Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: DCOM

Protocol field name: dcom

Versions: 1.0.0 to 4.6.2

Back to Display Filter Reference

Field name Description Type Versions
dcom.actual_countActualCountUnsigned integer (32 bits)1.0.0 to 1.8.15
dcom.array_size(ArraySize)Unsigned integer (32 bits)1.0.0 to 4.6.2
dcom.byte_lengthByteLengthUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.clsidCLSIDGlobally Unique Identifier1.0.0 to 4.6.2
dcom.custobjrefCUSTOMOBJREFLabel1.10.0 to 4.6.2
dcom.dissection_incompleteDissection incompleteLabel3.4.0 to 4.6.2
dcom.dissetion_incompleteDissection incompleteLabel1.12.0 to 3.2.18
dcom.dualstringarray.mult_ipDUALSTRINGARRAY Multiple IPLabel1.12.0 to 4.6.2
dcom.dualstringarray.network_addrNetworkAddrCharacter string1.0.0 to 4.6.2
dcom.dualstringarray.num_entriesNumEntriesUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.dualstringarray.securitySecurityBindingLabel1.0.0 to 4.6.2
dcom.dualstringarray.security_authn_svcAuthnSvcUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.dualstringarray.security_authz_svcAuthzSvcUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.dualstringarray.security_offsetSecurityOffsetUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.dualstringarray.security_princ_namePrincNameCharacter string1.0.0 to 4.6.2
dcom.dualstringarray.stringStringBindingLabel1.0.0 to 4.6.2
dcom.dualstringarray.tower_idTowerIdUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.extentExtensionLabel1.0.0 to 4.6.2
dcom.extent.array_countExtension CountUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.extent.array_resReservedUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.extent.idExtension IdGlobally Unique Identifier1.0.0 to 4.6.2
dcom.extent.sizeExtension SizeUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.hresultHResultUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.hresult.expertHresultLabel1.12.0 to 4.6.2
dcom.ifpInterfacePointerLabel1.0.0 to 4.6.2
dcom.iidIIDGlobally Unique Identifier1.0.0 to 4.6.2
dcom.ip_cnt_dataCntDataUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.ipidIPIDGlobally Unique Identifier1.0.0 to 4.6.2
dcom.max_countMaxCountUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.no_specNo specification available, dissection not possibleLabel1.12.0 to 4.6.2
dcom.nospecNo Specification AvailableByte sequence1.0.0 to 4.6.2
dcom.objrefOBJREFLabel1.0.0 to 4.6.2
dcom.objref.cbextensionCBExtensionUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.objref.flagsFlagsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.objref.resolver_addressResolverAddressLabel1.0.0 to 4.6.2
dcom.objref.signatureSignatureUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.objref.sizeSizeUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.offsetOffsetUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.oidOIDUnsigned integer (64 bits)1.0.0 to 4.6.2
dcom.oxidOXIDUnsigned integer (64 bits)1.0.0 to 4.6.2
dcom.pointer_val(PointerVal)Unsigned integer (32 bits)1.0.0 to 4.6.2
dcom.saSAFEARRAYLabel1.0.0 to 4.6.2
dcom.sa.bound_elementsBoundElementsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.sa.dims16Dims16Unsigned integer (16 bits)1.0.0 to 4.6.2
dcom.sa.dims32Dims32Unsigned integer (32 bits)1.0.0 to 4.6.2
dcom.sa.element_sizeElementSizeUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.sa.elementsElementsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.sa.featuresFeaturesUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.sa.features_autoAUTOBoolean1.0.0 to 4.6.2
dcom.sa.features_bstrBSTRBoolean1.0.0 to 4.6.2
dcom.sa.features_dispatchDISPATCHBoolean1.0.0 to 4.6.2
dcom.sa.features_embeddedEMBEDDEDBoolean1.0.0 to 4.6.2
dcom.sa.features_fixedsizeFIXEDSIZEBoolean1.0.0 to 4.6.2
dcom.sa.features_have_iidHAVEIIDBoolean1.0.0 to 4.6.2
dcom.sa.features_have_vartypeHAVEVARTYPEBoolean1.0.0 to 4.6.2
dcom.sa.features_recordRECORDBoolean1.0.0 to 4.6.2
dcom.sa.features_staticSTATICBoolean1.0.0 to 4.6.2
dcom.sa.features_unknownUNKNOWNBoolean1.0.0 to 4.6.2
dcom.sa.features_variantVARIANTBoolean1.0.0 to 4.6.2
dcom.sa.locksLocksUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.sa.low_boundLowBoundUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.sa.vartypeVarType32Unsigned integer (32 bits)1.0.0 to 4.6.2
dcom.stdobjrefSTDOBJREFLabel1.0.0 to 4.6.2
dcom.stdobjref.flagsFlagsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.stdobjref.public_refsPublicRefsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.that.flagsFlagsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.this.flagsFlagsUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.this.resReservedUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.this.uuidCausality IDGlobally Unique Identifier1.0.0 to 4.6.2
dcom.this.version_majorVersionMajorUnsigned integer (16 bits)1.0.0 to 1.8.15
dcom.this.version_minorVersionMinorUnsigned integer (16 bits)1.0.0 to 1.8.15
dcom.tobedoneTo Be DoneByte sequence1.0.0 to 4.6.2
dcom.variantVariantLabel1.0.0 to 1.8.15
dcom.variant_rpc_resRPC-ReservedUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.variant_sizeSizeUnsigned integer (32 bits)1.0.0 to 4.6.2
dcom.variant_typeVarTypeUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.variant_type32VarType32Unsigned integer (32 bits)1.0.0 to 4.6.2
dcom.variant_wresReservedUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.version_majorVersionMajorUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.version_minorVersionMinorUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.vt.boolVT_BOOLUnsigned integer (16 bits)1.0.0 to 4.6.2
dcom.vt.bstrVT_BSTRCharacter string1.0.0 to 4.6.2
dcom.vt.byrefBYREFLabel1.0.0 to 4.6.2
dcom.vt.cyVT_CYSigned integer (64 bits)2.0.0 to 4.6.2
dcom.vt.dateVT_DATEFloating point (double-precision)1.0.0 to 4.6.2
dcom.vt.dispatchVT_DISPATCHLabel1.0.0 to 4.6.2
dcom.vt.i1VT_I1Signed integer (8 bits)1.0.0 to 4.6.2
dcom.vt.i2VT_I2Signed integer (16 bits)1.0.0 to 4.6.2
dcom.vt.i4VT_I4Signed integer (32 bits)1.0.0 to 4.6.2
dcom.vt.i8VT_I8Signed integer (64 bits)1.0.0 to 4.6.2
dcom.vt.r4VT_R4Floating point (single-precision)1.0.0 to 4.6.2
dcom.vt.r8VT_R8Floating point (double-precision)1.0.0 to 4.6.2
dcom.vt.ui1VT_UI1Unsigned integer (8 bits)1.0.0 to 4.6.2
dcom.vt.ui2VT_UI2Unsigned integer (16 bits)1.0.0 to 4.6.2
dcom.vt.ui4VT_UI4Unsigned integer (32 bits)1.0.0 to 4.6.2
dcom.vt.ui8VT_UI8Unsigned integer (64 bits)2.0.0 to 4.6.2