Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Lightweight Directory Access Protocol
Protocol field name: ldap
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| ldap._untag_item | Character string | _untag | 1.0.0 to 1.0.16 |
| ldap.abandonRequest | Unsigned integer, 4 bytes | abandonRequest | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_CONTROL_ACCESS | Boolean | Control Access | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_CREATE_CHILD | Boolean | Create Child | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_DELETE_CHILD | Boolean | Delete Child | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_DELETE_TREE | Boolean | Delete Tree | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_LIST | Boolean | List | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_LIST_OBJECT | Boolean | List Object | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_READ_PROP | Boolean | Read Prop | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_SELF_WRITE | Boolean | Self Write | 1.0.0 to 1.6.5 |
| ldap.AccessMask.ADS_WRITE_PROP | Boolean | Write Prop | 1.0.0 to 1.6.5 |
| ldap.addRequest | Label | addRequest | 1.0.0 to 1.6.5 |
| ldap.addResponse | Label | addResponse | 1.0.0 to 1.6.5 |
| ldap.and | Unsigned integer, 4 bytes | and | 1.0.0 to 1.6.5 |
| ldap.and_item | Unsigned integer, 4 bytes | and item | 1.0.0 to 1.6.5 |
| ldap.any | Character string | any | 1.0.0 to 1.6.5 |
| ldap.approxMatch | Label | approxMatch | 1.0.0 to 1.6.5 |
| ldap.assertionValue | Character string | assertionValue | 1.0.0 to 1.6.5 |
| ldap.attributeDesc | Character string | attributeDesc | 1.0.0 to 1.6.5 |
| ldap.AttributeDescription | Character string | AttributeDescription | 1.2.0 to 1.6.5 |
| ldap.AttributeDescriptionList_item | Character string | AttributeDescriptionList | 1.0.0 to 1.0.16 |
| ldap.AttributeList_item | Label | AttributeList item | 1.0.0 to 1.6.5 |
| ldap.attributes | Unsigned integer, 4 bytes | attributes | 1.0.0 to 1.6.5 |
| ldap.attributeType | Character string | attributeType | 1.0.0 to 1.6.5 |
| ldap.AttributeValue | Sequence of bytes | AttributeValue | 1.2.0 to 1.6.5 |
| ldap.authentication | Unsigned integer, 4 bytes | authentication | 1.0.0 to 1.6.5 |
| ldap.ava | Label | ava | 1.0.0 to 1.6.5 |
| ldap.baseObject | Character string | baseObject | 1.0.0 to 1.6.5 |
| ldap.bindRequest | Label | bindRequest | 1.0.0 to 1.6.5 |
| ldap.bindResponse | Label | bindResponse | 1.0.0 to 1.6.5 |
| ldap.cancelID | Unsigned integer, 4 bytes | cancelID | 1.0.0 to 1.6.5 |
| ldap.CancelRequestValue | Label | CancelRequestValue | 1.0.0 to 1.6.5 |
| ldap.compareRequest | Label | compareRequest | 1.0.0 to 1.6.5 |
| ldap.compareResponse | Label | compareResponse | 1.0.0 to 1.6.5 |
| ldap.Control | Label | Control | 1.2.0 to 1.6.5 |
| ldap.controls | Unsigned integer, 4 bytes | controls | 1.0.0 to 1.6.5 |
| ldap.Controls_item | Label | Controls | 1.0.0 to 1.0.16 |
| ldap.controlType | Character string | controlType | 1.0.0 to 1.6.5 |
| ldap.controlValue | Sequence of bytes | controlValue | 1.0.0 to 1.6.5 |
| ldap.cookie | Sequence of bytes | cookie | 1.0.0 to 1.6.5 |
| ldap.credentials | Sequence of bytes | credentials | 1.0.0 to 1.6.5 |
| ldap.criticality | Boolean | criticality | 1.0.0 to 1.6.5 |
| ldap.deleteoldrdn | Boolean | deleteoldrdn | 1.0.0 to 1.6.5 |
| ldap.delRequest | Character string | delRequest | 1.0.0 to 1.6.5 |
| ldap.delResponse | Label | delResponse | 1.0.0 to 1.6.5 |
| ldap.derefAliases | Unsigned integer, 4 bytes | derefAliases | 1.0.0 to 1.6.5 |
| ldap.DirSyncControlValue | Label | DirSyncControlValue | 1.6.0 to 1.6.5 |
| ldap.dnAttributes | Boolean | dnAttributes | 1.0.0 to 1.6.5 |
| ldap.entry | Character string | entry | 1.0.0 to 1.6.5 |
| ldap.entryUUID | Sequence of bytes | entryUUID | 1.4.0 to 1.6.5 |
| ldap.equalityMatch | Label | equalityMatch | 1.0.0 to 1.6.5 |
| ldap.error | Unsigned integer, 4 bytes | error | 1.4.0 to 1.6.5 |
| ldap.errorMessage | Character string | errorMessage | 1.0.0 to 1.6.5 |
| ldap.extendedReq | Label | extendedReq | 1.0.0 to 1.6.5 |
| ldap.extendedResp | Label | extendedResp | 1.0.0 to 1.6.5 |
| ldap.extensibleMatch | Label | extensibleMatch | 1.0.0 to 1.6.5 |
| ldap.filter | Unsigned integer, 4 bytes | filter | 1.0.0 to 1.6.5 |
| ldap.final | Character string | final | 1.0.0 to 1.6.5 |
| ldap.flags | Signed integer, 4 bytes | flags | 1.6.0 to 1.6.5 |
| ldap.genPasswd | Sequence of bytes | genPasswd | 1.0.0 to 1.6.5 |
| ldap.graceAuthNsRemaining | Unsigned integer, 4 bytes | graceAuthNsRemaining | 1.4.0 to 1.6.5 |
| ldap.greaterOrEqual | Label | greaterOrEqual | 1.0.0 to 1.6.5 |
| ldap.guid | Globally Unique Identifier | GUID | 1.0.0 to 1.6.5 |
| ldap.initial | Character string | initial | 1.0.0 to 1.6.5 |
| ldap.intermediateResponse | Label | intermediateResponse | 1.4.0 to 1.6.5 |
| ldap.LDAPMessage | Label | LDAPMessage | 1.0.0 to 1.6.5 |
| ldap.LDAPURL | Character string | LDAPURL | 1.2.0 to 1.6.5 |
| ldap.lessOrEqual | Label | lessOrEqual | 1.0.0 to 1.6.5 |
| ldap.matchedDN | Character string | matchedDN | 1.0.0 to 1.6.5 |
| ldap.matchingRule | Character string | matchingRule | 1.0.0 to 1.6.5 |
| ldap.matchValue | Character string | matchValue | 1.0.0 to 1.6.5 |
| ldap.maxBytes | Signed integer, 4 bytes | maxBytes | 1.6.0 to 1.6.5 |
| ldap.maxReturnLength | Signed integer, 4 bytes | maxReturnLength | 1.0.0 to 1.4.11 |
| ldap.mechanism | Character string | mechanism | 1.0.0 to 1.6.5 |
| ldap.messageID | Unsigned integer, 4 bytes | messageID | 1.0.0 to 1.6.5 |
| ldap.modDNRequest | Label | modDNRequest | 1.0.0 to 1.6.5 |
| ldap.modDNResponse | Label | modDNResponse | 1.0.0 to 1.6.5 |
| ldap.mode | Unsigned integer, 4 bytes | mode | 1.4.0 to 1.6.5 |
| ldap.modification | Unsigned integer, 4 bytes | modification | 1.0.0 to 1.6.5 |
| ldap.modification_item | Label | modification item | 1.0.0 to 1.6.5 |
| ldap.modifyRequest | Label | modifyRequest | 1.0.0 to 1.6.5 |
| ldap.modifyResponse | Label | modifyResponse | 1.0.0 to 1.6.5 |
| ldap.name | Character string | name | 1.0.0 to 1.6.5 |
| ldap.newcookie | Sequence of bytes | newcookie | 1.4.0 to 1.6.5 |
| ldap.newPasswd | Sequence of bytes | newPasswd | 1.0.0 to 1.6.5 |
| ldap.newrdn | Character string | newrdn | 1.0.0 to 1.6.5 |
| ldap.newSuperior | Character string | newSuperior | 1.0.0 to 1.6.5 |
| ldap.not | Unsigned integer, 4 bytes | not | 1.0.0 to 1.6.5 |
| ldap.ntlmsspAuth | Sequence of bytes | ntlmsspAuth | 1.0.0 to 1.6.5 |
| ldap.ntlmsspNegotiate | Sequence of bytes | ntlmsspNegotiate | 1.0.0 to 1.6.5 |
| ldap.object | Character string | object | 1.0.0 to 1.6.5 |
| ldap.objectName | Character string | objectName | 1.0.0 to 1.6.5 |
| ldap.oldPasswd | Sequence of bytes | oldPasswd | 1.0.0 to 1.6.5 |
| ldap.operation | Unsigned integer, 4 bytes | operation | 1.0.0 to 1.6.5 |
| ldap.or | Unsigned integer, 4 bytes | or | 1.0.0 to 1.6.5 |
| ldap.or_item | Unsigned integer, 4 bytes | or item | 1.0.0 to 1.6.5 |
| ldap.orderingRule | Character string | orderingRule | 1.0.0 to 1.6.5 |
| ldap.parentsFirst | Signed integer, 4 bytes | parentsFirst | 1.0.0 to 1.4.11 |
| ldap.PartialAttributeList_item | Label | PartialAttributeList item | 1.0.0 to 1.6.5 |
| ldap.PasswdModifyRequestValue | Label | PasswdModifyRequestValue | 1.0.0 to 1.6.5 |
| ldap.PasswordPolicyResponseValue | Label | PasswordPolicyResponseValue | 1.4.0 to 1.6.5 |
| ldap.present | Character string | present | 1.0.0 to 1.6.5 |
| ldap.protocolOp | Unsigned integer, 4 bytes | protocolOp | 1.0.0 to 1.6.5 |
| ldap.referral | Unsigned integer, 4 bytes | referral | 1.0.0 to 1.6.5 |
| ldap.Referral_item | Character string | Referral | 1.0.0 to 1.0.16 |
| ldap.refreshDelete | Label | refreshDelete | 1.4.0 to 1.6.5 |
| ldap.refreshDeletes | Boolean | refreshDeletes | 1.4.0 to 1.6.5 |
| ldap.refreshDone | Boolean | refreshDone | 1.4.0 to 1.6.5 |
| ldap.refreshPresent | Label | refreshPresent | 1.4.0 to 1.6.5 |
| ldap.reloadHint | Boolean | reloadHint | 1.4.0 to 1.6.5 |
| ldap.ReplControlValue | Label | ReplControlValue | 1.0.0 to 1.4.11 |
| ldap.requestName | Character string | requestName | 1.0.0 to 1.6.5 |
| ldap.requestValue | Sequence of bytes | requestValue | 1.0.0 to 1.6.5 |
| ldap.response | Sequence of bytes | response | 1.0.0 to 1.6.5 |
| ldap.response_in | Frame number | Response In | 1.0.0 to 1.6.5 |
| ldap.response_to | Frame number | Response To | 1.0.0 to 1.6.5 |
| ldap.responseName | Character string | responseName | 1.0.0 to 1.6.5 |
| ldap.responseValue | Sequence of bytes | responseValue | 1.4.0 to 1.6.5 |
| ldap.resultCode | Unsigned integer, 4 bytes | resultCode | 1.0.0 to 1.6.5 |
| ldap.reverseOrder | Boolean | reverseOrder | 1.0.0 to 1.6.5 |
| ldap.sasl | Label | sasl | 1.0.0 to 1.6.5 |
| ldap.sasl_buffer_length | Unsigned integer, 4 bytes | SASL Buffer Length | 1.0.0 to 1.6.5 |
| ldap.scope | Unsigned integer, 4 bytes | scope | 1.0.0 to 1.6.5 |
| ldap.SearchControlValue | Label | SearchControlValue | 1.0.0 to 1.6.5 |
| ldap.searchRequest | Label | searchRequest | 1.0.0 to 1.6.5 |
| ldap.searchResDone | Label | searchResDone | 1.0.0 to 1.6.5 |
| ldap.searchResEntry | Label | searchResEntry | 1.0.0 to 1.6.5 |
| ldap.searchResRef | Unsigned integer, 4 bytes | searchResRef | 1.0.0 to 1.6.5 |
