Display Filter Reference: Distributed Computing Environment / Remote Procedure Call (DCE/RPC)
Protocol field name: dcerpc
Versions: 1.0.0 to 4.4.2
Back to Display Filter Reference
Field name | Description | Type | Versions |
---|---|---|---|
dcerpc | Actual Count | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Buffer | Byte sequence | 1.0.0 to 1.10.14 |
dcerpc | Max Count | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Offset | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth Credentials | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Auth Context ID | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth Info | Label | 2.4.0 to 4.4.2 |
dcerpc | Auth level | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth pad len | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth Padding | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Auth Rsrvd | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth type | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth Verifier | Byte sequence | 2.0.0 to 2.4.16 |
dcerpc | Authentication verifier | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Bind not acknowledged | Label | 1.12.0 to 4.4.2 |
dcerpc | RTS Client address | IPv4 address | 2.0.0 to 4.4.2 |
dcerpc | RTS Client address | IPv6 address | 2.0.0 to 4.4.2 |
dcerpc | Bind Time Feature Negotiation Bitmask | Unsigned integer (16 bits) | 1.12.0 to 2.0.16 |
dcerpc | Ack reason | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Ack result | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Transfer Syntax | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | Syntax ver | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Alloc hint | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Assoc Group | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth Length | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Abstract Syntax | Label | 1.0.0 to 4.4.2 |
dcerpc | Interface Ver | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Interface Ver Minor | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Interface UUID | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | Transfer Syntax | Label | 1.0.0 to 4.4.2 |
dcerpc | Bind Time Features | Unsigned integer (16 bits) | 2.2.0 to 4.4.2 |
dcerpc | Security Context Multiplexing Supported | Boolean | 1.12.0 to 4.4.2 |
dcerpc | Keep Connection On Orphan Supported | Boolean | 1.12.0 to 4.4.2 |
dcerpc | ID | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | ver | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Call ID | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Cancel count | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Context ID | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | No bind info for interface Context ID | Label | 1.12.0 to 4.4.2 |
dcerpc | Ctx Item | Label | 1.0.0 to 4.4.2 |
dcerpc | Desegmentation Required | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Fault flags | Unsigned integer (8 bits) | 2.6.0 to 4.4.2 |
dcerpc | Extended error information present | Boolean | 2.6.0 to 4.4.2 |
dcerpc | Packet Flags | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Cancel Pending | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Did Not Execute | Boolean | 1.0.0 to 4.4.2 |
dcerpc | First Frag | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Last Frag | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Maybe | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Multiplex | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Object | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Frag Length | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Max Recv Frag | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Max Xmit Frag | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Num Ctx Items | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Number of protocols | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Num results | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Num Trans Items | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Protocol major version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Protocol minor version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Reject reason | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Ping | Boolean | 1.6.0 to 4.4.2 |
dcerpc | RTS Command | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Address Type | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Association Group ID | Globally Unique Identifier | 1.8.0 to 4.4.2 |
dcerpc | Channel Lifetime | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Client Keepalive | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Connection Timeout | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Cookie | Globally Unique Identifier | 1.8.0 to 4.4.2 |
dcerpc | Available Window | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Bytes Received | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Channel Cookie | Globally Unique Identifier | 1.8.0 to 4.4.2 |
dcerpc | Forward Destination | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Conformance Count | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Padding | Byte sequence | 1.8.0 to 4.4.2 |
dcerpc | Ping Traffic Sent Notify | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Receive Window Size | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | unknown RTS command number | Label | 2.0.0 to 4.4.2 |
dcerpc | Version | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | RTS Number of Commands | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
dcerpc | RTS Flags | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
dcerpc | Echo | Boolean | 1.6.0 to 1.6.16 |
dcerpc | EOF | Boolean | 1.6.0 to 4.4.2 |
dcerpc | In Channel | Boolean | 1.6.0 to 4.4.2 |
dcerpc | None | Boolean | 1.6.0 to 2.0.7, 2.2.0 to 2.2.1 |
dcerpc | Other Cmd | Boolean | 1.6.0 to 4.4.2 |
dcerpc | Out Channel | Boolean | 1.6.0 to 4.4.2 |
dcerpc | Recycle Channel | Boolean | 1.6.0 to 4.4.2 |
dcerpc | Scndry Addr | Character string | 1.0.0 to 4.4.2 |
dcerpc | Scndry Addr len | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Status | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Fault | Label | 1.12.0 to 4.4.2 |
dcerpc | Context change: %s | Label | 1.12.0 to 2.4.16 |
dcerpc | Decrypted stub data | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Activity | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | Activity Hint | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Auth proto | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Cancel ID | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Cancel Version | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Flags1 | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Broadcast | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Fragment | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Idempotent | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Last Fragment | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Maybe | Boolean | 1.0.0 to 4.4.2 |
dcerpc | No Fack | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for implementation | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for implementation | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Flags2 | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Cancel Pending | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for implementation | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for future use (MBZ) | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for future use (MBZ) | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for future use (MBZ) | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for future use (MBZ) | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for future use (MBZ) | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Reserved for future use (MBZ) | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Fragment len | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Fragment num | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Interface | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | Interface Ver | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Interface Hint | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Sequence num | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Serial High | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Serial Low | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Server boot time | Date and time | 1.0.0 to 4.4.2 |
dcerpc | Status | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Data Representation | Byte sequence | 1.0.0 to 4.4.2 |
dcerpc | Byte order | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Character | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Floating-point | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | duplicate PTR | Character string | 2.0.0 to 4.4.2 |
dcerpc | Encrypted stub data | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Max Frag Size | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Max TSDU | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Selective ACK | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Selective ACK Len | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Serial Num | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | FACK Version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Window Size | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Fault stub data | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | DCE/RPC Fragment | Frame number | 1.0.0 to 4.4.2 |
dcerpc | Fragment count | Unsigned integer (32 bits) | 1.6.0 to 4.4.2 |
dcerpc | Defragmentation error | Frame number | 1.0.0 to 4.4.2 |
dcerpc | Multiple tail fragments found | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Fragment overlap | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Conflicting data in fragment overlap | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Fragment | Label | 2.2.0 to 4.4.2 |
dcerpc | Fragment too long | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Fragment data | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Multiple DCE/RPC fragments/PDU's in one packet | Label | 1.12.0 to 4.4.2 |
dcerpc | Fragment, reassembled | Label | 1.12.0 to 4.4.2 |
dcerpc | Reassembled DCE/RPC Fragments | Label | 1.0.0 to 4.4.2 |
dcerpc | Invalid authentication attempt | Label | 2.0.0 to 4.4.2 |
dcerpc | Authentication Verifier | Byte sequence | 1.0.0 to 4.4.2 |
dcerpc | Key Version Number | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Protection Level | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Long frame | Label | 2.0.0 to 4.4.2 |
dcerpc | Name Len | Unsigned integer (16 bits) | 1.4.0 to 4.4.2 |
dcerpc | Name Size | Unsigned integer (16 bits) | 1.4.0 to 4.4.2 |
dcerpc | missalign | Byte sequence | 2.2.0 to 4.4.2 |
dcerpc | NDR-Padding | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | No request to this DCE/RPC call found | Label | 1.12.0 to 4.4.2 |
dcerpc | dissection not implemented | Label | 3.2.0 to 4.4.2 |
dcerpc | Account is autolocked | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Account disabled | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Interdomain trust account | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Home dir required | Boolean | 1.0.0 to 4.4.2 |
dcerpc | MNS logon user account | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Normal user account | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Password expires | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Password required | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Server trust account | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Temporary duplicate account | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Workstation trust account | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Acct Ctrl | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Attributes | Unsigned integer (32 bits) | 1.0.0 to 4.2.9 |
dcerpc | Association rejected | Label | 1.12.0 to 4.4.2 |
dcerpc | Blob data | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Blob size | Unsigned integer (32 bits) | 1.8.0 to 4.4.2 |
dcerpc | Frame handle closed | Frame number | 1.0.0 to 4.4.2 |
dcerpc | Count | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Domain SID | Character string | 1.0.0 to 4.4.2 |
dcerpc | Group Attributes | Unsigned integer (32 bits) | 4.4.0 to 4.4.2 |
dcerpc | Enabled | Boolean | 4.4.0 to 4.4.2 |
dcerpc | Enabled By Default | Boolean | 4.4.0 to 4.4.2 |
dcerpc | Mandatory | Boolean | 4.4.0 to 4.4.2 |
dcerpc | Owner | Boolean | 4.4.0 to 4.4.2 |
dcerpc | Resource Group | Boolean | 4.4.0 to 4.4.2 |
dcerpc | GUID | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | Divisions | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Frame handle opened | Frame number | 1.0.0 to 4.4.2 |
dcerpc | Wrong string type | Character string | 1.8.0 to 4.4.2 |
dcerpc | Length | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Size | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Unknown char | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | NULL Pointer | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Object | Globally Unique Identifier | 1.0.0 to 4.4.2 |
dcerpc | Operation | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Opnum | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
dcerpc | Payload stub data | Label | 2.2.0 to 4.4.2 |
dcerpc | Packet type | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Reassembled DCE/RPC length | Unsigned integer (32 bits) | 1.4.0 to 4.4.2 |
dcerpc | Reassembled PDU in frame | Frame number | 1.0.0 to 4.4.2 |
dcerpc | Referent ID | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
dcerpc | Referent ID | Unsigned integer (64 bits) | 2.2.0 to 4.4.2 |
dcerpc | Request in frame | Frame number | 1.0.0 to 4.4.2 |
dcerpc | Reserved | Byte sequence | 2.2.0 to 4.4.2 |
dcerpc | Response in frame | Frame number | 1.0.0 to 4.4.2 |
dcerpc | rpc_sec_vt_bitmask | Unsigned integer (32 bits) | 2.2.0 to 4.4.2 |
dcerpc | CLIENT_SUPPORT_HEADER_SIGNING | Boolean | 2.2.0 to 4.4.2 |
dcerpc | Command | Unsigned integer (16 bits) | 2.2.0 to 4.4.2 |
dcerpc | Cmd | Unsigned integer (16 bits) | 2.2.0 to 4.4.2 |
dcerpc | SEC_VT_COMMAND_END | Boolean | 2.2.0 to 4.4.2 |
dcerpc | Length | Unsigned integer (16 bits) | 2.2.0 to 4.4.2 |
dcerpc | SEC_VT_MUST_PROCESS_COMMAND | Boolean | 2.2.0 to 4.4.2 |
dcerpc | UUID | Globally Unique Identifier | 2.2.0 to 4.4.2 |
dcerpc | Version | Unsigned integer (32 bits) | 2.2.0 to 4.4.2 |
dcerpc | SEC_VT_SIGNATURE | Byte sequence | 2.2.0 to 4.4.2 |
dcerpc | Server accepting cancels | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Stub data | Byte sequence | 2.0.0 to 4.4.2 |
dcerpc | Stub data with rpc_sec_verification_trailer | Byte sequence | 2.2.0 to 4.4.2 |
dcerpc | Time from request | Time offset | 1.0.0 to 4.4.2 |
dcerpc | Unknown | Byte sequence | 2.2.0 to 4.4.2 |
dcerpc | Unknown DCERPC interface id | Boolean | 1.0.0 to 4.4.2 |
dcerpc | Version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Version (minor) | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
dcerpc | Verifier unavailable | Label | 2.0.0 to 4.4.2 |
dcerpc | RTS Command | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Address Type | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Association Group ID | Globally Unique Identifier | 1.6.0 to 1.6.16 |
dcerpc | Channel Lifetime | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Client Keepalive | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Connection Timeout | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Cookie | Globally Unique Identifier | 1.6.0 to 1.6.16 |
dcerpc | Available Window | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Bytes Received | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Channel Cookie | Globally Unique Identifier | 1.6.0 to 1.6.16 |
dcerpc | Forward Destination | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Conformance Count | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Padding | Byte sequence | 1.6.0 to 1.6.16 |
dcerpc | Ping Traffic Sent Notify | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Receive Window Size | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
dcerpc | Version | Unsigned integer (32 bits) | 1.6.0 to 1.6.16 |
nt | Fill bytes | Unsigned integer (32 bits) | 2.0.0 to 4.4.2 |
nt | HDR Length | Unsigned integer (16 bits) | 2.0.0 to 4.4.2 |
nt | Version | Unsigned integer (8 bits) | 2.0.0 to 4.4.2 |
nt | Blob Length | Unsigned integer (64 bits) | 2.0.0 to 4.4.2 |