Display Filter Reference: DCE/RPC Conversation Manager

Protocol field name: conv

Versions: 1.0.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
conv.opnum Operation Unsigned integer, 2 bytes 1.0.0 to 2.6.1
conv.status Status Unsigned integer, 4 bytes 1.0.0 to 2.6.1
conv.who_are_you2_resp_casuuid Client\'s address space UUID Globally Unique Identifier 1.0.0 to 2.6.1
conv.who_are_you2_resp_seq Sequence Number Unsigned integer, 4 bytes 1.0.0 to 2.6.1
conv.who_are_you2_rqst_actuid Activity UID Globally Unique Identifier 1.0.0 to 2.6.1
conv.who_are_you2_rqst_boot_time Boot time Date and time 1.0.0 to 2.6.1
conv.who_are_you_resp_seq Sequence Number Unsigned integer, 4 bytes 1.0.0 to 2.6.1
conv.who_are_you_rqst_actuid Activity UID Globally Unique Identifier 1.0.0 to 2.6.1
conv.who_are_you_rqst_boot_time Boot time Date and time 1.0.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More