Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: DCOM

Protocol field name: dcom
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
dcom.actual_count Unsigned integer, 4 bytes ActualCount 1.0.0 to 1.6.5
dcom.array_size Unsigned integer, 4 bytes (ArraySize) 1.0.0 to 1.6.5
dcom.byte_length Unsigned integer, 4 bytes ByteLength 1.0.0 to 1.6.5
dcom.clsid Globally Unique Identifier CLSID 1.0.0 to 1.6.5
dcom.dualstringarray.network_addr Character string NetworkAddr 1.0.0 to 1.6.5
dcom.dualstringarray.num_entries Unsigned integer, 2 bytes NumEntries 1.0.0 to 1.6.5
dcom.dualstringarray.security Label SecurityBinding 1.0.0 to 1.6.5
dcom.dualstringarray.security_authn_svc Unsigned integer, 2 bytes AuthnSvc 1.0.0 to 1.6.5
dcom.dualstringarray.security_authz_svc Unsigned integer, 2 bytes AuthzSvc 1.0.0 to 1.6.5
dcom.dualstringarray.security_offset Unsigned integer, 2 bytes SecurityOffset 1.0.0 to 1.6.5
dcom.dualstringarray.security_princ_name Character string PrincName 1.0.0 to 1.6.5
dcom.dualstringarray.string Label StringBinding 1.0.0 to 1.6.5
dcom.dualstringarray.tower_id Unsigned integer, 2 bytes TowerId 1.0.0 to 1.6.5
dcom.extent Label Extension 1.0.0 to 1.6.5
dcom.extent.array_count Unsigned integer, 4 bytes Extension Count 1.0.0 to 1.6.5
dcom.extent.array_res Unsigned integer, 4 bytes Reserved 1.0.0 to 1.6.5
dcom.extent.id Globally Unique Identifier Extension Id 1.0.0 to 1.6.5
dcom.extent.size Unsigned integer, 4 bytes Extension Size 1.0.0 to 1.6.5
dcom.hresult Unsigned integer, 4 bytes HResult 1.0.0 to 1.6.5
dcom.ifp Label InterfacePointer 1.0.0 to 1.6.5
dcom.iid Globally Unique Identifier IID 1.0.0 to 1.6.5
dcom.ip_cnt_data Unsigned integer, 4 bytes CntData 1.0.0 to 1.6.5
dcom.ipid Globally Unique Identifier IPID 1.0.0 to 1.6.5
dcom.max_count Unsigned integer, 4 bytes MaxCount 1.0.0 to 1.6.5
dcom.nospec Sequence of bytes No Specification Available 1.0.0 to 1.6.5
dcom.objref Label OBJREF 1.0.0 to 1.6.5
dcom.objref.cbextension Unsigned integer, 4 bytes CBExtension 1.0.0 to 1.6.5
dcom.objref.flags Unsigned integer, 4 bytes Flags 1.0.0 to 1.6.5
dcom.objref.resolver_address Label ResolverAddress 1.0.0 to 1.6.5
dcom.objref.signature Unsigned integer, 4 bytes Signature 1.0.0 to 1.6.5
dcom.objref.size Unsigned integer, 4 bytes Size 1.0.0 to 1.6.5
dcom.offset Unsigned integer, 4 bytes Offset 1.0.0 to 1.6.5
dcom.oid Unsigned integer, 8 bytes OID 1.0.0 to 1.6.5
dcom.oxid Unsigned integer, 8 bytes OXID 1.0.0 to 1.6.5
dcom.pointer_val Unsigned integer, 4 bytes (PointerVal) 1.0.0 to 1.6.5
dcom.sa Label SAFEARRAY 1.0.0 to 1.6.5
dcom.sa.bound_elements Unsigned integer, 4 bytes BoundElements 1.0.0 to 1.6.5
dcom.sa.dims16 Unsigned integer, 2 bytes Dims16 1.0.0 to 1.6.5
dcom.sa.dims32 Unsigned integer, 4 bytes Dims32 1.0.0 to 1.6.5
dcom.sa.element_size Unsigned integer, 4 bytes ElementSize 1.0.0 to 1.6.5
dcom.sa.elements Unsigned integer, 4 bytes Elements 1.0.0 to 1.6.5
