Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Exchange 5.5 EMSMDB
Protocol field name: mapi
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| mapi.DATA_BLOB.data | Unsigned integer, 1 byte | Data | 1.2.0 to 1.6.5 |
| mapi.DATA_BLOB.length | Unsigned integer, 1 byte | Length | 1.2.0 to 1.6.5 |
| mapi.decrypted.data | Sequence of bytes | Decrypted data | 1.0.0 to 1.6.5 |
| mapi.decrypted.data.len | Unsigned integer, 4 bytes | Length | 1.0.0 to 1.0.16 |
| mapi.decrypted.data.maxlen | Unsigned integer, 4 bytes | Max Length | 1.0.0 to 1.0.16 |
| mapi.decrypted.data.offset | Unsigned integer, 4 bytes | Offset | 1.0.0 to 1.0.16 |
| mapi.EcDoConnect.alloc_space | Unsigned integer, 4 bytes | Alloc Space | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.code_page | Unsigned integer, 4 bytes | Code Page | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.emsmdb_client_version | Unsigned integer, 2 bytes | Emsmdb Client Version | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.input_locale | Label | Input Locale | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.name | Character string | Name | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.org_group | Character string | Org Group | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.session_nb | Unsigned integer, 2 bytes | Session Nb | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.store_version | Unsigned integer, 2 bytes | Store Version | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.unknown3 | Unsigned integer, 2 bytes | Unknown3 | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.unknown4 | Unsigned integer, 4 bytes | Unknown4 | 1.2.0 to 1.6.5 |
| mapi.EcDoConnect.user | Character string | User | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc.length | Unsigned integer, 2 bytes | Length | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc.mapi_request | Label | Mapi Request | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc.mapi_response | Label | Mapi Response | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc.max_data | Unsigned integer, 2 bytes | Max Data | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc.offset | Unsigned integer, 4 bytes | Offset | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc.size | Unsigned integer, 4 bytes | Size | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REPL_UNION.mapi_GetProps | Label | Mapi Getprops | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REPL_UNION.mapi_OpenFolder | Label | Mapi Openfolder | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REPL_UNION.mapi_Release | Label | Mapi Release | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REQ.opnum | Unsigned integer, 1 byte | Opnum | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REQ_UNION.mapi_GetProps | Label | Mapi Getprops | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REQ_UNION.mapi_OpenFolder | Label | Mapi Openfolder | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REQ_UNION.mapi_OpenMsgStore | Label | Mapi Openmsgstore | 1.2.0 to 1.6.5 |
| mapi.EcDoRpc_MAPI_REQ_UNION.mapi_Release | Label | Mapi Release | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.notif_len | Unsigned integer, 2 bytes | Notif Len | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.notifkey | Unsigned integer, 1 byte | Notifkey | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.retval | Unsigned integer, 4 bytes | Retval | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.sockaddr | Unsigned integer, 1 byte | Sockaddr | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.sockaddr_len | Unsigned integer, 2 bytes | Sockaddr Len | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.ulEventMask | Unsigned integer, 2 bytes | Uleventmask | 1.2.0 to 1.6.5 |
| mapi.EcRRegisterPushNotification.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.2.0 to 1.6.5 |
| mapi.EcRUnregisterPushNotification.unknown | Unsigned integer, 4 bytes | Unknown | 1.2.0 to 1.6.5 |
| mapi.encap_len | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.0.16 |
| mapi.encrypted_data | Sequence of bytes | Encrypted data | 1.0.0 to 1.0.16 |
| mapi.FILETIME.dwHighDateTime | Unsigned integer, 4 bytes | Dwhighdatetime | 1.2.0 to 1.6.5 |
| mapi.FILETIME.dwLowDateTime | Unsigned integer, 4 bytes | Dwlowdatetime | 1.2.0 to 1.6.5 |
| mapi.handle | Sequence of bytes | Handle | 1.2.0 to 1.6.5 |
| mapi.hnd | Sequence of bytes | Context Handle | 1.0.0 to 1.0.16 |
| mapi.input_locale.language | Unsigned integer, 4 bytes | Language | 1.2.0 to 1.6.5 |
| mapi.input_locale.method | Unsigned integer, 4 bytes | Method | 1.2.0 to 1.6.5 |
| mapi.LPSTR.lppszA | Label | Lppsza | 1.2.0 to 1.6.5 |
| mapi.mapi_request.mapi_req | Label | Mapi Req | 1.2.0 to 1.6.5 |
| mapi.mapi_response.mapi_repl | Label | Mapi Repl | 1.2.0 to 1.6.5 |
| mapi.MAPISTATUS_status | Unsigned integer, 4 bytes | MAPISTATUS | 1.2.0 to 1.6.5 |
| mapi.notification_payload | Sequence of bytes | Notification payload | 1.0.0 to 1.0.16 |
| mapi.notification_port | Unsigned integer, 2 bytes | Notification port | 1.0.0 to 1.0.16 |
| mapi.OpenMessage_recipients.codepage | Unsigned integer, 4 bytes | Codepage | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_recipients.RecipClass | Unsigned integer, 1 byte | Recipclass | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_recipients.recipients_headers | Label | Recipients Headers | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_req.folder_handle_idx | Unsigned integer, 1 byte | Folder Handle Idx | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_req.folder_id | Unsigned integer, 8 bytes | Folder Id | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_req.max_data | Unsigned integer, 2 bytes | Max Data | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_req.message_id | Unsigned integer, 8 bytes | Message Id | 1.2.0 to 1.6.5 |
| mapi.OpenMessage_req.message_permissions | Unsigned integer, 1 byte | Message Permissions | 1.2.0 to 1.6.5 |
| mapi.opnum | Unsigned integer, 2 bytes | Operation | 1.0.0 to 1.6.5 |
| mapi.pdu.len | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.6.5 |
| mapi.rc | Unsigned integer, 4 bytes | Return code | 1.0.0 to 1.0.16 |
| mapi.RecipExchange.addr_type | Unsigned integer, 1 byte | Addr Type | 1.2.0 to 1.6.5 |
| mapi.RecipExchange.organization_length | Unsigned integer, 1 byte | Organization Length | 1.2.0 to 1.6.5 |
| mapi.recipient_displayname_7bit.lpszA | Label | Lpsza | 1.2.0 to 1.6.5 |
| mapi.recipient_type.EXCHANGE | Label | Exchange | 1.2.0 to 1.6.5 |
| mapi.recipient_type.SMTP | Label | Smtp | 1.2.0 to 1.6.5 |
| mapi.recipients_headers.bitmask | Unsigned integer, 2 bytes | Bitmask | 1.2.0 to 1.6.5 |
| mapi.recipients_headers.layout | Unsigned integer, 1 byte | Layout | 1.2.0 to 1.6.5 |
| mapi.recipients_headers.prop_count | Unsigned integer, 2 bytes | Prop Count | 1.2.0 to 1.6.5 |
| mapi.recipients_headers.prop_values | Label | Prop Values | 1.2.0 to 1.6.5 |
| mapi.recipients_headers.type | Unsigned integer, 2 bytes | Recipient Type | 1.2.0 to 1.6.5 |
| mapi.recipients_headers.username | Label | Username | 1.2.0 to 1.6.5 |
| mapi.SPropValue.ulPropTag | Unsigned integer, 4 bytes | Ulproptag | 1.2.0 to 1.6.5 |
| mapi.SPropValue.value | Unsigned integer, 4 bytes | Value | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.b | Unsigned integer, 1 byte | B | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.d | Signed integer, 8 bytes | D | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.dbl | Signed integer, 8 bytes | Dbl | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.err | Unsigned integer, 4 bytes | Err | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.ft | Label | Ft | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.i | Unsigned integer, 2 bytes | I | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.l | Unsigned integer, 4 bytes | L | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.lpguid | Globally Unique Identifier | Lpguid | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.lpszA | Label | Lpsza | 1.2.0 to 1.6.5 |
| mapi.SPropValue_CTR.lpszW | Label | Lpszw | 1.2.0 to 1.6.5 |
| mapi.SRow.ulRowFlags | Unsigned integer, 1 byte | Ulrowflags | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevCriticalError | Boolean | Fnevcriticalerror | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevExtended | Boolean | Fnevextended | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevNewMail | Boolean | Fnevnewmail | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevObjectCopied | Boolean | Fnevobjectcopied | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevObjectCreated | Boolean | Fnevobjectcreated | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevObjectDeleted | Boolean | Fnevobjectdeleted | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevObjectModified | Boolean | Fnevobjectmodified | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevObjectMoved | Boolean | Fnevobjectmoved | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevReservedForMapi | Boolean | Fnevreservedformapi | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevSearchComplete | Boolean | Fnevsearchcomplete | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevStatusObjectModified | Boolean | Fnevstatusobjectmodified | 1.2.0 to 1.6.5 |
| mapi.ulEventType.fnevTableModified | Boolean | Fnevtablemodified | 1.2.0 to 1.6.5 |
| mapi.unknown_long | Unsigned integer, 4 bytes | Unknown long | 1.0.0 to 1.0.16 |
| mapi.unknown_short | Unsigned integer, 2 bytes | Unknown short | 1.0.0 to 1.0.16 |
| mapi.unknown_string | Character string | Unknown string | 1.0.0 to 1.0.16 |