Wireshark · Display Filter Reference: Network Monitor Process

Field name	Description	Type	Versions
netmon_process.command_line	Commandline	Character string	2.6.0 to 4.4.2
netmon_process.directory_table_base	Directory table base	Unsigned integer (64 bits)	2.6.0 to 4.4.2
netmon_process.directory_table_base32	Directory table base	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.exit_status	Exit status	Signed integer (32 bits)	2.6.0 to 4.4.2
netmon_process.handle_count	Handle count	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.image_file_name	Image file name	Character string	2.6.0 to 4.4.2
netmon_process.page_directory_base	Page directory base	Unsigned integer (64 bits)	2.6.0 to 4.4.2
netmon_process.page_fault_count	Page fault count	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.pagefile_usage	Pagefile usage	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.parent_id	Parent ID	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.peak_page_file_usage	Peak page file usage	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.peak_virtual_size	Peak virtual size	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.peak_working_set_size	Peak working set size	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.private_page_count	Private page count	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.process_id	Process ID	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.process_user_sid.invalid	Invalid SID	Label	2.6.0 to 4.4.2
netmon_process.quota_non_paged_pool_usage	Quota nonpaged pool usage	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.quota_paged_pool_usage	Quota paged pool usage	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.quota_peak_non_paged_pool_usage	Quota peak non-paged pool usage	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.quota_peak_paged_pool_usage	Quota peak paged pool usage	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.reserved	Reserved	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.session_id	Session ID	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.unique_process_key	Unique process key	Unsigned integer (64 bits)	2.6.0 to 4.4.2
netmon_process.unknown	Unknown	Byte sequence	2.6.0 to 4.4.2
netmon_process.user_sid.authority	User SID Authority	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.user_sid.id	User SID Identifier Authority	Byte sequence	2.6.0 to 4.4.2
netmon_process.user_sid.revision	User SID Revision	Unsigned integer (8 bits)	2.6.0 to 4.4.2
netmon_process.user_sid.subauth_count	User SID Subauth count	Unsigned integer (8 bits)	2.6.0 to 4.4.2
netmon_process.virtual_size	Virtual size	Unsigned integer (32 bits)	2.6.0 to 4.4.2
netmon_process.workingset_size	Working set size	Unsigned integer (32 bits)	2.6.0 to 4.4.2