Display Filter Reference: NTLM Secure Service Provider
Protocol field name: ntlmssp
Versions: 1.0.0 to 4.4.2
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| ntlmssp | Domain name | Character string | 1.0.0 to 4.4.2 |
| ntlmssp | Host name | Character string | 1.0.0 to 4.4.2 |
| ntlmssp | Lan Manager Response | Byte sequence | 1.0.0 to 4.4.2 |
| ntlmssp | NTLM Response | Byte sequence | 1.0.0 to 4.4.2 |
| ntlmssp | Session Key | Byte sequence | 1.0.0 to 4.4.2 |
| ntlmssp | User name | Character string | 1.0.0 to 4.4.2 |
| ntlmssp | MIC | Byte sequence | 1.4.1 to 4.4.2 |
| ntlmssp | Authenticated NTHASH | Label | 3.4.0 to 4.4.2 |
| ntlmssp | Length | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Session blob length too long | Label | 1.12.0 to 4.4.2 |
| ntlmssp | Maxlen | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Offset | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Address List | Label | 1.0.0 to 1.4.15 |
| ntlmssp | Domain DNS Name | Character string | 1.0.0 to 1.4.15 |
| ntlmssp | Domain NetBIOS Name | Character string | 1.0.0 to 1.4.15 |
| ntlmssp | Target item Content | Character string | 1.0.0 to 1.4.15 |
| ntlmssp | Target item Length | Unsigned integer (16 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Length | Unsigned integer (16 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Maxlen | Unsigned integer (16 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Offset | Unsigned integer (32 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Server DNS Name | Character string | 1.0.0 to 1.4.15 |
| ntlmssp | Server NetBIOS Name | Character string | 1.0.0 to 1.4.15 |
| ntlmssp | List Terminator | Label | 1.0.0 to 1.4.15 |
| ntlmssp | Domain | Character string | 1.0.0 to 1.4.0 |
| ntlmssp | Target Info | Label | 1.6.0 to 4.4.2 |
| ntlmssp | Channel Bindings | Byte sequence | 1.6.0 to 4.4.2 |
| ntlmssp | DNS Computer Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | DNS Domain Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | DNS Tree Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | List End | Label | 1.6.0 to 4.4.2 |
| ntlmssp | Flags | Unsigned integer (32 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | Target Info Item Length | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | Target Info Item Type | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | Length | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | Maxlen | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | NetBIOS Computer Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | NetBIOS Domain Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | Offset | Unsigned integer (32 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | Restrictions | Byte sequence | 1.6.0 to 4.4.2 |
| ntlmssp | Target Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | Timestamp | Date and time | 1.6.0 to 4.4.2 |
| ntlmssp | Target Name | Character string | 1.4.1 to 4.4.2 |
| ntlmssp | NTLM Decrypted Payload | Byte sequence | 1.0.0 to 1.8.15 |
| ntlmssp | NTLMSSP identifier | Character string | 1.0.0 to 4.4.2 |
| ntlmssp | NTLM Message Type | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Unrecognized NTLMSSP Message | Label | 2.0.0 to 4.4.2 |
| ntlmssp | Calling workstation name | Character string | 1.0.0 to 4.4.2 |
| ntlmssp | Calling workstation name buffer | Unsigned integer (32 bits) | 1.0.0 to 1.8.15 |
| ntlmssp | Calling workstation name max length | Unsigned integer (16 bits) | 1.0.0 to 1.8.15 |
| ntlmssp | Calling workstation name length | Unsigned integer (16 bits) | 1.0.0 to 1.8.15 |
| ntlmssp | Calling workstation domain | Character string | 1.0.0 to 4.4.2 |
| ntlmssp | Calling workstation domain buffer | Unsigned integer (32 bits) | 1.0.0 to 1.8.15 |
| ntlmssp | Calling workstation domain max length | Unsigned integer (16 bits) | 1.0.0 to 1.8.15 |
| ntlmssp | Calling workstation domain length | Unsigned integer (16 bits) | 1.0.0 to 1.8.15 |
| ntlmssp | Request 0x00000008 | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate 0x00000100 | Boolean | 1.2.0 to 4.0.17 |
| ntlmssp | Negotiate 0x00000400 | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate 0x00000800 | Boolean | 1.2.0 to 1.10.14 |
| ntlmssp | Negotiate 0x00004000 | Boolean | 1.2.0 to 4.0.17 |
| ntlmssp | Negotiate 128 | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate 56 | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Always Sign | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Anonymous | Boolean | 1.0.0 to 1.0.16, 1.12.0 to 4.4.2 |
| ntlmssp | Negotiate Challenge Accept Response | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate Challenge Init Response | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate Challenge Non NT Session Key | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate Datagram | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Negotiate Datagram Style | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate Domain Supplied | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate Extended Session Security | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate Flags | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Identify | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Negotiate Key Exchange | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Lan Manager Key | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Netware | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate 0x00100000 | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate 0x00200000 | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate 0x00400000 | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate 0x01000000 | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate 0x02000000 | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate 0x04000000 | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate 0x08000000 | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate 0x10000000 | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate NTLM key | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Extended Security | Boolean | 1.0.0 to 4.0.17 |
| ntlmssp | Negotiate NT Only | Boolean | 1.2.0 to 4.0.17 |
| ntlmssp | Negotiate OEM | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate OEM Domain Supplied | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Negotiate OEM Workstation Supplied | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Negotiate Seal | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Sign | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Target Info | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate This is Local Call | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | Negotiate UNICODE | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Negotiate Version | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Negotiate Workstation Supplied | Boolean | 1.0.0 to 1.0.16 |
| ntlmssp | NTLM_REMOTE_SUPPLEMENTAL_CREDENTIAL | Label | 3.6.0 to 4.4.2 |
| ntlmssp | CredentialKey | Byte sequence | 3.6.0 to 4.4.2 |
| ntlmssp | CredentialKeyType | Unsigned integer (32 bits) | 3.6.0 to 4.4.2 |
| ntlmssp | credkey_present | Boolean | 3.6.0 to 4.4.2 |
| ntlmssp | EncryptedCreds | Byte sequence | 3.6.0 to 4.4.2 |
| ntlmssp | EncryptedCredsSize | Unsigned integer (32 bits) | 3.6.0 to 4.4.2 |
| ntlmssp | Flags | Unsigned integer (32 bits) | 3.6.0 to 4.4.2 |
| ntlmssp | lm_present | Boolean | 3.6.0 to 4.4.2 |
| ntlmssp | nt_present | Boolean | 3.6.0 to 4.4.2 |
| ntlmssp | removed | Boolean | 3.6.0 to 4.4.2 |
| ntlmssp | sha_present | Boolean | 3.6.0 to 4.4.2 |
| ntlmssp | Version | Unsigned integer (32 bits) | 3.6.0 to 4.4.2 |
| ntlmssp | NTLM Challenge | Byte sequence | 1.0.0 to 1.2.18 |
| ntlmssp | LMv2 Client Challenge | Byte sequence | 1.4.0 to 4.4.2 |
| ntlmssp | NTLM Server Challenge | Byte sequence | 1.4.0 to 4.4.2 |
| ntlmssp | NTLMv2 Response | Byte sequence | 1.6.0 to 4.4.2 |
| ntlmssp | NTLMv2 Client Challenge | Byte sequence | 1.6.0 to 4.4.2 |
| ntlmssp | Channel Bindings | Byte sequence | 1.6.0 to 4.4.2 |
| ntlmssp | DNS Computer Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | DNS Domain Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | DNS Tree Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | List End | Label | 1.6.0 to 4.4.2 |
| ntlmssp | Flags | Unsigned integer (32 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | Header | Unsigned integer (32 bits) | 1.6.0 to 1.10.14 |
| ntlmssp | Hi Response Version | Unsigned integer (8 bits) | 1.12.0 to 4.4.2 |
| ntlmssp | HMAC | Byte sequence | 1.6.0 to 1.10.14 |
| ntlmssp | NTLMV2 Response Item Length | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | NTLMV2 Response Item Type | Unsigned integer (16 bits) | 1.6.0 to 4.4.2 |
| ntlmssp | NetBIOS Computer Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | NetBIOS Domain Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | NTProofStr | Byte sequence | 1.12.0 to 4.4.2 |
| ntlmssp | padding | Byte sequence | 1.12.0 to 4.4.2 |
| ntlmssp | Reserved | Unsigned integer (32 bits) | 1.6.0 to 1.10.14 |
| ntlmssp | Restrictions | Byte sequence | 1.6.0 to 4.4.2 |
| ntlmssp | Response Version | Unsigned integer (8 bits) | 1.12.0 to 4.4.2 |
| ntlmssp | Target Name | Character string | 1.6.0 to 4.4.2 |
| ntlmssp | Time | Date and time | 1.6.0 to 4.4.2 |
| ntlmssp | Timestamp | Date and time | 1.6.0 to 4.4.2 |
| ntlmssp | Unknown | Unsigned integer (32 bits) | 1.6.0 to 1.10.14 |
| ntlmssp | Z | Byte sequence | 1.12.0 to 4.4.2 |
| ntlmssp | NTLMv2 Response | Byte sequence | 1.0.0 to 1.4.15 |
| ntlmssp | Client challenge | Byte sequence | 1.0.0 to 1.4.15 |
| ntlmssp | Client Time | Date and time | 1.0.0 to 1.4.15 |
| ntlmssp | Header | Unsigned integer (32 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | HMAC | Byte sequence | 1.0.0 to 1.4.15 |
| ntlmssp | Attribute | Character string | 1.0.0 to 1.4.15 |
| ntlmssp | Value len | Unsigned integer (32 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Encoding restrictions | Byte sequence | 1.4.0 to 1.4.15 |
| ntlmssp | Attribute type | Unsigned integer (32 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Reserved | Unsigned integer (32 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Time | Date and time | 1.0.0 to 1.4.15 |
| ntlmssp | Unknown | Unsigned integer (32 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Request Non-NT Session | Boolean | 1.2.0 to 4.0.17 |
| ntlmssp | Request Non-NT Session Key | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Request Target | Boolean | 1.0.0 to 4.4.2 |
| ntlmssp | Reserved | Byte sequence | 1.0.0 to 4.4.2 |
| ntlmssp | SessionBaseKey | Label | 3.4.0 to 4.4.2 |
| ntlmssp | SessionKey | Label | 3.4.0 to 4.4.2 |
| ntlmssp | Length | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Maxlen | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Offset | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Invalid NTLMSSP Target Info AvPairs | Label | 3.6.2 to 4.4.2 |
| ntlmssp | Unknown NTLMSSP Target Info Attribute | Label | 1.12.0 to 4.4.2 |
| ntlmssp | Target item type | Unsigned integer (16 bits) | 1.0.0 to 1.4.15 |
| ntlmssp | Target Type Domain | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Target Type Server | Boolean | 1.2.0 to 4.4.2 |
| ntlmssp | Target Type Share | Boolean | 1.2.0 to 4.0.17 |
| ntlmssp | Request 0x00000008 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x00000100 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x00000400 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x00004000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x00040000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x00200000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x01000000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x04000000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x08000000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | Negotiate 0x10000000 | Boolean | 4.2.0 to 4.4.2 |
| ntlmssp | NTLM v2 key is too long | Label | 1.12.0 to 4.4.2 |
| ntlmssp | NTLMSSP Verifier | Label | 1.0.0 to 4.4.2 |
| ntlmssp | Verifier Body | Byte sequence | 1.0.0 to 4.4.2 |
| ntlmssp | Verifier CRC32 | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | HMAC MD5 | Byte sequence | 1.4.0 to 4.4.2 |
| ntlmssp | Random Pad | Unsigned integer (32 bits) | 1.4.0 to 4.4.2 |
| ntlmssp | Sequence | Byte sequence | 1.0.0 to 4.4.2 |
| ntlmssp | Unknown 1 | Unsigned integer (32 bits) | 1.0.0 to 1.2.18 |
| ntlmssp | Version Number | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| ntlmssp | Version | Label | 1.6.0 to 4.4.2 |
| ntlmssp | Build Number | Unsigned integer (16 bits) | 1.4.1 to 4.4.2 |
| ntlmssp | Major Version | Unsigned integer (8 bits) | 1.4.1 to 4.4.2 |
| ntlmssp | Minor Version | Unsigned integer (8 bits) | 1.4.1 to 4.4.2 |
| ntlmssp | NTLM Current Revision | Unsigned integer (8 bits) | 1.4.1 to 4.4.2 |