Display Filter Reference: DCE/RPC Endpoint Mapper

Protocol field name: epm

Versions: 1.0.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
epm.ann_len Annotation length Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.ann_offset Annotation offset Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.annotation Annotation Character string 1.0.0 to 2.6.3
epm.hnd Handle Sequence of bytes 1.0.0 to 2.6.3
epm.if_id Interface Globally Unique Identifier 1.0.0 to 2.6.3
epm.inq_type Inquiry type Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.max_ents Max entries Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.max_towers Max Towers Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.num_ents Num entries Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.num_towers Num Towers Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.object Object Globally Unique Identifier 1.0.0 to 2.6.3
epm.opnum Operation Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.proto.http_port TCP Port Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.proto.ip IP IPv4 address 1.0.0 to 2.6.3
epm.proto.named_pipe Named Pipe Character string 1.0.0 to 2.6.3
epm.proto.netbios_name NetBIOS Name Character string 1.0.0 to 2.6.3
epm.proto.tcp_port TCP Port Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.proto.udp_port UDP Port Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.proto_id.undecoded RightHandSide not decoded yet for proto_id Label 1.12.0 to 2.6.3
epm.rc Return code Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.replace Replace Unsigned integer, 1 byte 1.0.0 to 2.6.3
epm.tower Tower Sequence of bytes 1.0.0 to 1.8.15
epm.tower.len Length Unsigned integer, 4 bytes 1.0.0 to 2.6.3
epm.tower.lhs.len LHS Length Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.tower.num_floors Number of floors Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.tower.proto_id Protocol Unsigned integer, 1 byte 1.0.0 to 2.6.3
epm.tower.rhs.len RHS Length Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.uuid UUID Globally Unique Identifier 1.0.0 to 2.6.3
epm.uuid_version Version Unsigned integer, 2 bytes 2.0.0 to 2.6.3
epm.ver_maj Version Major Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.ver_min Version Minor Unsigned integer, 2 bytes 1.0.0 to 2.6.3
epm.ver_opt Version Option Unsigned integer, 4 bytes 1.0.0 to 2.6.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More