Wireshark · Display Filter Reference: Transport-Neutral Encapsulation Format

Field name	Description	Type	Versions
tnef.attribute	Attribute	Label	1.0.0 to 4.4.2
tnef.attribute.checksum	Checksum	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date	Date	Label	1.4.0 to 4.4.2
tnef.attribute.date.day	Day	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date.day_of_week	Day Of Week	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date.hour	Hour	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date.minute	Minute	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date.month	Month	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date.second	Second	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.date.year	Year	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.display_name	Display Name	Character string	1.0.0 to 4.4.2
tnef.attribute.email_address	Email Address	Character string	1.0.0 to 4.4.2
tnef.attribute.length	Length	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.attribute.lvl	Type	Unsigned integer (8 bits)	1.0.0 to 4.4.2
tnef.attribute.string	String	Character string	1.0.0 to 4.4.2
tnef.attribute.tag	Tag	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.attribute.tag.id	Tag	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.tag.kind	Kind	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.attribute.tag.name.id	Name	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.attribute.tag.name.length	Length	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.attribute.tag.name.string	Name	Character string	1.0.0 to 4.4.2
tnef.attribute.tag.set	Set	Globally Unique Identifier	1.0.0 to 4.4.2
tnef.attribute.tag.type	Type	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.attribute.value	Value	Label	1.0.0 to 4.4.2
tnef.expect_single_item	Expected single item	Label	1.12.0 to 4.4.2
tnef.key	Key	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.mapi_props	MAPI Properties	Label	1.0.0 to 4.4.2
tnef.mapi_props.count	Count	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.message_class	Message Class	Character string	1.0.0 to 4.4.2
tnef.message_class.original	Original Message Class	Character string	1.0.0 to 4.4.2
tnef.oem_codepage	OEM Codepage	Unsigned integer (64 bits)	1.0.0 to 4.4.2
tnef.padding	Padding	Label	1.0.0 to 4.4.2
tnef.priority	Priority	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.property	Property	Label	1.0.0 to 4.4.2
tnef.property.padding	Padding	Label	1.0.0 to 4.4.2
tnef.property.tag	Tag	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.property.tag.id	Tag	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.property.tag.type	Type	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.PropValue.b	B	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.PropValue.bin	Bin	Label	1.0.0 to 4.4.2
tnef.PropValue.err	Err	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.PropValue.ft	Ft	Label	1.0.0 to 4.4.2
tnef.PropValue.i	I	Unsigned integer (16 bits)	1.0.0 to 4.4.2
tnef.PropValue.l	L	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.PropValue.lpguid	Lpguid	Label	1.2.0 to 4.4.2
tnef.PropValue.lpszA	Lpsza	Character string	1.0.0 to 4.4.2
tnef.PropValue.lpszW	Lpszw	Character string	1.2.0 to 4.4.2
tnef.PropValue.MVbin	Mvbin	Label	1.0.0 to 4.4.2
tnef.PropValue.MVft	Mvft	Label	1.0.0 to 4.4.2
tnef.PropValue.MVguid	Mvguid	Label	1.0.0 to 4.4.2
tnef.PropValue.MVi	Mvi	Label	1.0.0 to 4.4.2
tnef.PropValue.MVl	Mvl	Label	1.0.0 to 4.4.2
tnef.PropValue.MVszA	Mvsza	Label	1.0.0 to 4.4.2
tnef.PropValue.MVszW	Mvszw	Label	1.0.0 to 4.4.2
tnef.PropValue.null	Null	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.PropValue.object	Object	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.signature	Signature	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.signature.incorrect	Incorrect signature	Label	1.12.0 to 4.4.2
tnef.value.length	Length	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.values.count	Count	Unsigned integer (32 bits)	1.0.0 to 4.4.2
tnef.version	Version	Unsigned integer (32 bits)	1.0.0 to 4.4.2