Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Spotlight metadata search service

Protocol field name: mdssvc

Versions: 1.12.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
mdssvc.mdssvc_blob.lengthLengthUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_blob.sizeSizeUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_blob.spotlight_blobSpotlight BlobUnsigned integer (8 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_close.device_idDevice IdUnsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_close.in_handleIn HandleByte sequence3.2.0 to 4.6.0
mdssvc.mdssvc_close.out_handleOut HandleByte sequence3.2.0 to 4.6.0
mdssvc.mdssvc_close.statusStatusUnsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_close.unkn1Unkn1Unsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_close.unkn2Unkn2Unsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_close.unkn3Unkn3Unsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_cmd.device_idDevice IdUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.flagsFlagsUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.fragmentFragmentUnsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_cmd.handleHandleByte sequence3.2.0 to 4.6.0
mdssvc.mdssvc_cmd.max_fragment_size1Max Fragment Size1Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.max_fragment_size2Max Fragment Size2Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.request_blobRequest BlobLabel1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.response_blobResponse BlobLabel1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.share_handleShare HandleByte sequence1.12.0 to 3.0.14
mdssvc.mdssvc_cmd.statusStatusUnsigned integer (32 bits)1.12.0 to 3.0.14
mdssvc.mdssvc_cmd.unkn1Unkn1Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn3Unkn3Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn4Unkn4Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn5Unkn5Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn6Unkn6Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn7Unkn7Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn8Unkn8Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_cmd.unkn9Unkn9Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_open.device_idDevice IdUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_open.handleHandleByte sequence3.2.0 to 4.6.0
mdssvc.mdssvc_open.share_handleShare HandleByte sequence1.12.0 to 3.0.14
mdssvc.mdssvc_open.share_mount_pathShare Mount PathCharacter string1.12.0 to 4.6.0
mdssvc.mdssvc_open.share_nameShare NameCharacter string1.12.0 to 4.6.0
mdssvc.mdssvc_open.share_pathShare PathCharacter string1.12.0 to 4.6.0
mdssvc.mdssvc_open.unkn2Unkn2Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_open.unkn3Unkn3Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.device_idDevice IdUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.flagsFlagsUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.gidGidUnsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_unknown1.handleHandleByte sequence3.2.0 to 4.6.0
mdssvc.mdssvc_unknown1.share_handleShare HandleByte sequence1.12.0 to 3.0.14
mdssvc.mdssvc_unknown1.statusStatusUnsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.uidUidUnsigned integer (32 bits)3.2.0 to 4.6.0
mdssvc.mdssvc_unknown1.unkn1Unkn1Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.unkn3Unkn3Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.unkn4Unkn4Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.mdssvc_unknown1.unkn5Unkn5Unsigned integer (32 bits)1.12.0 to 3.0.14
mdssvc.mdssvc_unknown1.unkn6Unkn6Unsigned integer (32 bits)1.12.0 to 3.0.14
mdssvc.mdssvc_unknown1.unkn7Unkn7Unsigned integer (32 bits)1.12.0 to 4.6.0
mdssvc.opnumOperationUnsigned integer (16 bits)1.12.0 to 4.6.0