Wireshark · Display Filter Reference: Microsoft Windows Lanman Remote API Protocol

Field name	Description	Type	Versions
lanman.aux_data_desc	Auxiliary Data Descriptor	Character string	1.0.0 to 4.4.2
lanman.aux_data_struct_count	Auxiliary data structure count	Unsigned integer (16 bits)	2.0.0 to 4.4.2
lanman.available_bytes	Available Bytes	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.available_count	Available Entries	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.bad_pw_count	Bad Password Count	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.code_page	Code Page	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.comment	Comment	Character string	1.0.0 to 4.4.2
lanman.computer_name	Computer Name	Character string	1.0.0 to 4.4.2
lanman.continuation_from	Continuation from message in frame	Unsigned integer (32 bits)	1.0.0 to 1.8.15
lanman.convert	Convert	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.country_code	Country Code	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.current_time	Current Date/Time	Date and time	1.0.0 to 4.4.2
lanman.data_no_descriptor	Data (no descriptor available)	Byte sequence	2.0.0 to 4.4.2
lanman.data_no_recv_buffer	Data (no receive buffer)	Byte sequence	2.0.0 to 4.4.2
lanman.day	Day	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.duration	Duration of Session	Time offset	1.0.0 to 4.4.2
lanman.entry_count	Entry Count	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.enumeration_domain	Enumeration Domain	Character string	1.0.0 to 4.4.2
lanman.full_name	Full Name	Character string	1.0.0 to 4.4.2
lanman.function_code	Function Code	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.group_name	Group Name	Character string	1.0.0 to 4.4.2
lanman.homedir	Home Directory	Character string	1.0.0 to 4.4.2
lanman.hour	Hour	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.hundredths	Hundredths of a second	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.kickoff_time	Kickoff Date/Time	Date and time	1.0.0 to 4.4.2
lanman.last_entry	Last Entry	Character string	1.0.0 to 4.4.2
lanman.last_logoff	Last Logoff Date/Time	Date and time	1.0.0 to 4.4.2
lanman.last_logon	Last Logon Date/Time	Date and time	1.0.0 to 4.4.2
lanman.level	Detail Level	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.logoff_code	Logoff Code	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.logoff_time	Logoff Date/Time	Date and time	1.0.0 to 4.4.2
lanman.logon_code	Logon Code	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.logon_domain	Logon Domain	Character string	1.0.0 to 4.4.2
lanman.logon_hours	Logon Hours	Byte sequence	1.0.0 to 4.4.2
lanman.logon_server	Logon Server	Character string	1.0.0 to 4.4.2
lanman.max_storage	Max Storage	Unsigned integer (32 bits)	1.0.0 to 4.4.2
lanman.minute	Minute	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.month	Month	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.msecs	Milliseconds	Unsigned integer (32 bits)	1.0.0 to 4.4.2
lanman.new_password	New Password	Byte sequence	1.0.0 to 4.4.2
lanman.num_logons	Number of Logons	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.old_password	Old Password	Byte sequence	1.0.0 to 4.4.2
lanman.operator_privileges	Operator Privileges	Unsigned integer (32 bits)	1.0.0 to 4.4.2
lanman.other_domains	Other Domains	Character string	1.0.0 to 4.4.2
lanman.padding	Padding	Byte sequence	2.0.0 to 4.4.2
lanman.param_desc	Parameter Descriptor	Character string	1.0.0 to 4.4.2
lanman.param_no_descriptor	Parameters (no descriptor available)	Byte sequence	2.0.0 to 4.4.2
lanman.parameters	Parameters	Character string	1.0.0 to 4.4.2
lanman.password	Password	Character string	1.0.0 to 4.4.2
lanman.password_age	Password Age	Time offset	1.0.0 to 4.4.2
lanman.password_can_change	Password Can Change	Date and time	1.0.0 to 4.4.2
lanman.password_must_change	Password Must Change	Date and time	1.0.0 to 4.4.2
lanman.privilege_level	Privilege Level	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.recv_buf_len	Receive Buffer Length	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.reserved	Reserved	Unsigned integer (32 bits)	1.0.0 to 4.4.2
lanman.ret_desc	Return Descriptor	Character string	1.0.0 to 4.4.2
lanman.script_path	Script Path	Character string	1.0.0 to 4.4.2
lanman.second	Second	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.send_buf_len	Send Buffer Length	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.server	Server	Label	2.0.0 to 4.4.2
lanman.server.comment	Server Comment	Character string	1.0.0 to 4.4.2
lanman.server.major	Major Version	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.server.minor	Minor Version	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.server.name	Server Name	Character string	1.0.0 to 4.4.2
lanman.share	Share	Label	2.0.0 to 4.4.2
lanman.share.comment	Share Comment	Character string	1.0.0 to 4.4.2
lanman.share.current_uses	Share Current Uses	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.share.max_uses	Share Max Uses	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.share.name	Share Name	Character string	1.0.0 to 4.4.2
lanman.share.password	Share Password	Character string	1.0.0 to 4.4.2
lanman.share.path	Share Path	Character string	1.0.0 to 4.4.2
lanman.share.permissions	Share Permissions	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.share.type	Share Type	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.status	Status	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.timeinterval	Time Interval	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.tzoffset	Time Zone Offset	Signed integer (16 bits)	1.0.0 to 4.4.2
lanman.units_per_week	Units Per Week	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.user_comment	User Comment	Character string	1.0.0 to 4.4.2
lanman.user_name	User Name	Character string	1.0.0 to 4.4.2
lanman.ustruct_size	Length of UStruct	Unsigned integer (16 bits)	1.0.0 to 4.4.2
lanman.weekday	Weekday	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.workstation_domain	Workstation Domain	Character string	1.0.0 to 4.4.2
lanman.workstation_major	Workstation Major Version	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.workstation_minor	Workstation Minor Version	Unsigned integer (8 bits)	1.0.0 to 4.4.2
lanman.workstation_name	Workstation Name	Character string	1.0.0 to 4.4.2
lanman.workstations	Workstations	Character string	1.0.0 to 4.4.2
lanman.year	Year	Unsigned integer (16 bits)	1.0.0 to 4.4.2