Wireshark · Display Filter Reference: SPNEGO Extended Negotiation Security Mechanism

Field name	Description	Type	Versions
negoex.auth_scheme	AuthScheme	Globally Unique Identifier	1.10.0 to 4.4.2
negoex.auth_scheme_array_count	AuthSchemeCount	Unsigned integer (16 bits)	1.10.0 to 4.4.2
negoex.auth_scheme_array_offset	AuthSchemeArrayOffset	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.auth_scheme_array_pad	AuthSchemePad	Byte sequence	1.10.0 to 4.4.2
negoex.checksum	Checksum	Byte sequence	1.10.0 to 4.4.2
negoex.checksum_pad	ChecksumPad	Byte sequence	1.10.0 to 4.4.2
negoex.checksum_scheme	ChecksumScheme	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.checksum_type	ChecksumType	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.checksum_vec_count	ChecksumCount	Unsigned integer (16 bits)	1.10.0 to 4.4.2
negoex.checksum_vec_offset	ChecksumOffset	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.data	Data	Byte sequence	2.0.0 to 4.4.2
negoex.errorcode	ErrorCode	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.exchange	Exchange Bytes	Byte sequence	1.10.0 to 4.4.2
negoex.exchange_vec_byte_count	ExchangeByteCount	Unsigned integer (16 bits)	1.10.0 to 4.4.2
negoex.exchange_vec_offset	ExchangeOffset	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.exchange_vec_pad	ExchangePad	Byte sequence	1.10.0 to 4.4.2
negoex.extension	Extension	Byte sequence	1.10.0 to 4.4.2
negoex.extension_array_count	ExtensionCount	Unsigned integer (16 bits)	1.10.0 to 4.4.2
negoex.extension_array_offset	ExtensionArrayOffset	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.extension_pad	ExtensionPad	Byte sequence	1.10.0 to 4.4.2
negoex.header.len	cbHeaderLength	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.message.conv_id	ConversationID	Globally Unique Identifier	1.10.0 to 4.4.2
negoex.message.len	cbMessageLength	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.message.random	Random	Byte sequence	1.10.0 to 4.4.2
negoex.message.seq_num	SequenceNum	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.message.sig	Signature	Character string	1.10.0 to 4.4.2
negoex.message.type	MessageType	Unsigned integer (32 bits)	1.10.0 to 4.4.2
negoex.proto_version	ProtocolVersion	Unsigned integer (64 bits)	1.10.0 to 4.4.2