Wireshark • Display Filter Reference: Microsoft Network Logon

Display Filter Reference: Microsoft Network Logon

Protocol field name: rpc_netlogon

Versions: 1.0.0 to 4.6.0

Field name	Description	Type	Versions
netlogon.accountdomaingroupcount	AccountDomainGroup count	Unsigned integer (32 bits)	3.4.0 to 4.6.0
netlogon.acct.expiry_time	Acct Expiry Time	Date and time	1.0.0 to 4.6.0
netlogon.acct_desc	Acct Desc	Character string	1.0.0 to 4.6.0
netlogon.acct_name	Acct Name	Character string	1.0.0 to 4.6.0
netlogon.alias_name	Alias Name	Character string	1.0.0 to 4.6.0
netlogon.alias_rid	Alias RID	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.attrs	Attributes	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.audit_retention_period	Audit Retention Period	Time offset	1.0.0 to 4.6.0
netlogon.auditing_mode	Auditing Mode	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.auth.data	Auth Data	Byte sequence	1.0.0 to 1.8.15
netlogon.auth.size	Auth Size	Unsigned integer (32 bits)	1.0.0 to 1.8.15
netlogon.auth_flags	Auth Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.authenticated	Authenticated NTHASH	Label	3.4.0 to 4.6.0
netlogon.authoritative	Authoritative	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.bad_pw_count	Bad PW Count	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.bad_pw_count16	Bad PW Count	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.blob	BLOB	Byte sequence	1.0.0 to 4.6.0
netlogon.blob.size	Size	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.challenge	Challenge	Byte sequence	1.0.0 to 4.6.0
netlogon.cipher_current_data	Cipher Current Data	Byte sequence	1.0.0 to 4.6.0
netlogon.cipher_current_set_time	Cipher Current Set Time	Date and time	1.0.0 to 4.6.0
netlogon.cipher_len	Cipher Len	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.cipher_maxlen	Cipher Max Len	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.cipher_old_data	Cipher Old Data	Byte sequence	1.0.0 to 4.6.0
netlogon.cipher_old_set_time	Cipher Old Set Time	Date and time	1.0.0 to 4.6.0
netlogon.claim_boolean_value	Claim BOOLEAN Value	Unsigned integer (64 bits)	4.6.0
netlogon.claim_id	Claim ID	Character string	4.6.0
netlogon.claim_int64_value	Claim INT64 Value	Signed integer (64 bits)	4.6.0
netlogon.claim_string_value	Claim STRING Value	Character string	4.6.0
netlogon.claim_type	Claim Type	Unsigned integer (32 bits)	4.6.0
netlogon.claim_uint64_value	Claim UINT64 Value	Unsigned integer (64 bits)	4.6.0
netlogon.claim_value_count	Claim Value Count	Unsigned integer (32 bits)	4.6.0
netlogon.claims_compression_format	Claims Compression Format	Unsigned integer (32 bits)	4.6.0
netlogon.claims_count	Claims Count	Unsigned integer (32 bits)	4.6.0
netlogon.claims_reserved_field_size	Claims Reserved Field Size	Unsigned integer (32 bits)	4.6.0
netlogon.claims_reserved_type	Claims Reserved Type	Unsigned integer (16 bits)	4.6.0
netlogon.claims_set_size	Claims Set Size	Unsigned integer (32 bits)	4.6.0
netlogon.claims_set_uncompressed_size	Claims Set Uncompressed Size	Unsigned integer (32 bits)	4.6.0
netlogon.claims_source_type	Claims Source Type	Unsigned integer (32 bits)	4.6.0
netlogon.client.site_name	Client Site Name	Character string	1.0.0 to 4.6.0
netlogon.client_dns_name	Client DNS Name	Character string	1.4.0 to 4.6.0
netlogon.clientchallenge	Client Challenge	Byte sequence	1.4.0 to 4.6.0
netlogon.clientcred	Client Credential	Byte sequence	1.4.0 to 4.6.0
netlogon.code	Code	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.codepage	Codepage	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.comment	Comment	Character string	1.0.0 to 4.6.0
netlogon.computer_name	Computer Name	Character string	1.0.0 to 4.6.0
netlogon.count	Count	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.country	Country	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.credential	Credential	Byte sequence	1.0.0 to 4.6.0
netlogon.data.length	Length of Data	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.data.package_name	SSP Package Name	Character string	1.4.0 to 4.6.0
netlogon.database_id	Database Id	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.db_create_time	DB Create Time	Date and time	1.0.0 to 4.6.0
netlogon.db_modify_time	DB Modify Time	Date and time	1.0.0 to 4.6.0
netlogon.dc.address	DC Address	Character string	1.0.0 to 4.6.0
netlogon.dc.address_type	DC Address Type	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.dc.flags	Domain Controller Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.dc.flags.closest	Closest	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.dns_controller	DNS Controller	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.dns_domain	DNS Domain	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.dns_forest	DNS Forest	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.ds	DS	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.gc	GC	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.good_timeserv	Good Timeserv	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.kdc	KDC	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.ldap	LDAP	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.ndnc	NDNC	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.pdc	PDC	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.timeserv	Timeserv	Boolean	1.0.0 to 4.6.0
netlogon.dc.flags.writable	Writable	Boolean	1.0.0 to 4.6.0
netlogon.dc.name	DC Name	Character string	1.0.0 to 4.6.0
netlogon.dc.site_name	DC Site Name	Character string	1.0.0 to 4.6.0
netlogon.delta_type	Delta Type	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.dir_drive	Dir Drive	Character string	1.0.0 to 4.6.0
netlogon.dns.forest_name	DNS Forest Name	Character string	1.0.0 to 4.6.0
netlogon.dns_domain	DNS Domain	Character string	1.0.0 to 4.6.0
netlogon.dns_host	DNS Host	Character string	1.0.0 to 4.6.0
netlogon.dnsdomaininfo	DnsDomainInfo	Label	1.2.0 to 1.8.15
netlogon.domain	Domain	Character string	1.0.0 to 4.6.0
netlogon.domain_create_time	Domain Create Time	Date and time	1.0.0 to 4.6.0
netlogon.domain_modify_time	Domain Modify Time	Date and time	1.0.0 to 4.6.0
netlogon.domaingroupcount	DomainGroup count	Unsigned integer (32 bits)	3.4.0 to 4.6.0
netlogon.dos.rc	DOS error code	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.downlevel_domain	Downlevel Domain	Character string	1.0.0 to 4.6.0
netlogon.dummy	Dummy	Character string	1.0.0 to 4.6.0
netlogon.dummy.long1	Dummy1 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long10	Dummy10 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long2	Dummy2 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long3	Dummy3 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long4	Dummy4 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long5	Dummy5 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long6	Dummy6 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long7	Dummy7 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long8	Dummy8 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy.long9	Dummy9 Long	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.dummy_string	Dummy String	Character string	1.4.0 to 4.6.0
netlogon.encryption.types	Supported Encryption Types	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.entries	Entries	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.event_audit_option	Event Audit Option	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.extra.flags.dc_firsthop	DC at the end of the first hop of cross forest	Boolean	1.4.0 to 4.6.0
netlogon.extra.flags.rodc_ntlm	Request is a NTLM auth passed by a RODC	Boolean	1.4.0 to 4.6.0
netlogon.extra.flags.rodc_to_dc	Request from a RODC to a DC from another domain	Boolean	1.4.0 to 4.6.0
netlogon.extra.flags.rootdc	Request passed to DC of root forest	Boolean	1.4.0 to 4.6.0
netlogon.extra_flags	Extra Flags	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.forest_trust_info	Forest Trust Info	Label	4.6.0
netlogon.forest_trust_info_flags	Flags	Unsigned integer (32 bits)	4.6.0
netlogon.forest_trust_info_flags.update_tdo	Update Trusted Domain Object	Boolean	4.6.0
netlogon.full_name	Full Name	Character string	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags	Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.avoid_self	Avoid Self	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.background_only	Background Only	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.ds_preferred	DS Preferred	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.ds_required	DS Required	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.force_rediscovery	Force Rediscovery	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.gc_server_required	GC Required	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.good_timeserv_preferred	Timeserv Preferred	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.ip_required	IP Required	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.is_dns_name	Is DNS Name	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.is_flat_name	Is Flat Name	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.kdc_required	KDC Required	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.only_ldap_needed	Only LDAP Needed	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.pdc_required	PDC Required	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.return_dns_name	Return DNS Name	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.return_flat_name	Return Flat Name	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.timeserv_required	Timeserv Required	Boolean	1.0.0 to 4.6.0
netlogon.get_dcname.request.flags.writable_required	Writable Required	Boolean	1.0.0 to 4.6.0
netlogon.group_desc	Group Desc	Character string	1.0.0 to 4.6.0
netlogon.group_name	Group Name	Character string	1.0.0 to 4.6.0
netlogon.group_rid	Group RID	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.groups.attrs.enabled	Enabled	Boolean	1.0.0 to 4.2.14
netlogon.groups.attrs.enabled_by_default	Enabled By Default	Boolean	1.0.0 to 4.2.14
netlogon.groups.attrs.mandatory	Mandatory	Boolean	1.0.0 to 4.2.14
netlogon.handle	Handle	Character string	1.0.0 to 4.6.0
netlogon.home_dir	Home Dir	Character string	1.0.0 to 4.6.0
netlogon.kickoff_time	Kickoff Time	Date and time	1.0.0 to 4.6.0
netlogon.last_logoff_time	Last Logoff Time	Date and time	1.0.0 to 4.6.0
netlogon.len	Len	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.level	Level	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.level16	Level	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.lm_chal_resp	LM Chal resp	Byte sequence	1.0.0 to 4.6.0
netlogon.lm_owf_pwd	LM Pwd	Byte sequence	1.0.0 to 4.6.0
netlogon.lm_owf_pwd.encrypted	Encrypted LM Pwd	Byte sequence	1.0.0 to 4.6.0
netlogon.lm_pwd_present	LM PWD Present	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.logoff_time	Logoff Time	Date and time	1.0.0 to 4.6.0
netlogon.logon.dnslogondomainname	DNS Logon Domain name	Character string	1.4.0 to 4.6.0
netlogon.logon.upn	UPN	Character string	1.4.0 to 4.6.0
netlogon.logon_attempts	Logon Attempts	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.logon_count	Logon Count	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.logon_count16	Logon Count	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.logon_duration	Duration	Unsigned integer (32 bits)	2.0.0 to 4.6.0
netlogon.logon_id	Logon ID	Unsigned integer (64 bits)	1.0.0 to 4.6.0
netlogon.logon_script	Logon Script	Character string	1.0.0 to 4.6.0
netlogon.logon_time	Logon Time	Date and time	1.0.0 to 4.6.0
netlogon.lsa_DnsDomainInfo.dns_domain	Dns Domain	Label	4.4.0 to 4.6.0
netlogon.lsa_DnsDomainInfo.dns_forest	Dns Forest	Label	4.4.0 to 4.6.0
netlogon.lsa_DnsDomainInfo.domain_guid	Domain Guid	Globally Unique Identifier	4.4.0 to 4.6.0
netlogon.lsa_DnsDomainInfo.name	Name	Label	4.4.0 to 4.6.0
netlogon.lsa_DnsDomainInfo.sid	Sid	Label	4.4.0 to 4.6.0
netlogon.lsa_DomainInfo.sid	Sid	Label	4.4.0 to 4.6.0
netlogon.lsapolicy.length	Length	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.lsapolicy.pointer	Pointer	Byte sequence	1.4.0 to 1.8.15
netlogon.lsapolicy.referentID	Referent ID	Unsigned integer (32 bits)	1.4.0 to 1.8.15
netlogon.max_audit_event_count	Max Audit Event Count	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.max_log_size	Max Log Size	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.max_size	Max Size	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.max_working_set_size	Max Working Set Size	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.membershipsdomainscount	Membership Domains count	Unsigned integer (32 bits)	3.4.0 to 4.6.0
netlogon.min_passwd_len	Min Password Len	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.min_working_set_size	Min Working Set Size	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.modify_count	Modify Count	Unsigned integer (64 bits)	1.0.0 to 4.6.0
netlogon.neg_flags	Negotiation options	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.new_password	New Password	Character string	4.6.0
netlogon.next_reference	Next Reference	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.nonpaged_pool_limit	Non-Paged Pool Limit	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.nt_chal_resp	NT Chal resp	Byte sequence	1.0.0 to 1.8.15, 3.4.0 to 4.6.0
netlogon.nt_owf_pwd	NT Pwd	Byte sequence	1.0.0 to 4.6.0
netlogon.nt_pwd_present	NT PWD Present	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.num_dc	Num DCs	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.num_deltas	Num Deltas	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.num_other_groups	Num Other Groups	Unsigned integer (32 bits)	1.0.0 to 1.2.18
netlogon.num_rids	Num RIDs	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.num_sid	Num Extra SID	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.num_trusts	Num Trusts	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.oem_info	OEM Info	Character string	1.0.0 to 4.6.0
netlogon.opnum	Operation	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.os.version	OS version	Character string	1.4.0 to 4.6.0
netlogon.pac.data	Pac Data	Byte sequence	1.0.0 to 1.8.15
netlogon.pac.size	Pac Size	Unsigned integer (32 bits)	1.0.0 to 1.8.15
netlogon.page_file_limit	Page File Limit	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.paged_pool_limit	Paged Pool Limit	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.param_ctrl	Param Ctrl	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.parameters	Parameters	Character string	1.0.0 to 4.6.0
netlogon.parent_index	Parent Index	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.passwd_history_len	Passwd History Len	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.password_version.number	PasswordVersionNumber	Unsigned integer (32 bits)	4.6.0
netlogon.password_version.present	PasswordVersionPresent	Unsigned integer (32 bits)	4.6.0
netlogon.password_version.reservedfield	ReservedField	Unsigned integer (32 bits)	4.6.0
netlogon.pdc_connection_status	PDC Connection Status	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.principal	Principal	Character string	1.0.0 to 1.8.15
netlogon.priv	Priv	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.privilege_control	Privilege Control	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.privilege_entries	Privilege Entries	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.privilege_name	Privilege Name	Character string	1.0.0 to 4.6.0
netlogon.profile_path	Profile Path	Character string	1.0.0 to 4.6.0
netlogon.pwd_age	PWD Age	Time offset	1.0.0 to 4.6.0
netlogon.pwd_can_change_time	PWD Can Change	Date and time	1.0.0 to 4.6.0
netlogon.pwd_expired	PWD Expired	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.pwd_last_set_time	PWD Last Set	Date and time	1.0.0 to 4.6.0
netlogon.pwd_must_change_time	PWD Must Change	Date and time	1.0.0 to 4.6.0
netlogon.rc	Return code	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.reference	Reference	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.reserved	Reserved	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.resourcegroupcount	ResourceGroup count	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.restart_state	Restart State	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.rid	User RID	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.s4u2proxytarget	S4U2proxyTarget	Character string	1.8.0 to 4.6.0
netlogon.sec_chan_type	Sec Chan Type	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.secchan.bind.unknown1	Unknown1	Unsigned integer (32 bits)	1.0.0 to 1.2.18
netlogon.secchan.bind.unknown2	Unknown2	Unsigned integer (32 bits)	1.0.0 to 1.2.18
netlogon.secchan.bind_ack.unknown1	Unknown1	Unsigned integer (32 bits)	1.0.0 to 1.2.18
netlogon.secchan.bind_ack.unknown2	Unknown2	Unsigned integer (32 bits)	1.0.0 to 1.2.18
netlogon.secchan.bind_ack.unknown3	Unknown3	Unsigned integer (32 bits)	1.0.0 to 1.2.18
netlogon.secchan.digest	Packet Digest	Byte sequence	1.0.0 to 4.6.0
netlogon.secchan.domain	Domain	Character string	1.0.0 to 1.2.18
netlogon.secchan.flags	Flags	Byte sequence	1.4.0 to 4.6.0
netlogon.secchan.host	Host	Character string	1.0.0 to 1.2.18
netlogon.secchan.nl_auth_message.dns_domain	DNS Domain	Character string	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.dns_host	DNS Host	Character string	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_flags	Message Flags	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_flags.dns_domain	DNS Domain	Boolean	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_flags.dns_host	DNS Host	Boolean	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_flags.nb_domain	NetBios Domain	Boolean	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_flags.nb_host	NetBios Host	Boolean	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_flags.nb_host_utf8	NetBios Host(UTF8)	Boolean	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.message_type	Message Type	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.nb_domain	NetBios Domain	Character string	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.nb_host	NetBios Host	Character string	1.4.0 to 4.6.0
netlogon.secchan.nl_auth_message.nb_host_utf8	NetBios Host(UTF8)	Character string	1.4.0 to 4.6.0
netlogon.secchan.nonce	Nonce	Byte sequence	1.0.0 to 4.6.0
netlogon.secchan.sealalg	Seal algorithm	Unsigned integer (16 bits)	1.4.0 to 4.6.0
netlogon.secchan.seq	Sequence No	Byte sequence	1.0.0 to 4.6.0
netlogon.secchan.sig	Signature	Byte sequence	1.0.0 to 1.2.18
netlogon.secchan.signalg	Sign algorithm	Unsigned integer (16 bits)	1.4.0 to 4.6.0
netlogon.secchan.verifier	Secure Channel Verifier	Label	1.0.0 to 4.6.0
netlogon.security_information	Security Information	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.sendtosam.opaquebuffer.dec	Decrypted	Byte sequence	4.4.0 to 4.6.0
netlogon.sendtosam.opaquebuffer.enc	Encrypted	Byte sequence	4.4.0 to 4.6.0
netlogon.sendtosam.opaquebuffer.size	OpaqueBufferSize	Unsigned integer (32 bits)	4.4.0 to 4.6.0
netlogon.sensitive_data	Data	Byte sequence	1.0.0 to 4.6.0
netlogon.sensitive_data_flag	Sensitive Data	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.sensitive_data_len	Length	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.serial_number	Serial Number	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.server	Server	Character string	1.0.0 to 4.6.0
netlogon.serverchallenge	Server Challenge	Byte sequence	1.4.0 to 4.6.0
netlogon.servercred	Server Credential	Byte sequence	1.4.0 to 4.6.0
netlogon.serverrid	Account RID	Unsigned integer (32 bits)	1.4.0 to 4.6.0
netlogon.sessionkey	SessionKey	Label	3.4.0 to 4.6.0
netlogon.site_name	Site Name	Character string	1.0.0 to 4.6.0
netlogon.sync_context	Sync Context	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.system_flags	System Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.tc_connection_status	TC Connection Status	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.ticket_logon_additional_ticket_size	Additional Ticket Size	Unsigned integer (32 bits)	4.6.0
netlogon.ticket_logon_claims	Claims	Byte sequence	4.6.0
netlogon.ticket_logon_device_claims_size	Device Claims Size	Unsigned integer (32 bits)	4.6.0
netlogon.ticket_logon_kerberos_status	Kerberos NTSTATUS	Unsigned integer (32 bits)	4.6.0
netlogon.ticket_logon_netlogon_status	Netlogon NTSTATUS	Unsigned integer (32 bits)	4.6.0
netlogon.ticket_logon_options	Request Options	Unsigned integer (64 bits)	4.6.0
netlogon.ticket_logon_options.no_authorization_data	No Authorization Data	Boolean	4.6.0
netlogon.ticket_logon_options.remove_resource_groups	Remove Resource Groups	Boolean	4.6.0
netlogon.ticket_logon_options.skip_a2a_checks	Skip A2A Checks	Boolean	4.6.0
netlogon.ticket_logon_options.skip_namespace_filter	Skip Namespace Filtering	Boolean	4.6.0
netlogon.ticket_logon_options.skip_pac_signatures	Skip PAC Signatures	Boolean	4.6.0
netlogon.ticket_logon_options.skip_resource_groups	Skip Resource Groups	Boolean	4.6.0
netlogon.ticket_logon_options.skip_sid_filter	Skip SID Filtering	Boolean	4.6.0
netlogon.ticket_logon_results	Results	Unsigned integer (64 bits)	4.6.0
netlogon.ticket_logon_results.compound_source	Compound Source	Boolean	4.6.0
netlogon.ticket_logon_results.device_namespace_failed	Device Namespace Failed	Boolean	4.6.0
netlogon.ticket_logon_results.device_sids_failed	Device SIDS Failed	Boolean	4.6.0
netlogon.ticket_logon_results.device_sids_filtered	Device SIDS Filtered	Boolean	4.6.0
netlogon.ticket_logon_results.failed_logon	Failed_Logon	Boolean	4.6.0
netlogon.ticket_logon_results.full_signature_present	Full Signature Present	Boolean	4.6.0
netlogon.ticket_logon_results.pac_validation_failed	PAC Validation Failed	Boolean	4.6.0
netlogon.ticket_logon_results.resource_groups_removed	Resource Groups Removed	Boolean	4.6.0
netlogon.ticket_logon_results.source_device_claims	Source Device Claims	Boolean	4.6.0
netlogon.ticket_logon_results.source_user_claims	Source User Claims	Boolean	4.6.0
netlogon.ticket_logon_results.ticket_decryption_failed	Ticket Decryption Failed	Boolean	4.6.0
netlogon.ticket_logon_results.user_failed_a2a	User Failed A2A	Boolean	4.6.0
netlogon.ticket_logon_results.user_namespace_failed	User Namespace Failed	Boolean	4.6.0
netlogon.ticket_logon_results.user_sids_failed	User SIDS Failed	Boolean	4.6.0
netlogon.ticket_logon_results.user_sids_filtered	User SIDS Filtered	Boolean	4.6.0
netlogon.ticket_logon_service_ticket_size	Service Ticket Size	Unsigned integer (32 bits)	4.6.0
netlogon.ticket_logon_source_of_status	Source Of Status	Label	4.6.0
netlogon.ticket_logon_user_claims_size	User Claims Size	Unsigned integer (32 bits)	4.6.0
netlogon.time_created	Time Created	Unsigned integer (32 bits)	2.0.0 to 4.6.0
netlogon.time_limit	Time Limit	Time offset	1.0.0 to 4.6.0
netlogon.timestamp	Timestamp	Date and time	1.0.0 to 4.6.0
netlogon.transited_list_size	TransitedListSize	Unsigned integer (32 bits)	1.8.0 to 4.6.0
netlogon.transited_service	Transited Service	Character string	1.8.0 to 4.6.0
netlogon.trust.attribs.cross_organization	Cross Organization	Boolean	1.0.0 to 4.6.0
netlogon.trust.attribs.forest_transitive	Forest Transitive	Boolean	1.0.0 to 4.6.0
netlogon.trust.attribs.non_transitive	Non Transitive	Boolean	1.0.0 to 4.6.0
netlogon.trust.attribs.quarantined_domain	Quarantined Domain	Boolean	1.0.0 to 4.6.0
netlogon.trust.attribs.treat_as_external	Treat As External	Boolean	1.0.0 to 4.6.0
netlogon.trust.attribs.uplevel_only	Uplevel Only	Boolean	1.0.0 to 4.6.0
netlogon.trust.attribs.within_forest	Within Forest	Boolean	1.0.0 to 4.6.0
netlogon.trust.extension	Trust extension	Character string	3.4.0 to 4.6.0
netlogon.trust.extension.maxcount	Max Count	Unsigned integer (32 bits)	3.4.0 to 4.6.0
netlogon.trust.extension_length	Length	Unsigned integer (32 bits)	3.4.0 to 4.6.0
netlogon.trust.extension_offset	Offset	Unsigned integer (32 bits)	3.4.0 to 4.6.0
netlogon.trust.extention	Trust extension	Character string	1.4.0 to 3.2.18
netlogon.trust.extention.maxcount	Max Count	Unsigned integer (32 bits)	1.4.0 to 3.2.18
netlogon.trust.extention_length	Length	Unsigned integer (32 bits)	1.4.0 to 3.2.18
netlogon.trust.extention_offset	Offset	Unsigned integer (32 bits)	1.4.0 to 3.2.18
netlogon.trust.flags.in_forest	In Forest	Boolean	1.0.0 to 4.6.0
netlogon.trust.flags.inbound	Inbound Trust	Boolean	1.0.0 to 4.6.0
netlogon.trust.flags.native_mode	Native Mode	Boolean	1.0.0 to 4.6.0
netlogon.trust.flags.outbound	Outbound Trust	Boolean	1.0.0 to 4.6.0
netlogon.trust.flags.primary	Primary	Boolean	1.0.0 to 4.6.0
netlogon.trust.flags.tree_root	Tree Root	Boolean	1.0.0 to 4.6.0
netlogon.trust_attribs	Trust Attributes	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.trust_flags	Trust Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.trust_type	Trust Type	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.trusted_dc	Trusted DC	Character string	1.0.0 to 4.6.0
netlogon.TrustedDomainName	TrustedDomainName	Character string	1.6.0 to 4.6.0
netlogon.unknown.char	Unknown char	Unsigned integer (8 bits)	1.0.0 to 4.6.0
netlogon.unknown.long	Unknown long	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.unknown.short	Unknown short	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.unknown_string	Unknown string	Character string	1.0.0 to 4.6.0
netlogon.user.account_control.account_auto_locked	Account Auto Locked	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.account_disabled	Account Disabled	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.dont_expire_password	Don't Expire Password	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.dont_require_preauth	Don't Require PreAuth	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.encrypted_text_password_allowed	Encrypted Text Password Allowed	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.home_directory_required	Home Directory Required	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.interdomain_trust_account	Interdomain trust Account	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.mns_logon_account	MNS Logon Account	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.normal_account	Normal Account	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.not_delegated	Not Delegated	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.password_not_required	Password Not Required	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.server_trust_account	Server Trust Account	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.smartcard_required	SmartCard Required	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.temp_duplicate_account	Temp Duplicate Account	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.trusted_for_delegation	Trusted For Delegation	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.use_des_key_only	Use DES Key Only	Boolean	1.0.0 to 4.6.0
netlogon.user.account_control.workstation_trust_account	Workstation Trust Account	Boolean	1.0.0 to 4.6.0
netlogon.user.flags.extra_sids	Extra SIDs	Boolean	1.0.0 to 4.6.0
netlogon.user.flags.resource_groups	Resource Groups	Boolean	1.0.0 to 4.6.0
netlogon.user_account_control	User Account Control	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.user_flags	User Flags	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.user_session_key	User Session Key	Byte sequence	1.0.0 to 4.6.0
netlogon.UserName	UserName	Character string	1.6.0 to 4.6.0
netlogon.validation_level	Validation Level	Unsigned integer (16 bits)	1.0.0 to 4.6.0
netlogon.werr.rc	WERR error code	Unsigned integer (32 bits)	1.0.0 to 4.6.0
netlogon.wkst.fqdn	Wkst FQDN	Character string	1.0.0 to 4.6.0
netlogon.wkst.name	Wkst Name	Character string	1.0.0 to 4.6.0
netlogon.wkst.os	Wkst OS	Character string	1.0.0 to 4.6.0
netlogon.wkst.site_name	Wkst Site Name	Character string	1.0.0 to 4.6.0
netlogon.wksts	Workstations	Character string	1.0.0 to 4.6.0
netlogon.workstation.flags	Workstation Flags	Unsigned integer (32 bits)	1.4.0 to 4.6.0
ntlmssp.neg_flags.na1	Account lockout	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na10	BDC handling Changelogs	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na100	Refusal of password change	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na1000	Avoid replication account database	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na10000	DNS trusts supported	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na100000	NO NT4 emulation	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na1000000	AES supported	Boolean	4.6.0
ntlmssp.neg_flags.na2	NT3.5 BDC continuous update	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na20	Restarting full DC sync	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na200	SendToSam	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na2000	Avoid replication Auth database	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na20000	ServerPasswordSet2 supported	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na200000	RODC pass-through	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na2000000	Authenticated RPC via lsass supported	Boolean	4.2.0 to 4.6.0
ntlmssp.neg_flags.na4	RC4 encryption	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na40	Handle multiple SIDs	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na400	Generic pass-through	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na4000	Strong key	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na40000	GetDomainInfo supported	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na400000	AES & SHA2 supported	Boolean	1.4.0 to 3.2.18
ntlmssp.neg_flags.na4000000	Authenticated RPC supported	Boolean	4.2.0 to 4.6.0
ntlmssp.neg_flags.na8	Promotion count(deprecated)	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na80	DatabaseRedo call	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na800	Concurrent RPC	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na8000	Transitive trusts	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na80000	Cross forest trust	Boolean	1.4.0 to 4.6.0
ntlmssp.neg_flags.na800000	Not used 8000000	Boolean	1.4.0 to 1.8.15
ntlmssp.neg_flags.na8000000	Authenticated RPC supported	Boolean	1.4.0 to 4.0.17
ntlmssp.neg_flags.supports_kerberos_auth	Supports Kerberos Auth	Boolean	4.4.0 to 4.6.0