PW Count
        Unsigned 32-bit integer
        Number of failed logins
    netlogon.bad_pw_count16  Bad PW Count
        Unsigned 16-bit integer
        Number of failed logins
    netlogon.blob  BLOB
        Byte array
        BLOB
    netlogon.blob.size  Size
        Unsigned 32-bit integer
        Size in bytes of BLOB
    netlogon.challenge  Challenge
        Byte array
        Netlogon challenge
    netlogon.change_log_size  Change Log Entry Size
        Unsigned 32-bit integer
        Size of log entry change
    netlogon.cipher_current_data  Cipher Current Data
        Byte array
    netlogon.cipher_current_set_time  Cipher Current Set Time
        Date/Time stamp
        Time when current cipher was initiated
    netlogon.cipher_len  Cipher Len
        Unsigned 32-bit integer
    netlogon.cipher_maxlen  Cipher Max Len
        Unsigned 32-bit integer
    netlogon.cipher_old_data  Cipher Old Data
        Byte array
    netlogon.cipher_old_set_time  Cipher Old Set Time
        Date/Time stamp
        Time when previous cipher was initiated
    netlogon.client.name  Client Name
        String
        Client Name
    netlogon.client.site_name  Client Site Name
        String
        Client Site Name
    netlogon.code  Code
        Unsigned 32-bit integer
        Code
    netlogon.codepage  Codepage
        Unsigned 16-bit integer
        Codepage setting for this account
    netlogon.comment  Comment
        String
        Comment
    netlogon.computer_name  Computer Name
        String
        Computer Name
    netlogon.count  Count
        Unsigned 32-bit integer
    netlogon.country  Country
        Unsigned 16-bit integer
        Country setting for this account
    netlogon.credential  Credential
        Byte array
        Netlogon credential
    netlogon.database_id  Database Id
        Unsigned 32-bit integer
        Database Id
    netlogon.db_create_time  DB Create Time
        Date/Time stamp
        Time when created
    netlogon.db_modify_time  DB Modify Time
        Date/Time stamp
        Time when last modified
    netlogon.dc.address  DC Address
        String
        DC Address
    netlogon.dc.address_type  DC Address Type
        Unsigned 32-bit integer
        DC Address Type
    netlogon.dc.name  DC Name
        String
        DC Name
    netlogon.dc.site_name  DC Site Name
        String
        DC Site Name
    netlogon.delta_type  Delta Type
        Unsigned 16-bit integer
        Delta Type
    netlogon.dir_drive  Dir Drive
        String
        Drive letter for home directory
    netlogon.dns.forest_name  DNS Forest Name
        String
        DNS Forest Name
    netlogon.dns_host  DNS Host
        String
        DNS Host
    netlogon.domain  Domain
        String
        Domain
    netlogon.domain_create_time  Domain Create Time
        Date/Time stamp
        Time when this domain was created
    netlogon.domain_modify_time  Domain Modify Time
        Date/Time stamp
        Time when this domain was last modified
    netlogon.dummy  Dummy
        String
        Dummy string
    netlogon.entries  Entries
        Unsigned 32-bit integer
    netlogon.event_audit_option  Event Audit Option
        Unsigned 32-bit integer
        Event audit option
    netlogon.flags  Flags
        Unsigned 32-bit integer
    netlogon.full_name  Full Name
        String
        Full Name
    netlogon.group_desc  Group Desc
        String
        Group Description
    netlogon.group_name  Group Name
        String
        Group Name
    netlogon.group_rid  Group RID
        Unsigned 32-bit integer
    netlogon.handle  Handle
        String
        Logon Srv Handle
    netlogon.home_dir  Home Dir
        String
        Home Directory
    netlogon.kickoff_time  Kickoff Time
        Date/Time stamp
        Time when this user will be kicked off
    netlogon.last_logoff  Last Logoff
        Unsigned 32-bit integer
        Last Logoff
    netlogon.last_logon  Last Logon
        Unsigned 32-bit integer
        Last Logon
    netlogon.len  Len
        Unsigned 32-bit integer
        Length
    netlogon.level  Level
        Unsigned 32-bit integer
        Which option of the union is represented here
    netlogon.level16  Level
        Unsigned 16-bit integer
        Which option of the union is represented here
    netlogon.lm_chal_resp  LM Chal resp
        Byte array
        Challenge response for LM authentication
    netlogon.lm_owf_pwd  LM Pwd
        Byte array
        LanManager OWF Password
    netlogon.lm_owf_pwd.encrypted  Encrypted LM Pwd
        Byte array
        Encrypted LanManager OWF Password
    netlogon.lm_pwd_present  LM PWD Present
        Unsigned 8-bit integer
        Is LanManager password present for this account?
    netlogon.logoff_time  Logoff Time
        Date/Time stamp
        Time for last time this user logged off
    netlogon.logon_attempts  Logon Attempts
        Unsigned 32-bit integer
        Number of logon attempts
    netlogon.logon_count  Logon Count
        Unsigned 32-bit integer
        Number of successful logins
    netlogon.logon_count16  Logon Count
        Unsigned 16-bit integer
        Number of successful logins
    netlogon.logon_id  Logon ID
        Unsigned 64-bit integer
        Logon ID
    netlogon.logon_script  Logon Script
        String
        Logon Script
    netlogon.logon_time  Logon Time
        Date/Time stamp
        Time for last time this user logged on
    netlogon.max_audit_event_count  Max Audit Event Count
        Unsigned 32-bit integer
        Max audit event count
    netlogon.max_log_size  Max Log Size
        Unsigned 32-bit integer
        Max Size of log
    netlogon.max_size  Max Size
        Unsigned 32-bit integer
        Max Size of database
    netlogon.max_working_set_size  Max Working Set Size
        Unsigned 32-bit integer
    netlogon.min_passwd_len  Min Password Len
        Unsigned 16-bit integer
        Minimum length of password
    netlogon.min_working_set_size  Min Working Set Size
        Unsigned 32-bit integer
    netlogon.modify_count  Modify Count
        Unsigned 64-bit integer
        How many times the object has been modified
    netlogon.neg_flags  Neg Flags
        Unsigned 32-bit integer
        Negotiation Flags
    netlogon.next_reference  Next Reference
        Unsigned 32-bit integer
    netlogon.nonpaged_pool_limit  Non-Paged Pool Limit
        Unsigned 32-bit integer
    netlogon.nt_chal_resp  NT Chal resp
        Byte array
        Challenge response for NT authentication
    netlogon.nt_owf_pwd  NT Pwd
        Byte array
        NT OWF Password
    netlogon.nt_pwd_present  NT PWD Present
        Unsigned 8-bit integer
        Is NT password present for this account?
    netlogon.num_dc  Num DCs
        Unsigned 32-bit integer
        Number of domain controllers
    netlogon.num_deltas  Num Deltas
        Unsigned 32-bit integer
        Number of SAM Deltas in array
    netlogon.num_other_groups  Num Other Groups
        Unsigned 32-bit integer
    netlogon.num_pwd_pairs  Num PWD Pairs
        Unsigned 8-bit integer
        Number of password pairs. Password history length?
    netlogon.num_rids  Num RIDs
        Unsigned 32-bit integer
        Number of RIDs
    netlogon.oem_info  OEM Info
        String
        OEM Info
    netlogon.opnum  Operation
        Unsigned 16-bit integer
        Operation
    netlogon.pac.data  Pac Data
        Byte array
        Pac Data
    netlogon.pac.size  Pac Size
        Unsigned 32-bit integer
        Size of PacData in bytes
    netlogon.page_file_limit  Page File Limit
        Unsigned 32-bit integer
    netlogon.paged_pool_limit  Paged Pool Limit
        Unsigned 32-bit integer
    netlogon.param_ctrl  Param Ctrl
        Unsigned 32-bit integer
        Param ctrl
    netlogon.parameters  Parameters
        String
        Parameters
    netlogon.passwd_history_len  Passwd History Len
        Unsigned 16-bit integer
        Length of password history
    netlogon.pdc_connection_status  PDC Connection Status
        Unsigned 32-bit integer
        PDC Connection Status
    netlogon.principal  Principal
        String
        Principal
    netlogon.priv  Priv
        Unsigned 32-bit integer
    netlogon.privilege_control  Privilege Control
        Unsigned 32-bit integer
    netlogon.privilege_entries  Privilege Entries
        Unsigned 32-bit integer
    netlogon.privilege_name  Privilege Name
        String
    netlogon.profile_path  Profile Path
        String
        Profile Path
    netlogon.pwd_can_change_time  PWD Can Change
        Date/Time stamp
        When this users password may be changed
    netlogon.pwd_expired  PWD Expired
        Unsigned 8-bit integer
        Whether this password has expired or not
    netlogon.pwd_last_set_time  PWD Last Set
        Date/Time stamp
        Last time this users password was changed
    netlogon.pwd_must_change_time  PWD Must Change
        Date/Time stamp
        When this users password must be changed
    netlogon.rc  Return code
        Unsigned 32-bit integer
        Netlogon return code
    netlogon.reference  Reference
        Unsigned 32-bit integer
    netlogon.reserved  Reserved
        Unsigned 32-bit integer
        Reserved
    netlogon.restart_state  Restart State
        Unsigned 16-bit integer
        Restart State
    netlogon.rid  User RID
        Unsigned 32-bit integer
    netlogon.sec_chn_type  Sec Chn Type
        Unsigned 16-bit integer
        Secure Channel Type
    netlogon.security_information  Security Information
        Unsigned 32-bit integer
        Security Information
    netlogon.sensitive_data  Data
        Byte array
        Sensitive Data
    netlogon.sensitive_data_flag  Sensitive Data
        Unsigned 8-bit integer
        Sensitive data flag
    netlogon.sensitive_data_len  Length
        Unsigned 32-bit integer
        Length of sensitive data
    netlogon.serial_number  Serial Number
        Unsigned 32-bit integer
    netlogon.server  Server
        String
        Server
    netlogon.site_name  Site Name
        String
        Site Name
    netlogon.sync_context  Sync Context
        Unsigned 32-bit integer
        Sync Context
    netlogon.system_flags  System Flags
        Unsigned 32-bit integer
    netlogon.tc_connection_status  TC Connection Status
        Unsigned 32-bit integer
        TC Connection Status
    netlogon.time_limit  Time Limit
        Time duration
    netlogon.timestamp  Timestamp
        Date/Time stamp
    netlogon.trusted_dc  Trusted DC
        String
        Trusted DC
    netlogon.trusted_domain  Trusted Domain
        String
        Trusted Domain Name
    netlogon.unknown.char  Unknown char
        Unsigned 8-bit integer
        Unknown char. If you know what this is, contact ethereal developers.
    netlogon.unknown.long  Unknown long
        Unsigned 32-bit integer
        Unknown long. If you know what this is, contact ethereal developers.
    netlogon.unknown.short  Unknown short
        Unsigned 16-bit integer
        Unknown short. If you know what this is, contact ethereal developers.
    netlogon.unknown.time  Unknown time
        Date/Time stamp
        Unknown time. If you know what this is, contact ethereal developers.
    netlogon.unknown_string  Unknown string
        String
        Unknown string. If you know what this is, contact ethereal developers.
    netlogon.user_flags  User Flags
        Unsigned 32-bit integer
    netlogon.user_session_key  User Session Key
        Byte array
        User Session Key
    netlogon.validation_level  Validation Level
        Unsigned 16-bit integer
        Requested level of validation
    netlogon.wkst.fqdn  Wkst FQDN
        String
        Workstation FQDN
    netlogon.wkst.name  Wkst Name
        String
        Workstation Name
    netlogon.wkst.os  Wkst OS
        String
        Workstation OS
    netlogon.wkst.site_name  Wkst Site Name
        String
        Workstation Site Name
    netlogon.wksts  Workstations
        String
        Workstations

Microsoft Registry (winreg)

    reg.access_mask  Access mask
        Unsigned 32-bit integer
        Access mask
    reg.hnd  Context handle
        Byte array
        REG policy handle
    reg.keyname  Key name
        String
        Keyname
    reg.openentry.unknown1  Unknown 1
        Unsigned 32-bit integer
        Unknown 1
    reg.openhklm.unknown1  Unknown 1
        Unsigned 16-bit integer
        Unknown 1
    reg.openhklm.unknown2  Unknown 2
        Unsigned 16-bit integer
        Unknown 2
    reg.opnum  Operation
        Unsigned 16-bit integer
        Operation
    reg.querykey.class  Class
        String
        Class
    reg.querykey.max_subkey_len  Max subkey len
        Unsigned 32-bit integer
        Max subkey len
    reg.querykey.max_valbuf_size  Max valbuf size
        Unsigned 32-bit integer
        Max valbuf size
    reg.querykey.max_valname_len  Max valnum len
        Unsigned 32-bit integer
        Max valname len
    reg.querykey.modtime  Mod time
        Date/Time stamp
        Secdesc
    reg.querykey.num_subkeys  Num subkeys
        Unsigned 32-bit integer
        Num subkeys
    reg.querykey.num_values  Num values
        Unsigned 32-bit integer
        Num values
    reg.querykey.reserved  Reserved
        Unsigned 32-bit integer
        Reserved
    reg.querykey.secdesc  Secdesc
        Unsigned 32-bit integer
        Secdesc
    reg.rc  Return code
        Unsigned 32-bit integer
        REG return code
    reg.unknown1A.unknown1  Unknown 1
        Unsigned 32-bit integer
        Unknown 1

Microsoft Security Account Manager (samr)

    nt.acct_ctrl  Acct Ctrl
        Unsigned 32-bit integer
        Acct CTRL
    nt.str.len  Length
        Unsigned 32-bit integer
        Length of string in short integers
    nt.str.max_len  Max Length
        Unsigned 32-bit integer
        Max Length of string in short integers
    nt.str.offset  Offset
        Unsigned 32-bit integer
        Offset into string in short integers
    nt.string.length  Length
        Unsigned 16-bit integer
        Length of string in bytes
    nt.string.size  Size
        Unsigned 16-bit integer
        Size of string in bytes
    samr.access  Access Mask
        Unsigned 32-bit integer
        Access
    samr.access_granted  Access Granted
        Unsigned 32-bit integer
        Access Granted
    samr.acct_desc  Account Desc
        String
        Account Description
    samr.acct_expiry_time  Acct Expiry
        Date/Time stamp
        When this user account expires
    samr.acct_name  Account Name
        String
        Name of Account
    samr.alias  Alias
        Unsigned 32-bit integer
        Alias
    samr.alias_name  Alias Name
        String
        Name of Alias
    samr.attr  Attributes
        Unsigned 32-bit integer
    samr.bad_pwd_count  Bad Pwd Count
        Unsigned 16-bit integer
        Number of bad pwd entries for this user
    samr.codepage  Codepage
        Unsigned 16-bit integer
        Codepage setting for this user
    samr.comment  Comment
        String
        Comment
    samr.count  Count
        Unsigned 32-bit integer
        Number of elements in following array
    samr.country  Country
        Unsigned 16-bit integer
        Country setting for this user
    samr.crypt_hash  Hash
        Byte array
        Encrypted Hash
    samr.crypt_password  Password
        Byte array
        Encrypted Password
    samr.dc  DC
        String
        Name of Domain Controller
    samr.divisions  Divisions
        Unsigned 16-bit integer
        Number of divisions for LOGON_HOURS
    samr.domain  Domain
        String
        Name of Domain
    samr.entries  Entries
        Unsigned 32-bit integer
        Number of entries to return
    samr.full_name  Full Name
        String
        Full Name of Account
    samr.group  Group
        Unsigned 32-bit integer
        Group
    samr.group_name  Group Name
        String
        Name of Group
    samr.hnd  Context Handle
        Byte array
    samr.home  Home
        String
        Home directory for this user
    samr.home_drive  Home Drive
        String
        Home drive for this user
    samr.index  Index
        Unsigned 32-bit integer
        Index
    samr.info_type  Info Type
        Unsigned 32-bit integer
        Information Type
    samr.kickoff_time  Kickoff Time
        Date/Time stamp
        Time when this user will be kicked off
    samr.level  Level
        Unsigned 16-bit integer
        Level requested/returned for Information
    samr.lm_change  LM Change
        Unsigned 8-bit integer
        LM Change value
    samr.lm_pwd_set  LM Pwd Set
        Unsigned 8-bit integer
        Flag indicating whether the LanManager password has been set
    samr.logoff_time  Logoff Time
        Date/Time stamp
        Time for last time this user logged off
    samr.logon_count  Logon Count
        Unsigned 16-bit integer
        Number of logons for this user
    samr.logon_time  Logon Time
        Date/Time stamp
        Time for last time this user logged on
    samr.mask  Mask
        Unsigned 32-bit integer
        Mask
    samr.max_entries  Max Entries
        Unsigned 32-bit integer
        Maximum number of entries
    samr.max_pwd_age  Max Pwd Age
        Time duration
        Maximum Password Age before it expires
    samr.min_pwd_age  Min Pwd Age
        Time duration
        Minimum Password Age before it can be changed
    samr.min_pwd_len  Min Pwd Len
        Unsigned 16-bit integer
        Minimum Password Length
    samr.nt_pwd_set  NT Pwd Set
        Unsigned 8-bit integer
        Flag indicating whether the NT password has been set
    samr.num_aliases  Num Aliases
        Unsigned 32-bit integer
        Number of aliases in this domain
    samr.num_groups  Num Groups
        Unsigned 32-bit integer
        Number of groups in this domain
    samr.num_users  Num Users
        Unsigned 32-bit integer
        Number of users in this domain
    samr.opnum  Operation
        Unsigned 16-bit integer
        Operation
    samr.parameters  Parameters
        String
        Parameters
    samr.pref_maxsize  Pref MaxSize
        Unsigned 32-bit integer
        Maximum Size of data to return
    samr.profile  Profile
        String
        Profile for this user
    samr.pwd_Expired  Expired flag
        Unsigned 8-bit integer
        Flag indicating if the password for this account has expired or not
    samr.pwd_can_change_time  PWD Can Change
        Date/Time stamp
        When this users password may be changed
    samr.pwd_history_len  Pwd History Len
        Unsigned 16-bit integer
        Password History Length
    samr.pwd_last_set_time  PWD Last Set
        Date/Time stamp
        Last time this users password was changed
    samr.pwd_must_change_time  PWD Must Change
        Date/Time stamp
        When this users password must be changed
    samr.rc  Return code
        Unsigned 32-bit integer
    samr.resume_hnd  Resume Hnd
        Unsigned 32-bit integer
        Resume handle
    samr.ret_size  Returned Size
        Unsigned 32-bit integer
        Number of returned objects in this PDU
    samr.revision  Revision
        Unsigned 64-bit integer
        Revision number for this structure
    samr.rid  Rid
        Unsigned 32-bit integer
        RID
    samr.rid.attrib  Rid Attrib
        Unsigned 32-bit integer
    samr.script  Script
        String
        Login script for this user
    samr.server  Server
        String
        Name of Server
    samr.start_idx  Start Idx
        Unsigned 32-bit integer
        Start Index for returned Information
    samr.total_size  Total Size
        Unsigned 32-bit integer
        Total size of data
    samr.type  Type
        Unsigned 32-bit integer
        Type
    samr.unknown.char  Unknown char
        Unsigned 8-bit integer
        Unknown char. If you know what this is, contact ethereal developers.
    samr.unknown.hyper  Unknown hyper
        Unsigned 64-bit integer
        Unknown hyper. If you know what this is, contact ethereal developers.
    samr.unknown.long  Unknown long
        Unsigned 32-bit integer
        Unknown long. If you know what this is, contact ethereal developers.
    samr.unknown.short  Unknown short
        Unsigned 16-bit integer
        Unknown short. If you know what this is, contact ethereal developers.
    samr.unknown_string  Unknown string
        String
        Unknown string. If you know what this is, contact ethereal developers.
    samr.unknown_time  Unknown time
        Date/Time stamp
        Unknown NT TIME, contact ethereal developers if you know what this is
    samr.workstations  Workstations
        String

Microsoft Server Service (srvsvc)

    srvsvc.  Max Raw Buf Len
        Unsigned 32-bit integer
        Max Raw Buf Len
    srvsvc.acceptdownlevelapis  Accept Downlevel APIs
        Unsigned 32-bit integer
        Accept Downlevel APIs
    srvsvc.accessalert  Access Alerts
        Unsigned 32-bit integer
        Number of access alerts
    srvsvc.activelocks  Active Locks
        Unsigned 32-bit integer
        Active Locks
    srvsvc.alerts  Alerts
        String
        Alerts
    srvsvc.alertsched  Alert Sched
        Unsigned 32-bit integer
        Alert Schedule
    srvsvc.alist_mtime  Alist mtime
        Unsigned 32-bit integer
        Alist mtime
    srvsvc.ann_delta  Announce Delta
        Unsigned 32-bit integer
        Announce Delta
    srvsvc.announce  Announce
        Unsigned 32-bit integer
        Announce
    srvsvc.auditedevents  Audited Events
        Unsigned 32-bit integer
        Number of audited events
    srvsvc.auditprofile  Audit Profile
        Unsigned 32-bit integer
        Audit Profile
    srvsvc.autopath  Autopath
        String
        Autopath
    srvsvc.chdevjobs  Char Dev Jobs
        Unsigned 32-bit integer
        Number of Char Device Jobs
    srvsvc.chdevqs  Char Devqs
        Unsigned 32-bit integer
        Number of Char Device Queues
    srvsvc.chdevs  Char Devs
        Unsigned 32-bit integer
        Number of Char Devices
    srvsvc.chrdev  Char Device
        String
        Char Device Name
    srvsvc.chrdev_opcode  Opcode
        Unsigned 32-bit integer
        Opcode to apply to the Char Device
    srvsvc.chrdev_status  Status
        Unsigned 32-bit integer
        Char Device Status
    srvsvc.chrdev_time  Time
        Unsigned 32-bit integer
        Char Device Time?
    srvsvc.chrdevq  Device Queue
        String
        Char Device Queue Name
    srvsvc.chrqdev_numahead  Num Ahead
        Unsigned 32-bit integer
    srvsvc.chrqdev_numusers  Num Users
        Unsigned 32-bit integer
        Char QDevice Number Of Users
    srvsvc.chrqdev_pri  Priority
        Unsigned 32-bit integer
        Char QDevice Priority
    srvsvc.client.type  Client Type
        String
        Client Type
    srvsvc.comment  Comment
        String
        Comment
    srvsvc.computer  Computer
        String
        Computer Name
    srvsvc.con_id  Connection ID
        Unsigned 32-bit integer
        Connection ID
    srvsvc.con_num_opens  Num Opens
        Unsigned 32-bit integer
        Num Opens
    srvsvc.con_time  Connection Time
        Unsigned 32-bit integer
        Connection Time
    srvsvc.con_type  Connection Type
        Unsigned 32-bit integer
        Connection Type
    srvsvc.connections  Connections
        Unsigned 32-bit integer
        Number of Connections
    srvsvc.cur_uses  Current Uses
        Unsigned 32-bit integer
        Current Uses
    srvsvc.disc  Disc
        Unsigned 32-bit integer
    srvsvc.disk_name  Disk Name
        String
        Disk Name
    srvsvc.disk_name_len  Disk Name Length
        Unsigned 32-bit integer
        Length of Disk Name
    srvsvc.diskalert  Disk Alerts
        Unsigned 32-bit integer
        Number of disk alerts
    srvsvc.diskspacetreshold  Diskspace Treshold
        Unsigned 32-bit integer
        Diskspace Treshold
    srvsvc.domain  Domain
        String
        Domain
    srvsvc.emulated_server  Emulated Server
        String
        Emulated Server Name
    srvsvc.enablefcbopens  Enable FCB Opens
        Unsigned 32-bit integer
        Enable FCB Opens
    srvsvc.enableforcedlogoff  Enable Forced Logoff
        Unsigned 32-bit integer
        Enable Forced Logoff
    srvsvc.enableoplockforceclose  Enable Oplock Force Close
        Unsigned 32-bit integer
        Enable Oplock Force Close
    srvsvc.enableoplocks  Enable Oplocks
        Unsigned 32-bit integer
        Enable Oplocks
    srvsvc.enableraw  Enable RAW
        Unsigned 32-bit integer
        Enable RAW
    srvsvc.enablesharednetdrives  Enable Shared Net Drives
        Unsigned 32-bit integer
        Enable Shared Net Drives
    srvsvc.enablesoftcompat  Enable Soft Compat
        Unsigned 32-bit integer
        Enable Soft Compat
    srvsvc.enum_hnd  Enumeration handle
        Byte array
        Enumeration Handle
    srvsvc.erroralert  Error Alerts
        Unsigned 32-bit integer
        Number of error alerts
    srvsvc.errortreshold  Error Treshold
        Unsigned 32-bit integer
        Error Treshold
    srvsvc.file_id  File ID
        Unsigned 32-bit integer
        File ID
    srvsvc.file_num_locks  Num Locks
        Unsigned 32-bit integer
        Number of locks for file
    srvsvc.glist_mtime  Glist mtime
        Unsigned 32-bit integer
        Glist mtime
    srvsvc.guest  Guest Account
        String
        Guest Account
    srvsvc.hidden  Hidden
        Unsigned 32-bit integer
        Hidden
    srvsvc.hnd  Context Handle
        Byte array
        Context Handle
    srvsvc.info.platform_id  Platform ID
        Unsigned 32-bit integer
        Platform ID
    srvsvc.initconntable  Init Connection Table
        Unsigned 32-bit integer
        Init Connection Table
    srvsvc.initfiletable  Init File Table
        Unsigned 32-bit integer
        Init File Table
    srvsvc.initsearchtable  Init Search Table
        Unsigned 32-bit integer
        Init Search Table
    srvsvc.initsesstable  Init Session Table
        Unsigned 32-bit integer
        Init Session Table
    srvsvc.initworkitems  Init Workitems
        Unsigned 32-bit integer
        Workitems
    srvsvc.irpstacksize  Irp Stack Size
        Unsigned 32-bit integer
        Irp Stack Size
    srvsvc.lanmask  LANMask
        Unsigned 32-bit integer
        LANMask
    srvsvc.licences  Licences
        Unsigned 32-bit integer
        Licences
    srvsvc.linkinfovalidtime  Link Info Valid Time
        Unsigned 32-bit integer
        Link Info Valid Time
    srvsvc.lmannounce  LM Announce
        Unsigned 32-bit integer
        LM Announce
    srvsvc.logonalert  Logon Alerts
        Unsigned 32-bit integer
        Number of logon alerts
    srvsvc.max_uses  Max Uses
        Unsigned 32-bit integer
        Max Uses
    srvsvc.maxaudits  Max Audits
        Unsigned 32-bit integer
        Maximum number of audits
    srvsvc.maxcopyreadlen  Max Copy Read Len
        Unsigned 32-bit integer
        Max Copy Read Len
    srvsvc.maxcopywritelen  Max Copy Write Len
        Unsigned 32-bit integer
        Max Copy Write Len
    srvsvc.maxfreeconnections  Max Free Conenctions
        Unsigned 32-bit integer
        Max Free Connections
    srvsvc.maxkeepcomplsearch  Max Keep Compl Search
        Unsigned 32-bit integer
        Max Keep Compl Search
    srvsvc.maxkeepsearch  Max Keep Search
        Unsigned 32-bit integer
        Max Keep Search
    srvsvc.maxlinkdelay  Max Link Delay
        Unsigned 32-bit integer
        Max Link Delay
    srvsvc.maxmpxct  MaxMpxCt
        Unsigned 32-bit integer
        MaxMpxCt
    srvsvc.maxnonpagedmemoryusage  Max Non-Paged Memory Usage
        Unsigned 32-bit integer
        Max Non-Paged Memory Usage
    srvsvc.maxpagedmemoryusage  Max Paged Memory Usage
        Unsigned 32-bit integer
        Max Paged Memory Usage
    srvsvc.maxworkitemidletime  Max Workitem Idle Time
        Unsigned 32-bit integer
        Max Workitem Idle Time
    srvsvc.maxworkitems  Max Workitems
        Unsigned 32-bit integer
        Workitems
    srvsvc.minfreeconnections  Min Free Conenctions
        Unsigned 32-bit integer
        Min Free Connections
    srvsvc.minfreeworkitems  Min Free Workitems
        Unsigned 32-bit integer
        Min Free Workitems
    srvsvc.minkeepcomplsearch  Min Keep Compl Search
        Unsigned 32-bit integer
        Min Keep Compl Search
    srvsvc.minkeepsearch  Min Keep Search
        Unsigned 32-bit integer
        Min Keep Search
    srvsvc.minlinkthroughput  Min Link Throughput
        Unsigned 32-bit integer
        Min Link Throughput
    srvsvc.minrcvqueue  Min Rcv Queue
        Unsigned 32-bit integer
        Min Rcv Queue
    srvsvc.netioalert  Net I/O Alerts
        Unsigned 32-bit integer
        Number of Net I/O Alerts
    srvsvc.networkerrortreshold  Network Error Treshold
        Unsigned 32-bit integer
        Network Error Treshold
    srvsvc.num_admins  Num Admins
        Unsigned 32-bit integer
        Number of Administrators
    srvsvc.numbigbufs  Num Big Bufs
        Unsigned 32-bit integer
        Number of big buffers
    srvsvc.numblockthreads  Num Block Threads
        Unsigned 32-bit integer
        Num Block Threads
    srvsvc.numfiletasks  Num Filetasks
        Unsigned 32-bit integer
        Number of filetasks
    srvsvc.openfiles  Open Files
        Unsigned 32-bit integer
        Open Files
    srvsvc.opensearch  Open Search
        Unsigned 32-bit integer
        Open Search
    srvsvc.oplockbreakresponsewait  Oplock Break Response wait
        Unsigned 32-bit integer
        Oplock Break response Wait
    srvsvc.oplockbreakwait  Oplock Break Wait
        Unsigned 32-bit integer
        Oplock Break Wait
    srvsvc.opnum  Operation
        Unsigned 16-bit integer
        Operation
    srvsvc.outbuflen  OutBufLen
        Unsigned 32-bit integer
        Output Buffer Length
    srvsvc.parm_error  Parameter Error
        Unsigned 32-bit integer
        Parameter Error
    srvsvc.path  Path
        String
        Path
    srvsvc.path_flags  Flags
        Unsigned 32-bit integer
        Path flags
    srvsvc.path_len  Len
        Unsigned 32-bit integer
        Path len
    srvsvc.path_type  Type
        Unsigned 32-bit integer
        Path type
    srvsvc.perm  Permissions
        Unsigned 32-bit integer
        Permissions
    srvsvc.preferred_len  Preferred length
        Unsigned 32-bit integer
        Preferred Length
    srvsvc.prefix  Prefix
        String
        Path Prefix
    srvsvc.qualifier  Qualifier
        String
        Connection Qualifier
    srvsvc.rawworkitems  Raw Workitems
        Unsigned 32-bit integer
        Workitems
    srvsvc.rc  Return code
        Unsigned 32-bit integer
        Return Code
    srvsvc.reserved  Reserved
        Unsigned 32-bit integer
        Announce
    srvsvc.scavqosinfoupdatetime  Scav QoS Info Update Time
        Unsigned 32-bit integer
        Scav QoS Info Update Time
    srvsvc.scavtimeout  Scav Timeout
        Unsigned 32-bit integer
        Scav Timeout
    srvsvc.security  Security
        Unsigned 32-bit integer
        Security
    srvsvc.server  Server
        String
        Server Name
    srvsvc.server.type  Server Type
        Unsigned 32-bit integer
        Server Type
    srvsvc.server_stat.avresponse  Avresponse
        Unsigned 32-bit integer
    srvsvc.server_stat.bigbufneed  Big Buf Need
        Unsigned 32-bit integer
        Number of big buffers needed?
    srvsvc.server_stat.bytesrcvd  Bytes Rcvd
        Unsigned 64-bit integer
        Number of bytes received
    srvsvc.server_stat.bytessent  Bytes Sent
        Unsigned 64-bit integer
        Number of bytes sent
    srvsvc.server_stat.devopens  Devopens
        Unsigned 32-bit integer
        Number of devopens
    srvsvc.server_stat.fopens  Fopens
        Unsigned 32-bit integer
        Number of fopens
    srvsvc.server_stat.jobsqueued  Jobs Queued
        Unsigned 32-bit integer
        Number of jobs queued
    srvsvc.server_stat.permerrors  Permerrors
        Unsigned 32-bit integer
        Number of permission errors
    srvsvc.server_stat.pwerrors  Pwerrors
        Unsigned 32-bit integer
        Number of password errors
    srvsvc.server_stat.reqbufneed  Req Buf Need
        Unsigned 32-bit integer
        Number of request buffers needed?
    srvsvc.server_stat.serrorout  Serrorout
        Unsigned 32-bit integer
        Number of serrorout
    srvsvc.server_stat.sopens  Sopens
        Unsigned 32-bit integer
        Number of sopens
    srvsvc.server_stat.start  Start
        Unsigned 32-bit integer
    srvsvc.server_stat.stimeouts  stimeouts
        Unsigned 32-bit integer
        Number of stimeouts
    srvsvc.server_stat.syserrors  Syserrors
        Unsigned 32-bit integer
        Number of system errors
    srvsvc.service  Service
        String
        Service
    srvsvc.service_bits  Service Bits
        Unsigned 32-bit integer
        Service Bits
    srvsvc.service_bits_of_interest  Service Bits Of Interest
        Unsigned 32-bit integer
        Service Bits Of Interest
    srvsvc.service_options  Options
        Unsigned 32-bit integer
        Service Options
    srvsvc.session  Session
        String
        Session Name
    srvsvc.session.idle_time  Idle Time
        Unsigned 32-bit integer
        Idle Time
    srvsvc.session.num_opens  Num Opens
        Unsigned 32-bit integer
        Num Opens
    srvsvc.session.time  Time
        Unsigned 32-bit integer
        Time
    srvsvc.session.user_flags  User Flags
        Unsigned 32-bit integer
        User Flags
    srvsvc.sessopens  Sessions Open
        Unsigned 32-bit integer
        Sessions Open
    srvsvc.sessreqs  Sessions Reqs
        Unsigned 32-bit integer
        Sessions Requests
    srvsvc.sessvcs  Sessions VCs
        Unsigned 32-bit integer
        Sessions VCs
    srvsvc.share  Share
        String
        Share
    srvsvc.share.num_entries  Number of entries
        Unsigned 32-bit integer
        Number of Entries
    srvsvc.share_passwd  Share Passwd
        String
        Password for this share
    srvsvc.share_type  Share Type
        Unsigned 32-bit integer
        Share Type
    srvsvc.shares  Shares
        Unsigned 32-bit integer
        Number of Shares
    srvsvc.sizreqbufs  Siz Req Bufs
        Unsigned 32-bit integer
    srvsvc.srvheuristics  Server Heuristics
        String
        Server Heuristics
    srvsvc.threadcountadd  Thread Count Add
        Unsigned 32-bit integer
        Thread Count Add
    srvsvc.threadpriority  Thread Priority
        Unsigned 32-bit integer
        Thread Priority
    srvsvc.timesource  Timesource
        Unsigned 32-bit integer
        Timesource
    srvsvc.tod.day  Day
        Unsigned 32-bit integer
    srvsvc.tod.elapsed  Elapsed
        Unsigned 32-bit integer
    srvsvc.tod.hours  Hours
        Unsigned 32-bit integer
    srvsvc.tod.hunds  Hunds
        Unsigned 32-bit integer
    srvsvc.tod.mins  Mins
        Unsigned 32-bit integer
    srvsvc.tod.month  Month
        Unsigned 32-bit integer
    srvsvc.tod.msecs  msecs
        Unsigned 32-bit integer
    srvsvc.tod.secs  Secs
        Unsigned 32-bit integer
    srvsvc.tod.timezone  Timezone
        Unsigned 32-bit integer
    srvsvc.tod.tinterval  Tinterval
        Unsigned 32-bit integer
    srvsvc.tod.weekday  Weekday
        Unsigned 32-bit integer
    srvsvc.tod.year  Year
        Unsigned 32-bit integer
    srvsvc.transport  Transport
        String
        Transport Name
    srvsvc.transport.address  Address
        Byte array
        Address of transport
    srvsvc.transport.addresslen  Address Len
        Unsigned 32-bit integer
        Length of transport address
    srvsvc.transport.name  Name
        String
        Name of transport
    srvsvc.transport.networkaddress  Network Address
        String
        Network address for transport
    srvsvc.transport.num_vcs  VCs
        Unsigned 32-bit integer
        Number of VCs for this transport
    srvsvc.ulist_mtime  Ulist mtime
        Unsigned 32-bit integer
        Ulist mtime
    srvsvc.update_immediately  Update Immediately
        Unsigned 32-bit integer
        Update Immediately
    srvsvc.user  User
        String
        User Name
    srvsvc.user_path  User Path
        String
        User Path
    srvsvc.users  Users
        Unsigned 32-bit integer
        User Count
    srvsvc.version.major  Major Version
        Unsigned 32-bit integer
        Major Version
    srvsvc.version.minor  Minor Version
        Unsigned 32-bit integer
        Minor Version
    srvsvc.xactmemsize  Xact Mem Size
        Unsigned 32-bit integer
        Xact Mem Size
    svrsvc.info_level  Info Level
        Unsigned 32-bit integer
        Info Level

Microsoft Spool Subsystem (spoolss)

    spoolss.Datatype  Datatype
        String
        Datatype
    spoolss.addform.level  Level
        Unsigned 32-bit integer
        Level
    spoolss.architecture  Architecture name
        String
        Architecture name
    spoolss.buffer.data  Buffer data
        Byte array
        Contents of buffer
    spoolss.buffer.size  Buffer size
        Unsigned 32-bit integer
        Size of buffer
    spoolss.clientmajorversion  Client major version
        Unsigned 32-bit integer
        Client printer driver major version
    spoolss.clientminorversion  Client minor version
        Unsigned 32-bit integer
        Client printer driver minor version
    spoolss.configfile  Config file
        String
        Printer name
    spoolss.datafile  Data file
        String
        Data file
    spoolss.defaultdatatype  Default data type
        String
        Default data type
    spoolss.dependentfiles  Dependent files
        String
        Dependent files
    spoolss.document  Document name
        String
        Document name
    spoolss.drivername  Driver name
        String
        Driver name
    spoolss.driverpath  Driver path
        String
        Driver path
    spoolss.driverversion  Driver version
        Unsigned 32-bit integer
        Printer name
    spoolss.enumforms.num  Num
        Unsigned 32-bit integer
        Num
    spoolss.enumjobs.firstjob  First job
        Unsigned 32-bit integer
        Index of first job to return
    spoolss.enumjobs.level  Info level
        Unsigned 32-bit integer
        Info level
    spoolss.enumjobs.numjobs  Num jobs
        Unsigned 32-bit integer
        Number of jobs to return
    spoolss.enumprinterdata.data_needed  Data size needed
        Unsigned 32-bit integer
        Buffer size needed for printerdata data
    spoolss.enumprinterdata.data_offered  Data size offered
        Unsigned 32-bit integer
        Buffer size offered for printerdata data
    spoolss.enumprinterdata.index  Enum index
        Unsigned 32-bit integer
        Index for start of enumeration
    spoolss.enumprinterdata.value_needed  Value size needed
        Unsigned 32-bit integer
        Buffer size needed for printerdata value
    spoolss.enumprinterdata.value_offered  Value size offered
        Unsigned 32-bit integer
        Buffer size offered for printerdata value
    spoolss.form.flags  Flags
        Unsigned 32-bit integer
        Flags
    spoolss.form.height  Height
        Unsigned 32-bit integer
        Height
    spoolss.form.horiz  Horizontal
        Unsigned 32-bit integer
        Horizontal
    spoolss.form.left  Left margin
        Unsigned 32-bit integer
        Left
    spoolss.form.level  Level
        Unsigned 32-bit integer
        Level
    spoolss.form.name  Name
        String
        Name
    spoolss.form.top  Top
        Unsigned 32-bit integer
        Top
    spoolss.form.unknown  Unknown
        Unsigned 32-bit integer
        Unknown
    spoolss.form.vert  Vertical
        Unsigned 32-bit integer
        Vertical
    spoolss.form.width  Width
        Unsigned 32-bit integer
        Width
    spoolss.getform.level  Level
        Unsigned 32-bit integer
        Level
    spoolss.helpfile  Help file
        String
        Help file
    spoolss.hnd  Context handle
        Byte array
        SPOOLSS policy handle
    spoolss.job.id  Job ID
        Unsigned 32-bit integer
        Job identification number
    spoolss.job.pagesprinted  Job pages printed
        Unsigned 32-bit integer
        Job identification number
    spoolss.job.position  Job position
        Unsigned 32-bit integer
        Job position
    spoolss.job.priority  Job priority
        Unsigned 32-bit integer
        Job priority
    spoolss.job.status  Job status
        Unsigned 32-bit integer
        Job status
    spoolss.job.status.blocked  Blocked
        Boolean
        Blocked
    spoolss.job.status.deleted  Deleted
        Boolean
        Deleted
    spoolss.job.status.deleting  Deleting
        Boolean
        Deleting
    spoolss.job.status.error  Error
        Boolean
        Error
    spoolss.job.status.offline  Offline
        Boolean
        Offline
    spoolss.job.status.paperout  Paperout
        Boolean
        Paperout
    spoolss.job.status.paused  Paused
        Boolean
        Paused
    spoolss.job.status.printed  Printed
        Boolean
        Printed
    spoolss.job.status.printing  Printing
        Boolean
        Printing
    spoolss.job.status.spooling  Spooling
        Boolean
        Spooling
    spoolss.job.status.user_intervention  User intervention
        Boolean
        User intervention
    spoolss.job.totalpages  Job total pages
        Unsigned 32-bit integer
        Job total pages
    spoolss.monitorname  Monitor name
        String
        Monitor name
    spoolss.needed  Needed
        Unsigned 32-bit integer
        Size of buffer required for request
    spoolss.notify_field  Field
        Unsigned 16-bit integer
        Field
    spoolss.notify_info.count  Count
        Unsigned 32-bit integer
        Count
    spoolss.notify_info.flags  Flags
        Unsigned 32-bit integer
        Flags
    spoolss.notify_info.version  Version
        Unsigned 32-bit integer
        Version
    spoolss.notify_info_data.buffer  Buffer
        Unsigned 32-bit integer
        Buffer
    spoolss.notify_info_data.buffer.data  Buffer data
        Byte array
        Buffer data
    spoolss.notify_info_data.buffer.len  Buffer length
        Unsigned 32-bit integer
        Buffer length
    spoolss.notify_info_data.bufsize  Buffer size
        Unsigned 32-bit integer
        Buffer size
    spoolss.notify_info_data.count  Count
        Unsigned 32-bit integer
        Count
    spoolss.notify_info_data.jobid  Job Id
        Unsigned 32-bit integer
        Job Id
    spoolss.notify_info_data.type  Type
        Unsigned 16-bit integer
        Type
    spoolss.notify_info_data.value1  Value1
        Unsigned 32-bit integer
        Value1
    spoolss.notify_info_data.value2  Value2
        Unsigned 32-bit integer
        Value2
    spoolss.notify_option.count  Count
        Unsigned 32-bit integer
        Count
    spoolss.notify_option.reserved1  Reserved1
        Unsigned 16-bit integer
        Reserved1
    spoolss.notify_option.reserved2  Reserved2
        Unsigned 32-bit integer
        Reserved2
    spoolss.notify_option.reserved3  Reserved3
        Unsigned 32-bit integer
        Reserved3
    spoolss.notify_option.type  Type
        Unsigned 16-bit integer
        Type
    spoolss.notify_option_data.count  Count
        Unsigned 32-bit integer
        Count
    spoolss.notify_options.count  Count
        Unsigned 32-bit integer
        Count
    spoolss.notify_options.flags  Flags
        Unsigned 32-bit integer
        Flags
    spoolss.notify_options.version  Version
        Unsigned 32-bit integer
        Version
    spoolss.offered  Offered
        Unsigned 32-bit integer
        Size of buffer offered in this request
    spoolss.opnum  Operation
        Unsigned 16-bit integer
        Operation
    spoolss.outputfile  Output file
        String
        Output File
    spoolss.printer_attributes  Attributes
        Unsigned 32-bit integer
        Attributes
    spoolss.printer_attributes.default  Default (9x/ME only)
        Boolean
        Default
    spoolss.printer_attributes.direct  Direct
        Boolean
        Direct
    spoolss.printer_attributes.do_complete_first  Do complete first
        Boolean
        Do complete first
    spoolss.printer_attributes.enable_bidi  Enable bidi (9x/ME only)
        Boolean
        Enable bidi
    spoolss.printer_attributes.enable_devq  Enable devq
        Boolean
        Enable evq
    spoolss.printer_attributes.hidden  Hidden
        Boolean
        Hidden
    spoolss.printer_attributes.keep_printed_jobs  Keep printed jobs
        Boolean
        Keep printed jobs
    spoolss.printer_attributes.local  Local
        Boolean
        Local
    spoolss.printer_attributes.network  Network
        Boolean
        Network
    spoolss.printer_attributes.published  Published
        Boolean
        Published
    spoolss.printer_attributes.queued  Queued
        Boolean
        Queued
    spoolss.printer_attributes.raw_only  Raw only
        Boolean
        Raw only
    spoolss.printer_attributes.shared  Shared
        Boolean
        Shared
    spoolss.printer_attributes.work_offline  Work offline (9x/ME only)
        Boolean
        Work offline
    spoolss.printer_local  Printer local
        Unsigned 32-bit integer
        Printer local
    spoolss.printer_status  Status
        Unsigned 32-bit integer
        Status
    spoolss.printerdata.data  Data
        Byte array
        Data
    spoolss.printerdata.size  Size
        Unsigned 32-bit integer
        Size
    spoolss.printerdata.type  Printer data type
        Unsigned 32-bit integer
        Printer data type
    spoolss.printerdata.value  Printer data value
        String
        Printer data value
    spoolss.printername  Printer name
        String
        Printer name
    spoolss.rc  Return code
        Unsigned 32-bit integer
        SPOOLSS return code
    spoolss.relstr.offset  Relative string offset
        Unsigned 32-bit integer
        Offset of relative string data
    spoolss.replyopenprinter.unk0  Unknown 0
        Unsigned 32-bit integer
        Unknown 0
    spoolss.replyopenprinter.unk1  Unknown 1
        Unsigned 32-bit integer
        Unknown 1
    spoolss.returned  Returned
        Unsigned 32-bit integer
        Number of items returned
    spoolss.rffpcnex.flags  RFFPCNEX flags
        Unsigned 32-bit integer
        RFFPCNEX flags
    spoolss.rffpcnex.flags.add_driver  Add driver
        Boolean
        Add driver
    spoolss.rffpcnex.flags.add_form  Add form
        Boolean
        Add form
    spoolss.rffpcnex.flags.add_job  Add job
        Boolean
        Add job
    spoolss.rffpcnex.flags.add_port  Add port
        Boolean
        Add port
    spoolss.rffpcnex.flags.add_printer  Add printer
        Boolean
        Add printer
    spoolss.rffpcnex.flags.add_processor  Add processor
        Boolean
        Add processor
    spoolss.rffpcnex.flags.configure_port  Configure port
        Boolean
        Configure port
    spoolss.rffpcnex.flags.delete_driver  Delete driver
        Boolean
        Delete driver
    spoolss.rffpcnex.flags.delete_form  Delete form
        Boolean
        Delete form
    spoolss.rffpcnex.flags.delete_job  Delete job
        Boolean
        Delete job
    spoolss.rffpcnex.flags.delete_port  Delete port
        Boolean
        Delete port
    spoolss.rffpcnex.flags.delete_printer  Delete printer
        Boolean
        Delete printer
    spoolss.rffpcnex.flags.delete_processor  Delete processor
        Boolean
        Delete processor
    spoolss.rffpcnex.flags.failed_connection_printer  Failed printer connection
        Boolean
        Failed printer connection
    spoolss.rffpcnex.flags.set_driver  Set driver
        Boolean
        Set driver
    spoolss.rffpcnex.flags.set_form  Set form
        Boolean
        Set form
    spoolss.rffpcnex.flags.set_job  Set job
        Boolean
        Set job
    spoolss.rffpcnex.flags.set_printer  Set printer
        Boolean
        Set printer
    spoolss.rffpcnex.flags.timeout  Timeout
        Boolean
        Timeout
    spoolss.rffpcnex.flags.write_job  Write job
        Boolean
        Write job
    spoolss.rffpcnex.options  Options
        Unsigned 32-bit integer
        RFFPCNEX options
    spoolss.routerreplyprinter.changeid  Change id
        Unsigned 32-bit integer
        Change id
    spoolss.routerreplyprinter.condition  Condition
        Unsigned 32-bit integer
        Condition
    spoolss.routerreplyprinter.unknown1  Unknown1
        Unsigned 32-bit integer
        Unknown1
    spoolss.rrpcn.changehigh  Change high
        Unsigned 32-bit integer
        Change high
    spoolss.rrpcn.changelow  Change low
        Unsigned 32-bit integer
        Change low
    spoolss.rrpcn.unk0  Unknown 0
        Unsigned 32-bit integer
        Unknown 0
    spoolss.rrpcn.unk1  Unknown 1
        Unsigned 32-bit integer
        Unknown 1
    spoolss.servermajorversion  Server major version
        Unsigned 32-bit integer
        Server printer driver major version
    spoolss.serverminorversion  Server minor version
        Unsigned 32-bit integer
        Server printer driver minor version
    spoolss.servername  Server name
        String
        Server name
    spoolss.setform.level  Level
        Unsigned 32-bit integer
        Level
    spoolss.setjob.cmd  Set job command
        Unsigned 32-bit integer
        Printer data name
    spoolss.setprinter_cmd  Command
        Unsigned 32-bit integer
        Command
    spoolss.textstatus  Text status
        String
        Text status
    spoolss.time.day  Day
        Unsigned 32-bit integer
        Day
    spoolss.time.dow  Day of week
        Unsigned 32-bit integer
        Day of week
    spoolss.time.hour  Hour
        Unsigned 32-bit integer
        Hour
    spoolss.time.minute  Minute
        Unsigned 32-bit integer
        Minute
    spoolss.time.month  Month
        Unsigned 32-bit integer
        Month
    spoolss.time.msec  Millisecond
        Unsigned 32-bit integer
        Millisecond
    spoolss.time.second  Second
        Unsigned 32-bit integer
        Second
    spoolss.time.year  Year
        Unsigned 32-bit integer
        Year
    spoolss.username  User name
        String
        User name
    spoolss.writeprinter.numwritten  Num written
        Unsigned 32-bit integer
        Number of bytes written

Microsoft Telephony API Service (tapi)

    tapi.hnd  Context Handle
        Byte array
        Context handle
    tapi.rc  Return code
        Unsigned 32-bit integer
        TAPI return code
    tapi.unknown.bytes  Unknown bytes
        Byte array
        Unknown bytes. If you know what this is, contact ethereal developers.
    tapi.unknown.long  Unknown long
        Unsigned 32-bit integer
        Unknown long. If you know what this is, contact ethereal developers.
    tapi.unknown.string  Unknown string
        String
        Unknown string. If you know what this is, contact ethereal developers.

Microsoft Windows Browser Protocol (browser)

    browser.backup.count  Backup List Requested Count
        Unsigned 8-bit integer
        Backup list requested count
    browser.backup.server  Backup Server
        String
        Backup Server Name
    browser.backup.token  Backup Request Token
        Unsigned 32-bit integer
        Backup requested/response token
    browser.browser_to_promote  Browser to Promote
        String
        Browser to Promote
    browser.command  Command
        Unsigned 8-bit integer
        Browse command opcode
    browser.comment  Host Comment
        String
        Server Comment
    browser.election.criteria  Election Criteria
        Unsigned 32-bit integer
        Election Criteria
    browser.election.desire  Election Desire
        Unsigned 8-bit integer
        Election Desire
    browser.election.desire.backup  Backup
        Boolean
        Is this a backup server
    browser.election.desire.domain_master  Domain Master
        Boolean
        Is this a domain master
    browser.election.desire.master  Master
        Boolean
        Is this a master server
    browser.election.desire.nt  NT
        Boolean
        Is this a NT server
    browser.election.desire.standby  Standby
        Boolean
        Is this a standby server?
    browser.election.desire.wins  WINS
        Boolean
        Is this a WINS server
    browser.election.os  Election OS
        Unsigned 8-bit integer
        Election OS
    browser.election.os.nts  NT Server
        Boolean
        Is this a NT Server?
    browser.election.os.ntw  NT Workstation
        Boolean
        Is this a NT Workstation?
    browser.election.os.wfw  WfW
        Boolean
        Is this a WfW host?
    browser.election.revision  Election Revision
        Unsigned 16-bit integer
        Election Revision
    browser.election.version  Election Version
        Unsigned 8-bit integer
        Election Version
    browser.mb_server  Master Browser Server Name
        String
        BROWSE Master Browser Server Name
    browser.os_major  OS Major Version
        Unsigned 8-bit integer
        Operating System Major Version
    browser.os_minor  OS Minor Version
        Unsigned 8-bit integer
        Operating System Minor Version
    browser.period  Update Periodicity
        Unsigned 32-bit integer
        Update Periodicity in ms
    browser.proto_major  Browser Protocol Major Version
        Unsigned 8-bit integer
        Browser Protocol Major Version
    browser.proto_minor  Browser Protocol Minor Version
        Unsigned 8-bit integer
        Browser Protocol Minor Version
    browser.response_computer_name  Response Computer Name
        String
        Response Computer Name
    browser.server  Server Name
        String
        BROWSE Server Name
    browser.server_type  Server Type
        Unsigned 32-bit integer
        Server Type Flags
    browser.server_type.apple  Apple
        Boolean
        Is This An Apple Server ?
    browser.server_type.backup_controller  Backup Controller
        Boolean
        Is This A Backup Domain Controller?
    browser.server_type.browser.backup  Backup Browser
        Boolean
        Is This A Backup Browser?
    browser.server_type.browser.domain_master  Domain Master Browser
        Boolean
        Is This A Domain Master Browser?
    browser.server_type.browser.master  Master Browser
        Boolean
        Is This A Master Browser?
    browser.server_type.browser.potential  Potential Browser
        Boolean
        Is This A Potential Browser?
    browser.server_type.dialin  Dialin
        Boolean
        Is This A Dialin Server?
    browser.server_type.domain_controller  Domain Controller
        Boolean
        Is This A Domain Controller?
    browser.server_type.domainenum  Domain Enum
        Boolean
        Is This A Domain Enum request?
    browser.server_type.local  Local
        Boolean
        Is This A Local List Only request?
    browser.server_type.member  Member
        Boolean
        Is This A Domain Member Server?
    browser.server_type.novell  Novell
        Boolean
        Is This A Novell Server?
    browser.server_type.nts  NT Server
        Boolean
        Is This A NT Server?
    browser.server_type.ntw  NT Workstation
        Boolean
        Is This A NT Workstation?
    browser.server_type.osf  OSF
        Boolean
        Is This An OSF server ?
    browser.server_type.print  Print
        Boolean
        Is This A Print Server?
    browser.server_type.server  Server
        Boolean
        Is This A Server?
    browser.server_type.sql  SQL
        Boolean
        Is This A SQL Server?
    browser.server_type.time  Time Source
        Boolean
        Is This A Time Source?
    browser.server_type.vms  VMS
        Boolean
        Is This A VMS Server?
    browser.server_type.w95  Windows 95+
        Boolean
        Is This A Windows 95 or above server?
    browser.server_type.wfw  WfW
        Boolean
        Is This A Windows For Workgroups Server?
    browser.server_type.workstation  Workstation
        Boolean
        Is This A Workstation?
    browser.server_type.xenix  Xenix
        Boolean
        Is This A Xenix Server?
    browser.sig  Signature
        Unsigned 16-bit integer
        Signature Constant
    browser.unused  Unused flags
        Unsigned 8-bit integer
        Unused/unknown flags
    browser.update_count  Update Count
        Unsigned 8-bit integer
        Browse Update Count
    browser.uptime  Uptime
        Unsigned 32-bit integer
        Server uptime in ms

Microsoft Windows Lanman Remote API Protocol (lanman)

    lanman.aux_data_desc  Auxiliary Data Descriptor
        String
        LANMAN Auxiliary Data Descriptor
    lanman.available_bytes  Available Bytes
        Unsigned 16-bit integer
        LANMAN Number of Available Bytes
    lanman.available_count  Available Entries
        Unsigned 16-bit integer
        LANMAN Number of Available Entries
    lanman.bad_pw_count  Bad Password Count
        Unsigned 16-bit integer
        LANMAN Number of incorrect passwords entered since last successful login
    lanman.code_page  Code Page
        Unsigned 16-bit integer
        LANMAN Code Page
    lanman.comment  Comment
        String
        LANMAN Comment
    lanman.computer_name  Computer Name
        String
        LANMAN Computer Name
    lanman.continuation_from  Continuation from message in frame
        Unsigned 32-bit integer
        This is a LANMAN continuation from the message in the frame in question
    lanman.convert  Convert
        Unsigned 16-bit integer
        LANMAN Convert
    lanman.country_code  Country Code
        Unsigned 16-bit integer
        LANMAN Country Code
    lanman.current_time  Current Date/Time
        Date/Time stamp
        LANMAN Current date and time, in seconds since 00:00:00, January 1, 1970
    lanman.day  Day
        Unsigned 8-bit integer
        LANMAN Current day
    lanman.duration  Duration of Session
        Time duration
        LANMAN Number of seconds the user was logged on
    lanman.entry_count  Entry Count
        Unsigned 16-bit integer
        LANMAN Number of Entries
    lanman.enumeration_domain  Enumeration Domain
        String
        LANMAN Domain in which to enumerate servers
    lanman.full_name  Full Name
        String
        LANMAN Full Name
    lanman.function_code  Function Code
        Unsigned 16-bit integer
        LANMAN Function Code/Command
    lanman.group_name  Group Name
        String
        LANMAN Group Name
    lanman.homedir  Home Directory
        String
        LANMAN Home Directory
    lanman.hour  Hour
        Unsigned 8-bit integer
        LANMAN Current hour
    lanman.hundredths  Hundredths of a second
        Unsigned 8-bit integer
        LANMAN Current hundredths of a second
    lanman.kickoff_time  Kickoff Date/Time
        Date/Time stamp
        LANMAN Date and time when user will be logged off
    lanman.last_logoff  Last Logoff Date/Time
        Date/Time stamp
        LANMAN Date and time of last logoff
    lanman.last_logon  Last Logon Date/Time
        Date/Time stamp
        LANMAN Date and time of last logon
    lanman.level  Detail Level
        Unsigned 16-bit integer
        LANMAN Detail Level
    lanman.logoff_code  Logoff Code
        Unsigned 16-bit integer
        LANMAN Logoff Code
    lanman.logoff_time  Logoff Date/Time
        Date/Time stamp
        LANMAN Date and time when user should log off
    lanman.logon_code  Logon Code
        Unsigned 16-bit integer
        LANMAN Logon Code
    lanman.logon_domain  Logon Domain
        String
        LANMAN Logon Domain
    lanman.logon_hours  Logon Hours
        Byte array
        LANMAN Logon Hours
    lanman.logon_server  Logon Server
        String
        LANMAN Logon Server
    lanman.max_storage  Max Storage
        Unsigned 32-bit integer
        LANMAN Max Storage
    lanman.minute  Minute
        Unsigned 8-bit integer
        LANMAN Current minute
    lanman.month  Month
        Unsigned 8-bit integer
        LANMAN Current month
    lanman.msecs  Milliseconds
        Unsigned 32-bit integer
        LANMAN Milliseconds since arbitrary time in the past (typically boot time)
    lanman.new_password  New Password
        Byte array
        LANMAN New Password (encrypted)
    lanman.num_logons  Number of Logons
        Unsigned 16-bit integer
        LANMAN Number of Logons
    lanman.old_password  Old Password
        Byte array
        LANMAN Old Password (encrypted)
    lanman.operator_privileges  Operator Privileges
        Unsigned 32-bit integer
        LANMAN Operator Privileges
    lanman.other_domains  Other Domains
        String
        LANMAN Other Domains
    lanman.param_desc  Parameter Descriptor
        String
        LANMAN Parameter Descriptor
    lanman.parameters  Parameters
        String
        LANMAN Parameters
    lanman.password  Password
        String
        LANMAN Password
    lanman.password_age  Password Age
        Time duration
        LANMAN Time since user last changed his/her password
    lanman.password_can_change  Password Can Change
        Date/Time stamp
        LANMAN Date and time when user can change their password
    lanman.password_must_change  Password Must Change
        Date/Time stamp
        LANMAN Date and time when user must change their password
    lanman.privilege_level  Privilege Level
        Unsigned 16-bit integer
        LANMAN Privilege Level
    lanman.recv_buf_len  Receive Buffer Length
        Unsigned 16-bit integer
        LANMAN Receive Buffer Length
    lanman.reserved  Reserved
        Unsigned 32-bit integer
        LANMAN Reserved
    lanman.ret_desc  Return Descriptor
        String
        LANMAN Return Descriptor
    lanman.script_path  Script Path
        String
        LANMAN Pathname of user's logon script
    lanman.second  Second
        Unsigned 8-bit integer
        LANMAN Current second
    lanman.send_buf_len  Send Buffer Length
        Unsigned 16-bit integer
        LANMAN Send Buffer Length
    lanman.server.comment  Server Comment
        String
        LANMAN Server Comment
    lanman.server.major  Major Version
        Unsigned 8-bit integer
        LANMAN Server Major Version
    lanman.server.minor  Minor Version
        Unsigned 8-bit integer
        LANMAN Server Minor Version
    lanman.server.name  Server Name
        String
        LANMAN Name of Server
    lanman.share.comment  Share Comment
        String
        LANMAN Share Comment
    lanman.share.current_uses  Share Current Uses
        Unsigned 16-bit integer
        LANMAN Current connections to share
    lanman.share.max_uses  Share Max Uses
        Unsigned 16-bit integer
        LANMAN Max connections allowed to share
    lanman.share.name  Share Name
        String
        LANMAN Name of Share
    lanman.share.password  Share Password
        String
        LANMAN Share Password
    lanman.share.path  Share Path
        String
        LANMAN Share Path
    lanman.share.permissions  Share Permissions
        Unsigned 16-bit integer
        LANMAN Permissions on share
    lanman.share.type  Share Type
        Unsigned 16-bit integer
        LANMAN Type of Share
    lanman.status  Status
        Unsigned 16-bit integer
        LANMAN Return status
    lanman.timeinterval  Time Interval
        Unsigned 16-bit integer
        LANMAN .0001 second units per clock tick
    lanman.tzoffset  Time Zone Offset
        Signed 16-bit integer
        LANMAN Offset of time zone from GMT, in minutes
    lanman.units_per_week  Units Per Week
        Unsigned 16-bit integer
        LANMAN Units Per Week
    lanman.user_comment  User Comment
        String
        LANMAN User Comment
    lanman.user_name  User Name
        String
        LANMAN User Name
    lanman.ustruct_size  Length of UStruct
        Unsigned 16-bit integer
        LANMAN UStruct Length
    lanman.weekday  Weekday
        Unsigned 8-bit integer
        LANMAN Current day of the week
    lanman.workstation_domain  Workstation Domain
        String
        LANMAN Workstation Domain
    lanman.workstation_major  Workstation Major Version
        Unsigned 8-bit integer
        LANMAN Workstation Major Version
    lanman.workstation_minor  Workstation Minor Version
        Unsigned 8-bit integer
        LANMAN Workstation Minor Version
    lanman.workstation_name  Workstation Name
        String
        LANMAN Workstation Name
    lanman.workstations  Workstations
        String
        LANMAN Workstations
    lanman.year  Year
        Unsigned 16-bit integer
        LANMAN Current year

Microsoft Windows Logon Protocol (netlogon)

    netlogon.command  Command
        Unsigned 8-bit integer
        NETLOGON Command
    netlogon.date_time  Date/Time
        Unsigned 32-bit integer
        NETLOGON Date/Time
    netlogon.db_count  DB Count
        Unsigned 32-bit integer
        NETLOGON DB Count
    netlogon.db_index  Database Index
        Unsigned 32-bit integer
        NETLOGON Database Index
    netlogon.domain_name  Domain Name
        String
        NETLOGON Domain Name
    netlogon.domain_sid_size  Domain SID Size
        Unsigned 32-bit integer
        NETLOGON Domain SID Size
    netlogon.flags.autolock  Autolock
        Boolean
        NETLOGON Account Autolock
    netlogon.flags.enabled  Enabled
        Boolean
        NETLOGON Is This Account Enabled
    netlogon.flags.expire  Expire
        Boolean
        NETLOGON Will Account Expire
    netlogon.flags.homedir  Homedir
        Boolean
        NETLOGON Homedir Required
    netlogon.flags.interdomain  Interdomain Trust
        Boolean
        NETLOGON Inter-domain Trust Account
    netlogon.flags.mns  MNS User
        Boolean
        NETLOGON MNS User Account
    netlogon.flags.normal  Normal User
        Boolean
        NETLOGON Normal User Account
    netlogon.flags.password  Password
        Boolean
        NETLOGON Password Required
    netlogon.flags.server  Server Trust
        Boolean
        NETLOGON Server Trust Account
    netlogon.flags.temp_dup  Temp Duplicate User
        Boolean
        NETLOGON Temp Duplicate User Account
    netlogon.flags.workstation  Workstation Trust
        Boolean
        NETLOGON Workstation Trust Account
    netlogon.large_serial  Large Serial Number
        Unsigned 64-bit integer
        NETLOGON Large Serial Number
    netlogon.lm_token  LM Token
        Unsigned 16-bit integer
        NETLOGON LM Token
    netlogon.lmnt_token  LMNT Token
        Unsigned 16-bit integer
        NETLOGON LMNT Token
    netlogon.low_serial  Low Serial Number
        Unsigned 32-bit integer
        NETLOGON Low Serial Number
    netlogon.mailslot_name  Mailslot Name
        String
        NETLOGON Mailslot Name
    netlogon.major_version  Workstation Major Version
        Unsigned 8-bit integer
        NETLOGON Workstation Major Version
    netlogon.minor_version  Workstation Minor Version
        Unsigned 8-bit integer
        NETLOGON Workstation Minor Version
    netlogon.nt_date_time  NT Date/Time
        Date/Time stamp
        NETLOGON NT Date/Time
    netlogon.nt_version  NT Version
        Unsigned 32-bit integer
        NETLOGON NT Version
    netlogon.os_version  Workstation OS Version
        Unsigned 8-bit integer
        NETLOGON Workstation OS Version
    netlogon.pdc_name  PDC Name
        String
        NETLOGON PDC Name
    netlogon.pulse  Pulse
        Unsigned 32-bit integer
        NETLOGON Pulse
    netlogon.random  Random
        Unsigned 32-bit integer
        NETLOGON Random
    netlogon.request_count  Request Count
        Unsigned 16-bit integer
        NETLOGON Request Count
    netlogon.script_name  Script Name
        String
        NETLOGON Script Name
    netlogon.server_name  Server Name
        String
        NETLOGON Server Name
    netlogon.unicode_computer_name  Unicode Computer Name
        String
        NETLOGON Unicode Computer Name
    netlogon.unicode_pdc_name  Unicode PDC Name
        String
        NETLOGON Unicode PDC Name
    netlogon.update  Update Type
        Unsigned 16-bit integer
        NETLOGON Update Type
    netlogon.user_name  User Name
        String
        NETLOGON User Name

Microsoft Workstation Service (wkssvc)

Mobile IP (mip)

    mip.auth.auth  Authenticator
        Byte array
        Authenticator.
    mip.auth.spi  SPI
        Unsigned 32-bit integer
        Authentication Header Security Parameter Index.
    mip.b  Broadcast Datagrams
        Boolean
        Broadcast Datagrams requested
    mip.coa  Care of Address
        IPv4 address
        Care of Address.
    mip.code  Reply Code
        Unsigned 8-bit integer
        Mobile IP Reply code.
    mip.d  Co-lcated Care-of Address
        Boolean
        MN using Co-located Care-of address
    mip.ext.auth.subtype  Gen Auth Ext SubType
        Unsigned 8-bit integer
        Mobile IP Auth Extension Sub Type.
    mip.ext.len  Extension Length
        Unsigned 16-bit integer
        Mobile IP Extension Length.
    mip.ext.type  Extension Type
        Unsigned 8-bit integer
        Mobile IP Extension Type.
    mip.extension  Extension
        Byte array
        Extension
    mip.flags  Flags
        Unsigned 8-bit integer
    mip.g  GRE
        Boolean
        MN wants GRE encapsulation
    mip.haaddr  Home Agent
        IPv4 address
        Home agent IP Address.
    mip.homeaddr  Home Address
        IPv4 address
        Mobile Node's home address.
    mip.ident  Identification
        Date/Time stamp
        MN Identification.
    mip.life  Lifetime
        Unsigned 16-bit integer
        Mobile IP Lifetime.
    mip.m  Minimal Encapsulation
        Boolean
        MN wants Minimal encapsulation
    mip.nai  NAI
        String
        NAI
    mip.s  Simultaneous Bindings
        Boolean
        Simultaneous Bindings Allowed
    mip.t  Reverse Tunneling
        Boolean
        Reverse tunneling requested
    mip.type  Message Type
        Unsigned 8-bit integer
        Mobile IP Message type.
    mip.v  Van Jacobson
        Boolean
        Van Jacobson

Modbus/TCP (mbtcp)

    modbus_tcp.func_code  function code 
        Unsigned 8-bit integer
    modbus_tcp.len  length
        Unsigned 16-bit integer
    modbus_tcp.prot_id  protocol identifier
        Unsigned 16-bit integer
    modbus_tcp.trans_id  transaction identifier
        Unsigned 16-bit integer
    modbus_tcp.unit_id  unit identifier
        Unsigned 8-bit integer

Mount Service (mount)

    mount.dump.directory  Directory
        String
        Directory
    mount.dump.entry  Mount List Entry
        No value
        Mount List Entry
    mount.dump.hostname  Hostname
        String
        Hostname
    mount.export.directory  Directory
        String
        Directory
    mount.export.entry  Export List Entry
        No value
        Export List Entry
    mount.export.group  Group
        String
        Group
    mount.export.groups  Groups
        No value
        Groups
    mount.flavor  Flavor
        Unsigned 32-bit integer
        Flavor
    mount.flavors  Flavors
        Unsigned 32-bit integer
        Flavors
    mount.path  Path
        String
        Path
    mount.pathconf.link_max  Maximum number of links to a file
        Unsigned 32-bit integer
        Maximum number of links allowed to a file
    mount.pathconf.mask  Reply error/status bits
        Unsigned 16-bit integer
        Bit mask with error and status bits
    mount.pathconf.mask.chown_restricted  CHOWN_RESTRICTED
        Boolean
    mount.pathconf.mask.error_all  ERROR_ALL
        Boolean
    mount.pathconf.mask.error_link_max  ERROR_LINK_MAX
        Boolean
    mount.pathconf.mask.error_max_canon  ERROR_MAX_CANON
        Boolean
    mount.pathconf.mask.error_max_input  ERROR_MAX_INPUT
        Boolean
    mount.pathconf.mask.error_name_max  ERROR_NAME_MAX
        Boolean
    mount.pathconf.mask.error_path_max  ERROR_PATH_MAX
        Boolean
    mount.pathconf.mask.error_pipe_buf  ERROR_PIPE_BUF
        Boolean
    mount.pathconf.mask.error_vdisable  ERROR_VDISABLE
        Boolean
    mount.pathconf.mask.no_trunc  NO_TRUNC
        Boolean
    mount.pathconf.max_canon  Maximum terminal input line length
        Unsigned 16-bit integer
        Max tty input line length
    mount.pathconf.max_input  Terminal input buffer size
        Unsigned 16-bit integer
        Terminal input buffer size
    mount.pathconf.name_max  Maximum file name length
        Unsigned 16-bit integer
        Maximum file name length
    mount.pathconf.path_max  Maximum path name length
        Unsigned 16-bit integer
        Maximum path name length
    mount.pathconf.pipe_buf  Pipe buffer size
        Unsigned 16-bit integer
        Maximum amount of data that can be written atomically to a pipe
    mount.pathconf.vdisable_char  VDISABLE character
        Unsigned 8-bit integer
        Character value to disable a terminal special character
    mount.status  Status
        Unsigned 32-bit integer
        Status

MultiProtocol Label Switching Header (mpls)

    mpls.bottom  MPLS Bottom Of Label Stack
        Unsigned 8-bit integer
    mpls.exp  MPLS Experimental Bits
        Unsigned 8-bit integer
    mpls.label  MPLS Label
        Unsigned 32-bit integer
    mpls.ttl  MPLS TTL
        Unsigned 8-bit integer

Multicast Router DISCovery protocol (mrdisc)

    mrdisc.adv_int  Advertising Interval
        Unsigned 8-bit integer
        MRDISC Advertising Interval in seconds
    mrdisc.checksum  Checksum
        Unsigned 16-bit integer
        MRDISC Checksum
    mrdisc.checksum_bad  Bad Checksum
        Boolean
        Bad MRDISC Checksum
    mrdisc.num_opts  Number Of Options
        Unsigned 16-bit integer
        MRDISC Number Of Options
    mrdisc.opt_len  Length
        Unsigned 8-bit integer
        MRDISC Option Length
    mrdisc.option  Option
        Unsigned 8-bit integer
        MRDISC Option Type
    mrdisc.option_data  Data
        Byte array
        MRDISC Unknown Option Data
    mrdisc.options  Options
        No value
        MRDISC Options
    mrdisc.query_int  Query Interval
        Unsigned 16-bit integer
        MRDISC Query Interval
    mrdisc.rob_var  Robustness Variable
        Unsigned 16-bit integer
        MRDISC Robustness Variable
    mrdisc.type  Type
        Unsigned 8-bit integer
        MRDISC Packet Type

Multicast Source Discovery Protocol (msdp)

    msdp.length  Length
        Unsigned 16-bit integer
        MSDP TLV Length
    msdp.not.entry_count  Entry Count
        Unsigned 24-bit integer
        Entry Count in Notification messages
    msdp.not.error  Error Code
        Unsigned 8-bit integer
        Indicates the type of Notification
    msdp.not.error_sub  Error subode
        Unsigned 8-bit integer
        Error subcode
    msdp.not.ipv4  IPv4 address
        IPv4 address
        Group/RP/Source address in Notification messages
    msdp.not.o  Open-bit
        Unsigned 8-bit integer
        If clear, the connection will be closed
    msdp.not.res  Reserved
        Unsigned 24-bit integer
        Reserved field in Notification messages
    msdp.not.sprefix_len  Sprefix len
        Unsigned 8-bit integer
        Source prefix length in Notification messages
    msdp.sa.entry_count  Entry Count
        Unsigned 8-bit integer
        MSDP SA Entry Count
    msdp.sa.group_addr  Group Address
        IPv4 address
        The group address the active source has sent data to
    msdp.sa.reserved  Reserved
        Unsigned 24-bit integer
        Transmitted as zeros and ignored by a receiver
    msdp.sa.rp_addr  RP Address
        IPv4 address
        Active source's RP address
    msdp.sa.sprefix_len  Sprefix len
        Unsigned 8-bit integer
        The route prefix length associated with source address
    msdp.sa.src_addr  Source Address
        IPv4 address
        The IP address of the active source
    msdp.sa_req.group_addr  Group Address
        IPv4 address
        The group address the MSDP peer is requesting
    msdp.sa_req.res  Reserved
        Unsigned 8-bit integer
        Transmitted as zeros and ignored by a receiver
    msdp.type  Type
        Unsigned 8-bit integer
        MSDP TLV type

NFSACL (nfsacl)

NFSAUTH (nfsauth)

NIS+ (nisplus)

    .nisplus.dummy   
        Byte array
    nisplus.access.mask  access mask
        No value
        NIS Access Mask
    nisplus.aticks  aticks
        Unsigned 32-bit integer
    nisplus.attr  Attribute
        No value
        Attribute
    nisplus.attr.name  name
        String
        Attribute Name
    nisplus.attr.val  val
        Byte array
        Attribute Value
    nisplus.attributes  Attributes
        No value
        List Of Attributes
    nisplus.callback.status  status
        Boolean
        Status Of Callback Thread
    nisplus.checkpoint.dticks  dticks
        Unsigned 32-bit integer
        Database Ticks
    nisplus.checkpoint.status  status
        Unsigned 32-bit integer
        Checkpoint Status
    nisplus.checkpoint.zticks  zticks
        Unsigned 32-bit integer
        Service Ticks
    nisplus.cookie  cookie
        Byte array
        Cookie
    nisplus.cticks  cticks
        Unsigned 32-bit integer
    nisplus.ctime  ctime
        Date/Time stamp
        Time Of Creation
    nisplus.directory  directory
        No value
        NIS Directory Object
    nisplus.directory.mask  mask
        No value
        NIS Directory Create/Destroy Rights
    nisplus.directory.mask.group_create  GROUP CREATE
        Boolean
        Group Create Flag
    nisplus.directory.mask.group_destroy  GROUP DESTROY
        Boolean
        Group Destroy Flag
    nisplus.directory.mask.group_modify  GROUP MODIFY
        Boolean
        Group Modify Flag
    nisplus.directory.mask.group_read  GROUP READ
        Boolean
        Group Read Flag
    nisplus.directory.mask.nobody_create  NOBODY CREATE
        Boolean
        Nobody Create Flag
    nisplus.directory.mask.nobody_destroy  NOBODY DESTROY
        Boolean
        Nobody Destroy Flag
    nisplus.directory.mask.nobody_modify  NOBODY MODIFY
        Boolean
        Nobody Modify Flag
    nisplus.directory.mask.nobody_read  NOBODY READ
        Boolean
        Nobody Read Flag
    nisplus.directory.mask.owner_create  OWNER CREATE
        Boolean
        Owner Create Flag
    nisplus.directory.mask.owner_destroy  OWNER DESTROY
        Boolean
        Owner Destroy Flag
    nisplus.directory.mask.owner_modify  OWNER MODIFY
        Boolean
        Owner Modify Flag
    nisplus.directory.mask.owner_read  OWNER READ
        Boolean
        Owner Read Flag
    nisplus.directory.mask.world_create  WORLD CREATE
        Boolean
        World Create Flag
    nisplus.directory.mask.world_destroy  WORLD DESTROY
        Boolean
        World Destroy Flag
    nisplus.directory.mask.world_modify  WORLD MODIFY
        Boolean
        World Modify Flag
    nisplus.directory.mask.world_read  WORLD READ
        Boolean
        World Read Flag
    nisplus.directory.mask_list  mask list
        No value
        List Of Directory Create/Destroy Rights
    nisplus.directory.name  directory name
        String
        Name Of Directory Being Served
    nisplus.directory.ttl  ttl
        Unsigned 32-bit integer
        Time To Live
    nisplus.directory.type  type
        Unsigned 32-bit integer
        NIS Type Of Name Service
    nisplus.dticks  dticks
        Unsigned 32-bit integer
    nisplus.dump.dir  directory
        String
        Directory To Dump
    nisplus.dump.time  time
        Date/Time stamp
        From This Timestamp
    nisplus.endpoint  endpoint
        No value
        Endpoint For This NIS Server
    nisplus.endpoint.family  family
        String
        Transport Family
    nisplus.endpoint.proto  proto
        String
        Protocol
    nisplus.endpoint.uaddr  addr
        String
        Address
    nisplus.endpoints  nis endpoints
        No value
        Endpoints For This NIS Server
    nisplus.entry  entry
        No value
        Entry Object
    nisplus.entry.col  column
        No value
        Entry Column
    nisplus.entry.cols  columns
        No value
        Entry Columns
    nisplus.entry.flags  flags
        Unsigned 32-bit integer
        Entry Col Flags
    nisplus.entry.flags.asn  ASN.1
        Boolean
        Is This Entry ASN.1 Encoded Flag
    nisplus.entry.flags.binary  BINARY
        Boolean
        Is This Entry BINARY Flag
    nisplus.entry.flags.encrypted  ENCRYPTED
        Boolean
        Is This Entry ENCRYPTED Flag
    nisplus.entry.flags.modified  MODIFIED
        Boolean
        Is This Entry MODIFIED Flag
    nisplus.entry.flags.xdr  XDR
        Boolean
        Is This Entry XDR Encoded Flag
    nisplus.entry.type  type
        String
        Entry Type
    nisplus.entry.val  val
        String
        Entry Value
    nisplus.fd.dir.data  data
        Byte array
        Directory Data In XDR Format
    nisplus.fd.dirname  dirname
        String
        Directory Name
    nisplus.fd.requester  requester
        String
        Host Principal Name For Signature
    nisplus.fd.sig  signature
        Byte array
        Signature Of The Source
    nisplus.group  Group
        No value
        Group Object
    nisplus.group.flags  flags
        Unsigned 32-bit integer
        Group Object Flags
    nisplus.group.name  group name
        String
        Name Of Group Member
    nisplus.grps  Groups
        No value
        List Of Groups
    nisplus.ib.bufsize  bufsize
        Unsigned 32-bit integer
        Optional First/NextBufSize
    nisplus.ib.flags  flags
        Unsigned 32-bit integer
        Information Base Flags
    nisplus.key.data  key data
        Byte array
        Encryption Key
    nisplus.key.type  type
        Unsigned 32-bit integer
        Type Of Key
    nisplus.link  link
        No value
        NIS Link Object
    nisplus.log.entries  log entries
        No value
        Log Entries
    nisplus.log.entry  log entry
        No value
        Log Entry
    nisplus.log.entry.type  type
        Unsigned 32-bit integer
        Type Of Entry In Transaction Log
    nisplus.log.principal  principal
        String
        Principal Making The Change
    nisplus.log.time  time
        Date/Time stamp
        Time Of Log Entry
    nisplus.mtime  mtime
        Date/Time stamp
        Time Last Modified
    nisplus.object  NIS Object
        No value
        NIS Object
    nisplus.object.domain  domain
        String
        NIS Administrator For This Object
    nisplus.object.group  group
        String
        NIS Name Of Access Group
    nisplus.object.name  name
        String
        NIS Name For This Object
    nisplus.object.oid  Object Identity Verifier
        No value
        NIS Object Identity Verifier
    nisplus.object.owner  owner
        String
        NIS Name Of Object Owner
    nisplus.object.private  private
        Byte array
        NIS Private Object
    nisplus.object.ttl  ttl
        Unsigned 32-bit integer
        NIS Time To Live For This Object
    nisplus.object.type  type
        Unsigned 32-bit integer
        NIS Type Of Object
    nisplus.ping.dir  directory
        String
        Directory That Had The Change
    nisplus.ping.time  time
        Date/Time stamp
        Timestamp Of The Transaction
    nisplus.server  server
        No value
        NIS Server For This Directory
    nisplus.server.name  name
        String
        Name Of NIS Server
    nisplus.servers  nis servers
        No value
        NIS Servers For This Directory
    nisplus.status  status
        Unsigned 32-bit integer
        NIS Status Code
    nisplus.table  table
        No value
        Table Object
    nisplus.table.col  column
        No value
        Table Column
    nisplus.table.col.flags  flags
        No value
        Flags For This Column
    nisplus.table.col.name  column name
        String
        Column Name
    nisplus.table.cols  columns
        No value
        Table Columns
    nisplus.table.flags.asn  asn
        Boolean
        Is This Column ASN.1 Encoded
    nisplus.table.flags.binary  binary
        Boolean
        Is This Column BINARY
    nisplus.table.flags.casesensitive  casesensitive
        Boolean
        Is This Column CASESENSITIVE
    nisplus.table.flags.encrypted  encrypted
        Boolean
        Is This Column ENCRYPTED
    nisplus.table.flags.modified  modified
        Boolean
        Is This Column MODIFIED
    nisplus.table.flags.searchable  searchable
        Boolean
        Is This Column SEARCHABLE
    nisplus.table.flags.xdr  xdr
        Boolean
        Is This Column XDR Encoded
    nisplus.table.maxcol  max columns
        Unsigned 16-bit integer
        Maximum Number Of Columns For Table
    nisplus.table.path  path
        String
        Table Path
    nisplus.table.separator  separator
        Unsigned 8-bit integer
        Separator Character
    nisplus.table.type  type
        String
        Table Type
    nisplus.tag  tag
        No value
        Tag
    nisplus.tag.type  type
        Unsigned 32-bit integer
        Type Of Statistics Tag
    nisplus.tag.value  value
        String
        Value Of Statistics Tag
    nisplus.taglist  taglist
        No value
        List Of Tags
    nisplus.zticks  zticks
        Unsigned 32-bit integer

NIS+ Callback (nispluscb)

    nispluscb.entries  entries
        No value
        NIS Callback Entries
    nispluscb.entry  entry
        No value
        NIS Callback Entry

NSPI (nspi)

    nspi.opnum  Operation
        Unsigned 16-bit integer
        Operation

NTLM Secure Service Provider (ntlmssp)

    dcerpc.negotiateflags  Flags
        Unsigned 32-bit integer
    ntlmssp.auth.domain  Domain name
        String
    ntlmssp.auth.domain.maxlen  Domain name max length
        Unsigned 16-bit integer
    ntlmssp.auth.domain.offset  Domain name offset
        Unsigned 32-bit integer
    ntlmssp.auth.domain.strlen  Domain name length
        Unsigned 16-bit integer
    ntlmssp.auth.hostname  Host name
        String
    ntlmssp.auth.hostname.maxlen  Hostname max length
        Unsigned 16-bit integer
    ntlmssp.auth.hostname.offset  Hostname offset
        Unsigned 32-bit integer
    ntlmssp.auth.hostname.strlen  Hostname length
        Unsigned 16-bit integer
    ntlmssp.auth.lmresponse  Lan Manager Response
        Byte array
    ntlmssp.auth.lmresponse.maxlen  Lan Manager response max length
        Unsigned 16-bit integer
    ntlmssp.auth.lmresponse.offset  Lan Manager response offset
        Unsigned 16-bit integer
    ntlmssp.auth.lmresponse.strlen  Lan Manager response length
        Unsigned 16-bit integer
    ntlmssp.auth.ntresponse  NTLM Response
        Byte array
    ntlmssp.auth.ntresponse.maxlen  NTLM response max length
        Unsigned 16-bit integer
    ntlmssp.auth.ntresponse.offset  NTLM response offset
        Unsigned 32-bit integer
    ntlmssp.auth.ntresponse.strlen  NTLM response length
        Unsigned 16-bit integer
    ntlmssp.auth.unknown1  Unknown1
        Byte array
    ntlmssp.auth.unknown1.maxlen  Unknown1 max length
        Unsigned 16-bit integer
    ntlmssp.auth.unknown1.offset  Unknown1 offset
        Unsigned 32-bit integer
    ntlmssp.auth.unknown1.strlen  Unknown1 length
        Unsigned 16-bit integer
    ntlmssp.auth.username  User name
        String
    ntlmssp.auth.username.maxlen  Username max length
        Unsigned 16-bit integer
    ntlmssp.auth.username.offset  Username offset
        Unsigned 32-bit integer
    ntlmssp.auth.username.strlen  Username length
        Unsigned 16-bit integer
    ntlmssp.challenge.unknown1  Unknown1
        Unsigned 32-bit integer
    ntlmssp.challenge.unknown2  Unknown2
        Unsigned 32-bit integer
    ntlmssp.identifier  NTLMSSP identifier
        String
        NTLMSSP Identifier
    ntlmssp.messagetype  NTLM Message Type
        Unsigned 32-bit integer
    ntlmssp.negotiate.callingworkstation  Calling workstation name
        String
    ntlmssp.negotiate.callingworkstation.buffer  Calling workstation name buffer
        Unsigned 32-bit integer
    ntlmssp.negotiate.callingworkstation.maxlen  Calling workstation name max length
        Unsigned 16-bit integer
    ntlmssp.negotiate.callingworkstation.strlen  Calling workstation name length
        Unsigned 16-bit integer
    ntlmssp.negotiate.domain  Calling workstation domain
        String
    ntlmssp.negotiate.domain.buffer  Calling workstation domain buffer
        Unsigned 32-bit integer
    ntlmssp.negotiate.domain.maxlen  Calling workstation domain max length
        Unsigned 16-bit integer
    ntlmssp.negotiate.domain.strlen  Calling workstation domain length
        Unsigned 16-bit integer
    ntlmssp.negotiate00000008  Request 0x00000008
        Boolean
    ntlmssp.negotiate00000400  Negotiate 0x00000400
        Boolean
    ntlmssp.negotiate00000800  Negotiate 0x00000800
        Boolean
    ntlmssp.negotiate128  Negotiate 128
        Boolean
    ntlmssp.negotiatealwayssign  Negotiate Always Sign
        Boolean
    ntlmssp.negotiatechallengeacceptresponse  Negotiate Challenge Accept Response
        Boolean
    ntlmssp.negotiatechallengeinitresponse  Negotiate Challenge Init Response
        Boolean
    ntlmssp.negotiatechallengenonntsessionkey  Negotiate Challenge Non NT Session Key
        Boolean
    ntlmssp.negotiatedatagramstyle  Negotiate Datagram Style
        Boolean
    ntlmssp.negotiatedomainsupplied  Negotiate Domain Supplied
        Boolean
    ntlmssp.negotiatekeyexch  Negotiate Key Exchange
        Boolean
    ntlmssp.negotiatelmkey  Negotiate Lan Manager Key
        Boolean
    ntlmssp.negotiatenetware  Negotiate Netware
        Boolean
    ntlmssp.negotiatent00100000  Negotiate 0x00100000
        Boolean
    ntlmssp.negotiatent00200000  Negotiate 0x00200000
        Boolean
    ntlmssp.negotiatent00400000  Negotiate 0x00400000
        Boolean
    ntlmssp.negotiatent01000000  Negotiate 0x01000000
        Boolean
    ntlmssp.negotiatent02000000  Negotiate 0x02000000
        Boolean
    ntlmssp.negotiatent04000000  Negotiate 0x04000000
        Boolean
    ntlmssp.negotiatent08000000  Negotiate 0x08000000
        Boolean
    ntlmssp.negotiatent10000000  Negotiate 0x10000000
        Boolean
    ntlmssp.negotiatent80000000  Negotiate 0x80000000
        Boolean
    ntlmssp.negotiatentlm  Negotiate NTLM key
        Boolean
    ntlmssp.negotiatentlm2  Negotiate NTLM2 key
        Boolean
    ntlmssp.negotiateoem  Negotiate OEM
        Boolean
    ntlmssp.negotiateseal  Negotiate Seal
        Boolean
    ntlmssp.negotiatesign  Negotiate Sign
        Boolean
    ntlmssp.negotiatetargetinfo  Negotiate Target Info
        Boolean
    ntlmssp.negotiatethisislocalcall  Negotiate This is Local Call
        Boolean
    ntlmssp.negotiateunicode  Negotiate UNICODE
        Boolean
    ntlmssp.negotiateworkstationsupplied  Negotiate Workstation Supplied
        Boolean
    ntlmssp.ntlmchallenge  NTLM Challenge
        Byte array
    ntlmssp.requesttarget  Request Target
        Boolean
    ntlmssp.reserved  Reserved
        Byte array

Name Binding Protocol (nbp)

    nbp.count  Count
        Unsigned 8-bit integer
        Count
    nbp.enum  Enumerator
        Unsigned 8-bit integer
        Enumerator
    nbp.info  Info
        Unsigned 8-bit integer
        Info
    nbp.net  Network
        Unsigned 16-bit integer
        Network
    nbp.node  Node
        Unsigned 8-bit integer
        Node
    nbp.object  Object
        String
        Object
    nbp.op  Operation
        Unsigned 8-bit integer
        Operation
    nbp.port  Port
        Unsigned 8-bit integer
        Port
    nbp.tid  Transaction ID
        Unsigned 8-bit integer
        Transaction ID
    nbp.type  Type
        String
        Type
    nbp.zone  Zone
        String
        Zone

Name Management Protocol over IPX (nmpi)

NetBIOS (netbios)

    netbios.ack  Acknowledge
        Boolean
    netbios.ack_expected  Acknowledge expected
        Boolean
    netbios.ack_with_data  Acknowledge with data
        Boolean
    netbios.call_name_type  Caller's Name Type
        Unsigned 8-bit integer
    netbios.command  Command
        Unsigned 8-bit integer
    netbios.data1  DATA1 value
        Unsigned 8-bit integer
    netbios.data2  DATA2 value
        Unsigned 16-bit integer
    netbios.hdr_len  Header Length
        Unsigned 16-bit integer
    netbios.largest_frame  Largest Frame
        Unsigned 8-bit integer
    netbios.local_session  Local Session No.
        Unsigned 8-bit integer
    netbios.max_data_recv_size  Maximum data receive size
        Unsigned 16-bit integer
    netbios.name_type  Name type
        Unsigned 16-bit integer
    netbios.nb_name  NetBIOS Name
        String
    netbios.nb_name_type  NetBIOS Name Type
        Unsigned 8-bit integer
    netbios.num_data_bytes_accepted  Number of data bytes accepted
        Unsigned 16-bit integer
    netbios.recv_cont_req  RECEIVE_CONTINUE requested
        Boolean
    netbios.remote_session  Remote Session No.
        Unsigned 8-bit integer
    netbios.resp_corrl  Response Correlator
        Unsigned 16-bit integer
    netbios.send_no_ack  Handle SEND.NO.ACK
        Boolean
    netbios.status  Status
        Unsigned 8-bit integer
    netbios.status_buffer_len  Length of status buffer
        Unsigned 16-bit integer
    netbios.termination_indicator  Termination indicator
        Unsigned 16-bit integer
    netbios.version  NetBIOS Version
        Boolean
    netbios.xmit_corrl  Transmit Correlator
        Unsigned 16-bit integer

NetBIOS Datagram Service (nbdgm)

    nbdgm.dgram_id  Datagram ID
        Unsigned 16-bit integer
        Datagram identifier
    nbdgm.first  This is first fragment
        Boolean
        TRUE if first fragment
    nbdgm.next  More fragments follow
        Boolean
        TRUE if more fragments follow
    nbdgm.node_type  Node Type
        Unsigned 8-bit integer
        Node type
    nbdgm.src.ip  Source IP
        IPv4 address
        Source IPv4 address
    nbdgm.src.port  Source Port
        Unsigned 16-bit integer
        Source port
    nbdgm.type  Message Type
        Unsigned 8-bit integer
        NBDGM message type

NetBIOS Name Service (nbns)

    nbns.count.add_rr  Additional RRs
        Unsigned 16-bit integer
        Number of additional records in packet
    nbns.count.answers  Answer RRs
        Unsigned 16-bit integer
        Number of answers in packet
    nbns.count.auth_rr  Authority RRs
        Unsigned 16-bit integer
        Number of authoritative records in packet
    nbns.count.queries  Questions
        Unsigned 16-bit integer
        Number of queries in packet
    nbns.flags  Flags
        Unsigned 16-bit integer
    nbns.flags.authoritative  Authoritative
        Boolean
        Is the server is an authority for the domain?
    nbns.flags.broadcast  Broadcast
        Boolean
        Is this a broadcast packet?
    nbns.flags.opcode  Opcode
        Unsigned 16-bit integer
        Operation code
    nbns.flags.rcode  Reply code
        Unsigned 16-bit integer
        Reply code
    nbns.flags.recavail  Recursion available
        Boolean
        Can the server do recursive queries?
    nbns.flags.recdesired  Recursion desired
        Boolean
        Do query recursively?
    nbns.flags.response  Response
        Boolean
        Is the message a response?
    nbns.flags.truncated  Truncated
        Boolean
        Is the message truncated?
    nbns.id  Transaction ID
        Unsigned 16-bit integer
        Identification of transaction

NetBIOS Session Service (nbss)

    nbss.flags  Flags
        Unsigned 8-bit integer
        NBSS message flags
    nbss.type  Message Type
        Unsigned 8-bit integer
        NBSS message type

NetBIOS over IPX (nbipx)

NetWare Core Protocol (ncp)

    ncp.Service_type  Service Type
        Unsigned 16-bit integer
    ncp.abort_q_flag  Abort Queue Flag
        Unsigned 8-bit integer
    ncp.abs_min_time_since_file_delete  Absolute Minimum Time Since File Delete
        Unsigned 32-bit integer
    ncp.acc_mode_comp  Compatibility Mode
        Boolean
    ncp.acc_mode_deny_read  Deny Read Access
        Boolean
    ncp.acc_mode_deny_write  Deny Write Access
        Boolean
    ncp.acc_mode_read  Read Access
        Boolean
    ncp.acc_mode_write  Write Access
        Boolean
    ncp.acc_priv_create  Create Privileges (files only)
        Boolean
    ncp.acc_priv_delete  Delete Privileges (files only)
        Boolean
    ncp.acc_priv_modify  Modify File Status Flags Privileges (files and directories)
        Boolean
    ncp.acc_priv_open  Open Privileges (files only)
        Boolean
    ncp.acc_priv_parent  Parental Privileges (directories only for creating, deleting, and renaming)
        Boolean
    ncp.acc_priv_read  Read Privileges (files only)
        Boolean
    ncp.acc_priv_search  Search Privileges (directories only)
        Boolean
    ncp.acc_priv_write  Write Privileges (files only)
        Boolean
    ncp.acc_rights1_create  Create Rights
        Boolean
    ncp.acc_rights1_delete  Delete Rights
        Boolean
    ncp.acc_rights1_modify  Modify Rights
        Boolean
    ncp.acc_rights1_open  Open Rights
        Boolean
    ncp.acc_rights1_parent  Parental Rights
        Boolean
    ncp.acc_rights1_read  Read Rights
        Boolean
    ncp.acc_rights1_search  Search Rights
        Boolean
    ncp.acc_rights1_supervisor  Supervisor Access Rights
        Boolean
    ncp.acc_rights1_write  Write Rights
        Boolean
    ncp.acc_rights_create  Create Rights
        Boolean
    ncp.acc_rights_delete  Delete Rights
        Boolean
    ncp.acc_rights_modify  Modify Rights
        Boolean
    ncp.acc_rights_open  Open Rights
        Boolean
    ncp.acc_rights_parent  Parental Rights
        Boolean
    ncp.acc_rights_read  Read Rights
        Boolean
    ncp.acc_rights_search  Search Rights
        Boolean
    ncp.acc_rights_write  Write Rights
        Boolean
    ncp.accel_cache_node_write  Accelerate Cache Node Write Count
        Unsigned 32-bit integer
    ncp.accepted_max_size  Accepted Max Size
        Unsigned 16-bit integer
    ncp.access_control  Access Control
        Unsigned 8-bit integer
    ncp.access_mode  Access Mode
        Unsigned 8-bit integer
    ncp.access_privileges  Access Privileges
        Unsigned 8-bit integer
    ncp.access_rights_mask  Access Rights
        Unsigned 8-bit integer
    ncp.access_rights_mask_word  Access Rights
        Unsigned 16-bit integer
    ncp.account_balance  Account Balance
        Unsigned 32-bit integer
    ncp.acct_version  Acct Version
        Unsigned 8-bit integer
    ncp.ack_seqno  ACK Sequence Number
        Unsigned 16-bit integer
        Next expected burst sequence number
    ncp.act_flag_create  Create
        Boolean
    ncp.act_flag_open  Open
        Boolean
    ncp.act_flag_replace  Replace
        Boolean
    ncp.action_flag  Action Flag
        Unsigned 8-bit integer
    ncp.active_conn_bit_list  Active Connection List
        String
    ncp.active_indexed_files  Active Indexed Files
        Unsigned 16-bit integer
    ncp.actual_max_bindery_objects  Actual Max Bindery Objects
        Unsigned 16-bit integer
    ncp.actual_max_indexed_files  Actual Max Indexed Files
        Unsigned 16-bit integer
    ncp.actual_max_open_files  Actual Max Open Files
        Unsigned 16-bit integer
    ncp.actual_max_sim_trans  Actual Max Simultaneous Transactions
        Unsigned 16-bit integer
    ncp.actual_max_used_directory_entries  Actual Max Used Directory Entries
        Unsigned 16-bit integer
    ncp.actual_max_used_routing_buffers  Actual Max Used Routing Buffers
        Unsigned 16-bit integer
    ncp.actual_response_count  Actual Response Count
        Unsigned 16-bit integer
    ncp.add_nm_spc_and_vol  Add Name Space and Volume
        String
    ncp.address  Address
    ncp.aes_event_count  AES Event Count
        Unsigned 32-bit integer
    ncp.afp_entry_id  AFP Entry ID
        Unsigned 32-bit integer
    ncp.alloc_avail_byte  Bytes Available for Allocation
        Unsigned 32-bit integer
    ncp.alloc_blck  Allocate Block Count
        Unsigned 32-bit integer
    ncp.alloc_blck_already_wait  Allocate Block Already Waiting
        Unsigned 32-bit integer
    ncp.alloc_blck_frm_avail  Allocate Block From Available Count
        Unsigned 32-bit integer
    ncp.alloc_blck_frm_lru  Allocate Block From LRU Count
        Unsigned 32-bit integer
    ncp.alloc_blck_i_had_to_wait  Allocate Block I Had To Wait Count
        Unsigned 32-bit integer
    ncp.alloc_blck_i_had_to_wait_for  Allocate Block I Had To Wait For Someone Count
        Unsigned 32-bit integer
    ncp.alloc_free_count  Reclaimable Free Bytes
        Unsigned 32-bit integer
    ncp.alloc_waiting  Allocate Waiting Count
        Unsigned 32-bit integer
    ncp.allocate_mode  Allocate Mode
        Unsigned 16-bit integer
    ncp.allocation_block_size  Allocation Block Size
        Unsigned 32-bit integer
    ncp.already_doing_realloc  Already Doing Re-Allocate Count
        Unsigned 32-bit integer
    ncp.application_number  Application Number
        Unsigned 16-bit integer
    ncp.archived_date  Archived Date
        Unsigned 16-bit integer
    ncp.archived_time  Archived Time
        Unsigned 16-bit integer
    ncp.archiver_id  Archiver ID
        Unsigned 32-bit integer
    ncp.associated_name_space  Associated Name Space
        Unsigned 8-bit integer
    ncp.async_internl_dsk_get  Async Internal Disk Get Count
        Unsigned 32-bit integer
    ncp.async_internl_dsk_get_need_to_alloc  Async Internal Disk Get Need To Alloc
        Unsigned 32-bit integer
    ncp.async_internl_dsk_get_someone_beat  Async Internal Disk Get Someone Beat Me
        Unsigned 32-bit integer
    ncp.async_read_error  Async Read Error Count
        Unsigned 32-bit integer
    ncp.att_def16_archive  Archive
        Boolean
    ncp.att_def16_execute  Execute
        Boolean
    ncp.att_def16_hidden  Hidden
        Boolean
    ncp.att_def16_read_audit  Read Audit
        Boolean
    ncp.att_def16_ro  Read Only
        Boolean
    ncp.att_def16_shareable  Shareable
        Boolean
    ncp.att_def16_sub_only  Subdirectories Only
        Boolean
    ncp.att_def16_system  System
        Boolean
    ncp.att_def16_transaction  Transactional
        Boolean
    ncp.att_def16_write_audit  Write Audit
        Boolean
    ncp.att_def32_archive  Archive
        Boolean
    ncp.att_def32_execute  Execute
        Boolean
    ncp.att_def32_hidden  Hidden
        Boolean
    ncp.att_def32_read_audit  Read Audit
        Boolean
    ncp.att_def32_ro  Read Only
        Boolean
    ncp.att_def32_shareable  Shareable
        Boolean
    ncp.att_def32_sub_only  Subdirectories Only
        Boolean
    ncp.att_def32_system  System
        Boolean
    ncp.att_def32_transaction  Transactional
        Boolean
    ncp.att_def32_write_audit  Write Audit
        Boolean
    ncp.att_def_archive  Archive
        Boolean
    ncp.att_def_comp  Compressed
        Boolean
    ncp.att_def_cpyinhibit  Copy Inhibit
        Boolean
    ncp.att_def_delinhibit  Delete Inhibit
        Boolean
    ncp.att_def_execute  Execute
        Boolean
    ncp.att_def_hidden  Hidden
        Boolean
    ncp.att_def_im_comp  Immediate Compress
        Boolean
    ncp.att_def_purge  Purge
        Boolean
    ncp.att_def_reninhibit  Rename Inhibit
        Boolean
    ncp.att_def_ro  Read Only
        Boolean
    ncp.att_def_shareable  Shareable
        Boolean
    ncp.att_def_sub_only  Subdirectories Only
        Boolean
    ncp.att_def_system  System
        Boolean
    ncp.attach_during_processing  Attach During Processing
        Unsigned 16-bit integer
    ncp.attach_while_processing_attach  Attach While Processing Attach
        Unsigned 16-bit integer
    ncp.attached_indexed_files  Attached Indexed Files
        Unsigned 8-bit integer
    ncp.attr_def  Attributes
        Unsigned 8-bit integer
    ncp.attr_def_16  Attributes
        Unsigned 16-bit integer
    ncp.attr_def_32  Attributes
        Unsigned 32-bit integer
    ncp.attribute_valid_flag  Attribute Valid Flag
        Unsigned 32-bit integer
    ncp.attributes  Attributes
        Unsigned 32-bit integer
    ncp.audit_enable_flag  Auditing Enabled Flag
        Unsigned 16-bit integer
    ncp.audit_file_max_size  Audit File Maximum Size
        Unsigned 32-bit integer
    ncp.audit_file_size  Audit File Size
        Unsigned 32-bit integer
    ncp.audit_file_size_threshold  Audit File Size Threshold
        Unsigned 32-bit integer
    ncp.audit_file_ver_date  Audit File Version Date
        Unsigned 16-bit integer
    ncp.audit_flag  Audit Flag
        Unsigned 8-bit integer
    ncp.audit_handle  Audit File Handle
        Unsigned 32-bit integer
    ncp.audit_id  Audit ID
        Unsigned 32-bit integer
    ncp.audit_id_type  Audit ID Type
        Unsigned 16-bit integer
    ncp.audit_record_count  Audit Record Count
        Unsigned 32-bit integer
    ncp.audit_ver_date  Auditing Version Date
        Unsigned 16-bit integer
    ncp.auditing_flags  Auditing Flags
        Unsigned 32-bit integer
    ncp.avail_space  Available Space
        Unsigned 32-bit integer
    ncp.available_blocks  Available Blocks
        Unsigned 32-bit integer
    ncp.available_clusters  Available Clusters
        Unsigned 16-bit integer
    ncp.available_dir_entries  Available Directory Entries
        Unsigned 32-bit integer
    ncp.available_directory_slots  Available Directory Slots
        Unsigned 16-bit integer
    ncp.available_indexed_files  Available Indexed Files
        Unsigned 16-bit integer
    ncp.background_aged_writes  Background Aged Writes
        Unsigned 32-bit integer
    ncp.background_dirty_writes  Background Dirty Writes
        Unsigned 32-bit integer
    ncp.bad_logical_connection_count  Bad Logical Connection Count
        Unsigned 16-bit integer
    ncp.banner_name  Banner Name
        String
    ncp.base_directory_id  Base Directory ID
        Unsigned 32-bit integer
    ncp.being_aborted  Being Aborted Count
        Unsigned 32-bit integer
    ncp.being_processed  Being Processed Count
        Unsigned 32-bit integer
    ncp.big_forged_packet  Big Forged Packet Count
        Unsigned 32-bit integer
    ncp.big_invalid_packet  Big Invalid Packet Count
        Unsigned 32-bit integer
    ncp.big_invalid_slot  Big Invalid Slot Count
        Unsigned 32-bit integer
    ncp.big_read_being_torn_down  Big Read Being Torn Down Count
        Unsigned 32-bit integer
    ncp.big_read_do_it_over  Big Read Do It Over Count
        Unsigned 32-bit integer
    ncp.big_read_invalid_mess  Big Read Invalid Message Number Count
        Unsigned 32-bit integer
    ncp.big_read_no_data_avail  Big Read No Data Available Count
        Unsigned 32-bit integer
    ncp.big_read_phy_read_err  Big Read Physical Read Error Count
        Unsigned 32-bit integer
    ncp.big_read_trying_to_read  Big Read Trying To Read Too Much Count
        Unsigned 32-bit integer
    ncp.big_repeat_the_file_read  Big Repeat the File Read Count
        Unsigned 32-bit integer
    ncp.big_return_abort_mess  Big Return Abort Message Count
        Unsigned 32-bit integer
    ncp.big_send_extra_cc_count  Big Send Extra CC Count
        Unsigned 32-bit integer
    ncp.big_still_transmitting  Big Still Transmitting Count
        Unsigned 32-bit integer
    ncp.big_write_being_abort  Big Write Being Aborted Count
        Unsigned 32-bit integer
    ncp.big_write_being_torn_down  Big Write Being Torn Down Count
        Unsigned 32-bit integer
    ncp.big_write_inv_message_num  Big Write Invalid Message Number Count
        Unsigned 32-bit integer
    ncp.bindery_context  Bindery Context
        String
    ncp.bit_map  Bit Map
        Byte array
    ncp.block_number  Block Number
        Unsigned 32-bit integer
    ncp.block_size  Block Size
        Unsigned 16-bit integer
    ncp.block_size_in_sectors  Block Size in Sectors
        Unsigned 32-bit integer
    ncp.board_installed  Board Installed
        Unsigned 8-bit integer
    ncp.board_number  Board Number
        Unsigned 32-bit integer
    ncp.board_numbers  Board Numbers
        Unsigned 32-bit integer
    ncp.buffer_size  Buffer Size
        Unsigned 16-bit integer
    ncp.bumped_out_of_order  Bumped Out Of Order Write Count
        Unsigned 32-bit integer
    ncp.burst_len  Burst Length
        Unsigned 32-bit integer
        Total length of data in this burst
    ncp.burst_seqno  Burst Sequence Number
        Unsigned 16-bit integer
        Sequence number of this packet in the burst
    ncp.bus_string  Bus String
        String
    ncp.bus_type  Bus Type
        Unsigned 8-bit integer
    ncp.bytes_actually_transferred  Bytes Actually Transferred
        Unsigned 32-bit integer
    ncp.bytes_read  Bytes Read
        String
    ncp.bytes_to_copy  Bytes to Copy
        Unsigned 32-bit integer
    ncp.bytes_written  Bytes Written
        String
    ncp.cache_allocations  Cache Allocations
        Unsigned 32-bit integer
    ncp.cache_block_scrapped  Cache Block Scrapped
        Unsigned 16-bit integer
    ncp.cache_buffer_count  Cache Buffer Count
        Unsigned 16-bit integer
    ncp.cache_buffer_size  Cache Buffer Size
        Unsigned 16-bit integer
    ncp.cache_byte_to_block  Cache Byte To Block Shift Factor
        Unsigned 32-bit integer
    ncp.cache_dirty_block_thresh  Cache Dirty Block Threshold
        Unsigned 32-bit integer
    ncp.cache_dirty_wait_time  Cache Dirty Wait Time
        Unsigned 32-bit integer
    ncp.cache_full_write_requests  Cache Full Write Requests
        Unsigned 32-bit integer
    ncp.cache_get_requests  Cache Get Requests
        Unsigned 32-bit integer
    ncp.cache_hit_on_unavailable_block  Cache Hit On Unavailable Block
        Unsigned 16-bit integer
    ncp.cache_hits  Cache Hits
        Unsigned 32-bit integer
    ncp.cache_max_concur_writes  Cache Maximum Concurrent Writes
        Unsigned 32-bit integer
    ncp.cache_misses  Cache Misses
        Unsigned 32-bit integer
    ncp.cache_partial_write_requests  Cache Partial Write Requests
        Unsigned 32-bit integer
    ncp.cache_read_requests  Cache Read Requests
        Unsigned 32-bit integer
    ncp.cache_used_while_check  Cache Used While Checking
        Unsigned 32-bit integer
    ncp.cache_write_requests  Cache Write Requests
        Unsigned 32-bit integer
    ncp.category_name  Category Name
        String
    ncp.cc_file_handle  File Handle
        Byte array
    ncp.cc_function  OP-Lock Flag
        Unsigned 8-bit integer
    ncp.cfg_max_simultaneous_transactions  Configured Max Simultaneous Transactions
        Unsigned 16-bit integer
    ncp.change_bits  Change Bits
        Unsigned 16-bit integer
    ncp.change_bits_acc_date  Access Date
        Boolean
    ncp.change_bits_adate  Archive Date
        Boolean
    ncp.change_bits_aid  Archiver ID
        Boolean
    ncp.change_bits_atime  Archive Time
        Boolean
    ncp.change_bits_cdate  Creation Date
        Boolean
    ncp.change_bits_ctime  Creation Time
        Boolean
    ncp.change_bits_fatt  File Attributes
        Boolean
    ncp.change_bits_max_acc_mask  Maximum Access Mask
        Boolean
    ncp.change_bits_max_space  Maximum Space
        Boolean
    ncp.change_bits_modify  Modify Name
        Boolean
    ncp.change_bits_owner  Owner ID
        Boolean
    ncp.change_bits_udate  Update Date
        Boolean
    ncp.change_bits_uid  Update ID
        Boolean
    ncp.change_bits_utime  Update Time
        Boolean
    ncp.channel_state  Channel State
        Unsigned 8-bit integer
    ncp.channel_synchronization_state  Channel Synchronization State
        Unsigned 8-bit integer
    ncp.charge_amount  Charge Amount
        Unsigned 32-bit integer
    ncp.charge_information  Charge Information
        Unsigned 32-bit integer
    ncp.checksum_error_count  Checksum Error Count
        Unsigned 32-bit integer
    ncp.checksuming  Checksumming
        Boolean
    ncp.client_comp_flag  Completion Flag
        Unsigned 16-bit integer
    ncp.client_id_number  Client ID Number
        Unsigned 32-bit integer
    ncp.client_list  Client List
        Unsigned 32-bit integer
    ncp.client_list_cnt  Client List Count
        Unsigned 16-bit integer
    ncp.client_list_len  Client List Length
        Unsigned 8-bit integer
    ncp.client_record_area  Client Record Area
        String
    ncp.client_station  Client Station
        Unsigned 8-bit integer
    ncp.client_station_long  Client Station
        Unsigned 32-bit integer
    ncp.client_task_number  Client Task Number
        Unsigned 8-bit integer
    ncp.client_task_number_long  Client Task Number
        Unsigned 32-bit integer
    ncp.cluster_count  Cluster Count
        Unsigned 16-bit integer
    ncp.clusters_used_by_directories  Clusters Used by Directories
        Unsigned 32-bit integer
    ncp.clusters_used_by_extended_dirs  Clusters Used by Extended Directories
        Unsigned 32-bit integer
    ncp.clusters_used_by_fat  Clusters Used by FAT
        Unsigned 32-bit integer
    ncp.cmd_flags_advanced  Advanced
        Boolean
    ncp.cmd_flags_hidden  Hidden
        Boolean
    ncp.cmd_flags_later  Restart Server Required to Take Effect
        Boolean
    ncp.cmd_flags_secure  Console Secured
        Boolean
    ncp.cmd_flags_startup_only  Startup.ncf Only
        Boolean
    ncp.cmpbyteincount  Compress Byte In Count
        Unsigned 32-bit integer
    ncp.cmpbyteoutcnt  Compress Byte Out Count
        Unsigned 32-bit integer
    ncp.cmphibyteincnt  Compress High Byte In Count
        Unsigned 32-bit integer
    ncp.cmphibyteoutcnt  Compress High Byte Out Count
        Unsigned 32-bit integer
    ncp.cmphitickcnt  Compress High Tick Count
        Unsigned 32-bit integer
    ncp.cmphitickhigh  Compress High Tick
        Unsigned 32-bit integer
    ncp.co_proc_string  CoProcessor String
        String
    ncp.co_processor_flag  CoProcessor Present Flag
        Unsigned 32-bit integer
    ncp.com_cnts  Communication Counters
        Unsigned 16-bit integer
    ncp.comment  Comment
        String
    ncp.comment_type  Comment Type
        Unsigned 16-bit integer
    ncp.complete_signatures  Complete Signatures
        Boolean
    ncp.completion_code  Completion Code
        Unsigned 8-bit integer
    ncp.compress_volume  Volume Compression
        Unsigned 32-bit integer
    ncp.compressed_data_streams_count  Compressed Data Streams Count
        Unsigned 32-bit integer
    ncp.compressed_limbo_data_streams_count  Compressed Limbo Data Streams Count
        Unsigned 32-bit integer
    ncp.compressed_sectors  Compressed Sectors
        Unsigned 32-bit integer
    ncp.compression_ios_limit  Compression IOs Limit
        Unsigned 32-bit integer
    ncp.compression_lower_limit  Compression Lower Limit
        Unsigned 32-bit integer
    ncp.compression_stage  Compression Stage
        Unsigned 32-bit integer
    ncp.config_major_vn  Configuration Major Version Number
        Unsigned 8-bit integer
    ncp.config_minor_vn  Configuration Minor Version Number
        Unsigned 8-bit integer
    ncp.configuration_description  Configuration Description
        String
    ncp.configuration_text  Configuration Text
        String
    ncp.configured_max_bindery_objects  Configured Max Bindery Objects
        Unsigned 16-bit integer
    ncp.configured_max_open_files  Configured Max Open Files
        Unsigned 16-bit integer
    ncp.configured_max_routing_buffers  Configured Max Routing Buffers
        Unsigned 16-bit integer
    ncp.conn_being_aborted  Connection Being Aborted Count
        Unsigned 32-bit integer
    ncp.conn_ctrl_bits  Connection Control
        Unsigned 8-bit integer
    ncp.conn_list  Connection List
        Unsigned 32-bit integer
    ncp.conn_list_count  Connection List Count
        Unsigned 32-bit integer
    ncp.conn_list_len  Connection List Length
        Unsigned 8-bit integer
    ncp.conn_number_byte  Connection Number
        Unsigned 8-bit integer
    ncp.conn_number_word  Connection Number
        Unsigned 16-bit integer
    ncp.connected_lan  LAN Adapter
        Unsigned 32-bit integer
    ncp.connection  Connection Number
        Unsigned 16-bit integer
    ncp.connection_list  Connection List
        Unsigned 32-bit integer
    ncp.connection_number  Connection Number
        Unsigned 32-bit integer
    ncp.connection_number_list  Connection Number List
        String
    ncp.connection_service_type  Connection Service Type
        Unsigned 8-bit integer
    ncp.connection_status  Connection Status
        Unsigned 8-bit integer
    ncp.connection_type  Connection Type
        Unsigned 8-bit integer
    ncp.connections_in_use  Connections In Use
        Unsigned 16-bit integer
    ncp.connections_max_used  Connections Max Used
        Unsigned 16-bit integer
    ncp.connections_supported_max  Connections Supported Max
        Unsigned 16-bit integer
    ncp.control_being_torn_down  Control Being Torn Down Count
        Unsigned 32-bit integer
    ncp.control_code  Control Code
        Unsigned 8-bit integer
    ncp.control_flags  Control Flags
        Unsigned 8-bit integer
    ncp.control_invalid_message_number  Control Invalid Message Number Count
        Unsigned 32-bit integer
    ncp.controller_drive_number  Controller Drive Number
        Unsigned 8-bit integer
    ncp.controller_number  Controller Number
        Unsigned 8-bit integer
    ncp.controller_type  Controller Type
        Unsigned 8-bit integer
    ncp.cookie_1  Cookie 1
        Unsigned 32-bit integer
    ncp.cookie_2  Cookie 2
        Unsigned 32-bit integer
    ncp.copies  Copies
        Unsigned 8-bit integer
    ncp.copyright  Copyright
        String
    ncp.counter_mask  Counter Mask
        Unsigned 8-bit integer
    ncp.cpu_number  CPU Number
        Unsigned 32-bit integer
    ncp.cpu_string  CPU String
        String
    ncp.cpu_type  CPU Type
        Unsigned 8-bit integer
    ncp.creation_date  Creation Date
        Unsigned 16-bit integer
    ncp.creation_time  Creation Time
        Unsigned 16-bit integer
    ncp.creator_id  Creator ID
        Unsigned 32-bit integer
    ncp.creator_name_space_number  Creator Name Space Number
        Unsigned 8-bit integer
    ncp.credit_limit  Credit Limit
        Unsigned 32-bit integer
    ncp.ctl_bad_ack_frag_list  Control Bad ACK Fragment List Count
        Unsigned 32-bit integer
    ncp.ctl_no_data_read  Control No Data Read Count
        Unsigned 32-bit integer
    ncp.ctrl_flags  Control Flags
        Unsigned 16-bit integer
    ncp.cur_blk_being_dcompress  Current Block Being Decompressed
        Unsigned 32-bit integer
    ncp.cur_comp_blks  Current Compression Blocks
        Unsigned 32-bit integer
    ncp.cur_initial_blks  Current Initial Blocks
        Unsigned 32-bit integer
    ncp.cur_inter_blks  Current Intermediate Blocks
        Unsigned 32-bit integer
    ncp.cur_num_of_r_tags  Current Number of Resource Tags
        Unsigned 32-bit integer
    ncp.curr_num_cache_buff  Current Number Of Cache Buffers
        Unsigned 32-bit integer
    ncp.curr_ref_id  Current Reference ID
        Unsigned 16-bit integer
    ncp.current_changed_fats  Current Changed FAT Entries
        Unsigned 16-bit integer
    ncp.current_entries  Current Entries
        Unsigned 32-bit integer
    ncp.current_form_type  Current Form Type
        Unsigned 8-bit integer
    ncp.current_lfs_counters  Current LFS Counters
        Unsigned 32-bit integer
    ncp.current_open_files  Current Open Files
        Unsigned 16-bit integer
    ncp.current_server_time  Time Elapsed Since Server Was Brought Up
        Unsigned 32-bit integer
    ncp.current_servers  Current Servers
        Unsigned 32-bit integer
    ncp.current_space  Current Space
        Unsigned 32-bit integer
    ncp.current_trans_count  Current Transaction Count
        Unsigned 32-bit integer
    ncp.current_used_bindery_objects  Current Used Bindery Objects
        Unsigned 16-bit integer
    ncp.currently_used_routing_buffers  Currently Used Routing Buffers
        Unsigned 16-bit integer
    ncp.custom_cnts  Custom Counters
        Unsigned 32-bit integer
    ncp.custom_count  Custom Count
        Unsigned 32-bit integer
    ncp.custom_counters  Custom Counters
        Unsigned 32-bit integer
    ncp.custom_string  Custom String
        String
    ncp.custom_var_value  Custom Variable Value
        Unsigned 32-bit integer
    ncp.data  Data
        String
    ncp.data_bytes  Data Bytes
        Unsigned 16-bit integer
        Number of data bytes in this packet
    ncp.data_fork_first_fat  Data Fork First FAT Entry
        Unsigned 32-bit integer
    ncp.data_fork_len  Data Fork Len
        Unsigned 32-bit integer
    ncp.data_fork_size  Data Fork Size
        Unsigned 32-bit integer
    ncp.data_offset  Data Offset
        Unsigned 32-bit integer
        Offset of this packet in the burst
    ncp.data_size  Data Size
        Unsigned 32-bit integer
    ncp.data_stream  Data Stream
        Unsigned 8-bit integer
    ncp.data_stream_name  Data Stream Name
        String
    ncp.data_stream_number  Data Stream Number
        Unsigned 8-bit integer
    ncp.data_stream_size  Size
        Unsigned 32-bit integer
    ncp.data_stream_space_alloc  Space Allocated for Data Stream
        Unsigned 32-bit integer
    ncp.data_streams_count  Data Streams Count
        Unsigned 32-bit integer
    ncp.dc_dirty_wait_time  DC Dirty Wait Time
        Unsigned 32-bit integer
    ncp.dc_double_read_flag  DC Double Read Flag
        Unsigned 32-bit integer
    ncp.dc_max_concurrent_writes  DC Maximum Concurrent Writes
        Unsigned 32-bit integer
    ncp.dc_min_non_ref_time  DC Minimum Non-Referenced Time
        Unsigned 32-bit integer
    ncp.dc_wait_time_before_new_buff  DC Wait Time Before New Buffer
        Unsigned 32-bit integer
    ncp.dead_mirror_table  Dead Mirror Table
        Byte array
    ncp.dealloc_being_proc  De-Allocate Being Processed Count
        Unsigned 32-bit integer
    ncp.dealloc_forged_packet  De-Allocate Forged Packet Count
        Unsigned 32-bit integer
    ncp.dealloc_invalid_slot  De-Allocate Invalid Slot Count
        Unsigned 32-bit integer
    ncp.dealloc_still_transmit  De-Allocate Still Transmitting Count
        Unsigned 32-bit integer
    ncp.decpbyteincount  DeCompress Byte In Count
        Unsigned 32-bit integer
    ncp.decpbyteoutcnt  DeCompress Byte Out Count
        Unsigned 32-bit integer
    ncp.decphibyteincnt  DeCompress High Byte In Count
        Unsigned 32-bit integer
    ncp.decphibyteoutcnt  DeCompress High Byte Out Count
        Unsigned 32-bit integer
    ncp.decphitickcnt  DeCompress High Tick Count
        Unsigned 32-bit integer
    ncp.decphitickhigh  DeCompress High Tick
        Unsigned 32-bit integer
    ncp.definded_name_spaces  Defined Name Spaces
        Unsigned 8-bit integer
    ncp.defined_data_streams  Defined Data Streams
        Unsigned 8-bit integer
    ncp.delay_time  Delay Time
        Unsigned 32-bit integer
        Delay time between consecutive packet sends (100 us increments)
    ncp.delete_existing_file_flag  Delete Existing File Flag
        Unsigned 8-bit integer
    ncp.delete_id  Deleted ID
        Unsigned 32-bit integer
    ncp.deleted_date  Deleted Date
        Unsigned 16-bit integer
    ncp.deleted_file_time  Deleted File Time
        Unsigned 32-bit integer
    ncp.deleted_time  Deleted Time
        Unsigned 16-bit integer
    ncp.deny_read_count  Deny Read Count
        Unsigned 16-bit integer
    ncp.deny_write_count  Deny Write Count
        Unsigned 16-bit integer
    ncp.description_string  Description
        String
    ncp.desired_access_rights  Desired Access Rights
        Unsigned 16-bit integer
    ncp.desired_response_count  Desired Response Count
        Unsigned 16-bit integer
    ncp.dest_component_count  Destination Path Component Count
        Unsigned 8-bit integer
    ncp.dest_dir_handle  Destination Directory Handle
        Unsigned 8-bit integer
    ncp.dest_name_space  Destination Name Space
        Unsigned 8-bit integer
    ncp.dest_path  Destination Path
        String
    ncp.detach_during_processing  Detach During Processing
        Unsigned 16-bit integer
    ncp.detach_for_bad_connection_number  Detach For Bad Connection Number
        Unsigned 16-bit integer
    ncp.dir_base  Directory Base
        Unsigned 32-bit integer
    ncp.dir_count  Directory Count
        Unsigned 16-bit integer
    ncp.dir_handle  Directory Handle
        Unsigned 8-bit integer
    ncp.dir_handle_long  Directory Handle
        Unsigned 32-bit integer
    ncp.dir_handle_name  Handle Name
        Unsigned 8-bit integer
    ncp.directory_access_rights  Directory Access Rights
        Unsigned 8-bit integer
    ncp.directory_attributes  Directory Attributes
        Unsigned 8-bit integer
    ncp.directory_entry_number  Directory Entry Number
        Unsigned 32-bit integer
    ncp.directory_entry_number_word  Directory Entry Number
        Unsigned 16-bit integer
    ncp.directory_id  Directory ID
        Unsigned 16-bit integer
    ncp.directory_name  Directory Name
        String
    ncp.directory_name_14  Directory Name
        String
    ncp.directory_name_len  Directory Name Length
        Unsigned 8-bit integer
    ncp.directory_number  Directory Number
        Unsigned 32-bit integer
    ncp.directory_path  Directory Path
        String
    ncp.directory_services_object_id  Directory Services Object ID
        Unsigned 32-bit integer
    ncp.directory_stamp  Directory Stamp (0xD1D1)
        Unsigned 16-bit integer
    ncp.dirty_cache_buffers  Dirty Cache Buffers
        Unsigned 16-bit integer
    ncp.disable_brdcasts  Disable Broadcasts
        Boolean
    ncp.disable_personal_brdcasts  Disable Personal Broadcasts
        Boolean
    ncp.disable_wdog_messages  Disable Watchdog Message
        Boolean
    ncp.disk_channel_number  Disk Channel Number
        Unsigned 8-bit integer
    ncp.disk_channel_table  Disk Channel Table
        Unsigned 8-bit integer
    ncp.disk_space_limit  Disk Space Limit
        Unsigned 32-bit integer
    ncp.dm_flags  DM Flags
        Unsigned 8-bit integer
    ncp.dm_info_entries  DM Info Entries
        Unsigned 32-bit integer
    ncp.dm_info_level  DM Info Level
        Unsigned 8-bit integer
    ncp.dm_major_version  DM Major Version
        Unsigned 32-bit integer
    ncp.dm_minor_version  DM Minor Version
        Unsigned 32-bit integer
    ncp.dm_present_flag  Data Migration Present Flag
        Unsigned 8-bit integer
    ncp.dma_channels_used  DMA Channels Used
        Unsigned 32-bit integer
    ncp.dos_directory_base  DOS Directory Base
        Unsigned 32-bit integer
    ncp.dos_directory_entry  DOS Directory Entry
        Unsigned 32-bit integer
    ncp.dos_directory_entry_number  DOS Directory Entry Number
        Unsigned 32-bit integer
    ncp.dos_file_attributes  DOS File Attributes
        Unsigned 8-bit integer
    ncp.dos_parent_directory_entry  DOS Parent Directory Entry
        Unsigned 32-bit integer
    ncp.dos_sequence  DOS Sequence
        Unsigned 32-bit integer
    ncp.drive_cylinders  Drive Cylinders
        Unsigned 16-bit integer
    ncp.drive_definition_string  Drive Definition
        String
    ncp.drive_heads  Drive Heads
        Unsigned 8-bit integer
    ncp.drive_mapping_table  Drive Mapping Table
        Byte array
    ncp.drive_mirror_table  Drive Mirror Table
        Byte array
    ncp.drive_removable_flag  Drive Removable Flag
        Unsigned 8-bit integer
    ncp.drive_size  Drive Size
        Unsigned 32-bit integer
    ncp.driver_board_name  Driver Board Name
        String
    ncp.driver_log_name  Driver Logical Name
        String
    ncp.driver_short_name  Driver Short Name
        String
    ncp.dsired_acc_rights_compat  Compatibility
        Boolean
    ncp.dsired_acc_rights_del_file_cls  Delete File Close
        Boolean
    ncp.dsired_acc_rights_deny_r  Deny Read
        Boolean
    ncp.dsired_acc_rights_deny_w  Deny Write
        Boolean
    ncp.dsired_acc_rights_read_o  Read Only
        Boolean
    ncp.dsired_acc_rights_w_thru  File Write Through
        Boolean
    ncp.dsired_acc_rights_write_o  Write Only
        Boolean
    ncp.dst_connection  Destination Connection ID
        Unsigned 32-bit integer
        The server's connection identification number
    ncp.dst_ea_flags  Destination EA Flags
        Unsigned 16-bit integer
    ncp.dst_ns_indicator  Destination Name Space Indicator
        Unsigned 16-bit integer
    ncp.dst_queue_id  Destination Queue ID
        Unsigned 32-bit integer
    ncp.dup_is_being_sent  Duplicate Is Being Sent Already Count
        Unsigned 32-bit integer
    ncp.duplicate_replies_sent  Duplicate Replies Sent
        Unsigned 16-bit integer
    ncp.dyn_mem_struct_cur  Current Used Dynamic Space
        Unsigned 32-bit integer
    ncp.dyn_mem_struct_max  Max Used Dynamic Space
        Unsigned 32-bit integer
    ncp.dyn_mem_struct_total  Total Dynamic Space
        Unsigned 32-bit integer
    ncp.ea_access_flag  EA Access Flag
        Unsigned 16-bit integer
    ncp.ea_bytes_written  Bytes Written
        Unsigned 32-bit integer
    ncp.ea_count  Count
        Unsigned 32-bit integer
    ncp.ea_data_size  Data Size
        Unsigned 32-bit integer
    ncp.ea_data_size_duplicated  Data Size Duplicated
        Unsigned 32-bit integer
    ncp.ea_duplicate_count  Duplicate Count
        Unsigned 32-bit integer
    ncp.ea_error_codes  EA Error Codes
        Unsigned 16-bit integer
    ncp.ea_flags  EA Flags
        Unsigned 16-bit integer
    ncp.ea_handle  EA Handle
        Unsigned 32-bit integer
    ncp.ea_handle_or_netware_handle_or_volume  EAHandle or NetWare Handle or Volume (see EAFlags)
        Unsigned 32-bit integer
    ncp.ea_key  EA Key
        String
    ncp.ea_key_size  Key Size
        Unsigned 32-bit integer
    ncp.ea_key_size_duplicated  Key Size Duplicated
        Unsigned 32-bit integer
    ncp.ea_need_bit_flag  EA Need Bit Flag
        Boolean
    ncp.ea_value  EA Value
        String
    ncp.ea_value_length  Value Length
        Unsigned 16-bit integer
    ncp.ea_value_rep  EA Value
        String
    ncp.ecb_cxl_fails  ECB Cancel Failures
        Unsigned 32-bit integer
    ncp.echo_socket  Echo Socket
        Unsigned 16-bit integer
    ncp.effective_rights  Effective Rights
        Unsigned 8-bit integer
    ncp.effective_rights_create  Create Rights
        Boolean
    ncp.effective_rights_delete  Delete Rights
        Boolean
    ncp.effective_rights_modify  Modify Rights
        Boolean
    ncp.effective_rights_open  Open Rights
        Boolean
    ncp.effective_rights_parental  Parental Rights
        Boolean
    ncp.effective_rights_read  Read Rights
        Boolean
    ncp.effective_rights_search  Search Rights
        Boolean
    ncp.effective_rights_write  Write Rights
        Boolean
    ncp.enable_brdcasts  Enable Broadcasts
        Boolean
    ncp.enable_personal_brdcasts  Enable Personal Broadcasts
        Boolean
    ncp.enable_wdog_messages  Enable Watchdog Message
        Boolean
    ncp.encryption  Encryption
        Boolean
    ncp.enqueued_send_cnt  Enqueued Send Count
        Unsigned 32-bit integer
    ncp.enum_info_account  Accounting Information
        Boolean
    ncp.enum_info_auth  Authentication Information
        Boolean
    ncp.enum_info_lock  Lock Information
        Boolean
    ncp.enum_info_mask  Return Information Mask
        Unsigned 8-bit integer
    ncp.enum_info_name  Name Information
        Boolean
    ncp.enum_info_print  Print Information
        Boolean
    ncp.enum_info_stats  Statistical Information
        Boolean
    ncp.enum_info_time  Time Information
        Boolean
    ncp.enum_info_transport  Transport Information
        Boolean
    ncp.err_doing_async_read  Error Doing Async Read Count
        Unsigned 32-bit integer
    ncp.error_read_last_fat  Error Reading Last FAT Count
        Unsigned 32-bit integer
    ncp.event_offset  Event Offset
        Byte array
    ncp.event_time  Event Time
        Unsigned 32-bit integer
    ncp.expiration_time  Expiration Time
        Unsigned 32-bit integer
    ncp.ext_info  Extended Return Information
        Unsigned 16-bit integer
    ncp.ext_info_64_bit_fs  64 Bit File Sizes
        Boolean
    ncp.ext_info_access  Last Access
        Boolean
    ncp.ext_info_dos_name  DOS Name
        Boolean
    ncp.ext_info_effective  Effective
        Boolean
    ncp.ext_info_flush  Flush
        Boolean
    ncp.ext_info_mac_date  MAC Date
        Boolean
    ncp.ext_info_mac_finder  MAC Finder
        Boolean
    ncp.ext_info_newstyle  New Style
        Boolean
    ncp.ext_info_parental  Parental
        Boolean
    ncp.ext_info_sibling  Sibling
        Boolean
    ncp.ext_info_update  Update
        Boolean
    ncp.ext_router_active_flag  External Router Active Flag
        Boolean
    ncp.extended_attribute_extants_used  Extended Attribute Extants Used
        Unsigned 32-bit integer
    ncp.extended_attributes_defined  Extended Attributes Defined
        Unsigned 32-bit integer
    ncp.extra_extra_use_count_node_count  Errors allocating an additional use count node for TTS
        Unsigned 32-bit integer
    ncp.extra_use_count_node_count  Errors allocating a use count node for TTS
        Unsigned 32-bit integer
    ncp.failed_alloc_req  Failed Alloc Request Count
        Unsigned 32-bit integer
    ncp.fat_moved  Number of times the OS has move the location of FAT
        Unsigned 32-bit integer
    ncp.fat_scan_errors  FAT Scan Errors
        Unsigned 16-bit integer
    ncp.fat_write_err  Number of write errors in both original and mirrored copies of FAT
        Unsigned 32-bit integer
    ncp.fat_write_errors  FAT Write Errors
        Unsigned 16-bit integer
    ncp.fatal_fat_write_errors  Fatal FAT Write Errors
        Unsigned 16-bit integer
    ncp.fields_len_table  Fields Len Table
        Byte array
    ncp.file_count  File Count
        Unsigned 16-bit integer
    ncp.file_date  File Date
        Unsigned 16-bit integer
    ncp.file_dir_win  File/Dir Window
        Unsigned 16-bit integer
    ncp.file_execute_type  File Execute Type
        Unsigned 8-bit integer
    ncp.file_ext_attr  File Extended Attributes
        Unsigned 8-bit integer
    ncp.file_flags  File Flags
        Unsigned 32-bit integer
    ncp.file_handle  File Handle
        Byte array
    ncp.file_limbo  File Limbo
        Unsigned 32-bit integer
    ncp.file_list_count  File List Count
        Unsigned 32-bit integer
    ncp.file_lock_count  File Lock Count
        Unsigned 16-bit integer
    ncp.file_mode  File Mode
        Unsigned 8-bit integer
    ncp.file_name  Filename
        String
    ncp.file_name_12  Filename
        String
    ncp.file_name_14  Filename
        String
    ncp.file_name_len  Filename Length
        Unsigned 8-bit integer
    ncp.file_offset  File Offset
        Unsigned 32-bit integer
    ncp.file_path  File Path
        String
    ncp.file_size  File Size
        Unsigned 32-bit integer
    ncp.file_system_id  File System ID
        Unsigned 8-bit integer
    ncp.file_time  File Time
        Unsigned 16-bit integer
    ncp.file_write_flags  File Write Flags
        Unsigned 8-bit integer
    ncp.file_write_state  File Write State
        Unsigned 8-bit integer
    ncp.filler  Filler
        Unsigned 8-bit integer
    ncp.finder_attr  Finder Info Attributes
        Unsigned 16-bit integer
    ncp.finder_attr_bundle  Object Has Bundle
        Boolean
    ncp.finder_attr_desktop  Object on Desktop
        Boolean
    ncp.finder_attr_invisible  Object is Invisible
        Boolean
    ncp.first_packet_isnt_a_write  First Packet Isn't A Write Count
        Unsigned 32-bit integer
    ncp.fixed_bit_mask  Fixed Bit Mask
        Unsigned 32-bit integer
    ncp.fixed_bits_defined  Fixed Bits Defined
        Unsigned 16-bit integer
    ncp.flag_bits  Flag Bits
        Unsigned 8-bit integer
    ncp.flags  Flags
        Unsigned 8-bit integer
    ncp.flags_def  Flags
        Unsigned 16-bit integer
    ncp.flush_time  Flush Time
        Unsigned 32-bit integer
    ncp.folder_flag  Folder Flag
        Unsigned 8-bit integer
    ncp.force_flag  Force Server Down Flag
        Unsigned 8-bit integer
    ncp.forged_detached_requests  Forged Detached Requests
        Unsigned 16-bit integer
    ncp.forged_packet  Forged Packet Count
        Unsigned 32-bit integer
    ncp.fork_count  Fork Count
        Unsigned 8-bit integer
    ncp.fork_indicator  Fork Indicator
        Unsigned 8-bit integer
    ncp.form_type  Form Type
        Unsigned 16-bit integer
    ncp.form_type_count  Form Types Count
        Unsigned 32-bit integer
    ncp.found_some_mem  Found Some Memory
        Unsigned 32-bit integer
    ncp.fractional_time  Fractional Time in Seconds
        Unsigned 32-bit integer
    ncp.frag_size  Fragment Size
        Unsigned 32-bit integer
    ncp.fragger_handle  Fragment Handle
        Unsigned 32-bit integer
    ncp.fragment_write_occurred  Fragment Write Occurred
        Unsigned 16-bit integer
    ncp.free_blocks  Free Blocks
        Unsigned 32-bit integer
    ncp.free_directory_entries  Free Directory Entries
        Unsigned 16-bit integer
    ncp.freeable_limbo_sectors  Freeable Limbo Sectors
        Unsigned 32-bit integer
    ncp.freed_clusters  Freed Clusters
        Unsigned 32-bit integer
    ncp.fs_engine_flag  FS Engine Flag
        Boolean
    ncp.full_name  Full Name
        String
    ncp.func  Function
        Unsigned 8-bit integer
    ncp.generic_block_size  Block Size
        Unsigned 32-bit integer
    ncp.generic_capacity  Capacity
        Unsigned 32-bit integer
    ncp.generic_cartridge_type  Cartridge Type
        Unsigned 32-bit integer
    ncp.generic_child_count  Child Count
        Unsigned 32-bit integer
    ncp.generic_ctl_mask  Control Mask
        Unsigned 32-bit integer
    ncp.generic_func_mask  Function Mask
        Unsigned 32-bit integer
    ncp.generic_ident_time  Identification Time
        Unsigned 32-bit integer
    ncp.generic_ident_type  Identification Type
        Unsigned 32-bit integer
    ncp.generic_label  Label
        String
    ncp.generic_media_slot  Media Slot
        Unsigned 32-bit integer
    ncp.generic_media_type  Media Type
        Unsigned 32-bit integer
    ncp.generic_name  Name
        String
    ncp.generic_object_uniq_id  Unique Object ID
        Unsigned 32-bit integer
    ncp.generic_parent_count  Parent Count
        Unsigned 32-bit integer
    ncp.generic_pref_unit_size  Preferred Unit Size
        Unsigned 32-bit integer
    ncp.generic_sib_count  Sibling Count
        Unsigned 32-bit integer
    ncp.generic_spec_info_sz  Specific Information Size
        Unsigned 32-bit integer
    ncp.generic_status  Status
        Unsigned 32-bit integer
    ncp.generic_type  Type
        Unsigned 32-bit integer
    ncp.generic_unit_size  Unit Size
        Unsigned 32-bit integer
    ncp.get_ecb_buf  Get ECB Buffers
        Unsigned 32-bit integer
    ncp.get_ecb_fails  Get ECB Failures
        Unsigned 32-bit integer
    ncp.get_set_flag  Get Set Flag
        Unsigned 8-bit integer
    ncp.guid  GUID
        Byte array
    ncp.had_an_out_of_order  Had An Out Of Order Write Count
        Unsigned 32-bit integer
    ncp.handle_flag  Handle Flag
        Unsigned 8-bit integer
    ncp.handle_info_level  Handle Info Level
        Unsigned 8-bit integer
    ncp.hardware_rx_mismatch_count  Hardware Receive Mismatch Count
        Unsigned 32-bit integer
    ncp.held_bytes_read  Held Bytes Read
        Byte array
    ncp.held_bytes_write  Held Bytes Written
        Byte array
    ncp.held_conn_time  Held Connect Time in Minutes
        Unsigned 32-bit integer
    ncp.hold_amount  Hold Amount
        Unsigned 32-bit integer
    ncp.hold_cancel_amount  Hold Cancel Amount
        Unsigned 32-bit integer
    ncp.hold_time  Hold Time
        Unsigned 32-bit integer
    ncp.holder_id  Holder ID
        Unsigned 32-bit integer
    ncp.hops_to_net  Hop Count
        Unsigned 16-bit integer
    ncp.horiz_location  Horizontal Location
        Unsigned 16-bit integer
    ncp.host_address  Host Address
        Byte array
    ncp.hot_fix_blocks_available  Hot Fix Blocks Available
        Unsigned 16-bit integer
    ncp.hot_fix_disabled  Hot Fix Disabled
        Unsigned 8-bit integer
    ncp.hot_fix_table_size  Hot Fix Table Size
        Unsigned 16-bit integer
    ncp.hot_fix_table_start  Hot Fix Table Start
        Unsigned 32-bit integer
    ncp.huge_bit_mask  Huge Bit Mask
        Unsigned 32-bit integer
    ncp.huge_bits_defined  Huge Bits Defined
        Unsigned 16-bit integer
    ncp.huge_data  Huge Data
        String
    ncp.huge_data_used  Huge Data Used
        Unsigned 32-bit integer
    ncp.huge_state_info  Huge State Info
        Byte array
    ncp.i_ran_out_someone_else_did_it_0  I Ran Out Someone Else Did It Count 0
        Unsigned 32-bit integer
    ncp.i_ran_out_someone_else_did_it_1  I Ran Out Someone Else Did It Count 1
        Unsigned 32-bit integer
    ncp.i_ran_out_someone_else_did_it_2  I Ran Out Someone Else Did It Count 2
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait  ID Get No Read No Wait Count
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait_alloc  ID Get No Read No Wait Allocate Count
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait_buffer  ID Get No Read No Wait No Buffer Count
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait_no_alloc  ID Get No Read No Wait No Alloc Count
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait_no_alloc_alloc  ID Get No Read No Wait No Alloc Allocate Count
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait_no_alloc_sema  ID Get No Read No Wait No Alloc Semaphored Count
        Unsigned 32-bit integer
    ncp.id_get_no_read_no_wait_sema  ID Get No Read No Wait Semaphored Count
        Unsigned 32-bit integer
    ncp.identification_number  Identification Number
        Unsigned 32-bit integer
    ncp.ignored_rx_pkts  Ignored Receive Packets
        Unsigned 32-bit integer
    ncp.in_use  Bytes in Use
        Unsigned 32-bit integer
    ncp.incoming_packet_discarded_no_dgroup  Incoming Packet Discarded No DGroup
        Unsigned 16-bit integer
    ncp.info_count  Info Count
        Unsigned 16-bit integer
    ncp.info_flags  Info Flags
        Unsigned 32-bit integer
    ncp.info_flags_all_attr  All Attributes
        Boolean
    ncp.info_flags_all_dirbase_num  All Directory Base Numbers
        Boolean
    ncp.info_flags_dos_attr  DOS Attributes
        Boolean
    ncp.info_flags_dos_time  DOS Time
        Boolean
    ncp.info_flags_ds_sizes  Data Stream Sizes
        Boolean
    ncp.info_flags_ea_present  EA Present Flag
        Boolean
    ncp.info_flags_effect_rights  Effective Rights
        Boolean
    ncp.info_flags_flags  Return Object Flags
        Boolean
    ncp.info_flags_flush_time  Flush Time
        Boolean
    ncp.info_flags_ids  ID's
        Boolean
    ncp.info_flags_mac_finder  Mac Finder Information
        Boolean
    ncp.info_flags_mac_time  Mac Time
        Boolean
    ncp.info_flags_max_access_mask  Maximum Access Mask
        Boolean
    ncp.info_flags_name  Return Object Name
        Boolean
    ncp.info_flags_ns_attr  Name Space Attributes
        Boolean
    ncp.info_flags_prnt_base_id  Parent Base ID
        Boolean
    ncp.info_flags_ref_count  Reference Count
        Boolean
    ncp.info_flags_security  Return Object Security
        Boolean
    ncp.info_flags_sibling_cnt  Sibling Count
        Boolean
    ncp.info_flags_type  Return Object Type
        Boolean
    ncp.info_level_num  Information Level Number
        Unsigned 8-bit integer
    ncp.info_mask  Information Mask
        Unsigned 32-bit integer
    ncp.info_mask_c_name_space  Creator Name Space & Name
        Boolean
    ncp.info_mask_dosname  DOS Name
        Boolean
    ncp.info_mask_name  Name
        Boolean
    ncp.inh_revoke_create  Create Rights
        Boolean
    ncp.inh_revoke_delete  Delete Rights
        Boolean
    ncp.inh_revoke_modify  Modify Rights
        Boolean
    ncp.inh_revoke_open  Open Rights
        Boolean
    ncp.inh_revoke_parent  Change Access
        Boolean
    ncp.inh_revoke_read  Read Rights
        Boolean
    ncp.inh_revoke_search  See Files Flag
        Boolean
    ncp.inh_revoke_supervisor  Supervisor
        Boolean
    ncp.inh_revoke_write  Write Rights
        Boolean
    ncp.inh_rights_create  Create Rights
        Boolean
    ncp.inh_rights_delete  Delete Rights
        Boolean
    ncp.inh_rights_modify  Modify Rights
        Boolean
    ncp.inh_rights_open  Open Rights
        Boolean
    ncp.inh_rights_parent  Change Access
        Boolean
    ncp.inh_rights_read  Read Rights
        Boolean
    ncp.inh_rights_search  See Files Flag
        Boolean
    ncp.inh_rights_supervisor  Supervisor
        Boolean
    ncp.inh_rights_write  Write Rights
        Boolean
    ncp.inheritance_revoke_mask  Revoke Rights Mask
        Unsigned 16-bit integer
    ncp.inherited_rights_mask  Inherited Rights Mask
        Unsigned 16-bit integer
    ncp.initial_semaphore_value  Initial Semaphore Value
        Unsigned 8-bit integer
    ncp.inspect_size  Inspect Size
        Unsigned 32-bit integer
    ncp.internet_bridge_version  Internet Bridge Version
        Unsigned 8-bit integer
    ncp.internl_dsk_get  Internal Disk Get Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_need_to_alloc  Internal Disk Get Need To Allocate Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_no_read  Internal Disk Get No Read Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_no_read_alloc  Internal Disk Get No Read Allocate Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_no_read_someone_beat  Internal Disk Get No Read Someone Beat Me Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_no_wait  Internal Disk Get No Wait Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_no_wait_need  Internal Disk Get No Wait Need To Allocate Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_no_wait_no_blk  Internal Disk Get No Wait No Block Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_part_read  Internal Disk Get Partial Read Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_read_err  Internal Disk Get Read Error Count
        Unsigned 32-bit integer
    ncp.internl_dsk_get_someone_beat  Internal Disk Get Someone Beat My Count
        Unsigned 32-bit integer
    ncp.internl_dsk_write  Internal Disk Write Count
        Unsigned 32-bit integer
    ncp.internl_dsk_write_alloc  Internal Disk Write Allocate Count
        Unsigned 32-bit integer
    ncp.internl_dsk_write_someone_beat  Internal Disk Write Someone Beat Me Count
        Unsigned 32-bit integer
    ncp.interrupt_numbers_used  Interrupt Numbers Used
        Unsigned 32-bit integer
    ncp.invalid_control_req  Invalid Control Request Count
        Unsigned 32-bit integer
    ncp.invalid_req_type  Invalid Request Type Count
        Unsigned 32-bit integer
    ncp.invalid_sequence_number  Invalid Sequence Number Count
        Unsigned 32-bit integer
    ncp.invalid_slot  Invalid Slot Count
        Unsigned 32-bit integer
    ncp.io_addresses_used  IO Addresses Used
        Byte array
    ncp.io_engine_flag  IO Engine Flag
        Boolean
    ncp.io_error_count  IO Error Count
        Unsigned 16-bit integer
    ncp.io_flag  IO Flag
        Unsigned 32-bit integer
    ncp.ip.length  NCP over IP length
        Unsigned 32-bit integer
    ncp.ip.packetsig  NCP over IP Packet Signature
        Byte array
    ncp.ip.replybufsize  NCP over IP Reply Buffer Size
        Unsigned 32-bit integer
    ncp.ip.signature  NCP over IP signature
        Unsigned 32-bit integer
    ncp.ip.version  NCP over IP Version
        Unsigned 32-bit integer
    ncp.ipx_aes_event  IPX AES Event Count
        Unsigned 32-bit integer
    ncp.ipx_ecb_cancel_fail  IPX ECB Cancel Fail Count
        Unsigned 16-bit integer
    ncp.ipx_get_ecb_fail  IPX Get ECB Fail Count
        Unsigned 32-bit integer
    ncp.ipx_get_ecb_req  IPX Get ECB Request Count
        Unsigned 32-bit integer
    ncp.ipx_get_lcl_targ_fail  IPX Get Local Target Fail Count
        Unsigned 16-bit integer
    ncp.ipx_listen_ecb  IPX Listen ECB Count
        Unsigned 32-bit integer
    ncp.ipx_malform_pkt  IPX Malformed Packet Count
        Unsigned 16-bit integer
    ncp.ipx_max_conf_sock  IPX Max Configured Socket Count
        Unsigned 16-bit integer
    ncp.ipx_max_open_sock  IPX Max Open Socket Count
        Unsigned 16-bit integer
    ncp.ipx_not_my_network  IPX Not My Network
        Unsigned 16-bit integer
    ncp.ipx_open_sock_fail  IPX Open Socket Fail Count
        Unsigned 16-bit integer
    ncp.ipx_postponed_aes  IPX Postponed AES Count
        Unsigned 16-bit integer
    ncp.ipx_send_pkt  IPX Send Packet Count
        Unsigned 32-bit integer
    ncp.items_changed  Items Changed
        Unsigned 32-bit integer
    ncp.items_checked  Items Checked
        Unsigned 32-bit integer
    ncp.items_count  Items Count
        Unsigned 32-bit integer
    ncp.items_in_list  Items in List
        Unsigned 32-bit integer
    ncp.items_in_packet  Items in Packet
        Unsigned 32-bit integer
    ncp.job_control1_file_open  File Open
        Boolean
    ncp.job_control1_job_recovery  Job Recovery
        Boolean
    ncp.job_control1_operator_hold  Operator Hold
        Boolean
    ncp.job_control1_reservice  ReService Job
        Boolean
    ncp.job_control1_user_hold  User Hold
        Boolean
    ncp.job_control_file_open  File Open
        Boolean
    ncp.job_control_flags  Job Control Flags
        Unsigned 8-bit integer
    ncp.job_control_flags_word  Job Control Flags
        Unsigned 16-bit integer
    ncp.job_control_job_recovery  Job Recovery
        Boolean
    ncp.job_control_operator_hold  Operator Hold
        Boolean
    ncp.job_control_reservice  ReService Job
        Boolean
    ncp.job_control_user_hold  User Hold
        Boolean
    ncp.job_count  Job Count
        Unsigned 32-bit integer
    ncp.job_file_handle  Job File Handle
        Byte array
    ncp.job_file_handle_long  Job File Handle
        Unsigned 32-bit integer
    ncp.job_file_name  Job File Name
        String
    ncp.job_number  Job Number
        Unsigned 16-bit integer
    ncp.job_number_list  Job Number List
        Unsigned 32-bit integer
    ncp.job_number_long  Job Number
        Unsigned 32-bit integer
    ncp.job_position  Job Position
        Unsigned 8-bit integer
    ncp.job_position_word  Job Position
        Unsigned 16-bit integer
    ncp.job_type  Job Type
        Unsigned 16-bit integer
    ncp.lan_driver_number  LAN Driver Number
        Unsigned 8-bit integer
    ncp.lan_drv_bd_inst  LAN Driver Board Instance
        Unsigned 16-bit integer
    ncp.lan_drv_bd_num  LAN Driver Board Number
        Unsigned 16-bit integer
    ncp.lan_drv_card_id  LAN Driver Card ID
        Unsigned 16-bit integer
    ncp.lan_drv_card_name  LAN Driver Card Name
        String
    ncp.lan_drv_dma_usage1  Primary DMA Channel
        Unsigned 8-bit integer
    ncp.lan_drv_dma_usage2  Secondary DMA Channel
        Unsigned 8-bit integer
    ncp.lan_drv_flags  LAN Driver Flags
        Unsigned 16-bit integer
    ncp.lan_drv_interrupt1  Primary Interrupt Vector
        Unsigned 8-bit integer
    ncp.lan_drv_interrupt2  Secondary Interrupt Vector
        Unsigned 8-bit integer
    ncp.lan_drv_io_ports_and_ranges_1  Primary Base I/O Port
        Unsigned 16-bit integer
    ncp.lan_drv_io_ports_and_ranges_2  Number of I/O Ports
        Unsigned 16-bit integer
    ncp.lan_drv_io_ports_and_ranges_3  Secondary Base I/O Port
        Unsigned 16-bit integer
    ncp.lan_drv_io_ports_and_ranges_4  Number of I/O Ports
        Unsigned 16-bit integer
    ncp.lan_drv_io_reserved  LAN Driver IO Reserved
        Byte array
    ncp.lan_drv_line_speed  LAN Driver Line Speed
        Unsigned 16-bit integer
    ncp.lan_drv_link  LAN Driver Link
        Unsigned 32-bit integer
    ncp.lan_drv_log_name  LAN Driver Logical Name
        Byte array
    ncp.lan_drv_major_ver  LAN Driver Major Version
        Unsigned 8-bit integer
    ncp.lan_drv_max_rcv_size  LAN Driver Maximum Receive Size
        Unsigned 32-bit integer
    ncp.lan_drv_max_size  LAN Driver Maximum Size
        Unsigned 32-bit integer
    ncp.lan_drv_media_id  LAN Driver Media ID
        Unsigned 16-bit integer
    ncp.lan_drv_mem_decode_0  LAN Driver Memory Decode 0
        Unsigned 32-bit integer
    ncp.lan_drv_mem_decode_1  LAN Driver Memory Decode 1
        Unsigned 32-bit integer
    ncp.lan_drv_mem_length_0  LAN Driver Memory Length 0
        Unsigned 16-bit integer
    ncp.lan_drv_mem_length_1  LAN Driver Memory Length 1
        Unsigned 16-bit integer
    ncp.lan_drv_minor_ver  LAN Driver Minor Version
        Unsigned 8-bit integer
    ncp.lan_drv_rcv_size  LAN Driver Receive Size
        Unsigned 32-bit integer
    ncp.lan_drv_reserved  LAN Driver Reserved
        Unsigned 16-bit integer
    ncp.lan_drv_share  LAN Driver Sharing Flags
        Unsigned 16-bit integer
    ncp.lan_drv_slot  LAN Driver Slot
        Unsigned 16-bit integer
    ncp.lan_drv_snd_retries  LAN Driver Send Retries
        Unsigned 16-bit integer
    ncp.lan_drv_src_route  LAN Driver Source Routing
        Unsigned 32-bit integer
    ncp.lan_drv_trans_time  LAN Driver Transport Time
        Unsigned 16-bit integer
    ncp.lan_dvr_cfg_major_vrs  LAN Driver Config - Major Version
        Unsigned 8-bit integer
    ncp.lan_dvr_cfg_minor_vrs  LAN Driver Config - Minor Version
        Unsigned 8-bit integer
    ncp.lan_dvr_mode_flags  LAN Driver Mode Flags
        Unsigned 8-bit integer
    ncp.lan_dvr_node_addr  LAN Driver Node Address
        Byte array
    ncp.large_internet_packets  Large Internet Packets (LIP) Disabled
        Boolean
    ncp.last_access_date  Last Accessed Date
        Unsigned 16-bit integer
    ncp.last_access_time  Last Accessed Time
        Unsigned 16-bit integer
    ncp.last_garbage_collect  Last Garbage Collection
        Unsigned 32-bit integer
    ncp.last_instance  Last Instance
        Unsigned 32-bit integer
    ncp.last_record_seen  Last Record Seen
        Unsigned 16-bit integer
    ncp.last_search_index  Search Index
        Unsigned 16-bit integer
    ncp.last_seen  Last Seen
        Unsigned 32-bit integer
    ncp.last_sequence_number  Sequence Number
        Unsigned 16-bit integer
    ncp.last_time_rx_buff_was_alloc  Last Time a Receive Buffer was Allocated
        Unsigned 32-bit integer
    ncp.length  Packet Length
        Unsigned 16-bit integer
    ncp.level  Level
        Unsigned 8-bit integer
    ncp.lfs_counters  LFS Counters
        Unsigned 32-bit integer
    ncp.limb_count  Limb Count
        Unsigned 32-bit integer
    ncp.limbo_data_streams_count  Limbo Data Streams Count
        Unsigned 32-bit integer
    ncp.limbo_used  Limbo Used
        Unsigned 32-bit integer
    ncp.local_connection_id  Local Connection ID
        Unsigned 32-bit integer
    ncp.local_login_info_ccode  Local Login Info C Code
        Unsigned 8-bit integer
    ncp.local_max_packet_size  Local Max Packet Size
        Unsigned 32-bit integer
    ncp.local_max_recv_size  Local Max Recv Size
        Unsigned 32-bit integer
    ncp.local_max_send_size  Local Max Send Size
        Unsigned 32-bit integer
    ncp.local_target_socket  Local Target Socket
        Unsigned 32-bit integer
    ncp.lock_area_len  Lock Area Length
        Unsigned 32-bit integer
    ncp.lock_areas_start_offset  Lock Areas Start Offset
        Unsigned 32-bit integer
    ncp.lock_flag  Lock Flag
        Unsigned 8-bit integer
    ncp.lock_name  Lock Name
        String
    ncp.lock_status  Lock Status
        Unsigned 8-bit integer
    ncp.lock_timeout  Lock Timeout
        Unsigned 16-bit integer
    ncp.lock_type  Lock Type
        Unsigned 8-bit integer
    ncp.locked  Locked Flag
        Unsigned 8-bit integer
    ncp.log_file_flag_high  Log File Flag (byte 2)
        Unsigned 8-bit integer
    ncp.log_file_flag_low  Log File Flag
        Unsigned 8-bit integer
    ncp.log_flag_call_back  Call Back Requested
        Boolean
    ncp.log_flag_lock_file  Lock File Immediately
        Boolean
    ncp.log_ttl_rx_pkts  Total Received Packets
        Unsigned 32-bit integer
    ncp.log_ttl_tx_pkts  Total Transmitted Packets
        Unsigned 32-bit integer
    ncp.logged_count  Logged Count
        Unsigned 16-bit integer
    ncp.logged_object_id  Logged in Object ID
        Unsigned 32-bit integer
    ncp.logical_connection_number  Logical Connection Number
        Unsigned 16-bit integer
    ncp.logical_drive_count  Logical Drive Count
        Unsigned 8-bit integer
    ncp.logical_drive_number  Logical Drive Number
        Unsigned 8-bit integer
    ncp.logical_lock_threshold  LogicalLockThreshold
        Unsigned 8-bit integer
    ncp.logical_record_name  Logical Record Name
        String
    ncp.login_expiration_time  Login Expiration Time
        Unsigned 32-bit integer
    ncp.login_key  Login Key
        Byte array
    ncp.login_name  Login Name
        String
    ncp.long_name  Long Name
        String
    ncp.lru_block_was_dirty  LRU Block Was Dirty
        Unsigned 16-bit integer
    ncp.lru_sit_time  LRU Sitting Time
        Unsigned 32-bit integer
    ncp.mac_attr  Attributes
        Unsigned 16-bit integer
    ncp.mac_attr_archive  Archive
        Boolean
    ncp.mac_attr_execute_only  Execute Only
        Boolean
    ncp.mac_attr_hidden  Hidden
        Boolean
    ncp.mac_attr_index  Index
        Boolean
    ncp.mac_attr_r_audit  Read Audit
        Boolean
    ncp.mac_attr_r_only  Read Only
        Boolean
    ncp.mac_attr_share  Shareable File
        Boolean
    ncp.mac_attr_smode1  Search Mode
        Boolean
    ncp.mac_attr_smode2  Search Mode
        Boolean
    ncp.mac_attr_smode3  Search Mode
        Boolean
    ncp.mac_attr_subdirectory  Subdirectory
        Boolean
    ncp.mac_attr_system  System
        Boolean
    ncp.mac_attr_transaction  Transaction
        Boolean
    ncp.mac_attr_w_audit  Write Audit
        Boolean
    ncp.mac_backup_date  Mac Backup Date
        Unsigned 16-bit integer
    ncp.mac_backup_time  Mac Backup Time
        Unsigned 16-bit integer
    ncp.mac_base_directory_id  Mac Base Directory ID
        Unsigned 32-bit integer
    ncp.mac_create_date  Mac Create Date
        Unsigned 16-bit integer
    ncp.mac_create_time  Mac Create Time
        Unsigned 16-bit integer
    ncp.mac_destination_base_id  Mac Destination Base ID
        Unsigned 32-bit integer
    ncp.mac_finder_info  Mac Finder Information
        Byte array
    ncp.mac_last_seen_id  Mac Last Seen ID
        Unsigned 32-bit integer
    ncp.mac_root_ids  MAC Root IDs
        Unsigned 32-bit integer
    ncp.mac_source_base_id  Mac Source Base ID
        Unsigned 32-bit integer
    ncp.major_version  Major Version
        Unsigned 32-bit integer
    ncp.map_hash_node_count  Map Hash Node Count
        Unsigned 32-bit integer
    ncp.max_byte_cnt  Maximum Byte Count
        Unsigned 32-bit integer
    ncp.max_bytes  Maximum Number of Bytes
        Unsigned 16-bit integer
    ncp.max_data_streams  Maximum Data Streams
        Unsigned 32-bit integer
    ncp.max_dir_depth  Maximum Directory Depth
        Unsigned 32-bit integer
    ncp.max_dirty_time  Maximum Dirty Time
        Unsigned 32-bit integer
    ncp.max_num_of_conn  Maximum Number of Connections
        Unsigned 32-bit integer
    ncp.max_num_of_dir_cache_buff  Maximum Number Of Directory Cache Buffers
        Unsigned 32-bit integer
    ncp.max_num_of_lans  Maximum Number Of LAN's
        Unsigned 32-bit integer
    ncp.max_num_of_media_types  Maximum Number of Media Types
        Unsigned 32-bit integer
    ncp.max_num_of_medias  Maximum Number Of Media's
        Unsigned 32-bit integer
    ncp.max_num_of_nme_sps  Maximum Number Of Name Spaces
        Unsigned 32-bit integer
    ncp.max_num_of_protocols  Maximum Number of Protocols
        Unsigned 32-bit integer
    ncp.max_num_of_spool_pr  Maximum Number Of Spool Printers
        Unsigned 32-bit integer
    ncp.max_num_of_stacks  Maximum Number Of Stacks
        Unsigned 32-bit integer
    ncp.max_num_of_users  Maximum Number Of Users
        Unsigned 32-bit integer
    ncp.max_num_of_vol  Maximum Number of Volumes
        Unsigned 32-bit integer
    ncp.max_phy_packet_size  Maximum Physical Packet Size
        Unsigned 32-bit integer
    ncp.max_space  Maximum Space
        Unsigned 16-bit integer
    ncp.maxspace  Maximum Space
        Unsigned 32-bit integer
    ncp.may_had_out_of_order  Maybe Had Out Of Order Writes Count
        Unsigned 32-bit integer
    ncp.media_list  Media List
        Unsigned 32-bit integer
    ncp.media_list_count  Media List Count
        Unsigned 32-bit integer
    ncp.media_name  Media Name
        String
    ncp.media_number  Media Number
        Unsigned 32-bit integer
    ncp.media_object_type  Object Type
        Unsigned 8-bit integer
    ncp.member_name  Member Name
        String
    ncp.member_type  Member Type
        Unsigned 8-bit integer
    ncp.message_language  NLM Language
        Unsigned 32-bit integer
    ncp.migrated_files  Migrated Files
        Unsigned 32-bit integer
    ncp.migrated_sectors  Migrated Sectors
        Unsigned 32-bit integer
    ncp.min_cache_report_thresh  Minimum Cache Report Threshold
        Unsigned 32-bit integer
    ncp.min_num_of_cache_buff  Minimum Number Of Cache Buffers
        Unsigned 32-bit integer
    ncp.min_num_of_dir_cache_buff  Minimum Number Of Directory Cache Buffers
        Unsigned 32-bit integer
    ncp.min_time_since_file_delete  Minimum Time Since File Delete
        Unsigned 32-bit integer
    ncp.minor_version  Minor Version
        Unsigned 32-bit integer
    ncp.missing_data_count  Missing Data Count
        Unsigned 16-bit integer
        Number of bytes of missing data
    ncp.missing_data_offset  Missing Data Offset
        Unsigned 32-bit integer
        Offset of beginning of missing data
    ncp.missing_fraglist_count  Missing Fragment List Count
        Unsigned 16-bit integer
        Number of missing fragments reported
    ncp.mixed_mode_path_flag  Mixed Mode Path Flag
        Unsigned 8-bit integer
    ncp.modified_counter  Modified Counter
        Unsigned 32-bit integer
    ncp.modified_date  Modified Date
        Unsigned 16-bit integer
    ncp.modified_time  Modified Time
        Unsigned 16-bit integer
    ncp.modifier_id  Modifier ID
        Unsigned 32-bit integer
    ncp.modify_dos_create  Creator ID
        Boolean
    ncp.modify_dos_delete  Archive Date
        Boolean
    ncp.modify_dos_info_mask  Modify DOS Info Mask
        Unsigned 16-bit integer
    ncp.modify_dos_inheritance  Inheritance
        Boolean
    ncp.modify_dos_laccess  Last Access
        Boolean
    ncp.modify_dos_max_space  Maximum Space
        Boolean
    ncp.modify_dos_mdate  Modify Date
        Boolean
    ncp.modify_dos_mid  Modifier ID
        Boolean
    ncp.modify_dos_mtime  Modify Time
        Boolean
    ncp.modify_dos_open  Creation Time
        Boolean
    ncp.modify_dos_parent  Archive Time
        Boolean
    ncp.modify_dos_read  Attributes
        Boolean
    ncp.modify_dos_search  Archiver ID
        Boolean
    ncp.modify_dos_write  Creation Date
        Boolean
    ncp.more_flag  More Flag
        Unsigned 8-bit integer
    ncp.more_properties  More Properties
        Unsigned 8-bit integer
    ncp.move_cache_node  Move Cache Node Count
        Unsigned 32-bit integer
    ncp.move_cache_node_from_avai  Move Cache Node From Avail Count
        Unsigned 32-bit integer
    ncp.moved_the_ack_bit_dn  Moved The ACK Bit Down Count
        Unsigned 32-bit integer
    ncp.name  Name
        String
    ncp.name12  Name
        String
    ncp.name_len  Name Space Length
        Unsigned 8-bit integer
    ncp.name_length  Name Length
        Unsigned 8-bit integer
    ncp.name_list  Name List
        Unsigned 32-bit integer
    ncp.name_space  Name Space
        Unsigned 8-bit integer
    ncp.name_space_name  Name Space Name
        String
    ncp.name_type  nameType
        Unsigned 32-bit integer
    ncp.ncompletion_code  Completion Code
        Unsigned 32-bit integer
    ncp.ncp_data_size  NCP Data Size
        Unsigned 32-bit integer
    ncp.ncp_extension_major_version  NCP Extension Major Version
        Unsigned 8-bit integer
    ncp.ncp_extension_minor_version  NCP Extension Minor Version
        Unsigned 8-bit integer
    ncp.ncp_extension_name  NCP Extension Name
        String
    ncp.ncp_extension_number  NCP Extension Number
        Unsigned 32-bit integer
    ncp.ncp_extension_numbers  NCP Extension Numbers
        Unsigned 32-bit integer
    ncp.ncp_extension_revision_number  NCP Extension Revision Number
        Unsigned 8-bit integer
    ncp.ncp_peak_sta_in_use  Peak Number of Connections since Server was brought up
        Unsigned 32-bit integer
    ncp.ncp_sta_in_use  Number of Workstations Connected to Server
        Unsigned 32-bit integer
    ncp.ndirty_blocks  Number of Dirty Blocks
        Unsigned 32-bit integer
    ncp.nds_flags  NDS Flags
        Unsigned 32-bit integer
    ncp.nds_request_flags  NDS Request Flags
        Unsigned 16-bit integer
    ncp.nds_request_flags_alias_ref  Alias Referral
        Boolean
    ncp.nds_request_flags_dn_ref  Down Referral
        Boolean
    ncp.nds_request_flags_local_entry  Local Entry
        Boolean
    ncp.nds_request_flags_no_such_entry  No Such Entry
        Boolean
    ncp.nds_request_flags_output  Output Fields
        Boolean
    ncp.nds_request_flags_reply_data_size  Reply Data Size
        Boolean
    ncp.nds_request_flags_req_cnt  Request Count
        Boolean
    ncp.nds_request_flags_req_data_size  Request Data Size
        Boolean
    ncp.nds_request_flags_trans_ref  Transport Referral
        Boolean
    ncp.nds_request_flags_trans_ref2  Transport Referral
        Boolean
    ncp.nds_request_flags_type_ref  Type Referral
        Boolean
    ncp.nds_request_flags_up_ref  Up Referral
        Boolean
    ncp.nds_status  NDS Status
        Unsigned 32-bit integer
    ncp.nds_verb  NDS Verb
        Unsigned 16-bit integer
    ncp.net_id_number  Net ID Number
        Unsigned 32-bit integer
    ncp.net_status  Network Status
        Unsigned 16-bit integer
    ncp.netbios_broadcast_was_propogated  NetBIOS Broadcast Was Propogated
        Unsigned 32-bit integer
    ncp.netbios_progated  NetBIOS Propagated Count
        Unsigned 32-bit integer
    ncp.netware_access_handle  NetWare Access Handle
        Byte array
    ncp.network_address  Network Address
        Unsigned 32-bit integer
    ncp.network_node_address  Network Node Address
        Byte array
    ncp.network_number  Network Number
        Unsigned 32-bit integer
    ncp.network_socket  Network Socket
        Unsigned 16-bit integer
    ncp.new_access_rights_create  Create
        Boolean
    ncp.new_access_rights_delete  Delete
        Boolean
    ncp.new_access_rights_mask  New Access Rights
        Unsigned 16-bit integer
    ncp.new_access_rights_modify  Modify
        Boolean
    ncp.new_access_rights_open  Open
        Boolean
    ncp.new_access_rights_parental  Parental
        Boolean
    ncp.new_access_rights_read  Read
        Boolean
    ncp.new_access_rights_search  Search
        Boolean
    ncp.new_access_rights_supervisor  Supervisor
        Boolean
    ncp.new_access_rights_write  Write
        Boolean
    ncp.new_directory_id  New Directory ID
        Unsigned 32-bit integer
    ncp.new_ea_handle  New EA Handle
        Unsigned 32-bit integer
    ncp.new_file_name  New File Name
        String
    ncp.new_file_name_len  New File Name
        String
    ncp.new_file_size  New File Size
        Unsigned 32-bit integer
    ncp.new_object_name  New Object Name
        String
    ncp.new_password  New Password
        String
    ncp.new_path  New Path
        String
    ncp.new_position  New Position
        Unsigned 8-bit integer
    ncp.next_cnt_block  Next Count Block
        Unsigned 32-bit integer
    ncp.next_huge_state_info  Next Huge State Info
        Byte array
    ncp.next_limb_scan_num  Next Limb Scan Number
        Unsigned 32-bit integer
    ncp.next_object_id  Next Object ID
        Unsigned 32-bit integer
    ncp.next_record  Next Record
        Unsigned 32-bit integer
    ncp.next_request_record  Next Request Record
        Unsigned 16-bit integer
    ncp.next_search_index  Next Search Index
        Unsigned 16-bit integer
    ncp.next_search_number  Next Search Number
        Unsigned 16-bit integer
    ncp.next_starting_number  Next Starting Number
        Unsigned 32-bit integer
    ncp.next_trustee_entry  Next Trustee Entry
        Unsigned 32-bit integer
    ncp.next_volume_number  Next Volume Number
        Unsigned 32-bit integer
    ncp.nlm_count  NLM Count
        Unsigned 32-bit integer
    ncp.nlm_flags  Flags
        Unsigned 8-bit integer
    ncp.nlm_flags_multiple  Can Load Multiple Times
        Boolean
    ncp.nlm_flags_pseudo  PseudoPreemption
        Boolean
    ncp.nlm_flags_reentrant  ReEntrant
        Boolean
    ncp.nlm_flags_synchronize  Synchronize Start
        Boolean
    ncp.nlm_load_options  NLM Load Options
        Unsigned 32-bit integer
    ncp.nlm_name_stringz  NLM Name
        String
    ncp.nlm_number  NLM Number
        Unsigned 32-bit integer
    ncp.nlm_numbers  NLM Numbers
        Unsigned 32-bit integer
    ncp.nlm_start_num  NLM Start Number
        Unsigned 32-bit integer
    ncp.nlm_type  NLM Type
        Unsigned 8-bit integer
    ncp.nlms_in_list  NLM's in List
        Unsigned 32-bit integer
    ncp.no_avail_conns  No Available Connections Count
        Unsigned 32-bit integer
    ncp.no_ecb_available_count  No ECB Available Count
        Unsigned 32-bit integer
    ncp.no_mem_for_station  No Memory For Station Control Count
        Unsigned 32-bit integer
    ncp.no_more_mem_avail  No More Memory Available Count
        Unsigned 32-bit integer
    ncp.no_receive_buff  No Receive Buffers
        Unsigned 16-bit integer
    ncp.no_space_for_service  No Space For Service
        Unsigned 16-bit integer
    ncp.node  Node
        Byte array
    ncp.node_flags  Node Flags
        Unsigned 32-bit integer
    ncp.non_ded_flag  Non Dedicated Flag
        Boolean
    ncp.non_freeable_avail_sub_alloc_sectors  Non Freeable Available Sub Alloc Sectors
        Unsigned 32-bit integer
    ncp.non_freeable_limbo_sectors  Non Freeable Limbo Sectors
        Unsigned 32-bit integer
    ncp.not_my_network  Not My Network
        Unsigned 16-bit integer
    ncp.not_supported_mask  Bit Counter Supported
        Boolean
    ncp.not_usable_sub_alloc_sectors  Not Usable Sub Alloc Sectors
        Unsigned 32-bit integer
    ncp.not_yet_purgeable_blocks  Not Yet Purgeable Blocks
        Unsigned 32-bit integer
    ncp.ns_info_mask  Names Space Info Mask
        Unsigned 16-bit integer
    ncp.ns_info_mask_acc_date  Access Date
        Boolean
    ncp.ns_info_mask_adate  Archive Date
        Boolean
    ncp.ns_info_mask_aid  Archiver ID
        Boolean
    ncp.ns_info_mask_atime  Archive Time
        Boolean
    ncp.ns_info_mask_cdate  Creation Date
        Boolean
    ncp.ns_info_mask_ctime  Creation Time
        Boolean
    ncp.ns_info_mask_fatt  File Attributes
        Boolean
    ncp.ns_info_mask_max_acc_mask  Inheritance
        Boolean
    ncp.ns_info_mask_max_space  Maximum Space
        Boolean
    ncp.ns_info_mask_modify  Modify Name
        Boolean
    ncp.ns_info_mask_owner  Owner ID
        Boolean
    ncp.ns_info_mask_udate  Update Date
        Boolean
    ncp.ns_info_mask_uid  Update ID
        Boolean
    ncp.ns_info_mask_utime  Update Time
        Boolean
    ncp.ns_specific_info  Name Space Specific Info
        String
    ncp.num_bytes  Number of Bytes
        Unsigned 16-bit integer
    ncp.num_dir_cache_buff  Number Of Directory Cache Buffers
        Unsigned 32-bit integer
    ncp.num_of_allocs  Number of Allocations
        Unsigned 32-bit integer
    ncp.num_of_cache_check_no_wait  Number Of Cache Check No Wait
        Unsigned 32-bit integer
    ncp.num_of_cache_checks  Number Of Cache Checks
        Unsigned 32-bit integer
    ncp.num_of_cache_dirty_checks  Number Of Cache Dirty Checks
        Unsigned 32-bit integer
    ncp.num_of_cache_hits  Number Of Cache Hits
        Unsigned 32-bit integer
    ncp.num_of_cache_hits_no_wait  Number Of Cache Hits No Wait
        Unsigned 32-bit integer
    ncp.num_of_cc_in_pkt  Number of Custom Counters in Packet
        Unsigned 32-bit integer
    ncp.num_of_checks  Number of Checks
        Unsigned 32-bit integer
    ncp.num_of_dir_cache_buff  Number Of Directory Cache Buffers
        Unsigned 32-bit integer
    ncp.num_of_dirty_cache_checks  Number Of Dirty Cache Checks
        Unsigned 32-bit integer
    ncp.num_of_entries  Number of Entries
        Unsigned 32-bit integer
    ncp.num_of_files_migrated  Number Of Files Migrated
        Unsigned 32-bit integer
    ncp.num_of_garb_coll  Number of Garbage Collections
        Unsigned 32-bit integer
    ncp.num_of_ncp_reqs  Number of NCP Requests since Server was brought up
        Unsigned 32-bit integer
    ncp.num_of_ref_publics  Number of Referenced Public Symbols
        Unsigned 32-bit integer
    ncp.num_of_segments  Number of Segments
        Unsigned 32-bit integer
    ncp.number_of_attributes  Number of Attributes
        Unsigned 32-bit integer
    ncp.number_of_cpus  Number of CPU's
        Unsigned 32-bit integer
    ncp.number_of_data_streams  Number of Data Streams
        Unsigned 16-bit integer
    ncp.number_of_dynamic_memory_areas  Number Of Dynamic Memory Areas
        Unsigned 16-bit integer
    ncp.number_of_entries  Number of Entries
        Unsigned 8-bit integer
    ncp.number_of_locks  Number of Locks
        Unsigned 8-bit integer
    ncp.number_of_minutes_to_delay  Number of Minutes to Delay
        Unsigned 32-bit integer
    ncp.number_of_ncp_extensions  Number Of NCP Extensions
        Unsigned 32-bit integer
    ncp.number_of_ns_loaded  Number Of Name Spaces Loaded
        Unsigned 16-bit integer
    ncp.number_of_protocols  Number of Protocols
        Unsigned 8-bit integer
    ncp.number_of_records  Number of Records
        Unsigned 16-bit integer
    ncp.number_of_semaphores  Number Of Semaphores
        Unsigned 16-bit integer
    ncp.number_of_service_processes  Number Of Service Processes
        Unsigned 8-bit integer
    ncp.number_of_set_categories  Number Of Set Categories
        Unsigned 32-bit integer
    ncp.number_of_sms  Number Of Storage Medias
        Unsigned 32-bit integer
    ncp.number_of_stations  Number of Stations
        Unsigned 8-bit integer
    ncp.nxt_search_num  Next Search Number
        Unsigned 32-bit integer
    ncp.o_c_ret_flags  Open Create Return Flags
        Unsigned 8-bit integer
    ncp.object_count  Object Count
        Unsigned 32-bit integer
    ncp.object_flags  Object Flags
        Unsigned 8-bit integer
    ncp.object_has_properites  Object Has Properties
        Unsigned 8-bit integer
    ncp.object_id  Object ID
        Unsigned 32-bit integer
    ncp.object_id_count  Object ID Count
        Unsigned 16-bit integer
    ncp.object_id_info  Object Information
        Unsigned 32-bit integer
    ncp.object_info_rtn_count  Object Information Count
        Unsigned 32-bit integer
    ncp.object_name  Object Name
        String
    ncp.object_name_len  Object Name
        String
    ncp.object_name_stringz  Object Name
        String
    ncp.object_number  Object Number
        Unsigned 32-bit integer
    ncp.object_security  Object Security
        Unsigned 8-bit integer
    ncp.object_type  Object Type
        Unsigned 16-bit integer
    ncp.old_file_name  Old File Name
        Byte array
    ncp.old_file_size  Old File Size
        Unsigned 32-bit integer
    ncp.oldest_deleted_file_age_in_ticks  Oldest Deleted File Age in Ticks
        Unsigned 32-bit integer
    ncp.open_count  Open Count
        Unsigned 16-bit integer
    ncp.open_create_action  Open Create Action
        Unsigned 8-bit integer
    ncp.open_create_action_compressed  Compressed
        Boolean
    ncp.open_create_action_created  Created
        Boolean
    ncp.open_create_action_opened  Opened
        Boolean
    ncp.open_create_action_read_only  Read Only
        Boolean
    ncp.open_create_action_replaced  Replaced
        Boolean
    ncp.open_create_mode  Open Create Mode
        Unsigned 8-bit integer
    ncp.open_create_mode_create  Create new file or subdirectory (file or subdirectory cannot exist)
        Boolean
    ncp.open_create_mode_open  Open existing file (file must exist)
        Boolean
    ncp.open_create_mode_oplock  Open Callback (Op-Lock)
        Boolean
    ncp.open_create_mode_replace  Replace existing file
        Boolean
    ncp.open_for_read_count  Open For Read Count
        Unsigned 16-bit integer
    ncp.open_for_write_count  Open For Write Count
        Unsigned 16-bit integer
    ncp.open_rights  Open Rights
        Unsigned 8-bit integer
    ncp.open_rights_compat  Compatibility
        Boolean
    ncp.open_rights_deny_read  Deny Read
        Boolean
    ncp.open_rights_deny_write  Deny Write
        Boolean
    ncp.open_rights_read_only  Read Only
        Boolean
    ncp.open_rights_write_only  Write Only
        Boolean
    ncp.open_rights_write_thru  Write Through
        Boolean
    ncp.option_number  Option Number
        Unsigned 8-bit integer
    ncp.orig_num_cache_buff  Original Number Of Cache Buffers
        Unsigned 32-bit integer
    ncp.original_size  Original Size
        Unsigned 32-bit integer
    ncp.os_language_id  OS Language ID
        Unsigned 8-bit integer
    ncp.os_major_version  OS Major Version
        Unsigned 8-bit integer
    ncp.os_minor_version  OS Minor Version
        Unsigned 8-bit integer
    ncp.os_revision  OS Revision
        Unsigned 8-bit integer
    ncp.other_file_fork_fat  Other File Fork FAT Entry
        Unsigned 32-bit integer
    ncp.other_file_fork_size  Other File Fork Size
        Unsigned 32-bit integer
    ncp.outgoing_packet_discarded_no_turbo_buffer  Outgoing Packet Discarded No Turbo Buffer
        Unsigned 16-bit integer
    ncp.outstanding_compression_ios  Outstanding Compression IOs
        Unsigned 32-bit integer
    ncp.outstanding_ios  Outstanding IOs
        Unsigned 32-bit integer
    ncp.packet_rs_too_small_count  Receive Packet Too Small Count
        Unsigned 32-bit integer
    ncp.packet_rx_misc_error_count  Receive Packet Misc Error Count
        Unsigned 32-bit integer
    ncp.packet_rx_overflow_count  Receive Packet Overflow Count
        Unsigned 32-bit integer
    ncp.packet_rx_too_big_count  Receive Packet Too Big Count
        Unsigned 32-bit integer
    ncp.packet_seqno  Packet Sequence Number
        Unsigned 32-bit integer
        Sequence number of this packet in a burst
    ncp.packet_tx_misc_error_count  Transmit Packet Misc Error Count
        Unsigned 32-bit integer
    ncp.packet_tx_too_big_count  Transmit Packet Too Big Count
        Unsigned 32-bit integer
    ncp.packet_tx_too_small_count  Transmit Packet Too Small Count
        Unsigned 32-bit integer
    ncp.packets_discarded_by_hop_count  Packets Discarded By Hop Count
        Unsigned 16-bit integer
    ncp.packets_discarded_unknown_net  Packets Discarded Unknown Net
        Unsigned 16-bit integer
    ncp.packets_from_invalid_connection  Packets From Invalid Connection
        Unsigned 16-bit integer
    ncp.packets_received_during_processing  Packets Received During Processing
        Unsigned 16-bit integer
    ncp.packets_with_bad_request_type  Packets With Bad Request Type
        Unsigned 16-bit integer
    ncp.packets_with_bad_sequence_number  Packets With Bad Sequence Number
        Unsigned 16-bit integer
    ncp.page_table_owner_flag  Page Table Owner
        Unsigned 32-bit integer
    ncp.parent_base_id  Parent Base ID
        Unsigned 32-bit integer
    ncp.parent_directory_base  Parent Directory Base
        Unsigned 32-bit integer
    ncp.parent_dos_directory_base  Parent DOS Directory Base
        Unsigned 32-bit integer
    ncp.parent_id  Parent ID
        Unsigned 32-bit integer
    ncp.parent_object_number  Parent Object Number
        Unsigned 32-bit integer
    ncp.password  Password
        String
    ncp.path  Path
        String
    ncp.path_and_name  Path and Name
        String
    ncp.path_base  Path Base
        Unsigned 8-bit integer
    ncp.path_component_count  Path Component Count
        Unsigned 16-bit integer
    ncp.path_component_size  Path Component Size
        Unsigned 16-bit integer
    ncp.path_cookie_flags  Path Cookie Flags
        Unsigned 16-bit integer
    ncp.path_count  Path Count
        Unsigned 8-bit integer
    ncp.pending_io_commands  Pending IO Commands
        Unsigned 16-bit integer
    ncp.percent_of_vol_used_by_dirs  Percent Of Volume Used By Directories
        Unsigned 32-bit integer
    ncp.physical_disk_channel  Physical Disk Channel
        Unsigned 8-bit integer
    ncp.physical_disk_number  Physical Disk Number
        Unsigned 8-bit integer
    ncp.physical_drive_count  Physical Drive Count
        Unsigned 8-bit integer
    ncp.physical_drive_type  Physical Drive Type
        Unsigned 8-bit integer
    ncp.physical_lock_threshold  Physical Lock Threshold
        Unsigned 8-bit integer
    ncp.physical_read_errors  Physical Read Errors
        Unsigned 16-bit integer
    ncp.physical_read_requests  Physical Read Requests
        Unsigned 32-bit integer
    ncp.physical_write_errors  Physical Write Errors
        Unsigned 16-bit integer
    ncp.physical_write_requests  Physical Write Requests
        Unsigned 32-bit integer
    ncp.ping_version  Ping Version
        Unsigned 16-bit integer
    ncp.poll_abort_conn  Poller Aborted The Connnection Count
        Unsigned 32-bit integer
    ncp.poll_rem_old_out_of_order  Poller Removed Old Out Of Order Count
        Unsigned 32-bit integer
    ncp.positive_acknowledges_sent  Positive Acknowledges Sent
        Unsigned 16-bit integer
    ncp.post_poned_events  Postponed Events
        Unsigned 32-bit integer
    ncp.pre_compressed_sectors  Precompressed Sectors
        Unsigned 32-bit integer
    ncp.previous_control_packet  Previous Control Packet Count
        Unsigned 32-bit integer
    ncp.previous_record  Previous Record
        Unsigned 32-bit integer
    ncp.primary_entry  Primary Entry
        Unsigned 32-bit integer
    ncp.print_flags  Print Flags
        Unsigned 8-bit integer
    ncp.print_flags_banner  Print Banner Page
        Boolean
    ncp.print_flags_cr  Create
        Boolean
    ncp.print_flags_del_spool  Delete Spool File after Printing
        Boolean
    ncp.print_flags_exp_tabs  Expand Tabs in the File
        Boolean
    ncp.print_flags_ff  Suppress Form Feeds
        Boolean
    ncp.print_server_version  Print Server Version
        Unsigned 8-bit integer
    ncp.print_to_file_flag  Print to File Flag
        Boolean
    ncp.printer_halted  Printer Halted
        Unsigned 8-bit integer
    ncp.printer_offline  Printer Off-Line
        Unsigned 8-bit integer
    ncp.priority  Priority
        Unsigned 32-bit integer
    ncp.privileges  Login Privileges
        Unsigned 32-bit integer
    ncp.pro_dos_info  Pro DOS Info
        Byte array
    ncp.processor_type  Processor Type
        Unsigned 8-bit integer
    ncp.product_major_version  Product Major Version
        Unsigned 16-bit integer
    ncp.product_minor_version  Product Minor Version
        Unsigned 16-bit integer
    ncp.product_revision_version  Product Revision Version
        Unsigned 8-bit integer
    ncp.projected_comp_size  Projected Compression Size
        Unsigned 32-bit integer
    ncp.property_data  Property Data
        Byte array
    ncp.property_has_more_segments  Property Has More Segments
        Unsigned 8-bit integer
    ncp.property_name  Property Name
        String
    ncp.property_name_16  Property Name
        String
    ncp.property_segment  Property Segment
        Unsigned 8-bit integer
    ncp.property_type  Property Type
        Unsigned 8-bit integer
    ncp.property_value  Property Value
        String
    ncp.proposed_max_size  Proposed Max Size
        Unsigned 16-bit integer
    ncp.protocol_board_num  Protocol Board Number
        Unsigned 32-bit integer
    ncp.protocol_flags  Protocol Flags
        Unsigned 32-bit integer
    ncp.protocol_id  Protocol ID
        Byte array
    ncp.protocol_name  Protocol Name
        String
    ncp.protocol_number  Protocol Number
        Unsigned 16-bit integer
    ncp.purge_c_code  Purge Completion Code
        Unsigned 32-bit integer
    ncp.purge_count  Purge Count
        Unsigned 32-bit integer
    ncp.purge_flags  Purge Flags
        Unsigned 16-bit integer
    ncp.purge_list  Purge List
        Unsigned 32-bit integer
    ncp.purgeable_blocks  Purgeable Blocks
        Unsigned 32-bit integer
    ncp.qms_version  QMS Version
        Unsigned 8-bit integer
    ncp.queue_id  Queue ID
        Unsigned 32-bit integer
    ncp.queue_name  Queue Name
        String
    ncp.queue_start_position  Queue Start Position
        Unsigned 32-bit integer
    ncp.queue_status  Queue Status
        Unsigned 8-bit integer
    ncp.queue_status_new_jobs  Operator does not want to add jobs to the queue
        Boolean
    ncp.queue_status_pserver  Operator does not want additional servers attaching
        Boolean
    ncp.queue_status_svc_jobs  Operator does not want servers to service jobs
        Boolean
    ncp.queue_type  Queue Type
        Unsigned 16-bit integer
    ncp.r_tag_num  Resource Tag Number
        Unsigned 32-bit integer
    ncp.re_mirror_current_offset  ReMirror Current Offset
        Unsigned 32-bit integer
    ncp.re_mirror_drive_number  ReMirror Drive Number
        Unsigned 8-bit integer
    ncp.read_beyond_write  Read Beyond Write
        Unsigned 16-bit integer
    ncp.read_exist_blck  Read Existing Block Count
        Unsigned 32-bit integer
    ncp.read_exist_part_read  Read Existing Partial Read Count
        Unsigned 32-bit integer
    ncp.read_exist_read_err  Read Existing Read Error Count
        Unsigned 32-bit integer
    ncp.read_exist_write_wait  Read Existing Write Wait Count
        Unsigned 32-bit integer
    ncp.realloc_slot  Re-Allocate Slot Count
        Unsigned 32-bit integer
    ncp.realloc_slot_came_too_soon  Re-Allocate Slot Came Too Soon Count
        Unsigned 32-bit integer
    ncp.rec_lock_count  Record Lock Count
        Unsigned 16-bit integer
    ncp.record_end  Record End
        Unsigned 32-bit integer
    ncp.record_in_use  Record in Use
        Unsigned 16-bit integer
    ncp.record_start  Record Start
        Unsigned 32-bit integer
    ncp.redirected_printer  Redirected Printer
        Unsigned 8-bit integer
    ncp.reexecute_request  Re-Execute Request Count
        Unsigned 32-bit integer
    ncp.reference_count  Reference Count
        Unsigned 32-bit integer
    ncp.relations_count  Relations Count
        Unsigned 16-bit integer
    ncp.rem_cache_node  Remove Cache Node Count
        Unsigned 32-bit integer
    ncp.rem_cache_node_from_avail  Remove Cache Node From Avail Count
        Unsigned 32-bit integer
    ncp.remote_max_packet_size  Remote Max Packet Size
        Unsigned 32-bit integer
    ncp.remote_target_id  Remote Target ID
        Unsigned 32-bit integer
    ncp.removable_flag  Removable Flag
        Unsigned 16-bit integer
    ncp.remove_open_rights  Remove Open Rights
        Unsigned 8-bit integer
    ncp.remove_open_rights_comp  Compatibility
        Boolean
    ncp.remove_open_rights_dr  Deny Read
        Boolean
    ncp.remove_open_rights_dw  Deny Write
        Boolean
    ncp.remove_open_rights_ro  Read Only
        Boolean
    ncp.remove_open_rights_wo  Write Only
        Boolean
    ncp.remove_open_rights_write_thru  Write Through
        Boolean
    ncp.rename_flag  Rename Flag
        Unsigned 8-bit integer
    ncp.rename_flag_comp  Compatability allows files that are marked read only to be opened with read/write access
        Boolean
    ncp.rename_flag_no  Name Only renames only the specified name space entry name
        Boolean
    ncp.rename_flag_ren  Rename to Myself allows file to be renamed to it's original name
        Boolean
    ncp.replies_cancelled  Replies Cancelled
        Unsigned 16-bit integer
    ncp.reply_canceled  Reply Canceled Count
        Unsigned 32-bit integer
    ncp.reply_queue_job_numbers  Reply Queue Job Numbers
        Unsigned 32-bit integer
    ncp.req_frame_num  Response to Request in Frame Number
        Unsigned 32-bit integer
    ncp.request_bit_map  Request Bit Map
        Unsigned 16-bit integer
    ncp.request_bit_map_ratt  Return Attributes
        Boolean
    ncp.request_bit_map_ret_acc_date  Access Date
        Boolean
    ncp.request_bit_map_ret_acc_priv  Access Privileges
        Boolean
    ncp.request_bit_map_ret_afp_ent  AFP Entry ID
        Boolean
    ncp.request_bit_map_ret_afp_parent  AFP Parent Entry ID
        Boolean
    ncp.request_bit_map_ret_bak_date  Backup Date&Time
        Boolean
    ncp.request_bit_map_ret_cr_date  Creation Date
        Boolean
    ncp.request_bit_map_ret_data_fork  Data Fork Length
        Boolean
    ncp.request_bit_map_ret_finder  Finder Info
        Boolean
    ncp.request_bit_map_ret_long_nm  Long Name
        Boolean
    ncp.request_bit_map_ret_mod_date  Modify Date&Time
        Boolean
    ncp.request_bit_map_ret_num_off  Number of Offspring
        Boolean
    ncp.request_bit_map_ret_owner  Owner ID
        Boolean
    ncp.request_bit_map_ret_res_fork  Resource Fork Length
        Boolean
    ncp.request_bit_map_ret_short  Short Name
        Boolean
    ncp.request_code  Request Code
        Unsigned 8-bit integer
    ncp.requests_reprocessed  Requests Reprocessed
        Unsigned 16-bit integer
    ncp.reserved  Reserved
        Unsigned 8-bit integer
    ncp.reserved10  Reserved
        Byte array
    ncp.reserved12  Reserved
        Byte array
    ncp.reserved120  Reserved
        Byte array
    ncp.reserved16  Reserved
        Byte array
    ncp.reserved2  Reserved
        Byte array
    ncp.reserved20  Reserved
        Byte array
    ncp.reserved28  Reserved
        Byte array
    ncp.reserved3  Reserved
        Byte array
    ncp.reserved36  Reserved
        Byte array
    ncp.reserved4  Reserved
        Byte array
    ncp.reserved44  Reserved
        Byte array
    ncp.reserved48  Reserved
        Byte array
    ncp.reserved51  Reserved
        Byte array
    ncp.reserved56  Reserved
        Byte array
    ncp.reserved6  Reserved
        Byte array
    ncp.reserved64  Reserved
        Byte array
    ncp.reserved8  Reserved
        Byte array
    ncp.reserved_or_directory_number  Reserved or Directory Number (see EAFlags)
        Unsigned 32-bit integer
    ncp.resource_count  Resource Count
        Unsigned 32-bit integer
    ncp.resource_fork_len  Resource Fork Len
        Unsigned 32-bit integer
    ncp.resource_fork_size  Resource Fork Size
        Unsigned 32-bit integer
    ncp.resource_name  Resource Name
        String
    ncp.resource_sig  Resource Signature
        String
    ncp.restore_time  Restore Time
        Unsigned 32-bit integer
    ncp.restriction  Disk Space Restriction
        Unsigned 32-bit integer
    ncp.restrictions_enforced  Disk Restrictions Enforce Flag
        Unsigned 8-bit integer
    ncp.ret_info_mask  Return Information
        Unsigned 16-bit integer
    ncp.ret_info_mask_actual  Return Actual Information
        Boolean
    ncp.ret_info_mask_alloc  Return Allocation Space Information
        Boolean
    ncp.ret_info_mask_arch  Return Archive Information
        Boolean
    ncp.ret_info_mask_attr  Return Attribute Information
        Boolean
    ncp.ret_info_mask_create  Return Creation Information
        Boolean
    ncp.ret_info_mask_dir  Return Directory Information
        Boolean
    ncp.ret_info_mask_eattr  Return Extended Attributes Information
        Boolean
    ncp.ret_info_mask_fname  Return File Name Information
        Boolean
    ncp.ret_info_mask_id  Return ID Information
        Boolean
    ncp.ret_info_mask_logical  Return Logical Information
        Boolean
    ncp.ret_info_mask_mod  Return Modify Information
        Boolean
    ncp.ret_info_mask_ns  Return Name Space Information
        Boolean
    ncp.ret_info_mask_ns_attr  Return Name Space Attributes Information
        Boolean
    ncp.ret_info_mask_rights  Return Rights Information
        Boolean
    ncp.ret_info_mask_size  Return Size Information
        Boolean
    ncp.ret_info_mask_tspace  Return Total Space Information
        Boolean
    ncp.retry_tx_count  Transmit Retry Count
        Unsigned 32-bit integer
    ncp.return_info_count  Return Information Count
        Unsigned 32-bit integer
    ncp.returned_list_count  Returned List Count
        Unsigned 32-bit integer
    ncp.rev_query_flag  Revoke Rights Query Flag
        Unsigned 8-bit integer
    ncp.revision  Revision
        Unsigned 32-bit integer
    ncp.revision_number  Revision
        Unsigned 8-bit integer
    ncp.rights_grant_mask  Grant Rights
        Unsigned 8-bit integer
    ncp.rights_grant_mask_create  Create
        Boolean
    ncp.rights_grant_mask_del  Delete
        Boolean
    ncp.rights_grant_mask_mod  Modify
        Boolean
    ncp.rights_grant_mask_open  Open
        Boolean
    ncp.rights_grant_mask_parent  Parental
        Boolean
    ncp.rights_grant_mask_read  Read
        Boolean
    ncp.rights_grant_mask_search  Search
        Boolean
    ncp.rights_grant_mask_write  Write
        Boolean
    ncp.rights_revoke_mask  Revoke Rights
        Unsigned 8-bit integer
    ncp.rights_revoke_mask_create  Create
        Boolean
    ncp.rights_revoke_mask_del  Delete
        Boolean
    ncp.rights_revoke_mask_mod  Modify
        Boolean
    ncp.rights_revoke_mask_open  Open
        Boolean
    ncp.rights_revoke_mask_parent  Parental
        Boolean
    ncp.rights_revoke_mask_read  Read
        Boolean
    ncp.rights_revoke_mask_search  Search
        Boolean
    ncp.rights_revoke_mask_write  Write
        Boolean
    ncp.rip_socket_num  RIP Socket Number
        Unsigned 16-bit integer
    ncp.route_hops  Hop Count
        Unsigned 16-bit integer
    ncp.route_time  Route Time
        Unsigned 16-bit integer
    ncp.router_dn_flag  Router Down Flag
        Boolean
    ncp.rpc_c_code  RPC Completion Code
        Unsigned 16-bit integer
    ncp.rpy_nearest_srv_flag  Reply to Nearest Server Flag
        Boolean
    ncp.rx_buffer_size  Receive Buffer Size
        Unsigned 32-bit integer
    ncp.rx_buffers  Receive Buffers
        Unsigned 32-bit integer
    ncp.rx_buffers_75  Receive Buffers Warning Level
        Unsigned 32-bit integer
    ncp.rx_buffers_checked_out  Receive Buffers Checked Out Count
        Unsigned 32-bit integer
    ncp.s_day  Day
        Unsigned 8-bit integer
    ncp.s_day_of_week  Day of Week
        Unsigned 8-bit integer
    ncp.s_hour  Hour
        Unsigned 8-bit integer
    ncp.s_m_info  Storage Media Information
        Unsigned 8-bit integer
    ncp.s_minute  Minutes
        Unsigned 8-bit integer
    ncp.s_module_name  Storage Module Name
        String
    ncp.s_month  Month
        Unsigned 8-bit integer
    ncp.s_second  Seconds
        Unsigned 8-bit integer
    ncp.salvageable_file_entry_number  Salvageable File Entry Number
        Unsigned 32-bit integer
    ncp.sap_socket_number  SAP Socket Number
        Unsigned 16-bit integer
    ncp.sattr  Search Attributes
        Unsigned 8-bit integer
    ncp.sattr_hid  Hidden
        Boolean
    ncp.sattr_sub  Subdirectory
        Boolean
    ncp.sattr_sys  System
        Boolean
    ncp.saved_an_out_of_order_packet  Saved An Out Of Order Packet Count
        Unsigned 32-bit integer
    ncp.scan_items  Number of Items returned from Scan
        Unsigned 32-bit integer
    ncp.search_att_archive  Archive
        Boolean
    ncp.search_att_execute_confrim  Execute Confirm
        Boolean
    ncp.search_att_execute_only  Execute Only
        Boolean
    ncp.search_att_hidden  Hidden
        Boolean
    ncp.search_att_low  Search Attributes
        Unsigned 16-bit integer
    ncp.search_att_read_only  Read Only
        Boolean
    ncp.search_att_shareable  Shareable
        Boolean
    ncp.search_att_sub  Subdirectory
        Boolean
    ncp.search_att_system  System
        Boolean
    ncp.search_attr_all_files  All Files and Directories
        Boolean
    ncp.search_bit_map  Search Bit Map
        Unsigned 8-bit integer
    ncp.search_bit_map_files  Files
        Boolean
    ncp.search_bit_map_hidden  Hidden
        Boolean
    ncp.search_bit_map_sub  Subdirectory
        Boolean
    ncp.search_bit_map_sys  System
        Boolean
    ncp.search_conn_number  Search Connection Number
        Unsigned 32-bit integer
    ncp.search_instance  Search Instance
        Unsigned 32-bit integer
    ncp.search_number  Search Number
        Unsigned 32-bit integer
    ncp.search_pattern  Search Pattern
        String
    ncp.search_sequence  Search Sequence
        Byte array
    ncp.search_sequence_word  Search Sequence
        Unsigned 16-bit integer
    ncp.sec_rel_to_y2k  Seconds Relative to the Year 2000
        Unsigned 32-bit integer
    ncp.sector_size  Sector Size
        Unsigned 32-bit integer
    ncp.sectors_per_block  Sectors Per Block
        Unsigned 8-bit integer
    ncp.sectors_per_cluster  Sectors Per Cluster
        Unsigned 16-bit integer
    ncp.sectors_per_cluster_long  Sectors Per Cluster
        Unsigned 32-bit integer
    ncp.sectors_per_track  Sectors Per Track
        Unsigned 8-bit integer
    ncp.security_equiv_list  Security Equivalent List
        String
    ncp.security_flag  Security Flag
        Unsigned 8-bit integer
    ncp.security_restriction_version  Security Restriction Version
        Unsigned 8-bit integer
    ncp.semaphore_handle  Semaphore Handle
        Unsigned 32-bit integer
    ncp.semaphore_name  Semaphore Name
        String
    ncp.semaphore_name_len  Semaphore Name Len
        Unsigned 8-bit integer
    ncp.semaphore_open_count  Semaphore Open Count
        Unsigned 8-bit integer
    ncp.semaphore_share_count  Semaphore Share Count
        Unsigned 8-bit integer
    ncp.semaphore_time_out  Semaphore Time Out
        Unsigned 16-bit integer
    ncp.semaphore_value  Semaphore Value
        Unsigned 16-bit integer
    ncp.send_hold_off_message  Send Hold Off Message Count
        Unsigned 32-bit integer
    ncp.send_status  Send Status
        Unsigned 8-bit integer
    ncp.sent_a_dup_reply  Sent A Duplicate Reply Count
        Unsigned 32-bit integer
    ncp.sent_pos_ack  Sent Positive Acknowledge Count
        Unsigned 32-bit integer
    ncp.seq  Sequence Number
        Unsigned 8-bit integer
    ncp.sequence_byte  Sequence
        Unsigned 8-bit integer
    ncp.sequence_number  Sequence Number
        Unsigned 32-bit integer
    ncp.server_address  Server Address
        Byte array
    ncp.server_app_num  Server App Number
        Unsigned 16-bit integer
    ncp.server_id_list  Server ID List
        Unsigned 32-bit integer
    ncp.server_id_number  Server ID
        Unsigned 32-bit integer
    ncp.server_info_flags  Server Information Flags
        Unsigned 16-bit integer
    ncp.server_list_flags  Server List Flags
        Unsigned 32-bit integer
    ncp.server_name  Server Name
        String
    ncp.server_name_len  Server Name
        String
    ncp.server_name_stringz  Server Name
        String
    ncp.server_network_address  Server Network Address
        Byte array
    ncp.server_node  Server Node
        Byte array
    ncp.server_serial_number  Server Serial Number
        Unsigned 32-bit integer
    ncp.server_station  Server Station
        Unsigned 8-bit integer
    ncp.server_station_list  Server Station List
        Unsigned 8-bit integer
    ncp.server_station_long  Server Station
        Unsigned 32-bit integer
    ncp.server_status_record  Server Status Record
        String
    ncp.server_task_number  Server Task Number
        Unsigned 8-bit integer
    ncp.server_task_number_long  Server Task Number
        Unsigned 32-bit integer
    ncp.server_type  Server Type
        Unsigned 16-bit integer
    ncp.server_utilization  Server Utilization
        Unsigned 32-bit integer
    ncp.server_utilization_percentage  Server Utilization Percentage
        Unsigned 8-bit integer
    ncp.set_cmd_catagory  Set Command Catagory
        Unsigned 8-bit integer
    ncp.set_cmd_flags  Set Command Flags
        Unsigned 8-bit integer
    ncp.set_cmd_name  Set Command Name
        String
    ncp.set_cmd_type  Set Command Type
        Unsigned 8-bit integer
    ncp.set_cmd_value_num  Set Command Value
        Unsigned 32-bit integer
    ncp.set_cmd_value_string  Set Command Value
        String
    ncp.set_parm_name  Set Parameter Name
        String
    ncp.sft_error_table  SFT Error Table
        Byte array
    ncp.sft_support_level  SFT Support Level
        Unsigned 8-bit integer
    ncp.shareable_lock_count  Shareable Lock Count
        Unsigned 16-bit integer
    ncp.shared_memory_addresses  Shared Memory Addresses
        Byte array
    ncp.short_name  Short Name
        String
    ncp.short_stack_name  Short Stack Name
        String
    ncp.shouldnt_be_ack_here  Shouldn't Be ACKing Here Count
        Unsigned 32-bit integer
    ncp.sibling_count  Sibling Count
        Unsigned 32-bit integer
    ncp.signature  Signature
        Boolean
    ncp.slot  Slot
        Unsigned 8-bit integer
    ncp.sm_info_size  Storage Module Information Size
        Unsigned 32-bit integer
    ncp.smids  Storage Media ID's
        Unsigned 32-bit integer
    ncp.software_description  Software Description
        String
    ncp.software_driver_type  Software Driver Type
        Unsigned 8-bit integer
    ncp.software_major_version_number  Software Major Version Number
        Unsigned 8-bit integer
    ncp.software_minor_version_number  Software Minor Version Number
        Unsigned 8-bit integer
    ncp.someone_else_did_it_0  Someone Else Did It Count 0
        Unsigned 32-bit integer
    ncp.someone_else_did_it_1  Someone Else Did It Count 1
        Unsigned 32-bit integer
    ncp.someone_else_did_it_2  Someone Else Did It Count 2
        Unsigned 32-bit integer
    ncp.someone_else_using_this_file  Someone Else Using This File Count
        Unsigned 32-bit integer
    ncp.source_component_count  Source Path Component Count
        Unsigned 8-bit integer
    ncp.source_dir_handle  Source Directory Handle
        Unsigned 8-bit integer
    ncp.source_originate_time  Source Originate Time
        Byte array
    ncp.source_path  Source Path
        String
    ncp.source_return_time  Source Return Time
        Byte array
    ncp.space_migrated  Space Migrated
        Unsigned 32-bit integer
    ncp.space_restriction_node_count  Space Restriction Node Count
        Unsigned 32-bit integer
    ncp.space_used  Space Used
        Unsigned 32-bit integer
    ncp.spx_abort_conn  SPX Aborted Connection
        Unsigned 16-bit integer
    ncp.spx_bad_in_pkt  SPX Bad In Packet Count
        Unsigned 16-bit integer
    ncp.spx_bad_listen  SPX Bad Listen Count
        Unsigned 16-bit integer
    ncp.spx_bad_send  SPX Bad Send Count
        Unsigned 16-bit integer
    ncp.spx_est_conn_fail  SPX Establish Connection Fail
        Unsigned 16-bit integer
    ncp.spx_est_conn_req  SPX Establish Connection Requests
        Unsigned 16-bit integer
    ncp.spx_incoming_pkt  SPX Incoming Packet Count
        Unsigned 32-bit integer
    ncp.spx_listen_con_fail  SPX Listen Connect Fail
        Unsigned 16-bit integer
    ncp.spx_listen_con_req  SPX Listen Connect Request
        Unsigned 16-bit integer
    ncp.spx_listen_pkt  SPX Listen Packet Count
        Unsigned 32-bit integer
    ncp.spx_max_conn  SPX Max Connections Count
        Unsigned 16-bit integer
    ncp.spx_max_used_conn  SPX Max Used Connections
        Unsigned 16-bit integer
    ncp.spx_no_ses_listen  SPX No Session Listen ECB Count
        Unsigned 16-bit integer
    ncp.spx_send  SPX Send Count
        Unsigned 32-bit integer
    ncp.spx_send_fail  SPX Send Fail Count
        Unsigned 16-bit integer
    ncp.spx_supp_pkt  SPX Suppressed Packet Count
        Unsigned 16-bit integer
    ncp.spx_watch_dog  SPX Watch Dog Destination Session Count
        Unsigned 16-bit integer
    ncp.spx_window_choke  SPX Window Choke Count
        Unsigned 32-bit integer
    ncp.src_connection  Source Connection ID
        Unsigned 32-bit integer
        The workstation's connection identification number
    ncp.src_name_space  Source Name Space
        Unsigned 8-bit integer
    ncp.stack_count  Stack Count
        Unsigned 32-bit integer
    ncp.stack_full_name_str  Stack Full Name
        String
    ncp.stack_major_vn  Stack Major Version Number
        Unsigned 8-bit integer
    ncp.stack_minor_vn  Stack Minor Version Number
        Unsigned 8-bit integer
    ncp.stack_number  Stack Number
        Unsigned 32-bit integer
    ncp.stack_short_name  Stack Short Name
        String
    ncp.start_conn_num  Starting Connection Number
        Unsigned 32-bit integer
    ncp.start_number  Start Number
        Unsigned 32-bit integer
    ncp.start_number_flag  Start Number Flag
        Unsigned 16-bit integer
    ncp.start_search_number  Start Search Number
        Unsigned 16-bit integer
    ncp.start_station_error  Start Station Error Count
        Unsigned 32-bit integer
    ncp.start_volume_number  Starting Volume Number
        Unsigned 32-bit integer
    ncp.starting_block  Starting Block
        Unsigned 16-bit integer
    ncp.starting_number  Starting Number
        Unsigned 32-bit integer
    ncp.stat_major_version  Statistics Table Major Version
        Unsigned 8-bit integer
    ncp.stat_minor_version  Statistics Table Minor Version
        Unsigned 8-bit integer
    ncp.stat_table_major_version  Statistics Table Major Version
        Unsigned 8-bit integer
    ncp.stat_table_minor_version  Statistics Table Minor Version
        Unsigned 8-bit integer
    ncp.station_list  Station List
        Unsigned 32-bit integer
    ncp.station_number  Station Number
        Byte array
    ncp.status  Status
        Unsigned 16-bit integer
    ncp.status_flag_bits  Status Flag
        Unsigned 32-bit integer
    ncp.status_flag_bits_audit  Audit
        Boolean
    ncp.status_flag_bits_comp  Compression
        Boolean
    ncp.status_flag_bits_im_purge  Immediate Purge
        Boolean
    ncp.status_flag_bits_migrate  Migration
        Boolean
    ncp.status_flag_bits_nss  NSS Volume
        Boolean
    ncp.status_flag_bits_ro  Read Only
        Boolean
    ncp.status_flag_bits_suballoc  Sub Allocation
        Boolean
    ncp.still_doing_the_last_req  Still Doing The Last Request Count
        Unsigned 32-bit integer
    ncp.still_transmitting  Still Transmitting Count
        Unsigned 32-bit integer
    ncp.stream_type  Stream Type
        Unsigned 8-bit integer
        Type of burst
    ncp.sub_alloc_clusters  Sub Alloc Clusters
        Unsigned 32-bit integer
    ncp.sub_alloc_freeable_clusters  Sub Alloc Freeable Clusters
        Unsigned 32-bit integer
    ncp.sub_directory  Subdirectory
        Unsigned 32-bit integer
    ncp.subfunc  SubFunction
        Unsigned 8-bit integer
    ncp.suggested_file_size  Suggested File Size
        Unsigned 32-bit integer
    ncp.support_module_id  Support Module ID
        Unsigned 32-bit integer
    ncp.synch_name  Synch Name
        String
    ncp.system_flags  System Flags
        Unsigned 8-bit integer
    ncp.system_flags.abt  ABT
        Boolean
        Is this an abort request?
    ncp.system_flags.eob  EOB
        Boolean
        Is this the last packet of the burst?
    ncp.system_flags.sys  SYS
        Boolean
        Is this a system packet?
    ncp.system_interval_marker  System Interval Marker
        Unsigned 32-bit integer
    ncp.tab_size  Tab Size
        Unsigned 8-bit integer
    ncp.target_client_list  Target Client List
        Unsigned 8-bit integer
    ncp.target_connection_number  Target Connection Number
        Unsigned 16-bit integer
    ncp.target_dir_handle  Target Directory Handle
        Unsigned 8-bit integer
    ncp.target_entry_id  Target Entry ID
        Unsigned 32-bit integer
    ncp.target_execution_time  Target Execution Time
        Byte array
    ncp.target_file_handle  Target File Handle
        Byte array
    ncp.target_file_offset  Target File Offset
        Unsigned 32-bit integer
    ncp.target_message  Message
        String
    ncp.target_ptr  Target Printer
        Unsigned 8-bit integer
    ncp.target_receive_time  Target Receive Time
        Byte array
    ncp.target_server_id_number  Target Server ID Number
        Unsigned 32-bit integer
    ncp.target_transmit_time  Target Transmit Time
        Byte array
    ncp.task  Task Number
        Unsigned 8-bit integer
    ncp.task_num_byte  Task Number
        Unsigned 8-bit integer
    ncp.task_number_word  Task Number
        Unsigned 16-bit integer
    ncp.text_job_description  Text Job Description
        String
    ncp.thrashing_count  Thrashing Count
        Unsigned 16-bit integer
    ncp.time_to_net  Time To Net
        Unsigned 16-bit integer
    ncp.timeout_limit  Timeout Limit
        Unsigned 16-bit integer
    ncp.timesync_status_active  Time Synchronization is Active
        Boolean
    ncp.timesync_status_ext_sync  External Clock Status
        Boolean
    ncp.timesync_status_external  External Time Synchronization Active
        Boolean
    ncp.timesync_status_flags  Timesync Status
        Unsigned 32-bit integer
    ncp.timesync_status_net_sync  Time is Synchronized to the Network
        Boolean
    ncp.timesync_status_server_type  Time Server Type
        Unsigned 32-bit integer
    ncp.timesync_status_sync  Time is Synchronized
        Boolean
    ncp.too_many_ack_frag  Too Many ACK Fragments Count
        Unsigned 32-bit integer
    ncp.too_many_hops  Too Many Hops
        Unsigned 16-bit integer
    ncp.total_blks_to_dcompress  Total Blocks To Decompress
        Unsigned 32-bit integer
    ncp.total_blocks  Total Blocks
        Unsigned 32-bit integer
    ncp.total_cache_writes  Total Cache Writes
        Unsigned 32-bit integer
    ncp.total_changed_fats  Total Changed FAT Entries
        Unsigned 32-bit integer
    ncp.total_cnt_blocks  Total Count Blocks
        Unsigned 32-bit integer
    ncp.total_common_cnts  Total Common Counts
        Unsigned 32-bit integer
    ncp.total_dir_entries  Total Directory Entries
        Unsigned 32-bit integer
    ncp.total_directory_slots  Total Directory Slots
        Unsigned 16-bit integer
    ncp.total_extended_directory_extants  Total Extended Directory Extants
        Unsigned 32-bit integer
    ncp.total_file_service_packets  Total File Service Packets
        Unsigned 32-bit integer
    ncp.total_files_opened  Total Files Opened
        Unsigned 32-bit integer
    ncp.total_lfs_counters  Total LFS Counters
        Unsigned 32-bit integer
    ncp.total_offspring  Total Offspring
        Unsigned 16-bit integer
    ncp.total_other_packets  Total Other Packets
        Unsigned 32-bit integer
    ncp.total_queue_jobs  Total Queue Jobs
        Unsigned 32-bit integer
    ncp.total_read_requests  Total Read Requests
        Unsigned 32-bit integer
    ncp.total_request  Total Requests
        Unsigned 32-bit integer
    ncp.total_request_packets  Total Request Packets
        Unsigned 32-bit integer
    ncp.total_routed_packets  Total Routed Packets
        Unsigned 32-bit integer
    ncp.total_rx_packet_count  Total Receive Packet Count
        Unsigned 32-bit integer
    ncp.total_rx_packets  Total Receive Packets
        Unsigned 32-bit integer
    ncp.total_rx_pkts  Total Receive Packets
        Unsigned 32-bit integer
    ncp.total_server_memory  Total Server Memory
        Unsigned 16-bit integer
    ncp.total_stream_size_struct_space_alloc  Total Data Stream Disk Space Alloc
        Unsigned 32-bit integer
    ncp.total_trans_backed_out  Total Transactions Backed Out
        Unsigned 32-bit integer
    ncp.total_trans_performed  Total Transactions Performed
        Unsigned 32-bit integer
    ncp.total_tx_packet_count  Total Transmit Packet Count
        Unsigned 32-bit integer
    ncp.total_tx_packets  Total Transmit Packets
        Unsigned 32-bit integer
    ncp.total_tx_pkts  Total Transmit Packets
        Unsigned 32-bit integer
    ncp.total_unfilled_backout_requests  Total Unfilled Backout Requests
        Unsigned 16-bit integer
    ncp.total_volume_clusters  Total Volume Clusters
        Unsigned 16-bit integer
    ncp.total_write_requests  Total Write Requests
        Unsigned 32-bit integer
    ncp.total_write_trans_performed  Total Write Transactions Performed
        Unsigned 32-bit integer
    ncp.track_on_flag  Track On Flag
        Boolean
    ncp.transaction_disk_space  Transaction Disk Space
        Unsigned 16-bit integer
    ncp.transaction_fat_allocations  Transaction FAT Allocations
        Unsigned 32-bit integer
    ncp.transaction_file_size_changes  Transaction File Size Changes
        Unsigned 32-bit integer
    ncp.transaction_files_truncated  Transaction Files Truncated
        Unsigned 32-bit integer
    ncp.transaction_number  Transaction Number
        Unsigned 32-bit integer
    ncp.transaction_tracking_enabled  Transaction Tracking Enabled
        Unsigned 8-bit integer
    ncp.transaction_tracking_supported  Transaction Tracking Supported
        Unsigned 8-bit integer
    ncp.transaction_volume_number  Transaction Volume Number
        Unsigned 16-bit integer
    ncp.transport_addr  Transport Address
    ncp.transport_type  Communications Type
        Unsigned 8-bit integer
    ncp.trustee_id_set  Trustee ID
        Unsigned 32-bit integer
    ncp.trustee_list_node_count  Trustee List Node Count
        Unsigned 32-bit integer
    ncp.trustee_rights_create  Create
        Boolean
    ncp.trustee_rights_del  Delete
        Boolean
    ncp.trustee_rights_low  Trustee Rights
        Unsigned 16-bit integer
    ncp.trustee_rights_modify  Modify
        Boolean
    ncp.trustee_rights_open  Open
        Boolean
    ncp.trustee_rights_parent  Parental
        Boolean
    ncp.trustee_rights_read  Read
        Boolean
    ncp.trustee_rights_search  Search
        Boolean
    ncp.trustee_rights_super  Supervisor
        Boolean
    ncp.trustee_rights_write  Write
        Boolean
    ncp.trustee_set_number  Trustee Set Number
        Unsigned 8-bit integer
    ncp.try_to_write_too_much  Trying To Write Too Much Count
        Unsigned 32-bit integer
    ncp.ttl_comp_blks  Total Compression Blocks
        Unsigned 32-bit integer
    ncp.ttl_ds_disk_space_alloc  Total Streams Space Allocated
        Unsigned 32-bit integer
    ncp.ttl_eas  Total EA's
        Unsigned 32-bit integer
    ncp.ttl_eas_data_size  Total EA's Data Size
        Unsigned 32-bit integer
    ncp.ttl_eas_key_size  Total EA's Key Size
        Unsigned 32-bit integer
    ncp.ttl_inter_blks  Total Intermediate Blocks
        Unsigned 32-bit integer
    ncp.ttl_migrated_size  Total Migrated Size
        Unsigned 32-bit integer
    ncp.ttl_num_of_r_tags  Total Number of Resource Tags
        Unsigned 32-bit integer
    ncp.ttl_num_of_set_cmds  Total Number of Set Commands
        Unsigned 32-bit integer
    ncp.ttl_pckts_routed  Total Packets Routed
        Unsigned 32-bit integer
    ncp.ttl_pckts_srvcd  Total Packets Serviced
        Unsigned 32-bit integer
    ncp.ttl_values_length  Total Values Length
        Unsigned 32-bit integer
    ncp.ttl_write_data_size  Total Write Data Size
        Unsigned 32-bit integer
    ncp.tts_flag  Transaction Tracking Flag
        Unsigned 16-bit integer
    ncp.tts_level  TTS Level
        Unsigned 8-bit integer
    ncp.turbo_fat_build_failed  Turbo FAT Build Failed Count
        Unsigned 32-bit integer
    ncp.turbo_used_for_file_service  Turbo Used For File Service
        Unsigned 16-bit integer
    ncp.type  Type
        Unsigned 16-bit integer
        NCP message type
    ncp.un_claimed_packets  Unclaimed Packets
        Unsigned 32-bit integer
    ncp.un_compressable_data_streams_count  Uncompressable Data Streams Count
        Unsigned 32-bit integer
    ncp.un_used  Unused
        Unsigned 8-bit integer
    ncp.un_used_directory_entries  Unused Directory Entries
        Unsigned 32-bit integer
    ncp.un_used_extended_directory_extants  Unused Extended Directory Extants
        Unsigned 32-bit integer
    ncp.unclaimed_packets  Unclaimed Packets
        Unsigned 32-bit integer
    ncp.undefined_28  Undefined
        Byte array
    ncp.undefined_8  Undefined
        Byte array
    ncp.unique_id  Unique ID
        Unsigned 8-bit integer
    ncp.unknown_network  Unknown Network
        Unsigned 16-bit integer
    ncp.unused_disk_blocks  Unused Disk Blocks
        Unsigned 32-bit integer
    ncp.update_date  Update Date
        Unsigned 16-bit integer
    ncp.update_id  Update ID
        Unsigned 32-bit integer
    ncp.update_time  Update Time
        Unsigned 16-bit integer
    ncp.used_blocks  Used Blocks
        Unsigned 32-bit integer
    ncp.used_space  Used Space
        Unsigned 32-bit integer
    ncp.user_id  User ID
        Unsigned 32-bit integer
    ncp.user_info_audit_conn  Audit Connection Recorded
        Boolean
    ncp.user_info_audited  Audited
        Boolean
    ncp.user_info_being_abort  Being Aborted
        Boolean
    ncp.user_info_bindery  Bindery Connection
        Boolean
    ncp.user_info_dsaudit_conn  DS Audit Connection Recorded
        Boolean
    ncp.user_info_held_req  Held Requests
        Unsigned 32-bit integer
    ncp.user_info_int_login  Internal Login
        Boolean
    ncp.user_info_logged_in  Logged In
        Boolean
    ncp.user_info_logout  Logout in Progress
        Boolean
    ncp.user_info_mac_station  MAC Station
        Boolean
    ncp.user_info_need_sec  Needs Security Change
        Boolean
    ncp.user_info_temp_authen  Temporary Authenticated
        Boolean
    ncp.user_info_ttl_bytes_rd  Total Bytes Read
        Byte array
    ncp.user_info_ttl_bytes_wrt  Total Bytes Written
        Byte array
    ncp.user_info_use_count  Use Count
        Unsigned 16-bit integer
    ncp.user_login_allowed  Login Status
        Unsigned 8-bit integer
    ncp.user_name  User Name
        String
    ncp.user_name_16  User Name
        String
    ncp.uts_time_in_seconds  UTC Time in Seconds
        Unsigned 32-bit integer
    ncp.valid_bfrs_reused  Valid Buffers Reused
        Unsigned 32-bit integer
    ncp.value_available  Value Available
        Unsigned 8-bit integer
    ncp.vap_version  VAP Version
        Unsigned 8-bit integer
    ncp.variable_bit_mask  Variable Bit Mask
        Unsigned 32-bit integer
    ncp.variable_bits_defined  Variable Bits Defined
        Unsigned 16-bit integer
    ncp.vconsole_rev  Console Revision
        Unsigned 8-bit integer
    ncp.vconsole_ver  Console Version
        Unsigned 8-bit integer
    ncp.verb  Verb
        Unsigned 32-bit integer
    ncp.verb_data  Verb Data
        Unsigned 8-bit integer
    ncp.version  Version
        Unsigned 32-bit integer
    ncp.version_number  Version
        Unsigned 8-bit integer
    ncp.vert_location  Vertical Location
        Unsigned 16-bit integer
    ncp.virtual_console_version  Virtual Console Version
        Unsigned 8-bit integer
    ncp.vol_info_reply_len  Volume Information Reply Length
        Unsigned 16-bit integer
    ncp.volume_active_count  Volume Active Count
        Unsigned 32-bit integer
    ncp.volume_cached_flag  Volume Cached Flag
        Unsigned 8-bit integer
    ncp.volume_hashed_flag  Volume Hashed Flag
        Unsigned 8-bit integer
    ncp.volume_id  Volume ID
        Unsigned 32-bit integer
    ncp.volume_last_modified_date  Volume Last Modified Date
        Unsigned 16-bit integer
    ncp.volume_last_modified_time  Volume Last Modified Time
        Unsigned 16-bit integer
    ncp.volume_mounted_flag  Volume Mounted Flag
        Unsigned 8-bit integer
    ncp.volume_name  Volume Name
        String
    ncp.volume_name_len  Volume Name
        String
    ncp.volume_name_stringz  Volume Name
        String
    ncp.volume_number  Volume Number
        Unsigned 8-bit integer
    ncp.volume_number_long  Volume Number
        Unsigned 32-bit integer
    ncp.volume_reference_count  Volume Reference Count
        Unsigned 32-bit integer
    ncp.volume_removable_flag  Volume Removable Flag
        Unsigned 8-bit integer
    ncp.volume_request_flags  Volume Request Flags
        Unsigned 16-bit integer
    ncp.volume_segment_dev_num  Volume Segment Device Number
        Unsigned 32-bit integer
    ncp.volume_segment_offset  Volume Segment Offset
        Unsigned 32-bit integer
    ncp.volume_segment_size  Volume Segment Size
        Unsigned 32-bit integer
    ncp.volume_size_in_clusters  Volume Size in Clusters
        Unsigned 32-bit integer
    ncp.volume_type  Volume Type
        Unsigned 16-bit integer
    ncp.volume_use_count  Volume Use Count
        Unsigned 32-bit integer
    ncp.volumes_supported_max  Volumes Supported Max
        Unsigned 16-bit integer
    ncp.wait_node  Wait Node Count
        Unsigned 32-bit integer
    ncp.wait_node_alloc_fail  Wait Node Alloc Failure Count
        Unsigned 32-bit integer
    ncp.wait_on_sema  Wait On Semaphore Count
        Unsigned 32-bit integer
    ncp.wait_till_dirty_blcks_dec  Wait Till Dirty Blocks Decrease Count
        Unsigned 32-bit integer
    ncp.wait_time  Wait Time
        Unsigned 32-bit integer
    ncp.wasted_server_memory  Wasted Server Memory
        Unsigned 16-bit integer
    ncp.write_curr_trans  Write Currently Transmitting Count
        Unsigned 32-bit integer
    ncp.write_didnt_need_but_req_ack  Write Didn't Need But Requested ACK Count
        Unsigned 32-bit integer
    ncp.write_didnt_need_this_frag  Write Didn't Need This Fragment Count
        Unsigned 32-bit integer
    ncp.write_dup_req  Write Duplicate Request Count
        Unsigned 32-bit integer
    ncp.write_err  Write Error Count
        Unsigned 32-bit integer
    ncp.write_got_an_ack0  Write Got An ACK Count 0
        Unsigned 32-bit integer
    ncp.write_got_an_ack1  Write Got An ACK Count 1
        Unsigned 32-bit integer
    ncp.write_held_off  Write Held Off Count
        Unsigned 32-bit integer
    ncp.write_held_off_with_dup  Write Held Off With Duplicate Request
        Unsigned 32-bit integer
    ncp.write_incon_packet_len  Write Inconsistent Packet Lengths Count
        Unsigned 32-bit integer
    ncp.write_out_of_mem_for_ctl_nodes  Write Out Of Memory For Control Nodes Count
        Unsigned 32-bit integer
    ncp.write_timeout  Write Time Out Count
        Unsigned 32-bit integer
    ncp.write_too_many_buf_check  Write Too Many Buffers Checked Out Count
        Unsigned 32-bit integer
    ncp.write_trash_dup_req  Write Trashed Duplicate Request Count
        Unsigned 32-bit integer
    ncp.write_trash_packet  Write Trashed Packet Count
        Unsigned 32-bit integer
    ncp.wrt_blck_cnt  Write Block Count
        Unsigned 32-bit integer
    ncp.wrt_entire_blck  Write Entire Block Count
        Unsigned 32-bit integer
    ncp.year  Year
        Unsigned 8-bit integer
    ncp.zero_ack_frag  Zero ACK Fragment Count
        Unsigned 32-bit integer

Network Data Management Protocol (ndmp)

    ndmp.addr.ip  IP Address
        IPv4 address
        IP Address
    ndmp.addr.ipc  IPC
        Byte array
        IPC identifier
    ndmp.addr.loop_id  Loop ID
        Unsigned 32-bit integer
        FCAL Loop ID
    ndmp.addr.tcp_port  TCP Port
        Unsigned 32-bit integer
        TCP Port
    ndmp.addr_type  Addr Type
        Unsigned 32-bit integer
        Address Type
    ndmp.addr_types  Addr Types
        No value
        List Of Address Types
    ndmp.auth.challenge  Challenge
        Byte array
        Authentication Challenge
    ndmp.auth.digest  Digest
        Byte array
        Authentication Digest
    ndmp.auth.id  ID
        String
        ID of client authenticating
    ndmp.auth.password  Password
        String
        Password of client authenticating
    ndmp.auth.types  Auth types
        No value
        Auth types
    ndmp.auth_type  Auth Type
        Unsigned 32-bit integer
        Authentication Type
    ndmp.bu.destination_dir  Destination Dir
        String
        Destination directory to restore backup to
    ndmp.bu.new_name  New Name
        String
        New Name
    ndmp.bu.operation  Operation
        Unsigned 32-bit integer
        BU Operation
    ndmp.bu.original_path  Original Path
        String
        Original path where backup was created
    ndmp.bu.other_name  Other Name
        String
        Other Name
    ndmp.butype.default_env  Default Env
        No value
        Default Env's for this Butype Info
    ndmp.butype.env.name  Name
        String
        Name for this env-variable
    ndmp.butype.env.value  Value
        String
        Value for this env-variable
    ndmp.butype.info  Butype Info
        No value
        Butype Info
    ndmp.butype.name  Butype Name
        String
        Name of Butype
    ndmp.bytes_left_to_read  Bytes left to read
        Unsigned 64-bit integer
        Number of bytes left to be read from the device
    ndmp.connected  Connected
        Unsigned 32-bit integer
        Status of connection
    ndmp.connected.reason  Reason
        String
        Textual description of the connection status
    ndmp.count  Count
        Unsigned 32-bit integer
        Number of bytes/objects/operations
    ndmp.data  Data
        Byte array
        Data written/read
    ndmp.data.bytes_processed  Bytes Processed
        Unsigned 64-bit integer
        Number of bytes processed
    ndmp.data.est_bytes_remain  Est Bytes Remain
        Unsigned 64-bit integer
        Estimated number of bytes remaining
    ndmp.data.est_time_remain  Est Time Remain
        Time duration
        Estimated time remaining
    ndmp.data.halted  Halted Reason
        Unsigned 32-bit integer
        Data halted reason
    ndmp.data.state  State
        Unsigned 32-bit integer
        Data state
    ndmp.data.written  Data Written
        Unsigned 64-bit integer
        Number of data bytes written
    ndmp.dirs  Dirs
        No value
        List of directories
    ndmp.error  Error
        Unsigned 32-bit integer
        Error code for this NDMP PDU
    ndmp.execute_cdb.cdb_len  CDB length
        Unsigned 32-bit integer
        Length of CDB
    ndmp.execute_cdb.datain  Data in
        Byte array
        Data transferred from the SCSI device
    ndmp.execute_cdb.datain_len  Data in length
        Unsigned 32-bit integer
        Expected length of data bytes to read
    ndmp.execute_cdb.dataout  Data out
        Byte array
        Data to be transferred to the SCSI device
    ndmp.execute_cdb.dataout_len  Data out length
        Unsigned 32-bit integer
        Number of bytes transferred to the device
    ndmp.execute_cdb.flags.data_in  DATA_IN
        Boolean
        DATA_IN
    ndmp.execute_cdb.flags.data_out  DATA_OUT
        Boolean
        DATA_OUT
    ndmp.execute_cdb.sns_len  Sense data length
        Unsigned 32-bit integer
        Length of sense data
    ndmp.execute_cdb.status  Status
        Unsigned 8-bit integer
        SCSI status
    ndmp.execute_cdb.timeout  Timeout
        Unsigned 32-bit integer
        Reselect timeout, in milliseconds
    ndmp.file  File
        String
        Name of File
    ndmp.file.atime  atime
        Date/Time stamp
        Timestamp for atime for this file
    ndmp.file.ctime  ctime
        Date/Time stamp
        Timestamp for ctime for this file
    ndmp.file.fattr  Fattr
        Unsigned 32-bit integer
        Mode for UNIX, fattr for NT
    ndmp.file.fh_info  FH Info
        Unsigned 64-bit integer
        FH Info used for direct access
    ndmp.file.fs_type  File FS Type
        Unsigned 32-bit integer
        Type of file permissions (UNIX or NT)
    ndmp.file.group  Group
        Unsigned 32-bit integer
        GID for UNIX, NA for NT
    ndmp.file.links  Links
        Unsigned 32-bit integer
        Number of links to this file
    ndmp.file.mtime  mtime
        Date/Time stamp
        Timestamp for mtime for this file
    ndmp.file.names  File Names
        No value
        List of file names
    ndmp.file.node  Node
        Unsigned 64-bit integer
        Node used for direct access
    ndmp.file.owner  Owner
        Unsigned 32-bit integer
        UID for UNIX, owner for NT
    ndmp.file.parent  Parent
        Unsigned 64-bit integer
        Parent node(directory) for this node
    ndmp.file.size  Size
        Unsigned 64-bit integer
        File Size
    ndmp.file.stats  File Stats
        No value
        List of file stats
    ndmp.file.type  File Type
        Unsigned 32-bit integer
        Type of file
    ndmp.files  Files
        No value
        List of files
    ndmp.fs.avail_size  Avail Size
        Unsigned 64-bit integer
        Total available size on FS
    ndmp.fs.env  Env variables
        No value
        Environment variables for FS
    ndmp.fs.env.name  Name
        String
        Name for this env-variable
    ndmp.fs.env.value  Value
        String
        Value for this env-variable
    ndmp.fs.info  FS Info
        No value
        FS Info
    ndmp.fs.logical_device  Logical Device
        String
        Name of logical device
    ndmp.fs.physical_device  Physical Device
        String
        Name of physical device
    ndmp.fs.status  Status
        String
        Status for this FS
    ndmp.fs.total_inodes  Total Inodes
        Unsigned 64-bit integer
        Total number of inodes on FS
    ndmp.fs.total_size  Total Size
        Unsigned 64-bit integer
        Total size of FS
    ndmp.fs.type  Type
        String
        Type of FS
    ndmp.fs.used_inodes  Used Inodes
        Unsigned 64-bit integer
        Number of used inodes on FS
    ndmp.fs.used_size  Used Size
        Unsigned 64-bit integer
        Total used size of FS
    ndmp.halt  Halt
        Unsigned 32-bit integer
        Reason why it halted
    ndmp.halt.reason  Reason
        String
        Textual reason for why it halted
    ndmp.header  NDMP Header
        No value
        NDMP Header
    ndmp.hostid  HostID
        String
        HostID
    ndmp.hostname  Hostname
        String
        Hostname
    ndmp.log.message  Message
        String
        Log entry
    ndmp.log.message.id  Message ID
        Unsigned 32-bit integer
        ID of this log entry
    ndmp.log.type  Type
        Unsigned 32-bit integer
        Type of log entry
    ndmp.mover.mode  Mode
        Unsigned 32-bit integer
        Mover Mode
    ndmp.mover.pause  Pause
        Unsigned 32-bit integer
        Reason why the mover paused
    ndmp.mover.state  State
        Unsigned 32-bit integer
        State of the selected mover
    ndmp.msg  Message
        Unsigned 32-bit integer
        Type of NDMP PDU
    ndmp.msg_type  Type
        Unsigned 32-bit integer
        Is this a Request or Response?
    ndmp.nlist  Nlist
        No value
        List of names
    ndmp.nodes  Nodes
        No value
        List of nodes
    ndmp.os.type  OS Type
        String
        OS Type
    ndmp.os.version  OS Version
        String
        OS Version
    ndmp.record.num  Record Num
        Unsigned 32-bit integer
        Number of records
    ndmp.record.size  Record Size
        Unsigned 32-bit integer
        Record size in bytes
    ndmp.reply_sequence  Reply Sequence
        Unsigned 32-bit integer
        Reply Sequence number for NDMP PDU
    ndmp.resid_count  Resid Count
        Unsigned 32-bit integer
        Number of remaining bytes/objects/operations
    ndmp.scsi.controller  Controller
        Unsigned 32-bit integer
        Target Controller
    ndmp.scsi.device  Device
        String
        Name of SCSI Device
    ndmp.scsi.id  ID
        Unsigned 32-bit integer
        Target ID
    ndmp.scsi.info  SCSI Info
        No value
        SCSI Info
    ndmp.scsi.lun  LUN
        Unsigned 32-bit integer
        Target LUN
    ndmp.scsi.model  Model
        String
        Model of the SCSI device
    ndmp.seek.position  Seek Position
        Unsigned 64-bit integer
        Current seek position on device
    ndmp.sequence  Sequence
        Unsigned 32-bit integer
        Sequence number for NDMP PDU
    ndmp.server.product  Product
        String
        Name of product
    ndmp.server.revision  Revision
        String
        Revision of this product
    ndmp.server.vendor  Vendor
        String
        Name of vendor
    ndmp.tape.cap.name  Name
        String
        Name for this env-variable
    ndmp.tape.cap.value  Value
        String
        Value for this env-variable
    ndmp.tape.capability  Tape Capabilities
        No value
        Tape Capabilities
    ndmp.tape.dev_cap  Device Capability
        No value
        Tape Device Capability
    ndmp.tape.device  Device
        String
        Name of TAPE Device
    ndmp.tape.info  Tape Info
        No value
        Tape Info
    ndmp.tape.model  Model
        String
        Model of the TAPE drive
    ndmp.tape.mtio.op  Operation
        Unsigned 32-bit integer
        MTIO Operation
    ndmp.tape.open_mode  Mode
        Unsigned 32-bit integer
        Mode to open tape in
    ndmp.tape.status.block_no  block_no
        Unsigned 32-bit integer
        block_no
    ndmp.tape.status.block_size  block_size
        Unsigned 32-bit integer
        block_size
    ndmp.tape.status.file_num  file_num
        Unsigned 32-bit integer
        file_num
    ndmp.tape.status.partition  partition
        Unsigned 32-bit integer
        partition
    ndmp.tape.status.soft_errors  soft_errors
        Unsigned 32-bit integer
        soft_errors
    ndmp.tape.status.space_remain  space_remain
        Unsigned 64-bit integer
        space_remain
    ndmp.tape.status.total_space  total_space
        Unsigned 64-bit integer
        total_space
    ndmp.timestamp  Time
        Date/Time stamp
        Timestamp for this NDMP PDU
    ndmp.version  Version
        Unsigned 32-bit integer
        Version of NDMP protocol
    ndmp.window.length  Window Length
        Unsigned 64-bit integer
        Size of window in bytes
    ndmp.window.offset  Window Offset
        Unsigned 64-bit integer
        Offset to window in bytes

Network File System (nfs)

    nfs.ace  ace
        String
        Access Control Entry
    nfs.aceflag4  aceflag
        Unsigned 32-bit integer
        nfs.aceflag4
    nfs.acemask4  acemask
        Unsigned 32-bit integer
        nfs.acemask4
    nfs.acetype4  acetype
        Unsigned 32-bit integer
        nfs.acetype4
    nfs.acl  ACL
        No value
        Access Control List
    nfs.atime  atime
        Date/Time stamp
        Access Time
    nfs.atime.nsec  nano seconds
        Unsigned 32-bit integer
        Access Time, Nano-seconds
    nfs.atime.sec  seconds
        Unsigned 32-bit integer
        Access Time, Seconds
    nfs.atime.usec  micro seconds
        Unsigned 32-bit integer
        Access Time, Micro-seconds
    nfs.attr  mand_attr
        Unsigned 32-bit integer
        Mandatory Attribute
    nfs.bytes_per_block  bytes_per_block
        Unsigned 32-bit integer
        nfs.bytes_per_block
    nfs.call.operation  Opcode
        Unsigned 32-bit integer
        Opcode
    nfs.callback.ident  callback_ident
        Unsigned 32-bit integer
        Callback Identifier
    nfs.cb_location  cb_location
        Unsigned 32-bit integer
        nfs.cb_location
    nfs.cb_program  cb_program
        Unsigned 32-bit integer
        nfs.cb_program
    nfs.change_info.atomic  Atomic
        Boolean
        Atomic
    nfs.changeid4  changeid
        Unsigned 64-bit integer
        nfs.changeid4
    nfs.changeid4.after  changeid
        Unsigned 64-bit integer
        nfs.changeid4.after
    nfs.changeid4.before  changeid
        Unsigned 64-bit integer
        nfs.changeid4.before
    nfs.clientid  clientid
        Unsigned 64-bit integer
        Client ID
    nfs.cookie3  cookie
        Unsigned 64-bit integer
        nfs.cookie3
    nfs.cookie4  cookie
        Unsigned 64-bit integer
        nfs.cookie4
    nfs.cookieverf4  cookieverf
        Unsigned 64-bit integer
        nfs.cookieverf4
    nfs.count3  count
        Unsigned 32-bit integer
        nfs.count3
    nfs.count3_dircount  dircount
        Unsigned 32-bit integer
        nfs.count3_dircount
    nfs.count3_maxcount  maxcount
        Unsigned 32-bit integer
        nfs.count3_maxcount
    nfs.count4  count
        Unsigned 32-bit integer
        nfs.count4
    nfs.createmode  Create Mode
        Unsigned 32-bit integer
        Create Mode
    nfs.ctime  ctime
        Date/Time stamp
        Creation Time
    nfs.ctime.nsec  nano seconds
        Unsigned 32-bit integer
        Creation Time, Nano-seconds
    nfs.ctime.sec  seconds
        Unsigned 32-bit integer
        Creation Time, Seconds
    nfs.ctime.usec  micro seconds
        Unsigned 32-bit integer
        Creation Time, Micro-seconds
    nfs.data  Data
        Byte array
        Data
    nfs.delegate_stateid  delegate_stateid
        Unsigned 64-bit integer
        nfs.delegate_stateid
    nfs.delegate_type  delegate_type
        Unsigned 32-bit integer
        nfs.delegate_type
    nfs.dircount  dircount
        Unsigned 32-bit integer
        nfs.dircount
    nfs.dirlist4.eof  eof
        Boolean
        nfs.dirlist4.eof
    nfs.dtime  time delta
        Time duration
        Time Delta
    nfs.dtime.nsec  nano seconds
        Unsigned 32-bit integer
        Time Delta, Nano-seconds
    nfs.dtime.sec  seconds
        Unsigned 32-bit integer
        Time Delta, Seconds
    nfs.eof  eof
        Unsigned 32-bit integer
        nfs.eof
    nfs.fattr.blocks  blocks
        Unsigned 32-bit integer
        nfs.fattr.blocks
    nfs.fattr.blocksize  blocksize
        Unsigned 32-bit integer
        nfs.fattr.blocksize
    nfs.fattr.fileid  fileid
        Unsigned 32-bit integer
        nfs.fattr.fileid
    nfs.fattr.fsid  fsid
        Unsigned 32-bit integer
        nfs.fattr.fsid
    nfs.fattr.gid  gid
        Unsigned 32-bit integer
        nfs.fattr.gid
    nfs.fattr.nlink  nlink
        Unsigned 32-bit integer
        nfs.fattr.nlink
    nfs.fattr.rdev  rdev
        Unsigned 32-bit integer
        nfs.fattr.rdev
    nfs.fattr.size  size
        Unsigned 32-bit integer
        nfs.fattr.size
    nfs.fattr.type  type
        Unsigned 32-bit integer
        nfs.fattr.type
    nfs.fattr.uid  uid
        Unsigned 32-bit integer
        nfs.fattr.uid
    nfs.fattr3.fileid  fileid
        Unsigned 64-bit integer
        nfs.fattr3.fileid
    nfs.fattr3.fsid  fsid
        Unsigned 64-bit integer
        nfs.fattr3.fsid
    nfs.fattr3.gid  gid
        Unsigned 32-bit integer
        nfs.fattr3.gid
    nfs.fattr3.nlink  nlink
        Unsigned 32-bit integer
        nfs.fattr3.nlink
    nfs.fattr3.rdev  rdev
        Unsigned 32-bit integer
        nfs.fattr3.rdev
    nfs.fattr3.size  size
        Unsigned 64-bit integer
        nfs.fattr3.size
    nfs.fattr3.type  Type
        Unsigned 32-bit integer
        nfs.fattr3.type
    nfs.fattr3.uid  uid
        Unsigned 32-bit integer
        nfs.fattr3.uid
    nfs.fattr3.used  used
        Unsigned 64-bit integer
        nfs.fattr3.used
    nfs.fattr4.aclsupport  aclsupport
        Unsigned 32-bit integer
        nfs.fattr4.aclsupport
    nfs.fattr4.attr_vals  attr_vals
        Byte array
        attr_vals
    nfs.fattr4.fileid  fileid
        Unsigned 64-bit integer
        nfs.fattr4.fileid
    nfs.fattr4.files_avail  files_avail
        Unsigned 64-bit integer
        nfs.fattr4.files_avail
    nfs.fattr4.files_free  files_free
        Unsigned 64-bit integer
        nfs.fattr4.files_free
    nfs.fattr4.files_total  files_total
        Unsigned 64-bit integer
        nfs.fattr4.files_total
    nfs.fattr4.lease_time  lease_time
        Unsigned 32-bit integer
        nfs.fattr4.lease_time
    nfs.fattr4.maxfilesize  maxfilesize
        Unsigned 64-bit integer
        nfs.fattr4.maxfilesize
    nfs.fattr4.maxlink  maxlink
        Unsigned 32-bit integer
        nfs.fattr4.maxlink
    nfs.fattr4.maxname  maxname
        Unsigned 32-bit integer
        nfs.fattr4.maxname
    nfs.fattr4.maxread  maxread
        Unsigned 64-bit integer
        nfs.fattr4.maxread
    nfs.fattr4.maxwrite  maxwrite
        Unsigned 64-bit integer
        nfs.fattr4.maxwrite
    nfs.fattr4.numlinks  numlinks
        Unsigned 32-bit integer
        nfs.fattr4.numlinks
    nfs.fattr4.quota_hard  quota_hard
        Unsigned 64-bit integer
        nfs.fattr4.quota_hard
    nfs.fattr4.quota_soft  quota_soft
        Unsigned 64-bit integer
        nfs.fattr4.quota_soft
    nfs.fattr4.quota_used  quota_used
        Unsigned 64-bit integer
        nfs.fattr4.quota_used
    nfs.fattr4.size  size
        Unsigned 64-bit integer
        nfs.fattr4.size
    nfs.fattr4.space_avail  space_avail
        Unsigned 64-bit integer
        nfs.fattr4.space_avail
    nfs.fattr4.space_free  space_free
        Unsigned 64-bit integer
        nfs.fattr4.space_free
    nfs.fattr4.space_total  space_total
        Unsigned 64-bit integer
        nfs.fattr4.space_total
    nfs.fattr4.space_used  space_used
        Unsigned 64-bit integer
        nfs.fattr4.space_used
    nfs.fattr4_archive  fattr4_archive
        Boolean
        nfs.fattr4_archive
    nfs.fattr4_cansettime  fattr4_cansettime
        Boolean
        nfs.fattr4_cansettime
    nfs.fattr4_case_insensitive  fattr4_case_insensitive
        Boolean
        nfs.fattr4_case_insensitive
    nfs.fattr4_case_preserving  fattr4_case_preserving
        Boolean
        nfs.fattr4_case_preserving
    nfs.fattr4_chown_restricted  fattr4_chown_restricted
        Boolean
        nfs.fattr4_chown_restricted
    nfs.fattr4_hidden  fattr4_hidden
        Boolean
        nfs.fattr4_hidden
    nfs.fattr4_homogeneous  fattr4_homogeneous
        Boolean
        nfs.fattr4_homogeneous
    nfs.fattr4_link_support  fattr4_link_support
        Boolean
        nfs.fattr4_link_support
    nfs.fattr4_mimetype  fattr4_mimetype
        String
        nfs.fattr4_mimetype
    nfs.fattr4_named_attr  fattr4_named_attr
        Boolean
        nfs.fattr4_named_attr
    nfs.fattr4_no_trunc  fattr4_no_trunc
        Boolean
        nfs.fattr4_no_trunc
    nfs.fattr4_owner  fattr4_owner
        String
        nfs.fattr4_owner
    nfs.fattr4_owner_group  fattr4_owner_group
        String
        nfs.fattr4_owner_group
    nfs.fattr4_symlink_support  fattr4_symlink_support
        Boolean
        nfs.fattr4_symlink_support
    nfs.fattr4_system  fattr4_system
        Boolean
        nfs.fattr4_system
    nfs.fattr4_unique_handles  fattr4_unique_handles
        Boolean
        nfs.fattr4_unique_handles
    nfs.fh.auth_type  auth_type
        Unsigned 8-bit integer
        authentication type
    nfs.fh.dentry  dentry
        Unsigned 32-bit integer
        dentry (cookie)
    nfs.fh.dev  device
        Unsigned 32-bit integer
        device
    nfs.fh.dirinode  directory inode
        Unsigned 32-bit integer
        directory inode
    nfs.fh.fileid_type  fileid_type
        Unsigned 8-bit integer
        file ID type
    nfs.fh.fn  file number
        Unsigned 32-bit integer
        file number
    nfs.fh.fn.generation  generation
        Unsigned 32-bit integer
        file number generation
    nfs.fh.fn.inode  inode
        Unsigned 32-bit integer
        file number inode
    nfs.fh.fn.len  length
        Unsigned 32-bit integer
        file number length
    nfs.fh.fsid.inode  inode
        Unsigned 32-bit integer
        file system inode
    nfs.fh.fsid.major  major
        Unsigned 32-bit integer
        major file system ID
    nfs.fh.fsid.minor  minor
        Unsigned 32-bit integer
        minor file system ID
    nfs.fh.fsid_type  fsid_type
        Unsigned 8-bit integer
        file system ID type
    nfs.fh.fstype  file system type
        Unsigned 32-bit integer
        file system type
    nfs.fh.hash  hash
        Unsigned 32-bit integer
        file handle hash
    nfs.fh.hp.len  length
        Unsigned 32-bit integer
        hash path length
    nfs.fh.length  length
        Unsigned 32-bit integer
        file handle length
    nfs.fh.pinode  pseudo inode
        Unsigned 32-bit integer
        pseudo inode
    nfs.fh.version  version
        Unsigned 8-bit integer
        file handle layout version
    nfs.fh.xdev  exported device
        Unsigned 32-bit integer
        exported device
    nfs.fh.xfn  exported file number
        Unsigned 32-bit integer
        exported file number
    nfs.fh.xfn.generation  generation
        Unsigned 32-bit integer
        exported file number generation
    nfs.fh.xfn.inode  exported inode
        Unsigned 32-bit integer
        exported file number inode
    nfs.fh.xfn.len  length
        Unsigned 32-bit integer
        exported file number length
    nfs.fh.xfsid.major  exported major
        Unsigned 32-bit integer
        exported major file system ID
    nfs.fh.xfsid.minor  exported minor
        Unsigned 32-bit integer
        exported minor file system ID
    nfs.filesize  filesize
        Unsigned 64-bit integer
        nfs.filesize
    nfs.fsid4.major  fsid4.major
        Unsigned 64-bit integer
        nfs.nfstime4.fsid4.major
    nfs.fsid4.minor  fsid4.minor
        Unsigned 64-bit integer
        nfs.fsid4.minor
    nfs.fsinfo.dtpref  dtpref
        Unsigned 32-bit integer
        Preferred READDIR request
    nfs.fsinfo.maxfilesize  maxfilesize
        Unsigned 64-bit integer
        Maximum file size
    nfs.fsinfo.propeties  Properties
        Unsigned 32-bit integer
        File System Properties
    nfs.fsinfo.rtmax  rtmax
        Unsigned 32-bit integer
        maximum READ request
    nfs.fsinfo.rtmult  rtmult
        Unsigned 32-bit integer
        Suggested READ multiple
    nfs.fsinfo.rtpref  rtpref
        Unsigned 32-bit integer
        Preferred READ request size
    nfs.fsinfo.wtmax  wtmax
        Unsigned 32-bit integer
        Maximum WRITE request size
    nfs.fsinfo.wtmult  wtmult
        Unsigned 32-bit integer
        Suggested WRITE multiple
    nfs.fsinfo.wtpref  wtpref
        Unsigned 32-bit integer
        Preferred WRITE request size
    nfs.fsstat.invarsec  invarsec
        Unsigned 32-bit integer
        probable number of seconds of file system invariance
    nfs.fsstat3_resok.abytes  Available free bytes
        Unsigned 64-bit integer
        Available free bytes
    nfs.fsstat3_resok.afiles  Available free file slots
        Unsigned 64-bit integer
        Available free file slots
    nfs.fsstat3_resok.fbytes  Free bytes
        Unsigned 64-bit integer
        Free bytes
    nfs.fsstat3_resok.ffiles  Free file slots
        Unsigned 64-bit integer
        Free file slots
    nfs.fsstat3_resok.tbytes  Total bytes
        Unsigned 64-bit integer
        Total bytes
    nfs.fsstat3_resok.tfiles  Total file slots
        Unsigned 64-bit integer
        Total file slots
    nfs.full_name  Full Name
        String
        Full Name
    nfs.gid3  gid
        Unsigned 32-bit integer
        nfs.gid3
    nfs.length4  length
        Unsigned 64-bit integer
        nfs.length4
    nfs.lock.locker.new_lock_owner  new lock owner?
        Boolean
        nfs.lock.locker.new_lock_owner
    nfs.lock.reclaim  reclaim?
        Boolean
        nfs.lock.reclaim
    nfs.lock_owner4  owner
        Byte array
        owner
    nfs.lock_seqid  lock_seqid
        Unsigned 32-bit integer
        Lock Sequence ID
    nfs.locktype4  locktype
        Unsigned 32-bit integer
        nfs.locktype4
    nfs.maxcount  maxcount
        Unsigned 32-bit integer
        nfs.maxcount
    nfs.minorversion  minorversion
        Unsigned 32-bit integer
        nfs.minorversion
    nfs.mtime  mtime
        Date/Time stamp
        Modify Time
    nfs.mtime.nsec  nano seconds
        Unsigned 32-bit integer
        Modify Time, Nano-seconds
    nfs.mtime.sec  seconds
        Unsigned 32-bit integer
        Modify Seconds
    nfs.mtime.usec  micro seconds
        Unsigned 32-bit integer
        Modify Time, Micro-seconds
    nfs.name  Name
        String
        Name
    nfs.nfs_client_id4.id  id
        Byte array
        nfs.nfs_client_id4.id
    nfs.nfs_ftype4  nfs_ftype4
        Unsigned 32-bit integer
        nfs.nfs_ftype4
    nfs.nfstime4.nseconds  nseconds
        Unsigned 32-bit integer
        nfs.nfstime4.nseconds
    nfs.nfstime4.seconds  seconds
        Unsigned 64-bit integer
        nfs.nfstime4.seconds
    nfs.num_blocks  num_blocks
        Unsigned 32-bit integer
        nfs.num_blocks
    nfs.offset3  offset
        Unsigned 64-bit integer
        nfs.offset3
    nfs.offset4  offset
        Unsigned 64-bit integer
        nfs.offset4
    nfs.open.claim_type  Claim Type
        Unsigned 32-bit integer
        Claim Type
    nfs.open.delegation_type  Delegation Type
        Unsigned 32-bit integer
        Delegation Type
    nfs.open.limit_by  Space Limit
        Unsigned 32-bit integer
        Limit By
    nfs.open.opentype  Open Type
        Unsigned 32-bit integer
        Open Type
    nfs.open4.share_access  share_access
        Unsigned 32-bit integer
        Share Access
    nfs.open4.share_deny  share_deny
        Unsigned 32-bit integer
        Share Deny
    nfs.open_owner4  owner
        Byte array
        owner
    nfs.openattr4.createdir  attribute dir create
        Boolean
        nfs.openattr4.createdir
    nfs.pathconf.case_insensitive  case_insensitive
        Boolean
        file names are treated case insensitive
    nfs.pathconf.case_preserving  case_preserving
        Boolean
        file name cases are preserved
    nfs.pathconf.chown_restricted  chown_restricted
        Boolean
        chown is restricted to root
    nfs.pathconf.linkmax  linkmax
        Unsigned 32-bit integer
        Maximum number of hard links
    nfs.pathconf.name_max  name_max
        Unsigned 32-bit integer
        Maximum file name length
    nfs.pathconf.no_trunc  no_trunc
        Boolean
        No long file name truncation
    nfs.pathname.component  Filename
        String
        Pathname component
    nfs.r_addr  r_addr
        Byte array
        r_addr
    nfs.r_netid  r_netid
        Byte array
        r_netid
    nfs.read.count  Count
        Unsigned 32-bit integer
        Read Count
    nfs.read.eof  EOF
        Boolean
        EOF
    nfs.read.offset  Offset
        Unsigned 32-bit integer
        Read Offset
    nfs.read.totalcount  Total Count
        Unsigned 32-bit integer
        Total Count (obsolete)
    nfs.readdir.cookie  Cookie
        Unsigned 32-bit integer
        Directory Cookie
    nfs.readdir.count  Count
        Unsigned 32-bit integer
        Directory Count
    nfs.readdir.entry  Entry
        No value
        Directory Entry
    nfs.readdir.entry.cookie  Cookie
        Unsigned 32-bit integer
        Directory Cookie
    nfs.readdir.entry.fileid  File ID
        Unsigned 32-bit integer
        File ID
    nfs.readdir.entry.name  Name
        String
        Name
    nfs.readdir.entry3.cookie  Cookie
        Unsigned 64-bit integer
        Directory Cookie
    nfs.readdir.entry3.fileid  File ID
        Unsigned 64-bit integer
        File ID
    nfs.readdir.entry3.name  Name
        String
        Name
    nfs.readdir.eof  EOF
        Unsigned 32-bit integer
        EOF
    nfs.readdirplus.entry.cookie  Cookie
        Unsigned 64-bit integer
        Directory Cookie
    nfs.readdirplus.entry.fileid  File ID
        Unsigned 64-bit integer
        Name
    nfs.readdirplus.entry.name  Name
        String
        Name
    nfs.readlink.data  Data
        String
        Symbolic Link Data
    nfs.recall  EOF
        Boolean
        Recall
    nfs.recall4  recall
        Boolean
        nfs.recall4
    nfs.reclaim4  reclaim
        Boolean
        Reclaim
    nfs.reply.operation  Opcode
        Unsigned 32-bit integer
        Opcode
    nfs.secinfo.flavor  flavor
        Unsigned 32-bit integer
        nfs.secinfo.flavor
    nfs.secinfo.flavor_info.rpcsec_gss_info.oid  oid
        Byte array
        oid
    nfs.secinfo.flavor_info.rpcsec_gss_info.qop  qop
        Unsigned 32-bit integer
        qop
    nfs.secinfo.rpcsec_gss_info.service  service
        Unsigned 32-bit integer
        service
    nfs.seqid  seqid
        Unsigned 32-bit integer
        Sequence ID
    nfs.server  server
        String
        nfs.server
    nfs.set_it  set_it
        Unsigned 32-bit integer
        How To Set Time
    nfs.set_size3.size  size
        Unsigned 64-bit integer
        nfs.set_size3.size
    nfs.specdata1  specdata1
        Unsigned 32-bit integer
        nfs.specdata1
    nfs.specdata2  specdata2
        Unsigned 32-bit integer
        nfs.specdata2
    nfs.stable_how4  stable_how4
        Unsigned 32-bit integer
        nfs.stable_how4
    nfs.stateid4  stateid
        Unsigned 64-bit integer
        nfs.stateid4
    nfs.stateid4.other  Data
        Byte array
        Data
    nfs.statfs.bavail  Available Blocks
        Unsigned 32-bit integer
        Available Blocks
    nfs.statfs.bfree  Free Blocks
        Unsigned 32-bit integer
        Free Blocks
    nfs.statfs.blocks  Total Blocks
        Unsigned 32-bit integer
        Total Blocks
    nfs.statfs.bsize  Block Size
        Unsigned 32-bit integer
        Block Size
    nfs.statfs.tsize  Transfer Size
        Unsigned 32-bit integer
        Transfer Size
    nfs.status  Status
        Unsigned 32-bit integer
        Reply status
    nfs.status2  Status
        Unsigned 32-bit integer
        Reply status
    nfs.symlink.linktext  Name
        String
        Symbolic link contents
    nfs.symlink.to  To
        String
        Symbolic link destination name
    nfs.tag  Tag
        String
        Tag
    nfs.type  Type
        Unsigned 32-bit integer
        File Type
    nfs.uid3  uid
        Unsigned 32-bit integer
        nfs.uid3
    nfs.verifier4  verifier
        Unsigned 64-bit integer
        nfs.verifier4
    nfs.wcc_attr.size  size
        Unsigned 64-bit integer
        nfs.wcc_attr.size
    nfs.who  who
        String
        nfs.who
    nfs.write.beginoffset  Begin Offset
        Unsigned 32-bit integer
        Begin offset (obsolete)
    nfs.write.committed  Committed
        Unsigned 32-bit integer
        Committed
    nfs.write.offset  Offset
        Unsigned 32-bit integer
        Offset
    nfs.write.stable  Stable
        Unsigned 32-bit integer
        Stable
    nfs.write.totalcount  Total Count
        Unsigned 32-bit integer
        Total Count (obsolete)

Network Lock Manager Protocol (nlm)

    nlm.block  block
        Boolean
        block
    nlm.cookie  cookie
        Byte array
        cookie
    nlm.exclusive  exclusive
        Boolean
        exclusive
    nlm.holder  holder
        No value
        holder
    nlm.lock  lock
        No value
        lock
    nlm.lock.caller_name  caller_name
        String
        caller_name
    nlm.lock.l_len  l_len
        Unsigned 64-bit integer
        l_len
    nlm.lock.l_offset  l_offset
        Unsigned 64-bit integer
        l_offset
    nlm.lock.owner  owner
        Byte array
        owner
    nlm.lock.svid  svid
        Unsigned 32-bit integer
        svid
    nlm.msg_in  Request MSG in
        Unsigned 32-bit integer
        The RES packet is a response to the MSG in this packet
    nlm.reclaim  reclaim
        Boolean
        reclaim
    nlm.res_in  Reply RES in
        Unsigned 32-bit integer
        The response to this MSG packet is in this packet
    nlm.sequence  sequence
        Signed 32-bit integer
        sequence
    nlm.share  share
        No value
        share
    nlm.share.access  access
        Unsigned 32-bit integer
        access
    nlm.share.mode  mode
        Unsigned 32-bit integer
        mode
    nlm.share.name  name
        String
        name
    nlm.stat  stat
        Unsigned 32-bit integer
        stat
    nlm.state  state
        Unsigned 32-bit integer
        STATD state
    nlm.test_stat  test_stat
        No value
        test_stat
    nlm.test_stat.stat  stat
        Unsigned 32-bit integer
        stat
    nlm.time  Time from request
        Time duration
        Time between Request and Reply for async NLM calls

Network News Transfer Protocol (nntp)

    nntp.request  Request
        Boolean
        TRUE if NNTP request
    nntp.response  Response
        Boolean
        TRUE if NNTP response

Network Status Monitor CallBack Protocol (statnotify)

    statnotify.name  Name
        String
        Name of client that changed
    statnotify.priv  Priv
        Byte array
        Client supplied opaque data
    statnotify.state  State
        Unsigned 32-bit integer
        New state of client that changed

Network Status Monitor Protocol (stat)

    stat.mon  Monitor
        No value
        Monitor Host
    stat.mon_id.name  Monitor ID Name
        String
        Monitor ID Name
    stat.my_id  My ID
        No value
        My_ID structure
    stat.my_id.hostname  Hostname
        String
        My_ID Host to callback
    stat.my_id.proc  Procedure
        Unsigned 32-bit integer
        My_ID Procedure to callback
    stat.my_id.prog  Program
        Unsigned 32-bit integer
        My_ID Program to callback
    stat.my_id.vers  Version
        Unsigned 32-bit integer
        My_ID Version of callback
    stat.name  Name
        String
        Name
    stat.priv  Priv
        Byte array
        Private client supplied opaque data
    stat.stat_chge  Status Change
        No value
        Status Change structure
    stat.stat_res  Status Result
        No value
        Status Result
    stat.stat_res.res  Result
        Unsigned 32-bit integer
        Result
    stat.stat_res.state  State
        Unsigned 32-bit integer
        State
    stat.state  State
        Unsigned 32-bit integer
        State of local NSM

Network Time Protocol (ntp)

    ntp.flags  Flags
        Unsigned 8-bit integer
        Flags (Leap/Version/Mode)
    ntp.flags.li  Leap Indicator
        Unsigned 8-bit integer
        Leap Indicator
    ntp.flags.mode  Mode
        Unsigned 8-bit integer
        Mode
    ntp.flags.vn  Version number
        Unsigned 8-bit integer
        Version number
    ntp.keyid  Key ID
        Byte array
        Key ID
    ntp.mac  Message Authentication Code
        Byte array
        Message Authentication Code
    ntp.org  Originate Time Stamp
        Byte array
        Originate Time Stamp
    ntp.ppoll  Peer Polling Interval
        Unsigned 8-bit integer
        Peer Polling Interval
    ntp.precision  Peer Clock Precision
        Unsigned 8-bit integer
        Peer Clock Precision
    ntp.rec  Receive Time Stamp
        Byte array
        Receive Time Stamp
    ntp.refid  Reference Clock ID
        Byte array
        Reference Clock ID
    ntp.reftime  Reference Clock Update Time
        Byte array
        Reference Clock Update Time
    ntp.rootdelay  Root Delay
        Double-precision floating point
        Root Delay
    ntp.rootdispersion  Clock Dispersion
        Double-precision floating point
        Clock Dispersion
    ntp.stratum  Peer Clock Stratum
        Unsigned 8-bit integer
        Peer Clock Stratum
    ntp.xmt  Transmit Time Stamp
        Byte array
        Transmit Time Stamp

Null/Loopback (null)

    null.family  Family
        Unsigned 32-bit integer
    null.type  Type
        Unsigned 16-bit integer

Open Shortest Path First (ospf)

    ospf.advrouter  Advertising Router
        IPv4 address
    ospf.lsa  Link-State Advertisement Type
        Unsigned 8-bit integer
    ospf.lsa.asbr  Summary LSA (ASBR)
        Boolean
    ospf.lsa.asext  AS-External LSA (ASBR)
        Boolean
    ospf.lsa.attr  External Attributes LSA
        Boolean
    ospf.lsa.member  Group Membership LSA
        Boolean
    ospf.lsa.mpls  MPLS Traffic Engineering LSA
        Boolean
    ospf.lsa.network  Network LSA
        Boolean
    ospf.lsa.nssa  NSSA AS-External LSA
        Boolean
    ospf.lsa.opaque  Opaque LSA
        Boolean
    ospf.lsa.router  Router LSA
        Boolean
    ospf.lsa.summary  Summary LSA (IP Network)
        Boolean
    ospf.lsid_opaque_type  Link State ID Opaque Type
        Unsigned 8-bit integer
    ospf.lsid_te_lsa.instance  Link State ID TE-LSA Instance
        Unsigned 16-bit integer
    ospf.mpls.linkid  MPLS/TE Link ID
        IPv4 address
    ospf.mpls.local_addr  MPLS/TE Local Interface Address
        IPv4 address
    ospf.mpls.local_id  MPLS/TE Local Interface Index
        Unsigned 32-bit integer
    ospf.mpls.remote_addr  MPLS/TE Remote Interface Address
        IPv4 address
    ospf.mpls.remote_id  MPLS/TE Remote Interface Index
        Unsigned 32-bit integer
    ospf.mpls.routerid  MPLS/TE Router ID
        IPv4 address
    ospf.msg  Message Type
        Unsigned 8-bit integer
    ospf.msg.dbdesc  Database Description
        Boolean
    ospf.msg.hello  Hello
        Boolean
    ospf.msg.lsack  Link State Adv Acknowledgement
        Boolean
    ospf.msg.lsreq  Link State Adv Request
        Boolean
    ospf.msg.lsupdate  Link State Adv Update
        Boolean
    ospf.srcrouter  Source OSPF Router
        IPv4 address

OpenBSD Packet Filter log file (pflog)

    pflog.action  Action
        Unsigned 16-bit integer
        Action taken by PF on the packet
    pflog.af  Address Family
        Unsigned 32-bit integer
        Protocol (IPv4 vs IPv6)
    pflog.dir  Direction
        Unsigned 16-bit integer
        Direction of packet in stack (inbound versus outbound)
    pflog.ifname  Interface
        String
        Interface
    pflog.reason  Reason
        Unsigned 16-bit integer
        Reason for logging the packet
    pflog.rnr  Rule Number
        Signed 16-bit integer
        Last matched firewall rule number

PC NFS (pcnfsd)

    pcnfsd.auth.client  Authentication Client
        String
        Authentication Client
    pcnfsd.auth.ident.clear  Clear Ident
        String
        Authentication Clear Ident
    pcnfsd.auth.ident.obscure  Obscure Ident
        String
        Athentication Obscure Ident
    pcnfsd.auth.password.clear  Clear Password
        String
        Authentication Clear Password
    pcnfsd.auth.password.obscure  Obscure Password
        String
        Athentication Obscure Password
    pcnfsd.comment  Comment
        String
        Comment
    pcnfsd.def_umask  def_umask
        Signed 32-bit integer
        def_umask
    pcnfsd.gid  Group ID
        Unsigned 32-bit integer
        Group ID
    pcnfsd.gids.count  Group ID Count
        Unsigned 32-bit integer
        Group ID Count
    pcnfsd.homedir  Home Directory
        String
        Home Directory
    pcnfsd.status  Reply Status
        Unsigned 32-bit integer
        Status
    pcnfsd.uid  User ID
        Unsigned 32-bit integer
        User ID
    pcnfsd.username  User name
        String
        pcnfsd.username

PPP Bandwidth Allocation Control Protocol (bacp)

PPP Bandwidth Allocation Protocol (bap)

PPP CDP Control Protocol (cdpcp)

PPP Callback Control Protocol (cbcp)

PPP Challenge Handshake Authentication Protocol (chap)

PPP Compressed Datagram (comp_data)

PPP Compression Control Protocol (ccp)

PPP IP Control Protocol (ipcp)

PPP Link Control Protocol (lcp)

PPP MPLS Control Protocol (mplscp)

PPP Multilink Protocol (mp)

    mp.first  First fragment
        Boolean
    mp.last  Last fragment
        Boolean
    mp.seq  Sequence number
        Unsigned 24-bit integer

PPP Multiplexing (pppmux)

PPP Password Authentication Protocol (pap)

PPP VJ Compression (vj)

    vj.ack_delta  Ack delta
        Unsigned 16-bit integer
        Delta for acknowledgment sequence number
    vj.change_mask  Change mask
        Unsigned 8-bit integer
    vj.change_mask_a  Ack number changed
        Boolean
        Acknowledgement sequence number changed
    vj.change_mask_c  Connection changed
        Boolean
        Connection number changed
    vj.change_mask_i  IP ID change != 1
        Boolean
        IP ID changed by a value other than 1
    vj.change_mask_p  Push bit set
        Boolean
        TCP PSH flag set
    vj.change_mask_s  Sequence number changed
        Boolean
        Sequence number changed
    vj.change_mask_u  Urgent pointer set
        Boolean
        Urgent pointer set
    vj.change_mask_w  Window changed
        Boolean
        TCP window changed
    vj.connection_number  Connection number
        Unsigned 8-bit integer
        Connection number
    vj.ip_id_delta  IP ID delta
        Unsigned 16-bit integer
        Delta for IP ID
    vj.seq_delta  Sequence delta
        Unsigned 16-bit integer
        Delta for sequence number
    vj.tcp_cksum  TCP checksum
        Unsigned 16-bit integer
        TCP checksum
    vj.urp  Urgent pointer
        Unsigned 16-bit integer
        Urgent pointer
    vj.win_delta  Window delta
        Signed 16-bit integer
        Delta for window

PPP-over-Ethernet Discovery (pppoed)

PPP-over-Ethernet Session (pppoes)

PPPMux Control Protocol (pppmuxcp)

Point-to-Point Protocol (ppp)

    ppp.address  Address
        Unsigned 8-bit integer
    ppp.control  Control
        Unsigned 8-bit integer
    ppp.protocol  Protocol
        Unsigned 16-bit integer

Point-to-Point Tunnelling Protocol (pptp)

    pptp.type  Message type
        Unsigned 16-bit integer
        PPTP message type

Portmap (portmap)

    portmap.answer  Answer
        Boolean
        Answer
    portmap.args  Arguments
        Byte array
        Arguments
    portmap.port  Port
        Unsigned 32-bit integer
        Port
    portmap.proc  Procedure
        Unsigned 32-bit integer
        Procedure
    portmap.prog  Program
        Unsigned 32-bit integer
        Program
    portmap.proto  Protocol
        Unsigned 32-bit integer
        Protocol
    portmap.result  Result
        Byte array
        Result
    portmap.rpcb  RPCB
        No value
        RPCB
    portmap.rpcb.addr  Universal Address
        String
        Universal Address
    portmap.rpcb.netid  Network Id
        String
        Network Id
    portmap.rpcb.owner  Owner of this Service
        String
        Owner of this Service
    portmap.rpcb.prog  Program
        Unsigned 32-bit integer
        Program
    portmap.rpcb.version  Version
        Unsigned 32-bit integer
        Version
    portmap.uaddr  Universal Address
        String
        Universal Address
    portmap.version  Version
        Unsigned 32-bit integer
        Version

Post Office Protocol (pop)

    pop.request  Request
        Boolean
        TRUE if POP request
    pop.response  Response
        Boolean
        TRUE if POP response

Pragmatic General Multicast (pgm)

    pgm.ack.bitmap  Packet Bitmap
        Unsigned 32-bit integer
    pgm.ack.maxsqn  Maximum Received Sequence Number
        Unsigned 32-bit integer
    pgm.data.sqn  Data Packet Sequence Number
        Unsigned 32-bit integer
    pgm.data.trail  Trailing Edge Sequence Number
        Unsigned 32-bit integer
    pgm.genopts.len  Length
        Unsigned 8-bit integer
    pgm.genopts.opx  Option Extensibility Bits
        Unsigned 8-bit integer
    pgm.genopts.type  Type
        Unsigned 8-bit integer
    pgm.hdr.cksum  Checksum
        Unsigned 16-bit integer
    pgm.hdr.dport  Destination Port
        Unsigned 16-bit integer
    pgm.hdr.gsi  Global Source Identifier
        Byte array
    pgm.hdr.opts  Options
        Unsigned 8-bit integer
    pgm.hdr.opts.netsig  Network Significant Options
        Boolean
    pgm.hdr.opts.opt  Options
        Boolean
    pgm.hdr.opts.parity  Parity
        Boolean
    pgm.hdr.opts.varlen  Variable length Parity Packet Option
        Boolean
    pgm.hdr.sport  Source Port
        Unsigned 16-bit integer
    pgm.hdr.tsdulen  Transport Service Data Unit Length
        Unsigned 16-bit integer
    pgm.hdr.type  Type
        Unsigned 8-bit integer
    pgm.nak.grp  Multicast Group NLA
        IPv4 address
    pgm.nak.grpafi  Multicast Group AFI
        Unsigned 16-bit integer
    pgm.nak.grpres  Reserved
        Unsigned 16-bit integer
    pgm.nak.sqn  Requested Sequence Number
        Unsigned 32-bit integer
    pgm.nak.src  Source NLA
        IPv4 address
    pgm.nak.srcafi  Source NLA AFI
        Unsigned 16-bit integer
    pgm.nak.srcres  Reserved
        Unsigned 16-bit integer
    pgm.opts.ccdata.acker  Acker
        IPv4 address
    pgm.opts.ccdata.afi  Acker AFI
        Unsigned 16-bit integer
    pgm.opts.ccdata.lossrate  Loss Rate
        Unsigned 16-bit integer
    pgm.opts.ccdata.res  Reserved
        Unsigned 8-bit integer
    pgm.opts.ccdata.res2  Reserved
        Unsigned 16-bit integer
    pgm.opts.ccdata.tstamp  Time Stamp
        Unsigned 16-bit integer
    pgm.opts.join.min_join  Minimum Sequence Number
        Unsigned 32-bit integer
    pgm.opts.join.res  Reserved
        Unsigned 8-bit integer
    pgm.opts.len  Length
        Unsigned 8-bit integer
    pgm.opts.nak.list  List
        Byte array
    pgm.opts.nak.op  Reserved
        Unsigned 8-bit integer
    pgm.opts.parity_prm.op  Parity Parameters
        Unsigned 8-bit integer
    pgm.opts.parity_prm.prm_grp  Transmission Group Size
        Unsigned 32-bit integer
    pgm.opts.tlen  Total Length
        Unsigned 16-bit integer
    pgm.opts.type  Type
        Unsigned 8-bit integer
    pgm.spm.lead  Leading Edge Sequence Number
        Unsigned 32-bit integer
    pgm.spm.path  Path NLA
        IPv4 address
    pgm.spm.pathafi  Path NLA AFI
        Unsigned 16-bit integer
    pgm.spm.res  Reserved
        Unsigned 16-bit integer
    pgm.spm.sqn  Sequence number
        Unsigned 32-bit integer
    pgm.spm.trail  Trailing Edge Sequence Number
        Unsigned 32-bit integer

Prism (prism)

    prism.channel.data  Channel Time Field
        Unsigned 32-bit integer
    prism.frmlen.data  Frame Length Field
        Unsigned 32-bit integer
    prism.hosttime.data  Host Time Field
        Unsigned 32-bit integer
    prism.istx.data  IsTX Field
        Unsigned 32-bit integer
    prism.mactime.data  MAC Time Field
        Unsigned 32-bit integer
    prism.msgcode  Message Code
        Unsigned 32-bit integer
    prism.msglen  Message Length
        Unsigned 32-bit integer
    prism.noise.data  Noise Field
        Unsigned 32-bit integer
    prism.rate.data  Rate Field
        Unsigned 32-bit integer
    prism.rssi.data  RSSI Field
        Unsigned 32-bit integer
    prism.signal.data  Signal Field
        Unsigned 32-bit integer
    prism.sq.data  SQ Field
        Unsigned 32-bit integer

Protocol Independent Multicast (pim)

    pim.cksum  Checksum
        Unsigned 16-bit integer
    pim.code  Code
        Unsigned 8-bit integer
    pim.type  Type
        Unsigned 8-bit integer
    pim.version  Version
        Unsigned 8-bit integer

Q.2931 (q2931)

    q2931.call_ref  Call reference value
        Byte array
    q2931.call_ref_len  Call reference value length
        Unsigned 8-bit integer
    q2931.disc  Protocol discriminator
        Unsigned 8-bit integer
    q2931.message_action_indicator  Action indicator
        Unsigned 8-bit integer
    q2931.message_flag  Flag
        Boolean
    q2931.message_len  Message length
        Unsigned 16-bit integer
    q2931.message_type  Message type
        Unsigned 8-bit integer
    q2931.message_type_ext  Message type extension
        Unsigned 8-bit integer

Q.931 (q931)

    q931.call_ref  Call reference value
        Byte array
    q931.call_ref_len  Call reference value length
        Unsigned 8-bit integer
    q931.disc  Protocol discriminator
        Unsigned 8-bit integer
    q931.message_type  Message type
        Unsigned 8-bit integer

Quake II Network Protocol (quake2)

    quake2.c2s  Client to Server
        Unsigned 32-bit integer
        Client to Server
    quake2.connectionless  Connectionless
        Unsigned 32-bit integer
        Connectionless
    quake2.connectionless.marker  Marker
        Unsigned 32-bit integer
        Marker
    quake2.connectionless.text  Text
        String
        Text
    quake2.game  Game
        Unsigned 32-bit integer
        Game
    quake2.game.client.command  Client Command Type
        Unsigned 8-bit integer
        Quake II Client Command
    quake2.game.client.command.move  Bitfield
        Unsigned 8-bit integer
        Quake II Client Command Move
    quake2.game.client.command.move.angles  Angles (pitch)
        Unsigned 8-bit integer
    quake2.game.client.command.move.buttons  Buttons
        Unsigned 8-bit integer
    quake2.game.client.command.move.chksum  Checksum
        Unsigned 8-bit integer
        Quake II Client Command Move
    quake2.game.client.command.move.impulse  Impulse
        Unsigned 8-bit integer
    quake2.game.client.command.move.lframe  Last Frame
        Unsigned 32-bit integer
        Quake II Client Command Move
    quake2.game.client.command.move.lightlevel  Lightlevel
        Unsigned 8-bit integer
        Quake II Client Command Move
    quake2.game.client.command.move.movement  Movement (fwd)
        Unsigned 8-bit integer
    quake2.game.client.command.move.msec  Msec
        Unsigned 8-bit integer
        Quake II Client Command Move
    quake2.game.qport  QPort
        Unsigned 32-bit integer
        Quake II Client Port
    quake2.game.rel1  Reliable
        Boolean
        Packet is reliable and may be retransmitted
    quake2.game.rel2  Reliable
        Boolean
        Packet was reliable and may be retransmitted
    quake2.game.seq1  Sequence Number
        Unsigned 32-bit integer
        Sequence number of the current packet
    quake2.game.seq2  Sequence Number
        Unsigned 32-bit integer
        Sequence number of the last received packet
    quake2.game.server.command  Server Command
        Unsigned 8-bit integer
        Quake II Server Command
    quake2.s2c  Server to Client
        Unsigned 32-bit integer
        Server to Client

Quake III Arena Network Protocol (quake3)

    quake3.connectionless  Connectionless
        Unsigned 32-bit integer
        Connectionless
    quake3.connectionless.command  Command
        String
        Command
    quake3.connectionless.marker  Marker
        Unsigned 32-bit integer
        Marker
    quake3.connectionless.text  Text
        String
        Text
    quake3.direction  Direction
        No value
        Packet Direction
    quake3.game  Game
        Unsigned 32-bit integer
        Game
    quake3.game.qport  QPort
        Unsigned 32-bit integer
        Quake III Arena Client Port
    quake3.game.rel1  Reliable
        Boolean
        Packet is reliable and may be retransmitted
    quake3.game.rel2  Reliable
        Boolean
        Packet was reliable and may be retransmitted
    quake3.game.seq1  Sequence Number
        Unsigned 32-bit integer
        Sequence number of the current packet
    quake3.game.seq2  Sequence Number
        Unsigned 32-bit integer
        Sequence number of the last received packet
    quake3.server.addr  Server Address
        IPv4 address
        Server IP Address
    quake3.server.port  Server Port
        Unsigned 16-bit integer
        Server UDP Port

Quake Network Protocol (quake)

    quake.control.accept.port  Port
        Unsigned 32-bit integer
        Game Data Port
    quake.control.command  Command
        Unsigned 8-bit integer
        Control Command
    quake.control.connect.game  Game
        String
        Game Name
    quake.control.connect.version  Version
        Unsigned 8-bit integer
        Game Protocol Version Number
    quake.control.player_info.address  Address
        String
        Player Address
    quake.control.player_info.colors  Colors
        Unsigned 32-bit integer
        Player Colors
    quake.control.player_info.colors.pants  Pants
        Unsigned 8-bit integer
        Pants Color
    quake.control.player_info.colors.shirt  Shirt
        Unsigned 8-bit integer
        Shirt Color
    quake.control.player_info.connect_time  Connect Time
        Unsigned 32-bit integer
        Player Connect Time
    quake.control.player_info.frags  Frags
        Unsigned 32-bit integer
        Player Frags
    quake.control.player_info.name  Name
        String
        Player Name
    quake.control.player_info.player  Player
        Unsigned 8-bit integer
        Player
    quake.control.reject.reason  Reason
        String
        Reject Reason
    quake.control.rule_info.lastrule  Last Rule
        String
        Last Rule Name
    quake.control.rule_info.rule  Rule
        String
        Rule Name
    quake.control.rule_info.value  Value
        String
        Rule Value
    quake.control.server_info.address  Address
        String
        Server Address
    quake.control.server_info.game  Game
        String
        Game Name
    quake.control.server_info.map  Map
        String
        Map Name
    quake.control.server_info.max_player  Maximal Number of Players
        Unsigned 8-bit integer
        Maximal Number of Players
    quake.control.server_info.num_player  Number of Players
        Unsigned 8-bit integer
        Current Number of Players
    quake.control.server_info.server  Server
        String
        Server Name
    quake.control.server_info.version  Version
        Unsigned 8-bit integer
        Game Protocol Version Number
    quake.header.flags  Flags
        Unsigned 16-bit integer
        Flags
    quake.header.length  Length
        Unsigned 16-bit integer
        full data length
    quake.header.sequence  Sequence
        Unsigned 32-bit integer
        Sequence Number

QuakeWorld Network Protocol (quakeworld)

    quakeworld.c2s  Client to Server
        Unsigned 32-bit integer
        Client to Server
    quakeworld.connectionless  Connectionless
        Unsigned 32-bit integer
        Connectionless
    quakeworld.connectionless.arguments  Arguments
        String
        Arguments
    quakeworld.connectionless.command  Command
        String
        Command
    quakeworld.connectionless.connect.challenge  Challenge
        Signed 32-bit integer
        Challenge from the server
    quakeworld.connectionless.connect.infostring  Infostring
        String
        Infostring with additional variables
    quakeworld.connectionless.connect.infostring.key  Key
        String
        Infostring Key
    quakeworld.connectionless.connect.infostring.key_value  Key/Value
        String
        Key and Value
    quakeworld.connectionless.connect.infostring.value  Value
        String
        Infostring Value
    quakeworld.connectionless.connect.qport  QPort
        Unsigned 32-bit integer
        QPort of the client
    quakeworld.connectionless.connect.version  Version
        Unsigned 32-bit integer
        Protocol Version
    quakeworld.connectionless.marker  Marker
        Unsigned 32-bit integer
        Marker
    quakeworld.connectionless.rcon.command  Command
        String
        Command
    quakeworld.connectionless.rcon.password  Password
        String
        Rcon Password
    quakeworld.connectionless.text  Text
        String
        Text
    quakeworld.game  Game
        Unsigned 32-bit integer
        Game
    quakeworld.game.qport  QPort
        Unsigned 32-bit integer
        QuakeWorld Client Port
    quakeworld.game.rel1  Reliable
        Boolean
        Packet is reliable and may be retransmitted
    quakeworld.game.rel2  Reliable
        Boolean
        Packet was reliable and may be retransmitted
    quakeworld.game.seq1  Sequence Number
        Unsigned 32-bit integer
        Sequence number of the current packet
    quakeworld.game.seq2  Sequence Number
        Unsigned 32-bit integer
        Sequence number of the last received packet
    quakeworld.s2c  Server to Client
        Unsigned 32-bit integer
        Server to Client

Qualified Logical Link Control (qllc)

    qllc.address  Address Field
        Unsigned 8-bit integer
    qllc.control  Control Field
        Unsigned 8-bit integer

RFC 2250 MPEG1 (mpeg1)

    mpeg1.stream  MPEG-1 stream
        Byte array
    rtp.payload_mpeg_T  T
        Unsigned 16-bit integer
    rtp.payload_mpeg_an  AN
        Unsigned 16-bit integer
    rtp.payload_mpeg_b  Beginning-of-slice
        Boolean
    rtp.payload_mpeg_bfc  BFC
        Unsigned 16-bit integer
    rtp.payload_mpeg_fbv  FBV
        Unsigned 16-bit integer
    rtp.payload_mpeg_ffc  FFC
        Unsigned 16-bit integer
    rtp.payload_mpeg_ffv  FFV
        Unsigned 16-bit integer
    rtp.payload_mpeg_mbz  MBZ
        Unsigned 16-bit integer
    rtp.payload_mpeg_n  New Picture Header
        Unsigned 16-bit integer
    rtp.payload_mpeg_p  Picture type
        Unsigned 16-bit integer
    rtp.payload_mpeg_s  Sequence Header
        Boolean
    rtp.payload_mpeg_tr  Temporal Reference
        Unsigned 16-bit integer

RIPng (ripng)

    ripng.cmd  Command
        Unsigned 8-bit integer
    ripng.version  Version
        Unsigned 8-bit integer

RPC Browser (rpc_browser)

    rpc_browser.rc  Return code
        Unsigned 32-bit integer
        Browser return code
    rpc_browser.unknown.bytes  Unknown bytes
        Byte array
        Unknown bytes. If you know what this is, contact ethereal developers.
    rpc_browser.unknown.hyper  Unknown hyper
        Unsigned 64-bit integer
        Unknown hyper. If you know what this is, contact ethereal developers.
    rpc_browser.unknown.long  Unknown long
        Unsigned 32-bit integer
        Unknown long. If you know what this is, contact ethereal developers.
    rpc_browser.unknown.string  Unknown string
        String
        Unknown string. If you know what this is, contact ethereal developers.

RSTAT (rstat)

RX Protocol (rx)

    rx.abort  ABORT Packet
        No value
        ABORT Packet
    rx.abort_code  Abort Code
        Unsigned 32-bit integer
        Abort Code
    rx.ack  ACK Packet
        No value
        ACK Packet
    rx.ack_type  ACK Type
        Unsigned 8-bit integer
        Type Of ACKs
    rx.bufferspace  Bufferspace
        Unsigned 16-bit integer
        Number Of Packets Available
    rx.callnumber  Call Number
        Unsigned 32-bit integer
        Call Number
    rx.challenge  CHALLENGE Packet
        No value
        CHALLENGE Packet
    rx.cid  CID
        Unsigned 32-bit integer
        CID
    rx.encrypted  Encrypted
        No value
        Encrypted part of response packet
    rx.epoch  Epoch
        Date/Time stamp
        Epoch
    rx.first  First Packet
        Unsigned 32-bit integer
        First Packet
    rx.flags  Flags
        Unsigned 8-bit integer
        Flags
    rx.flags.client_init  Client Initiated
        Unsigned 8-bit integer
        Client Initiated
    rx.flags.free_packet  Free Packet
        Unsigned 8-bit integer
        Free Packet
    rx.flags.last_packet  Last Packet
        Unsigned 8-bit integer
        Last Packet
    rx.flags.more_packets  More Packets
        Unsigned 8-bit integer
        More Packets
    rx.flags.request_ack  Request Ack
        Unsigned 8-bit integer
        Request Ack
    rx.if_mtu  Interface MTU
        Unsigned 32-bit integer
        Interface MTU
    rx.inc_nonce  Inc Nonce
        Unsigned 32-bit integer
        Incremented Nonce
    rx.kvno  kvno
        Unsigned 32-bit integer
        kvno
    rx.level  Level
        Unsigned 32-bit integer
        Level
    rx.max_mtu  Max MTU
        Unsigned 32-bit integer
        Max MTU
    rx.max_packets  Max Packets
        Unsigned 32-bit integer
        Max Packets
    rx.maxskew  Max Skew
        Unsigned 16-bit integer
        Max Skew
    rx.min_level  Min Level
        Unsigned 32-bit integer
        Min Level
    rx.nonce  Nonce
        Unsigned 32-bit integer
        Nonce
    rx.num_acks  Num ACKs
        Unsigned 8-bit integer
        Number Of ACKs
    rx.prev  Prev Packet
        Unsigned 32-bit integer
        Previous Packet
    rx.reason  Reason
        Unsigned 8-bit integer
        Reason For This ACK
    rx.response  RESPONSE Packet
        No value
        RESPONSE Packet
    rx.rwind  rwind
        Unsigned 32-bit integer
        rwind
    rx.securityindex  Security Index
        Unsigned 32-bit integer
        Security Index
    rx.seq  Sequence Number
        Unsigned 32-bit integer
        Sequence Number
    rx.serial  Serial
        Unsigned 32-bit integer
        Serial
    rx.serviceid  Service ID
        Unsigned 16-bit integer
        Service ID
    rx.spare  Spare/Checksum
        Unsigned 16-bit integer
        Spare/Checksum
    rx.ticket  ticket
        Byte array
        Ticket
    rx.ticket_len  Ticket len
        Unsigned 32-bit integer
        Ticket Length
    rx.type  Type
        Unsigned 8-bit integer
        Type
    rx.userstatus  User Status
        Unsigned 32-bit integer
        User Status
    rx.version  Version
        Unsigned 32-bit integer
        Version Of Challenge/Response

Radio Access Network Application Part (ranap)

    ranap.CN_DomainIndicator  CN-DomainIndicator
        Unsigned 8-bit integer
    ranap.Extension_Field_Value  Extension Field Value
        Byte array
    ranap.IuSigConId  IuSigConId
        Byte array
    ranap.NAS_PDU  NAS-PDU
        Byte array
    ranap.PLMN_ID  PLMN-ID
        Byte array
    ranap.ProtocolExtensionContainer_present  ProtocolExtensionContainer
        Unsigned 8-bit integer
    ranap.ProtocolExtensionFields.octets  Number of octets
        Unsigned 16-bit integer
    ranap.RAB_ID  RAB-ID
        Unsigned 8-bit integer
    ranap.RAB_SetupOrModifyItemSecond.PDP_Type  PDP-Type
        Unsigned 8-bit integer
    ranap.RAB_SetupOrModifyItemSecond.dataVolumeReportingIndication  dataVolumeReportingIndication
        Unsigned 8-bit integer
    ranap.RAB_SetupOrModifyItemSecond.dl_GTP_PDU_SequenceNumber  dl_GTP_PDU_SequenceNumber
        Unsigned 16-bit integer
    ranap.RAB_SetupOrModifyItemSecond.ul_GTP_PDU_SequenceNumber  ul_GTP_PDU_SequenceNumber
        Unsigned 16-bit integer
    ranap.RAC  RAC
        Byte array
    ranap.SAC  SAC
        Byte array
    ranap.allocationOrRetentionPriority_present  allocationOrRetentionPriority
        Unsigned 8-bit integer
    ranap.bindingID  bindingID
        Byte array
    ranap.cause_choice  cause choice
        Unsigned 8-bit integer
    ranap.cause_value  cause value
        Unsigned 8-bit integer
    ranap.dataVolumeReference  dataVolumeReference
        Unsigned 8-bit integer
    ranap.dataVolumeReference_present  dataVolumeReference
        Unsigned 8-bit integer
    ranap.dataVolumeReportingIndication_present  dataVolumeReportingIndication
        Unsigned 8-bit integer
    ranap.dl-UnsuccessfullyTransmittedDataVolume  dl-UnsuccessfullyTransmittedDataVolume
        Unsigned 32-bit integer
    ranap.dl_GTP_PDU_SequenceNumber_present  dl_GTP_PDU_SequenceNumber
        Unsigned 8-bit integer
    ranap.dl_N_PDU_SequenceNumber_present  dl_N_PDU_SequenceNumber
        Unsigned 8-bit integer
    ranap.dl_UnsuccessfullyTransmittedDataVolume_present  dl-UnsuccessfullyTransmittedDataVolume
        Unsigned 8-bit integer
    ranap.dl_dataVolumes_present  dl_dataVolumes
        Unsigned 8-bit integer
    ranap.gTP_TEI  gTP_TEI
        Byte array
    ranap.guaranteedBitRate_present  guaranteedBitRate
        Unsigned 8-bit integer
    ranap.iECriticality  iECriticality
        Unsigned 8-bit integer
    ranap.iEsCriticalityDiagnostics_present  iEsCriticalityDiagnostics
        Unsigned 8-bit integer
    ranap.ie.ProtocolExtensionFields.Id  ProtocolExtensionField ID
        Unsigned 16-bit integer
    ranap.ie.ProtocolExtensionFields.criticality  Criticality of ProtocolExtensionField
        Unsigned 8-bit integer
    ranap.ie.criticality  Criticality of IE
        Unsigned 8-bit integer
    ranap.ie.iE-Extensions_present  iE-Extensions
        Unsigned 8-bit integer
    ranap.ie.ie_id  IE-ID
        Unsigned 16-bit integer
    ranap.ie.number_of_ProtocolExtensionFields  Number of Protocol Extension Fields
        Unsigned 16-bit integer
    ranap.ie.number_of_octets  Number of Octets in IE
        Unsigned 16-bit integer
    ranap.ie.protocol_extension_present  Protocol Extension
        Unsigned 8-bit integer
    ranap.ie_pair.first_criticality  First Criticality
        Unsigned 8-bit integer
    ranap.ie_pair.first_value.number_of_octets  Number of Octets in first value
        Unsigned 16-bit integer
    ranap.ie_pair.second_criticality  Second Criticality
        Unsigned 8-bit integer
    ranap.ie_pair.second_value.number_of_octets  Number of Octets in second value
        Unsigned 16-bit integer
    ranap.iuTransportAssociation_present  iuTransportAssociation
        Unsigned 8-bit integer
    ranap.msg_extension_present  Message Extension
        Unsigned 8-bit integer
    ranap.nAS-SynchronisationIndicator  nAS-SynchronisationIndicator
        Unsigned 8-bit integer
    ranap.nAS-SynchronisationIndicator_present  nAS-SynchronisationIndicator
        Unsigned 8-bit integer
    ranap.nas_pdu_length  length of NAS-PDU
        Unsigned 16-bit integer
    ranap.num_of_CriticalityDiagnostics_IEs  Number of CriticalityDiagnostics-IEs
        Unsigned 16-bit integer
    ranap.number_of_ProtocolExtensionFields  Number of ProtocolExtensionFields
        Unsigned 16-bit integer
    ranap.number_of_RABs  Number of RABs
        Unsigned 8-bit integer
    ranap.number_of_ies  Number of IEs in list
        Unsigned 16-bit integer
    ranap.pDP_TypeInformation_present  pDP_TypeInformation
        Unsigned 8-bit integer
    ranap.pdu.criticality  Criticality of PDU
        Unsigned 8-bit integer
    ranap.pdu.num_of_octets  Number of Octets in PDU
        Unsigned 16-bit integer
    ranap.pdu.number_of_ies  Number of IEs in PDU
        Unsigned 16-bit integer
    ranap.procedureCode_present  procedureCode
        Unsigned 8-bit integer
    ranap.procedureCriticality  procedureCriticality
        Unsigned 8-bit integer
    ranap.procedureCriticality_present  procedureCriticality
        Unsigned 8-bit integer
    ranap.procedure_code  Procedure Code
        Unsigned 8-bit integer
    ranap.rAB_Parameters_present  rAB-Parameters
        Unsigned 8-bit integer
    ranap.rAB_SubflowCombinationBitRate_present  subflowSDU_Size
        Unsigned 8-bit integer
    ranap.rab_Parameters.allocationOrRetentionPriority.pre_emptionCapability  pre-emptionCapability
        Unsigned 8-bit integer
    ranap.rab_Parameters.allocationOrRetentionPriority.pre_emptionVulnerability  pre-emptionVulnerability
        Unsigned 8-bit integer
    ranap.rab_Parameters.allocationOrRetentionPriority.priorityLevel  priorityLevel
        Unsigned 8-bit integer
    ranap.rab_Parameters.allocationOrRetentionPriority.queuingAllowed  queuingAllowed
        Unsigned 8-bit integer
    ranap.rab_Parameters.deliveryOrder  deliveryOrder
        Unsigned 8-bit integer
    ranap.rab_Parameters.guaranteedBitrate  guaranteedBitrate
        Unsigned 32-bit integer
    ranap.rab_Parameters.maxBitrate  maxBitrate
        Unsigned 32-bit integer
    ranap.rab_Parameters.maxSDU_Size  maxSDU_Size
        Unsigned 16-bit integer
    ranap.rab_Parameters.rAB_AsymmetryIndicator  rAB_AsymmetryIndicator
        Unsigned 8-bit integer
    ranap.rab_Parameters.rAB_SubflowCombinationBitRate  rAB_SubflowCombinationBitRate
        Unsigned 32-bit integer
    ranap.rab_Parameters.ranap_deliveryOfErroneousSDU  deliveryOfErroneousSDU
        Unsigned 8-bit integer
    ranap.rab_Parameters.relocationRequirement  relocationRequirement
        Unsigned 8-bit integer
    ranap.rab_Parameters.residualBitErrorRatio.exponent  residualBitErrorRatio: exponent
        Unsigned 8-bit integer
    ranap.rab_Parameters.residualBitErrorRatio.mantissa  residualBitErrorRatio: mantissa
        Unsigned 8-bit integer
    ranap.rab_Parameters.sDU_ErrorRatio.exponent  sDU_ErrorRatio: exponent
        Unsigned 8-bit integer
    ranap.rab_Parameters.sDU_ErrorRatio.mantissa  sDU_ErrorRatio: mantissa
        Unsigned 8-bit integer
    ranap.rab_Parameters.sourceStatisticsDescriptor  sourceStatisticsDescriptor
        Unsigned 8-bit integer
    ranap.rab_Parameters.subflowSDU_Size  subflowSDU_Size
        Unsigned 8-bit integer
    ranap.rab_Parameters.trafficClass  Traffic Class
        Unsigned 8-bit integer
    ranap.rab_Parameters.trafficHandlingPriority  trafficHandlingPriority
        Unsigned 8-bit integer
    ranap.rab_Parameters.transferDelay  transferDelay
        Unsigned 16-bit integer
    ranap.ranap_pdu_index  RANAP-PDU Index
        Unsigned 8-bit integer
    ranap.relocationRequirement_present  relocationRequirement
        Unsigned 8-bit integer
    ranap.repetitionNumber  repetitionNumber
        Unsigned 16-bit integer
    ranap.repetitionNumber_present  repetitionNumber
        Unsigned 8-bit integer
    ranap.sDU_ErrorRatio_present  sDU_ErrorRatio
        Unsigned 8-bit integer
    ranap.sDU_FormatInformationParameters_present  sDU_FormatInformationParameters
        Unsigned 8-bit integer
    ranap.service_Handover  service-Handover
        Unsigned 8-bit integer
    ranap.service_Handover_present  service-Handover
        Unsigned 8-bit integer
    ranap.sourceStatisticsDescriptor_present  sourceStatisticsDescriptor
        Unsigned 8-bit integer
    ranap.subflowSDU_Size_present  subflowSDU_Size
        Unsigned 8-bit integer
    ranap.trafficHandlingPriority_present  trafficHandlingPriority
        Unsigned 8-bit integer
    ranap.transferDelay_present  transferDelay
        Unsigned 8-bit integer
    ranap.transportLayerAddress  transportLayerAddress
        Byte array
    ranap.transportLayerAddress_length  bit length of transportLayerAddress
        Unsigned 8-bit integer
    ranap.transportLayerAddress_present  transportLayerAddress
        Unsigned 8-bit integer
    ranap.transportLayerInformation_present  transportLayerInformation
        Unsigned 8-bit integer
    ranap.triggeringMessage  triggeringMessage
        Unsigned 8-bit integer
    ranap.triggeringMessage_present  triggeringMessage
        Unsigned 8-bit integer
    ranap.uP_ModeVersions  uP_ModeVersions
        Byte array
    ranap.ul_GTP_PDU_SequenceNumber_present  ul_GTP_PDU_SequenceNumber
        Unsigned 8-bit integer
    ranap.ul_N_PDU_SequenceNumber_present  ul_N_PDU_SequenceNumber
        Unsigned 8-bit integer
    ranap.userPlaneInformation_present  userPlaneInformation
        Unsigned 8-bit integer
    ranap.userPlaneMode  userPlaneMode
        Unsigned 8-bit integer

Radius Protocol (radius)

    radius.code  Code
        Unsigned 8-bit integer
    radius.id  Identifier
        Unsigned 8-bit integer
    radius.length  Length
        Unsigned 16-bit integer

Raw packet data (raw)

Real Time Streaming Protocol (rtsp)

    rtsp.method  Method
        String
    rtsp.status  Status
        Unsigned 32-bit integer
    rtsp.url  URL
        String

Real-Time Transport Protocol (rtp)

    rtp.cc  Contributing source identifiers count
        Unsigned 8-bit integer
    rtp.csrc.item  CSRC item
        Unsigned 32-bit integer
    rtp.ext  Extension
        Boolean
    rtp.ext.len  Extension length
        Unsigned 16-bit integer
    rtp.ext.profile  Defined by profile
        Unsigned 16-bit integer
    rtp.hdr_ext  Header extension
        Unsigned 32-bit integer
    rtp.marker  Marker
        Boolean
    rtp.p_type  Payload type
        Unsigned 8-bit integer
    rtp.padding  Padding
        Boolean
    rtp.padding.count  Padding count
        Unsigned 8-bit integer
    rtp.padding.data  Padding data
        Byte array
    rtp.payload  Payload
        Byte array
    rtp.seq  Sequence number
        Unsigned 16-bit integer
    rtp.ssrc  Synchronization Source identifier
        Unsigned 32-bit integer
    rtp.timestamp  Timestamp
        Unsigned 32-bit integer
    rtp.version  Version
        Unsigned 8-bit integer

Real-time Transport Control Protocol (rtcp)

    rtcp.app.data  Application specific data
        Byte array
    rtcp.app.name  Name (ASCII)
        String
    rtcp.app.subtype  Subtype
        Unsigned 8-bit integer
    rtcp.length  Length
        Unsigned 16-bit integer
    rtcp.nack.blp  Bitmask of following lost packets
        Unsigned 16-bit integer
    rtcp.nack.fsn  First sequence number
        Unsigned 16-bit integer
    rtcp.padding  Padding
        Boolean
    rtcp.padding.count  Padding count
        Unsigned 8-bit integer
    rtcp.padding.data  Padding data
        Byte array
    rtcp.pt  Packet type
        Unsigned 8-bit integer
    rtcp.rc  Reception report count
        Unsigned 8-bit integer
    rtcp.sc  Source count
        Unsigned 8-bit integer
    rtcp.sdes.length  Length
        Unsigned 32-bit integer
    rtcp.sdes.prefix.length  Prefix length
        Unsigned 8-bit integer
    rtcp.sdes.prefix.string  Prefix string
        String
    rtcp.sdes.ssrc_csrc  SSRC / CSRC identifier
        Unsigned 32-bit integer
    rtcp.sdes.text  Text
        String
    rtcp.sdes.type  Type
        Unsigned 8-bit integer
    rtcp.sender.octetcount  Sender's octet count
        Unsigned 32-bit integer
    rtcp.sender.packetcount  Sender's packet count
        Unsigned 32-bit integer
    rtcp.senderssrc  Sender SSRC
        Unsigned 32-bit integer
    rtcp.ssrc.cum_nr  Cumulative number of packets lost
        Unsigned 32-bit integer
    rtcp.ssrc.dlsr  Delay since last SR timestamp
        Unsigned 32-bit integer
    rtcp.ssrc.ext_high  Extended highest sequence number received
        Unsigned 32-bit integer
    rtcp.ssrc.fraction  Fraction lost
        Unsigned 8-bit integer
    rtcp.ssrc.high_cycles  Sequence number cycles count
        Unsigned 16-bit integer
    rtcp.ssrc.high_seq  Highest sequence number received
        Unsigned 16-bit integer
    rtcp.ssrc.identifier  Identifier
        Unsigned 32-bit integer
    rtcp.ssrc.jitter  Interarrival jitter
        Unsigned 32-bit integer
    rtcp.ssrc.lsr  Last SR timestamp
        Unsigned 32-bit integer
    rtcp.timestamp.ntp  NTP timestamp
        String
    rtcp.timestamp.rtp  RTP timestamp
        Unsigned 32-bit integer
    rtcp.version  Version
        Unsigned 8-bit integer

Remote Procedure Call (rpc)

    rpc.array.len  num
        Unsigned 32-bit integer
        Length of RPC array
    rpc.auth.flavor  Flavor
        Unsigned 32-bit integer
        Flavor
    rpc.auth.gid  GID
        Unsigned 32-bit integer
        GID
    rpc.auth.length  Length
        Unsigned 32-bit integer
        Length
    rpc.auth.machinename  Machine Name
        String
        Machine Name
    rpc.auth.stamp  Stamp
        Unsigned 32-bit integer
        Stamp
    rpc.auth.uid  UID
        Unsigned 32-bit integer
        UID
    rpc.authdes.convkey  Conversation Key (encrypted)
        Unsigned 32-bit integer
        Conversation Key (encrypted)
    rpc.authdes.namekind  Namekind
        Unsigned 32-bit integer
        Namekind
    rpc.authdes.netname  Netname
        String
        Netname
    rpc.authdes.nickname  Nickname
        Unsigned 32-bit integer
        Nickname
    rpc.authdes.timestamp  Timestamp (encrypted)
        Unsigned 32-bit integer
        Timestamp (encrypted)
    rpc.authdes.timeverf  Timestamp verifier (encrypted)
        Unsigned 32-bit integer
        Timestamp verifier (encrypted)
    rpc.authdes.window  Window (encrypted)
        Unsigned 32-bit integer
        Windows (encrypted)
    rpc.authdes.windowverf  Window verifier (encrypted)
        Unsigned 32-bit integer
        Window verifier (encrypted)
    rpc.authgss.checksum  GSS Checksum
        Byte array
        GSS Checksum
    rpc.authgss.context  GSS Context
        Byte array
        GSS Context
    rpc.authgss.data  GSS Data
        Byte array
        GSS Data
    rpc.authgss.data.length  Length
        Unsigned 32-bit integer
        Length
    rpc.authgss.major  GSS Major Status
        Unsigned 32-bit integer
        GSS Major Status
    rpc.authgss.minor  GSS Minor Status
        Unsigned 32-bit integer
        GSS Minor Status
    rpc.authgss.procedure  GSS Procedure
        Unsigned 32-bit integer
        GSS Procedure
    rpc.authgss.seqnum  GSS Sequence Number
        Unsigned 32-bit integer
        GSS Sequence Number
    rpc.authgss.service  GSS Service
        Unsigned 32-bit integer
        GSS Service
    rpc.authgss.token  GSS Token
        Byte array
        GSS Token
    rpc.authgss.version  GSS Version
        Unsigned 32-bit integer
        GSS Version
    rpc.authgss.window  GSS Sequence Window
        Unsigned 32-bit integer
        GSS Sequence Window
    rpc.call.dup  Duplicate Call
        Unsigned 32-bit integer
        Duplicate Call
    rpc.dup  Duplicate Transaction
        Unsigned 32-bit integer
        Duplicate Transaction
    rpc.fraglen  Fragment Length
        Unsigned 32-bit integer
        Fragment Length
    rpc.fragment  RPC Fragment
        No value
        RPC Fragment
    rpc.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    rpc.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    rpc.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    rpc.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    rpc.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    rpc.fragments  RPC Fragments
        No value
        RPC Fragments
    rpc.lastfrag  Last Fragment
        Boolean
        Last Fragment
    rpc.msgtyp  Message Type
        Unsigned 32-bit integer
        Message Type
    rpc.procedure  Procedure
        Unsigned 32-bit integer
        Procedure
    rpc.program  Program
        Unsigned 32-bit integer
        Program
    rpc.programversion  Program Version
        Unsigned 32-bit integer
        Program Version
    rpc.programversion.max  Program Version (Maximum)
        Unsigned 32-bit integer
        Program Version (Maximum)
    rpc.programversion.min  Program Version (Minimum)
        Unsigned 32-bit integer
        Program Version (Minimum)
    rpc.reply.dup  Duplicate Reply
        Unsigned 32-bit integer
        Duplicate Reply
    rpc.replystat  Reply State
        Unsigned 32-bit integer
        Reply State
    rpc.state_accept  Accept State
        Unsigned 32-bit integer
        Accept State
    rpc.state_auth  Auth State
        Unsigned 32-bit integer
        Auth State
    rpc.state_reject  Reject State
        Unsigned 32-bit integer
        Reject State
    rpc.time  Time from request
        Time duration
        Time between Request and Reply for ONC-RPC calls
    rpc.value_follows  Value Follows
        Boolean
        Value Follows
    rpc.version  RPC Version
        Unsigned 32-bit integer
        RPC Version
    rpc.version.max  RPC Version (Maximum)
        Unsigned 32-bit integer
        RPC Version (Maximum)
    rpc.version.min  RPC Version (Minimum)
        Unsigned 32-bit integer
        Program Version (Minimum)
    rpc.xid  XID
        Unsigned 32-bit integer
        XID

Remote Quota (rquota)

    rquota.active  active
        Boolean
        Indicates whether quota is active
    rquota.bhardlimit  bhardlimit
        Unsigned 32-bit integer
        Hard limit for blocks
    rquota.bsize  bsize
        Unsigned 32-bit integer
        Block size
    rquota.bsoftlimit  bsoftlimit
        Unsigned 32-bit integer
        Soft limit for blocks
    rquota.btimeleft  btimeleft
        Unsigned 32-bit integer
        Time left for excessive disk use
    rquota.curblocks  curblocks
        Unsigned 32-bit integer
        Current block count
    rquota.curfiles  curfiles
        Unsigned 32-bit integer
        Current # allocated files
    rquota.fhardlimit  fhardlimit
        Unsigned 32-bit integer
        Hard limit on allocated files
    rquota.fsoftlimit  fsoftlimit
        Unsigned 32-bit integer
        Soft limit of allocated files
    rquota.ftimeleft  ftimeleft
        Unsigned 32-bit integer
        Time left for excessive files
    rquota.pathp  pathp
        String
        Filesystem of interest
    rquota.rquota  rquota
        No value
        Rquota structure
    rquota.status  status
        Unsigned 32-bit integer
        Status code
    rquota.uid  uid
        Unsigned 32-bit integer
        User ID

Remote Shell (rsh)

    rsh.request  Request
        Boolean
        TRUE if rsh request
    rsh.response  Response
        Boolean
        TRUE if rsh response

Remote Wall protocol (rwall)

    rwall.message  Message
        String
        Message

Resource ReserVation Protocol (RSVP) (rsvp)

    rsvp.acceptable_label_set  ACCEPTABLE LABEL SET
        No value
    rsvp.ack  Ack Message
        Boolean
    rsvp.admin_status  ADMIN STATUS
        No value
    rsvp.adspec  ADSPEC
        No value
    rsvp.bundle  Bundle Message
        Boolean
    rsvp.confirm  CONFIRM
        No value
    rsvp.dclass  DCLASS
        No value
    rsvp.error  ERROR
        No value
    rsvp.explicit_route  EXPLICIT ROUTE
        No value
    rsvp.filter  FILTERSPEC
        No value
    rsvp.flowspec  FLOWSPEC
        No value
    rsvp.generalized_uni  GENERALIZED UNI
        No value
    rsvp.hello  HELLO Message
        Boolean
    rsvp.hello_obj  HELLO Request/Ack
        No value
    rsvp.hop  HOP
        No value
    rsvp.integrity  INTEGRITY
        No value
    rsvp.label  LABEL
        No value
    rsvp.label_request  LABEL REQUEST
        No value
    rsvp.label_set  RESTRICTED LABEL SET
        No value
    rsvp.lsp_tunnel_if_id  LSP INTERFACE-ID
        No value
    rsvp.msg  Message Type
        Unsigned 8-bit integer
    rsvp.msgid  MESSAGE-ID
        No value
    rsvp.msgid_list  MESSAGE-ID LIST
        No value
    rsvp.notify_request  NOTIFY REQUEST
        No value
    rsvp.obj_unknown  Unknown object
        No value
    rsvp.object  Object class
        Unsigned 8-bit integer
    rsvp.path  Path Message
        Boolean
    rsvp.perr  Path Error Message
        Boolean
    rsvp.policy  POLICY
        No value
    rsvp.protection  PROTECTION
        No value
    rsvp.ptear  Path Tear Message
        Boolean
    rsvp.record_route  RECORD ROUTE
        No value
    rsvp.recovery_label  RECOVERY LABEL
        No value
    rsvp.rerr  Resv Error Message
        Boolean
    rsvp.restart  RESTART CAPABILITY
        No value
    rsvp.resv  Resv Message
        Boolean
    rsvp.resvconf  Resv Confirm Message
        Boolean
    rsvp.rtear  Resv Tear Message
        Boolean
    rsvp.rtearconf  Resv Tear Confirm Message
        Boolean
    rsvp.scope  SCOPE
        No value
    rsvp.sender  SENDER TEMPLATE
        No value
    rsvp.sender.ip  Sender IPv4 address
        IPv4 address
    rsvp.sender.lsp_id  Sender LSP ID
        Unsigned 16-bit integer
    rsvp.sender.port  Sender port number
        Unsigned 16-bit integer
    rsvp.session  SESSION
        No value
    rsvp.session.ext_tunnel_id  Extended tunnel ID
        Unsigned 32-bit integer
    rsvp.session.ip  Destination address
        IPv4 address
    rsvp.session.port  Port number
        Unsigned 16-bit integer
    rsvp.session.proto  Protocol
        Unsigned 8-bit integer
    rsvp.session.tunnel_id  Tunnel ID
        Unsigned 16-bit integer
    rsvp.session_attribute  SESSION ATTRIBUTE
        No value
    rsvp.srefresh  Srefresh Message
        Boolean
    rsvp.style  STYLE
        No value
    rsvp.suggested_label  SUGGESTED LABEL
        No value
    rsvp.time  TIME VALUES
        No value
    rsvp.tspec  SENDER TSPEC
        No value
    rsvp.upstream_label  UPSTREAM LABEL
        No value

Rlogin Protocol (rlogin)

    rlogin.user_info  User Info
        No value
    rlogin.window_size  Window Info
        No value
    rlogin.window_size.cols  Columns
        Unsigned 16-bit integer
    rlogin.window_size.rows  Rows
        Unsigned 16-bit integer
    rlogin.window_size.x_pixels  X Pixels
        Unsigned 16-bit integer
    rlogin.window_size.y_pixels  Y Pixels
        Unsigned 16-bit integer

Routing Information Protocol (rip)

    rip.auth.passwd  Password
        String
        Authentication password
    rip.auth.type  Authentication type
        Unsigned 16-bit integer
        Type of authentication
    rip.command  Command
        Unsigned 8-bit integer
        What type of RIP Command is this
    rip.family  Address Family
        Unsigned 16-bit integer
        Address family
    rip.ip  IP Address
        IPv4 address
        IP Address
    rip.metric  Metric
        Unsigned 16-bit integer
        Metric for this route
    rip.netmask  Netmask
        IPv4 address
        Netmask
    rip.next_hop  Next Hop
        IPv4 address
        Next Hop router for this route
    rip.route_tag  Route Tag
        Unsigned 16-bit integer
        Route Tag
    rip.routing_domain  Routing Domain
        Unsigned 16-bit integer
        RIPv2 Routing Domain
    rip.version  Version
        Unsigned 8-bit integer
        Version of the RIP protocol

Routing Table Maintenance Protocol (rtmp)

    nbp.nodeid  Node
        Unsigned 8-bit integer
        Node
    nbp.nodeid.length  Node Length
        Unsigned 8-bit integer
        Node Length
    rtmp.function  Function
        Unsigned 8-bit integer
        Request Function
    rtmp.net  Net
        Unsigned 16-bit integer
        Net
    rtmp.tuple.dist  Distance
        Unsigned 16-bit integer
        Distance
    rtmp.tuple.net  Net
        Unsigned 16-bit integer
        Net
    rtmp.tuple.range_end  Range End
        Unsigned 16-bit integer
        Range End
    rtmp.tuple.range_start  Range Start
        Unsigned 16-bit integer
        Range Start

SADMIND (sadmind)

SCSI (scsi)

    scsi.cdb.alloclen  Allocation Length
        Unsigned 8-bit integer
    scsi.cdb.alloclen16  Allocation Length
        Unsigned 16-bit integer
    scsi.cdb.alloclen32  Allocation Length
        Unsigned 32-bit integer
    scsi.cdb.control  Control
        Unsigned 8-bit integer
    scsi.cdb.defectfmt  Defect List Format
        Unsigned 8-bit integer
    scsi.cdb.mode.flags  Mode Sense/Select Flags
        Unsigned 8-bit integer
    scsi.cdb.paramlen  Parameter Length
        Unsigned 8-bit integer
    scsi.cdb.paramlen16  Parameter Length
        Unsigned 16-bit integer
    scsi.formatunit.flags  Flags
        Unsigned 8-bit integer
    scsi.formatunit.interleave  Interleave
        Unsigned 16-bit integer
    scsi.formatunit.vendor  Vendor Unique
        Unsigned 8-bit integer
    scsi.inquiry.cmdt.pagecode  CMDT Page Code
        Unsigned 8-bit integer
    scsi.inquiry.devtype  Device Type
        Unsigned 8-bit integer
    scsi.inquiry.evpd.pagecode  EVPD Page Code
        Unsigned 8-bit integer
    scsi.inquiry.flags  Flags
        Unsigned 8-bit integer
    scsi.inquiry.normaca  NormACA
        Unsigned 8-bit integer
    scsi.inquiry.version  Version
        Unsigned 8-bit integer
    scsi.log.pc  Page Control
        Unsigned 8-bit integer
    scsi.logsel.flags  Flags
        Unsigned 8-bit integer
    scsi.logsns.flags  Flags
        Unsigned 16-bit integer
    scsi.logsns.pagecode  Page Code
        Unsigned 8-bit integer
    scsi.mode.flags  Flags
        Unsigned 8-bit integer
    scsi.mode.mrie  MRIE
        Unsigned 8-bit integer
    scsi.mode.pagecode  Page Code
        Unsigned 8-bit integer
    scsi.mode.pc  Page Control
        Unsigned 8-bit integer
    scsi.mode.qerr  Queue Error Management
        Boolean
    scsi.mode.qmod  Queue Algorithm Modifier
        Unsigned 8-bit integer
    scsi.mode.tac  Task Aborted Status
        Boolean
    scsi.mode.tst  Task Set Type
        Unsigned 8-bit integer
    scsi.persresv.scope  Reservation Scope
        Unsigned 8-bit integer
    scsi.persresv.type  Reservation Type
        Unsigned 8-bit integer
    scsi.persresvin.svcaction  Service Action
        Unsigned 8-bit integer
    scsi.persresvout.svcaction  Service Action
        Unsigned 8-bit integer
    scsi.proto  Protocol
        Unsigned 8-bit integer
    scsi.rdwr10.lba  Logical Block Address (LBA)
        Unsigned 32-bit integer
    scsi.rdwr10.xferlen  Transfer Length
        Unsigned 16-bit integer
    scsi.rdwr12.xferlen  Transfer Length
        Unsigned 32-bit integer
    scsi.rdwr16.lba  Logical Block Address (LBA)
        Byte array
    scsi.rdwr6.lba  Logical Block Address (LBA)
        Unsigned 24-bit integer
    scsi.rdwr6.xferlen  Transfer Length
        Unsigned 24-bit integer
    scsi.read.flags  Flags
        Unsigned 8-bit integer
    scsi.readcapacity.flags  Flags
        Unsigned 8-bit integer
    scsi.readcapacity.lba  Logical Block Address
        Unsigned 32-bit integer
    scsi.readcapacity.pmi  PMI
        Unsigned 8-bit integer
    scsi.readdefdata.flags  Flags
        Unsigned 8-bit integer
    scsi.reassignblks.flags  Flags
        Unsigned 8-bit integer
    scsi.release.flags  Release Flags
        Unsigned 8-bit integer
    scsi.release.thirdpartyid  Third-Party ID
        Byte array
    scsi.reportluns.lun  LUN
        Unsigned 8-bit integer
    scsi.reportluns.mlun  Multi-level LUN
        Byte array
    scsi.sbc.opcode  SBC-2 Opcode
        Unsigned 8-bit integer
    scsi.sns.addlen  Additional Sense Length
        Unsigned 8-bit integer
    scsi.sns.asc  Additional Sense Code
        Unsigned 8-bit integer
    scsi.sns.ascascq  Additional Sense Code+Qualifier
        Unsigned 16-bit integer
    scsi.sns.ascq  Additional Sense Code Qualifier
        Unsigned 8-bit integer
    scsi.sns.errtype  SNS Error Type
        Unsigned 8-bit integer
    scsi.sns.fru  Field Replaceable Unit Code
        Unsigned 8-bit integer
    scsi.sns.info  Sense Info
        Unsigned 32-bit integer
    scsi.sns.key  Sense Key
        Unsigned 8-bit integer
    scsi.sns.sksv  SKSV
        Boolean
    scsi.spc.opcode  SPC-2 Opcode
        Unsigned 8-bit integer
    scsi.spc2.addcdblen  Additional CDB Length
        Unsigned 8-bit integer
    scsi.spc2.resv.key  Reservation Key
        Byte array
    scsi.spc2.resv.scopeaddr  Scope Address
        Byte array
    scsi.spc2.svcaction  Service Action
        Unsigned 16-bit integer
    scsi.ssc.opcode  SSC-2 Opcode
        Unsigned 8-bit integer
    ssci.mode.rac  Report a Check
        Boolean

SMB (Server Message Block Protocol) (smb)

    smb.access.append  Append
        Boolean
        Can object's contents be appended to
    smb.access.caching  Caching
        Boolean
        Caching mode?
    smb.access.delete  Delete
        Boolean
        Can object be deleted
    smb.access.delete_child  Delete Child
        Boolean
        Can object's subdirectories be deleted
    smb.access.execute  Execute
        Boolean
        Can object be executed (if file) or traversed (if directory)
    smb.access.generic_all  Generic All
        Boolean
        Is generic all allowed for this attribute
    smb.access.generic_execute  Generic Execute
        Boolean
        Is generic execute allowed for this object?
    smb.access.generic_read  Generic Read
        Boolean
        Is generic read allowed for this object?
    smb.access.generic_write  Generic Write
        Boolean
        Is generic write allowed for this object?
    smb.access.locality  Locality
        Unsigned 16-bit integer
        Locality of reference
    smb.access.maximum_allowed  Maximum Allowed
        Boolean
        ?
    smb.access.mode  Access Mode
        Unsigned 16-bit integer
        Access Mode
    smb.access.read  Read
        Boolean
        Can object's contents be read
    smb.access.read_attributes  Read Attributes
        Boolean
        Can object's attributes be read
    smb.access.read_control  Read Control
        Boolean
        Are reads allowed of owner, group and ACL data of the SID?
    smb.access.read_ea  Read EA
        Boolean
        Can object's extended attributes be read
    smb.access.sharing  Sharing Mode
        Unsigned 16-bit integer
        Sharing Mode
    smb.access.smb.date  Last Access Date
        Unsigned 16-bit integer
        Last Access Date, SMB_DATE format
    smb.access.smb.time  Last Access Time
        Unsigned 16-bit integer
        Last Access Time, SMB_TIME format
    smb.access.synchronize  Synchronize
        Boolean
        Windows NT: synchronize access
    smb.access.system_security  System Security
        Boolean
        Access to a system ACL?
    smb.access.time  Last Access
        Date/Time stamp
        Last Access Time
    smb.access.write  Write
        Boolean
        Can object's contents be written
    smb.access.write_attributes  Write Attributes
        Boolean
        Can object's attributes be written
    smb.access.write_dac  Write DAC
        Boolean
        Is write allowed to the owner group or ACLs?
    smb.access.write_ea  Write EA
        Boolean
        Can object's extended attributes be written
    smb.access.write_owner  Write Owner
        Boolean
        Can owner write to the object?
    smb.access.writethrough  Writethrough
        Boolean
        Writethrough mode?
    smb.account  Account
        String
        Account, username
    smb.ace.flags.container_inherit  Container Inherit
        Boolean
        Will subordinate containers inherit this ACE?
    smb.ace.flags.failed_access  Audit Failed Accesses
        Boolean
        Should failed accesses be audited?
    smb.ace.flags.inherit_only  Inherit Only
        Boolean
        Does this ACE apply to the current object?
    smb.ace.flags.inherited_ace  Inherited ACE
        Boolean
        Was this ACE inherited from its parent object?
    smb.ace.flags.non_propagate_inherit  Non-Propagate Inherit
        Boolean
        Will subordinate object propagate this ACE further?
    smb.ace.flags.object_inherit  Object Inherit
        Boolean
        Will subordinate files inherit this ACE?
    smb.ace.flags.successful_access  Audit Successful Accesses
        Boolean
        Should successful accesses be audited?
    smb.ace.size  Size
        Unsigned 16-bit integer
        Size of this ACE
    smb.ace.type  Type
        Unsigned 8-bit integer
        Type of ACE
    smb.acl.num_aces  Num ACEs
        Unsigned 32-bit integer
        Number of ACE structures for this ACL
    smb.acl.revision  Revision
        Unsigned 16-bit integer
        Version of NT ACL structure
    smb.acl.size  Size
        Unsigned 16-bit integer
        Size of NT ACL structure
    smb.actual_free_alloc_units  Actual Free Units
        Unsigned 64-bit integer
        Number of actual free allocation units
    smb.alignment  Alignment
        Unsigned 32-bit integer
        What alignment do we require for buffers
    smb.alloc_size  Allocation Size
        Unsigned 32-bit integer
        Number of bytes to reserve on create or truncate
    smb.andxoffset  AndXOffset
        Unsigned 16-bit integer
        Offset to next command in this SMB packet
    smb.ansi_password  ANSI Password
        Byte array
        ANSI Password
    smb.ansi_pwlen  ANSI Password Length
        Unsigned 16-bit integer
        Length of ANSI password
    smb.avail.units  Available Units
        Unsigned 32-bit integer
        Total number of available units on this filesystem
    smb.bcc  Byte Count (BCC)
        Unsigned 16-bit integer
        Byte Count, count of data bytes
    smb.blocksize  Block Size
        Unsigned 16-bit integer
        Block size (in bytes) at server
    smb.bpu  Blocks Per Unit
        Unsigned 16-bit integer
        Blocks per unit at server
    smb.buffer_format  Buffer Format
        Unsigned 8-bit integer
        Buffer Format, type of buffer
    smb.caller_free_alloc_units  Caller Free Units
        Unsigned 64-bit integer
        Number of caller free allocation units
    smb.cancel_to  Cancel to
        Unsigned 32-bit integer
        This packet is a cancellation of the packet in this frame
    smb.change.time  Change
        Date/Time stamp
        Last Change Time
    smb.change_count  Change Count
        Unsigned 16-bit integer
        Number of changes to wait for
    smb.cmd  SMB Command
        Unsigned 8-bit integer
        SMB Command
    smb.compressed.chunk_shift  Chunk Shift
        Unsigned 8-bit integer
        Allocated size of the stream in number of bytes
    smb.compressed.cluster_shift  Cluster Shift
        Unsigned 8-bit integer
        Allocated size of the stream in number of bytes
    smb.compressed.file_size  Compressed Size
        Unsigned 64-bit integer
        Size of the compressed file
    smb.compressed.format  Compression Format
        Unsigned 16-bit integer
        Compression algorithm used
    smb.compressed.unit_shift  Unit Shift
        Unsigned 8-bit integer
        Size of the stream in number of bytes
    smb.connect.flags.dtid  Disconnect TID
        Boolean
        Disconnect TID?
    smb.connect.support.dfs  In Dfs
        Boolean
        Is this in a Dfs tree?
    smb.connect.support.search  Search Bits
        Boolean
        Exclusive Search Bits supported?
    smb.continuation_to  Continuation to
        Unsigned 32-bit integer
        This packet is a continuation to the packet in this frame
    smb.copy.flags.dest_mode  Destination mode
        Boolean
        Is destination in ASCII?
    smb.copy.flags.dir  Must be directory
        Boolean
        Must target be a directory?
    smb.copy.flags.ea_action  EA action if EAs not supported on dest
        Boolean
        Fail copy if source file has EAs and dest doesn't support EAs?
    smb.copy.flags.file  Must be file
        Boolean
        Must target be a file?
    smb.copy.flags.source_mode  Source mode
        Boolean
        Is source in ASCII?
    smb.copy.flags.tree_copy  Tree copy
        Boolean
        Is copy a tree copy?
    smb.copy.flags.verify  Verify writes
        Boolean
        Verify all writes?
    smb.count  Count
        Unsigned 32-bit integer
        Count number of items/bytes
    smb.create.action  Create action
        Unsigned 32-bit integer
        Type of action taken
    smb.create.disposition  Disposition
        Unsigned 32-bit integer
        Create disposition, what to do if the file does/does not exist
    smb.create.file_id  Server unique file ID
        Unsigned 32-bit integer
        Server unique file ID
    smb.create.smb.date  Create Date
        Unsigned 16-bit integer
        Create Date, SMB_DATE format
    smb.create.smb.time  Create Time
        Unsigned 16-bit integer
        Create Time, SMB_TIME format
    smb.create.time  Created
        Date/Time stamp
        Creation Time
    smb.data_disp  Data Displacement
        Unsigned 16-bit integer
        Data Displacement
    smb.data_len  Data Length
        Unsigned 16-bit integer
        Length of data
    smb.data_offset  Data Offset
        Unsigned 16-bit integer
        Data Offset
    smb.data_size  Data Size
        Unsigned 32-bit integer
        Data Size
    smb.dc  Data Count
        Unsigned 16-bit integer
        Number of data bytes in this buffer
    smb.dcm  Data Compaction Mode
        Unsigned 16-bit integer
        Data Compaction Mode
    smb.delete_pending  Delete Pending
        Unsigned 16-bit integer
        Is this object about to be deleted?
    smb.destination_name  Destination Name
        String
        Name of recipient of message
    smb.device.floppy  Floppy
        Boolean
        Is this a floppy disk
    smb.device.mounted  Mounted
        Boolean
        Is this a mounted device
    smb.device.read_only  Read Only
        Boolean
        Is this a read-only device
    smb.device.remote  Remote
        Boolean
        Is this a remote device
    smb.device.removable  Removable
        Boolean
        Is this a removable device
    smb.device.type  Device Type
        Unsigned 32-bit integer
        Type of device
    smb.device.virtual  Virtual
        Boolean
        Is this a virtual device
    smb.device.write_once  Write Once
        Boolean
        Is this a write-once device
    smb.dfs.flags.fielding  Fielding
        Boolean
        The servers in referrals are capable of fielding
    smb.dfs.flags.server_hold_storage  Hold Storage
        Boolean
        The servers in referrals should hold storage for the file
    smb.dfs.num_referrals  Num Referrals
        Unsigned 16-bit integer
        Number of referrals in this pdu
    smb.dfs.path_consumed  Path Consumed
        Unsigned 16-bit integer
        Number of RequestFilename bytes client
    smb.dfs.referral.alt_path  Alt Path
        String
        Alternative(8.3) Path that matched pathconsumed
    smb.dfs.referral.alt_path_offset  Alt Path Offset
        Unsigned 16-bit integer
        Offset of alternative(8.3) Path that matched pathconsumed
    smb.dfs.referral.flags.strip  Strip
        Boolean
        Should we strip off pathconsumed characters before submitting?
    smb.dfs.referral.node  Node
        String
        Name of entity to visit next
    smb.dfs.referral.node_offset  Node Offset
        Unsigned 16-bit integer
        Offset of name of entity to visit next
    smb.dfs.referral.path  Path
        String
        Dfs Path that matched pathconsumed
    smb.dfs.referral.path_offset  Path Offset
        Unsigned 16-bit integer
        Offset of Dfs Path that matched pathconsumed
    smb.dfs.referral.proximity  Proximity
        Unsigned 16-bit integer
        Hint describing proximity of this server to the client
    smb.dfs.referral.server.type  Server Type
        Unsigned 16-bit integer
        Type of referral server
    smb.dfs.referral.size  Size
        Unsigned 16-bit integer
        Size of referral element
    smb.dfs.referral.ttl  TTL
        Unsigned 16-bit integer
        Number of seconds the client can cache this referral
    smb.dfs.referral.version  Version
        Unsigned 16-bit integer
        Version of referral element
    smb.dialect.index  Selected Index
        Unsigned 16-bit integer
        Index of selected dialect
    smb.dialect.name  Name
        String
        Name of dialect
    smb.dir_name  Directory
        String
        SMB Directory Name
    smb.ea.error_offset  EA Error offset
        Unsigned 32-bit integer
        Offset into EA list if EA error
    smb.ea.length  EA Length
        Unsigned 32-bit integer
        Total EA length for opened file
    smb.ea_size  EA Size
        Unsigned 32-bit integer
        Size of file's EA information
    smb.echo.count  Echo Count
        Unsigned 16-bit integer
        Number of times to echo data back
    smb.echo.data  Echo Data
        Byte array
        Data for SMB Echo Request/Response
    smb.echo.seq_num  Echo Seq Num
        Unsigned 16-bit integer
        Sequence number for this echo response
    smb.encryption_key  Encryption Key
        Byte array
        Challenge/Response Encryption Key (for LM2.1 dialect)
    smb.encryption_key_length  Key Length
        Unsigned 16-bit integer
        Encryption key length (must be 0 if not LM2.1 dialect)
    smb.end_of_file  End Of File
        Unsigned 64-bit integer
        Offset to the first free byte in the file
    smb.end_of_search  End Of Search
        Unsigned 16-bit integer
        Was last entry returned?
    smb.error_class  Error Class
        Unsigned 8-bit integer
        DOS Error Class
    smb.error_code  Error Code
        Unsigned 16-bit integer
        DOS Error Code
    smb.ext_attr  Extended Attributes
        Byte array
        Extended Attributes
    smb.ff2_loi  Level of Interest
        Unsigned 16-bit integer
        Level of interest for FIND_FIRST2 command
    smb.fid  FID
        Unsigned 16-bit integer
        FID: File ID
    smb.file  File Name
        String
        File Name
    smb.file_attribute.archive  Archive
        Boolean
        ARCHIVE file attribute
    smb.file_attribute.backup_semantics  Backup
        Boolean
        Does this object need/support backup semantics
    smb.file_attribute.compressed  Compressed
        Boolean
        Is this file compressed?
    smb.file_attribute.delete_on_close  Delete on Close
        Boolean
        Should this object be deleted on close?
    smb.file_attribute.device  Device
        Boolean
        Is this file a device?
    smb.file_attribute.directory  Directory
        Boolean
        DIRECTORY file attribute
    smb.file_attribute.encrypted  Encrypted
        Boolean
        Is this file encrypted?
    smb.file_attribute.hidden  Hidden
        Boolean
        HIDDEN file attribute
    smb.file_attribute.no_buffering  No Buffering
        Boolean
        May the server buffer this object?
    smb.file_attribute.normal  Normal
        Boolean
        Is this a normal file?
    smb.file_attribute.not_content_indexed  Content Indexed
        Boolean
        May this file be indexed by the content indexing service
    smb.file_attribute.offline  Offline
        Boolean
        Is this file offline?
    smb.file_attribute.posix_semantics  Posix
        Boolean
        Does this object need/support POSIX semantics?
    smb.file_attribute.random_access  Random Access
        Boolean
        Optimize for random access
    smb.file_attribute.read_only  Read Only
        Boolean
        READ ONLY file attribute
    smb.file_attribute.reparse  Reparse Point
        Boolean
        Does this file have an associated reparse point?
    smb.file_attribute.sequential_scan  Sequential Scan
        Boolean
        Optimize for sequential scan
    smb.file_attribute.sparse  Sparse
        Boolean
        Is this a sparse file?
    smb.file_attribute.system  System
        Boolean
        SYSTEM file attribute
    smb.file_attribute.temporary  Temporary
        Boolean
        Is this a temporary file?
    smb.file_attribute.volume  Volume ID
        Boolean
        VOLUME file attribute
    smb.file_attribute.write_through  Write Through
        Boolean
        Does this object need write through?
    smb.file_data  File Data
        Byte array
        Data read/written to the file
    smb.file_index  File Index
        Unsigned 32-bit integer
        File index
    smb.file_name_len  File Name Len
        Unsigned 32-bit integer
        Length of File Name
    smb.file_size  File Size
        Unsigned 32-bit integer
        File Size
    smb.file_type  File Type
        Unsigned 16-bit integer
        Type of file
    smb.files_moved  Files Moved
        Unsigned 16-bit integer
        Number of files moved
    smb.find_first2.flags.backup  Backup Intent
        Boolean
        Find with backup intent
    smb.find_first2.flags.close  Close
        Boolean
        Close search after this request
    smb.find_first2.flags.continue  Continue
        Boolean
        Continue search from previous ending place
    smb.find_first2.flags.eos  Close on EOS
        Boolean
        Close search if end of search reached
    smb.find_first2.flags.resume  Resume
        Boolean
        Return resume keys for each entry found
    smb.flags.canon  Canonicalized Pathnames
        Boolean
        Are pathnames canonicalized?
    smb.flags.caseless  Case Sensitivity
        Boolean
        Are pathnames caseless or casesensitive?
    smb.flags.lock  Lock and Read
        Boolean
        Are Lock&Read and Write&Unlock operations supported?
    smb.flags.notify  Notify
        Boolean
        Notify on open or all?
    smb.flags.oplock  Oplocks
        Boolean
        Is an oplock requested/granted?
    smb.flags.receive_buffer  Receive Buffer Posted
        Boolean
        Have receive buffers been reported?
    smb.flags.response  Request/Response
        Boolean
        Is this a request or a response?
    smb.flags2.dfs  Dfs
        Boolean
        Can pathnames be resolved using Dfs?
    smb.flags2.ea  Extended Attributes
        Boolean
        Are extended attributes supported?
    smb.flags2.esn  Extended Security Negotiation
        Boolean
        Is extended security negotiation supported?
    smb.flags2.long_names_allowed  Long Names Allowed
        Boolean
        Are long file names allowed in the response?
    smb.flags2.long_names_used  Long Names Used
        Boolean
        Are pathnames in this request long file names?
    smb.flags2.nt_error  Error Code Type
        Boolean
        Are error codes NT or DOS format?
    smb.flags2.roe  Execute-only Reads
        Boolean
        Will reads be allowed for execute-only files?
    smb.flags2.sec_sig  Security Signatures
        Boolean
        Are security signatures supported?
    smb.flags2.string  Unicode Strings
        Boolean
        Are strings ASCII or Unicode?
    smb.fn_loi  Level of Interest
        Unsigned 16-bit integer
        Level of interest for FIND_NOTIFY command
    smb.forwarded_name  Forwarded Name
        String
        Recipient name being forwarded
    smb.free_alloc_units  Free Units
        Unsigned 64-bit integer
        Number of free allocation units
    smb.free_units  Free Units
        Unsigned 16-bit integer
        Number of free units at server
    smb.fs_attr.cpn  Case Preserving
        Boolean
        Will this FS Preserve Name Case?
    smb.fs_attr.css  Case Sensitive Search
        Boolean
        Does this FS support Case Sensitive Search?
    smb.fs_attr.dim  Mounted
        Boolean
        Is this FS a Mounted Device?
    smb.fs_attr.fc  Compression
        Boolean
        Does this FS support File Compression?
    smb.fs_attr.pacls  Persistent ACLs
        Boolean
        Does this FS support Persistent ACLs?
    smb.fs_attr.vic  Compressed
        Boolean
        Is this FS Compressed?
    smb.fs_attr.vq  Volume Quotas
        Boolean
        Does this FS support Volume Quotas?
    smb.fs_bytes_per_sector  Bytes per Sector
        Unsigned 32-bit integer
        Bytes per sector
    smb.fs_id  FS Id
        Unsigned 32-bit integer
        File System ID (NT Server always returns 0)
    smb.fs_max_name_len  Max name length
        Unsigned 32-bit integer
        Maximum length of each file name component in number of bytes
    smb.fs_name  FS Name
        String
        Name of filesystem
    smb.fs_name.len  Label Length
        Unsigned 32-bit integer
        Length of filesystem name in bytes
    smb.fs_sector_per_unit  Sectors/Unit
        Unsigned 32-bit integer
        Sectors per allocation unit
    smb.fs_units  Total Units
        Unsigned 32-bit integer
        Total number of units on this filesystem
    smb.impersonation.level  Impersonation
        Unsigned 32-bit integer
        Impersonation level
    smb.index_number  Index Number
        Unsigned 64-bit integer
        File system unique identifier
    smb.ipc_state.endpoint  Endpoint
        Unsigned 16-bit integer
        Which end of the pipe this is
    smb.ipc_state.icount  Icount
        Unsigned 16-bit integer
        Count to control pipe instancing
    smb.ipc_state.nonblocking  Nonblocking
        Boolean
        Is I/O to this pipe nonblocking?
    smb.ipc_state.pipe_type  Pipe Type
        Unsigned 16-bit integer
        What type of pipe this is
    smb.ipc_state.read_mode  Read Mode
        Unsigned 16-bit integer
        How this pipe should be read
    smb.is_directory  Is Directory
        Unsigned 8-bit integer
        Is this object a directory?
    smb.last_name_offset  Last Name Offset
        Unsigned 16-bit integer
        If non-0 this is the offset into the datablock for the file name of the last entry
    smb.last_write.smb.date  Last Write Date
        Unsigned 16-bit integer
        Last Write Date, SMB_DATE format
    smb.last_write.smb.time  Last Write Time
        Unsigned 16-bit integer
        Last Write Time, SMB_TIME format
    smb.last_write.time  Last Write
        Date/Time stamp
        Time this file was last written to
    smb.link_count  Link Count
        Unsigned 32-bit integer
        Number of hard links to the file
    smb.list_len  ListLength
        Unsigned 32-bit integer
        Length of the remaining data
    smb.lock.length  Length
        Unsigned 64-bit integer
        Length of lock/unlock region
    smb.lock.offset  Offset
        Unsigned 64-bit integer
        Offset in the file of lock/unlock region
    smb.lock.type.cancel  Cancel
        Boolean
        Cancel outstanding lock requests?
    smb.lock.type.change  Change
        Boolean
        Change type of lock?
    smb.lock.type.large  Large Files
        Boolean
        Large file locking requested?
    smb.lock.type.oplock_release  Oplock Break
        Boolean
        Is this a notification of, or a response to, an oplock break?
    smb.lock.type.shared  Shared
        Boolean
        Shared or exclusive lock requested?
    smb.locking.num_locks  Number of Locks
        Unsigned 16-bit integer
        Number of lock requests in this request
    smb.locking.num_unlocks  Number of Unlocks
        Unsigned 16-bit integer
        Number of unlock requests in this request
    smb.locking.oplock.level  Oplock Level
        Unsigned 8-bit integer
        Level of existing oplock at client (if any)
    smb.loi  Level of Interest
        Unsigned 16-bit integer
        Level of interest for TRANSACTION[2] commands
    smb.machine_name  Machine Name
        String
        Name of target machine
    smb.max_buf  Max Buffer
        Unsigned 16-bit integer
        Max client buffer size
    smb.max_bufsize  Max Buffer Size
        Unsigned 32-bit integer
        Maximum transmit buffer size
    smb.max_mpx_count  Max Mpx Count
        Unsigned 16-bit integer
        Maximum pending multiplexed requests
    smb.max_raw  Max Raw Buffer
        Unsigned 32-bit integer
        Maximum raw buffer size
    smb.max_referral_level  Max Referral Level
        Unsigned 16-bit integer
        Latest referral version number understood
    smb.max_vcs  Max VCs
        Unsigned 16-bit integer
        Maximum VCs between client and server
    smb.maxcount  Max Count
        Unsigned 16-bit integer
        Maximum Count
    smb.mdc  Max Data Count
        Unsigned 32-bit integer
        Maximum number of data bytes to return
    smb.message  Message
        String
        Message text
    smb.message.len  Message Len
        Unsigned 16-bit integer
        Length of message
    smb.mgid  Message Group ID
        Unsigned 16-bit integer
        Message group ID for multi-block messages
    smb.mid  Multiplex ID
        Unsigned 16-bit integer
        Multiplex ID
    smb.mincount  Min Count
        Unsigned 16-bit integer
        Minimum Count
    smb.monitor_handle  Monitor Handle
        Unsigned 16-bit integer
        Handle for Find Notify operations
    smb.move.flags.dir  Must be directory
        Boolean
        Must target be a directory?
    smb.move.flags.file  Must be file
        Boolean
        Must target be a file?
    smb.move.flags.verify  Verify writes
        Boolean
        Verify all writes?
    smb.mpc  Max Parameter Count
        Unsigned 32-bit integer
        Maximum number of parameter bytes to return
    smb.msc  Max Setup Count
        Unsigned 8-bit integer
        Maximum number of setup words to return
    smb.native_fs  Native File System
        String
        Native File System
    smb.native_lanman  Native LAN Manager
        String
        Which LANMAN protocol we are running
    smb.native_os  Native OS
        String
        Which OS we are running
    smb.next_entry_offset  Next Entry Offset
        Unsigned 32-bit integer
        Offset to next entry
    smb.nt.create.batch_oplock  Batch Oplock
        Boolean
        Is a batch oplock requested?
    smb.nt.create.dir  Create Directory
        Boolean
        Must target of open be a directory?
    smb.nt.create.oplock  Exclusive Oplock
        Boolean
        Is an oplock requested
    smb.nt.create_options.delete_on_close  Delete On Close
        Boolean
        Should the file be deleted when closed?
    smb.nt.create_options.directory  Directory
        Boolean
        Should file being opened/created be a directory?
    smb.nt.create_options.eight_dot_three_only  8.3 Only
        Boolean
        Does the client understand only 8.3 filenames?
    smb.nt.create_options.no_ea_knowledge  No EA Knowledge
        Boolean
        Does the client not understand extended attributes?
    smb.nt.create_options.non_directory  Non-Directory
        Boolean
        Should file being opened/created be a non-directory?
    smb.nt.create_options.random_access  Random Access
        Boolean
        Will the client be accessing the file randomly?
    smb.nt.create_options.sequential_only  Sequential Only
        Boolean
        Will accees to thsis file only be sequential?
    smb.nt.create_options.sync_io_alert  Sync I/O Alert
        Boolean
        All operations are performed synchronous
    smb.nt.create_options.sync_io_nonalert  Sync I/O Nonalert
        Boolean
        All operations are synchronous and may block
    smb.nt.create_options.write_through  Write Through
        Boolean
        Should writes to the file write buffered data out before completing?
    smb.nt.function  Function
        Unsigned 16-bit integer
        Function for NT Transaction
    smb.nt.ioctl.data  IOCTL Data
        Byte array
        Data for the IOCTL call
    smb.nt.ioctl.flags.root_handle  Root Handle
        Boolean
        Apply to this share or root Dfs share
    smb.nt.ioctl.function  Function
        Unsigned 32-bit integer
        NT IOCTL function code
    smb.nt.ioctl.isfsctl  IsFSctl
        Unsigned 8-bit integer
        Is this a device IOCTL (FALSE) or FS Control (TRUE)
    smb.nt.notify.action  Action
        Unsigned 32-bit integer
        Which action caused this notify response
    smb.nt.notify.attributes  Attribute Change
        Boolean
        Notify on changes to attributes
    smb.nt.notify.creation  Created Change
        Boolean
        Notify on changes to creation time
    smb.nt.notify.dir_name  Directory Name Change
        Boolean
        Notify on changes to directory name
    smb.nt.notify.ea  EA Change
        Boolean
        Notify on changes to Extended Attributes
    smb.nt.notify.file_name  File Name Change
        Boolean
        Notify on changes to file name
    smb.nt.notify.last_access  Last Access Change
        Boolean
        Notify on changes to last access
    smb.nt.notify.last_write  Last Write Change
        Boolean
        Notify on changes to last write
    smb.nt.notify.security  Security Change
        Boolean
        Notify on changes to security settings
    smb.nt.notify.size  Size Change
        Boolean
        Notify on changes to size
    smb.nt.notify.stream_name  Stream Name Change
        Boolean
        Notify on changes to stream name?
    smb.nt.notify.stream_size  Stream Size Change
        Boolean
        Notify on changes of stream size
    smb.nt.notify.stream_write  Stream Write
        Boolean
        Notify on stream write?
    smb.nt.notify.watch_tree  Watch Tree
        Unsigned 8-bit integer
        Should Notify watch subdirectories also?
    smb.nt_qsd.dacl  DACL
        Boolean
        Is DACL security informaton being queried?
    smb.nt_qsd.group  Group
        Boolean
        Is group security informaton being queried?
    smb.nt_qsd.owner  Owner
        Boolean
        Is owner security informaton being queried?
    smb.nt_qsd.sacl  SACL
        Boolean
        Is SACL security informaton being queried?
    smb.nt_status  NT Status
        Unsigned 32-bit integer
        NT Status code
    smb.ntr_clu  Cluster count
        Unsigned 32-bit integer
        Number of clusters
    smb.ntr_loi  Level of Interest
        Unsigned 16-bit integer
        NT Rename level
    smb.offset  Offset
        Unsigned 32-bit integer
        Offset in file
    smb.offset_high  High Offset
        Unsigned 32-bit integer
        High 32 Bits Of File Offset
    smb.open.action.lock  Exclusive Open
        Boolean
        Is this file opened by another user?
    smb.open.action.open  Open Action
        Unsigned 16-bit integer
        Open Action, how the file was opened
    smb.open.flags.add_info  Additional Info
        Boolean
        Additional Information Requested?
    smb.open.flags.batch_oplock  Batch Oplock
        Boolean
        Batch Oplock Requested?
    smb.open.flags.ealen  Total EA Len
        Boolean
        Total EA Len Requested?
    smb.open.flags.ex_oplock  Exclusive Oplock
        Boolean
        Exclusive Oplock Requested?
    smb.open.function.create  Create
        Boolean
        Create file if it doesn't exist?
    smb.open.function.open  Open
        Unsigned 16-bit integer
        Action to be taken on open if file exists
    smb.oplock.level  Oplock level
        Unsigned 8-bit integer
        Level of oplock granted
    smb.originator_name  Originator Name
        String
        Name of sender of message
    smb.padding  Padding
        Byte array
        Padding or unknown data
    smb.password  Password
        Byte array
        Password
    smb.path  Path
        String
        Path. Server name and share name
    smb.pc  Parameter Count
        Unsigned 16-bit integer
        Number of parameter bytes in this buffer
    smb.pd  Parameter Displacement
        Unsigned 16-bit integer
        Displacement of these parameter bytes
    smb.pid  Process ID
        Unsigned 16-bit integer
        Process ID
    smb.po  Parameter Offset
        Unsigned 16-bit integer
        Offset (from header start) to parameters
    smb.primary_domain  Primary Domain
        String
        The server's primary domain
    smb.print.identifier  Identifier
        String
        Identifier string for this print job
    smb.print.mode  Mode
        Unsigned 16-bit integer
        Text or Graphics mode
    smb.print.queued.date  Queued
        Date/Time stamp
        Date when this entry was queued
    smb.print.queued.smb.date  Queued Date
        Unsigned 16-bit integer
        Date when this print job was queued, SMB_DATE format
    smb.print.queued.smb.time  Queued Time
        Unsigned 16-bit integer
        Time when this print job was queued, SMB_TIME format
    smb.print.restart_index  Restart Index
        Unsigned 16-bit integer
        Index of entry after last returned
    smb.print.setup.len  Setup Len
        Unsigned 16-bit integer
        Length of printer setup data
    smb.print.spool.file_number  Spool File Number
        Unsigned 16-bit integer
        Spool File Number, assigned by the spooler
    smb.print.spool.file_size  Spool File Size
        Unsigned 32-bit integer
        Number of bytes in spool file
    smb.print.spool.name  Name
        Byte array
        Name of client that submitted this job
    smb.print.start_index  Start Index
        Unsigned 16-bit integer
        First queue entry to return
    smb.print.status  Status
        Unsigned 8-bit integer
        Status of this entry
    smb.pwlen  Password Length
        Unsigned 16-bit integer
        Length of password
    smb.qfi_loi  Level of Interest
        Unsigned 16-bit integer
        Level of interest for QUERY_FS_INFORMATION2 command
    smb.quota.flags.deny_disk  Deny Disk
        Boolean
        Is the default quota limit enforced?
    smb.quota.flags.enabled  Enabled
        Boolean
        Is quotas enabled of this FS?
    smb.quota.flags.log_limit  Log Limit
        Boolean
        Should the server log an event when the limit is exceeded?
    smb.quota.flags.log_warning  Log Warning
        Boolean
        Should the server log an event when the warning level is exceeded?
    smb.quota.hard.default  (Hard) Quota Limit
        Unsigned 64-bit integer
        Hard Quota limit
    smb.quota.soft.default  (Soft) Quota Treshold
        Unsigned 64-bit integer
        Soft Quota treshold
    smb.quota.used  Quota Used
        Unsigned 64-bit integer
        How much Quota is used by this user
    smb.quota.user.offset  Next Offset
        Unsigned 32-bit integer
        Relative offset to next user quota structure
    smb.remaining  Remaining
        Unsigned 32-bit integer
        Remaining number of bytes
    smb.request.mask  Request Mask
        Unsigned 32-bit integer
        Connectionless mode mask
    smb.reserved  Reserved
        Byte array
        Reserved bytes, must be zero
    smb.response.mask  Response Mask
        Unsigned 32-bit integer
        Connectionless mode mask
    smb.response_in  Response in
        Unsigned 32-bit integer
        The response to this packet is in this packet
    smb.response_to  Response to
        Unsigned 32-bit integer
        This packet is a response to the packet in this frame
    smb.resume  Resume Key
        Unsigned 32-bit integer
        Resume Key
    smb.resume.client.cookie  Client Cookie
        Byte array
        Cookie, must not be modified by the server
    smb.resume.find_id  Find ID
        Unsigned 8-bit integer
        Handle for Find operation
    smb.resume.key_len  Resume Key Length
        Unsigned 16-bit integer
        Resume Key length
    smb.resume.server.cookie  Server Cookie
        Byte array
        Cookie, must not be modified by the client
    smb.rfid  Root FID
        Unsigned 32-bit integer
        Open is relative to this FID (if nonzero)
    smb.rm.read  Read Raw
        Boolean
        Is Read Raw supported?
    smb.rm.write  Write Raw
        Boolean
        Is Write Raw supported?
    smb.sc  Setup Count
        Unsigned 8-bit integer
        Number of setup words in this buffer
    smb.sd.length  SD Length
        Unsigned 32-bit integer
        Total length of security descriptor
    smb.search.attribute.archive  Archive
        Boolean
        ARCHIVE search attribute
    smb.search.attribute.directory  Directory
        Boolean
        DIRECTORY search attribute
    smb.search.attribute.hidden  Hidden
        Boolean
        HIDDEN search attribute
    smb.search.attribute.read_only  Read Only
        Boolean
        READ ONLY search attribute
    smb.search.attribute.system  System
        Boolean
        SYSTEM search attribute
    smb.search.attribute.volume  Volume ID
        Boolean
        VOLUME ID search attribute
    smb.search_count  Search Count
        Unsigned 16-bit integer
        Maximum number of search entries to return
    smb.search_pattern  Search Pattern
        String
        Search Pattern
    smb.sec_desc.revision  Revision
        Unsigned 16-bit integer
        Version of NT Security Descriptor structure
    smb.sec_desc.type.dacl_auto_inherit_req  DACL Auto Inherit Required
        Boolean
        Does this SecDesc have DACL Auto Inherit Required set?
    smb.sec_desc.type.dacl_auto_inherited  DACL Auto Inherited
        Boolean
        Is this DACL auto inherited
    smb.sec_desc.type.dacl_defaulted  DACL Defaulted
        Boolean
        Does this SecDesc have DACL Defaulted?
    smb.sec_desc.type.dacl_present  DACL Present
        Boolean
        Does this SecDesc have DACL present?
    smb.sec_desc.type.dacl_protected  DACL Protected
        Boolean
        Is the DACL structure protected?
    smb.sec_desc.type.group_defaulted  Group Defaulted
        Boolean
        Is Group Defaulted?
    smb.sec_desc.type.owner_defaulted  Owner Defaulted
        Boolean
        Is Owner Defaulted set?
    smb.sec_desc.type.sacl_auto_inherit_req  SACL Auto Inherit Required
        Boolean
        Does this SecDesc have SACL Auto Inherit Required set?
    smb.sec_desc.type.sacl_auto_inherited  SACL Auto Inherited
        Boolean
        Is this SACL auto inherited
    smb.sec_desc.type.sacl_defaulted  SACL Defaulted
        Boolean
        Does this SecDesc have SACL Defaulted?
    smb.sec_desc.type.sacl_present  SACL Present
        Boolean
        Is the SACL present?
    smb.sec_desc.type.sacl_protected  SACL Protected
        Boolean
        Is the SACL structure protected?
    smb.sec_desc.type.self_relative  Self Relative
        Boolean
        Is this SecDesc self relative?
    smb.sec_desc_len  NT Security Descriptor Length
        Unsigned 32-bit integer
        Security Descriptor Length
    smb.security.flags.context_tracking  Context Tracking
        Boolean
        Is security tracking static or dynamic?
    smb.security.flags.effective_only  Effective Only
        Boolean
        Are only enabled or all aspects uf the users SID available?
    smb.security_blob  Security Blob
        Byte array
        Security blob
    smb.security_blob_len  Security Blob Length
        Unsigned 16-bit integer
        Security blob length
    smb.seek_mode  Seek Mode
        Unsigned 16-bit integer
        Seek Mode, what type of seek
    smb.segment  SMB Segment
        No value
        SMB Segment
    smb.segment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    smb.segment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    smb.segment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    smb.segment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    smb.segment.segments  SMB Segments
        No value
        SMB Segments
    smb.segment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    smb.server  Server
        String
        The name of the DC/server
    smb.server_cap.bulk_transfer  Bulk Transfer
        Boolean
        Are Bulk Read and Bulk Write supported?
    smb.server_cap.compressed_data  Compressed Data
        Boolean
        Is compressed data transfer supported?
    smb.server_cap.dfs  Dfs
        Boolean
        Is Dfs supported?
    smb.server_cap.extended_security  Extended Security
        Boolean
        Are Extended security exchanges supported?
    smb.server_cap.infolevel_passthru  Infolevel Passthru
        Boolean
        Is NT information level request passthrough supported?
    smb.server_cap.large_files  Large Files
        Boolean
        Are large files (>4GB) supported?
    smb.server_cap.large_readx  Large ReadX
        Boolean
        Is Large Read andX supported?
    smb.server_cap.large_writex  Large WriteX
        Boolean
        Is Large Write andX supported?
    smb.server_cap.level_2_oplocks  Level 2 Oplocks
        Boolean
        Are Level 2 oplocks supported?
    smb.server_cap.lock_and_read  Lock and Read
        Boolean
        Is Lock and Read supported?
    smb.server_cap.mpx_mode  MPX Mode
        Boolean
        Are Read Mpx and Write Mpx supported?
    smb.server_cap.nt_find  NT Find
        Boolean
        Is NT Find supported?
    smb.server_cap.nt_smbs  NT SMBs
        Boolean
        Are NT SMBs supported?
    smb.server_cap.nt_status  NT Status Codes
        Boolean
        Are NT Status Codes supported?
    smb.server_cap.raw_mode  Raw Mode
        Boolean
        Are Raw Read and Raw Write supported?
    smb.server_cap.reserved  Reserved
        Boolean
        RESERVED
    smb.server_cap.rpc_remote_apis  RPC Remote APIs
        Boolean
        Are RPC Remote APIs supported?
    smb.server_cap.unicode  Unicode
        Boolean
        Are Unicode strings supported?
    smb.server_cap.unix  UNIX
        Boolean
        Are UNIX extensions supported?
    smb.server_date_time  Server Date and Time
        Date/Time stamp
        Current date and time at server
    smb.server_date_time.smb_date  Server Date
        Unsigned 16-bit integer
        Current date at server, SMB_DATE format
    smb.server_date_time.smb_time  Server Time
        Unsigned 16-bit integer
        Current time at server, SMB_TIME format
    smb.server_fid  Server FID
        Unsigned 32-bit integer
        Server unique File ID
    smb.server_guid  Server GUID
        Byte array
        Globally unique identifier for this server
    smb.server_timezone  Time Zone
        Signed 16-bit integer
        Current timezone at server.
    smb.service  Service
        String
        Service name
    smb.session_key  Session Key
        Unsigned 32-bit integer
        Unique token identifying this session
    smb.setup.action.guest  Guest
        Boolean
        Client logged in as GUEST?
    smb.share.access.delete  Delete
        Boolean
    smb.share.access.read  Read
        Boolean
        Can the object be shared for reading?
    smb.share.access.write  Write
        Boolean
        Can the object be shared for write?
    smb.short_file  Short File Name
        String
        Short (8.3) File Name
    smb.short_file_name_len  Short File Name Len
        Unsigned 32-bit integer
        Length of Short (8.3) File Name
    smb.sid  SID
        Unsigned 16-bit integer
        SID: Search ID, handle for find operations
    smb.sid.num_auth  Num Auth
        Unsigned 8-bit integer
        Number of authorities for this SID
    smb.sid.revision  Revision
        Unsigned 8-bit integer
        Version of SID structure
    smb.sm.mode  Mode
        Boolean
        User or Share security mode?
    smb.sm.password  Password
        Boolean
        Encrypted or plaintext passwords?
    smb.sm.sig_required  Sig Req
        Boolean
        Are security signatures required?
    smb.sm.signatures  Signatures
        Boolean
        Are security signatures enabled?
    smb.storage_type  Storage Type
        Unsigned 32-bit integer
        Type of storage
    smb.stream_name  Stream Name
        String
        Name of the stream
    smb.stream_name_len  Stream Name Length
        Unsigned 32-bit integer
        Length of stream name
    smb.stream_size  Stream Size
        Unsigned 64-bit integer
        Size of the stream in number of bytes
    smb.system.time  System Time
        Date/Time stamp
        System Time
    smb.tdc  Total Data Count
        Unsigned 32-bit integer
        Total number of data bytes
    smb.tid  Tree ID
        Unsigned 16-bit integer
        Tree ID
    smb.time  Time from request
        Time duration
        Time between Request and Response for SMB cmds
    smb.timeout  Timeout
        Unsigned 32-bit integer
        Timeout in miliseconds
    smb.total_data_len  Total Data Length
        Unsigned 16-bit integer
        Total length of data
    smb.tpc  Total Parameter Count
        Unsigned 32-bit integer
        Total number of parameter bytes
    smb.trans2.cmd  Subcommand
        Unsigned 16-bit integer
        Subcommand for TRANSACTION2
    smb.trans_name  Transaction Name
        String
        Name of transaction
    smb.transaction.flags.dtid  Disconnect TID
        Boolean
        Disconnect TID?
    smb.transaction.flags.owt  One Way Transaction
        Boolean
        One Way Transaction (no response)?
    smb.uid  User ID
        Unsigned 16-bit integer
        User ID
    smb.unicode_password  Unicode Password
        Byte array
        Unicode Password
    smb.unicode_pwlen  Unicode Password Length
        Unsigned 16-bit integer
        Length of Unicode password
    smb.units  Total Units
        Unsigned 16-bit integer
        Total number of units at server
    smb.unknown  Unknown Data
        Byte array
        Unknown Data. Should be implemented by someone
    smb.vc  VC Number
        Unsigned 16-bit integer
        VC Number
    smb.volume.label  Label
        String
        Volume label
    smb.volume.label.len  Label Length
        Unsigned 32-bit integer
        Length of volume label
    smb.volume.serial  Volume Serial Number
        Unsigned 32-bit integer
        Volume serial number
    smb.wct  Word Count (WCT)
        Unsigned 8-bit integer
        Word Count, count of parameter words
    smb.write.mode.connectionless  Connectionless
        Boolean
        Connectionless mode requested?
    smb.write.mode.message_start  Message Start
        Boolean
        Is this the start of a message?
    smb.write.mode.raw  Write Raw
        Boolean
        Use WriteRawNamedPipe?
    smb.write.mode.return_remaining  Return Remaining
        Boolean
        Return remaining data responses?
    smb.write.mode.write_through  Write Through
        Boolean
        Write through mode requested?

SMB MailSlot Protocol (mailslot)

    mailslot.class  Class
        Unsigned 16-bit integer
        MAILSLOT Class of transaction
    mailslot.name  Mailslot Name
        String
        MAILSLOT Name of mailslot
    mailslot.opcode  Opcode
        Unsigned 16-bit integer
        MAILSLOT OpCode
    mailslot.priority  Priority
        Unsigned 16-bit integer
        MAILSLOT Priority of transaction
    mailslot.size  Size
        Unsigned 16-bit integer
        MAILSLOT Total size of mail data

SMB Pipe Protocol (pipe)

    pipe.fragment  Fragment
        No value
        Pipe Fragment
    pipe.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    pipe.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    pipe.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    pipe.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    pipe.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    pipe.fragments  Fragments
        No value
        Pipe Fragments
    pipe.function  Function
        Unsigned 16-bit integer
        SMB Pipe Function Code
    pipe.getinfo.current_instances  Current Instances
        Unsigned 8-bit integer
        Current number of instances
    pipe.getinfo.info_level  Information Level
        Unsigned 16-bit integer
        Information level of information to return
    pipe.getinfo.input_buffer_size  Input Buffer Size
        Unsigned 16-bit integer
        Actual size of buffer for incoming (client) I/O
    pipe.getinfo.maximum_instances  Maximum Instances
        Unsigned 8-bit integer
        Maximum allowed number of instances
    pipe.getinfo.output_buffer_size  Output Buffer Size
        Unsigned 16-bit integer
        Actual size of buffer for outgoing (server) I/O
    pipe.getinfo.pipe_name  Pipe Name
        String
        Name of pipe
    pipe.getinfo.pipe_name_length  Pipe Name Length
        Unsigned 8-bit integer
        Length of pipe name
    pipe.peek.available_bytes  Available Bytes
        Unsigned 16-bit integer
        Total number of bytes available to be read from the pipe
    pipe.peek.remaining_bytes  Bytes Remaining
        Unsigned 16-bit integer
        Total number of bytes remaining in the message at the head of the pipe
    pipe.peek.status  Pipe Status
        Unsigned 16-bit integer
        Pipe status
    pipe.priority  Priority
        Unsigned 16-bit integer
        SMB Pipe Priority
    pipe.write_raw.bytes_written  Bytes Written
        Unsigned 16-bit integer
        Number of bytes written to the pipe

SNA-over-Ethernet (snaeth)

    snaeth_len  Length
        Unsigned 16-bit integer
        Length of LLC payload

SNMP Multiplex Protocol (smux)

SPRAY (spray)

    spray.clock  clock
        No value
        Clock
    spray.counter  counter
        Unsigned 32-bit integer
        Counter
    spray.sec  sec
        Unsigned 32-bit integer
        Seconds
    spray.sprayarr  Data
        Byte array
        Sprayarr data
    spray.usec  usec
        Unsigned 32-bit integer
        Microseconds

SS7 SCCP-User Adaptation Layer (sua)

    sua.affected_point_code.mask  Mask
        Unsigned 8-bit integer
    sua.affected_pointcode.dpc  Affected DPC
        Unsigned 24-bit integer
    sua.asp_capabilities.a_bit  Protocol Class 3
        Boolean
    sua.asp_capabilities.b_bit  Protocol Class 2
        Boolean
    sua.asp_capabilities.c_bit  Protocol Class 1
        Boolean
    sua.asp_capabilities.d_bit  Protocol Class 0
        Boolean
    sua.asp_capabilities.interworking  Interworking
        Unsigned 8-bit integer
    sua.asp_capabilities.reserved  Reserved
        Byte array
    sua.asp_capabilities.reserved_bits  Reserved Bits
        Unsigned 8-bit integer
    sua.asp_identifier.id  ASP Identifier
        Unsigned 32-bit integer
    sua.cause_user.cause  Cause
        Unsigned 16-bit integer
    sua.cause_user.user  User
        Unsigned 16-bit integer
    sua.congestion_level.level  Congestion Level
        Unsigned 32-bit integer
    sua.correlation_id.identifier  Correlation ID
        Unsigned 32-bit integer
    sua.credit.credit  Credit
        Unsigned 32-bit integer
    sua.data.padding  Padding
        Byte array
    sua.deregistration_result.deregistration_status  Deregistration Status
        Unsigned 32-bit integer
    sua.deregistration_result.routing_context  Routing Context
        Unsigned 32-bit integer
    sua.destination_address.gt_bit  Include GT
        Boolean
    sua.destination_address.pc_bit  Include PC
        Boolean
    sua.destination_address.reserved_bits  Reserved Bits
        Unsigned 16-bit integer
    sua.destination_address.routing_indicator  Routing Indicator
        Unsigned 16-bit integer
    sua.destination_address.ssn_bit  Include SSN
        Boolean
    sua.destination_reference_number  Destination Reference Number
        Unsigned 32-bit integer
    sua.diagnostic_information.info  Diagnostic Information
        Byte array
    sua.diagnostic_information.padding  Padding
        Byte array
    sua.drn_label.end  End
        Unsigned 8-bit integer
    sua.drn_label.start  Start
        Unsigned 8-bit integer
    sua.drn_label.value  Label Value
        Unsigned 16-bit integer
    sua.error_code.code  Error code
        Unsigned 32-bit integer
    sua.global_title.nature_of_address  Nature of Address
        Unsigned 8-bit integer
    sua.global_title.number_of_digits  Number of Digits
        Unsigned 8-bit integer
    sua.global_title.numbering_plan  Numbering Plan
        Unsigned 8-bit integer
    sua.global_title.padding  Padding
        Byte array
    sua.global_title.signals  Global Title
        Byte array
    sua.global_title.translation_type  Translation Type
        Unsigned 8-bit integer
    sua.heartbeat.data  Heratbeat Data
        Byte array
    sua.heartbeat.padding  Padding
        Byte array
    sua.hostname.name  Hostname
        String
    sua.hostname.padding  Padding
        Byte array
    sua.importance.inportance  Importance
        Unsigned 8-bit integer
    sua.importance.reserved  Reserved
        Byte array
    sua.info_string.padding  Padding
        Byte array
    sua.info_string.string  Info string
        String
    sua.ipv4.address  IP Version 4 address
        IPv4 address
    sua.ipv6.address  IP Version 6 address
        IPv6 address
    sua.light.error_code  Error Code
        Unsigned 16-bit integer
    sua.light.message_length  Message length
        Unsigned 32-bit integer
    sua.light.message_type  Message Type
        Unsigned 16-bit integer
    sua.light.spare_1  Spare
        Unsigned 8-bit integer
    sua.light.spare_2  Spare
        Unsigned 16-bit integer
    sua.light.subsystem_number  Subsystem number
        Unsigned 16-bit integer
    sua.light.version  Version
        Unsigned 8-bit integer
    sua.message_class  Message Class
        Unsigned 8-bit integer
    sua.message_length  Message Length
        Unsigned 32-bit integer
    sua.message_priority.priority  Message Priority
        Unsigned 8-bit integer
    sua.message_priority.reserved  Reserved
        Byte array
    sua.message_type  Message Type
        Unsigned 8-bit integer
    sua.network_appearance.appearance  Network Appearance
        Unsigned 32-bit integer
    sua.parameter_length  Parameter Length
        Unsigned 16-bit integer
    sua.parameter_padding  Padding
        Byte array
    sua.parameter_tag  Parameter Tag
        Unsigned 16-bit integer
    sua.parameter_value  Parameter Value
        Byte array
    sua.point_code.mask  Mask
        Unsigned 8-bit integer
    sua.point_code.pc  Point Code
        Unsigned 24-bit integer
    sua.protcol_class.reserved  Reserved
        Byte array
    sua.protocol_class.class  Protocol Class
        Unsigned 8-bit integer
    sua.protocol_class.return_on_error_bit  Return On Error Bit
        Boolean
    sua.receive_sequence_number.number  Receive Sequence Number P(R)
        Unsigned 8-bit integer
    sua.receive_sequence_number.reserved  Reserved
        Byte array
    sua.receive_sequence_number.spare_bit  Spare Bit
        Boolean
    sua.registration_result.local_routing_key_identifier  Local Routing Key Identifier
        Unsigned 32-bit integer
    sua.registration_result.registration_status  Registration Status
        Unsigned 32-bit integer
    sua.registration_result.routing_context  Routing Context
        Unsigned 32-bit integer
    sua.reserved  Reserved
        Byte array
    sua.routing_context.context  Routing context
        Unsigned 32-bit integer
    sua.routing_key.identifier  Local Routing Key Identifier
        Unsigned 32-bit integer
    sua.sccp_cause.reserved  Reserved
        Byte array
    sua.sccp_cause.type  Cause Type
        Unsigned 8-bit integer
    sua.sccp_cause.value  Cause Value
        Unsigned 8-bit integer
    sua.segmentation.first_bit  First Segment Bit
        Boolean
    sua.segmentation.number_of_remaining_segments  Number of Remaining Segments
        Unsigned 8-bit integer
    sua.segmentation.reference  Segmentation Reference
        Unsigned 24-bit integer
    sua.sequence_control.sequence_control  Sequence Control
        Unsigned 32-bit integer
    sua.sequence_number.more_data_bit  More Data Bit
        Boolean
    sua.sequence_number.receive_sequence_number  Receive Sequence Number P(R)
        Unsigned 8-bit integer
    sua.sequence_number.reserved  Reserved
        Byte array
    sua.sequence_number.sent_sequence_number  Sent Sequence Number P(S)
        Unsigned 8-bit integer
    sua.sequence_number.spare_bit  Spare Bit
        Boolean
    sua.smi.reserved  Reserved
        Byte array
    sua.smi.smi  SMI
        Unsigned 8-bit integer
    sua.source_address.gt_bit  Include GT
        Boolean
    sua.source_address.pc_bit  Include PC
        Boolean
    sua.source_address.reserved_bits  Reserved Bits
        Unsigned 16-bit integer
    sua.source_address.routing_indicator  Routing Indicator
        Unsigned 16-bit integer
    sua.source_address.ssn_bit  Include SSN
        Boolean
    sua.source_reference_number.number  Source Reference Number
        Unsigned 32-bit integer
    sua.ss7_hop_counter.counter  SS7 Hop Counter
        Unsigned 8-bit integer
    sua.ss7_hop_counter.reserved  Reserved
        Byte array
    sua.ssn.number  Subsystem Number
        Unsigned 8-bit integer
    sua.ssn.reserved  Reserved
        Byte array
    sua.status.info  Status info
        Unsigned 16-bit integer
    sua.status.type  Status type
        Unsigned 16-bit integer
    sua.tid_label.end  End
        Unsigned 8-bit integer
    sua.tid_label.start  Start
        Unsigned 8-bit integer
    sua.tid_label.value  Label Value
        Unsigned 16-bit integer
    sua.traffic_mode_type.type  Traffic mode Type
        Unsigned 32-bit integer
    sua.version  Version
        Unsigned 8-bit integer

SSCOP (sscop)

Secure Socket Layer (ssl)

    ssl.alert_message  Alert Message
        No value
        Alert message
    ssl.alert_message.desc  Description
        Unsigned 8-bit integer
        Alert message description
    ssl.alert_message.level  Level
        Unsigned 8-bit integer
        Alert message level
    ssl.app_data  Application Data
        No value
        Payload is application data
    ssl.change_cipher_spec  Change Cipher Spec Message
        No value
        Signals a change in cipher specifications
    ssl.handshake  Handshake Protocol
        No value
        Handshake protocol message
    ssl.handshake.cert_type  Certificate type
        Unsigned 8-bit integer
        Certificate type
    ssl.handshake.cert_types  Certificate types
        No value
        List of certificate types
    ssl.handshake.cert_types_count  Certificate types count
        Unsigned 8-bit integer
        Count of certificate types
    ssl.handshake.certificate  Certificate
        Byte array
        Certificate
    ssl.handshake.certificate_length  Certificate Length
        Unsigned 24-bit integer
        Length of certificate
    ssl.handshake.certificates  Certificates
        No value
        List of certificates
    ssl.handshake.certificates_length  Certificates Length
        Unsigned 24-bit integer
        Length of certificates field
    ssl.handshake.challenge  Challenge
        No value
        Challenge data used to authenticate server
    ssl.handshake.challenge_length  Challenge Length
        Unsigned 16-bit integer
        Length of challenge field
    ssl.handshake.cipher_spec_len  Cipher Spec Length
        Unsigned 16-bit integer
        Length of cipher specs field
    ssl.handshake.cipher_suites_length  Cipher Suites Length
        Unsigned 16-bit integer
        Length of cipher suites field
    ssl.handshake.cipherspec  Cipher Spec
        Unsigned 24-bit integer
        Cipher specification
    ssl.handshake.ciphersuite  Cipher Suite
        Unsigned 16-bit integer
        Cipher suite
    ssl.handshake.ciphersuites  Cipher Suites
        No value
        List of cipher suites supported by client
    ssl.handshake.clear_key_data  Clear Key Data
        No value
        Clear portion of MASTER-KEY
    ssl.handshake.clear_key_length  Clear Key Data Length
        Unsigned 16-bit integer
        Length of clear key data
    ssl.handshake.comp_method  Compression Method
        Unsigned 8-bit integer
        Compression Method
    ssl.handshake.comp_methods  Compression Methods
        No value
        List of compression methods supported by client
    ssl.handshake.comp_methods_length  Compression Methods Length
        Unsigned 8-bit integer
        Length of compression methods field
    ssl.handshake.connection_id  Connection ID
        No value
        Server's challenge to client
    ssl.handshake.connection_id_length  Connection ID Length
        Unsigned 16-bit integer
        Length of connection ID
    ssl.handshake.dname  Distinguished Name
        Byte array
        Distinguished name of a CA that server trusts
    ssl.handshake.dname_len  Distinguished Name Length
        Unsigned 16-bit integer
        Length of distinguished name
    ssl.handshake.dnames  Distinguished Names
        No value
        List of CAs that server trusts
    ssl.handshake.dnames_len  Distinguished Names Length
        Unsigned 16-bit integer
        Length of list of CAs that server trusts
    ssl.handshake.encrypted_key  Encrypted Key
        No value
        Secret portion of MASTER-KEY encrypted to server
    ssl.handshake.encrypted_key_length  Encrypted Key Data Length
        Unsigned 16-bit integer
        Length of encrypted key data
    ssl.handshake.key_arg  Key Argument
        No value
        Key Argument (e.g., Initialization Vector)
    ssl.handshake.key_arg_length  Key Argument Length
        Unsigned 16-bit integer
        Length of key argument
    ssl.handshake.length  Length
        Unsigned 24-bit integer
        Length of handshake message
    ssl.handshake.md5_hash  MD5 Hash
        No value
        Hash of messages, master_secret, etc.
    ssl.handshake.random  Random.bytes
        No value
        Random challenge used to authenticate server
    ssl.handshake.random_time  Random.gmt_unix_time
        Date/Time stamp
        Unix time field of random structure
    ssl.handshake.session_id  Session ID
        Byte array
        Identifies the SSL session, allowing later resumption
    ssl.handshake.session_id_hit  Session ID Hit
        Boolean
        Did the server find the client's Session ID?
    ssl.handshake.session_id_length  Session ID Length
        Unsigned 8-bit integer
        Length of session ID field
    ssl.handshake.sha_hash  SHA-1 Hash
        No value
        Hash of messages, master_secret, etc.
    ssl.handshake.type  Handshake Message Type
        Unsigned 8-bit integer
        SSLv2 handshake message type
    ssl.handshake.verify_data  Verify Data
        No value
        Opaque verification data
    ssl.handshake.version  Version
        Unsigned 16-bit integer
        Maximum version supported by client
    ssl.pct_handshake.type  Handshake Message Type
        Unsigned 8-bit integer
        PCT handshake message type
    ssl.record  Record Layer
        No value
        Record layer
    ssl.record.content_type  Content Type
        Unsigned 8-bit integer
        Content type
    ssl.record.is_escape  Is Escape
        Boolean
        Indicates a security escape
    ssl.record.length  Length
        Unsigned 16-bit integer
        Length of SSL record data
    ssl.record.padding_length  Padding Length
        Unsigned 8-bit integer
        Length of padding at end of record
    ssl.record.version  Version
        Unsigned 16-bit integer
        Record layer version.

Sequenced Packet eXchange (spx)

    spx.ack  Acknowledgment Number
        Unsigned 16-bit integer
    spx.alloc  Allocation Number
        Unsigned 16-bit integer
    spx.ctl  Connection Control
        Unsigned 8-bit integer
    spx.dst  Destination Connection ID
        Unsigned 16-bit integer
    spx.seq  Sequence Number
        Unsigned 16-bit integer
    spx.src  Source Connection ID
        Unsigned 16-bit integer
    spx.type  Datastream type
        Unsigned 8-bit integer

Service Advertisement Protocol (ipxsap)

    ipxsap.request  Request
        Boolean
        TRUE if SAP request
    ipxsap.response  Response
        Boolean
        TRUE if SAP response

Service Location Protocol (srvloc)

    srvloc.err  Error Code
        Unsigned 16-bit integer
    srvloc.flags  Flags
        Unsigned 8-bit integer
    srvloc.function  Function
        Unsigned 8-bit integer
    srvloc.version  Version
        Unsigned 8-bit integer

Session Announcement Protocol (sap)

    sap.auth  Authentication data
        No value
        Auth data
    sap.auth.flags  Authentication data flags
        Unsigned 8-bit integer
        Auth flags
    sap.auth.flags.p  Padding Bit
        Boolean
        Compression
    sap.auth.flags.t  Authentication Type
        Unsigned 8-bit integer
        Auth type
    sap.auth.flags.v  Version Number
        Unsigned 8-bit integer
        Version
    sap.flags  Flags
        Unsigned 8-bit integer
        Bits in the beginning of the SAP header
    sap.flags.a  Address Type
        Boolean
        Originating source address type
    sap.flags.c  Compression Bit
        Boolean
        Compression
    sap.flags.e  Encryption Bit
        Boolean
        Encryption
    sap.flags.r  Reserved
        Boolean
        Reserved
    sap.flags.t  Message Type
        Boolean
        Announcement type
    sap.flags.v  Version Number
        Unsigned 8-bit integer
        3 bit version field in the SAP header

Session Description Protocol (sdp)

    sdp.bandwidth  Bandwidth Information (b)
        String
        Bandwidth Information
    sdp.bandwidth.modifier  Bandwidth Modifier
        String
        Bandwidth Modifier
    sdp.bandwidth.value  Bandwidth Value
        String
        Bandwidth Value
    sdp.connection_info  Connection Information (c)
        String
        Connection Information
    sdp.connection_info.address  Connection Address
        String
        Connection Address
    sdp.connection_info.address_type  Connection Address Type
        String
        Connection Address Type
    sdp.connection_info.network_type  Connection Network Type
        String
        Connection Network Type
    sdp.connection_info.num_addr  Connection Number of Addresses
        String
        Connection Number of Addresses
    sdp.connection_info.ttl  Connection TTL
        String
        Connection TTL
    sdp.email  E-mail Address (e)
        String
        E-mail Address
    sdp.encryption_key  Encryption Key (k)
        String
        Encryption Key
    sdp.encryption_key.data  Key Data
        String
        Data
    sdp.encryption_key.type  Key Type
        String
        Type
    sdp.invalid  Invalid line
        String
        Invalid line
    sdp.media  Media Description, name and address (m)
        String
        Media Description, name and address
    sdp.media.format  Media Format
        String
        Media Format
    sdp.media.media  Media Type
        String
        Media Type
    sdp.media.port  Media Port
        String
        Media Port
    sdp.media.portcount  Media Port Count
        String
        Media Port Count
    sdp.media.proto  Media Proto
        String
        Media Proto
    sdp.media_attr  Media Attribute (a)
        String
        Media Attribute
    sdp.media_attribute.field  Media Attribute Fieldname
        String
        Media Attribute Fieldname
    sdp.media_attribute.value  Media Attribute Value
        String
        Media Attribute Value
    sdp.media_title  Media Title (i)
        String
        Media Title
    sdp.owner  Owner/Creator, Session Id (o)
        String
        Owner/Creator, Session Id
    sdp.owner.address  Owner Address
        String
        Owner Address
    sdp.owner.address_type  Owner Address Type
        String
        Owner Address Type
    sdp.owner.network_type  Owner Network Type
        String
        Owner Network Type
    sdp.owner.sessionid  Session ID
        String
        Session ID
    sdp.owner.username  Owner Username
        String
        Owner Username
    sdp.owner.version  Session Version
        String
        Session Version
    sdp.phone  Phone Number (p)
        String
        Phone Number
    sdp.repeat_time  Repeat Time (r)
        String
        Repeat Time
    sdp.repeat_time.duration  Repeat Duration
        String
        Repeat Duration
    sdp.repeat_time.interval  Repeat Interval
        String
        Repeat Interval
    sdp.repeat_time.offset  Repeat Offset
        String
        Repeat Offset
    sdp.session_attr  Session Attribute (a)
        String
        Session Attribute
    sdp.session_attr.field  Session Attribute Fieldname
        String
        Session Attribute Fieldname
    sdp.session_attr.value  Session Attribute Value
        String
        Session Attribute Value
    sdp.session_info  Session Information (i)
        String
        Session Information
    sdp.session_name  Session Name (s)
        String
        Session Name
    sdp.time  Time Description, active time (t)
        String
        Time Description, active time
    sdp.time.start  Session Start Time
        String
        Session Start Time
    sdp.time.stop  Session Stop Time
        String
        Session Stop Time
    sdp.timezone  Time Zone Adjustments (z)
        String
        Time Zone Adjustments
    sdp.timezone.offset  Timezone Offset
        String
        Timezone Offset
    sdp.timezone.time  Timezone Time
        String
        Timezone Time
    sdp.unknown  Unknown
        String
        Unknown
    sdp.uri  URI of Description (u)
        String
        URI of Description
    sdp.version  Session Description Protocol Version (v)
        String
        Session Description Protocol Version

Session Initiation Protocol (sip)

    sip.msg_hdr  Message Header
        No value
        Message Header in SIP message

Short Frame (short)

Short Message Peer to Peer (smpp)

    smpp.SC_interface_version  SMSC-supported version
        String
        Version of SMPP interface supported by the SMSC.
    smpp.additional_status_info_text  Information
        String
        Description of the meaning of a response PDU.
    smpp.addr_npi  Numbering plan indicator
        Unsigned 8-bit integer
        Gives the numbering plan this address belongs to.
    smpp.addr_ton  Type of number
        Unsigned 8-bit integer
        Indicates the type of number, given in the address.
    smpp.address_range  Address
        String
        Given address or address range.
    smpp.alert_on_message_delivery  Alert on delivery
        No value
        Instructs the handset to alert user on message delivery.
    smpp.callback_num  Callback number
        No value
        Associates a call back number with the message.
    smpp.callback_num.pres  Presentation
        Unsigned 8-bit integer
        Controls the presentation indication.
    smpp.callback_num.scrn  Screening   
        Unsigned 8-bit integer
        Controls screening of the callback-number.
    smpp.callback_num_atag  Callback number - alphanumeric display tag
        No value
        Associates an alphanumeric display with call back number.
    smpp.command_id  Operation 
        Unsigned 32-bit integer
        Defines the SMPP PDU.
    smpp.command_length  Length    
        Unsigned 32-bit integer
        Total length of the SMPP PDU.
    smpp.command_status  Result    
        Unsigned 32-bit integer
        Indicates success or failure of the SMPP request.
    smpp.data_coding  Data coding
        Unsigned 8-bit integer
        Defines the encoding scheme of the message.
    smpp.delivery_failure_reason  Delivery failure reason
        Unsigned 8-bit integer
        Indicates the reason for a failed delivery attempt.
    smpp.dest_addr_npi  Numbering plan indicator (recipient)
        Unsigned 8-bit integer
        Gives recipient numbering plan this address belongs to.
    smpp.dest_addr_subunit  Subunit destination
        Unsigned 8-bit integer
        Subunit address within mobile to route message to.
    smpp.dest_addr_ton  Type of number (recipient)
        Unsigned 8-bit integer
        Indicates recipient type of number, given in the address.
    smpp.dest_bearer_type  Destination bearer
        Unsigned 8-bit integer
        Desired bearer for delivery of message.
    smpp.dest_network_type  Destination network
        Unsigned 8-bit integer
        Network associated with the destination address.
    smpp.dest_telematics_id  Telematic interworking (dest)
        Unsigned 16-bit integer
        Telematic interworking to be used for message delivery.
    smpp.destination_addr  Recipient address
        String
        Address of SME receiving this message.
    smpp.destination_port  Destination port
        Unsigned 16-bit integer
        Application port associated with the destination of the message.
    smpp.display_time  Display time
        Unsigned 8-bit integer
        Associates a display time with the message on the handset.
    smpp.dl_name  Distr. list name
        String
        The name of the distribution list.
    smpp.dlist  Destination list
        No value
        The list of destinations for a short message.
    smpp.dlist_resp  Unsuccesfull delivery list
        No value
        The list of unsuccesfull deliveries to destinations.
    smpp.dpf_result  Delivery pending set?
        Unsigned 8-bit integer
        Indicates whether Delivery Pending Flag was set.
    smpp.error_code  Error code
        Unsigned 8-bit integer
        Network specific error code defining reason for failure.
    smpp.error_status_code  Status
        Unsigned 32-bit integer
        Indicates success/failure of request for this address.
    smpp.esm.submit.features  GSM features  
        Unsigned 8-bit integer
        GSM network specific features.
    smpp.esm.submit.msg_mode  Messaging mode
        Unsigned 8-bit integer
        Mode attribute for this message.
    smpp.esm.submit.msg_type  Message type  
        Unsigned 8-bit integer
        Type attribute for this message.
    smpp.esme_addr  ESME address
        String
        Address of ESME originating this message.
    smpp.esme_addr_npi  Numbering plan indicator (ESME)
        Unsigned 8-bit integer
        Gives the numbering plan this address belongs to.
    smpp.esme_addr_ton  Type of number (ESME)
        Unsigned 8-bit integer
        Indicates recipient type of number, given in the address.
    smpp.final_date  Final date
        Date/Time stamp
        Date-time when the queried message reached a final state.
    smpp.final_date_r  Final date
        Time duration
        Date-time when the queried message reached a final state.
    smpp.interface_version  Version (if)
        String
        Version of SMPP interface supported.
    smpp.its_reply_type  Reply method
        Unsigned 8-bit integer
        Indicates the handset reply method on message receipt.
    smpp.its_session.ind  Session indicator
        Unsigned 8-bit integer
        Indicates whether this message is end of conversation.
    smpp.its_session.number  Session number
        Unsigned 8-bit integer
        Session number of interactive teleservice.
    smpp.its_session.sequence  Sequence number  
        Unsigned 8-bit integer
        Sequence number of the dialogue unit.
    smpp.language_indicator  Language
        Unsigned 8-bit integer
        Indicates the language of the short message.
    smpp.message  Message
        No value
        The actual message or data.
    smpp.message_id  Message id.
        String
        Identifier of the submitted short message.
    smpp.message_payload  Payload
        No value
        Short message user data.
    smpp.message_state  Message state
        Unsigned 8-bit integer
        Specifies the status of the queried short message.
    smpp.more_messages_to_send  More messages?
        Unsigned 8-bit integer
        Indicates more messages pending for the same destination.
    smpp.ms_availability_status  Availability status
        Unsigned 8-bit integer
        Indicates the availability state of the handset.
    smpp.ms_validity  Validity info
        Unsigned 8-bit integer
        Associates validity info with the message on the handset.
    smpp.msg_wait.ind  Indication
        Unsigned 8-bit integer
        Indicates to the handset that a message is waiting.
    smpp.msg_wait.type  Type      
        Unsigned 8-bit integer
        Indicates type of message that is waiting.
    smpp.network_error.code  Error code
        Unsigned 16-bit integer
        Gives the actual network error code.
    smpp.network_error.type  Error type
        Unsigned 8-bit integer
        Indicates the network type.
    smpp.number_of_messages  Number of messages
        Unsigned 8-bit integer
        Indicates number of messages stored in a mailbox.
    smpp.opt_param  Optional parameters
        No value
        The list of optional parameters in this operation.
    smpp.password  Password
        String
        Password used for authentication.
    smpp.payload_type  Payload
        Unsigned 8-bit integer
        PDU type contained in the message payload.
    smpp.priority_flag  Priority level
        Unsigned 8-bit integer
        The priority level of the short message.
    smpp.privacy_indicator  Privacy indicator
        Unsigned 8-bit integer
        Indicates the privacy level of the message.
    smpp.protocol_id  Protocol id.
        Unsigned 8-bit integer
        Protocol identifier according GSM 03.40.
    smpp.qos_time_to_live  Validity period
        Unsigned 32-bit integer
        Number of seconds to retain message before expiry.
    smpp.receipted_message_id  SMSC identifier
        String
        SMSC handle of the message being received.
    smpp.regdel.acks  Message type      
        Unsigned 8-bit integer
        SME acknowledgement request.
    smpp.regdel.notif  Intermediate notif
        Unsigned 8-bit integer
        Intermediate notification request.
    smpp.regdel.receipt  Delivery receipt  
        Unsigned 8-bit integer
        SMSC delivery receipt request.
    smpp.replace_if_present_flag  Replace           
        Unsigned 8-bit integer
        Replace the short message with this one or not.
    smpp.reserved_op  Optional parameter - Reserved
        No value
        An optional parameter that is reserved in this version.
    smpp.sar_msg_ref_num  SAR reference number
        Unsigned 16-bit integer
        Reference number for a concatenated short message.
    smpp.sar_segment_seqnum  SAR sequence number
        Unsigned 8-bit integer
        Segment number within a concatenated short message.
    smpp.sar_total_segments  SAR size
        Unsigned 16-bit integer
        Number of segments of a concatenated short message.
    smpp.schedule_delivery_time  Scheduled delivery time
        Date/Time stamp
        Scheduled time for delivery of short message.
    smpp.schedule_delivery_time_r  Scheduled delivery time
        Time duration
        Scheduled time for delivery of short message.
    smpp.sequence_number  Sequence #
        Unsigned 32-bit integer
        A number to correlate requests with responses.
    smpp.service_type  Service type
        String
        SMS application service associated with the message.
    smpp.set_dpf  Request DPF set
        Unsigned 8-bit integer
        Request to set the DPF for certain failure scenario's.
    smpp.sm_default_msg_id  Predefined message
        Unsigned 8-bit integer
        Index of a predefined ('canned') short message.
    smpp.sm_length  Message length
        Unsigned 8-bit integer
        Length of the message content.
    smpp.source_addr  Originator address
        String
        Address of SME originating this message.
    smpp.source_addr_npi  Numbering plan indicator (originator)
        Unsigned 8-bit integer
        Gives originator numbering plan this address belongs to.
    smpp.source_addr_subunit  Subunit origin
        Unsigned 8-bit integer
        Subunit address within mobile that generated the message.
    smpp.source_addr_ton  Type of number (originator)
        Unsigned 8-bit integer
        Indicates originator type of number, given in the address.
    smpp.source_bearer_type  Originator bearer
        Unsigned 8-bit integer
        Bearer over which the message originated.
    smpp.source_network_type  Originator network
        Unsigned 8-bit integer
        Network associated with the originator address.
    smpp.source_port  Source port
        Unsigned 16-bit integer
        Application port associated with the source of the message.
    smpp.source_telematics_id  Telematic interworking (orig)
        Unsigned 16-bit integer
        Telematic interworking used for message submission.
    smpp.system_id  System ID
        String
        Identifies a system.
    smpp.system_type  System type
        String
        Categorises the system.
    smpp.user_message_reference  Message reference
        Unsigned 16-bit integer
        Reference to the message, assigned by the user.
    smpp.user_response_code  Application response code
        Unsigned 8-bit integer
        A response code set by the user.
    smpp.ussd_service_op  USSD service operation
        Unsigned 8-bit integer
        Indicates the USSD service operation.
    smpp.validity_period  Validity period
        Date/Time stamp
        Validity period of this message.
    smpp.validity_period_r  Validity period
        Time duration
        Validity period of this message.
    smpp.vendor_op  Optional parameter - Vendor-specific
        No value
        A supplied optional parameter specific to an SMSC-vendor.

Signalling Connection Control Part (sccp)

    sccp.called.cluster  PC Cluster
        Unsigned 24-bit integer
    sccp.called.digits  GT Digits
        String
    sccp.called.es  Encoding Scheme
        Unsigned 8-bit integer
    sccp.called.gti  Global Title Indicator
        Unsigned 8-bit integer
    sccp.called.member  PC Member
        Unsigned 24-bit integer
    sccp.called.nai  Nature of Address Indicator
        Unsigned 8-bit integer
    sccp.called.network  PC Network
        Unsigned 24-bit integer
    sccp.called.ni  National Indicator
        Unsigned 8-bit integer
    sccp.called.np  Numbering Plan
        Unsigned 8-bit integer
    sccp.called.oe  Odd/Even Indicator
        Unsigned 8-bit integer
    sccp.called.pc  PC
        Unsigned 16-bit integer
    sccp.called.pci  Point Code Indicator
        Unsigned 8-bit integer
    sccp.called.ri  Routing Indicator
        Unsigned 8-bit integer
    sccp.called.ssn  SubSystem Number
        Unsigned 8-bit integer
    sccp.called.ssni  SubSystem Number Indicator
        Unsigned 8-bit integer
    sccp.called.tt  Translation Type
        Unsigned 8-bit integer
    sccp.calling.cluster  PC Cluster
        Unsigned 24-bit integer
    sccp.calling.digits  GT Digits
        String
    sccp.calling.es  Encoding Scheme
        Unsigned 8-bit integer
    sccp.calling.gti  Global Title Indicator
        Unsigned 8-bit integer
    sccp.calling.member  PC Member
        Unsigned 24-bit integer
    sccp.calling.nai  Nature of Address Indicator
        Unsigned 8-bit integer
    sccp.calling.network  PC Network
        Unsigned 24-bit integer
    sccp.calling.ni  National Indicator
        Unsigned 8-bit integer
    sccp.calling.np  Numbering Plan
        Unsigned 8-bit integer
    sccp.calling.oe  Odd/Even Indicator
        Unsigned 8-bit integer
    sccp.calling.pc  PC
        Unsigned 16-bit integer
    sccp.calling.pci  Point Code Indicator
        Unsigned 8-bit integer
    sccp.calling.ri  Routing Indicator
        Unsigned 8-bit integer
    sccp.calling.ssn  SubSystem Number
        Unsigned 8-bit integer
    sccp.calling.ssni  SubSystem Number Indicator
        Unsigned 8-bit integer
    sccp.calling.tt  Translation Type
        Unsigned 8-bit integer
    sccp.class  Class
        Unsigned 8-bit integer
    sccp.credit  Credit
        Unsigned 8-bit integer
    sccp.digits  Called or Calling GT Digits
        String
    sccp.dlr  Destination Local Reference
        Unsigned 24-bit integer
    sccp.error_cause  Error Cause
        Unsigned 8-bit integer
    sccp.handling  Message handling
        Unsigned 8-bit integer
    sccp.hops  Hop Counter
        Unsigned 8-bit integer
    sccp.importance  Importance
        Unsigned 8-bit integer
    sccp.isni.counter  ISNI Counter
        Unsigned 8-bit integer
    sccp.isni.iri  ISNI Routing Indicator
        Unsigned 8-bit integer
    sccp.isni.mi  ISNI Mark for Identification Indicator
        Unsigned 8-bit integer
    sccp.isni.netspec  ISNI Network Specific (Type 1)
        Unsigned 8-bit integer
    sccp.isni.ti  ISNI Type Indicator
        Unsigned 8-bit integer
    sccp.message_type  Message Type
        Unsigned 8-bit integer
    sccp.more  More data
        Unsigned 8-bit integer
    sccp.optional_pointer  Pointer to Optional parameter
        Unsigned 8-bit integer
    sccp.refusal_cause  Refusal Cause
        Unsigned 8-bit integer
    sccp.release_cause  Release Cause
        Unsigned 8-bit integer
    sccp.reset_cause  Reset Cause
        Unsigned 8-bit integer
    sccp.return_cause  Return Cause
        Unsigned 8-bit integer
    sccp.rsn  Receive Sequence Number
        Unsigned 8-bit integer
    sccp.segmentation.class  Segmentation: Class
        Unsigned 8-bit integer
    sccp.segmentation.first  Segmentation: First
        Unsigned 8-bit integer
    sccp.segmentation.remaining  Segmentation: Remaining
        Unsigned 8-bit integer
    sccp.segmentation.slr  Segmentation: Source Local Reference
        Unsigned 24-bit integer
    sccp.sequencing_segmenting.more  Sequencing Segmenting: More
        Unsigned 8-bit integer
    sccp.sequencing_segmenting.rsn  Sequencing Segmenting: Receive Sequence Number
        Unsigned 8-bit integer
    sccp.sequencing_segmenting.ssn  Sequencing Segmenting: Send Sequence Number
        Unsigned 8-bit integer
    sccp.slr  Source Local Reference
        Unsigned 24-bit integer
    sccp.ssn  Called or Calling SubSystem Number
        Unsigned 8-bit integer
    sccp.variable_pointer1  Pointer to first Mandatory Variable parameter
        Unsigned 8-bit integer
    sccp.variable_pointer2  Pointer to second Mandatory Variable parameter
        Unsigned 8-bit integer
    sccp.variable_pointer3  Pointer to third Mandatory Variable parameter
        Unsigned 8-bit integer

Simple Mail Transfer Protocol (smtp)

    smtp.req  Request
        Boolean
    smtp.req.command  Command
        String
    smtp.req.parameter  Request parameter
        String
    smtp.response.code  Response code
        Unsigned 32-bit integer
    smtp.rsp  Response
        Boolean
    smtp.rsp.parameter  Response parameter
        String

Simple Network Management Protocol (snmp)

    snmpv3.flags  SNMPv3 Flags
        Unsigned 8-bit integer
    snmpv3.flags.auth  Authenticated
        Boolean
    snmpv3.flags.crypt  Encrypted
        Boolean
    snmpv3.flags.report  Reportable
        Boolean

Sinec H1 Protocol (h1)

    h1.dbnr  Memory block number
        Unsigned 8-bit integer
    h1.dlen  Length in words
        Signed 16-bit integer
    h1.dwnr  Address within memory block
        Unsigned 16-bit integer
    h1.empty  Empty field
        Unsigned 8-bit integer
    h1.empty_len  Empty field length
        Unsigned 8-bit integer
    h1.header  H1-Header
        Unsigned 16-bit integer
    h1.len  Length indicator
        Unsigned 16-bit integer
    h1.opcode  Opcode
        Unsigned 8-bit integer
    h1.opfield  Operation identifier
        Unsigned 8-bit integer
    h1.oplen  Operation length
        Unsigned 8-bit integer
    h1.org  Memory type
        Unsigned 8-bit integer
    h1.reqlen  Request length
        Unsigned 8-bit integer
    h1.request  Request identifier
        Unsigned 8-bit integer
    h1.reslen  Response length
        Unsigned 8-bit integer
    h1.response  Response identifier
        Unsigned 8-bit integer
    h1.resvalue  Response value
        Unsigned 8-bit integer

Skinny Client Control Protocol (skinny)

    skinny.activeForward  Active Forward
        Unsigned 32-bit integer
        This is non zero to indicate that a forward is active on the line
    skinny.alarmParam1  AlarmParam1
        Unsigned 32-bit integer
        An as yet undecoded param1 value from the alarm message
    skinny.alarmParam2  AlarmParam2
        IPv4 address
        This is the second alarm parameter i think it's an ip address
    skinny.alarmSeverity  AlarmSeverity
        Unsigned 32-bit integer
        The severity of the reported alarm.
    skinny.buttonCount  ButtonCount
        Unsigned 32-bit integer
        Number of (VALID) button definitions in this message.
    skinny.buttonDefinition  ButtonDefinition
        Unsigned 8-bit integer
        The button type for this instance (ie line, speed dial, ....
    skinny.buttonInstanceNumber  InstanceNumber
        Unsigned 8-bit integer
        The button instance number for a button or the StationKeyPad value, repeats allowed.
    skinny.buttonOffset  ButtonOffset
        Unsigned 32-bit integer
        Offset is the number of the first button referenced by this message.
    skinny.callIdentifier  Call Identifier
        Unsigned 32-bit integer
        Call identifier for this call.
    skinny.callState  CallState
        Unsigned 32-bit integer
        The D channel call state of the call
    skinny.callType  Call Type
        Unsigned 32-bit integer
        What type of call, in/out/etc
    skinny.calledParty  CalledParty
        String
        The number called.
    skinny.calledPartyName  Called Party Name
        String
        The name of the party we are calling.
    skinny.callingPartyName  Calling Party Name
        String
        The passed name of the calling party.
    skinny.capCount  CapCount
        Unsigned 32-bit integer
        How many capabilities
    skinny.conferenceID  Conference ID
        Unsigned 32-bit integer
        The conference ID
    skinny.data_length  Data Length
        Unsigned 32-bit integer
        Number of bytes in the data portion.
    skinny.dateMilliseconds  Milliseconds
        Unsigned 32-bit integer
        Milliseconds
    skinny.dateSeconds  Seconds
        Unsigned 32-bit integer
        Seconds
    skinny.dateTemplate  DateTemplate
        String
        The display format for the date/time on the phone.
    skinny.day  Day
        Unsigned 32-bit integer
        The day of the current month
    skinny.dayOfWeek  DayOfWeek
        Unsigned 32-bit integer
        The day of the week
    skinny.detectInterval  HF Detect Interval
        Unsigned 32-bit integer
        The number of milliseconds that determines a hook flash has occured
    skinny.deviceName  DeviceName
        String
        The device name of the phone.
    skinny.deviceResetType  Reset Type
        Unsigned 32-bit integer
        How the devices it to be reset (reset/restart)
    skinny.deviceTone  Tone
        Unsigned 32-bit integer
        Which tone to play
    skinny.deviceType  DeviceType
        Unsigned 32-bit integer
        DeviceType of the station.
    skinny.deviceUnregisterStatus  Unregister Status
        Unsigned 32-bit integer
        The status of the device unregister request (*CAN* be refused)
    skinny.directoryNumber  Directory Number
        String
        The number we are reporting statistics for.
    skinny.displayMessage  DisplayMessage
        String
        The message displayed on the phone.
    skinny.echoCancelType  Echo Cancel Type
        Unsigned 32-bit integer
        Is echo cancelling enabled or not
    skinny.forwardAllActive  Forward All
        Unsigned 32-bit integer
        Forward all calls
    skinny.forwardBusyActive  Forward Busy
        Unsigned 32-bit integer
        Forward calls when busy
    skinny.forwardNoAnswerActive  Forward NoAns
        Unsigned 32-bit integer
        Forward only when no answer
    skinny.forwardNumber  Forward Number
        String
        The number to forward calls to.
    skinny.fqdn  DisplayName
        String
        The full display name for this line.
    skinny.g723BitRate  G723 BitRate
        Unsigned 32-bit integer
        The G723 bit rate for this stream/JUNK if not g723 stream
    skinny.hookFlashDetectMode  Hook Flash Mode
        Unsigned 32-bit integer
        Which method to use to detect that a hook flash has occured
    skinny.hour  Hour
        Unsigned 32-bit integer
        Hour of the day
    skinny.ipAddress  IP Address
        IPv4 address
        An IP address
    skinny.jitter  Jitter
        Unsigned 32-bit integer
        Average jitter during the call.
    skinny.keepAliveInterval  KeepAliveInterval
        Unsigned 32-bit integer
        How often are keep alives exchanges between the client and the call manager.
    skinny.lampMode  LampMode
        Unsigned 32-bit integer
        The lamp mode
    skinny.latency  Latency(ms)
        Unsigned 32-bit integer
        Average packet latency during the call.
    skinny.lineDirNumber  Line Dir Number
        String
        The directory number for this line.
    skinny.lineInstance  Line Instance
        Unsigned 32-bit integer
        The display call plane associated with this call.
    skinny.lineNumber  LineNumber
        Unsigned 32-bit integer
        Line Number
    skinny.maxFramesPerPacket  MaxFramesPerPacket
        Unsigned 16-bit integer
        Max frames per packet
    skinny.maxStreams  MaxStreams
        Unsigned 32-bit integer
        32 bit unsigned integer indicating the maximum number of simultansous RTP duplex streams that the client can handle.
    skinny.mediaEnunciationType  Enunciation Type
        Unsigned 32-bit integer
        No clue.
    skinny.messageTimeOutValue  Message Timeout
        Unsigned 32-bit integer
        The timeout in seconds for this message
    skinny.messageid  Message ID
        Unsigned 32-bit integer
        The function requested/done with this message.
    skinny.microphoneMode  Microphone Mode
        Unsigned 32-bit integer
        Turns on and off the microphone on the set
    skinny.millisecondPacketSize  MS/Packet
        Unsigned 32-bit integer
        The number of milliseconds of conversation in each packet
    skinny.minute  Minute
        Unsigned 32-bit integer
        Minute
    skinny.month  Month
        Unsigned 32-bit integer
        The current month
    skinny.multicastIpAddress  Multicast Ip Address
        IPv4 address
        The multicast address for this conference
    skinny.multicastPort  Multicast Port
        Unsigned 32-bit integer
        The multicast port the to listens on.
    skinny.numberLines  Number of Lines
        Unsigned 32-bit integer
        How many lines this device has
    skinny.numberSpeedDials  Number of SpeedDials
        Unsigned 32-bit integer
        The number of speed dials this device has
    skinny.octetsRecv  Octets Received
        Unsigned 32-bit integer
        Octets received during the call.
    skinny.octetsSent  Octets Sent
        Unsigned 32-bit integer
        Octets sent during the call.
    skinny.openReceiveChannelStatus  OpenReceiveChannelStatus
        Unsigned 32-bit integer
        The status of the opened receive channel.
    skinny.originalCalledParty  Original Called Party
        String
        The number of the original calling party.
    skinny.originalCalledPartyName  Original Called Party Name
        String
        name of the original person who placed the call.
    skinny.packetsLost  Packets Lost
        Unsigned 32-bit integer
        Packets lost during the call.
    skinny.packetsRecv  Packets Received
        Unsigned 32-bit integer
        Packets received during the call.
    skinny.packetsSent  Packets Sent
        Unsigned 32-bit integer
        Packets Sent during the call.
    skinny.passThruPartyID  PassThruPartyID
        Unsigned 32-bit integer
        The pass thru party id
    skinny.payloadCapability  PayloadCapability
        Unsigned 32-bit integer
        The payload capability for this media capability structure.
    skinny.portNumber  Port Number
        Unsigned 32-bit integer
        A port number
    skinny.precedenceValue  Precedence
        Unsigned 32-bit integer
        Precedence value
    skinny.receptionStatus  ReceptionStatus
        Unsigned 32-bit integer
        The current status of the multicast media.
    skinny.remoteIpAddr  Remote Ip Address
        IPv4 address
        The remote end ip address for this stream
    skinny.remotePortNumber  Remote Port
        Unsigned 32-bit integer
        The remote port number listening for this stream
    skinny.reserved  Reserved
        Unsigned 32-bit integer
        Reserved for future(?) use.
    skinny.ringType  Ring Type
        Unsigned 32-bit integer
        What type of ring to play
    skinny.secondaryKeepAliveInterval  SecondaryKeepAliveInterval
        Unsigned 32-bit integer
        How often are keep alives exchanges between the client and the secondary call manager.
    skinny.serverIdentifier  Server Identifier
        String
        Server Identifier.
    skinny.serverIpAddress  Server Ip Address
        IPv4 address
        The IP address for this server
    skinny.serverListenPort  Server Port
        Unsigned 32-bit integer
        The port the server listens on.
    skinny.serverName  Server Name
        String
        The server name for this device.
    skinny.sessionType  Session Type
        Unsigned 32-bit integer
        The type of this session.
    skinny.silenceSuppression  Silence Suppression
        Unsigned 32-bit integer
        Mode for silence suppression
    skinny.softKeyCount  SoftKeyCount
        Unsigned 32-bit integer
        The number of valid softkeys in this message.
    skinny.softKeyEvent  SoftKeyEvent
        Unsigned 32-bit integer
        Which softkey event is being reported.
    skinny.softKeyInfoIndex  SoftKeyInfoIndex
        Unsigned 16-bit integer
        Array of size 16 16-bit unsigned integers containing an index into the soft key description information.
    skinny.softKeyLabel  SoftKeyLabel
        String
        The text label for this soft key.
    skinny.softKeyMap  SoftKeyMap
        Unsigned 16-bit integer
    skinny.softKeyMap.0  SoftKey0
        Boolean
    skinny.softKeyMap.1  SoftKey1
        Boolean
    skinny.softKeyMap.10  SoftKey10
        Boolean
    skinny.softKeyMap.11  SoftKey11
        Boolean
    skinny.softKeyMap.12  SoftKey12
        Boolean
    skinny.softKeyMap.13  SoftKey13
        Boolean
    skinny.softKeyMap.14  SoftKey14
        Boolean
    skinny.softKeyMap.15  SoftKey15
        Boolean
    skinny.softKeyMap.2  SoftKey2
        Boolean
    skinny.softKeyMap.3  SoftKey3
        Boolean
    skinny.softKeyMap.4  SoftKey4
        Boolean
    skinny.softKeyMap.5  SoftKey5
        Boolean
    skinny.softKeyMap.6  SoftKey6
        Boolean
    skinny.softKeyMap.7  SoftKey7
        Boolean
    skinny.softKeyMap.8  SoftKey8
        Boolean
    skinny.softKeyMap.9  SoftKey9
        Boolean
    skinny.softKeyOffset  SoftKeyOffset
        Unsigned 32-bit integer
        The offset for the first soft key in this message.
    skinny.softKeySetCount  SoftKeySetCount
        Unsigned 32-bit integer
        The number of valid softkey sets in this message.
    skinny.softKeySetDescription  SoftKeySet
        Unsigned 8-bit integer
        A text description of what this softkey when this softkey set is displayed
    skinny.softKeySetOffset  SoftKeySetOffset
        Unsigned 32-bit integer
        The offset for the first soft key set in this message.
    skinny.softKeyTemplateIndex  SoftKeyTemplateIndex
        Unsigned 8-bit integer
        Array of size 16 8-bit unsigned ints containing an index into the softKeyTemplate.
    skinny.speakerMode  Speaker
        Unsigned 32-bit integer
        This message sets the speaker mode on/off
    skinny.speedDialDirNum  SpeedDial Number
        String
        the number to dial for this speed dial.
    skinny.speedDialDisplay  SpeedDial Display
        String
        The text to display for this speed dial.
    skinny.speedDialNumber  SpeedDialNumber
        Unsigned 32-bit integer
        Which speed dial number
    skinny.stationInstance  StationInstance
        Unsigned 32-bit integer
        The stations instance.
    skinny.stationIpPort  StationIpPort
        Unsigned 16-bit integer
        The station IP port
    skinny.stationKeypadButton  KeypadButton
        Unsigned 32-bit integer
        The button pressed on the phone.
    skinny.stationUserId  StationUserId
        Unsigned 32-bit integer
        The station user id.
    skinny.statsProcessingType  StatsProcessingType
        Unsigned 32-bit integer
        What do do after you send the stats.
    skinny.stimulus  Stimulus
        Unsigned 32-bit integer
        Reason for the device stimulus message.
    skinny.stimulusInstance  StimulusInstance
        Unsigned 32-bit integer
        The instance of the stimulus
    skinny.timeStamp  Timestamp
        Unsigned 32-bit integer
        Time stamp for the call reference
    skinny.tokenRejWaitTime  Retry Wait Time
        Unsigned 32-bit integer
        The time to wait before retrying this token request.
    skinny.totalButtonCount  TotalButtonCount
        Unsigned 32-bit integer
        The total number of buttons defined for this phone.
    skinny.totalSoftKeyCount  TotalSoftKeyCount
        Unsigned 32-bit integer
        The total number of softkeys for this device.
    skinny.totalSoftKeySetCount  TotalSoftKeySetCount
        Unsigned 32-bit integer
        The total number of softkey sets for this device.
    skinny.unknown  Data
        Unsigned 32-bit integer
        Place holder for unknown data.
    skinny.userName  Username
        String
        Username for this device.
    skinny.version  Version
        String
        Version.
    skinny.year  Year
        Unsigned 32-bit integer
        The current year

SliMP3 Communication Protocol (slimp3)

    slimp3.control  Control Packet
        Boolean
        SLIMP3 control
    slimp3.data  Data
        Boolean
        SLIMP3 Data
    slimp3.data_req  Data Request
        Boolean
        SLIMP3 Data Request
    slimp3.discovery_req  Discovery Request
        Boolean
        SLIMP3 Discovery Request
    slimp3.discovery_response  Discovery Response
        Boolean
        SLIMP3 Discovery Response
    slimp3.display  Display
        Boolean
        SLIMP3 display
    slimp3.hello  Hello
        Boolean
        SLIMP3 hello
    slimp3.i2c  I2C
        Boolean
        SLIMP3 I2C
    slimp3.ir  Infrared
        Unsigned 32-bit integer
        SLIMP3 Infrared command
    slimp3.opcode  Opcode
        Unsigned 8-bit integer
        SLIMP3 message type

Socks Protocol (socks)

    socks.command  Command
        Unsigned 8-bit integer
    socks.dst  Remote Address
        IPv4 address
    socks.dstV6  Remote Address(ipv6)
        IPv6 address
    socks.dstport  Remote Port
        Unsigned 16-bit integer
    socks.results  Results(V5)
        Unsigned 8-bit integer
    socks.results_v4  Results(V4)
        Unsigned 8-bit integer
    socks.results_v5  Results(V5)
        Unsigned 8-bit integer
    socks.username  User Name
        String
    socks.version  Version
        Unsigned 8-bit integer

Spanning Tree Protocol (stp)

    stp.bridge.hw  Bridge Identifier
        6-byte Hardware (MAC) Address
    stp.flags  BPDU flags
        Unsigned 8-bit integer
    stp.flags.agreement  Agreement
        Boolean
    stp.flags.forwarding  Forwarding
        Boolean
    stp.flags.learning  Learning
        Boolean
    stp.flags.port_role  Port Role
        Unsigned 8-bit integer
    stp.flags.proposal  Proposal
        Boolean
    stp.flags.tc  Topology Change
        Boolean
    stp.flags.tcack  Topology Change Acknowledgment
        Boolean
    stp.forward  Forward Delay
        Double-precision floating point
    stp.hello  Hello Time
        Double-precision floating point
    stp.max_age  Max Age
        Double-precision floating point
    stp.msg_age  Message Age
        Double-precision floating point
    stp.port  Port identifier
        Unsigned 16-bit integer
    stp.protocol  Protocol Identifier
        Unsigned 16-bit integer
    stp.root.cost  Root Path Cost
        Unsigned 32-bit integer
    stp.root.hw  Root Identifier
        6-byte Hardware (MAC) Address
    stp.type  BPDU Type
        Unsigned 8-bit integer
    stp.version  Protocol Version Identifier
        Unsigned 8-bit integer
    stp.version_1_length  Version 1 Length
        Unsigned 8-bit integer

Stream Control Transmission Protocol (sctp)

    sctp.abort.t_bit  T-Bit
        Boolean
    sctp.adapation_layer_indication.indication  Indication
        Unsigned 32-bit integer
    sctp.asconf.serial_number  Serial Number
        Unsigned 32-bit integer
    sctp.asconf_ack.serial_number  Serial Number
        Unsigned 32-bit integer
    sctp.cause.code  Cause code
        Unsigned 16-bit integer
    sctp.cause.length  Cause length
        Unsigned 16-bit integer
    sctp.cause.measure_of_staleness  Measure of staleness in usec
        Unsigned 32-bit integer
    sctp.cause.missing_parameter_type  Missing parameter type
        Unsigned 16-bit integer
    sctp.cause.nr_of_missing_parameters  Number of missing parameters
        Unsigned 32-bit integer
    sctp.cause.stream_identifier  Stream identifier
        Unsigned 16-bit integer
    sctp.cause.tsn  TSN
        Unsigned 32-bit integer
    sctp.checksum  Checksum
        Unsigned 32-bit integer
    sctp.checksum_bad  Bad checksum
        Boolean
    sctp.chunk_flags  Flags
        Unsigned 8-bit integer
    sctp.chunk_length  Length
        Unsigned 16-bit integer
    sctp.chunk_type  Identifier
        Unsigned 8-bit integer
    sctp.correlation_id  Correlation_id
        Unsigned 32-bit integer
    sctp.cumulative.tsn.ack  Cumulative TSN Ack
        Unsigned 32-bit integer
    sctp.cwr.lowest_tsn  Lowest TSN
        Unsigned 32-bit integer
    sctp.data.b_bit  B-Bit
        Boolean
    sctp.data.e_bit  E-Bit
        Boolean
    sctp.data.u.bit  U-Bit
        Boolean
    sctp.dstport  Destination port
        Unsigned 16-bit integer
    sctp.ecne.lowest_tsn  Lowest TSN
        Unsigned 32-bit integer
    sctp.forward_tsn.sid  Stream identifier
        Unsigned 16-bit integer
    sctp.forward_tsn.ssn  Stream sequence number
        Unsigned 16-bit integer
    sctp.forward_tsn.tsn  New cumulative TSN
        Unsigned 32-bit integer
    sctp.init.chunk.credit  Advertised reciever window credit (a_rwnd)
        Unsigned 32-bit integer
    sctp.init.chunk.initial.tsn  Initial TSN
        Unsigned 32-bit integer
    sctp.init.chunk.initiate.tag  Initiate tag
        Unsigned 32-bit integer
    sctp.init.chunk.nr.in.streams  Number of inbound streams
        Unsigned 16-bit integer
    sctp.init.chunk.nr.out.streams  Number of outbound streams
        Unsigned 16-bit integer
    sctp.parameter.cookie_preservative_incr  Suggested Cookie life-span increment (msec)
        Unsigned 32-bit integer
    sctp.parameter.hostname.hostname  Hostname
        String
    sctp.parameter.ipv4_address  IP Version 4 address
        IPv4 address
    sctp.parameter.ipv6_address  IP Version 6 address
        IPv6 address
    sctp.parameter.length  Parameter length
        Unsigned 16-bit integer
    sctp.parameter.supported_addres_type  Supported address type
        Unsigned 16-bit integer
    sctp.parameter.type  Parameter type
        Unsigned 16-bit integer
    sctp.payload_proto_id  Payload protocol identifier
        Unsigned 32-bit integer
    sctp.port  Port
        Unsigned 16-bit integer
    sctp.sack.a_rwnd  Advertised receiver window credit (a_rwnd)
        Unsigned 32-bit integer
    sctp.sack.cumulative_tsn_ack  Cumulative TSN ACK
        Unsigned 32-bit integer
    sctp.sack.duplicate.tsn  Duplicate TSN
        Unsigned 16-bit integer
    sctp.sack.gap_block_end  End
        Unsigned 16-bit integer
    sctp.sack.gap_block_start  Start
        Unsigned 16-bit integer
    sctp.sack.number_of_duplicated_tsns  Number of duplicated TSNs
        Unsigned 16-bit integer
    sctp.sack.number_of_gap_blocks  Number of gap acknowldgement blocks 
        Unsigned 16-bit integer
    sctp.shutdown.cumulative_tsn_ack  Cumulative TSN Ack
        Unsigned 32-bit integer
    sctp.shutdown_complete.t_bit  T-Bit
        Boolean
    sctp.srcport  Source port
        Unsigned 16-bit integer
    sctp.stream_id  Stream Identifier
        Unsigned 16-bit integer
    sctp.stream_seq_number  Stream sequence number
        Unsigned 16-bit integer
    sctp.tsn  TSN
        Unsigned 32-bit integer
    sctp.verfication_tag  Verification tag
        Unsigned 32-bit integer

Syslog message (syslog)

    syslog.facility  Facility
        Unsigned 8-bit integer
        Message facility
    syslog.level  Level
        Unsigned 8-bit integer
        Message level
    syslog.msg  Message
        String
        Message Text

Systems Network Architecture (sna)

    sna.nlp.frh  Transmission Priority Field
        Unsigned 8-bit integer
    sna.nlp.nhdr  Network Layer Packet Header
        No value
        Network Layer Packet Header (NHDR)
    sna.nlp.nhdr.0  Network Layer Packet Header Byte 0
        Unsigned 8-bit integer
        Byte 0 of Network Layer Packet contains SM and TPF
    sna.nlp.nhdr.1  Network Layer Packet Header Bype 1
        Unsigned 8-bit integer
        Byte 1 of Network Layer Packet contains FT, Time Sensitive Packet Indicator and Congestion Indicator
    sna.nlp.nhdr.anr  Automatic Network Routing Entry
        Byte array
    sna.nlp.nhdr.fra  Function Routing Address Entry
        Byte array
    sna.nlp.nhdr.ft  Function Type
        Unsigned 8-bit integer
    sna.nlp.nhdr.slowdn1  Slowdown 1
        Boolean
    sna.nlp.nhdr.slowdn2  Slowdown 2
        Boolean
    sna.nlp.nhdr.sm  Switching Mode Field
        Unsigned 8-bit integer
    sna.nlp.nhdr.tpf  Transmission Priority Field
        Unsigned 8-bit integer
    sna.nlp.nhdr.tspi  Time Sensitive Packet Indicator
        Boolean
    sna.nlp.thdr  RTP Transport Header
        No value
        RTP Transport Header (THDR)
    sna.nlp.thdr.8  RTP Transport Packet Header Bype 8
        Unsigned 8-bit integer
        Byte 8 of RTP Transport Packet Header
    sna.nlp.thdr.9  RTP Transport Packet Header Bype 9
        Unsigned 8-bit integer
        Byte 9 of RTP Transport Packet Header
    sna.nlp.thdr.bsn  Byte Sequence Number
        Unsigned 32-bit integer
        Byte Sequence Number
    sna.nlp.thdr.cqfi  Connection Qualifyer Field Indicator
        Boolean
    sna.nlp.thdr.dlf  Data Length Field
        Unsigned 32-bit integer
        Data Length Field
    sna.nlp.thdr.eomi  End Of Message Indicator
        Boolean
    sna.nlp.thdr.lmi  Last Message Indicator
        Boolean
    sna.nlp.thdr.offset  Data Offset/4
        Unsigned 16-bit integer
        Data Offset in words
    sna.nlp.thdr.osi  Optional Segments Present Indicator
        Boolean
    sna.nlp.thdr.rasapi  Reply ASAP Indicator
        Boolean
    sna.nlp.thdr.retryi  Retry Indicator
        Boolean
    sna.nlp.thdr.setupi  Setup Indicator
        Boolean
    sna.nlp.thdr.somi  Start Of Message Indicator
        Boolean
    sna.nlp.thdr.sri  Session Request Indicator
        Boolean
    sna.nlp.thdr.tcid  Transport Connection Identifier
        Byte array
        Transport Connection Identifier (TCID)
    sna.rh  Request/Response Header
        No value
    sna.rh.0  Request/Response Header Byte 0
        Unsigned 8-bit integer
    sna.rh.1  Request/Response Header Byte 1
        Unsigned 8-bit integer
    sna.rh.2  Request/Response Header Byte 2
        Unsigned 8-bit integer
    sna.rh.bbi  Begin Bracket Indicator
        Boolean
    sna.rh.bci  Begin Chain Indicator
        Boolean
    sna.rh.cdi  Change Direction Indicator
        Boolean
    sna.rh.cebi  Conditional End Bracket Indicator
        Boolean
        Used to indicate the beginning or end of a group of exchanged requests and responses called a bracket. Only used on LU-LU sessions.
    sna.rh.csi  Code Selection Indicator
        Unsigned 8-bit integer
        Specifies the encoding used for the associated FMD RU.
    sna.rh.dr1  Definite Response 1 Indicator
        Boolean
    sna.rh.dr2  Definite Response 2 Indicator
        Boolean
    sna.rh.ebi  End Bracket Indicator
        Boolean
    sna.rh.eci  End Chain Indicator
        Boolean
    sna.rh.edi  Enciphered Data Indicator
        Boolean
        Indicates that information in the associated RU is enciphered under session-level cryptography protocols.
    sna.rh.eri  Exception Response Indicator
        Boolean
        Used in conjunction with DR1I and DR2I to indicate, in a request, the form of response requested.
    sna.rh.fi  Format Indicator
        Boolean
    sna.rh.lcci  Length-Checked Compression Indicator
        Boolean
    sna.rh.pdi  Padded Data Indicator
        Boolean
        Indicates that the RU was padded at the end, before encipherment, to the next integral multiple of 8 bytes.
    sna.rh.pi  Pacing Indicator
        Boolean
    sna.rh.qri  Queued Response Indicator
        Boolean
    sna.rh.rlwi  Request Larger Window Indicator
        Boolean
        Indicates whether a larger pacing window was requested.
    sna.rh.rri  Request/Response Indicator
        Unsigned 8-bit integer
        Denotes whether this is a request or a response.
    sna.rh.rti  Response Type Indicator
        Boolean
    sna.rh.ru_category  Request/Response Unit Category
        Unsigned 8-bit integer
    sna.rh.sdi  Sense Data Included
        Boolean
        Indicates that a 4-byte sense data field is included in the associated RU.
    sna.th  Transmission Header
        No value
    sna.th.0  Transmission Header Byte 0
        Unsigned 8-bit integer
        Byte 0 of Tranmission Header contains FID, MPF, ODAI, and EFI as bitfields.
    sna.th.cmd_fmt  Command Format
        Unsigned 8-bit integer
    sna.th.cmd_sn  Command Sequence Number
        Unsigned 16-bit integer
    sna.th.cmd_type  Command Type
        Unsigned 8-bit integer
    sna.th.daf  Destination Address Field
        Unsigned 16-bit integer
    sna.th.dcf  Data Count Field
        Unsigned 16-bit integer
        A binary count of the number of bytes in the BIU or BIU segment associated with the tranmission header. The count does not include any of the bytes in the transmission header.
    sna.th.def  Destination Element Field
        Unsigned 16-bit integer
    sna.th.dsaf  Destination Subarea Address Field
        Unsigned 32-bit integer
    sna.th.efi  Expedited Flow Indicator
        Unsigned 8-bit integer
        The EFI designates whether the PIU belongs to the normal or expedited flow.
    sna.th.er_vr_supp_ind  ER and VR Support Indicator
        Unsigned 8-bit integer
    sna.th.ern  Explicit Route Number
        Unsigned 8-bit integer
        The ERN in a TH identifies an explicit route direction of flow.
    sna.th.fid  Format Identifer
        Unsigned 8-bit integer
        Format Identification
    sna.th.iern  Initial Explicit Route Number
        Unsigned 8-bit integer
    sna.th.lsid  Local Session Identification
        Unsigned 8-bit integer
    sna.th.mft  MPR FID4 Type
        Boolean
    sna.th.mpf  Mapping Field
        Unsigned 8-bit integer
        The Mapping Field specifies whether the information field associated with the TH is a complete or partial BIU.
    sna.th.nlp_cp  NLP Count or Padding
        Unsigned 8-bit integer
    sna.th.nlpoi  NLP Offset Indicator
        Unsigned 8-bit integer
    sna.th.ntwk_prty  Network Priority
        Unsigned 8-bit integer
    sna.th.oaf  Origin Address Field
        Unsigned 16-bit integer
    sna.th.odai  ODAI Assignment Indicator
        Unsigned 8-bit integer
        The ODAI indicates which node assigned the OAF'-DAF' values carried in the TH.
    sna.th.oef  Origin Element Field
        Unsigned 16-bit integer
    sna.th.osaf  Origin Subarea Address Field
        Unsigned 32-bit integer
    sna.th.piubf  PIU Blocking Field
        Unsigned 8-bit integer
        Specifies whether this frame contains a single PIU or multiple PIUs.
    sna.th.sa  Session Address
        Byte array
    sna.th.snai  SNA Indicator
        Boolean
        Used to identify whether the PIU originated or is destined for an SNA or non-SNA device.
    sna.th.snf  Sequence Number Field
        Unsigned 16-bit integer
        The Sequence Number Field contains a numerical identifier for the associated BIU.
    sna.th.tg_nonfifo_ind  Transmission Group Non-FIFO Indicator
        Boolean
        Indicates whether or not FIFO discipline is to enforced in transmitting PIUs through the tranmission groups to prevent the PIUs getting out of sequence during transmission over the TGs.
    sna.th.tg_snf  Transmission Group Sequence Number Field
        Unsigned 16-bit integer
    sna.th.tg_sweep  Transmission Group Sweep
        Unsigned 8-bit integer
    sna.th.tgsf  Transmission Group Segmenting Field
        Unsigned 8-bit integer
    sna.th.tpf  Transmission Priority Field
        Unsigned 8-bit integer
    sna.th.vr_cwi  Virtual Route Change Window Indicator
        Unsigned 16-bit integer
        Used to change the window size of the virtual route by 1.
    sna.th.vr_cwri  Virtual Route Change Window Reply Indicator
        Unsigned 16-bit integer
        Permits changing of the window size by 1 for PIUs received by the sender of this bit.
    sna.th.vr_pac_cnt_ind  Virtual Route Pacing Count Indicator
        Unsigned 8-bit integer
    sna.th.vr_rwi  Virtual Route Reset Window Indicator
        Boolean
        Indicates severe congestion in a node on the virtual route.
    sna.th.vr_snf_send  Virtual Route Send Sequence Number Field
        Unsigned 16-bit integer
    sna.th.vr_sqti  Virtual Route Sequence and Type Indicator
        Unsigned 16-bit integer
        Specifies the PIU type.
    sna.th.vrn  Virtual Route Number
        Unsigned 8-bit integer
    sna.th.vrprq  Virtual Route Pacing Request
        Boolean
    sna.th.vrprs  Virtual Route Pacing Response
        Boolean

TACACS (tacacs)

    tacacs.destaddr  Destination address
        IPv4 address
        Destination address
    tacacs.destport  Destination port
        Unsigned 16-bit integer
        Destination port
    tacacs.line  Line
        Unsigned 16-bit integer
        Line
    tacacs.nonce  Nonce
        Unsigned 16-bit integer
        Nonce
    tacacs.passlen  Password length
        Unsigned 8-bit integer
        Password length
    tacacs.reason  Reason
        Unsigned 8-bit integer
        Reason
    tacacs.response  Response
        Unsigned 8-bit integer
        Response
    tacacs.result1  Result 1
        Unsigned 32-bit integer
        Result 1
    tacacs.result2  Result 2
        Unsigned 32-bit integer
        Result 2
    tacacs.result3  Result 3
        Unsigned 16-bit integer
        Result 3
    tacacs.type  Type
        Unsigned 8-bit integer
        Type
    tacacs.userlen  Username length
        Unsigned 8-bit integer
        Username length
    tacacs.version  Version
        Unsigned 8-bit integer
        Version

TACACS+ (tacplus)

    tacplus.flags  Flags
        Unsigned 8-bit integer
        Flags
    tacplus.flags.connection_type  Connection type
        Boolean
        Connection type (single or multiple)
    tacplus.flags.payload_type  Payload type
        Boolean
        Payload type (unencrypted or encrypted)
    tacplus.majvers  Major version
        Unsigned 8-bit integer
        Major version number
    tacplus.minvers  Minor version
        Unsigned 8-bit integer
        Minor version number
    tacplus.packet_len  Packet length
        Unsigned 32-bit integer
        Packet length
    tacplus.request  Request
        Boolean
        TRUE if TACACS+ request
    tacplus.response  Response
        Boolean
        TRUE if TACACS+ response
    tacplus.seqno  Sequence number
        Unsigned 8-bit integer
        Sequence number
    tacplus.session_id  Session ID
        Unsigned 32-bit integer
        Session ID
    tacplus.type  Type
        Unsigned 8-bit integer
        Type

TPKT (tpkt)

    tpkt.length  Length
        Unsigned 16-bit integer
    tpkt.reserved  Reserved
        Unsigned 8-bit integer
    tpkt.version  Version
        Unsigned 8-bit integer

Tabular Data Stream (tds)

    netlib.last  Last Packet
        Unsigned 8-bit integer
        Last Packet Indicator
    netlib.size  Size
        Unsigned 16-bit integer
        Packet Size
    netlib.type  Type
        Unsigned 8-bit integer
        Packet Type

Telnet (telnet)

Time Protocol (time)

    time.time  Time
        Unsigned 32-bit integer
        Seconds since 00:00 (midnight) 1 January 1900 GMT

Time Synchronization Protocol (tsp)

    tsp.hopcnt  Hop Count
        Unsigned 8-bit integer
        Hop Count
    tsp.name  Machine Name
        String
        Sender Machine Name
    tsp.sec  Seconds
        Unsigned 32-bit integer
        Seconds
    tsp.sequence  Sequence
        Unsigned 16-bit integer
        Sequence Number
    tsp.type  Type
        Unsigned 8-bit integer
        Packet Type
    tsp.usec  Microseconds
        Unsigned 32-bit integer
        Microseconds
    tsp.version  Version
        Unsigned 8-bit integer
        Protocol Version Number

Token-Ring (tr)

    tr.ac  Access Control
        Unsigned 8-bit integer
    tr.addr  Source or Destination Address
        6-byte Hardware (MAC) Address
        Source or Destination Hardware Address
    tr.broadcast  Broadcast Type
        Unsigned 8-bit integer
        Type of Token-Ring Broadcast
    tr.direction  Direction
        Unsigned 8-bit integer
        Direction of RIF
    tr.dst  Destination
        6-byte Hardware (MAC) Address
        Destination Hardware Address
    tr.fc  Frame Control
        Unsigned 8-bit integer
    tr.frame  Frame
        Boolean
    tr.frame_pcf  Frame PCF
        Unsigned 8-bit integer
    tr.frame_type  Frame Type
        Unsigned 8-bit integer
    tr.max_frame_size  Maximum Frame Size
        Unsigned 8-bit integer
    tr.monitor_cnt  Monitor Count
        Unsigned 8-bit integer
    tr.priority  Priority
        Unsigned 8-bit integer
    tr.priority_reservation  Priority Reservation
        Unsigned 8-bit integer
    tr.rif  Ring-Bridge Pairs
        String
        String representing Ring-Bridge Pairs
    tr.rif.bridge  RIF Bridge
        Unsigned 8-bit integer
    tr.rif.ring  RIF Ring
        Unsigned 16-bit integer
    tr.rif_bytes  RIF Bytes
        Unsigned 8-bit integer
        Number of bytes in Routing Information Fields, including the two bytes of Routing Control Field
    tr.sr  Source Routed
        Boolean
        Source Routed
    tr.src  Source
        6-byte Hardware (MAC) Address
        Source Hardware Address

Token-Ring Media Access Control (trmac)

    trmac.dstclass  Destination Class
        Unsigned 8-bit integer
    trmac.errors.abort  Abort Delimiter Transmitted Errors
        Unsigned 8-bit integer
    trmac.errors.ac  A/C Errors
        Unsigned 8-bit integer
    trmac.errors.burst  Burst Errors
        Unsigned 8-bit integer
    trmac.errors.congestion  Receiver Congestion Errors
        Unsigned 8-bit integer
    trmac.errors.fc  Frame-Copied Errors
        Unsigned 8-bit integer
    trmac.errors.freq  Frequency Errors
        Unsigned 8-bit integer
    trmac.errors.internal  Internal Errors
        Unsigned 8-bit integer
    trmac.errors.iso  Isolating Errors
        Unsigned 16-bit integer
    trmac.errors.line  Line Errors
        Unsigned 8-bit integer
    trmac.errors.lost  Lost Frame Errors
        Unsigned 8-bit integer
    trmac.errors.noniso  Non-Isolating Errors
        Unsigned 16-bit integer
    trmac.errors.token  Token Errors
        Unsigned 8-bit integer
    trmac.length  Total Length
        Unsigned 8-bit integer
    trmac.mvec  Major Vector
        Unsigned 8-bit integer
    trmac.naun  NAUN
        6-byte Hardware (MAC) Address
    trmac.srcclass  Source Class
        Unsigned 8-bit integer
    trmac.svec  Sub-Vector
        Unsigned 8-bit integer

Transmission Control Protocol (tcp)

    tcp.ack  Acknowledgement number
        Unsigned 32-bit integer
    tcp.analysis.ack_rtt  The RTT to ACK the segment was
        Time duration
        How long time it took to ACK the segment (RTT)
    tcp.analysis.acks_frame  This is an ACK to the segment in frame
        Unsigned 32-bit integer
        Which previous segment is this an ACK for
    tcp.checksum  Checksum
        Unsigned 16-bit integer
    tcp.checksum_bad  Bad Checksum
        Boolean
    tcp.dstport  Destination Port
        Unsigned 16-bit integer
    tcp.flags  Flags
        Unsigned 8-bit integer
    tcp.flags.ack  Acknowledgment
        Boolean
    tcp.flags.cwr  Congestion Window Reduced (CWR)
        Boolean
    tcp.flags.ecn  ECN-Echo
        Boolean
    tcp.flags.fin  Fin
        Boolean
    tcp.flags.push  Push
        Boolean
    tcp.flags.reset  Reset
        Boolean
    tcp.flags.syn  Syn
        Boolean
    tcp.flags.urg  Urgent
        Boolean
    tcp.hdr_len  Header Length
        Unsigned 8-bit integer
    tcp.len  TCP Segment Len
        Unsigned 32-bit integer
    tcp.nxtseq  Next sequence number
        Unsigned 32-bit integer
    tcp.port  Source or Destination Port
        Unsigned 16-bit integer
    tcp.seq  Sequence number
        Unsigned 32-bit integer
    tcp.srcport  Source Port
        Unsigned 16-bit integer
    tcp.urgent_pointer  Urgent pointer
        Unsigned 16-bit integer
    tcp.window_size  Window size
        Unsigned 16-bit integer

Transparent Network Substrate Protocol (tns)

    tns.abort  Abort
        Boolean
        Abort
    tns.abort_data  Abort Data
        String
        Abort Data
    tns.abort_reason_system  Abort Reason (User)
        Unsigned 8-bit integer
        Abort Reason from System
    tns.abort_reason_user  Abort Reason (User)
        Unsigned 8-bit integer
        Abort Reason from Application
    tns.accept  Accept
        Boolean
        Accept
    tns.accept_data  Accept Data
        String
        Accept Data
    tns.accept_data_length  Accept Data Length
        Unsigned 16-bit integer
        Length of Accept Data
    tns.accept_data_offset  Offset to Accept Data
        Unsigned 16-bit integer
        Offset to Accept Data
    tns.compat_version  Version (Compatible)
        Unsigned 16-bit integer
        Version (Compatible)
    tns.connect  Connect
        Boolean
        Connect
    tns.connect_data  Connect Data
        String
        Connect Data
    tns.connect_data_length  Length of Connect Data
        Unsigned 16-bit integer
        Length of Connect Data
    tns.connect_data_max  Maximum Receivable Connect Data
        Unsigned 32-bit integer
        Maximum Receivable Connect Data
    tns.connect_data_offset  Offset to Connect Data
        Unsigned 16-bit integer
        Offset to Connect Data
    tns.connect_flags.enablena  NA services enabled
        Unsigned 8-bit integer
        NA services enabled
    tns.connect_flags.ichg  Interchange is involved
        Unsigned 8-bit integer
        Interchange is involved
    tns.connect_flags.nalink  NA services linked in
        Unsigned 8-bit integer
        NA services linked in
    tns.connect_flags.nareq  NA services required
        Unsigned 8-bit integer
        NA services required
    tns.connect_flags.wantna  NA services wanted
        Unsigned 8-bit integer
        NA services wanted
    tns.connect_flags0  Connect Flags 0
        Unsigned 8-bit integer
        Connect Flags 0
    tns.connect_flags1  Connect Flags 1
        Unsigned 8-bit integer
        Connect Flags 1
    tns.control  Control
        Boolean
        Control
    tns.control.cmd  Control Command
        Unsigned 16-bit integer
        Control Command
    tns.control.data  Control Data
        Byte array
        Control Data
    tns.data  Data
        Boolean
        Data
    tns.data_flag  Data Flag
        Unsigned 16-bit integer
        Data Flag
    tns.data_flag.c  Confirmation
        Unsigned 16-bit integer
        Confirmation
    tns.data_flag.dic  Do Immediate Confirmation
        Unsigned 16-bit integer
        Do Immediate Confirmation
    tns.data_flag.eof  End of File
        Unsigned 16-bit integer
        End of File
    tns.data_flag.more  More Data to Come
        Unsigned 16-bit integer
        More Data to Come
    tns.data_flag.rc  Request Confirmation
        Unsigned 16-bit integer
        Request Confirmation
    tns.data_flag.reserved  Reserved
        Unsigned 16-bit integer
        Reserved
    tns.data_flag.rts  Request To Send
        Unsigned 16-bit integer
        Request To Send
    tns.data_flag.send  Send Token
        Unsigned 16-bit integer
        Send Token
    tns.data_flag.sntt  Send NT Trailer
        Unsigned 16-bit integer
        Send NT Trailer
    tns.header_checksum  Header Checksum
        Unsigned 16-bit integer
        Checksum of Header Data
    tns.length  Packet Length
        Unsigned 16-bit integer
        Length of TNS packet
    tns.line_turnaround  Line Turnaround Value
        Unsigned 16-bit integer
        Line Turnaround Value
    tns.marker  Marker
        Boolean
        Marker
    tns.marker.data  Marker Data
        Unsigned 16-bit integer
        Marker Data
    tns.marker.databyte  Marker Data Byte
        Unsigned 8-bit integer
        Marker Data Byte
    tns.marker.type  Marker Type
        Unsigned 8-bit integer
        Marker Type
    tns.max_tdu_size  Maximum Transmission Data Unit Size
        Unsigned 16-bit integer
        Maximum Transmission Data Unit Size
    tns.nt_proto_characteristics  NT Protocol Characteristics
        Unsigned 16-bit integer
        NT Protocol Characteristics
    tns.ntp_flag.asio  ASync IO Supported
        Unsigned 16-bit integer
        ASync IO Supported
    tns.ntp_flag.cbio  Callback IO supported
        Unsigned 16-bit integer
        Callback IO supported
    tns.ntp_flag.crel  Confirmed release
        Unsigned 16-bit integer
        Confirmed release
    tns.ntp_flag.dfio  Full duplex IO supported
        Unsigned 16-bit integer
        Full duplex IO supported
    tns.ntp_flag.dtest  Data test
        Unsigned 16-bit integer
        Data Test
    tns.ntp_flag.grant  Can grant connection to another
        Unsigned 16-bit integer
        Can grant connection to another
    tns.ntp_flag.handoff  Can handoff connection to another
        Unsigned 16-bit integer
        Can handoff connection to another
    tns.ntp_flag.hangon  Hangon to listener connect
        Unsigned 16-bit integer
        Hangon to listener connect
    tns.ntp_flag.pio  Packet oriented IO
        Unsigned 16-bit integer
        Packet oriented IO
    tns.ntp_flag.sigio  Generate SIGIO signal
        Unsigned 16-bit integer
        Generate SIGIO signal
    tns.ntp_flag.sigpipe  Generate SIGPIPE signal
        Unsigned 16-bit integer
        Generate SIGPIPE signal
    tns.ntp_flag.sigurg  Generate SIGURG signal
        Unsigned 16-bit integer
        Generate SIGURG signal
    tns.ntp_flag.srun  Spawner running
        Unsigned 16-bit integer
        Spawner running
    tns.ntp_flag.tduio  TDU based IO
        Unsigned 16-bit integer
        TDU based IO
    tns.ntp_flag.testop  Test operation
        Unsigned 16-bit integer
        Test operation
    tns.ntp_flag.urgentio  Urgent IO supported
        Unsigned 16-bit integer
        Urgent IO supported
    tns.packet_checksum  Packet Checksum
        Unsigned 16-bit integer
        Checksum of Packet Data
    tns.redirect  Redirect
        Boolean
        Redirect
    tns.redirect_data  Redirect Data
        String
        Redirect Data
    tns.redirect_data_length  Redirect Data Length
        Unsigned 16-bit integer
        Length of Redirect Data
    tns.refuse  Refuse
        Boolean
        Refuse
    tns.refuse_data  Refuse Data
        String
        Refuse Data
    tns.refuse_data_length  Refuse Data Length
        Unsigned 16-bit integer
        Length of Refuse Data
    tns.refuse_reason_system  Refuse Reason (System)
        Unsigned 8-bit integer
        Refuse Reason from System
    tns.refuse_reason_user  Refuse Reason (User)
        Unsigned 8-bit integer
        Refuse Reason from Application
    tns.request  Request
        Boolean
        TRUE if TNS request
    tns.reserved_byte  Reserved Byte
        Byte array
        Reserved Byte
    tns.response  Response
        Boolean
        TRUE if TNS response
    tns.sdu_size  Session Data Unit Size
        Unsigned 16-bit integer
        Session Data Unit Size
    tns.service_options  Service Options
        Unsigned 16-bit integer
        Service Options
    tns.so_flag.ap  Attention Processing
        Unsigned 16-bit integer
        Attention Processing
    tns.so_flag.bconn  Broken Connect Notify
        Unsigned 16-bit integer
        Broken Connect Notify
    tns.so_flag.dc1  Don't Care
        Unsigned 16-bit integer
        Don't Care
    tns.so_flag.dc2  Don't Care
        Unsigned 16-bit integer
        Don't Care
    tns.so_flag.dio  Direct IO to Transport
        Unsigned 16-bit integer
        Direct IO to Transport
    tns.so_flag.fd  Full Duplex
        Unsigned 16-bit integer
        Full Duplex
    tns.so_flag.hc  Header Checksum
        Unsigned 16-bit integer
        Header Checksum
    tns.so_flag.hd  Half Duplex
        Unsigned 16-bit integer
        Half Duplex
    tns.so_flag.pc  Packet Checksum
        Unsigned 16-bit integer
        Packet Checksum
    tns.so_flag.ra  Can Receive Attention
        Unsigned 16-bit integer
        Can Receive Attention
    tns.so_flag.sa  Can Send Attention
        Unsigned 16-bit integer
        Can Send Attention
    tns.trace_cf1  Trace Cross Facility Item 1
        Unsigned 32-bit integer
        Trace Cross Facility Item 1
    tns.trace_cf2  Trace Cross Facility Item 2
        Unsigned 32-bit integer
        Trace Cross Facility Item 2
    tns.trace_cid  Trace Unique Connection ID
        Unsigned 64-bit integer
        Trace Unique Connection ID
    tns.type  Packet Type
        Unsigned 8-bit integer
        Type of TNS packet
    tns.value_of_one  Value of 1 in Hardware
        Byte array
        Value of 1 in Hardware
    tns.version  Version
        Unsigned 16-bit integer
        Version

Trivial File Transfer Protocol (tftp)

    tftp.block  Block
        Unsigned 16-bit integer
        Block number
    tftp.destination_file  DESTINATION File
        String
        TFTP source file name
    tftp.error.code  Error code
        Unsigned 16-bit integer
        Error code in case of TFTP error message
    tftp.error.message  Error message
        String
        Error string in case of TFTP error message
    tftp.opcode  Opcode
        Unsigned 16-bit integer
        TFTP message type
    tftp.source_file  Source File
        String
        TFTP source file name
    tftp.type  Type
        String
        TFTP transfer type

Universal Computer Protocol (ucp)

    ucp.hdr.LEN  Length
        Unsigned 16-bit integer
        Total number of characters between <stx>...<etx>.
    ucp.hdr.OT  Operation
        Unsigned 8-bit integer
        The operation that is requested with this message.
    ucp.hdr.O_R  Type
        Unsigned 8-bit integer
        Your basic 'is a request or response'.
    ucp.hdr.TRN  Transaction Reference Number
        Unsigned 8-bit integer
        Transaction number for this command, used in windowing.
    ucp.message    Data
        No value
        The actual message or data.
    ucp.parm  Data
        No value
        The actual content of the operation.
    ucp.parm.AAC  AAC
        String
        Accumulated charges.
    ucp.parm.AC  AC
        String
        Authentication code.
    ucp.parm.ACK  (N)Ack
        Unsigned 8-bit integer
        Positive or negative acknowledge of the operation.
    ucp.parm.A_D  A_D
        Unsigned 8-bit integer
        Add to/delete from fixed subscriber address list record.
    ucp.parm.AdC  AdC
        String
        Address code recipient.
    ucp.parm.BAS  BAS
        Unsigned 8-bit integer
        Barring status flag.
    ucp.parm.CPg  CPg
        String
        Reserved for Code Page.
    ucp.parm.CS  CS
        Unsigned 8-bit integer
        Additional character set number.
    ucp.parm.CT  CT
        Date/Time stamp
        Accumulated charges timestamp.
    ucp.parm.DAdC  DAdC
        String
        Diverted address code.
    ucp.parm.DCs  DCs
        Unsigned 8-bit integer
        Data coding scheme (deprecated).
    ucp.parm.DD  DD
        Unsigned 8-bit integer
        Deferred delivery requested.
    ucp.parm.DDT  DDT
        Date/Time stamp
        Deferred delivery time.
    ucp.parm.DSCTS  DSCTS
        Date/Time stamp
        Delivery timestamp.
    ucp.parm.Dst  Dst
        Unsigned 8-bit integer
        Delivery status.
    ucp.parm.EC  Error code
        Unsigned 8-bit integer
        The result of the requested operation.
    ucp.parm.GA  GA
        String
        GA?? haven't got a clue.
    ucp.parm.GAdC  GAdC
        String
        Group address code.
    ucp.parm.HPLMN  HPLMN
        String
        Home PLMN address.
    ucp.parm.IVR5x  IVR5x
        String
        UCP release number supported/accepted.
    ucp.parm.L1P  L1P
        String
        New leg. code for level 1 priority.
    ucp.parm.L1R  L1R
        Unsigned 8-bit integer
        Leg. code for priority 1 flag.
    ucp.parm.L3P  L3P
        String
        New leg. code for level 3 priority.
    ucp.parm.L3R  L3R
        Unsigned 8-bit integer
        Leg. code for priority 3 flag.
    ucp.parm.LAC  LAC
        String
        New leg. code for all calls.
    ucp.parm.LAR  LAR
        Unsigned 8-bit integer
        Leg. code for all calls flag.
    ucp.parm.LAdC  LAdC
        String
        Address for VSMSC list operation.
    ucp.parm.LCR  LCR
        Unsigned 8-bit integer
        Leg. code for reverse charging flag.
    ucp.parm.LMN  LMN
        Unsigned 8-bit integer
        Last message number.
    ucp.parm.LNPI  LNPI
        Unsigned 8-bit integer
        Numbering plan id. list address.
    ucp.parm.LNo  LNo
        String
        Standard text list number requested by calling party.
    ucp.parm.LPID  LPID
        Unsigned 16-bit integer
        Last resort PID value.
    ucp.parm.LPR  LPR
        String
        Legitimisation code for priority requested.
    ucp.parm.LRAd  LRAd
        String
        Last resort address.
    ucp.parm.LRC  LRC
        String
        Legitimisation code for reverse charging.
    ucp.parm.LRP  LRP
        String
        Legitimisation code for repitition.
    ucp.parm.LRR  LRR
        Unsigned 8-bit integer
        Leg. code for repitition flag.
    ucp.parm.LRq  LRq
        Unsigned 8-bit integer
        Last resort address request.
    ucp.parm.LST  LST
        String
        Legitimisation code for standard text.
    ucp.parm.LTON  LTON
        Unsigned 8-bit integer
        Type of number list address.
    ucp.parm.LUM  LUM
        String
        Legitimisation code for urgent message.
    ucp.parm.LUR  LUR
        Unsigned 8-bit integer
        Leg. code for urgent message flag.
    ucp.parm.MCLs  MCLs
        Unsigned 8-bit integer
        Message class.
    ucp.parm.MMS  MMS
        Unsigned 8-bit integer
        More messages to send.
    ucp.parm.MNo  MNo
        String
        Message number.
    ucp.parm.MT  MT
        Unsigned 8-bit integer
        Message type.
    ucp.parm.MVP  MVP
        Date/Time stamp
        Mofified validity period.
    ucp.parm.NAC  NAC
        String
        New authentication code.
    ucp.parm.NAdC  NAdC
        String
        Notification address.
    ucp.parm.NB    NB
        String
        No. of bits in Transparent Data (TD) message.
    ucp.parm.NMESS  NMESS
        Unsigned 8-bit integer
        Number of stored messages.
    ucp.parm.NMESS_str  NMESS_str
        String
        Number of stored messages.
    ucp.parm.NPID  NPID
        Unsigned 16-bit integer
        Notification PID value.
    ucp.parm.NPL  NPL
        Unsigned 16-bit integer
        Number of parameters in the following list.
    ucp.parm.NPWD  NPWD
        No value
        New password.
    ucp.parm.NRq  NRq
        Unsigned 8-bit integer
        Notification request.
    ucp.parm.NT  NT
        Unsigned 8-bit integer
        Notification type.
    ucp.parm.NoA  NoA
        Unsigned 16-bit integer
        Maximum number of alphanumerical characters accepted.
    ucp.parm.NoB  NoB
        Unsigned 16-bit integer
        Maximum number of data bits accepted.
    ucp.parm.NoN  NoN
        Unsigned 16-bit integer
        Maximum number of numerical characters accepted.
    ucp.parm.OAC  OAC
        String
        Authentication code, originator.
    ucp.parm.OAdC  OAdC
        String
        Address code originator.
    ucp.parm.ONPI  ONPI
        Unsigned 8-bit integer
        Originator numbering plan id.
    ucp.parm.OPID  OPID
        Unsigned 8-bit integer
        Originator protocol identifier.
    ucp.parm.OTOA  OTOA
        String
        Originator Type Of Address.
    ucp.parm.OTON  OTON
        Unsigned 8-bit integer
        Originator type of number.
    ucp.parm.PID  PID
        Unsigned 16-bit integer
        SMT PID value.
    ucp.parm.PNC  PNC
        Unsigned 8-bit integer
        Paging network controller.
    ucp.parm.PR  PR
        Unsigned 8-bit integer
        Priority requested.
    ucp.parm.PWD  PWD
        No value
        Current password.
    ucp.parm.RC  RC
        Unsigned 8-bit integer
        Reverse charging request.
    ucp.parm.REQ_OT  REQ_OT
        Unsigned 8-bit integer
        UCP release number supported/accepted.
    ucp.parm.RES1  RES1
        String
        Reserved for future use.
    ucp.parm.RES2  RES2
        String
        Reserved for future use.
    ucp.parm.RES4  RES4
        String
        Reserved for future use.
    ucp.parm.RES5  RES5
        String
        Reserved for future use.
    ucp.parm.RP  RP
        Unsigned 8-bit integer
        Repitition requested.
    ucp.parm.RPI  RPI
        Unsigned 8-bit integer
        Reply path.
    ucp.parm.RPID  RPID
        String
        Replace PID
    ucp.parm.RPLy  RPLy
        String
        Reserved for Reply type.
    ucp.parm.RT  RT
        Unsigned 8-bit integer
        Receiver type.
    ucp.parm.R_T  R_T
        String
        Message number.
    ucp.parm.Rsn  Rsn
        Unsigned 16-bit integer
        Reason code.
    ucp.parm.SCTS  SCTS
        Date/Time stamp
        Service Centre timestamp.
    ucp.parm.SM  SM
        String
        System message.
    ucp.parm.SP  SP
        Date/Time stamp
        Stop time.
    ucp.parm.SSTAT  SSTAT
        Unsigned 8-bit integer
        Supplementary services for which status is requested.
    ucp.parm.ST  ST
        Date/Time stamp
        Start time.
    ucp.parm.STYP0  STYP0
        Unsigned 8-bit integer
        Subtype of operation.
    ucp.parm.STYP1  STYP1
        Unsigned 8-bit integer
        Subtype of operation.
    ucp.parm.STx  STx
        No value
        Standard text.
    ucp.parm.TNo  TNo
        String
        Standard text number requested by calling party.
    ucp.parm.UM  UM
        Unsigned 8-bit integer
        Urgent message indicator.
    ucp.parm.VERS  VERS
        String
        Version number.
    ucp.parm.VP  VP
        Date/Time stamp
        Validity period.
    ucp.parm.XSer  Extra services:
        No value
        Extra services.
    ucp.xser.service  Type of service
        Unsigned 8-bit integer
        The type of service specified.

Unreassembled Fragmented Packet (unreassembled)

User Datagram Protocol (udp)

    udp.checksum  Checksum
        Unsigned 16-bit integer
    udp.checksum_bad  Bad Checksum
        Boolean
    udp.dstport  Destination Port
        Unsigned 16-bit integer
    udp.length  Length
        Unsigned 16-bit integer
    udp.port  Source or Destination Port
        Unsigned 16-bit integer
    udp.srcport  Source Port
        Unsigned 16-bit integer

Virtual Router Redundancy Protocol (vrrp)

    vrrp.adver_int  Adver Int
        Unsigned 8-bit integer
        Time interval (in seconds) between ADVERTISEMENTS
    vrrp.auth_type  Auth Type
        Unsigned 8-bit integer
        The authentication method being utilized
    vrrp.count_ip_addrs  Count IP Addrs
        Unsigned 8-bit integer
        The number of IP addresses contained in this VRRP advertisement
    vrrp.ip_addr  IP Address
        IPv4 address
        IP address associated with the virtual router
    vrrp.ipv6_addr  IPv6 Address
        IPv6 address
        IPv6 address associated with the virtual router
    vrrp.prio  Priority
        Unsigned 8-bit integer
        Sending VRRP router's priority for the virtual router
    vrrp.type  VRRP packet type
        Unsigned 8-bit integer
        VRRP type
    vrrp.typever  VRRP message version and type
        Unsigned 8-bit integer
        VRRP version and type
    vrrp.version  VRRP protocol version
        Unsigned 8-bit integer
        VRRP version
    vrrp.virt_rtr_id  Virtual Rtr ID
        Unsigned 8-bit integer
        Virtual router this packet is reporting status for

Virtual Trunking Protocol (vtp)

    vtp.code  Code
        Unsigned 8-bit integer
    vtp.conf_rev_num  Configuration Revision Number
        Unsigned 32-bit integer
        Revision number of the configuration information
    vtp.followers  Followers
        Unsigned 8-bit integer
        Number of following Subset-Advert messages
    vtp.md  Management Domain
        String
        Management domain
    vtp.md5_digest  MD5 Digest
        Byte array
    vtp.md_len  Management Domain Length
        Unsigned 8-bit integer
        Length of management domain string
    vtp.seq_num  Sequence Number
        Unsigned 8-bit integer
        Order of this frame in the sequence of Subset-Advert frames
    vtp.start_value  Start Value
        Unsigned 16-bit integer
        Virtual LAN ID of first VLAN for which information is requested
    vtp.upd_id  Updater Identity
        IPv4 address
        IP address of the updater
    vtp.upd_ts  Update Timestamp
        String
        Time stamp of the current configuration revision
    vtp.version  Version
        Unsigned 8-bit integer
    vtp.vlan_info.802_10_index  802.10 Index
        Unsigned 32-bit integer
        IEEE 802.10 security association identifier for this VLAN
    vtp.vlan_info.isl_vlan_id  ISL VLAN ID
        Unsigned 16-bit integer
        ID of this VLAN on ISL trunks
    vtp.vlan_info.len  VLAN Information Length
        Unsigned 8-bit integer
        Length of the VLAN information field
    vtp.vlan_info.mtu_size  MTU Size
        Unsigned 16-bit integer
        MTU for this VLAN
    vtp.vlan_info.status.vlan_susp  VLAN suspended
        Boolean
        VLAN suspended
    vtp.vlan_info.tlv_len  Length
        Unsigned 8-bit integer
    vtp.vlan_info.tlv_type  Type
        Unsigned 8-bit integer
    vtp.vlan_info.vlan_name  VLAN Name
        String
        VLAN name
    vtp.vlan_info.vlan_name_len  VLAN Name Length
        Unsigned 8-bit integer
        Length of VLAN name string
    vtp.vlan_info.vlan_type  VLAN Type
        Unsigned 8-bit integer
        Type of VLAN

Web Cache Coordination Protocol (wccp)

    wccp.cache_ip  Web Cache IP address
        IPv4 address
        The IP address of a Web cache
    wccp.change_num  Change Number
        Unsigned 32-bit integer
        The Web-Cache list entry change number
    wccp.hash_revision  Hash Revision
        Unsigned 32-bit integer
        The cache hash revision
    wccp.message  WCCP Message Type
        Unsigned 32-bit integer
        The WCCP message that was sent
    wccp.recvd_id  Received ID
        Unsigned 32-bit integer
        The number of I_SEE_YOU's that have been sent
    wccp.version  WCCP Version
        Unsigned 32-bit integer
        The WCCP version

Wellfleet Compression (wcp)

    wcp.alg  Alg
        Unsigned 8-bit integer
        Algorithm
    wcp.alg1  Alg 1
        Unsigned 8-bit integer
        Algorithm #1
    wcp.alg2  Alg 2
        Unsigned 8-bit integer
        Algorithm #2
    wcp.alg3  Alg 3
        Unsigned 8-bit integer
        Algorithm #3
    wcp.alg4  Alg 4
        Unsigned 8-bit integer
        Algorithm #4
    wcp.alg_cnt  Alg Count
        Unsigned 8-bit integer
        Algorithm Count
    wcp.checksum  Checksum
        Unsigned 8-bit integer
        Packet Checksum
    wcp.cmd  Command
        Unsigned 8-bit integer
        Compression Command
    wcp.ext_cmd  Extended Command
        Unsigned 8-bit integer
        Extended Compression Command
    wcp.flag  Compress Flag
        Unsigned 8-bit integer
        Compressed byte flag
    wcp.hist  History
        Unsigned 8-bit integer
        History Size
    wcp.init  Initiator
        Unsigned 8-bit integer
        Initiator
    wcp.long_comp  Long Compression
        Unsigned 16-bit integer
        Long Compression type
    wcp.long_len  Compress Length
        Unsigned 8-bit integer
        Compressed length
    wcp.mark  Compress Marker
        Unsigned 8-bit integer
        Compressed marker
    wcp.off  Source offset
        Unsigned 16-bit integer
        Data source offset
    wcp.pib  PIB
        Unsigned 8-bit integer
        PIB
    wcp.ppc  PerPackComp
        Unsigned 8-bit integer
        Per Packet Compression
    wcp.rev  Revision
        Unsigned 8-bit integer
        Revision
    wcp.rexmit  Rexmit
        Unsigned 8-bit integer
        Retransmit
    wcp.seq  SEQ
        Unsigned 16-bit integer
        Sequence Number
    wcp.seq_size  Seq Size
        Unsigned 8-bit integer
        Sequence Size
    wcp.short_comp  Short Compression
        Unsigned 8-bit integer
        Short Compression type
    wcp.short_len  Compress Length
        Unsigned 8-bit integer
        Compressed length
    wcp.tid  TID
        Unsigned 16-bit integer
        TID

Who (who)

    who.boottime  Boot Time
        Date/Time stamp
    who.hostname  Hostname
        String
    who.idle  Time Idle
        Unsigned 32-bit integer
    who.loadav_10  Load Average Over Past 10 Minutes
        Double-precision floating point
    who.loadav_15  Load Average Over Past 15 Minutes
        Double-precision floating point
    who.loadav_5  Load Average Over Past  5 Minutes
        Double-precision floating point
    who.recvtime  Receive Time
        Date/Time stamp
    who.sendtime  Send Time
        Date/Time stamp
    who.timeon  Time On
        Date/Time stamp
    who.tty  TTY Name
        String
    who.type  Type
        Unsigned 8-bit integer
    who.uid  User ID
        String
    who.vers  Version
        Unsigned 8-bit integer
    who.whoent  Who utmp Entry
        No value

Wireless Session Protocol (wap-wsp)

    wsp.TID  Transmission ID
        Unsigned 8-bit integer
        Transmission ID
    wsp.capabilities  Capabilities
        No value
        Capabilities
    wsp.capabilities.aliases  Aliases
        Unsigned 8-bit integer
        Aliases
    wsp.capabilities.client_SDU  Client SDU
        Unsigned 8-bit integer
        Client SDU
    wsp.capabilities.code_pages  Header Code Pages
        String
        Header Code Pages
    wsp.capabilities.extend_methods  Extended Methods
        String
        Extended Methods
    wsp.capabilities.method_mor  Method MOR
        Unsigned 8-bit integer
        Method MOR
    wsp.capabilities.protocol_opt  Protocol Options
        String
        Protocol Options
    wsp.capabilities.push_mor  Push MOR
        Unsigned 8-bit integer
        Push MOR
    wsp.capabilities.server_SDU  Server SDU
        Unsigned 8-bit integer
        Server SDU
    wsp.capability.length  Capability Length
        Unsigned 32-bit integer
        Capability Length
    wsp.content_type.parameter.charset  Charset
        Unsigned 16-bit integer
        Charset
    wsp.content_type.parameter.comment  Comment
        String
        Comment
    wsp.content_type.parameter.domain  Domain
        String
        Domain
    wsp.content_type.parameter.filename  Filename
        String
        Filename
    wsp.content_type.parameter.name  Name
        String
        Name
    wsp.content_type.parameter.path  Path
        String
        Path
    wsp.content_type.parameter.start  Start
        String
        Start
    wsp.content_type.parameter.start_info  Start-info
        String
        Start-info
    wsp.content_type.parameter.type  Type
        Unsigned 32-bit integer
        Type
    wsp.content_type.parameter.upart.type  Type
        String
        Multipart type
    wsp.content_type.parameter.upart.type.int  Type
        Unsigned 8-bit integer
        Multipart type (int value)
    wsp.content_type.type  Content Type
        Unsigned 8-bit integer
        Content Type
    wsp.content_type.type.string  Content Type
        String
        Content Type
    wsp.header.accept  Accept
        Unsigned 8-bit integer
        Accept
    wsp.header.accept.string  Accept
        String
        Accept
    wsp.header.accept_application  Accept-Application
        Unsigned 32-bit integer
        Accept-Application
    wsp.header.accept_application.string  Accept-Application
        String
        Accept-Application
    wsp.header.accept_charset  Accept-Charset
        Unsigned 16-bit integer
        Accept-Charset
    wsp.header.accept_charset.string  Accept-Charset
        String
        Accept-Charset
    wsp.header.accept_language  Accept-Language
        Unsigned 8-bit integer
        Accept-Language
    wsp.header.accept_language.string  Accept-Language
        String
        Accept-Language
    wsp.header.accept_ranges  Accept-Ranges
        Unsigned 8-bit integer
        Accept-Ranges
    wsp.header.accept_ranges.string  Accept-Ranges
        String
        Accept-Ranges
    wsp.header.age  Age
        Unsigned 32-bit integer
        Age
    wsp.header.application_header  Application Header
        String
        Application Header
    wsp.header.application_header.value  Application Header Value
        String
        Application Header Value
    wsp.header.bearer_indication  Bearer-indication
        Unsigned 32-bit integer
        Bearer-indication
    wsp.header.cache_control  Cache-Control
        Unsigned 8-bit integer
        Cache-Control
    wsp.header.cache_control.field_name  Field Name
        Unsigned 8-bit integer
        Cache-Control field name
    wsp.header.cache_control.field_name.str  Field Name
        String
        Cache-Control field name
    wsp.header.cache_control.string  Cache-Control
        String
        Cache-Control
    wsp.header.connection  Connection
        Unsigned 8-bit integer
        Connection
    wsp.header.connection_str  Connection
        String
        Connection
    wsp.header.content-id  Content-ID
        String
        Content-ID
    wsp.header.content_length  Content-Length
        Unsigned 32-bit integer
        Content-Length
    wsp.header.date  Date
        Date/Time stamp
        Date
    wsp.header.etag  Etag
        String
        Etag
    wsp.header.expires  Expires
        Date/Time stamp
        Expires
    wsp.header.if_modified_since  If-Modified-Since
        Date/Time stamp
        If-Modified-Since
    wsp.header.last_modified  Last-Modified
        Date/Time stamp
        Last-Modified
    wsp.header.location  Location
        String
        Location
    wsp.header.pragma  Pragma
        String
        pragma
    wsp.header.profile  Profile
        String
        Profile
    wsp.header.server  Server
        String
        Server
    wsp.header.shift  Shift code
        Unsigned 8-bit integer
        Shift code
    wsp.header.transfer_enc  Transfer Encoding
        Unsigned 8-bit integer
        Transfer Encoding
    wsp.header.transfer_enc_str  Transfer Encoding
        String
        Transfer Encoding
    wsp.header.user_agent  User-Agent
        String
        User-Agent
    wsp.header.via  Via
        String
        Via
    wsp.header.wap_application_id  X-Wap-Application-Id
        Unsigned 8-bit integer
        WAP application id
    wsp.header.wap_application_id.string  X-Wap-Application-Id
        String
        WAP application id
    wsp.header.warning  Warning
        No value
        Warning
    wsp.header.warning.agent  Warning Agent
        String
        Warning Agent
    wsp.header.warning.code  Warning Code
        Unsigned 32-bit integer
        Warning Code
    wsp.header.warning.text  Warning Text
        String
        Warning Text
    wsp.header.x-up-devcap-em-size  x-up-devcap-em-size
        Unsigned 32-bit integer
        The height and width of an uppercase M in pixels in a handset.
    wsp.header.x-up-devcap-gui  x-up-devcap-gui
        Unsigned 8-bit integer
        Indicates if the handset has a GUI
    wsp.header.x-up-devcap-has-color  x-up-devcap-has-color
        Unsigned 8-bit integer
        Indicates if the handset supports colour.
    wsp.header.x-up-devcap-immed-alert  x-up-devcap-immed-alert
        Unsigned 8-bit integer
        Indicates if the handset has support for immediate UPNOTIFY alerts.
    wsp.header.x-up-devcap-num-softkeys  x-up-devcap-num-softkeys
        Unsigned 8-bit integer
        The number of softkeys that can be displayed on the handset.
    wsp.header.x-up-devcap-screen-chars  x-up-devcap-screen-chars
        Unsigned 8-bit integer
        The height and width of the handset's display in characters.
    wsp.header.x-up-devcap-screen-depth  x-up-devcap-screen-depth
        Unsigned 8-bit integer
        The colour/gray depth of the display in bits.
    wsp.header.x-up-devcap-screen-pixels  x-up-devcap-screen-pixels
        Unsigned 32-bit integer
        The height and width of the handset's display in pixels.
    wsp.header.x-up-devcap-softkey-size  x-up-devcap-softkey-size
        Unsigned 8-bit integer
        The number of chars that can be displayed on a softkey label.
    wsp.header.x-up-proxy-ba-enable  x-up-proxy-ba-enable
        Unsigned 8-bit integer
        Indicates if the WAP gateway should cache basic authentication details on behalf of the handset
    wsp.header.x-up-proxy-ba-realm  x-up-proxy-ba-realm
        String
        Indicates the realm within which basic authentication credentials apply
    wsp.header.x-up-proxy-bookmark  x-up-proxy-bookmark
        String
        Specifies the URL to use for server-side bookmarks
    wsp.header.x-up-proxy-client-id  x-up-proxy-client-id
        Byte array
        The ClientId of the handset
    wsp.header.x-up-proxy-enable-trust  x-up-proxy-enable-trust
        Unsigned 8-bit integer
        Indicates whether to enable Trusted Provisioning Domain
    wsp.header.x-up-proxy-home-page  x-up-proxy-home-page
        String
        Specifies the server-assigned home page URL.
    wsp.header.x-up-proxy-linger  x-up-proxy-linger
        Unsigned 8-bit integer
        Indicates the circuit linger time in seconds
    wsp.header.x-up-proxy-net-ask  x-up-proxy-net-ask
        Unsigned 8-bit integer
        Indicates to browser if circuit switched call is allowed without user interaction
    wsp.header.x-up-proxy-notify  x-up-proxy-notify
        Unsigned 8-bit integer
        Indicates to the handset that there are pending UPNOTIFY pushes waiting.
    wsp.header.x-up-proxy-operator-domain  x-up-proxy-operator-domain
        String
        Indicates the Trusted Provisioning Domain.
    wsp.header.x-up-proxy-push-accept  x-up-proxy-push-accept
        String
        The content types that the handset can handle when sent via UPNOTIFY pushes.
    wsp.header.x-up-proxy-push-addr  x-up-proxy-push-addr
        Byte array
        The network address and port number that the handset can receive UPNOTIFY pushes on.
    wsp.header.x-up-proxy-push-seq  x-up-proxy-push-seq
        Unsigned 16-bit integer
        Specifies the sequence number of the last UPNOTIFY push sent.
    wsp.header.x-up-proxy-redirect-enable  x-up-proxy-redirect-enable
        Unsigned 8-bit integer
        Indicates if the handset wants the WAP gateway to handle HTTP redirects on its behalf
    wsp.header.x-up-proxy-redirect-status  x-up-proxy-redirect-status
        Unsigned 32-bit integer
        Indicates the status of a redirect performed on behalf of a handset
    wsp.header.x-up-proxy-request-uri  x-up-proxy-request-uri
        String
        Indicates to the handset that the previous request was redirected to the specified URI
    wsp.header.x-up-proxy-tod  x-up-proxy-tod
        Unsigned 8-bit integer
        Time of day
    wsp.header.x-up-proxy-trans-charset  x-up-proxy-trans-charset
        Unsigned 16-bit integer
        For POSTs indicates the charset encoding of a document
    wsp.header.x-up-proxy-trans-charset.string  x-up-proxy-trans-charset
        String
        For POSTs indicates the charset encoding of a document
    wsp.header.x-up-proxy-trust  x-up-proxy-trust
        Unsigned 8-bit integer
        Indicates if the content being returned was received from within the Trusted Provisioning Domain
    wsp.header.x-up-proxy-trust-old  x-up-proxy-trust-old
        Unsigned 8-bit integer
        Indicates if the content being returned was received from within the Trusted Provisioning Domain
    wsp.header.x-up-proxy-uplink-version  x-up-proxy-uplink-version
        String
        Version of the MAG WAP gateway
    wsp.header.x_wap_tod  X-WAP.TOD
        Date/Time stamp
        X-WAP.TOD
    wsp.headers  Headers
        No value
        Headers
    wsp.headers.header  Header
        No value
        Header
    wsp.headers_length  Headers Length
        Unsigned 32-bit integer
        Headers Length
    wsp.multipart  Part
        Unsigned 32-bit integer
        MIME part of multipart data.
    wsp.multipart.data  Data in this part
        No value
        The data of 1 MIME-multipart part.
    wsp.pdu_type  PDU Type
        Unsigned 8-bit integer
        PDU Type
    wsp.post.data  Data (Post)
        No value
        Post Data
    wsp.push.data  Push Data
        No value
        Push Data
    wsp.redirect_addr  Address
        Byte array
        Redirect Address
    wsp.redirect_afl  Flags/Length
        Unsigned 8-bit integer
        Redirect Address Flags/Length
    wsp.redirect_afl.address_len  Address Len
        Unsigned 8-bit integer
        Redirect Address Length
    wsp.redirect_afl.bearer_type_included  Bearer Type Included
        Boolean
        Redirect Address bearer type included
    wsp.redirect_afl.port_number_included  Port Number Included
        Boolean
        Redirect Address port number included
    wsp.redirect_bearer_type  Bearer Type
        Unsigned 8-bit integer
        Redirect Bearer Type
    wsp.redirect_flags  Flags
        Unsigned 8-bit integer
        Redirect Flags
    wsp.redirect_flags.permanent  Permanent Redirect
        Boolean
        Permanent Redirect
    wsp.redirect_flags.reuse_security_session  Reuse Security Session
        Boolean
        Permanent Redirect
    wsp.redirect_ipv4_addr  IP Address
        IPv4 address
        Redirect Address (IP)
    wsp.redirect_ipv6_addr  IPv6 Address
        IPv6 address
        Redirect Address (IPv6)
    wsp.redirect_port_num  Port Number
        Unsigned 16-bit integer
        Redirect Port Number
    wsp.reply.data  Data
        No value
        Data
    wsp.reply.status  Status
        Unsigned 8-bit integer
        Status
    wsp.server.session_id  Server Session ID
        Unsigned 32-bit integer
        Server Session ID
    wsp.uri  URI
        String
        URI
    wsp.uri_length  URI Length
        Unsigned 32-bit integer
        URI Length
    wsp.version.major  Version (Major)
        Unsigned 8-bit integer
        Version (Major)
    wsp.version.minor  Version (Minor)
        Unsigned 8-bit integer
        Version (Minor)

Wireless Transaction Protocol (wap-wsp-wtp)

    wtp.RID  Re-transmission Indicator
        Boolean
        Re-transmission Indicator
    wtp.TID  Transaction ID
        Unsigned 16-bit integer
        Transaction ID
    wtp.TID.response  TID Response
        Boolean
        TID Response
    wtp.abort.reason.provider  Abort Reason
        Unsigned 8-bit integer
        Abort Reason
    wtp.abort.reason.user  Abort Reason
        Unsigned 8-bit integer
        Abort Reason
    wtp.abort.type  Abort Type
        Unsigned 8-bit integer
        Abort Type
    wtp.ack.tvetok  Tve/Tok flag
        Boolean
        Tve/Tok flag
    wtp.continue_flag  Continue Flag
        Boolean
        Continue Flag
    wtp.fragment  WTP Fragment
        No value
        WTP Fragment
    wtp.fragment.error  Defragmentation error
        No value
        Defragmentation error due to illegal fragments
    wtp.fragment.multipletails  Multiple tail fragments found
        Boolean
        Several tails were found when defragmenting the packet
    wtp.fragment.overlap  Fragment overlap
        Boolean
        Fragment overlaps with other fragments
    wtp.fragment.overlap.conflict  Conflicting data in fragment overlap
        Boolean
        Overlapping fragments contained conflicting data
    wtp.fragment.toolongfragment  Fragment too long
        Boolean
        Fragment contained data past end of packet
    wtp.fragments  WTP Fragments
        No value
        WTP Fragments
    wtp.header.TIDNew  TIDNew
        Boolean
        TIDNew
    wtp.header.UP  U/P flag
        Boolean
        U/P Flag
    wtp.header.missing_packets  Missing Packets
        Unsigned 8-bit integer
        Missing Packets
    wtp.header.sequence  Packet Sequence Number
        Unsigned 8-bit integer
        Packet Sequence Number
    wtp.header.version  Version
        Unsigned 8-bit integer
        Version
    wtp.header_data  Data
        Byte array
        Data
    wtp.header_variable_part  Header: Variable part
        Byte array
        Variable part of the header
    wtp.inv.reserved  Reserved
        Unsigned 8-bit integer
        Reserved
    wtp.inv.transaction_class  Transaction Class
        Unsigned 8-bit integer
        Transaction Class
    wtp.pdu_type  PDU Type
        Unsigned 8-bit integer
        PDU Type
    wtp.sub_pdu_size  Sub PDU size
        Byte array
        Size of Sub-PDU
    wtp.tpi  TPI
        Unsigned 8-bit integer
        Identification of the Transport Information Item
    wtp.tpi.info  Information
        No value
        The information being send by this TPI
    wtp.tpi.opt  Option
        Unsigned 8-bit integer
        The given option for this TPI
    wtp.tpi.opt.val  Option Value
        No value
        The value that is supplied with this option
    wtp.tpi.psn  Packet sequence number
        Unsigned 8-bit integer
        Sequence number of this packet
    wtp.trailer_flags  Trailer Flags
        Unsigned 8-bit integer
        Trailer Flags

Wireless Transport Layer Security (wap-wtls)

    wsp.wtls.alert  Alert
        No value
        Alert
    wsp.wtls.alert.description  Description
        Unsigned 8-bit integer
        Description
    wsp.wtls.alert.level  Level
        Unsigned 8-bit integer
        Level
    wsp.wtls.handshake  Handshake
        Unsigned 8-bit integer
        Handshake
    wsp.wtls.handshake.certificate  Certificate
        No value
        Certificate
    wsp.wtls.handshake.certificate.after  Valid not after
        Date/Time stamp
        Valid not after
    wsp.wtls.handshake.certificate.before  Valid not before
        Date/Time stamp
        Valid not before
    wsp.wtls.handshake.certificate.issuer.charset  Charset
        Unsigned 16-bit integer
        Charset
    wsp.wtls.handshake.certificate.issuer.name  Name
        String
        Name
    wsp.wtls.handshake.certificate.issuer.size  Size
        Unsigned 8-bit integer
        Size
    wsp.wtls.handshake.certificate.issuer.type  Issuer
        Unsigned 8-bit integer
        Issuer
    wsp.wtls.handshake.certificate.parameter  Parameter Set
        String
        Parameter Set
    wsp.wtls.handshake.certificate.parameter_index  Parameter Index
        Unsigned 8-bit integer
        Parameter Index
    wsp.wtls.handshake.certificate.public.type  Public Key Type
        Unsigned 8-bit integer
        Public Key Type
    wsp.wtls.handshake.certificate.rsa.exponent  RSA Exponent Size
        Unsigned 32-bit integer
        RSA Exponent Size
    wsp.wtls.handshake.certificate.rsa.modules  RSA Modulus Size
        Unsigned 32-bit integer
        RSA Modulus Size
    wsp.wtls.handshake.certificate.signature.signature  Signature Size
        Unsigned 32-bit integer
        Signature Size
    wsp.wtls.handshake.certificate.signature.type  Signature Type
        Unsigned 8-bit integer
        Signature Type
    wsp.wtls.handshake.certificate.subject.charset  Charset
        Unsigned 16-bit integer
        Charset
    wsp.wtls.handshake.certificate.subject.name  Name
        String
        Name
    wsp.wtls.handshake.certificate.subject.size  Size
        Unsigned 8-bit integer
        Size
    wsp.wtls.handshake.certificate.subject.type  Subject
        Unsigned 8-bit integer
        Subject
    wsp.wtls.handshake.certificate.type  Type
        Unsigned 8-bit integer
        Type
    wsp.wtls.handshake.certificate.version  Version
        Unsigned 8-bit integer
        Version
    wsp.wtls.handshake.certificates  Certificates
        No value
        Certificates
    wsp.wtls.handshake.client_hello  Client Hello
        No value
        Client Hello
    wsp.wtls.handshake.client_hello.cipher  Cipher
        String
        Cipher
    wsp.wtls.handshake.client_hello.ciphers  Cipher Suites
        No value
        Cipher Suite
    wsp.wtls.handshake.client_hello.client_keys_id  Client Keys
        No value
        Client Keys
    wsp.wtls.handshake.client_hello.client_keys_len  Length
        Unsigned 16-bit integer
        Length
    wsp.wtls.handshake.client_hello.comp_methods  Compression Methods
        No value
        Compression Methods
    wsp.wtls.handshake.client_hello.compression  Compression
        Unsigned 8-bit integer
        Compression
    wsp.wtls.handshake.client_hello.gmt  Time GMT
        Date/Time stamp
        Time GMT
    wsp.wtls.handshake.client_hello.ident_charset  Identifier CharSet
        Unsigned 16-bit integer
        Identifier CharSet
    wsp.wtls.handshake.client_hello.ident_name  Identifier Name
        String
        Identifier Name
    wsp.wtls.handshake.client_hello.ident_size  Identifier Size
        Unsigned 8-bit integer
        Identifier Size
    wsp.wtls.handshake.client_hello.ident_type  Identifier Type
        Unsigned 8-bit integer
        Identifier Type
    wsp.wtls.handshake.client_hello.identifier  Identifier
        No value
        Identifier
    wsp.wtls.handshake.client_hello.key.key_exchange  Key Exchange
        Unsigned 8-bit integer
        Key Exchange
    wsp.wtls.handshake.client_hello.key.key_exchange.suite  Suite
        Unsigned 8-bit integer
        Suite
    wsp.wtls.handshake.client_hello.parameter  Parameter Set
        String
        Parameter Set
    wsp.wtls.handshake.client_hello.parameter_index  Parameter Index
        Unsigned 8-bit integer
        Parameter Index
    wsp.wtls.handshake.client_hello.random  Random
        No value
        Random
    wsp.wtls.handshake.client_hello.refresh  Refresh
        Unsigned 8-bit integer
        Refresh
    wsp.wtls.handshake.client_hello.sequence_mode  Sequence Mode
        Unsigned 8-bit integer
        Sequence Mode
    wsp.wtls.handshake.client_hello.session.str  Session ID
        String
        Session ID
    wsp.wtls.handshake.client_hello.sessionid  Session ID
        Unsigned 32-bit integer
        Session ID
    wsp.wtls.handshake.client_hello.trusted_keys_id  Trusted Keys
        No value
        Trusted Keys
    wsp.wtls.handshake.client_hello.version  Version
        Unsigned 8-bit integer
        Version
    wsp.wtls.handshake.length  Length
        Unsigned 16-bit integer
        Length
    wsp.wtls.handshake.server_hello  Server Hello
        No value
        Server Hello
    wsp.wtls.handshake.server_hello.cipher  Cipher
        No value
        Cipher
    wsp.wtls.handshake.server_hello.cipher.bulk  Cipher Bulk
        Unsigned 8-bit integer
        Cipher Bulk
    wsp.wtls.handshake.server_hello.cipher.mac  Cipher MAC
        Unsigned 8-bit integer
        Cipher MAC
    wsp.wtls.handshake.server_hello.compression  Compression
        Unsigned 8-bit integer
        Compression
    wsp.wtls.handshake.server_hello.gmt  Time GMT
        Date/Time stamp
        Time GMT
    wsp.wtls.handshake.server_hello.key  Client Key ID
        Unsigned 8-bit integer
        Client Key ID
    wsp.wtls.handshake.server_hello.random  Random
        No value
        Random
    wsp.wtls.handshake.server_hello.refresh  Refresh
        Unsigned 8-bit integer
        Refresh
    wsp.wtls.handshake.server_hello.sequence_mode  Sequence Mode
        Unsigned 8-bit integer
        Sequence Mode
    wsp.wtls.handshake.server_hello.session.str  Session ID
        String
        Session ID
    wsp.wtls.handshake.server_hello.sessionid  Session ID
        Unsigned 32-bit integer
        Session ID
    wsp.wtls.handshake.server_hello.version  Version
        Unsigned 8-bit integer
        Version
    wsp.wtls.handshake.type  Type
        Unsigned 8-bit integer
        Type
    wsp.wtls.rec_cipher  Record Ciphered
        No value
        Record Ciphered
    wsp.wtls.rec_length  Record Length
        Unsigned 16-bit integer
        Record Length
    wsp.wtls.rec_seq  Record Sequence
        Unsigned 16-bit integer
        Record Sequence
    wsp.wtls.rec_type  Record Type
        Unsigned 8-bit integer
        Record Type
    wsp.wtls.record  Record
        Unsigned 8-bit integer
        Record

X Display Manager Control Protocol (xdmcp)

    xdmcp.authentication_name  Authentication name
        String
        Authentication name
    xdmcp.authorization_name  Authorization name
        String
        Authorization name
    xdmcp.display_number  Display number
        Unsigned 16-bit integer
        Display number
    xdmcp.hostname  Hostname
        String
        Hostname
    xdmcp.length  Message length
        Unsigned 16-bit integer
        Length of the remaining message
    xdmcp.opcode  Opcode
        Unsigned 16-bit integer
        Opcode
    xdmcp.session_id  Session ID
        Unsigned 32-bit integer
        Session identifier
    xdmcp.status  Status
        String
        Status
    xdmcp.version  Version
        Unsigned 16-bit integer
        Protocol version

X.25 (x.25)

    x.25.a  A Bit
        Boolean
        Address Bit
    x.25.d  D Bit
        Boolean
        Delivery Confirmation Bit
    x.25.gfi  GFI
        Unsigned 16-bit integer
        General format identifier
    x.25.lcn  Logical Channel
        Unsigned 16-bit integer
        Logical Channel Number
    x.25.m  M Bit
        Boolean
        More Bit
    x.25.mod  Modulo
        Unsigned 16-bit integer
        Specifies whether the frame is modulo 8 or 128
    x.25.p_r  P(R)
        Unsigned 8-bit integer
        Packet Receive Sequence Number
    x.25.p_s  P(S)
        Unsigned 8-bit integer
        Packet Send Sequence Number
    x.25.q  Q Bit
        Boolean
        Qualifier Bit
    x.25.type  Packet Type
        Unsigned 8-bit integer
        Packet Type

X.25 over TCP (xot)

    xot.length  Length
        Unsigned 16-bit integer
        Length of X.25 over TCP packet
    xot.version  Version
        Unsigned 16-bit integer
        Version of X.25 over TCP protocol

X11 (x11)

    x11.acceleration-denominator  acceleration-denominator
        Signed 16-bit integer
    x11.acceleration-numerator  acceleration-numerator
        Signed 16-bit integer
    x11.access-mode  access-mode
        Unsigned 8-bit integer
    x11.address  address
        Byte array
    x11.address-length  address-length
        Unsigned 16-bit integer
    x11.alloc  alloc
        Unsigned 8-bit integer
    x11.allow-events-mode  allow-events-mode
        Unsigned 8-bit integer
    x11.allow-exposures  allow-exposures
        Unsigned 8-bit integer
    x11.arc  arc
        No value
    x11.arc.angle1  angle1
        Signed 16-bit integer
    x11.arc.angle2  angle2
        Signed 16-bit integer
    x11.arc.height  height
        Unsigned 16-bit integer
    x11.arc.mode  mode
        Unsigned 8-bit integer
        Tell us if we're drawing an arc or a pie
    x11.arc.width  width
        Unsigned 16-bit integer
    x11.arc.x  x
        Signed 16-bit integer
    x11.arc.y  y
        Signed 16-bit integer
    x11.arcs  arcs
        No value
    x11.atom  atom
        Unsigned 32-bit integer
    x11.authorization-protocol-data  authorization-protocol-data
        String
    x11.authorization-protocol-data-length  authorization-protocol-data-length
        Unsigned 16-bit integer
    x11.authorization-protocol-name  authorization-protocol-name
        String
    x11.authorization-protocol-name-length  authorization-protocol-name-length
        Unsigned 16-bit integer
    x11.auto-repeat-mode  auto-repeat-mode
        Unsigned 8-bit integer
    x11.back-blue  back-blue
        Unsigned 16-bit integer
        Background blue value for a cursor
    x11.back-green  back-green
        Unsigned 16-bit integer
        Background green value for a cursor
    x11.back-red  back-red
        Unsigned 16-bit integer
        Background red value for a cursor
    x11.background  background
        Unsigned 32-bit integer
        Background color
    x11.background-pixel  background-pixel
        Unsigned 32-bit integer
        Background color for a window
    x11.background-pixmap  background-pixmap
        Unsigned 32-bit integer
        Background pixmap for a window
    x11.backing-pixel  backing-pixel
        Unsigned 32-bit integer
    x11.backing-planes  backing-planes
        Unsigned 32-bit integer
    x11.backing-store  backing-store
        Unsigned 8-bit integer
    x11.bell-duration  bell-duration
        Signed 16-bit integer
    x11.bell-percent  bell-percent
        Signed 8-bit integer
    x11.bell-pitch  bell-pitch
        Signed 16-bit integer
    x11.bit-gravity  bit-gravity
        Unsigned 8-bit integer
    x11.bit-plane  bit-plane
        Unsigned 32-bit integer
    x11.blue  blue
        Unsigned 16-bit integer
    x11.blues  blues
        Unsigned 16-bit integer
    x11.border-pixel  border-pixel
        Unsigned 32-bit integer
    x11.border-pixmap  border-pixmap
        Unsigned 32-bit integer
    x11.border-width  border-width
        Unsigned 16-bit integer
    x11.button  button
        Unsigned 8-bit integer
    x11.byte-order  byte-order
        Unsigned 8-bit integer
    x11.cap-style  cap-style
        Unsigned 8-bit integer
    x11.change-host-mode  change-host-mode
        Unsigned 8-bit integer
    x11.cid  cid
        Unsigned 32-bit integer
    x11.class  class
        Unsigned 8-bit integer
    x11.clip-mask  clip-mask
        Unsigned 32-bit integer
    x11.clip-x-origin  clip-x-origin
        Signed 16-bit integer
    x11.clip-y-origin  clip-y-origin
        Signed 16-bit integer
    x11.close-down-mode  close-down-mode
        Unsigned 8-bit integer
    x11.cmap  cmap
        Unsigned 32-bit integer
    x11.color-items  color-items
        No value
    x11.coloritem  coloritem
        No value
    x11.coloritem.blue  blue
        Unsigned 16-bit integer
    x11.coloritem.flags  flags
        Unsigned 8-bit integer
    x11.coloritem.flags.do-blue  do-blue
        Boolean
    x11.coloritem.flags.do-green  do-green
        Boolean
    x11.coloritem.flags.do-red  do-red
        Boolean
    x11.coloritem.flags.unused  unused
        Boolean
    x11.coloritem.green  green
        Unsigned 16-bit integer
    x11.coloritem.pixel  pixel
        Unsigned 32-bit integer
    x11.coloritem.red  red
        Unsigned 16-bit integer
    x11.coloritem.unused  unused
        No value
    x11.colormap  colormap
        Unsigned 32-bit integer
    x11.colors  colors
        Unsigned 16-bit integer
        The number of color cells to allocate
    x11.configure-window-mask  configure-window-mask
        Unsigned 16-bit integer
    x11.configure-window-mask.border-width  border-width
        Boolean
    x11.configure-window-mask.height  height
        Boolean
    x11.configure-window-mask.sibling  sibling
        Boolean
    x11.configure-window-mask.stack-mode  stack-mode
        Boolean
    x11.configure-window-mask.width  width
        Boolean
    x11.configure-window-mask.x  x
        Boolean
    x11.configure-window-mask.y  y
        Boolean
    x11.confine-to  confine-to
        Unsigned 32-bit integer
    x11.contiguous  contiguous
        Boolean
    x11.coordinate-mode  coordinate-mode
        Unsigned 8-bit integer
    x11.count  count
        Unsigned 8-bit integer
    x11.cursor  cursor
        Unsigned 32-bit integer
    x11.dash-offset  dash-offset
        Unsigned 16-bit integer
    x11.dashes  dashes
        Byte array
    x11.dashes-length  dashes-length
        Unsigned 16-bit integer
    x11.data  data
        Byte array
    x11.data-length  data-length
        Unsigned 32-bit integer
    x11.delete  delete
        Boolean
        Delete this property after reading
    x11.delta  delta
        Signed 16-bit integer
    x11.depth  depth
        Unsigned 8-bit integer
    x11.direction  direction
        Unsigned 8-bit integer
    x11.do-acceleration  do-acceleration
        Boolean
    x11.do-not-propagate-mask  do-not-propagate-mask
        Unsigned 32-bit integer
    x11.do-not-propagate-mask.Button1Motion  Button1Motion
        Boolean
    x11.do-not-propagate-mask.Button2Motion  Button2Motion
        Boolean
    x11.do-not-propagate-mask.Button3Motion  Button3Motion
        Boolean
    x11.do-not-propagate-mask.Button4Motion  Button4Motion
        Boolean
    x11.do-not-propagate-mask.Button5Motion  Button5Motion
        Boolean
    x11.do-not-propagate-mask.ButtonMotion  ButtonMotion
        Boolean
    x11.do-not-propagate-mask.ButtonPress  ButtonPress
        Boolean
    x11.do-not-propagate-mask.ButtonRelease  ButtonRelease
        Boolean
    x11.do-not-propagate-mask.KeyPress  KeyPress
        Boolean
    x11.do-not-propagate-mask.KeyRelease  KeyRelease
        Boolean
    x11.do-not-propagate-mask.PointerMotion  PointerMotion
        Boolean
    x11.do-not-propagate-mask.erroneous-bits  erroneous-bits
        Boolean
    x11.do-threshold  do-threshold
        Boolean
    x11.drawable  drawable
        Unsigned 32-bit integer
    x11.dst-drawable  dst-drawable
        Unsigned 32-bit integer
    x11.dst-gc  dst-gc
        Unsigned 32-bit integer
    x11.dst-window  dst-window
        Unsigned 32-bit integer
    x11.dst-x  dst-x
        Signed 16-bit integer
    x11.dst-y  dst-y
        Signed 16-bit integer
    x11.event-mask  event-mask
        Unsigned 32-bit integer
    x11.event-mask.Button1Motion  Button1Motion
        Boolean
    x11.event-mask.Button2Motion  Button2Motion
        Boolean
    x11.event-mask.Button3Motion  Button3Motion
        Boolean
    x11.event-mask.Button4Motion  Button4Motion
        Boolean
    x11.event-mask.Button5Motion  Button5Motion
        Boolean
    x11.event-mask.ButtonMotion  ButtonMotion
        Boolean
    x11.event-mask.ButtonPress  ButtonPress
        Boolean
    x11.event-mask.ButtonRelease  ButtonRelease
        Boolean
    x11.event-mask.ColormapChange  ColormapChange
        Boolean
    x11.event-mask.EnterWindow  EnterWindow
        Boolean
    x11.event-mask.Exposure  Exposure
        Boolean
    x11.event-mask.FocusChange  FocusChange
        Boolean
    x11.event-mask.KeyPress  KeyPress
        Boolean
    x11.event-mask.KeyRelease  KeyRelease
        Boolean
    x11.event-mask.KeymapState  KeymapState
        Boolean
    x11.event-mask.LeaveWindow  LeaveWindow
        Boolean
    x11.event-mask.OwnerGrabButton  OwnerGrabButton
        Boolean
    x11.event-mask.PointerMotion  PointerMotion
        Boolean
    x11.event-mask.PointerMotionHint  PointerMotionHint
        Boolean
    x11.event-mask.PropertyChange  PropertyChange
        Boolean
    x11.event-mask.ResizeRedirect  ResizeRedirect
        Boolean
    x11.event-mask.StructureNotify  StructureNotify
        Boolean
    x11.event-mask.SubstructureNotify  SubstructureNotify
        Boolean
    x11.event-mask.SubstructureRedirect  SubstructureRedirect
        Boolean
    x11.event-mask.VisibilityChange  VisibilityChange
        Boolean
    x11.event-mask.erroneous-bits  erroneous-bits
        Boolean
    x11.exposures  exposures
        Boolean
    x11.family  family
        Unsigned 8-bit integer
    x11.fid  fid
        Unsigned 32-bit integer
        Font id
    x11.fill-rule  fill-rule
        Unsigned 8-bit integer
    x11.fill-style  fill-style
        Unsigned 8-bit integer
    x11.first-keycode  first-keycode
        Unsigned 8-bit integer
    x11.focus  focus
        Unsigned 8-bit integer
    x11.font  font
        Unsigned 32-bit integer
    x11.fore-blue  fore-blue
        Unsigned 16-bit integer
    x11.fore-green  fore-green
        Unsigned 16-bit integer
    x11.fore-red  fore-red
        Unsigned 16-bit integer
    x11.foreground  foreground
        Unsigned 32-bit integer
    x11.format  format
        Unsigned 8-bit integer
    x11.function  function
        Unsigned 8-bit integer
    x11.gc  gc
        Unsigned 32-bit integer
    x11.gc-dashes  gc-dashes
        Unsigned 8-bit integer
    x11.gc-value-mask  gc-value-mask
        Unsigned 32-bit integer
    x11.gc-value-mask.arc-mode  arc-mode
        Boolean
    x11.gc-value-mask.background  background
        Boolean
    x11.gc-value-mask.cap-style  cap-style
        Boolean
    x11.gc-value-mask.clip-mask  clip-mask
        Boolean
    x11.gc-value-mask.clip-x-origin  clip-x-origin
        Boolean
    x11.gc-value-mask.clip-y-origin  clip-y-origin
        Boolean
    x11.gc-value-mask.dash-offset  dash-offset
        Boolean
    x11.gc-value-mask.fill-rule  fill-rule
        Boolean
    x11.gc-value-mask.fill-style  fill-style
        Boolean
    x11.gc-value-mask.font  font
        Boolean
    x11.gc-value-mask.foreground  foreground
        Boolean
    x11.gc-value-mask.function  function
        Boolean
    x11.gc-value-mask.gc-dashes  gc-dashes
        Boolean
    x11.gc-value-mask.graphics-exposures  graphics-exposures
        Boolean
    x11.gc-value-mask.join-style  join-style
        Boolean
    x11.gc-value-mask.line-style  line-style
        Boolean
    x11.gc-value-mask.line-width  line-width
        Boolean
    x11.gc-value-mask.plane-mask  plane-mask
        Boolean
    x11.gc-value-mask.stipple  stipple
        Boolean
    x11.gc-value-mask.subwindow-mode  subwindow-mode
        Boolean
    x11.gc-value-mask.tile  tile
        Boolean
    x11.gc-value-mask.tile-stipple-x-origin  tile-stipple-x-origin
        Boolean
    x11.gc-value-mask.tile-stipple-y-origin  tile-stipple-y-origin
        Boolean
    x11.get-property-type  get-property-type
        Unsigned 32-bit integer
    x11.grab_window  grab_window
        Unsigned 32-bit integer
    x11.graphics-exposures  graphics-exposures
        Boolean
    x11.green  green
        Unsigned 16-bit integer
    x11.greens  greens
        Unsigned 16-bit integer
    x11.height  height
        Unsigned 16-bit integer
    x11.image-format  image-format
        Unsigned 8-bit integer
    x11.image-pixmap-format  image-pixmap-format
        Unsigned 8-bit integer
    x11.interval  interval
        Signed 16-bit integer
    x11.ip-address  ip-address
        IPv4 address
    x11.items  items
        No value
    x11.join-style  join-style
        Unsigned 8-bit integer
    x11.key  key
        Unsigned 8-bit integer
    x11.key-click-percent  key-click-percent
        Signed 8-bit integer
    x11.keyboard-key  keyboard-key
        Unsigned 8-bit integer
    x11.keyboard-mode  keyboard-mode
        Unsigned 8-bit integer
    x11.keyboard-value-mask  keyboard-value-mask
        Unsigned 32-bit integer
    x11.keyboard-value-mask.auto-repeat-mode  auto-repeat-mode
        Boolean
    x11.keyboard-value-mask.bell-duration  bell-duration
        Boolean
    x11.keyboard-value-mask.bell-percent  bell-percent
        Boolean
    x11.keyboard-value-mask.bell-pitch  bell-pitch
        Boolean
    x11.keyboard-value-mask.key-click-percent  key-click-percent
        Boolean
    x11.keyboard-value-mask.keyboard-key  keyboard-key
        Boolean
    x11.keyboard-value-mask.led  led
        Boolean
    x11.keyboard-value-mask.led-mode  led-mode
        Boolean
    x11.keycode-count  keycode-count
        Unsigned 8-bit integer
    x11.keycodes  keycodes
        No value
    x11.keycodes-per-modifier  keycodes-per-modifier
        Unsigned 8-bit integer
    x11.keycodes.item  item
        Byte array
    x11.keysyms  keysyms
        No value
    x11.keysyms-per-keycode  keysyms-per-keycode
        Unsigned 8-bit integer
    x11.keysyms.item  item
        No value
    x11.keysyms.item.keysym  keysym
        Unsigned 32-bit integer
    x11.led  led
        Unsigned 8-bit integer
    x11.led-mode  led-mode
        Unsigned 8-bit integer
    x11.left-pad  left-pad
        Unsigned 8-bit integer
    x11.line-style  line-style
        Unsigned 8-bit integer
    x11.line-width  line-width
        Unsigned 16-bit integer
    x11.long-length  long-length
        Unsigned 32-bit integer
        The maximum length of the property in bytes
    x11.long-offset  long-offset
        Unsigned 32-bit integer
        The starting position in the property bytes array
    x11.map  map
        Byte array
    x11.map-length  map-length
        Unsigned 8-bit integer
    x11.mask  mask
        Unsigned 32-bit integer
    x11.mask-char  mask-char
        Unsigned 16-bit integer
    x11.mask-font  mask-font
        Unsigned 32-bit integer
    x11.max-names  max-names
        Unsigned 16-bit integer
    x11.mid  mid
        Unsigned 32-bit integer
    x11.mode  mode
        Unsigned 8-bit integer
    x11.modifiers-mask  modifiers-mask
        Unsigned 16-bit integer
    x11.modifiers-mask.AnyModifier  AnyModifier
        Unsigned 16-bit integer
    x11.modifiers-mask.Control  Control
        Boolean
    x11.modifiers-mask.Lock  Lock
        Boolean
    x11.modifiers-mask.Mod1  Mod1
        Boolean
    x11.modifiers-mask.Mod2  Mod2
        Boolean
    x11.modifiers-mask.Mod3  Mod3
        Boolean
    x11.modifiers-mask.Mod4  Mod4
        Boolean
    x11.modifiers-mask.Mod5  Mod5
        Boolean
    x11.modifiers-mask.Shift  Shift
        Boolean
    x11.modifiers-mask.erroneous-bits  erroneous-bits
        Boolean
    x11.name  name
        String
    x11.name-length  name-length
        Unsigned 16-bit integer
    x11.odd-length  odd-length
        Boolean
    x11.only-if-exists  only-if-exists
        Boolean
    x11.opcode  opcode
        Unsigned 8-bit integer
    x11.ordering  ordering
        Unsigned 8-bit integer
    x11.override-redirect  override-redirect
        Boolean
        Window manager doesn't manage this window when true
    x11.owner  owner
        Unsigned 32-bit integer
    x11.owner-events  owner-events
        Boolean
    x11.parent  parent
        Unsigned 32-bit integer
    x11.path  path
        No value
    x11.path.string  string
        String
    x11.pattern  pattern
        String
    x11.pattern-length  pattern-length
        Unsigned 16-bit integer
    x11.percent  percent
        Unsigned 8-bit integer
    x11.pid  pid
        Unsigned 32-bit integer
    x11.pixel  pixel
        Unsigned 32-bit integer
    x11.pixels  pixels
        No value
    x11.pixels_item  pixels_item
        Unsigned 32-bit integer
    x11.pixmap  pixmap
        Unsigned 32-bit integer
    x11.plane-mask  plane-mask
        Unsigned 32-bit integer
    x11.planes  planes
        Unsigned 16-bit integer
    x11.point  point
        No value
    x11.point-x  point-x
        Signed 16-bit integer
    x11.point-y  point-y
        Signed 16-bit integer
    x11.pointer-event-mask  pointer-event-mask
        Unsigned 16-bit integer
    x11.pointer-event-mask.Button1Motion  Button1Motion
        Boolean
    x11.pointer-event-mask.Button2Motion  Button2Motion
        Boolean
    x11.pointer-event-mask.Button3Motion  Button3Motion
        Boolean
    x11.pointer-event-mask.Button4Motion  Button4Motion
        Boolean
    x11.pointer-event-mask.Button5Motion  Button5Motion
        Boolean
    x11.pointer-event-mask.ButtonMotion  ButtonMotion
        Boolean
    x11.pointer-event-mask.ButtonPress  ButtonPress
        Boolean
    x11.pointer-event-mask.ButtonRelease  ButtonRelease
        Boolean
    x11.pointer-event-mask.EnterWindow  EnterWindow
        Boolean
    x11.pointer-event-mask.KeymapState  KeymapState
        Boolean
    x11.pointer-event-mask.LeaveWindow  LeaveWindow
        Boolean
    x11.pointer-event-mask.PointerMotion  PointerMotion
        Boolean
    x11.pointer-event-mask.PointerMotionHint  PointerMotionHint
        Boolean
    x11.pointer-event-mask.erroneous-bits  erroneous-bits
        Boolean
    x11.pointer-mode  pointer-mode
        Unsigned 8-bit integer
    x11.points  points
        No value
    x11.prefer-blanking  prefer-blanking
        Unsigned 8-bit integer
    x11.properties  properties
        No value
    x11.properties.item  item
        Unsigned 32-bit integer
    x11.property  property
        Unsigned 32-bit integer
    x11.property-number  property-number
        Unsigned 16-bit integer
    x11.protocol-major-version  protocol-major-version
        Unsigned 16-bit integer
    x11.protocol-minor-version  protocol-minor-version
        Unsigned 16-bit integer
    x11.rectangle  rectangle
        No value
    x11.rectangle-height  rectangle-height
        Unsigned 16-bit integer
    x11.rectangle-width  rectangle-width
        Unsigned 16-bit integer
    x11.rectangle-x  rectangle-x
        Signed 16-bit integer
    x11.rectangle-y  rectangle-y
        Signed 16-bit integer
    x11.rectangles  rectangles
        No value
    x11.red  red
        Unsigned 16-bit integer
    x11.reds  reds
        Unsigned 16-bit integer
    x11.request  request
        Unsigned 8-bit integer
    x11.request-length  request-length
        Unsigned 16-bit integer
        Request length
    x11.requestor  requestor
        Unsigned 32-bit integer
    x11.resource  resource
        Unsigned 32-bit integer
    x11.revert-to  revert-to
        Unsigned 8-bit integer
    x11.save-set-mode  save-set-mode
        Unsigned 8-bit integer
    x11.save-under  save-under
        Boolean
    x11.screen-saver-mode  screen-saver-mode
        Unsigned 8-bit integer
    x11.segment  segment
        No value
    x11.segment_x1  segment_x1
        Signed 16-bit integer
    x11.segment_x2  segment_x2
        Signed 16-bit integer
    x11.segment_y1  segment_y1
        Signed 16-bit integer
    x11.segment_y2  segment_y2
        Signed 16-bit integer
    x11.segments  segments
        No value
    x11.selection  selection
        Unsigned 32-bit integer
    x11.shape  shape
        Unsigned 8-bit integer
    x11.sibling  sibling
        Unsigned 32-bit integer
    x11.source-char  source-char
        Unsigned 16-bit integer
    x11.source-font  source-font
        Unsigned 32-bit integer
    x11.source-pixmap  source-pixmap
        Unsigned 32-bit integer
    x11.src-cmap  src-cmap
        Unsigned 32-bit integer
    x11.src-drawable  src-drawable
        Unsigned 32-bit integer
    x11.src-gc  src-gc
        Unsigned 32-bit integer
    x11.src-height  src-height
        Unsigned 16-bit integer
    x11.src-width  src-width
        Unsigned 16-bit integer
    x11.src-window  src-window
        Unsigned 32-bit integer
    x11.src-x  src-x
        Signed 16-bit integer
    x11.src-y  src-y
        Signed 16-bit integer
    x11.stack-mode  stack-mode
        Unsigned 8-bit integer
    x11.start  start
        Unsigned 32-bit integer
    x11.stipple  stipple
        Unsigned 32-bit integer
    x11.stop  stop
        Unsigned 32-bit integer
    x11.str-number-in-path  str-number-in-path
        Unsigned 16-bit integer
    x11.string  string
        String
    x11.string-length  string-length
        Unsigned 32-bit integer
    x11.string16  string16
        String
    x11.string16.bytes  bytes
        Byte array
    x11.subwindow-mode  subwindow-mode
        Unsigned 8-bit integer
    x11.target  target
        Unsigned 32-bit integer
    x11.textitem  textitem
        No value
    x11.textitem.font  font
        Unsigned 32-bit integer
    x11.textitem.string  string
        No value
    x11.textitem.string.delta  delta
        Signed 8-bit integer
    x11.textitem.string.string16  string16
        String
    x11.textitem.string.string16.bytes  bytes
        Byte array
    x11.textitem.string.string8  string8
        String
    x11.threshold  threshold
        Signed 16-bit integer
    x11.tile  tile
        Unsigned 32-bit integer
    x11.tile-stipple-x-origin  tile-stipple-x-origin
        Signed 16-bit integer
    x11.tile-stipple-y-origin  tile-stipple-y-origin
        Signed 16-bit integer
    x11.time  time
        Unsigned 32-bit integer
    x11.timeout  timeout
        Signed 16-bit integer
    x11.type  type
        Unsigned 32-bit integer
    x11.undecoded  undecoded
        No value
        Yet undecoded by dissector
    x11.unused  unused
        No value
    x11.visual  visual
        Unsigned 32-bit integer
    x11.visualid  visualid
        Unsigned 32-bit integer
    x11.warp-pointer-dst-window  warp-pointer-dst-window
        Unsigned 32-bit integer
    x11.warp-pointer-src-window  warp-pointer-src-window
        Unsigned 32-bit integer
    x11.wid  wid
        Unsigned 32-bit integer
        Window id
    x11.width  width
        Unsigned 16-bit integer
    x11.win-gravity  win-gravity
        Unsigned 8-bit integer
    x11.window  window
        Unsigned 32-bit integer
    x11.window-class  window-class
        Unsigned 16-bit integer
        Window class
    x11.window-value-mask  window-value-mask
        Unsigned 32-bit integer
    x11.window-value-mask.background-pixel  background-pixel
        Boolean
    x11.window-value-mask.background-pixmap  background-pixmap
        Boolean
    x11.window-value-mask.backing-pixel  backing-pixel
        Boolean
    x11.window-value-mask.backing-planes  backing-planes
        Boolean
    x11.window-value-mask.backing-store  backing-store
        Boolean
    x11.window-value-mask.bit-gravity  bit-gravity
        Boolean
    x11.window-value-mask.border-pixel  border-pixel
        Boolean
    x11.window-value-mask.border-pixmap  border-pixmap
        Boolean
    x11.window-value-mask.colormap  colormap
        Boolean
    x11.window-value-mask.cursor  cursor
        Boolean
    x11.window-value-mask.do-not-propagate-mask  do-not-propagate-mask
        Boolean
    x11.window-value-mask.event-mask  event-mask
        Boolean
    x11.window-value-mask.override-redirect  override-redirect
        Boolean
    x11.window-value-mask.save-under  save-under
        Boolean
    x11.window-value-mask.win-gravity  win-gravity
        Boolean
    x11.x  x
        Signed 16-bit integer
    x11.y  y
        Signed 16-bit integer

Xyplex (xyplex)

    xyplex.pad  Pad
        Unsigned 8-bit integer
        Padding
    xyplex.reply  Registration Reply
        Unsigned 16-bit integer
        Registration reply
    xyplex.reserved  Reserved field
        Unsigned 16-bit integer
        Reserved field
    xyplex.return_port  Return Port
        Unsigned 16-bit integer
        Return port
    xyplex.server_port  Server Port
        Unsigned 16-bit integer
        Server port
    xyplex.type  Type
        Unsigned 8-bit integer
        Protocol type

Yahoo Messenger Protocol (yhoo)

    yhoo.connection_id  Connection ID
        Unsigned 32-bit integer
        Connection ID
    yhoo.content  Content
        String
        Data portion of the packet
    yhoo.len  Packet Length
        Unsigned 32-bit integer
        Packet Length
    yhoo.magic_id  Magic ID
        Unsigned 32-bit integer
        Magic ID
    yhoo.msgtype  Message Type
        Unsigned 32-bit integer
        Message Type Flags
    yhoo.nick1  Real Nick (nick1)
        String
        Real Nick (nick1)
    yhoo.nick2  Active Nick (nick2)
        String
        Active Nick (nick2)
    yhoo.service  Service Type
        Unsigned 32-bit integer
        Service Type
    yhoo.unknown1  Unknown 1
        Unsigned 32-bit integer
        Unknown 1
    yhoo.version  Version
        String
        Packet version identifier

Yellow Pages Bind (ypbind)

    ypbind.addr  IP Addr
        IPv4 address
        IP Address of server
    ypbind.domain  Domain
        String
        Name of the NIS/YP Domain
    ypbind.error  Error
        Unsigned 32-bit integer
        YPBIND Error code
    ypbind.port  Port
        Unsigned 32-bit integer
        Port to use
    ypbind.resp_type  Response Type
        Unsigned 32-bit integer
        Response type
    ypbind.setdom.version  Version
        Unsigned 32-bit integer
        Version of setdom

Yellow Pages Passwd (yppasswd)

    yppasswd.newpw  newpw
        No value
        New passwd entry
    yppasswd.newpw.dir  dir
        String
        Home Directory
    yppasswd.newpw.gecos  gecos
        String
        In real life name
    yppasswd.newpw.gid  gid
        Unsigned 32-bit integer
        GroupID
    yppasswd.newpw.name  name
        String
        Username
    yppasswd.newpw.passwd  passwd
        String
        Encrypted passwd
    yppasswd.newpw.shell  shell
        String
        Default shell
    yppasswd.newpw.uid  uid
        Unsigned 32-bit integer
        UserID
    yppasswd.oldpass  oldpass
        String
        Old encrypted password
    yppasswd.status  status
        Unsigned 32-bit integer
        YPPasswd update status

Yellow Pages Service (ypserv)

    ypserv.domain  Domain
        String
        Domain
    ypserv.key  Key
        String
        Key
    ypserv.map  Map Name
        String
        Map Name
    ypserv.map_parms  YP Map Parameters
        No value
        YP Map Parameters
    ypserv.more  More
        Boolean
        More
    ypserv.ordernum  Order Number
        Unsigned 32-bit integer
        Order Number for XFR
    ypserv.peer  Peer Name
        String
        Peer Name
    ypserv.port  Port
        Unsigned 32-bit integer
        Port to use for XFR Callback
    ypserv.prog  Program Number
        Unsigned 32-bit integer
        Program Number to use for XFR Callback
    ypserv.servesdomain  Serves Domain
        Boolean
        Serves Domain
    ypserv.status  Status
        Signed 32-bit integer
        Status
    ypserv.transid  Host Transport ID
        IPv4 address
        Host Transport ID to use for XFR Callback
    ypserv.value  Value
        String
        Value
    ypserv.xfrstat  Xfrstat
        Signed 32-bit integer
        Xfrstat

Yellow Pages Transfer (ypxfr)

Zebra Protocol (zebra)

    zebra.bandwidth  Bandwidth
        Unsigned 32-bit integer
        Bandwidth of interface
    zebra.command  Command
        Unsigned 8-bit integer
        ZEBRA command
    zebra.dest4  Destination
        IPv4 address
        Destination IPv4 field
    zebra.dest6  Destination
        IPv6 address
        Destination IPv6 field
    zebra.distance  Distance
        Unsigned 8-bit integer
        Distance of route
    zebra.family  Family
        Unsigned 32-bit integer
        Family of IP address
    zebra.index  Index
        Unsigned 32-bit integer
        Index of interface
    zebra.indexnum  Index Number
        Unsigned 8-bit integer
        Number of indices for route
    zebra.interface  Interface
        String
        Interface name of ZEBRA request
    zebra.intflags  Flags
        Unsigned 32-bit integer
        Flags of interface
    zebra.len  Length
        Unsigned 16-bit integer
        Length of ZEBRA request
    zebra.message  Message
        Unsigned 8-bit integer
        Message type of route
    zebra.message.distance  Message Distance
        Boolean
        Message contains distance
    zebra.message.index  Message Index
        Boolean
        Message contains index
    zebra.message.metric  Message Metric
        Boolean
        Message contains metric
    zebra.message.nexthop  Message Nexthop
        Boolean
        Message contains nexthop
    zebra.metric  Metric
        Unsigned 32-bit integer
        Metric of interface or route
    zebra.mtu  MTU
        Unsigned 32-bit integer
        MTU of interface
    zebra.nexthop4  Nexthop
        IPv4 address
        Nethop IPv4 field of route
    zebra.nexthop6  Nexthop
        IPv6 address
        Nethop IPv6 field of route
    zebra.nexthopnum  Nexthop Number
        Unsigned 8-bit integer
        Number of nexthops in route
    zebra.prefix4  Prefix
        IPv4 address
        Prefix IPv4
    zebra.prefix6  Prefix
        IPv6 address
        Prefix IPv6
    zebra.prefixlen  Prefix length
        Unsigned 32-bit integer
        Prefix length
    zebra.request  Request
        Boolean
        TRUE if ZEBRA request
    zebra.rtflags  Flags
        Unsigned 8-bit integer
        Flags of route
    zebra.type  Type
        Unsigned 8-bit integer
        Type of route

Zone Information Protocol (zip)

    zip.atp_function  Function
        Unsigned 8-bit integer
    zip.count  Count
        Unsigned 16-bit integer
    zip.default_zone  Default zone
        String
    zip.flags  Flags
        Boolean
    zip.flags.only_one_zone  Only one zone
        Boolean
    zip.flags.use_broadcast  Use broadcast
        Boolean
    zip.flags.zone_invalid  Zone invalid
        Boolean
    zip.function  Function
        Unsigned 8-bit integer
        ZIP function
    zip.last_flag  Last Flag
        Boolean
        Non zero if contains last zone name in the zone list
    zip.multicast_address  Multicast address
        Byte array
        Multicast address
    zip.multicast_length  Multicast length
        Unsigned 8-bit integer
        Multicast address length
    zip.network  Network
        Unsigned 16-bit integer
    zip.network_count  Count
        Unsigned 8-bit integer
    zip.network_end  Network end
        Unsigned 16-bit integer
    zip.network_start  Network start
        Unsigned 16-bit integer
    zip.start_index  Start index
        Unsigned 16-bit integer
    zip.zero_value  Pad (0)
        Byte array
        Pad
    zip.zone_name  Zone
        String

iSCSI (iscsi)

    iscsi.I  I
        Boolean
        Immediate delivery
    iscsi.X  X
        Boolean
        Command Retry
    iscsi.ahs  AHS
        Byte array
        Additional header segment
    iscsi.asyncevent  AsyncEvent
        Unsigned 8-bit integer
        Async event type
    iscsi.asyncmessagedata  AsyncMessageData
        Byte array
        Async Message Data
    iscsi.bufferOffset  BufferOffset
        Unsigned 32-bit integer
        Buffer offset
    iscsi.cid  CID
        Unsigned 16-bit integer
        Connection identifier
    iscsi.cmdsn  CmdSN
        Unsigned 32-bit integer
        Sequence number for this command (0 == immediate)
    iscsi.datadigest  DataDigest
        Byte array
        Data Digest
    iscsi.datadigest32  DataDigest
        Unsigned 32-bit integer
        Data Digest
    iscsi.datasegmentlength  DataSegmentLength
        Unsigned 32-bit integer
        Data segment length (bytes)
    iscsi.datasn  DataSN
        Unsigned 32-bit integer
        Data sequence number
    iscsi.desireddatalength  DesiredDataLength
        Unsigned 32-bit integer
        Desired data length (bytes)
    iscsi.errorpdudata  ErrorPDUData
        Byte array
        Error PDU Data
    iscsi.eventvendorcode  EventVendorCode
        Unsigned 8-bit integer
        Event vendor code
    iscsi.expcmdsn  ExpCmdSN
        Unsigned 32-bit integer
        Next expected command sequence number
    iscsi.expdatasn  ExpDataSN
        Unsigned 32-bit integer
        Next expected data sequence number
    iscsi.expstatsn  ExpStatSN
        Unsigned 32-bit integer
        Next expected status sequence number
    iscsi.flags  Flags
        Unsigned 8-bit integer
        Opcode specific flags
    iscsi.headerdigest  HeaderDigest
        Byte array
        Header Digest
    iscsi.headerdigest32  HeaderDigest
        Unsigned 32-bit integer
        Header Digest
    iscsi.immediatedata  ImmediateData
        Byte array
        Immediate Data
    iscsi.initcmdsn  InitCmdSN
        Unsigned 32-bit integer
        Initial command sequence number
    iscsi.initiatortasktag  InitiatorTaskTag
        Unsigned 32-bit integer
        Initiator's task tag
    iscsi.initstatsn  InitStatSN
        Unsigned 32-bit integer
        Initial status sequence number
    iscsi.isid  ISID
        Unsigned 16-bit integer
        Initiator part of session identifier
    iscsi.isid.a  ISID_a
        Unsigned 8-bit integer
        Initiator part of session identifier - a
    iscsi.isid.b  ISID_b
        Unsigned 16-bit integer
        Initiator part of session identifier - b
    iscsi.isid.c  ISID_c
        Unsigned 8-bit integer
        Initiator part of session identifier - c
    iscsi.isid.d  ISID_d
        Unsigned 16-bit integer
        Initiator part of session identifier - d
    iscsi.isid.namingauthority  ISID_NamingAuthority
        Unsigned 24-bit integer
        Initiator part of session identifier - naming authority
    iscsi.isid.qualifier  ISID_Qualifier
        Unsigned 8-bit integer
        Initiator part of session identifier - qualifier
    iscsi.isid.t  ISID_t
        Unsigned 8-bit integer
        Initiator part of session identifier - t
    iscsi.isid.type  ISID_Type
        Unsigned 8-bit integer
        Initiator part of session identifier - type
    iscsi.keyvalue  KeyValue
        String
        Key/value pair
    iscsi.login.T  T
        Boolean
        Transit to next login stage
    iscsi.login.X  X
        Boolean
        Restart Connection
    iscsi.login.csg  CSG
        Unsigned 8-bit integer
        Current stage
    iscsi.login.nsg  NSG
        Unsigned 8-bit integer
        Next stage
    iscsi.login.status  Status
        Unsigned 16-bit integer
        Status class and detail
    iscsi.logout.reason  Reason
        Unsigned 8-bit integer
        Reason for logout
    iscsi.logout.response  Response
        Unsigned 8-bit integer
        Logout response
    iscsi.lun  LUN
        Byte array
        Logical Unit Number
    iscsi.maxcmdsn  MaxCmdSN
        Unsigned 32-bit integer
        Maximum acceptable command sequence number
    iscsi.opcode  Opcode
        Unsigned 8-bit integer
        Opcode
    iscsi.padding  Padding
        Byte array
        Padding to 4 byte boundary
    iscsi.parameter1  Parameter1
        Unsigned 16-bit integer
        Parameter 1
    iscsi.parameter2  Parameter2
        Unsigned 16-bit integer
        Parameter 2
    iscsi.parameter3  Parameter3
        Unsigned 16-bit integer
        Parameter 3
    iscsi.pingdata  PingData
        Byte array
        Ping Data
    iscsi.r2tsn  R2TSN
        Unsigned 32-bit integer
        R2T PDU Number
    iscsi.readdata  ReadData
        Byte array
        Read Data
    iscsi.refcmdsn  RefCmdSN
        Unsigned 32-bit integer
        Command sequence number for command to be aborted
    iscsi.reject.reason  Reason
        Unsigned 8-bit integer
        Reason for command rejection
    iscsi.scsicommand.F  F
        Boolean
        PDU completes command
    iscsi.scsicommand.R  R
        Boolean
        Command reads from SCSI target
    iscsi.scsicommand.W  W
        Boolean
        Command writes to SCSI target
    iscsi.scsicommand.addcdb  AddCDB
        Unsigned 8-bit integer
        Additional CDB length (in 4 byte units)
    iscsi.scsicommand.attr  Attr
        Unsigned 8-bit integer
        SCSI task attributes
    iscsi.scsicommand.crn  CRN
        Unsigned 8-bit integer
        SCSI command reference number
    iscsi.scsicommand.expecteddatatransferlength  ExpectedDataTransferLength
        Unsigned 32-bit integer
        Expected length of data transfer
    iscsi.scsidata.A  A
        Boolean
        Acknowledge Requested
    iscsi.scsidata.F  F
        Boolean
        Final PDU
    iscsi.scsidata.O  O
        Boolean
        Residual overflow
    iscsi.scsidata.S  S
        Boolean
        PDU Contains SCSI command status
    iscsi.scsidata.U  U
        Boolean
        Residual underflow
    iscsi.scsidata.readresidualcount  ResidualCount
        Unsigned 32-bit integer
        Residual count
    iscsi.scsiresponse.O  O
        Boolean
        Residual overflow
    iscsi.scsiresponse.U  U
        Boolean
        Residual underflow
    iscsi.scsiresponse.bidireadresidualcount  BidiReadResidualCount
        Unsigned 32-bit integer
        Bi-directional read residual count
    iscsi.scsiresponse.o  o
        Boolean
        Bi-directional read residual overflow
    iscsi.scsiresponse.residualcount  ResidualCount
        Unsigned 32-bit integer
        Residual count
    iscsi.scsiresponse.response  Response
        Unsigned 8-bit integer
        SCSI command response value
    iscsi.scsiresponse.senselength  SenseLength
        Unsigned 16-bit integer
        Sense data length
    iscsi.scsiresponse.status  Status
        Unsigned 8-bit integer
        SCSI command status value
    iscsi.scsiresponse.u  u
        Boolean
        Bi-directional read residual underflow
    iscsi.snack.begrun  BegRun
        Unsigned 32-bit integer
        First missed DataSN or StatSN
    iscsi.snack.runlength  RunLength
        Unsigned 32-bit integer
        Number of additional missing status PDUs in this run
    iscsi.snack.type  S
        Unsigned 8-bit integer
        Type of SNACK requested
    iscsi.statsn  StatSN
        Unsigned 32-bit integer
        Status sequence number
    iscsi.targettransfertag  TargetTransferTag
        Unsigned 32-bit integer
        Target transfer tag
    iscsi.taskmanfun.function  Function
        Unsigned 8-bit integer
        Requested task function
    iscsi.taskmanfun.referencedtasktag  ReferencedTaskTag
        Unsigned 32-bit integer
        Referenced task tag
    iscsi.taskmanfun.response  Response
        Unsigned 8-bit integer
        Response
    iscsi.text.F  F
        Boolean
        Final PDU in text sequence
    iscsi.time2retain  Time2Retain
        Unsigned 16-bit integer
        Time2Retain
    iscsi.time2wait  Time2Wait
        Unsigned 16-bit integer
        Time2Wait
    iscsi.totalahslength  TotalAHSLength
        Unsigned 8-bit integer
        Total additional header segment length (4 byte words)
    iscsi.tsid  TSID
        Unsigned 16-bit integer
        Target part of session identifier
    iscsi.tsih  TSIH
        Unsigned 16-bit integer
        Target session identifying handle
    iscsi.vendorspecificdata  VendorSpecificData
        Byte array
        Vendor Specific Data
    iscsi.versionactive  VersionActive
        Unsigned 8-bit integer
        Negotiated protocol version
    iscsi.versionmax  VersionMax
        Unsigned 8-bit integer
        Maximum supported protocol version
    iscsi.versionmin  VersionMin
        Unsigned 8-bit integer
        Minimum supported protocol version
    iscsi.writedata  WriteData
        Byte array
        Write Data


FILES

The ethereal.conf file, which is installed in the etc directory under the main installation directory (for example, /usr/local/etc) on UNIX-compatible systems, and in the main installation directory (for example, C:\Program Files\Ethereal) on Windows systems, and the personal preferences file, which is $HOME/.ethereal/preferences on UNIX-compatible systems and %APPDATA%\Ethereal\preferences (or, if %APPDATA% isn't defined, %USERPROFILE%\Application Data\Ethereal\preferences) on Windows systems, contain system-wide and personal preference settings, respectively. The file contains preference settings of the form prefname:value, one per line, where prefname is the name of the preference (which is the same name that would appear in the preference file), and value is the value to which it should be set; white space is allowed between : and value. A preference setting can be continued on subsequent lines by indenting the continuation lines with white space. A # character starts a comment that runs to the end of the line.

The system-wide preference file is read first, if it exists, overriding Ethereal's default values; the personal preferences file is then read, if it exists, overriding default values and values read from the system-wide preference file.

Note that whenever the preferences are saved by using the Save button in the Edit:Preferences dialog box, your personal preferences file will be overwritten with the new settings, destroying any comments that were in the file.

The ethers file, which is found in the /etc directory on UNIX-compatible systems, and in the main installation directory (for example, C:\Program Files\Ethereal) on Windows systems, is consulted to correlate 6-byte hardware addresses to names. If an address is not found in the ethers file, the $HOME/.ethereal/ethers file on UNIX-compatible systems, and the %APPDATA%\Ethereal\ethers file (or, if %APPDATA% isn't defined, the %USERPROFILE%\Application Data\Ethereal\ethers file) on Windows systems is consulted next. Each line contains one hardware address and name, separated by whitespace. The digits of the hardware address are separated by either a colon (:), a dash (-), or a period (.). The following three lines are valid lines of an ethers file:

  ff:ff:ff:ff:ff:ff          Broadcast
  c0-00-ff-ff-ff-ff          TR_broadcast
  00.00.00.00.00.00          Zero_broadcast

The manuf file, which is installed in the etc directory under the main installation directory (for example, /usr/local/etc) on UNIX-compatible systems, and in the main installation directory (for example, C:\Program Files\Ethereal) on Windows systems, matches the 3-byte vendor portion of a 6-byte hardware address with the manufacturer's name. The format of the file is the same as the ethers file, except that each address is three bytes instead of six.

The ipxnets file, which is found in the /etc directory on UNIX-compatible systems, and in the main installation directory (for example, C:\Program Files\Ethereal) on Windows systems, correlates 4-byte IPX network numbers to names. If a network number is not found in the ipxnets file, the $HOME/.ethereal/ipxnets file on UNIX-compatible systems, and the %APPDATA%\Ethereal\ipxnets file (or, if %APPDATA% isn't defined, the %USERPROFILE%\Application Data\Ethereal\ipxnets file) on Windows systems, is consulted next. The format is the same as the ethers file, except that each address if four bytes instead of six. Additionally, the address can be represented a single hexadecimal number, as is more common in the IPX world, rather than four hex octets. For example, these four lines are valid lines of an ipxnets file.

  C0.A8.2C.00              HR
  c0-a8-1c-00              CEO
  00:00:BE:EF              IT_Server1
  110f                     FileServer3


SEE ALSO

tethereal(1), editcap(1), tcpdump(8), pcap(3)


NOTES

The latest version of Ethereal can be found at http://www.ethereal.com.


AUTHORS

  Original Author
  -------- ------
  Gerald Combs  <gerald[AT]ethereal.com>
  Contributors
  ------------
  Gilbert Ramirez          <gram[AT]alumni.rice.edu>
  Hannes R. Boehm          <hannes[AT]boehm.org>
  Mike Hall                <mlh[AT]io.com>
  Bobo Rajec               <bobo[AT]bsp-consulting.sk>
  Laurent Deniel           <deniel[AT]worldnet.fr>
  Don Lafontaine           <lafont02[AT]cn.ca>
  Guy Harris               <guy[AT]alum.mit.edu>
  Simon Wilkinson          <sxw[AT]dcs.ed.ac.uk>
  Joerg Mayer              <jmayer[AT]loplof.de>
  Martin Maciaszek         <fastjack[AT]i-s-o.net>
  Didier Jorand            <Didier.Jorand[AT]alcatel.fr>
  Jun-ichiro itojun Hagino <itojun[AT]iijlab.net>
  Richard Sharpe           <sharpe[AT]ns.aus.com>
  John McDermott           <jjm[AT]jkintl.com> 
  Jeff Jahr                <jjahr[AT]shastanets.com>
  Brad Robel-Forrest       <bradr[AT]watchguard.com>
  Ashok Narayanan          <ashokn[AT]cisco.com>
  Aaron Hillegass          <aaron[AT]classmax.com>
  Jason Lango              <jal[AT]netapp.com>
  Johan Feyaerts           <Johan.Feyaerts[AT]siemens.atea.be>
  Olivier Abad             <oabad[AT]cybercable.fr>
  Thierry Andry            <Thierry.Andry[AT]advalvas.be>
  Jeff Foster              <jjfoste[AT]woodward.com>
  Peter Torvals            <petertv[AT]xoommail.com>
  Christophe Tronche       <ch.tronche[AT]computer.org>
  Nathan Neulinger         <nneul[AT]umr.edu>
  Tomislav Vujec           <tvujec[AT]carnet.hr>
  Kojak                    <kojak[AT]bigwig.net>
  Uwe Girlich              <Uwe.Girlich[AT]philosys.de>
  Warren Young             <tangent[AT]mail.com>
  Heikki Vatiainen         <hessu[AT]cs.tut.fi>
  Greg Hankins             <gregh[AT]twoguys.org>
  Jerry Talkington         <jerryt[AT]netapp.com>
  Dave Chapeskie           <dchapes[AT]ddm.on.ca>
  James Coe                <jammer[AT]cin.net>
  Bert Driehuis            <driehuis[AT]playbeing.org>
  Stuart Stanley           <stuarts[AT]mxmail.net>
  John Thomes              <john[AT]ensemblecom.com>
  Laurent Cazalet          <laurent.cazalet[AT]mailclub.net>
  Thomas Parvais           <thomas.parvais[AT]advalvas.be>
  Gerrit Gehnen            <G.Gehnen[AT]atrie.de>
  Craig Newell             <craign[AT]cheque.uq.edu.au>
  Ed Meaney                <emeaney[AT]altiga.com>
  Dietmar Petras           <DPetras[AT]ELSA.de> 
  Fred Reimer              <fwr[AT]ga.prestige.net>
  Florian Lohoff           <flo[AT]rfc822.org>
  Jochen Friedrich         <jochen+ethereal[AT]scram.de>
  Paul Welchinski          <paul.welchinski[AT]telusplanet.net>
  Doug Nazar               <nazard[AT]dragoninc.on.ca>
  Andreas Sikkema          <andreas.sikkema[AT]philips.com>
  Mark Muhlestein          <mmm[AT]netapp.com>
  Graham Bloice            <graham.bloice[AT]trihedral.com>
  Ralf Schneider           <ralf.schneider[AT]alcatel.se>
  Yaniv Kaul               <ykaul[AT]netvision.net.il>
  Paul Ionescu             <ipaul[AT]romsys.ro>
  Mark Burton              <markb[AT]ordern.com>
  Stefan Raab              <sraab[AT]cisco.com>
  Mark Clayton             <clayton[AT]shore.net>
  Michael Rozhavsky        <mike[AT]tochna.technion.ac.il>
  Dug Song                 <dugsong[AT]monkey.org>
  Michael Tuexen           <Michael.Tuexen[AT]icn.siemens.de>
  Bruce Korb               <bkorb[AT]sco.com>
  Jose Pedro Oliveira      <jpo[AT]di.uminho.pt>
  David Frascone           <dave[AT]frascone.com>
  Peter Kjellerstedt       <pkj[AT]axis.com>
  Phil Techau              <phil_t[AT]altavista.net>
  Wes Hardaker             <wjhardaker[AT]ucdavis.edu>
  Robert Tsai              <rtsai[AT]netapp.com>
  Craig Metz               <cmetz[AT]inner.net>
  Per Flock                <per.flock[AT]axis.com>
  Jack Keane               <jkeane[AT]OpenReach.com>
  Brian Wellington         <bwelling[AT]xbill.org>
  Santeri Paavolainen      <santtu[AT]ssh.com>
  Ulrich Kiermayr          <uk[AT]ap.univie.ac.at>
  Neil Hunter              <neil.hunter[AT]energis-squared.com>
  Ralf Holzer              <ralf[AT]well.com>
  Craig Rodrigues          <rodrigc[AT]mediaone.net>
  Ed Warnicke              <hagbard[AT]physics.rutgers.edu>
  Johan Jorgensen          <johan.jorgensen[AT]axis.com>
  Frank Singleton          <frank.singleton[AT]ericsson.com>
  Kevin Shi                <techishi[AT]ms22.hinet.net>
  Mike Frisch              <mfrisch[AT]saturn.tlug.org>
  Burke Lau                <burke_lau[AT]agilent.com>
  Martti Kuparinen         <martti.kuparinen[AT]iki.fi>
  David Hampton            <dhampton[AT]mac.com>
  Kent Engstr÷m            <kent[AT]unit.liu.se>
  Ronnie Sahlberg          <rsahlber[AT]bigpond.net.au>
  Alexandre P. Ferreira    <alexandref[AT]spliceip.com.br>
  Simharajan Srishylam     <Simharajan.Srishylam[AT]netapp.com>
  Greg Kilfoyle            <gregk[AT]redback.com>
  James E. Flemer          <jflemer[AT]acm.jhu.edu>
  Peter Lei                <peterlei[AT]cisco.com>
  Thomas Gimpel            <thomas.gimpel[AT]ferrari.de>
  Albert Chin              <china[AT]thewrittenword.com>
  Charles Levert           <charles[AT]comm.polymtl.ca>
  Todd Sabin               <tas[AT]webspan.net>
  Eduardo PΘrez Ureta      <eperez[AT]dei.inf.uc3m.es>
  Martin Thomas            <martin_a_thomas[AT]yahoo.com>
  Hartmut Mueller          <hartmut[AT]wendolene.ping.de>
  Michal Melerowicz        <Michal.Melerowicz[AT]nokia.com>
  Hannes Gredler           <hannes[AT]juniper.net>
  Inoue                    <inoue[AT]ainet.or.jp>
  Olivier Biot             <Olivier.Biot[AT]siemens.atea.be>
  Patrick Wolfe            <pjw[AT]zocalo.cellular.ameritech.com>
  Martin Held              <Martin.Held[AT]icn.siemens.de>
  Riaan Swart              <rswart[AT]cs.sun.ac.za>
  Christian Lacunza        <celacunza[AT]gmx.net>
  Michael Rozhavsky        <mike[AT]tochna.technion.ac.il>
  Scott Renfro             <scott[AT]renfro.org>
  Juan Toledo              <toledo[AT]users.sourceforge.net>
  Jean-Christian Pennetier <jeanchristian.pennetier[AT]rd.francetelecom.fr>
  Jian Yu                  <bgp4news[AT]yahoo.com>
  Eran Mann                <emann[AT]opticalaccess.com>
  Andy Hood                <ahood[AT]westpac.com.au>
  Randy McEoin             <rmceoin[AT]pe.net>
  Edgar Iglesias           <edgar.iglesias[AT]axis.com>
  Martina Obermeier        <Martina.Obermeier[AT]icn.siemens.de>
  Javier Achirica          <achirica[AT]ttd.net>
  B. Johannessen           <bob[AT]havoq.com>
  Thierry Pelle            <thierry.pelle[AT]rd.francetelecom.fr>
  Francisco Javier Cabello <fjcabello[AT]vtools.es>
  Laurent Rabret           <laurent.rabret[AT]rd.francetelecom.fr>
  nuf si                   <gnippiks[AT]yahoo.com>
  Jeff Morriss             <jeff.morriss[AT]ulticom.com>
  Aamer Akhter             <aakhter[AT]cisco.com>
  Pekka Savola             <pekkas[AT]netcore.fi>
  David Eisner             <cradle[AT]Glue.umd.edu>
  Steve Dickson            <steved[AT]talarian.com>
  Markus Seehofer          <mseehofe[AT]nt.hirschmann.de>
  Lee Berger               <lberger[AT]roy.org>
  Motonori Shindo          <mshindo[AT]mshindo.net>
  Terje Krogdahl           <tekr[AT]nextra.com>
  Jean-Francois Mule       <jfmule[AT]clarent.com>
  Thomas Wittwer           <thomas.wittwer[AT]iclip.ch>
  Matthias Nyffenegger     <matthias.nyffenegger[AT]iclip.ch>
  Palle Lyckegaard         <Palle[AT]lyckegaard.dk>
  Nicolas Balkota          <balkota[AT]mac.com>
  Tom Uijldert             <Tom.Uijldert[AT]cmg.nl>
  Endoh Akira              <endoh[AT]netmarks.co.jp>
  Graeme Hewson            <graeme.hewson[AT]oracle.com>
  Pasi Eronen              <pasi.eronen[at]nixu.com>
  Georg von Zezschwitz     <gvz[AT]2scale.net>
  Steffen Weinreich        <steve[AT]weinreich.org>
  Marc Milgram             <mmilgram[AT]arrayinc.com>
  Gordon McKinney          <gordon[AT]night-ray.com>
  Tim Farley               <tfarley[AT]iss.net>
  Daniel Thompson          <daniel.thompson[AT]st.com>
  Chris Jepeway            <thai-dragon[AT]eleven29.com>
  Pavel Novotny            <Pavel.Novotny[AT]icn.siemens.de>
  Shinsuke Suzuki          <suz[AT]kame.net>
  Andrew C. Feren          <aferen[AT]cetacean.com>
  Tomas Kukosa             <tomas.kukosa[AT]anfdata.cz>
  Andreas Stockmeier       <a.stockmeier[AT]avm.de>
  Pekka Nikander           <pekka.nikander[AT]nomadiclab.com>
  Hamish Moffatt           <hamish[AT]cloud.net.au>
  Kazushi Sugyo            <k-sugyou[AT]nwsl.mesh.ad.jp>
  Tim Potter               <tpot[AT]samba.org>
  Raghu Angadi             <rangadi[AT]inktomi.com>
  Taisuke Sasaki           <sasaki[AT]soft.net.fujitsu.co.jp>
  Tim Newsham              <newsham[AT]lava.net>
  Tom Nisbet               <Tnisbet[AT]VisualNetworks.com>
  Darren New               <dnew[AT]san.rr.com>
  Pavel Mores              <pvl[AT]uh.cz>
  Bernd Becker             <bb[AT]bernd-becker.de>
  Heinz Prantner           <Heinz.Prantner[AT]radisys.com>
  Irfan Khan               <ikhan[AT]qualcomm.com>
  Jayaram V.R              <vjayar[AT]cisco.com>
  Dinesh Dutt              <ddutt[AT]cisco.com>
  Nagarjuna Venna          <nvenna[AT]Brixnet.com>
  Jirka Novak              <j.novak[AT]netsystem.cz>
  Ricardo Barroetave±a     <rbarroetavena[AT]veufort.com>
  Alan Harrison            <alanharrison[AT]mail.com>
  Mike Frantzen            <frantzen[AT]w4g.org>
  Charlie Duke             <cduke[AT]fvc.com>
  Alfred Arnold            <Alfred.Arnold[AT]elsa.de>
  Dermot Bradley           <dermot.bradley[AT]openwave.com>
  Adam Sulmicki            <adam[AT]cfar.umd.edu>
  Kari Tiirikainen         <kari.tiirikainen[AT]nokia.com>
  John Mackenzie           <John.A.Mackenzie[AT]t-online.de>
  Peter Valchev            <pvalchev[AT]openbsd.org>
  Alex Ruzin               <alexr[AT]nbase.co.il>
  Jouni Malinen            <jkmaline[AT]cc.hut.fi>
  Paul E. Erkkila          <pee[AT]erkkila.org>
  Jakob Schlyter           <jakob[AT]crt.se>
  Jim Sienicki             <sienicki[AT]issanni.com>
  Steven French            <sfrench[AT]us.ibm.com>
  Diana Eichert            <deicher[AT]sandia.gov>
  Blair Cooper             <blair[AT]teamon.com>
  Kikuchi Ayamura          <ayamura[AT]ayamura.org>
  Didier Gautheron         <dgautheron[AT]magic.fr>
  Phil Williams            <csypbw[AT]comp.leeds.ac.uk>
  Kevin Humphries          <khumphries[AT]networld.com>
  Erik Nordstr÷m           <erik.nordstrom[AT]it.uu.se>
  Devin Heitmueller        <dheitmueller[AT]netilla.com>
  Chenjiang Hu             <chu[AT]chiaro.com>
  Kan Sasaki               <sasaki[AT]fcc.ad.jp>
  Stefan Wenk              <stefan.wenk[AT]gmx.at>
  Ruud Linders             <ruud[AT]lucent.com>
  Andrew Esh               <Andrew.Esh[AT]tricord.com>
  Greg Morris              <GMORRIS[AT]novell.com>
  Dirk Steinberg           <dws[AT]dirksteinberg.de>
  Kari Heikkila            <kari.o.heikkila[AT]nokia.com>
  Olivier Dreux            <Olivier.Dreux[AT]alcatel.fr>
  Michael Stiller          <ms[AT]2scale.net>
  Antti Tuominen           <ajtuomin[AT]tml.hut.fi>
  Martin Gignac            <lmcgign[AT]mobilitylab.net>
  John Wells               <wells[AT]ieee.org>
  Loic Tortay              <tortay[AT]cc.in2p3.fr>
  Steve Housley            <Steve_Housley[AT]eur.3com.com>
  Peter Hawkins            <peter[AT]hawkins.emu.id.au>
  Bill Fumerola            <billf[AT]FreeBSD.org>
  Chris Waters             <chris[AT]waters.co.nz>
  Solomon Peachy           <pizza[AT]shaftnet.org>
  Jaime Fournier           <jafour1[AT]yahoo.com>
  Markus Steinmann         <ms[AT]seh.de>
  Tsutomu Mieno            <iitom[AT]utouto.com>
  Yasuhiro Shirasaki       <yasuhiro[AT]gnome.gr.jp>
  Anand V. Narwani         <anarwani[AT]cisco.com>
  Christopher K. St. John  <cks[AT]distributopia.com>
  Nix                      <nix[AT]esperi.demon.co.uk>
  Liviu Daia               <Liviu.Daia[AT]imar.ro>
  Richard Urwin            <rurwin[AT]schenck.co.uk>
  Prabhakar Krishnan       <Prabhakar.Krishnan[AT]netapp.com>
  Jim McDonough            <jmcd[AT]us.ibm.com>
  Sergei Shokhor           <sshokhor[AT]uroam.com>
  Hidetaka Ogawa           <ogawa[AT]bs2.qnes.nec.co.jp>
  Jan Kratochvil           <short[AT]ucw.cz>
  Alfred Koebler           <ak[AT]icon-sult.de>
  Vassilii Khachaturov     <Vassilii.Khachaturov[AT]comverse.com>
  Bill Studenmund          <wrstuden[AT]wasabisystems.com>
  Brian Bruns              <camber[AT]ais.org>

Alain Magloire <alainm[AT]rcsm.ece.mcgill.ca> was kind enough to give his permission to use his version of snprintf.c.

Dan Lasley <dlasley[AT]promus.com> gave permission for his dumpit() hex-dump routine to be used.

Mattia Cazzola <mattiac[AT]alinet.it> provided a patch to the hex dump display routine.

We use the exception module from Kazlib, a C library written by Kaz Kylheku <kaz[AT]ashi.footprints.net>. Thanks goes to him for his well-written library. The Kazlib home page can be found at http://users.footprints.net/~kaz/kazlib.html