Display Filter Reference: Microsoft Windows Logon Protocol (Old)
Protocol field name: smb_netlogon
Versions: 1.0.0 to 4.4.2
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| smb | Client Site Name | Character string | 1.0.0 to 4.4.2 |
| smb | Command | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
| smb | Computer Name | Character string | 1.0.0 to 4.4.2 |
| smb | Data | Byte sequence | 2.0.0 to 4.4.2 |
| smb | Date/Time | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | DB Count | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Database Index | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Domain GUID | Byte sequence | 1.0.0 to 4.4.2 |
| smb | Domain DNS Name | Character string | 1.0.0 to 4.4.2 |
| smb | Domain Name | Character string | 1.0.0 to 4.4.2 |
| smb | Domain SID Size | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Account control | Unsigned integer (32 bits) | 2.0.0 to 4.4.2 |
| smb | Autolock | Boolean | 1.0.0 to 4.4.2 |
| smb | Enabled | Boolean | 1.0.0 to 4.4.2 |
| smb | Expire | Boolean | 1.0.0 to 4.4.2 |
| smb | Homedir | Boolean | 1.0.0 to 4.4.2 |
| smb | Interdomain Trust | Boolean | 1.0.0 to 4.4.2 |
| smb | MNS User | Boolean | 1.0.0 to 4.4.2 |
| smb | Normal User | Boolean | 1.0.0 to 4.4.2 |
| smb | Password | Boolean | 1.0.0 to 4.4.2 |
| smb | Server Trust | Boolean | 1.0.0 to 4.4.2 |
| smb | Temp Duplicate User | Boolean | 1.0.0 to 4.4.2 |
| smb | Workstation Trust | Boolean | 1.0.0 to 4.4.2 |
| smb | Forest DNS Name | Character string | 1.0.0 to 4.4.2 |
| smb | Large Serial Number | Unsigned integer (64 bits) | 1.0.0 to 4.4.2 |
| smb | LM Token | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| smb | LMNT Token | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| smb | Low Serial Number | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Mailslot Name | Character string | 1.0.0 to 4.4.2 |
| smb | Workstation Major Version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
| smb | Workstation Minor Version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
| smb | NT Date/Time | Date and time | 1.0.0 to 4.4.2 |
| smb | NT Version | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Workstation OS Version | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
| smb | PDC Name | Character string | 1.0.0 to 4.4.2 |
| smb | Pulse | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Random | Unsigned integer (32 bits) | 1.0.0 to 4.4.2 |
| smb | Request Count | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| smb | Script Name | Character string | 1.0.0 to 4.4.2 |
| smb | Server DNS Name | Character string | 1.0.0 to 4.4.2 |
| smb | Server IP | IPv4 address | 1.0.0 to 4.4.2 |
| smb | Server Name | Character string | 1.0.0 to 4.4.2 |
| smb | Server Site Name | Character string | 1.0.0 to 4.4.2 |
| smb | Signature | Unsigned integer (64 bits) | 2.0.0 to 4.4.2 |
| smb | Unicode Computer Name | Character string | 1.0.0 to 4.4.2 |
| smb | Unicode PDC Name | Character string | 1.0.0 to 4.4.2 |
| smb | Unknown | Unsigned integer (8 bits) | 1.0.0 to 4.4.2 |
| smb | Update Type | Unsigned integer (16 bits) | 1.0.0 to 4.4.2 |
| smb | User Name | Character string | 1.0.0 to 4.4.2 |