| ldap.serverSaslCreds | Sequence of bytes | serverSaslCreds | 1.0.0 to 1.6.5 |
| ldap.sid | Character string | Sid | 1.0.0 to 1.6.5 |
| ldap.simple | Sequence of bytes | simple | 1.0.0 to 1.6.5 |
| ldap.size | Signed integer, 4 bytes | size | 1.0.0 to 1.6.5 |
| ldap.sizeLimit | Unsigned integer, 4 bytes | sizeLimit | 1.0.0 to 1.6.5 |
| ldap.SortKeyList | Unsigned integer, 4 bytes | SortKeyList | 1.0.0 to 1.6.5 |
| ldap.SortKeyList_item | Label | SortKeyList item | 1.0.0 to 1.6.5 |
| ldap.SortResult | Label | SortResult | 1.0.0 to 1.6.5 |
| ldap.state | Unsigned integer, 4 bytes | state | 1.4.0 to 1.6.5 |
| ldap.substrings | Label | substrings | 1.0.0 to 1.6.5 |
| ldap.substrings_item | Unsigned integer, 4 bytes | substrings item | 1.0.0 to 1.6.5 |
| ldap.SyncDoneValue | Label | SyncDoneValue | 1.4.0 to 1.6.5 |
| ldap.syncIdSet | Label | syncIdSet | 1.4.0 to 1.6.5 |
| ldap.SyncInfoValue | Unsigned integer, 4 bytes | SyncInfoValue | 1.4.0 to 1.6.5 |
| ldap.SyncRequestValue | Label | SyncRequestValue | 1.4.0 to 1.6.5 |
| ldap.SyncStateValue | Label | SyncStateValue | 1.4.0 to 1.6.5 |
| ldap.SyncUUID | Sequence of bytes | SyncUUID | 1.4.0 to 1.6.5 |
| ldap.syncUUIDs | Unsigned integer, 4 bytes | syncUUIDs | 1.4.0 to 1.6.5 |
| ldap.time | Time offset | Time | 1.0.0 to 1.6.5 |
| ldap.timeBeforeExpiration | Unsigned integer, 4 bytes | timeBeforeExpiration | 1.4.0 to 1.6.5 |
| ldap.timeLimit | Unsigned integer, 4 bytes | timeLimit | 1.0.0 to 1.6.5 |
| ldap.type | Character string | type | 1.0.0 to 1.6.5 |
| ldap.typesOnly | Boolean | typesOnly | 1.0.0 to 1.6.5 |
| ldap.unbindRequest | Label | unbindRequest | 1.0.0 to 1.6.5 |
| ldap.userIdentity | Sequence of bytes | userIdentity | 1.0.0 to 1.6.5 |
| ldap.vals | Unsigned integer, 4 bytes | vals | 1.0.0 to 1.6.5 |
| ldap.vals_item | Sequence of bytes | vals | 1.0.0 to 1.0.16 |
| ldap.value | Signed integer, 4 bytes | value | 1.6.0 to 1.6.5 |
| ldap.version | Unsigned integer, 4 bytes | version | 1.0.0 to 1.6.5 |
| ldap.warning | Unsigned integer, 4 bytes | warning | 1.4.0 to 1.6.5 |
| mscldap.clientsitename | Character string | Client Site | 1.0.0 to 1.6.5 |
| mscldap.domain | Character string | Domain | 1.0.0 to 1.6.5 |
| mscldap.domain.guid | Globally Unique Identifier | Domain GUID | 1.0.0 to 1.6.5 |
| mscldap.forest | Character string | Forest | 1.0.0 to 1.6.5 |
| mscldap.hostname | Character string | Hostname | 1.0.0 to 1.6.5 |
| mscldap.nb_domain | Character string | NetBIOS Domain | 1.0.0 to 1.6.5 |
| mscldap.nb_hostname | Character string | NetBIOS Hostname | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags | Unsigned integer, 4 bytes | Flags | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.closest | Boolean | Closest | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.defaultnc | Boolean | DNC | 1.2.0 to 1.6.5 |
| mscldap.netlogon.flags.dnsname | Boolean | DNS | 1.2.0 to 1.6.5 |
| mscldap.netlogon.flags.ds | Boolean | DS | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.forestnc | Boolean | FDC | 1.2.0 to 1.6.5 |
| mscldap.netlogon.flags.gc | Boolean | GC | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.good_timeserv | Boolean | Good Time Serv | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.kdc | Boolean | KDC | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.ldap | Boolean | LDAP | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.ndnc | Boolean | NDNC | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.pdc | Boolean | PDC | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.rodc | Boolean | RODC | 1.2.0 to 1.6.5 |
| mscldap.netlogon.flags.timeserv | Boolean | Time Serv | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.writable | Boolean | Writable | 1.0.0 to 1.6.5 |
| mscldap.netlogon.flags.writabledc. | Boolean | WDC | 1.2.0 to 1.6.5 |
| mscldap.netlogon.ipaddress | IPv4 address | IP Address | 1.2.0 to 1.6.5 |
| mscldap.netlogon.ipaddress.family | Unsigned integer, 2 bytes | Family | 1.2.0 to 1.6.5 |
| mscldap.netlogon.ipaddress.ipv4 | IPv4 address | IPv4 | 1.2.0 to 1.6.5 |
| mscldap.netlogon.ipaddress.port | Unsigned integer, 2 bytes | Port | 1.2.0 to 1.6.5 |
| mscldap.netlogon.lm_token | Unsigned integer, 2 bytes | LM Token | 1.0.0 to 1.6.5 |
| mscldap.netlogon.nt_token | Unsigned integer, 2 bytes | NT Token | 1.0.0 to 1.6.5 |
| mscldap.netlogon.opcode | Unsigned integer, 2 bytes | Operation code | 1.6.0 to 1.6.5 |
| mscldap.netlogon.type | Unsigned integer, 2 bytes | Type | 1.0.0 to 1.4.11 |
| mscldap.netlogon.version | Unsigned integer, 4 bytes | Version | 1.0.0 to 1.4.11 |
| mscldap.ntver.flags | Unsigned integer, 4 bytes | Version Flags | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags | Unsigned integer, 4 bytes | Search Flags | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.gc | Boolean | GC | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.ip | Boolean | IP | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.local | Boolean | Local | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.nt4 | Boolean | NT4 | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.pdc | Boolean | PDC | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.v1 | Boolean | V1 | 1.2.0 to 1.6.5 |
| mscldap.ntver.searchflags.v5 | Boolean | V5 | 1.2.0 to 1.6.5 |
| mscldap.ntver.searchflags.v5cs | Boolean | V5CS | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.v5ep | Boolean | V5EP | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags.v5ex | Boolean | V5EX | 1.2.0 to 1.6.5 |
| mscldap.ntver.searchflags.v5ip | Boolean | V5IP | 1.2.0 to 1.4.11 |
| mscldap.ntver.searchflags.vcs | Boolean | VCS | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags.vgc | Boolean | VGC | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags.vip | Boolean | VIP | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags.vl | Boolean | VL | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags.vnt4 | Boolean | VNT4 | 1.6.0 to 1.6.5 |
| mscldap.ntver.searchflags.vpdc | Boolean | VPDC | 1.6.0 to 1.6.5 |
| mscldap.sitename | Character string | Server Site | 1.0.0 to 1.6.5 |
| mscldap.username | Character string | Username | 1.0.0 to 1.6.5 |