Thank you to our Platinum Members Endace and LiveAction for supporting the Wireshark project.

Display Filter Reference: Remote Procedure Call

Protocol field name: rpc

Versions: 1.0.0 to 4.2.3

Back to Display Filter Reference

Field name Description Type Versions
rpc.argument_lengthArgument lengthUnsigned integer (32 bits)2.0.0 to 4.2.3
rpc.array.lennumUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.array_no_valuesno valuesLabel2.0.0 to 4.2.3
rpc.auth.ctimeCTIMEDate and time3.0.0 to 4.2.3
rpc.auth.flagsFLAGSUnsigned integer (32 bits)3.0.0 to 4.2.3
rpc.auth.flavorFlavorUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.auth.gidGIDUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.auth.lengthLengthUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.auth.lk_ownerLock OwnerByte sequence1.8.0 to 4.2.3
rpc.auth.machinenameMachine NameCharacter string1.0.0 to 4.2.3
rpc.auth.pidPIDUnsigned integer (32 bits)1.8.0 to 4.2.3
rpc.auth.stampStampUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.auth.uidUIDUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authdes.convkeyConversation Key (encrypted)Unsigned integer (64 bits)1.0.0 to 4.2.3
rpc.authdes.namekindNamekindUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authdes.netnameNetnameCharacter string1.0.0 to 4.2.3
rpc.authdes.nicknameNicknameUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authdes.timestampTimestamp (encrypted)Unsigned integer (64 bits)1.0.0 to 4.2.3
rpc.authdes.timeverfTimestamp verifier (encrypted)Unsigned integer (64 bits)1.0.0 to 4.2.3
rpc.authdes.windowWindow (encrypted)Unsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authdes.windowverfWindow verifier (encrypted)Unsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.checksumGSS ChecksumByte sequence1.0.0 to 4.2.3
rpc.authgss.contextGSS ContextByte sequence1.0.0 to 4.2.3
rpc.authgss.context.created_frameCreated in frameFrame number1.8.0 to 4.2.3
rpc.authgss.context.destroyed_frameDestroyed in frameFrame number1.8.0 to 4.2.3
rpc.authgss.context.lengthGSS Context LengthUnsigned integer (32 bits)1.8.0 to 4.2.3
rpc.authgss.dataGSS DataByte sequence1.0.0 to 4.2.3
rpc.authgss.data.lengthLengthUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.majorGSS Major StatusUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.minorGSS Minor StatusUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.procedureGSS ProcedureUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.seqnumGSS Sequence NumberUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.serviceGSS ServiceUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.tokenGSS TokenByte sequence1.0.0 to 4.2.3
rpc.authgss.token_lengthGSS Token LengthUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.versionGSS VersionUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgss.windowGSS Sequence WindowUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgssapi.handleClient HandleByte sequence1.0.0 to 4.2.3
rpc.authgssapi.isnSigned ISNByte sequence1.0.0 to 4.2.3
rpc.authgssapi.messageAUTH_GSSAPI MessageBoolean1.0.0 to 4.2.3
rpc.authgssapi.msgversionMsg VersionUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.authgssapi.versionAUTH_GSSAPI VersionUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.call.dupDuplicate to the call inFrame number1.0.0 to 4.2.3
rpc.cannot_dissectCannot dissectLabel2.0.0 to 4.2.3
rpc.continuation_dataContinuation dataByte sequence2.0.0 to 4.2.3
rpc.dupDuplicate Call/ReplyLabel1.0.0 to 4.2.3
rpc.fill_bytesfill bytesByte sequence2.0.0 to 4.2.3
rpc.fraglenFragment LengthUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.fragmentRPC FragmentFrame number1.0.0 to 4.2.3
rpc.fragment.countFragment countUnsigned integer (32 bits)1.6.0 to 4.2.3
rpc.fragment.errorDefragmentation errorFrame number1.0.0 to 4.2.3
rpc.fragment.multipletailsMultiple tail fragments foundBoolean1.0.0 to 4.2.3
rpc.fragment.overlapFragment overlapBoolean1.0.0 to 4.2.3
rpc.fragment.overlap.conflictConflicting data in fragment overlapBoolean1.0.0 to 4.2.3
rpc.fragment.toolongfragmentFragment too longBoolean1.0.0 to 4.2.3
rpc.fragment_dataFragment DataByte sequence2.0.0 to 4.2.3
rpc.fragmentsRPC FragmentsLabel1.0.0 to 4.2.3
rpc.lastfragLast FragmentBoolean1.0.0 to 4.2.3
rpc.msgtypMessage TypeUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.opaque_dataopaque dataByte sequence2.0.0 to 4.2.3
rpc.opaque_lengthlengthUnsigned integer (32 bits)2.0.0 to 4.2.3
rpc.procedureProcedureUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.programProgramUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.programversionProgram VersionUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.programversion.maxProgram Version (Maximum)Unsigned integer (32 bits)1.0.0 to 4.2.3
rpc.programversion.minProgram Version (Minimum)Unsigned integer (32 bits)1.0.0 to 4.2.3
rpc.reassembled.lengthReassembled RPC lengthUnsigned integer (32 bits)1.4.0 to 4.2.3
rpc.repframeReply FrameFrame number1.0.0 to 4.2.3
rpc.reply.dupDuplicate to the reply inFrame number1.0.0 to 4.2.3
rpc.replystatReply StateUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.reqframeRequest FrameFrame number1.0.0 to 4.2.3
rpc.segment_neededNeed another TCP segment but cannot desegment or not enabled (check RPC and TCP preferences)Label3.6.0 to 4.2.3
rpc.state_acceptAccept StateUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.state_authAuth StateUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.state_rejectReject StateUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.timeTime from requestTime offset1.0.0 to 4.2.3
rpc.unknown_bodyUnknown RPC call/reply bodyLabel2.0.0 to 4.2.3
rpc.value_followsValue FollowsBoolean1.0.0 to 4.2.3
rpc.versionRPC VersionUnsigned integer (32 bits)1.0.0 to 4.2.3
rpc.version.maxRPC Version (Maximum)Unsigned integer (32 bits)1.0.0 to 4.2.3
rpc.version.minRPC Version (Minimum)Unsigned integer (32 bits)1.0.0 to 4.2.3
rpc.xidXIDUnsigned integer (32 bits)1.0.0 to 4.2.3