Wireshark · Display Filter Reference: SMB Pipe Protocol

Field name	Description	Type	Versions
smb_pipe.bad_type	Bad type field	Label	1.12.0 to 4.4.2
smb_pipe.bogus_netwkstauserlogon_parameters	Bogus NetWkstaUserLogon parameters	Label	1.12.0 to 4.4.2
smb_pipe.byte_param	Byte Param	Unsigned integer (8 bits)	1.12.0 to 4.4.2
smb_pipe.bytes_param	Bytes Param	Byte sequence	1.12.0 to 4.4.2
smb_pipe.doubleword_param	Doubleword Param	Unsigned integer (32 bits)	1.12.0 to 4.4.2
smb_pipe.fragment	Fragment	Frame number	1.12.0 to 4.4.2
smb_pipe.fragment.count	Fragment count	Unsigned integer (32 bits)	1.12.0 to 4.4.2
smb_pipe.fragment.error	Defragmentation error	Frame number	1.12.0 to 4.4.2
smb_pipe.fragment.multipletails	Multiple tail fragments found	Boolean	1.12.0 to 4.4.2
smb_pipe.fragment.overlap	Fragment overlap	Boolean	1.12.0 to 4.4.2
smb_pipe.fragment.overlap.conflict	Conflicting data in fragment overlap	Boolean	1.12.0 to 4.4.2
smb_pipe.fragment.toolongfragment	Fragment too long	Boolean	1.12.0 to 4.4.2
smb_pipe.fragments	Fragments	Label	1.12.0 to 4.4.2
smb_pipe.function	Function	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.getinfo.current_instances	Current Instances	Unsigned integer (8 bits)	1.12.0 to 4.4.2
smb_pipe.getinfo.info_level	Information Level	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.getinfo.input_buffer_size	Input Buffer Size	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.getinfo.maximum_instances	Maximum Instances	Unsigned integer (8 bits)	1.12.0 to 4.4.2
smb_pipe.getinfo.output_buffer_size	Output Buffer Size	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.getinfo.pipe_name	Pipe Name	Character string	1.12.0 to 4.4.2
smb_pipe.getinfo.pipe_name_length	Pipe Name Length	Unsigned integer (8 bits)	1.12.0 to 4.4.2
smb_pipe.peek.available_bytes	Available Bytes	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.peek.remaining_bytes	Bytes Remaining	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.peek.status	Pipe Status	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.priority	Priority	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.reassembled.length	Reassembled SMB Pipe length	Unsigned integer (32 bits)	1.12.0 to 4.4.2
smb_pipe.reassembled_in	This PDU is reassembled in	Frame number	1.12.0 to 4.4.2
smb_pipe.string_param	String Param	Character string	1.12.0 to 4.4.2
smb_pipe.word_param	Word Param	Unsigned integer (16 bits)	1.12.0 to 4.4.2
smb_pipe.write_raw.bytes_written	Bytes Written	Unsigned integer (16 bits)	1.12.0 to 4.4.2