Display Filter Reference: Lightweight Directory Access Protocol

Protocol field name: ldap

Versions: 1.0.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
ldap._untag_item _untag Character string 1.0.0 to 1.0.16
ldap.abandonRequest abandonRequest Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.AccessMask.ADS_CONTROL_ACCESS Ads Control Access Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_CREATE_CHILD Ads Create Child Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_DELETE_CHILD Ads Delete Child Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_DELETE_TREE Ads Delete Tree Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_LIST Ads List Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_LIST_OBJECT Ads List Object Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_READ_PROP Ads Read Prop Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_SELF_WRITE Ads Self Write Boolean 1.0.0 to 2.6.1
ldap.AccessMask.ADS_WRITE_PROP Ads Write Prop Boolean 1.0.0 to 2.6.1
ldap.addRequest addRequest Label 1.0.0 to 1.10.14
ldap.addRequest_element addRequest Label 1.12.0 to 2.6.1
ldap.addResponse addResponse Label 1.0.0 to 1.10.14
ldap.addResponse_element addResponse Label 1.12.0 to 2.6.1
ldap.ancestor_first_flag Flag Ancestor_First Boolean 2.0.0 to 2.6.1
ldap.and and Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.and_item and item Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.any any Character string 1.0.0 to 2.6.1
ldap.approxMatch approxMatch Label 1.0.0 to 1.10.14
ldap.approxMatch_element approxMatch Label 1.12.0 to 2.6.1
ldap.assertionValue assertionValue Character string 1.0.0 to 2.6.1
ldap.attributeDesc attributeDesc Character string 1.0.0 to 2.6.1
ldap.AttributeDescription AttributeDescription Character string 1.2.0 to 2.6.1
ldap.AttributeDescriptionList_item AttributeDescriptionList Character string 1.0.0 to 1.0.16
ldap.AttributeList_item AttributeList item Label 1.0.0 to 1.10.14
ldap.AttributeList_item_element AttributeList item Label 1.12.0 to 2.6.1
ldap.attributes attributes Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.attributeType attributeType Character string 1.0.0 to 2.6.1
ldap.AttributeValue AttributeValue Sequence of bytes 1.2.0 to 2.6.1
ldap.authentication authentication Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.ava ava Label 1.0.0 to 1.10.14
ldap.ava_element ava Label 1.12.0 to 2.6.1
ldap.baseObject baseObject Character string 1.0.0 to 2.6.1
ldap.bindRequest bindRequest Label 1.0.0 to 1.10.14
ldap.bindRequest_element bindRequest Label 1.12.0 to 2.6.1
ldap.bindResponse bindResponse Label 1.0.0 to 1.10.14
ldap.bindResponse_element bindResponse Label 1.12.0 to 2.6.1
ldap.cancelID cancelID Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.CancelRequestValue CancelRequestValue Label 1.0.0 to 1.10.14
ldap.CancelRequestValue_element CancelRequestValue Label 1.12.0 to 2.6.1
ldap.compareRequest compareRequest Label 1.0.0 to 1.10.14
ldap.compareRequest_element compareRequest Label 1.12.0 to 2.6.1
ldap.compareResponse compareResponse Label 1.0.0 to 1.10.14
ldap.compareResponse_element compareResponse Label 1.12.0 to 2.6.1
ldap.Control Control Label 1.2.0 to 1.10.14
ldap.Control_element Control Label 1.12.0 to 2.6.1
ldap.controls controls Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.Controls_item Controls Label 1.0.0 to 1.0.16
ldap.controlType controlType Character string 1.0.0 to 2.6.1
ldap.controlValue controlValue Sequence of bytes 1.0.0 to 2.6.1
ldap.cookie cookie Sequence of bytes 1.0.0 to 2.6.1
ldap.credentials credentials Sequence of bytes 1.0.0 to 2.6.1
ldap.criticality criticality Boolean 1.0.0 to 2.6.1
ldap.deleteoldrdn deleteoldrdn Boolean 1.0.0 to 2.6.1
ldap.delRequest delRequest Character string 1.0.0 to 2.6.1
ldap.delResponse delResponse Label 1.0.0 to 1.10.14
ldap.delResponse_element delResponse Label 1.12.0 to 2.6.1
ldap.derefAliases derefAliases Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.DirSyncControlValue DirSyncControlValue Label 1.6.0 to 1.10.14
ldap.DirSyncControlValue_element DirSyncControlValue Label 1.12.0 to 2.6.1
ldap.dnAttributes dnAttributes Boolean 1.0.0 to 2.6.1
ldap.entry entry Character string 1.0.0 to 2.6.1
ldap.entryUUID entryUUID Sequence of bytes 1.4.0 to 2.6.1
ldap.equalityMatch equalityMatch Label 1.0.0 to 1.10.14
ldap.equalityMatch_element equalityMatch Label 1.12.0 to 2.6.1
ldap.error error Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.errorMessage errorMessage Character string 1.0.0 to 2.6.1
ldap.exceeded_filter_length Filter length exceeds number. Giving up Label 1.12.0 to 2.6.1
ldap.extendedReq extendedReq Label 1.0.0 to 1.10.14
ldap.extendedReq_element extendedReq Label 1.12.0 to 2.6.1
ldap.extendedResp extendedResp Label 1.0.0 to 1.10.14
ldap.extendedResp_element extendedResp Label 1.12.0 to 2.6.1
ldap.extensibleMatch extensibleMatch Label 1.0.0 to 1.10.14
ldap.extensibleMatch_element extensibleMatch Label 1.12.0 to 2.6.1
ldap.filter filter Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.final final Character string 1.0.0 to 2.6.1
ldap.flags flags Unsigned integer, 4 bytes 1.6.0 to 2.6.1
ldap.genPasswd genPasswd Sequence of bytes 1.0.0 to 1.10.14
ldap.graceAuthNsRemaining graceAuthNsRemaining Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.greaterOrEqual greaterOrEqual Label 1.0.0 to 1.10.14
ldap.greaterOrEqual_element greaterOrEqual Label 1.12.0 to 2.6.1
ldap.gssapi_encrypted_payload GSS-API Encrypted payload Sequence of bytes 2.0.0 to 2.6.1
ldap.guid GUID Globally Unique Identifier 1.0.0 to 2.6.1
ldap.incremental_value_flag Flag Incremental_Value Boolean 2.0.0 to 2.6.1
ldap.initial initial Character string 1.0.0 to 2.6.1
ldap.intermediateResponse intermediateResponse Label 1.4.0 to 1.10.14
ldap.intermediateResponse_element intermediateResponse Label 1.12.0 to 2.6.1
ldap.LDAPMessage LDAPMessage Label 1.0.0 to 1.10.14
ldap.LDAPMessage_element LDAPMessage Label 1.12.0 to 2.6.1
ldap.LDAPURL LDAPURL Character string 1.2.0 to 2.6.1
ldap.lessOrEqual lessOrEqual Label 1.0.0 to 1.10.14
ldap.lessOrEqual_element lessOrEqual Label 1.12.0 to 2.6.1
ldap.matchedDN matchedDN Character string 1.0.0 to 2.6.1
ldap.matchingRule matchingRule Character string 1.0.0 to 2.6.1
ldap.matchValue matchValue Character string 1.0.0 to 2.6.1
ldap.maxBytes maxBytes Signed integer, 4 bytes 1.6.0 to 2.6.1
ldap.maxReturnLength maxReturnLength Signed integer, 4 bytes 1.0.0 to 1.4.15
ldap.mechanism mechanism Character string 1.0.0 to 2.6.1
ldap.messageID messageID Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.modDNRequest modDNRequest Label 1.0.0 to 1.10.14
ldap.modDNRequest_element modDNRequest Label 1.12.0 to 2.6.1
ldap.modDNResponse modDNResponse Label 1.0.0 to 1.10.14
ldap.modDNResponse_element modDNResponse Label 1.12.0 to 2.6.1
ldap.mode mode Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.modification modification Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.modification_element modification Label 1.12.0 to 2.6.1
ldap.modification_item modification item Label 1.0.0 to 1.10.14
ldap.modification_item_element modification item Label 1.12.0 to 2.6.1
ldap.modifyRequest modifyRequest Label 1.0.0 to 1.10.14
ldap.modifyRequest_element modifyRequest Label 1.12.0 to 2.6.1
ldap.modifyResponse modifyResponse Label 1.0.0 to 1.10.14
ldap.modifyResponse_element modifyResponse Label 1.12.0 to 2.6.1
ldap.name name Character string 1.0.0 to 2.6.1
ldap.newcookie newcookie Sequence of bytes 1.4.0 to 2.6.1
ldap.newPasswd newPasswd Sequence of bytes 1.0.0 to 2.6.1
ldap.newrdn newrdn Character string 1.0.0 to 2.6.1
ldap.newSuperior newSuperior Character string 1.0.0 to 2.6.1
ldap.not not Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.ntlmsspAuth ntlmsspAuth Sequence of bytes 1.0.0 to 2.6.1
ldap.ntlmsspNegotiate ntlmsspNegotiate Sequence of bytes 1.0.0 to 2.6.1
ldap.object object Character string 1.0.0 to 2.6.1
ldap.object_security_flag Flag Object_Security Boolean 2.0.0 to 2.6.1
ldap.objectName objectName Character string 1.0.0 to 2.6.1
ldap.oid OID Character string 2.0.0 to 2.6.1
ldap.oldPasswd oldPasswd Sequence of bytes 1.0.0 to 2.6.1
ldap.operation operation Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.or or Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.or_item or item Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.orderingRule orderingRule Character string 1.0.0 to 2.6.1
ldap.parentsFirst parentsFirst Signed integer, 4 bytes 1.0.0 to 1.4.15
ldap.PartialAttributeList_item PartialAttributeList item Label 1.0.0 to 1.10.14
ldap.PartialAttributeList_item_element PartialAttributeList item Label 1.12.0 to 2.6.1
ldap.PasswdModifyRequestValue PasswdModifyRequestValue Label 1.0.0 to 1.10.14
ldap.PasswdModifyRequestValue_element PasswdModifyRequestValue Label 1.12.0 to 2.6.1
ldap.PasswordPolicyResponseValue PasswordPolicyResponseValue Label 1.4.0 to 1.10.14
ldap.PasswordPolicyResponseValue_element PasswordPolicyResponseValue Label 1.12.0 to 2.6.1
ldap.present present Character string 1.0.0 to 2.6.1
ldap.protocolOp protocolOp Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.public_data_only_flag Flag Public_Data_Only Boolean 2.0.0 to 2.6.1
ldap.referral referral Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.Referral_item Referral Character string 1.0.0 to 1.0.16
ldap.refreshDelete refreshDelete Label 1.4.0 to 1.10.14
ldap.refreshDelete_element refreshDelete Label 1.12.0 to 2.6.1
ldap.refreshDeletes refreshDeletes Boolean 1.4.0 to 2.6.1
ldap.refreshDone refreshDone Boolean 1.4.0 to 2.6.1
ldap.refreshPresent refreshPresent Label 1.4.0 to 1.10.14
ldap.refreshPresent_element refreshPresent Label 1.12.0 to 2.6.1
ldap.reloadHint reloadHint Boolean 1.4.0 to 2.6.1
ldap.ReplControlValue ReplControlValue Label 1.0.0 to 1.4.15
ldap.requestName requestName Character string 1.0.0 to 2.6.1
ldap.requestValue requestValue Sequence of bytes 1.0.0 to 2.6.1
ldap.response response Sequence of bytes 1.0.0 to 2.6.1
ldap.response_in Response In Frame number 1.0.0 to 2.6.1
ldap.response_to Response To Frame number 1.0.0 to 2.6.1
ldap.responseName responseName Character string 1.0.0 to 2.6.1
ldap.responseValue responseValue Sequence of bytes 1.4.0 to 2.6.1
ldap.resultCode resultCode Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.reverseOrder reverseOrder Boolean 1.0.0 to 2.6.1
ldap.sasl sasl Label 1.0.0 to 1.10.14
ldap.sasl_buffer_length SASL Buffer Length Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.sasl_element sasl Label 1.12.0 to 2.6.1
ldap.scope scope Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.SearchControlValue SearchControlValue Label 1.0.0 to 1.10.14
ldap.SearchControlValue_element SearchControlValue Label 1.12.0 to 2.6.1
ldap.searchRequest searchRequest Label 1.0.0 to 1.10.14
ldap.searchRequest_element searchRequest Label 1.12.0 to 2.6.1
ldap.searchResDone searchResDone Label 1.0.0 to 1.10.14
ldap.searchResDone_element searchResDone Label 1.12.0 to 2.6.1
ldap.searchResEntry searchResEntry Label 1.0.0 to 1.10.14
ldap.searchResEntry_element searchResEntry Label 1.12.0 to 2.6.1
ldap.searchResRef searchResRef Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.serverSaslCreds serverSaslCreds Sequence of bytes 1.0.0 to 2.6.1
ldap.sid Sid Character string 1.0.0 to 2.6.1
ldap.simple simple Character string 1.0.0 to 2.6.1
ldap.size size Signed integer, 4 bytes 1.0.0 to 2.6.1
ldap.sizeLimit sizeLimit Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.SortKeyList SortKeyList Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.SortKeyList_item SortKeyList item Label 1.0.0 to 1.10.14
ldap.SortKeyList_item_element SortKeyList item Label 1.12.0 to 2.6.1
ldap.sortResult sortResult Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.SortResult_element SortResult Label 1.12.0 to 2.6.1
ldap.state state Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.substrings substrings Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.substrings_element substrings Label 1.12.0 to 2.6.1
ldap.substrings_item substrings item Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.SyncDoneValue SyncDoneValue Label 1.4.0 to 1.10.14
ldap.SyncDoneValue_element SyncDoneValue Label 1.12.0 to 2.6.1
ldap.syncIdSet syncIdSet Label 1.4.0 to 1.10.14
ldap.syncIdSet_element syncIdSet Label 1.12.0 to 2.6.1
ldap.SyncInfoValue SyncInfoValue Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.SyncRequestValue SyncRequestValue Label 1.4.0 to 1.10.14
ldap.SyncRequestValue_element SyncRequestValue Label 1.12.0 to 2.6.1
ldap.SyncStateValue SyncStateValue Label 1.4.0 to 1.10.14
ldap.SyncStateValue_element SyncStateValue Label 1.12.0 to 2.6.1
ldap.SyncUUID SyncUUID Sequence of bytes 1.4.0 to 2.6.1
ldap.syncUUIDs syncUUIDs Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.time Time Time offset 1.0.0 to 2.6.1
ldap.timeBeforeExpiration timeBeforeExpiration Unsigned integer, 4 bytes 1.4.0 to 2.6.1
ldap.timeLimit timeLimit Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.too_many_filter_elements Found more than %%u filter elements. Giving up. Label 1.12.0 to 2.6.1
ldap.type type Character string 1.0.0 to 2.6.1
ldap.typesOnly typesOnly Boolean 1.0.0 to 2.6.1
ldap.unbindRequest unbindRequest Label 1.0.0 to 1.10.14
ldap.unbindRequest_element unbindRequest Label 1.12.0 to 2.6.1
ldap.userIdentity userIdentity Sequence of bytes 1.0.0 to 2.6.1
ldap.vals vals Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.vals_item vals Sequence of bytes 1.0.0 to 1.0.16
ldap.value value Signed integer, 4 bytes 1.6.0 to 1.10.14
ldap.version version Unsigned integer, 4 bytes 1.0.0 to 2.6.1
ldap.warning warning Unsigned integer, 4 bytes 1.4.0 to 2.6.1
mscldap.clientsitename Client Site Character string 1.0.0 to 2.6.1
mscldap.domain Domain Character string 1.0.0 to 2.6.1
mscldap.domain.guid Domain GUID Globally Unique Identifier 1.0.0 to 2.6.1
mscldap.forest Forest Character string 1.0.0 to 2.6.1
mscldap.hostname Hostname Character string 1.0.0 to 2.6.1
mscldap.nb_domain NetBIOS Domain Character string 1.0.0 to 2.6.1
mscldap.nb_hostname NetBIOS Hostname Character string 1.0.0 to 2.6.1
mscldap.netlogon.flags Flags Unsigned integer, 4 bytes 1.0.0 to 2.6.1
mscldap.netlogon.flags.closest Closest Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.defaultnc DNC Boolean 1.2.0 to 2.6.1
mscldap.netlogon.flags.dnsname DNS Boolean 1.2.0 to 2.6.1
mscldap.netlogon.flags.ds DS Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.forestnc FDC Boolean 1.2.0 to 2.6.1
mscldap.netlogon.flags.gc GC Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.good_timeserv Good Time Serv Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.kdc KDC Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.ldap LDAP Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.ndnc NDNC Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.pdc PDC Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.rodc RODC Boolean 1.2.0 to 2.6.1
mscldap.netlogon.flags.timeserv Time Serv Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.writable Writable Boolean 1.0.0 to 2.6.1
mscldap.netlogon.flags.writabledc WDC Boolean 2.6.0 to 2.6.1
mscldap.netlogon.flags.writabledc. WDC Boolean 1.2.0 to 2.4.7
mscldap.netlogon.ipaddress IP Address IPv4 address 1.2.0 to 2.6.1
mscldap.netlogon.ipaddress.family Family Unsigned integer, 2 bytes 1.2.0 to 2.6.1
mscldap.netlogon.ipaddress.ipv4 IPv4 IPv4 address 1.2.0 to 2.6.1
mscldap.netlogon.ipaddress.port Port Unsigned integer, 2 bytes 1.2.0 to 2.6.1
mscldap.netlogon.lm_token LM Token Unsigned integer, 2 bytes 1.0.0 to 2.6.1
mscldap.netlogon.nt_token NT Token Unsigned integer, 2 bytes 1.0.0 to 2.6.1
mscldap.netlogon.opcode Operation code Unsigned integer, 2 bytes 1.6.0 to 2.6.1
mscldap.netlogon.type Type Unsigned integer, 2 bytes 1.0.0 to 1.4.15
mscldap.netlogon.version Version Unsigned integer, 4 bytes 1.0.0 to 1.4.15
mscldap.ntver.flags Version Flags Unsigned integer, 4 bytes 1.6.0 to 2.6.1
mscldap.ntver.searchflags Search Flags Unsigned integer, 4 bytes 1.2.0 to 1.4.15
mscldap.ntver.searchflags.gc GC Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.ip IP Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.local Local Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.nt4 NT4 Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.pdc PDC Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.v1 V1 Boolean 1.2.0 to 2.6.1
mscldap.ntver.searchflags.v5 V5 Boolean 1.2.0 to 2.6.1
mscldap.ntver.searchflags.v5cs V5CS Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.v5ep V5EP Boolean 1.6.0 to 2.6.1
mscldap.ntver.searchflags.v5ex V5EX Boolean 1.2.0 to 2.6.1
mscldap.ntver.searchflags.v5ip V5IP Boolean 1.2.0 to 1.4.15
mscldap.ntver.searchflags.vcs VCS Boolean 1.6.0 to 2.6.1
mscldap.ntver.searchflags.vgc VGC Boolean 1.6.0 to 2.6.1
mscldap.ntver.searchflags.vip VIP Boolean 1.6.0 to 2.6.1
mscldap.ntver.searchflags.vl VL Boolean 1.6.0 to 2.6.1
mscldap.ntver.searchflags.vnt4 VNT4 Boolean 1.6.0 to 2.6.1
mscldap.ntver.searchflags.vpdc VPDC Boolean 1.6.0 to 2.6.1
mscldap.sitename Server Site Character string 1.0.0 to 2.6.1
mscldap.username Username Character string 1.0.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More