Wireshark · Display Filter Reference: Lightweight Directory Access Protocol

Field name	Description	Type	Versions
ldap._untag_item	_untag	Character string	1.0.0 to 1.0.16
ldap.abandonRequest	abandonRequest	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.AccessMask.ADS_CONTROL_ACCESS	Ads Control Access	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_CREATE_CHILD	Ads Create Child	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_DELETE_CHILD	Ads Delete Child	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_DELETE_TREE	Ads Delete Tree	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_LIST	Ads List	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_LIST_OBJECT	Ads List Object	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_READ_PROP	Ads Read Prop	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_SELF_WRITE	Ads Self Write	Boolean	1.0.0 to 4.4.2
ldap.AccessMask.ADS_WRITE_PROP	Ads Write Prop	Boolean	1.0.0 to 4.4.2
ldap.addRequest	addRequest	Label	1.0.0 to 1.10.14
ldap.addRequest_element	addRequest	Label	1.12.0 to 4.4.2
ldap.addResponse	addResponse	Label	1.0.0 to 1.10.14
ldap.addResponse_element	addResponse	Label	1.12.0 to 4.4.2
ldap.ancestor_first_flag	Flag Ancestor_First	Boolean	2.0.0 to 4.4.2
ldap.and	and	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.and_item	and item	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.any	any	Character string	1.0.0 to 4.4.2
ldap.approxMatch	approxMatch	Label	1.0.0 to 1.10.14
ldap.approxMatch_element	approxMatch	Label	1.12.0 to 4.4.2
ldap.assertionValue	assertionValue	Character string	1.0.0 to 4.4.2
ldap.attributeDesc	attributeDesc	Character string	1.0.0 to 4.4.2
ldap.AttributeDescription	AttributeDescription	Character string	1.2.0 to 4.4.2
ldap.AttributeDescriptionList_item	AttributeDescriptionList	Character string	1.0.0 to 1.0.16
ldap.AttributeList_item	AttributeList item	Label	1.0.0 to 1.10.14
ldap.AttributeList_item_element	AttributeList item	Label	1.12.0 to 4.4.2
ldap.attributes	attributes	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.attributeType	attributeType	Character string	1.0.0 to 4.4.2
ldap.AttributeValue	AttributeValue	Byte sequence	1.2.0 to 4.4.2
ldap.authentication	authentication	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.ava	ava	Label	1.0.0 to 1.10.14
ldap.ava_element	ava	Label	1.12.0 to 4.4.2
ldap.baseObject	baseObject	Character string	1.0.0 to 4.4.2
ldap.bindRequest	bindRequest	Label	1.0.0 to 1.10.14
ldap.bindRequest_element	bindRequest	Label	1.12.0 to 4.4.2
ldap.bindResponse	bindResponse	Label	1.0.0 to 1.10.14
ldap.bindResponse_element	bindResponse	Label	1.12.0 to 4.4.2
ldap.cancelID	cancelID	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.CancelRequestValue	CancelRequestValue	Label	1.0.0 to 1.10.14
ldap.CancelRequestValue_element	CancelRequestValue	Label	1.12.0 to 4.4.2
ldap.compareRequest	compareRequest	Label	1.0.0 to 1.10.14
ldap.compareRequest_element	compareRequest	Label	1.12.0 to 4.4.2
ldap.compareResponse	compareResponse	Label	1.0.0 to 1.10.14
ldap.compareResponse_element	compareResponse	Label	1.12.0 to 4.4.2
ldap.Control	Control	Label	1.2.0 to 1.10.14
ldap.Control_element	Control	Label	1.12.0 to 4.4.2
ldap.controls	controls	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.Controls_item	Controls	Label	1.0.0 to 1.0.16
ldap.controlType	controlType	Character string	1.0.0 to 4.4.2
ldap.controlValue	controlValue	Byte sequence	1.0.0 to 4.4.2
ldap.cookie	cookie	Byte sequence	1.0.0 to 4.4.2
ldap.credentials	credentials	Byte sequence	1.0.0 to 4.4.2
ldap.criticality	criticality	Boolean	1.0.0 to 4.4.2
ldap.deleteoldrdn	deleteoldrdn	Boolean	1.0.0 to 4.4.2
ldap.delRequest	delRequest	Character string	1.0.0 to 4.4.2
ldap.delResponse	delResponse	Label	1.0.0 to 1.10.14
ldap.delResponse_element	delResponse	Label	1.12.0 to 4.4.2
ldap.derefAliases	derefAliases	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.DirSyncControlValue	DirSyncControlValue	Label	1.6.0 to 1.10.14
ldap.DirSyncControlValue_element	DirSyncControlValue	Label	1.12.0 to 4.4.2
ldap.dnAttributes	dnAttributes	Boolean	1.0.0 to 4.4.2
ldap.entry	entry	Character string	1.0.0 to 4.4.2
ldap.entryUUID	entryUUID	Byte sequence	1.4.0 to 4.4.2
ldap.equalityMatch	equalityMatch	Label	1.0.0 to 1.10.14
ldap.equalityMatch_element	equalityMatch	Label	1.12.0 to 4.4.2
ldap.error	error	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.errorMessage	errorMessage	Character string	1.0.0 to 4.4.2
ldap.exceeded_filter_length	Filter length exceeds number. Giving up	Label	1.12.0 to 4.4.2
ldap.extendedReq	extendedReq	Label	1.0.0 to 1.10.14
ldap.extendedReq_element	extendedReq	Label	1.12.0 to 4.4.2
ldap.extendedResp	extendedResp	Label	1.0.0 to 1.10.14
ldap.extendedResp_element	extendedResp	Label	1.12.0 to 4.4.2
ldap.extensibleMatch	extensibleMatch	Label	1.0.0 to 1.10.14
ldap.extensibleMatch_element	extensibleMatch	Label	1.12.0 to 4.4.2
ldap.filter	filter	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.final	final	Character string	1.0.0 to 4.4.2
ldap.flags	flags	Unsigned integer (32 bits)	1.6.0 to 4.4.2
ldap.genPasswd	genPasswd	Byte sequence	1.0.0 to 1.10.14
ldap.graceAuthNsRemaining	graceAuthNsRemaining	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.greaterOrEqual	greaterOrEqual	Label	1.0.0 to 1.10.14
ldap.greaterOrEqual_element	greaterOrEqual	Label	1.12.0 to 4.4.2
ldap.gssapi_encrypted_payload	GSS-API Encrypted payload	Byte sequence	2.0.0 to 4.4.2
ldap.guid	GUID	Globally Unique Identifier	1.0.0 to 4.4.2
ldap.incremental_value_flag	Flag Incremental_Value	Boolean	2.0.0 to 4.4.2
ldap.initial	initial	Character string	1.0.0 to 4.4.2
ldap.intermediateResponse	intermediateResponse	Label	1.4.0 to 1.10.14
ldap.intermediateResponse_element	intermediateResponse	Label	1.12.0 to 4.4.2
ldap.LDAPMessage	LDAPMessage	Label	1.0.0 to 1.10.14
ldap.LDAPMessage_element	LDAPMessage	Label	1.12.0 to 4.4.2
ldap.LDAPURL	LDAPURL	Character string	1.2.0 to 4.4.2
ldap.lessOrEqual	lessOrEqual	Label	1.0.0 to 1.10.14
ldap.lessOrEqual_element	lessOrEqual	Label	1.12.0 to 4.4.2
ldap.matchedDN	matchedDN	Character string	1.0.0 to 4.4.2
ldap.matchingRule	matchingRule	Character string	1.0.0 to 4.4.2
ldap.matchValue	matchValue	Character string	1.0.0 to 4.4.2
ldap.maxBytes	maxBytes	Signed integer (32 bits)	1.6.0 to 4.4.2
ldap.maxReturnLength	maxReturnLength	Signed integer (32 bits)	1.0.0 to 1.4.15
ldap.mechanism	mechanism	Character string	1.0.0 to 4.4.2
ldap.messageID	messageID	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.modDNRequest	modDNRequest	Label	1.0.0 to 1.10.14
ldap.modDNRequest_element	modDNRequest	Label	1.12.0 to 4.4.2
ldap.modDNResponse	modDNResponse	Label	1.0.0 to 1.10.14
ldap.modDNResponse_element	modDNResponse	Label	1.12.0 to 4.4.2
