Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Microsoft Service Control
Protocol field name: svcctl
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| svcctl.access_mask | Unsigned integer, 4 bytes | Access Mask | 1.0.0 to 1.6.5 |
| svcctl.binarypathname | Character string | Binary Path Name | 1.6.0 to 1.6.5 |
| svcctl.buffer | Unsigned integer, 4 bytes | Buffer | 1.6.0 to 1.6.5 |
| svcctl.bytes_needed | Unsigned integer, 4 bytes | Bytes Needed | 1.6.0 to 1.6.5 |
| svcctl.database | Character string | Database | 1.0.0 to 1.6.5 |
| svcctl.depend_size | Unsigned integer, 4 bytes | Depend Size | 1.6.0 to 1.6.5 |
| svcctl.dependencies | Character string | Dependencies | 1.6.0 to 1.6.5 |
| svcctl.displayname | Character string | Display Name | 1.6.0 to 1.6.5 |
| svcctl.hnd | Sequence of bytes | Context Handle | 1.0.0 to 1.6.5 |
| svcctl.is_locked | Unsigned integer, 4 bytes | IsLocked | 1.0.0 to 1.6.5 |
| svcctl.loadordergroup | Character string | Load Order Group | 1.6.0 to 1.6.5 |
| svcctl.lock | Sequence of bytes | Lock | 1.0.0 to 1.6.5 |
| svcctl.lock_duration | Unsigned integer, 4 bytes | Duration | 1.0.0 to 1.6.5 |
| svcctl.lock_owner | Character string | Owner | 1.0.0 to 1.6.5 |
| svcctl.machinename | Character string | MachineName | 1.0.0 to 1.6.5 |
| svcctl.opnum | Unsigned integer, 2 bytes | Operation | 1.0.0 to 1.6.5 |
| svcctl.password | Character string | Password | 1.6.0 to 1.6.5 |
| svcctl.password_size | Unsigned integer, 4 bytes | Password Size | 1.6.0 to 1.6.5 |
| svcctl.rc | Unsigned integer, 4 bytes | Return code | 1.0.0 to 1.6.5 |
| svcctl.required_size | Unsigned integer, 4 bytes | Required Size | 1.0.0 to 1.6.5 |
| svcctl.resume | Unsigned integer, 4 bytes | Resume Handle | 1.0.0 to 1.6.5 |
| svcctl.scm_rights_connect | Boolean | Connect | 1.0.0 to 1.6.5 |
| svcctl.scm_rights_create_service | Boolean | Create Service | 1.0.0 to 1.6.5 |
| svcctl.scm_rights_enumerate_service | Boolean | Enumerate Service | 1.0.0 to 1.6.5 |
| svcctl.scm_rights_lock | Boolean | Lock | 1.0.0 to 1.6.5 |
| svcctl.scm_rights_modify_boot_config | Boolean | Modify Boot Config | 1.0.0 to 1.6.5 |
| svcctl.scm_rights_query_lock_status | Boolean | Query Lock Status | 1.0.0 to 1.6.5 |
| svcctl.service_error_control | Unsigned integer, 4 bytes | Service Error Control | 1.6.0 to 1.6.5 |
| svcctl.service_start_name | Character string | Service Start Name | 1.6.0 to 1.6.5 |
| svcctl.service_start_type | Unsigned integer, 4 bytes | Service Start Type | 1.6.0 to 1.6.5 |
| svcctl.service_state | Unsigned integer, 4 bytes | Service State | 1.0.0 to 1.6.5 |
| svcctl.service_type | Unsigned integer, 4 bytes | Service Type | 1.0.0 to 1.6.5 |
| svcctl.service_type.fs | Boolean | File System Driver Service | 1.6.0 to 1.6.5 |
| svcctl.service_type.interactive | Boolean | Interactive Process Service | 1.6.0 to 1.6.5 |
| svcctl.service_type.kernel | Boolean | Kernel Driver Service | 1.6.0 to 1.6.5 |
| svcctl.service_type.win32_own | Boolean | Self Process Service | 1.6.0 to 1.6.5 |
| svcctl.service_type.win32_shared | Boolean | Shared Process Service | 1.6.0 to 1.6.5 |
| svcctl.servicename | Character string | Service Name | 1.6.0 to 1.6.5 |
| svcctl.services_returned | Unsigned integer, 4 bytes | Services Returned | 1.6.0 to 1.6.5 |
| svcctl.size | Unsigned integer, 4 bytes | Size | 1.0.0 to 1.6.5 |
| svcctl.tagid | Unsigned integer, 4 bytes | Tag Id | 1.6.0 to 1.6.5 |