Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Microsoft Network Logon
Protocol field name: rpc_netlogon
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| netlogon.acct.expiry_time | Date and time | Acct Expiry Time | 1.0.0 to 1.6.5 |
| netlogon.acct_desc | Character string | Acct Desc | 1.0.0 to 1.6.5 |
| netlogon.acct_name | Character string | Acct Name | 1.0.0 to 1.6.5 |
| netlogon.alias_name | Character string | Alias Name | 1.0.0 to 1.6.5 |
| netlogon.alias_rid | Unsigned integer, 4 bytes | Alias RID | 1.0.0 to 1.6.5 |
| netlogon.attrs | Unsigned integer, 4 bytes | Attributes | 1.0.0 to 1.6.5 |
| netlogon.audit_retention_period | Time offset | Audit Retention Period | 1.0.0 to 1.6.5 |
| netlogon.auditing_mode | Unsigned integer, 1 byte | Auditing Mode | 1.0.0 to 1.6.5 |
| netlogon.auth.data | Sequence of bytes | Auth Data | 1.0.0 to 1.6.5 |
| netlogon.auth.size | Unsigned integer, 4 bytes | Auth Size | 1.0.0 to 1.6.5 |
| netlogon.auth_flags | Unsigned integer, 4 bytes | Auth Flags | 1.0.0 to 1.6.5 |
| netlogon.authoritative | Unsigned integer, 1 byte | Authoritative | 1.0.0 to 1.6.5 |
| netlogon.bad_pw_count | Unsigned integer, 4 bytes | Bad PW Count | 1.0.0 to 1.6.5 |
| netlogon.bad_pw_count16 | Unsigned integer, 2 bytes | Bad PW Count | 1.0.0 to 1.6.5 |
| netlogon.blob | Sequence of bytes | BLOB | 1.0.0 to 1.6.5 |
| netlogon.blob.size | Unsigned integer, 4 bytes | Size | 1.0.0 to 1.6.5 |
| netlogon.challenge | Sequence of bytes | Challenge | 1.0.0 to 1.6.5 |
| netlogon.cipher_current_data | Sequence of bytes | Cipher Current Data | 1.0.0 to 1.6.5 |
| netlogon.cipher_current_set_time | Date and time | Cipher Current Set Time | 1.0.0 to 1.6.5 |
| netlogon.cipher_len | Unsigned integer, 4 bytes | Cipher Len | 1.0.0 to 1.6.5 |
| netlogon.cipher_maxlen | Unsigned integer, 4 bytes | Cipher Max Len | 1.0.0 to 1.6.5 |
| netlogon.cipher_old_data | Sequence of bytes | Cipher Old Data | 1.0.0 to 1.6.5 |
| netlogon.cipher_old_set_time | Date and time | Cipher Old Set Time | 1.0.0 to 1.6.5 |
| netlogon.client.site_name | Character string | Client Site Name | 1.0.0 to 1.6.5 |
| netlogon.client_dns_name | Character string | Client DNS Name | 1.4.0 to 1.6.5 |
| netlogon.clientchallenge | Sequence of bytes | Client Challenge | 1.4.0 to 1.6.5 |
| netlogon.clientcred | Sequence of bytes | Client Credential | 1.4.0 to 1.6.5 |
| netlogon.code | Unsigned integer, 4 bytes | Code | 1.0.0 to 1.6.5 |
| netlogon.codepage | Unsigned integer, 2 bytes | Codepage | 1.0.0 to 1.6.5 |
| netlogon.comment | Character string | Comment | 1.0.0 to 1.6.5 |
| netlogon.computer_name | Character string | Computer Name | 1.0.0 to 1.6.5 |
| netlogon.count | Unsigned integer, 4 bytes | Count | 1.0.0 to 1.6.5 |
| netlogon.country | Unsigned integer, 2 bytes | Country | 1.0.0 to 1.6.5 |
| netlogon.credential | Sequence of bytes | Credential | 1.0.0 to 1.6.5 |
| netlogon.data.length | Unsigned integer, 4 bytes | Length of Data | 1.4.0 to 1.6.5 |
| netlogon.data.package_name | Character string | SSP Package Name | 1.4.0 to 1.6.5 |
| netlogon.database_id | Unsigned integer, 4 bytes | Database Id | 1.0.0 to 1.6.5 |
| netlogon.db_create_time | Date and time | DB Create Time | 1.0.0 to 1.6.5 |
| netlogon.db_modify_time | Date and time | DB Modify Time | 1.0.0 to 1.6.5 |
| netlogon.dc.address | Character string | DC Address | 1.0.0 to 1.6.5 |
| netlogon.dc.address_type | Unsigned integer, 4 bytes | DC Address Type | 1.0.0 to 1.6.5 |