ldap.mode	mode	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.modification	modification	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.modification_element	modification	Label	1.12.0 to 4.4.2
ldap.modification_item	modification item	Label	1.0.0 to 1.10.14
ldap.modification_item_element	modification item	Label	1.12.0 to 4.4.2
ldap.modifyRequest	modifyRequest	Label	1.0.0 to 1.10.14
ldap.modifyRequest_element	modifyRequest	Label	1.12.0 to 4.4.2
ldap.modifyResponse	modifyResponse	Label	1.0.0 to 1.10.14
ldap.modifyResponse_element	modifyResponse	Label	1.12.0 to 4.4.2
ldap.name	name	Character string	1.0.0 to 4.4.2
ldap.newcookie	newcookie	Byte sequence	1.4.0 to 4.4.2
ldap.newPasswd	newPasswd	Byte sequence	1.0.0 to 4.4.2
ldap.newrdn	newrdn	Character string	1.0.0 to 4.4.2
ldap.newSuperior	newSuperior	Character string	1.0.0 to 4.4.2
ldap.not	not	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.ntlmsspAuth	ntlmsspAuth	Byte sequence	1.0.0 to 4.4.2
ldap.ntlmsspNegotiate	ntlmsspNegotiate	Byte sequence	1.0.0 to 4.4.2
ldap.object	object	Character string	1.0.0 to 4.4.2
ldap.object_security_flag	Flag Object_Security	Boolean	2.0.0 to 4.4.2
ldap.objectName	objectName	Character string	1.0.0 to 4.4.2
ldap.oid	OID	Character string	2.0.0 to 4.4.2
ldap.oldPasswd	oldPasswd	Byte sequence	1.0.0 to 4.4.2
ldap.operation	operation	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.or	or	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.or_item	or item	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.orderingRule	orderingRule	Character string	1.0.0 to 4.4.2
ldap.parentsFirst	parentsFirst	Signed integer (32 bits)	1.0.0 to 1.4.15
ldap.PartialAttributeList_item	PartialAttributeList item	Label	1.0.0 to 1.10.14
ldap.PartialAttributeList_item_element	PartialAttributeList item	Label	1.12.0 to 4.4.2
ldap.PasswdModifyRequestValue	PasswdModifyRequestValue	Label	1.0.0 to 1.10.14
ldap.PasswdModifyRequestValue_element	PasswdModifyRequestValue	Label	1.12.0 to 4.4.2
ldap.PasswordPolicyResponseValue	PasswordPolicyResponseValue	Label	1.4.0 to 1.10.14
ldap.PasswordPolicyResponseValue_element	PasswordPolicyResponseValue	Label	1.12.0 to 4.4.2
ldap.present	present	Character string	1.0.0 to 4.4.2
ldap.protocolOp	protocolOp	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.public_data_only_flag	Flag Public_Data_Only	Boolean	2.0.0 to 4.4.2
ldap.referral	referral	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.Referral_item	Referral	Character string	1.0.0 to 1.0.16
ldap.refreshDelete	refreshDelete	Label	1.4.0 to 1.10.14
ldap.refreshDelete_element	refreshDelete	Label	1.12.0 to 4.4.2
ldap.refreshDeletes	refreshDeletes	Boolean	1.4.0 to 4.4.2
ldap.refreshDone	refreshDone	Boolean	1.4.0 to 4.4.2
ldap.refreshPresent	refreshPresent	Label	1.4.0 to 1.10.14
ldap.refreshPresent_element	refreshPresent	Label	1.12.0 to 4.4.2
ldap.reloadHint	reloadHint	Boolean	1.4.0 to 4.4.2
ldap.ReplControlValue	ReplControlValue	Label	1.0.0 to 1.4.15
ldap.requestName	requestName	Character string	1.0.0 to 4.4.2
ldap.requestValue	requestValue	Byte sequence	1.0.0 to 4.4.2
ldap.response	response	Byte sequence	1.0.0 to 4.4.2
ldap.response_in	Response In	Frame number	1.0.0 to 4.4.2
ldap.response_to	Response To	Frame number	1.0.0 to 4.4.2
ldap.responseName	responseName	Character string	1.0.0 to 4.4.2
ldap.responseValue	responseValue	Byte sequence	1.4.0 to 4.4.2
ldap.resultCode	resultCode	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.reverseOrder	reverseOrder	Boolean	1.0.0 to 4.4.2
