Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: ETW Ndis

Protocol field name: etw.ndis

Versions: 2.6.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
etw.ndis.classification_handle_net_buffer_list_infoClassificationHandleNetBufferListInfoUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.contextContextUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.descriptionDescriptionCharacter string2.6.0 to 4.6.0
etw.ndis.destination_countDestination countUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.destination_nic_nameDestination NIC nameCharacter string2.6.0 to 4.6.0
etw.ndis.destination_nic_typeDestination NIC typeCharacter string2.6.0 to 4.6.0
etw.ndis.destination_port_idDestination port IDUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.destination_port_nameDestination port nameCharacter string2.6.0 to 4.6.0
etw.ndis.directiveDirectiveUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.error_codeError codeUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.event_idEvent IDUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.fragmentFragmentByte sequence2.6.0 to 4.6.0
etw.ndis.fragment_sizeFragment sizeUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.friendly_nameFriendly nameCharacter string2.6.0 to 4.6.0
etw.ndis.ieee8021q_net_buffer_list_infoIeee8021QNetBufferListInfoUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.if_indexIfIndexUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.ipsec_offload_v1_net_buffer_list_infoIPsecOffloadV1NetBufferListInfoUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keywordKeywordUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keyword.addressKW_ADDRESSBoolean2.6.0 to 4.6.0
etw.ndis.keyword.authenticationKW_AUTHENTICATIONBoolean2.6.0 to 4.6.0
etw.ndis.keyword.close_pathKW_CLOSEBoolean2.6.0 to 4.6.0
etw.ndis.keyword.configurationKW_CONFIGURATIONBoolean2.6.0 to 4.6.0
etw.ndis.keyword.connect_pathKW_L2_CONNECTBoolean2.6.0 to 4.6.0
etw.ndis.keyword.droppedKW_DROPPEDBoolean2.6.0 to 4.6.0
etw.ndis.keyword.ethernet8023KW_MEDIA_802_3Boolean2.6.0 to 4.6.0
etw.ndis.keyword.globalKW_GLOBALBoolean2.6.0 to 4.6.0
etw.ndis.keyword.l3_connect_pathKW_L3_CONNECTBoolean2.6.0 to 4.6.0
etw.ndis.keyword.native80211KW_MEDIA_NATIVE_802_11Boolean2.6.0 to 4.6.0
etw.ndis.keyword.packetKW_PACKETBoolean2.6.0 to 4.6.0
etw.ndis.keyword.packet_endKW_PACKET_ENDBoolean2.6.0 to 4.6.0
etw.ndis.keyword.packet_startKW_PACKET_STARTBoolean2.6.0 to 4.6.0
etw.ndis.keyword.pii_presentKW_PII_PRESENTBoolean2.6.0 to 4.6.0
etw.ndis.keyword.receive_pathKW_RECEIVEBoolean2.6.0 to 4.6.0
etw.ndis.keyword.reserved1Reserved1Unsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keyword.reserved2Reserved2Unsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keyword.reserved3Reserved3Unsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keyword.reserved4Reserved4Unsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keyword.reserved5Reserved5Unsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.keyword.send_pathKW_SENDBoolean2.6.0 to 4.6.0
etw.ndis.keyword.state_transitionKW_STATE_TRANSITIONBoolean2.6.0 to 4.6.0
etw.ndis.keyword.std_template_hintKW_STD_TEMPLATE_HINTBoolean2.6.0 to 4.6.0
etw.ndis.keyword.tunnelKW_MEDIA_TUNNELBoolean2.6.0 to 4.6.0
etw.ndis.keyword.vmswitchKW_VMSWITCHBoolean2.6.0 to 4.6.0
etw.ndis.keyword.wireless_wanKW_MEDIA_WIRELESS_WANBoolean2.6.0 to 4.6.0
etw.ndis.layer_countLayer countUnsigned integer (16 bits)2.6.0 to 4.6.0
etw.ndis.layer_idLayer IDUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.layer_nameLayer nameCharacter string2.6.0 to 4.6.0
etw.ndis.locationLocationUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.lower_if_indexLowerIfIndexUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.max_net_buffer_list_infoMaxNetBufferListInfoUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.media_specific_informationMediaSpecificInformationUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.media_typeMedia typesUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.metadataMetadataByte sequence2.6.0 to 4.6.0
etw.ndis.metadata_sizeMetadata sizeUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.miniport_if_indexMiniportIfIndexUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.net_buffer_cancel_idNetBufferListCancelIdUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.net_buffer_list_frame_typeNetBufferListFrameTypeOrNetBufferListProtocolIdUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.net_buffer_list_hash_infoNetBufferListHashInfoUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.net_buffer_list_hash_valueNetBufferListHashValueUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.next_stateNext stateUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.oob_dataOOB dataByte sequence2.6.0 to 4.6.0
etw.ndis.oob_data_sizeOOB data sizeUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.dataMPDU paddingByte sequence2.6.0 to 4.6.0
etw.ndis.packet_metadata.revisionRevisionUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.sizeSizeUnsigned integer (16 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.typeTypeUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_channelChannelUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_datarateDatarateUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_flagsFlagsUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_mpdu_paddingMPDU paddingByte sequence2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_mpdus_receivedMPDUs receivedUnsigned integer (16 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_phytypePHY typeUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.packet_metadata.wifi_rssiRSSISigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.param1Param1Unsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.param2Param2Unsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.param_strParam StringCharacter string2.6.0 to 4.6.0
etw.ndis.previous_statePrevious stateUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.reference_contextReference contextUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.rule_idRule IDUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.rules_countRules countUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.rundown_idRundown IDUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.service_nameService nameCharacter string2.6.0 to 4.6.0
etw.ndis.source_idSource IDUnsigned integer (8 bits)2.6.0 to 4.6.0
etw.ndis.source_nameSource nameCharacter string2.6.0 to 4.6.0
etw.ndis.source_nic_nameSource NIC nameCharacter string2.6.0 to 4.6.0
etw.ndis.source_nic_typeSource NIC typeCharacter string2.6.0 to 4.6.0
etw.ndis.source_port_idSource port IDUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.source_port_nameSource port nameCharacter string2.6.0 to 4.6.0
etw.ndis.tcp_ip_checksum_net_buffer_listTcpIpChecksumNetBufferListInfoOrTcpOffloadBytesTransferredUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.tcp_large_send_net_buffer_list_infoTcpLargeSendNetBufferListInfoOrTcpReceiveNoPushUnsigned integer (64 bits)2.6.0 to 4.6.0
etw.ndis.unique_nameUnique nameCharacter string2.6.0 to 4.6.0
etw.ndis.valueValueByte sequence2.6.0 to 4.6.0
etw.ndis.value_lengthValue lengthUnsigned integer (32 bits)2.6.0 to 4.6.0
etw.ndis.versionVersionCharacter string2.6.0 to 4.6.0
etw.ndis.wpf_net_buffer_list_infoWfpNetBufferListInfoUnsigned integer (64 bits)2.6.0 to 4.6.0