| netlogon.dc.flags | Unsigned integer, 4 bytes | Domain Controller Flags | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.closest | Boolean | Closest | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.dns_controller | Boolean | DNS Controller | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.dns_domain | Boolean | DNS Domain | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.dns_forest | Boolean | DNS Forest | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.ds | Boolean | DS | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.gc | Boolean | GC | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.good_timeserv | Boolean | Good Timeserv | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.kdc | Boolean | KDC | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.ldap | Boolean | LDAP | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.ndnc | Boolean | NDNC | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.pdc | Boolean | PDC | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.timeserv | Boolean | Timeserv | 1.0.0 to 1.6.5 |
| netlogon.dc.flags.writable | Boolean | Writable | 1.0.0 to 1.6.5 |
| netlogon.dc.name | Character string | DC Name | 1.0.0 to 1.6.5 |
| netlogon.dc.site_name | Character string | DC Site Name | 1.0.0 to 1.6.5 |
| netlogon.delta_type | Unsigned integer, 2 bytes | Delta Type | 1.0.0 to 1.6.5 |
| netlogon.dir_drive | Character string | Dir Drive | 1.0.0 to 1.6.5 |
| netlogon.dns.forest_name | Character string | DNS Forest Name | 1.0.0 to 1.6.5 |
| netlogon.dns_domain | Character string | DNS Domain | 1.0.0 to 1.6.5 |
| netlogon.dns_host | Character string | DNS Host | 1.0.0 to 1.6.5 |
| netlogon.dnsdomaininfo | Label | DnsDomainInfo | 1.2.0 to 1.6.5 |
| netlogon.domain | Character string | Domain | 1.0.0 to 1.6.5 |
| netlogon.domain_create_time | Date and time | Domain Create Time | 1.0.0 to 1.6.5 |
| netlogon.domain_modify_time | Date and time | Domain Modify Time | 1.0.0 to 1.6.5 |
| netlogon.dos.rc | Unsigned integer, 4 bytes | DOS error code | 1.0.0 to 1.6.5 |
| netlogon.downlevel_domain | Character string | Downlevel Domain | 1.0.0 to 1.6.5 |
| netlogon.dummy | Character string | Dummy | 1.0.0 to 1.6.5 |
| netlogon.dummy.long1 | Unsigned integer, 4 bytes | Dummy1 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long10 | Unsigned integer, 4 bytes | Dummy10 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long2 | Unsigned integer, 4 bytes | Dummy2 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long3 | Unsigned integer, 4 bytes | Dummy3 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long4 | Unsigned integer, 4 bytes | Dummy4 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long5 | Unsigned integer, 4 bytes | Dummy5 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long6 | Unsigned integer, 4 bytes | Dummy6 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long7 | Unsigned integer, 4 bytes | Dummy7 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long8 | Unsigned integer, 4 bytes | Dummy8 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy.long9 | Unsigned integer, 4 bytes | Dummy9 Long | 1.4.0 to 1.6.5 |
| netlogon.dummy_string | Character string | Dummy String | 1.4.0 to 1.6.5 |
| netlogon.encryption.types | Unsigned integer, 4 bytes | Supported Encryption Types | 1.4.0 to 1.6.5 |
| netlogon.entries | Unsigned integer, 4 bytes | Entries | 1.0.0 to 1.6.5 |
| netlogon.event_audit_option | Unsigned integer, 4 bytes | Event Audit Option | 1.0.0 to 1.6.5 |
| netlogon.extra.flags.dc_firsthop | Boolean | DC at the end of the first hop of cross forest | 1.4.0 to 1.6.5 |
| netlogon.extra.flags.rodc_ntlm | Boolean | Request is a NTLM auth passed by a RODC | 1.4.0 to 1.6.5 |
| netlogon.extra.flags.rodc_to_dc | Boolean | Request from a RODC to a DC from another domain | 1.4.0 to 1.6.5 |
| netlogon.extra.flags.rootdc | Boolean | Request passed to DC of root forest | 1.4.0 to 1.6.5 |
| netlogon.extra_flags | Unsigned integer, 4 bytes | Extra Flags | 1.4.0 to 1.6.5 |
| netlogon.flags | Unsigned integer, 4 bytes | Flags | 1.0.0 to 1.6.5 |
| netlogon.full_name | Character string | Full Name | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags | Unsigned integer, 4 bytes | Flags | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.avoid_self | Boolean | Avoid Self | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.background_only | Boolean | Background Only | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.ds_preferred | Boolean | DS Preferred | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.ds_required | Boolean | DS Required | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.force_rediscovery | Boolean | Force Rediscovery | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.gc_server_required | Boolean | GC Required | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.good_timeserv_preferred | Boolean | Timeserv Preferred | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.ip_required | Boolean | IP Required | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.is_dns_name | Boolean | Is DNS Name | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.is_flat_name | Boolean | Is Flat Name | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.kdc_required | Boolean | KDC Required | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.only_ldap_needed | Boolean | Only LDAP Needed | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.pdc_required | Boolean | PDC Required | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.return_dns_name | Boolean | Return DNS Name | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.return_flat_name | Boolean | Return Flat Name | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.timeserv_required | Boolean | Timeserv Required | 1.0.0 to 1.6.5 |
| netlogon.get_dcname.request.flags.writable_required | Boolean | Writable Required | 1.0.0 to 1.6.5 |
| netlogon.group_desc | Character string | Group Desc | 1.0.0 to 1.6.5 |
| netlogon.group_name | Character string | Group Name | 1.0.0 to 1.6.5 |
| netlogon.group_rid | Unsigned integer, 4 bytes | Group RID | 1.0.0 to 1.6.5 |
| netlogon.groups.attrs.enabled | Boolean | Enabled | 1.0.0 to 1.6.5 |
| netlogon.groups.attrs.enabled_by_default | Boolean | Enabled By Default | 1.0.0 to 1.6.5 |
| netlogon.groups.attrs.mandatory | Boolean | Mandatory | 1.0.0 to 1.6.5 |
| netlogon.handle | Character string | Handle | 1.0.0 to 1.6.5 |
| netlogon.home_dir | Character string | Home Dir | 1.0.0 to 1.6.5 |
| netlogon.kickoff_time | Date and time | Kickoff Time | 1.0.0 to 1.6.5 |
| netlogon.last_logoff_time | Date and time | Last Logoff Time | 1.0.0 to 1.6.5 |
| netlogon.len | Unsigned integer, 4 bytes | Len | 1.0.0 to 1.6.5 |
| netlogon.level | Unsigned integer, 4 bytes | Level | 1.0.0 to 1.6.5 |
| netlogon.level16 | Unsigned integer, 2 bytes | Level | 1.0.0 to 1.6.5 |
| netlogon.lm_chal_resp | Sequence of bytes | LM Chal resp | 1.0.0 to 1.6.5 |
| netlogon.lm_owf_pwd | Sequence of bytes | LM Pwd | 1.0.0 to 1.6.5 |
| netlogon.lm_owf_pwd.encrypted | Sequence of bytes | Encrypted LM Pwd | 1.0.0 to 1.6.5 |
| netlogon.lm_pwd_present | Unsigned integer, 1 byte | LM PWD Present | 1.0.0 to 1.6.5 |
| netlogon.logoff_time | Date and time | Logoff Time | 1.0.0 to 1.6.5 |
| netlogon.logon.dnslogondomainname | Character string | DNS Logon Domain name | 1.4.0 to 1.6.5 |
| netlogon.logon.upn | Character string | UPN | 1.4.0 to 1.6.5 |
| netlogon.logon_attempts | Unsigned integer, 4 bytes | Logon Attempts | 1.0.0 to 1.6.5 |
| netlogon.logon_count | Unsigned integer, 4 bytes | Logon Count | 1.0.0 to 1.6.5 |
| netlogon.logon_count16 | Unsigned integer, 2 bytes | Logon Count | 1.0.0 to 1.6.5 |
| netlogon.logon_id | Unsigned integer, 8 bytes | Logon ID | 1.0.0 to 1.6.5 |
| netlogon.logon_script | Character string | Logon Script | 1.0.0 to 1.6.5 |
| netlogon.logon_time | Date and time | Logon Time | 1.0.0 to 1.6.5 |
| netlogon.lsapolicy.length | Unsigned integer, 4 bytes | Length | 1.4.0 to 1.6.5 |
| netlogon.lsapolicy.pointer | Sequence of bytes | Pointer | 1.4.0 to 1.6.5 |
| netlogon.lsapolicy.referentID | Unsigned integer, 4 bytes | Referent ID | 1.4.0 to 1.6.5 |
| netlogon.max_audit_event_count | Unsigned integer, 4 bytes | Max Audit Event Count | 1.0.0 to 1.6.5 |
| netlogon.max_log_size | Unsigned integer, 4 bytes | Max Log Size | 1.0.0 to 1.6.5 |
| netlogon.max_size | Unsigned integer, 4 bytes | Max Size | 1.0.0 to 1.6.5 |
| netlogon.max_working_set_size | Unsigned integer, 4 bytes | Max Working Set Size | 1.0.0 to 1.6.5 |
| netlogon.min_passwd_len | Unsigned integer, 2 bytes | Min Password Len | 1.0.0 to 1.6.5 |
| netlogon.min_working_set_size | Unsigned integer, 4 bytes | Min Working Set Size | 1.0.0 to 1.6.5 |
| netlogon.modify_count | Unsigned integer, 8 bytes | Modify Count | 1.0.0 to 1.6.5 |
| netlogon.neg_flags | Unsigned integer, 4 bytes | Negotiation options | 1.0.0 to 1.6.5 |
| netlogon.next_reference | Unsigned integer, 4 bytes | Next Reference | 1.0.0 to 1.6.5 |
| netlogon.nonpaged_pool_limit | Unsigned integer, 4 bytes | Non-Paged Pool Limit | 1.0.0 to 1.6.5 |
| netlogon.nt_chal_resp | Sequence of bytes | NT Chal resp | 1.0.0 to 1.6.5 |
| netlogon.nt_owf_pwd | Sequence of bytes | NT Pwd | 1.0.0 to 1.6.5 |
| netlogon.nt_pwd_present | Unsigned integer, 1 byte | NT PWD Present | 1.0.0 to 1.6.5 |
| netlogon.num_dc | Unsigned integer, 4 bytes | Num DCs | 1.0.0 to 1.6.5 |
| netlogon.num_deltas | Unsigned integer, 4 bytes | Num Deltas | 1.0.0 to 1.6.5 |
| netlogon.num_other_groups | Unsigned integer, 4 bytes | Num Other Groups | 1.0.0 to 1.2.18 |
| netlogon.num_rids | Unsigned integer, 4 bytes | Num RIDs | 1.0.0 to 1.6.5 |
| netlogon.num_sid | Unsigned integer, 4 bytes | Num Extra SID | 1.4.0 to 1.6.5 |
| netlogon.num_trusts | Unsigned integer, 4 bytes | Num Trusts | 1.0.0 to 1.6.5 |
| netlogon.oem_info | Character string | OEM Info | 1.0.0 to 1.6.5 |
| netlogon.opnum | Unsigned integer, 2 bytes | Operation | 1.0.0 to 1.6.5 |
| netlogon.os.version | Character string | OS version | 1.4.0 to 1.6.5 |
| netlogon.pac.data | Sequence of bytes | Pac Data | 1.0.0 to 1.6.5 |
| netlogon.pac.size | Unsigned integer, 4 bytes | Pac Size | 1.0.0 to 1.6.5 |
| netlogon.page_file_limit | Unsigned integer, 4 bytes | Page File Limit | 1.0.0 to 1.6.5 |
| netlogon.paged_pool_limit | Unsigned integer, 4 bytes | Paged Pool Limit | 1.0.0 to 1.6.5 |
| netlogon.param_ctrl | Unsigned integer, 4 bytes | Param Ctrl | 1.0.0 to 1.6.5 |
| netlogon.parameters | Character string | Parameters | 1.0.0 to 1.6.5 |
| netlogon.parent_index | Unsigned integer, 4 bytes | Parent Index | 1.0.0 to 1.6.5 |
| netlogon.passwd_history_len | Unsigned integer, 2 bytes | Passwd History Len | 1.0.0 to 1.6.5 |
| netlogon.pdc_connection_status | Unsigned integer, 4 bytes | PDC Connection Status | 1.0.0 to 1.6.5 |
| netlogon.principal | Character string | Principal | 1.0.0 to 1.6.5 |
| netlogon.priv | Unsigned integer, 4 bytes | Priv | 1.0.0 to 1.6.5 |
| netlogon.privilege_control | Unsigned integer, 4 bytes | Privilege Control | 1.0.0 to 1.6.5 |
| netlogon.privilege_entries | Unsigned integer, 4 bytes | Privilege Entries | 1.0.0 to 1.6.5 |
| netlogon.privilege_name | Character string | Privilege Name | 1.0.0 to 1.6.5 |
| netlogon.profile_path | Character string | Profile Path | 1.0.0 to 1.6.5 |
| netlogon.pwd_age | Time offset | PWD Age | 1.0.0 to 1.6.5 |
| netlogon.pwd_can_change_time | Date and time | PWD Can Change | 1.0.0 to 1.6.5 |
| netlogon.pwd_expired | Unsigned integer, 1 byte | PWD Expired | 1.0.0 to 1.6.5 |
| netlogon.pwd_last_set_time | Date and time | PWD Last Set | 1.0.0 to 1.6.5 |
| netlogon.pwd_must_change_time | Date and time | PWD Must Change | 1.0.0 to 1.6.5 |
| netlogon.rc | Unsigned integer, 4 bytes | Return code | 1.0.0 to 1.6.5 |
| netlogon.reference | Unsigned integer, 4 bytes | Reference | 1.0.0 to 1.6.5 |
| netlogon.reserved | Unsigned integer, 4 bytes | Reserved | 1.0.0 to 1.6.5 |
| netlogon.resourcegroupcount | Unsigned integer, 4 bytes | ResourceGroup count | 1.0.0 to 1.6.5 |
| netlogon.restart_state | Unsigned integer, 2 bytes | Restart State | 1.0.0 to 1.6.5 |
| netlogon.rid | Unsigned integer, 4 bytes | User RID | 1.0.0 to 1.6.5 |
| netlogon.sec_chan_type | Unsigned integer, 2 bytes | Sec Chan Type | 1.0.0 to 1.6.5 |
| netlogon.secchan.bind.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind_ack.unknown1 | Unsigned integer, 4 bytes | Unknown1 | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind_ack.unknown2 | Unsigned integer, 4 bytes | Unknown2 | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind_ack.unknown3 | Unsigned integer, 4 bytes | Unknown3 | 1.0.0 to 1.2.18 |
| netlogon.secchan.digest | Sequence of bytes | Packet Digest | 1.0.0 to 1.6.5 |
| netlogon.secchan.domain | Character string | Domain | 1.0.0 to 1.2.18 |
| netlogon.secchan.flags | Sequence of bytes | Flags | 1.4.0 to 1.6.5 |
| netlogon.secchan.host | Character string | Host | 1.0.0 to 1.2.18 |
| netlogon.secchan.nl_auth_message.dns_domain | Character string | DNS Domain | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.dns_host | Character string | DNS Host | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_flags | Unsigned integer, 4 bytes | Message Flags | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_flags.dns_domain | Boolean | DNS Domain | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_flags.dns_host | Boolean | DNS Host | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_flags.nb_domain | Boolean | NetBios Domain | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_flags.nb_host | Boolean | NetBios Host | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_flags.nb_host_utf8 | Boolean | NetBios Host(UTF8) | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.message_type | Unsigned integer, 4 bytes | Message Type | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.nb_domain | Character string | NetBios Domain | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.nb_host | Character string | NetBios Host | 1.4.0 to 1.6.5 |
| netlogon.secchan.nl_auth_message.nb_host_utf8 | Character string | NetBios Host(UTF8) | 1.4.0 to 1.6.5 |
| netlogon.secchan.nonce | Sequence of bytes | Nonce | 1.0.0 to 1.6.5 |
| netlogon.secchan.sealalg | Unsigned integer, 2 bytes | Seal algorithm | 1.4.0 to 1.6.5 |
| netlogon.secchan.seq | Sequence of bytes | Sequence No | 1.0.0 to 1.6.5 |
| netlogon.secchan.sig | Sequence of bytes | Signature | 1.0.0 to 1.2.18 |
| netlogon.secchan.signalg | Unsigned integer, 2 bytes | Sign algorithm | 1.4.0 to 1.6.5 |
| netlogon.secchan.verifier | Label | Secure Channel Verifier | 1.0.0 to 1.6.5 |
| netlogon.security_information | Unsigned integer, 4 bytes | Security Information | 1.0.0 to 1.6.5 |
| netlogon.sensitive_data | Sequence of bytes | Data | 1.0.0 to 1.6.5 |
| netlogon.sensitive_data_flag | Unsigned integer, 1 byte | Sensitive Data | 1.0.0 to 1.6.5 |
| netlogon.sensitive_data_len | Unsigned integer, 4 bytes | Length | 1.0.0 to 1.6.5 |
| netlogon.serial_number | Unsigned integer, 4 bytes | Serial Number | 1.0.0 to 1.6.5 |
| netlogon.server | Character string | Server | 1.0.0 to 1.6.5 |
| netlogon.serverchallenge | Sequence of bytes | Server Challenge | 1.4.0 to 1.6.5 |
| netlogon.servercred | Sequence of bytes | Server Credential | 1.4.0 to 1.6.5 |
| netlogon.serverrid | Unsigned integer, 4 bytes | Account RID | 1.4.0 to 1.6.5 |
| netlogon.site_name | Character string | Site Name | 1.0.0 to 1.6.5 |
| netlogon.sync_context | Unsigned integer, 4 bytes | Sync Context | 1.0.0 to 1.6.5 |
| netlogon.system_flags | Unsigned integer, 4 bytes | System Flags | 1.0.0 to 1.6.5 |
| netlogon.tc_connection_status | Unsigned integer, 4 bytes | TC Connection Status | 1.0.0 to 1.6.5 |
| netlogon.time_limit | Time offset | Time Limit | 1.0.0 to 1.6.5 |
| netlogon.timestamp | Date and time | Timestamp | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.cross_organization | Boolean | Cross Organization | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.forest_transitive | Boolean | Forest Transitive | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.non_transitive | Boolean | Non Transitive | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.quarantined_domain | Boolean | Quarantined Domain | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.treat_as_external | Boolean | Treat As External | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.uplevel_only | Boolean | Uplevel Only | 1.0.0 to 1.6.5 |
| netlogon.trust.attribs.within_forest | Boolean | Within Forest | 1.0.0 to 1.6.5 |
| netlogon.trust.extention | Character string | Trust extension | 1.4.0 to 1.6.5 |
| netlogon.trust.extention.maxcount | Unsigned integer, 4 bytes | Max Count | 1.4.0 to 1.6.5 |
| netlogon.trust.extention_length | Unsigned integer, 4 bytes | Length | 1.4.0 to 1.6.5 |
| netlogon.trust.extention_offset | Unsigned integer, 4 bytes | Offset | 1.4.0 to 1.6.5 |
| netlogon.trust.flags.in_forest | Boolean | In Forest | 1.0.0 to 1.6.5 |
| netlogon.trust.flags.inbound | Boolean | Inbound Trust | 1.0.0 to 1.6.5 |
| netlogon.trust.flags.native_mode | Boolean | Native Mode | 1.0.0 to 1.6.5 |
| netlogon.trust.flags.outbound | Boolean | Outbound Trust | 1.0.0 to 1.6.5 |
| netlogon.trust.flags.primary | Boolean | Primary | 1.0.0 to 1.6.5 |
| netlogon.trust.flags.tree_root | Boolean | Tree Root | 1.0.0 to 1.6.5 |
| netlogon.trust_attribs | Unsigned integer, 4 bytes | Trust Attributes | 1.0.0 to 1.6.5 |
| netlogon.trust_flags | Unsigned integer, 4 bytes | Trust Flags | 1.0.0 to 1.6.5 |
| netlogon.trust_type | Unsigned integer, 4 bytes | Trust Type | 1.0.0 to 1.6.5 |
| netlogon.trusted_dc | Character string | Trusted DC | 1.0.0 to 1.6.5 |
| netlogon.TrustedDomainName | Character string | TrustedDomainName | 1.6.0 to 1.6.5 |
| netlogon.unknown.char | Unsigned integer, 1 byte | Unknown char | 1.0.0 to 1.6.5 |
| netlogon.unknown.long | Unsigned integer, 4 bytes | Unknown long | 1.0.0 to 1.6.5 |
| netlogon.unknown.short | Unsigned integer, 2 bytes | Unknown short | 1.0.0 to 1.6.5 |
| netlogon.unknown_string | Character string | Unknown string | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.account_auto_locked | Boolean | Account Auto Locked | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.account_disabled | Boolean | Account Disabled | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.dont_expire_password | Boolean | Don't Expire Password | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.dont_require_preauth | Boolean | Don't Require PreAuth | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.encrypted_text_password_allowed | Boolean | Encrypted Text Password Allowed | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.home_directory_required | Boolean | Home Directory Required | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.interdomain_trust_account | Boolean | Interdomain trust Account | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.mns_logon_account | Boolean | MNS Logon Account | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.normal_account | Boolean | Normal Account | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.not_delegated | Boolean | Not Delegated | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.password_not_required | Boolean | Password Not Required | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.server_trust_account | Boolean | Server Trust Account | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.smartcard_required | Boolean | SmartCard Required | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.temp_duplicate_account | Boolean | Temp Duplicate Account | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.trusted_for_delegation | Boolean | Trusted For Delegation | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.use_des_key_only | Boolean | Use DES Key Only | 1.0.0 to 1.6.5 |
| netlogon.user.account_control.workstation_trust_account | Boolean | Workstation Trust Account | 1.0.0 to 1.6.5 |
| netlogon.user.flags.extra_sids | Boolean | Extra SIDs | 1.0.0 to 1.6.5 |
| netlogon.user.flags.resource_groups | Boolean | Resource Groups | 1.0.0 to 1.6.5 |
| netlogon.user_account_control | Unsigned integer, 4 bytes | User Account Control | 1.0.0 to 1.6.5 |
| netlogon.user_flags | Unsigned integer, 4 bytes | User Flags | 1.0.0 to 1.6.5 |
| netlogon.user_session_key | Sequence of bytes | User Session Key | 1.0.0 to 1.6.5 |
| netlogon.UserName | Character string | UserName | 1.6.0 to 1.6.5 |
| netlogon.validation_level | Unsigned integer, 2 bytes | Validation Level | 1.0.0 to 1.6.5 |
| netlogon.werr.rc | Unsigned integer, 4 bytes | WERR error code | 1.0.0 to 1.6.5 |
| netlogon.wkst.fqdn | Character string | Wkst FQDN | 1.0.0 to 1.6.5 |
| netlogon.wkst.name | Character string | Wkst Name | 1.0.0 to 1.6.5 |
| netlogon.wkst.os | Character string | Wkst OS | 1.0.0 to 1.6.5 |
| netlogon.wkst.site_name | Character string | Wkst Site Name | 1.0.0 to 1.6.5 |
| netlogon.wksts | Character string | Workstations | 1.0.0 to 1.6.5 |
| netlogon.workstation.flags | Unsigned integer, 4 bytes | Workstation Flags | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na1 | Boolean | Account lockout | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na10 | Boolean | BDC handling Changelogs | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na100 | Boolean | Refusal of password change | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na1000 | Boolean | Avoid replication account database | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na10000 | Boolean | DNS trusts supported | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na100000 | Boolean | Not used 1000000 | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na2 | Boolean | NT3.5 BDC continuous update | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na20 | Boolean | Restarting full DC sync | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na200 | Boolean | SendToSam | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na2000 | Boolean | Avoid replication Auth database | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na20000 | Boolean | ServerPasswordSet2 supported | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na200000 | Boolean | Not used 2000000 | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na4 | Boolean | RC4 encryption | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na40 | Boolean | Handle multiple SIDs | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na400 | Boolean | Generic pass-through | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na4000 | Boolean | Strong key | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na40000 | Boolean | GetDomainInfo supported | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na400000 | Boolean | Not used 4000000 | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na8 | Boolean | Promotion count(deprecated) | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na80 | Boolean | DatabaseRedo call | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na800 | Boolean | Concurent RPC | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na8000 | Boolean | Transitive trusts | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na80000 | Boolean | Cross forest trust | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na800000 | Boolean | Not used 8000000 | 1.4.0 to 1.6.5 |
| ntlmssp.neg_flags.na8000000 | Boolean | Not used 80000000 | 1.4.0 to 1.6.5 |