ldap.sasl	sasl	Label	1.0.0 to 1.10.14
ldap.sasl_buffer_length	SASL Buffer Length	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.sasl_element	sasl	Label	1.12.0 to 4.4.2
ldap.scope	scope	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.SearchControlValue	SearchControlValue	Label	1.0.0 to 1.10.14
ldap.SearchControlValue_element	SearchControlValue	Label	1.12.0 to 4.4.2
ldap.searchRequest	searchRequest	Label	1.0.0 to 1.10.14
ldap.searchRequest_element	searchRequest	Label	1.12.0 to 4.4.2
ldap.searchResDone	searchResDone	Label	1.0.0 to 1.10.14
ldap.searchResDone_element	searchResDone	Label	1.12.0 to 4.4.2
ldap.searchResEntry	searchResEntry	Label	1.0.0 to 1.10.14
ldap.searchResEntry_element	searchResEntry	Label	1.12.0 to 4.4.2
ldap.searchResRef	searchResRef	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.serverSaslCreds	serverSaslCreds	Byte sequence	1.0.0 to 4.4.2
ldap.sid	Sid	Character string	1.0.0 to 4.4.2
ldap.simple	simple	Character string	1.0.0 to 4.4.2
ldap.size	size	Signed integer (32 bits)	1.0.0 to 4.4.2
ldap.sizeLimit	sizeLimit	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.SortKeyList	SortKeyList	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.SortKeyList_item	SortKeyList item	Label	1.0.0 to 1.10.14
ldap.SortKeyList_item_element	SortKeyList item	Label	1.12.0 to 4.4.2
ldap.sortResult	sortResult	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.SortResult_element	SortResult	Label	1.12.0 to 4.4.2
ldap.state	state	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.substrings	substrings	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.substrings_element	substrings	Label	1.12.0 to 4.4.2
ldap.substrings_item	substrings item	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.SyncDoneValue	SyncDoneValue	Label	1.4.0 to 1.10.14
ldap.SyncDoneValue_element	SyncDoneValue	Label	1.12.0 to 4.4.2
ldap.syncIdSet	syncIdSet	Label	1.4.0 to 1.10.14
ldap.syncIdSet_element	syncIdSet	Label	1.12.0 to 4.4.2
ldap.SyncInfoValue	SyncInfoValue	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.SyncRequestValue	SyncRequestValue	Label	1.4.0 to 1.10.14
ldap.SyncRequestValue_element	SyncRequestValue	Label	1.12.0 to 4.4.2
ldap.SyncStateValue	SyncStateValue	Label	1.4.0 to 1.10.14
ldap.SyncStateValue_element	SyncStateValue	Label	1.12.0 to 4.4.2
ldap.SyncUUID	SyncUUID	Byte sequence	1.4.0 to 4.4.2
ldap.syncUUIDs	syncUUIDs	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.time	Time	Time offset	1.0.0 to 4.4.2
ldap.timeBeforeExpiration	timeBeforeExpiration	Unsigned integer (32 bits)	1.4.0 to 4.4.2
ldap.timeLimit	timeLimit	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.too_many_filter_elements	Found more than %%u filter elements. Giving up.	Label	1.12.0 to 4.4.2
ldap.type	type	Character string	1.0.0 to 4.4.2
ldap.typesOnly	typesOnly	Boolean	1.0.0 to 4.4.2
ldap.unbindRequest	unbindRequest	Label	1.0.0 to 1.10.14
ldap.unbindRequest_element	unbindRequest	Label	1.12.0 to 4.4.2
ldap.userIdentity	userIdentity	Byte sequence	1.0.0 to 4.4.2
ldap.vals	vals	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.vals_item	vals	Byte sequence	1.0.0 to 1.0.16
ldap.value	value	Signed integer (32 bits)	1.6.0 to 1.10.14
ldap.version	version	Unsigned integer (32 bits)	1.0.0 to 4.4.2
ldap.warning	warning	Unsigned integer (32 bits)	1.4.0 to 4.4.2
mscldap.clientsitename	Client Site	Character string	1.0.0 to 4.4.2
mscldap.domain	Domain	Character string	1.0.0 to 4.4.2
mscldap.domain.guid	Domain GUID	Globally Unique Identifier	1.0.0 to 4.4.2
mscldap.forest	Forest	Character string	1.0.0 to 4.4.2
mscldap.hostname	Hostname	Character string	1.0.0 to 4.4.2
mscldap.nb_domain	NetBIOS Domain	Character string	1.0.0 to 4.4.2
mscldap.nb_hostname	NetBIOS Hostname	Character string	1.0.0 to 4.4.2
mscldap.netlogon.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.4.2
mscldap.netlogon.flags.closest	Closest	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.defaultnc	DNC	Boolean	1.2.0 to 4.4.2
mscldap.netlogon.flags.dnsname	DNS	Boolean	1.2.0 to 4.4.2
mscldap.netlogon.flags.ds	DS	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.forestnc	FDC	Boolean	1.2.0 to 4.4.2
mscldap.netlogon.flags.gc	GC	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.good_timeserv	Good Time Serv	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.kdc	KDC	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.ldap	LDAP	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.ndnc	NDNC	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.pdc	PDC	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.rodc	RODC	Boolean	1.2.0 to 4.4.2
mscldap.netlogon.flags.timeserv	Time Serv	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.writable	Writable	Boolean	1.0.0 to 4.4.2
mscldap.netlogon.flags.writabledc	WDC	Boolean	2.6.0 to 4.4.2
mscldap.netlogon.flags.writabledc.	WDC	Boolean	1.2.0 to 2.4.16
mscldap.netlogon.ipaddress	IP Address	IPv4 address	1.2.0 to 4.4.2
mscldap.netlogon.ipaddress.family	Family	Unsigned integer (16 bits)	1.2.0 to 4.4.2
mscldap.netlogon.ipaddress.ipv4	IPv4	IPv4 address	1.2.0 to 4.4.2
mscldap.netlogon.ipaddress.port	Port	Unsigned integer (16 bits)	1.2.0 to 4.4.2
mscldap.netlogon.lm_token	LM Token	Unsigned integer (16 bits)	1.0.0 to 4.4.2
mscldap.netlogon.nt_token	NT Token	Unsigned integer (16 bits)	1.0.0 to 4.4.2
mscldap.netlogon.opcode	Operation code	Unsigned integer (16 bits)	1.6.0 to 4.4.2
mscldap.netlogon.type	Type	Unsigned integer (16 bits)	1.0.0 to 1.4.15
mscldap.netlogon.version	Version	Unsigned integer (32 bits)	1.0.0 to 1.4.15
mscldap.ntver.flags	Version Flags	Unsigned integer (32 bits)	1.6.0 to 4.4.2
mscldap.ntver.searchflags	Search Flags	Unsigned integer (32 bits)	1.2.0 to 1.4.15
mscldap.ntver.searchflags.gc	GC	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.ip	IP	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.local	Local	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.nt4	NT4	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.pdc	PDC	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.v1	V1	Boolean	1.2.0 to 4.4.2
mscldap.ntver.searchflags.v5	V5	Boolean	1.2.0 to 4.4.2
mscldap.ntver.searchflags.v5cs	V5CS	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.v5ep	V5EP	Boolean	1.6.0 to 4.4.2
mscldap.ntver.searchflags.v5ex	V5EX	Boolean	1.2.0 to 4.4.2
mscldap.ntver.searchflags.v5ip	V5IP	Boolean	1.2.0 to 1.4.15
mscldap.ntver.searchflags.vcs	VCS	Boolean	1.6.0 to 4.4.2
mscldap.ntver.searchflags.vgc	VGC	Boolean	1.6.0 to 4.4.2
mscldap.ntver.searchflags.vip	VIP	Boolean	1.6.0 to 4.4.2
mscldap.ntver.searchflags.vl	VL	Boolean	1.6.0 to 4.4.2
mscldap.ntver.searchflags.vnt4	VNT4	Boolean	1.6.0 to 4.4.2
mscldap.ntver.searchflags.vpdc	VPDC	Boolean	1.6.0 to 4.4.2
mscldap.sitename	Server Site	Character string	1.0.0 to 4.4.2
mscldap.username	Username	Character string	1.0.0 to 4.4.2