Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: DCE/RPC Endpoint Mapper

Protocol field name: epm
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
epm.ann_len Unsigned integer, 4 bytes Annotation length 1.0.0 to 1.6.5
epm.ann_offset Unsigned integer, 4 bytes Annotation offset 1.0.0 to 1.6.5
epm.annotation Character string Annotation 1.0.0 to 1.6.5
epm.hnd Sequence of bytes Handle 1.0.0 to 1.6.5
epm.if_id Globally Unique Identifier Interface 1.0.0 to 1.6.5
epm.inq_type Unsigned integer, 4 bytes Inquiry type 1.0.0 to 1.6.5
epm.max_ents Unsigned integer, 4 bytes Max entries 1.0.0 to 1.6.5
epm.max_towers Unsigned integer, 4 bytes Max Towers 1.0.0 to 1.6.5
epm.num_ents Unsigned integer, 4 bytes Num entries 1.0.0 to 1.6.5
epm.num_towers Unsigned integer, 4 bytes Num Towers 1.0.0 to 1.6.5
epm.object Globally Unique Identifier Object 1.0.0 to 1.6.5
epm.opnum Unsigned integer, 2 bytes Operation 1.0.0 to 1.6.5
epm.proto.http_port Unsigned integer, 2 bytes TCP Port 1.0.0 to 1.6.5
epm.proto.ip IPv4 address IP 1.0.0 to 1.6.5
epm.proto.named_pipe Character string Named Pipe 1.0.0 to 1.6.5
epm.proto.netbios_name Character string NetBIOS Name 1.0.0 to 1.6.5
epm.proto.tcp_port Unsigned integer, 2 bytes TCP Port 1.0.0 to 1.6.5
epm.proto.udp_port Unsigned integer, 2 bytes UDP Port 1.0.0 to 1.6.5
epm.rc Unsigned integer, 4 bytes Return code 1.0.0 to 1.6.5
epm.replace Unsigned integer, 1 byte Replace 1.0.0 to 1.6.5
epm.tower Sequence of bytes Tower 1.0.0 to 1.6.5
epm.tower.len Unsigned integer, 4 bytes Length 1.0.0 to 1.6.5
epm.tower.lhs.len Unsigned integer, 2 bytes LHS Length 1.0.0 to 1.6.5
epm.tower.num_floors Unsigned integer, 2 bytes Number of floors 1.0.0 to 1.6.5
epm.tower.proto_id Unsigned integer, 1 byte Protocol 1.0.0 to 1.6.5
epm.tower.rhs.len Unsigned integer, 2 bytes RHS Length 1.0.0 to 1.6.5
epm.uuid Globally Unique Identifier UUID 1.0.0 to 1.6.5
epm.ver_maj Unsigned integer, 2 bytes Version Major 1.0.0 to 1.6.5
epm.ver_min Unsigned integer, 2 bytes Version Minor 1.0.0 to 1.6.5
epm.ver_opt Unsigned integer, 4 bytes Version Option 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation