Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: NetBIOS

Protocol field name: netbios
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
netbios.ack Boolean Acknowledge 1.0.0 to 1.6.5
netbios.ack_expected Boolean Acknowledge expected 1.0.0 to 1.6.5
netbios.ack_with_data Boolean Acknowledge with data 1.0.0 to 1.6.5
netbios.call_name_type Unsigned integer, 1 byte Caller's Name Type 1.0.0 to 1.6.5
netbios.command Unsigned integer, 1 byte Command 1.0.0 to 1.6.5
netbios.data1 Unsigned integer, 1 byte DATA1 value 1.0.0 to 1.6.5
netbios.data2 Unsigned integer, 2 bytes DATA2 value 1.0.0 to 1.6.5
netbios.fragment Frame number NetBIOS Fragment 1.0.0 to 1.6.5
netbios.fragment.count Unsigned integer, 4 bytes Fragment count 1.6.0 to 1.6.5
netbios.fragment.error Frame number Defragmentation error 1.0.0 to 1.6.5
netbios.fragment.multipletails Boolean Multiple tail fragments found 1.0.0 to 1.6.5
netbios.fragment.overlap Boolean Fragment overlap 1.0.0 to 1.6.5
netbios.fragment.overlap.conflict Boolean Conflicting data in fragment overlap 1.0.0 to 1.6.5
netbios.fragment.toolongfragment Boolean Fragment too long 1.0.0 to 1.6.5
netbios.fragments Label NetBIOS Fragments 1.0.0 to 1.6.5
netbios.hdr_len Unsigned integer, 2 bytes Header Length 1.0.0 to 1.6.5
netbios.largest_frame Unsigned integer, 1 byte Largest Frame 1.0.0 to 1.6.5
netbios.local_session Unsigned integer, 1 byte Local Session No. 1.0.0 to 1.6.5
netbios.max_data_recv_size Unsigned integer, 2 bytes Maximum data receive size 1.0.0 to 1.6.5
netbios.name_type Unsigned integer, 2 bytes Name type 1.0.0 to 1.6.5
netbios.nb_name Character string NetBIOS Name 1.0.0 to 1.6.5
netbios.nb_name_type Unsigned integer, 1 byte NetBIOS Name Type 1.0.0 to 1.6.5
netbios.num_data_bytes_accepted Unsigned integer, 2 bytes Number of data bytes accepted 1.0.0 to 1.6.5
netbios.reassembled.length Unsigned integer, 4 bytes Reassembled NetBIOS length 1.4.0 to 1.6.5
netbios.recv_cont_req Boolean RECEIVE_CONTINUE requested 1.0.0 to 1.6.5
netbios.remote_session Unsigned integer, 1 byte Remote Session No. 1.0.0 to 1.6.5
netbios.resp_corrl Unsigned integer, 2 bytes Response Correlator 1.0.0 to 1.6.5
netbios.send_no_ack Boolean Handle SEND.NO.ACK 1.0.0 to 1.6.5
netbios.status Unsigned integer, 1 byte Status 1.0.0 to 1.6.5
netbios.status_buffer_len Unsigned integer, 2 bytes Length of status buffer 1.0.0 to 1.6.5
netbios.termination_indicator Unsigned integer, 2 bytes Termination indicator 1.0.0 to 1.6.5
netbios.version Boolean NetBIOS Version 1.0.0 to 1.6.5
netbios.xmit_corrl Unsigned integer, 2 bytes Transmit Correlator 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation