Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: SMB Pipe Protocol
Protocol field name: pipe
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| pipe.fragment | Frame number | Fragment | 1.0.0 to 1.6.5 |
| pipe.fragment.count | Unsigned integer, 4 bytes | Fragment count | 1.6.0 to 1.6.5 |
| pipe.fragment.error | Frame number | Defragmentation error | 1.0.0 to 1.6.5 |
| pipe.fragment.multipletails | Boolean | Multiple tail fragments found | 1.0.0 to 1.6.5 |
| pipe.fragment.overlap | Boolean | Fragment overlap | 1.0.0 to 1.6.5 |
| pipe.fragment.overlap.conflict | Boolean | Conflicting data in fragment overlap | 1.0.0 to 1.6.5 |
| pipe.fragment.toolongfragment | Boolean | Fragment too long | 1.0.0 to 1.6.5 |
| pipe.fragments | Label | Fragments | 1.0.0 to 1.6.5 |
| pipe.function | Unsigned integer, 2 bytes | Function | 1.0.0 to 1.6.5 |
| pipe.getinfo.current_instances | Unsigned integer, 1 byte | Current Instances | 1.0.0 to 1.6.5 |
| pipe.getinfo.info_level | Unsigned integer, 2 bytes | Information Level | 1.0.0 to 1.6.5 |
| pipe.getinfo.input_buffer_size | Unsigned integer, 2 bytes | Input Buffer Size | 1.0.0 to 1.6.5 |
| pipe.getinfo.maximum_instances | Unsigned integer, 1 byte | Maximum Instances | 1.0.0 to 1.6.5 |
| pipe.getinfo.output_buffer_size | Unsigned integer, 2 bytes | Output Buffer Size | 1.0.0 to 1.6.5 |
| pipe.getinfo.pipe_name | Character string | Pipe Name | 1.0.0 to 1.6.5 |
| pipe.getinfo.pipe_name_length | Unsigned integer, 1 byte | Pipe Name Length | 1.0.0 to 1.6.5 |
| pipe.peek.available_bytes | Unsigned integer, 2 bytes | Available Bytes | 1.0.0 to 1.6.5 |
| pipe.peek.remaining_bytes | Unsigned integer, 2 bytes | Bytes Remaining | 1.0.0 to 1.6.5 |
| pipe.peek.status | Unsigned integer, 2 bytes | Pipe Status | 1.0.0 to 1.6.5 |
| pipe.priority | Unsigned integer, 2 bytes | Priority | 1.0.0 to 1.6.5 |
| pipe.reassembled.length | Unsigned integer, 4 bytes | Reassembled SMB Pipe length | 1.4.0 to 1.6.5 |
| pipe.reassembled_in | Frame number | This PDU is reassembled in | 1.0.0 to 1.6.5 |
| pipe.write_raw.bytes_written | Unsigned integer, 2 bytes | Bytes Written | 1.0.0 to 1.6.5 |