Display Filter Reference: DCOM

Protocol field name: dcom

Versions: 1.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
dcom.actual_count ActualCount Unsigned integer, 4 bytes 1.0.0 to 1.8.15
dcom.array_size (ArraySize) Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.byte_length ByteLength Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.clsid CLSID Globally Unique Identifier 1.0.0 to 2.6.5
dcom.custobjref CUSTOMOBJREF Label 1.10.0 to 2.6.5
dcom.dissetion_incomplete Dissection incomplete Label 1.12.0 to 2.6.5
dcom.dualstringarray.mult_ip DUALSTRINGARRAY Multiple IP Label 1.12.0 to 2.6.5
dcom.dualstringarray.network_addr NetworkAddr Character string 1.0.0 to 2.6.5
dcom.dualstringarray.num_entries NumEntries Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.dualstringarray.security SecurityBinding Label 1.0.0 to 2.6.5
dcom.dualstringarray.security_authn_svc AuthnSvc Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.dualstringarray.security_authz_svc AuthzSvc Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.dualstringarray.security_offset SecurityOffset Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.dualstringarray.security_princ_name PrincName Character string 1.0.0 to 2.6.5
dcom.dualstringarray.string StringBinding Label 1.0.0 to 2.6.5
dcom.dualstringarray.tower_id TowerId Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.extent Extension Label 1.0.0 to 2.6.5
dcom.extent.array_count Extension Count Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.extent.array_res Reserved Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.extent.id Extension Id Globally Unique Identifier 1.0.0 to 2.6.5
dcom.extent.size Extension Size Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.hresult HResult Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.hresult.expert Hresult Label 1.12.0 to 2.6.5
dcom.ifp InterfacePointer Label 1.0.0 to 2.6.5
dcom.iid IID Globally Unique Identifier 1.0.0 to 2.6.5
dcom.ip_cnt_data CntData Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.ipid IPID Globally Unique Identifier 1.0.0 to 2.6.5
dcom.max_count MaxCount Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.no_spec No specification available, dissection not possible Label 1.12.0 to 2.6.5
dcom.nospec No Specification Available Sequence of bytes 1.0.0 to 2.6.5
dcom.objref OBJREF Label 1.0.0 to 2.6.5
dcom.objref.cbextension CBExtension Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.objref.flags Flags Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.objref.resolver_address ResolverAddress Label 1.0.0 to 2.6.5
dcom.objref.signature Signature Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.objref.size Size Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.offset Offset Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.oid OID Unsigned integer, 8 bytes 1.0.0 to 2.6.5
dcom.oxid OXID Unsigned integer, 8 bytes 1.0.0 to 2.6.5
dcom.pointer_val (PointerVal) Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.sa SAFEARRAY Label 1.0.0 to 2.6.5
dcom.sa.bound_elements BoundElements Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.sa.dims16 Dims16 Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.sa.dims32 Dims32 Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.sa.element_size ElementSize Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.sa.elements Elements Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.sa.features Features Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.sa.features_auto AUTO Boolean 1.0.0 to 2.6.5
dcom.sa.features_bstr BSTR Boolean 1.0.0 to 2.6.5
dcom.sa.features_dispatch DISPATCH Boolean 1.0.0 to 2.6.5
dcom.sa.features_embedded EMBEDDED Boolean 1.0.0 to 2.6.5
dcom.sa.features_fixedsize FIXEDSIZE Boolean 1.0.0 to 2.6.5
dcom.sa.features_have_iid HAVEIID Boolean 1.0.0 to 2.6.5
dcom.sa.features_have_vartype HAVEVARTYPE Boolean 1.0.0 to 2.6.5
dcom.sa.features_record RECORD Boolean 1.0.0 to 2.6.5
dcom.sa.features_static STATIC Boolean 1.0.0 to 2.6.5
dcom.sa.features_unknown UNKNOWN Boolean 1.0.0 to 2.6.5
dcom.sa.features_variant VARIANT Boolean 1.0.0 to 2.6.5
dcom.sa.locks Locks Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.sa.low_bound LowBound Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.sa.vartype VarType32 Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.stdobjref STDOBJREF Label 1.0.0 to 2.6.5
dcom.stdobjref.flags Flags Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.stdobjref.public_refs PublicRefs Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.that.flags Flags Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.this.flags Flags Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.this.res Reserved Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.this.uuid Causality ID Globally Unique Identifier 1.0.0 to 2.6.5
dcom.this.version_major VersionMajor Unsigned integer, 2 bytes 1.0.0 to 1.8.15
dcom.this.version_minor VersionMinor Unsigned integer, 2 bytes 1.0.0 to 1.8.15
dcom.tobedone To Be Done Sequence of bytes 1.0.0 to 2.6.5
dcom.variant Variant Label 1.0.0 to 1.8.15
dcom.variant_rpc_res RPC-Reserved Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.variant_size Size Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.variant_type VarType Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.variant_type32 VarType32 Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.variant_wres Reserved Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.version_major VersionMajor Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.version_minor VersionMinor Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.vt.bool VT_BOOL Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.vt.bstr VT_BSTR Character string 1.0.0 to 2.6.5
dcom.vt.byref BYREF Label 1.0.0 to 2.6.5
dcom.vt.cy VT_CY Signed integer, 8 bytes 2.0.0 to 2.6.5
dcom.vt.date VT_DATE Floating point (double-precision) 1.0.0 to 2.6.5
dcom.vt.dispatch VT_DISPATCH Label 1.0.0 to 2.6.5
dcom.vt.i1 VT_I1 Signed integer, 1 byte 1.0.0 to 2.6.5
dcom.vt.i2 VT_I2 Signed integer, 2 bytes 1.0.0 to 2.6.5
dcom.vt.i4 VT_I4 Signed integer, 4 bytes 1.0.0 to 2.6.5
dcom.vt.i8 VT_I8 Signed integer, 8 bytes 1.0.0 to 2.6.5
dcom.vt.r4 VT_R4 Floating point (single-precision) 1.0.0 to 2.6.5
dcom.vt.r8 VT_R8 Floating point (double-precision) 1.0.0 to 2.6.5
dcom.vt.ui1 VT_UI1 Unsigned integer, 1 byte 1.0.0 to 2.6.5
dcom.vt.ui2 VT_UI2 Unsigned integer, 2 bytes 1.0.0 to 2.6.5
dcom.vt.ui4 VT_UI4 Unsigned integer, 4 bytes 1.0.0 to 2.6.5
dcom.vt.ui8 VT_UI8 Unsigned integer, 8 bytes 2.0.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More