dcom.sa.features Unsigned integer, 2 bytes Features 1.0.0 to 1.6.5
dcom.sa.features_auto Boolean AUTO 1.0.0 to 1.6.5
dcom.sa.features_bstr Boolean BSTR 1.0.0 to 1.6.5
dcom.sa.features_dispatch Boolean DISPATCH 1.0.0 to 1.6.5
dcom.sa.features_embedded Boolean EMBEDDED 1.0.0 to 1.6.5
dcom.sa.features_fixedsize Boolean FIXEDSIZE 1.0.0 to 1.6.5
dcom.sa.features_have_iid Boolean HAVEIID 1.0.0 to 1.6.5
dcom.sa.features_have_vartype Boolean HAVEVARTYPE 1.0.0 to 1.6.5
dcom.sa.features_record Boolean RECORD 1.0.0 to 1.6.5
dcom.sa.features_static Boolean STATIC 1.0.0 to 1.6.5
dcom.sa.features_unknown Boolean UNKNOWN 1.0.0 to 1.6.5
dcom.sa.features_variant Boolean VARIANT 1.0.0 to 1.6.5
dcom.sa.locks Unsigned integer, 2 bytes Locks 1.0.0 to 1.6.5
dcom.sa.low_bound Unsigned integer, 4 bytes LowBound 1.0.0 to 1.6.5
dcom.sa.vartype Unsigned integer, 4 bytes VarType32 1.0.0 to 1.6.5
dcom.stdobjref Label STDOBJREF 1.0.0 to 1.6.5
dcom.stdobjref.flags Unsigned integer, 4 bytes Flags 1.0.0 to 1.6.5
dcom.stdobjref.public_refs Unsigned integer, 4 bytes PublicRefs 1.0.0 to 1.6.5
dcom.that.flags Unsigned integer, 4 bytes Flags 1.0.0 to 1.6.5
dcom.this.flags Unsigned integer, 4 bytes Flags 1.0.0 to 1.6.5
dcom.this.res Unsigned integer, 4 bytes Reserved 1.0.0 to 1.6.5
dcom.this.uuid Globally Unique Identifier Causality ID 1.0.0 to 1.6.5
dcom.this.version_major Unsigned integer, 2 bytes VersionMajor 1.0.0 to 1.6.5
dcom.this.version_minor Unsigned integer, 2 bytes VersionMinor 1.0.0 to 1.6.5
dcom.tobedone Sequence of bytes To Be Done 1.0.0 to 1.6.5
dcom.variant Label Variant 1.0.0 to 1.6.5
dcom.variant_rpc_res Unsigned integer, 4 bytes RPC-Reserved 1.0.0 to 1.6.5
dcom.variant_size Unsigned integer, 4 bytes Size 1.0.0 to 1.6.5
dcom.variant_type Unsigned integer, 2 bytes VarType 1.0.0 to 1.6.5
dcom.variant_type32 Unsigned integer, 4 bytes VarType32 1.0.0 to 1.6.5
dcom.variant_wres Unsigned integer, 2 bytes Reserved 1.0.0 to 1.6.5
dcom.version_major Unsigned integer, 2 bytes VersionMajor 1.0.0 to 1.6.5
dcom.version_minor Unsigned integer, 2 bytes VersionMinor 1.0.0 to 1.6.5
dcom.vt.bool Unsigned integer, 2 bytes VT_BOOL 1.0.0 to 1.6.5
dcom.vt.bstr Character string VT_BSTR 1.0.0 to 1.6.5
dcom.vt.byref Label BYREF 1.0.0 to 1.6.5
dcom.vt.date Floating point (double-precision) VT_DATE 1.0.0 to 1.6.5
dcom.vt.dispatch Label VT_DISPATCH 1.0.0 to 1.6.5
dcom.vt.i1 Signed integer, 1 byte VT_I1 1.0.0 to 1.6.5
dcom.vt.i2 Signed integer, 2 bytes VT_I2 1.0.0 to 1.6.5
dcom.vt.i4 Signed integer, 4 bytes VT_I4 1.0.0 to 1.6.5
dcom.vt.i8 Signed integer, 8 bytes VT_I8 1.0.0 to 1.6.5
dcom.vt.r4 Floating point (single-precision) VT_R4 1.0.0 to 1.6.5
dcom.vt.r8 Floating point (double-precision) VT_R8 1.0.0 to 1.6.5
dcom.vt.ui1 Unsigned integer, 1 byte VT_UI1 1.0.0 to 1.6.5
dcom.vt.ui2 Unsigned integer, 2 bytes VT_UI2 1.0.0 to 1.6.5
dcom.vt.ui4 Unsigned integer, 4 bytes VT_UI4 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation