Wireshark · Display Filter Reference: DCOM

Field name	Description	Type	Versions
dcom.actual_count	ActualCount	Unsigned integer (32 bits)	1.0.0 to 1.8.15
dcom.array_size	(ArraySize)	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.byte_length	ByteLength	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.clsid	CLSID	Globally Unique Identifier	1.0.0 to 4.4.2
dcom.custobjref	CUSTOMOBJREF	Label	1.10.0 to 4.4.2
dcom.dissection_incomplete	Dissection incomplete	Label	3.4.0 to 4.4.2
dcom.dissetion_incomplete	Dissection incomplete	Label	1.12.0 to 3.2.18
dcom.dualstringarray.mult_ip	DUALSTRINGARRAY Multiple IP	Label	1.12.0 to 4.4.2
dcom.dualstringarray.network_addr	NetworkAddr	Character string	1.0.0 to 4.4.2
dcom.dualstringarray.num_entries	NumEntries	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.dualstringarray.security	SecurityBinding	Label	1.0.0 to 4.4.2
dcom.dualstringarray.security_authn_svc	AuthnSvc	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.dualstringarray.security_authz_svc	AuthzSvc	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.dualstringarray.security_offset	SecurityOffset	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.dualstringarray.security_princ_name	PrincName	Character string	1.0.0 to 4.4.2
dcom.dualstringarray.string	StringBinding	Label	1.0.0 to 4.4.2
dcom.dualstringarray.tower_id	TowerId	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.extent	Extension	Label	1.0.0 to 4.4.2
dcom.extent.array_count	Extension Count	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.extent.array_res	Reserved	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.extent.id	Extension Id	Globally Unique Identifier	1.0.0 to 4.4.2
dcom.extent.size	Extension Size	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.hresult	HResult	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.hresult.expert	Hresult	Label	1.12.0 to 4.4.2
dcom.ifp	InterfacePointer	Label	1.0.0 to 4.4.2
dcom.iid	IID	Globally Unique Identifier	1.0.0 to 4.4.2
dcom.ip_cnt_data	CntData	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.ipid	IPID	Globally Unique Identifier	1.0.0 to 4.4.2
dcom.max_count	MaxCount	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.no_spec	No specification available, dissection not possible	Label	1.12.0 to 4.4.2
dcom.nospec	No Specification Available	Byte sequence	1.0.0 to 4.4.2
dcom.objref	OBJREF	Label	1.0.0 to 4.4.2
dcom.objref.cbextension	CBExtension	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.objref.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.objref.resolver_address	ResolverAddress	Label	1.0.0 to 4.4.2
dcom.objref.signature	Signature	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.objref.size	Size	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.offset	Offset	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.oid	OID	Unsigned integer (64 bits)	1.0.0 to 4.4.2
dcom.oxid	OXID	Unsigned integer (64 bits)	1.0.0 to 4.4.2
dcom.pointer_val	(PointerVal)	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.sa	SAFEARRAY	Label	1.0.0 to 4.4.2
dcom.sa.bound_elements	BoundElements	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.sa.dims16	Dims16	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.sa.dims32	Dims32	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.sa.element_size	ElementSize	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.sa.elements	Elements	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.sa.features	Features	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.sa.features_auto	AUTO	Boolean	1.0.0 to 4.4.2
dcom.sa.features_bstr	BSTR	Boolean	1.0.0 to 4.4.2
dcom.sa.features_dispatch	DISPATCH	Boolean	1.0.0 to 4.4.2
dcom.sa.features_embedded	EMBEDDED	Boolean	1.0.0 to 4.4.2
dcom.sa.features_fixedsize	FIXEDSIZE	Boolean	1.0.0 to 4.4.2
dcom.sa.features_have_iid	HAVEIID	Boolean	1.0.0 to 4.4.2
dcom.sa.features_have_vartype	HAVEVARTYPE	Boolean	1.0.0 to 4.4.2
dcom.sa.features_record	RECORD	Boolean	1.0.0 to 4.4.2
dcom.sa.features_static	STATIC	Boolean	1.0.0 to 4.4.2
dcom.sa.features_unknown	UNKNOWN	Boolean	1.0.0 to 4.4.2
dcom.sa.features_variant	VARIANT	Boolean	1.0.0 to 4.4.2
dcom.sa.locks	Locks	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.sa.low_bound	LowBound	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.sa.vartype	VarType32	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.stdobjref	STDOBJREF	Label	1.0.0 to 4.4.2
dcom.stdobjref.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.stdobjref.public_refs	PublicRefs	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.that.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.this.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.this.res	Reserved	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.this.uuid	Causality ID	Globally Unique Identifier	1.0.0 to 4.4.2
dcom.this.version_major	VersionMajor	Unsigned integer (16 bits)	1.0.0 to 1.8.15
dcom.this.version_minor	VersionMinor	Unsigned integer (16 bits)	1.0.0 to 1.8.15
dcom.tobedone	To Be Done	Byte sequence	1.0.0 to 4.4.2
dcom.variant	Variant	Label	1.0.0 to 1.8.15
dcom.variant_rpc_res	RPC-Reserved	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.variant_size	Size	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.variant_type	VarType	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.variant_type32	VarType32	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.variant_wres	Reserved	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.version_major	VersionMajor	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.version_minor	VersionMinor	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.vt.bool	VT_BOOL	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.vt.bstr	VT_BSTR	Character string	1.0.0 to 4.4.2
dcom.vt.byref	BYREF	Label	1.0.0 to 4.4.2
dcom.vt.cy	VT_CY	Signed integer (64 bits)	2.0.0 to 4.4.2
dcom.vt.date	VT_DATE	Floating point (double-precision)	1.0.0 to 4.4.2
dcom.vt.dispatch	VT_DISPATCH	Label	1.0.0 to 4.4.2
dcom.vt.i1	VT_I1	Signed integer (8 bits)	1.0.0 to 4.4.2
dcom.vt.i2	VT_I2	Signed integer (16 bits)	1.0.0 to 4.4.2
dcom.vt.i4	VT_I4	Signed integer (32 bits)	1.0.0 to 4.4.2
dcom.vt.i8	VT_I8	Signed integer (64 bits)	1.0.0 to 4.4.2
dcom.vt.r4	VT_R4	Floating point (single-precision)	1.0.0 to 4.4.2
dcom.vt.r8	VT_R8	Floating point (double-precision)	1.0.0 to 4.4.2
dcom.vt.ui1	VT_UI1	Unsigned integer (8 bits)	1.0.0 to 4.4.2
dcom.vt.ui2	VT_UI2	Unsigned integer (16 bits)	1.0.0 to 4.4.2
dcom.vt.ui4	VT_UI4	Unsigned integer (32 bits)	1.0.0 to 4.4.2
dcom.vt.ui8	VT_UI8	Unsigned integer (64 bits)	2.0.0 to 4.4.2