Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Transport-Neutral Encapsulation Format

Protocol field name: tnef
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
tnef.attribute Label Attribute 1.0.0 to 1.6.5
tnef.attribute.checksum Unsigned integer, 2 bytes Checksum 1.0.0 to 1.6.5
tnef.attribute.date Label Date 1.4.0 to 1.6.5
tnef.attribute.date.day Unsigned integer, 2 bytes Day 1.0.0 to 1.6.5
tnef.attribute.date.day_of_week Unsigned integer, 2 bytes Day Of Week 1.0.0 to 1.6.5
tnef.attribute.date.hour Unsigned integer, 2 bytes Hour 1.0.0 to 1.6.5
tnef.attribute.date.minute Unsigned integer, 2 bytes Minute 1.0.0 to 1.6.5
tnef.attribute.date.month Unsigned integer, 2 bytes Month 1.0.0 to 1.6.5
tnef.attribute.date.second Unsigned integer, 2 bytes Second 1.0.0 to 1.6.5
tnef.attribute.date.year Unsigned integer, 2 bytes Year 1.0.0 to 1.6.5
tnef.attribute.display_name Character string Display Name 1.0.0 to 1.6.5
tnef.attribute.email_address Character string Email Address 1.0.0 to 1.6.5
tnef.attribute.length Unsigned integer, 4 bytes Length 1.0.0 to 1.6.5
tnef.attribute.lvl Unsigned integer, 1 byte Type 1.0.0 to 1.6.5
tnef.attribute.string Character string String 1.0.0 to 1.6.5
tnef.attribute.tag Unsigned integer, 4 bytes Tag 1.0.0 to 1.6.5
tnef.attribute.tag.id Unsigned integer, 2 bytes Tag 1.0.0 to 1.6.5
tnef.attribute.tag.kind Unsigned integer, 4 bytes Kind 1.0.0 to 1.6.5
tnef.attribute.tag.name.id Unsigned integer, 4 bytes Name 1.0.0 to 1.6.5
tnef.attribute.tag.name.length Unsigned integer, 4 bytes Length 1.0.0 to 1.6.5
tnef.attribute.tag.name.string Character string Name 1.0.0 to 1.6.5
tnef.attribute.tag.set Globally Unique Identifier Set 1.0.0 to 1.6.5
tnef.attribute.tag.type Unsigned integer, 2 bytes Type 1.0.0 to 1.6.5
tnef.attribute.value Label Value 1.0.0 to 1.6.5
tnef.key Unsigned integer, 2 bytes Key 1.0.0 to 1.6.5
tnef.mapi_props Label MAPI Properties 1.0.0 to 1.6.5
tnef.mapi_props.count Unsigned integer, 2 bytes Count 1.0.0 to 1.6.5
tnef.message_class Character string Message Class 1.0.0 to 1.6.5
tnef.message_class.original Character string Original Message Class 1.0.0 to 1.6.5
tnef.oem_codepage Unsigned integer, 8 bytes OEM Codepage 1.0.0 to 1.6.5
tnef.padding Label Padding 1.0.0 to 1.6.5
tnef.priority Unsigned integer, 2 bytes Priority 1.0.0 to 1.6.5
tnef.property Label Property 1.0.0 to 1.6.5
tnef.property.padding Label Padding 1.0.0 to 1.6.5
tnef.property.tag Unsigned integer, 4 bytes Tag 1.0.0 to 1.6.5
tnef.property.tag.id Unsigned integer, 2 bytes Tag 1.0.0 to 1.6.5
tnef.property.tag.type Unsigned integer, 2 bytes Type 1.0.0 to 1.6.5
tnef.PropValue.b Unsigned integer, 2 bytes B 1.0.0 to 1.6.5
tnef.PropValue.bin Label Bin 1.0.0 to 1.6.5
tnef.PropValue.err Unsigned integer, 4 bytes Err 1.0.0 to 1.6.5
tnef.PropValue.ft Label Ft 1.0.0 to 1.6.5
tnef.PropValue.i Unsigned integer, 2 bytes I 1.0.0 to 1.6.5
tnef.PropValue.l Unsigned integer, 4 bytes L 1.0.0 to 1.6.5
tnef.PropValue.lpguid Label Lpguid 1.2.0 to 1.6.5
tnef.PropValue.lpszA Character string Lpsza 1.0.0 to 1.6.5
tnef.PropValue.lpszW Character string Lpszw 1.2.0 to 1.6.5
tnef.PropValue.MVbin Label Mvbin 1.0.0 to 1.6.5
tnef.PropValue.MVft Label Mvft 1.0.0 to 1.6.5
tnef.PropValue.MVguid Label Mvguid 1.0.0 to 1.6.5
tnef.PropValue.MVi Label Mvi 1.0.0 to 1.6.5
tnef.PropValue.MVl Label Mvl 1.0.0 to 1.6.5
tnef.PropValue.MVszA Label Mvsza 1.0.0 to 1.6.5
tnef.PropValue.MVszW Label Mvszw 1.0.0 to 1.6.5
tnef.PropValue.null Unsigned integer, 4 bytes Null 1.0.0 to 1.6.5
tnef.PropValue.object Unsigned integer, 4 bytes Object 1.0.0 to 1.6.5
tnef.signature Unsigned integer, 4 bytes Signature 1.0.0 to 1.6.5
tnef.value.length Unsigned integer, 2 bytes Length 1.0.0 to 1.6.5
tnef.values.count Unsigned integer, 2 bytes Count 1.0.0 to 1.6.5
tnef.version Unsigned integer, 4 bytes Version 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation