Display Filter Reference: MISC (pidl)

Protocol field name: misc

Versions: 1.12.0 to 3.2.2

Back to Display Filter Reference

Field name Description Type Versions
misc.GUID.clock_seq Clock Seq Unsigned integer, 1 byte 1.12.0 to 3.2.2
misc.GUID.node Node Unsigned integer, 1 byte 1.12.0 to 3.2.2
misc.GUID.time_hi_and_version Time Hi And Version Unsigned integer, 2 bytes 1.12.0 to 3.2.2
misc.GUID.time_low Time Low Unsigned integer, 4 bytes 1.12.0 to 3.2.2
misc.GUID.time_mid Time Mid Unsigned integer, 2 bytes 1.12.0 to 3.2.2
misc.KRB5_EDATA_NTSTATUS.ntstatus Ntstatus Unsigned integer, 4 bytes 1.12.0 to 3.2.2
misc.KRB5_EDATA_NTSTATUS.unknown1 Unknown1 Unsigned integer, 4 bytes 1.12.0 to 3.2.2
misc.KRB5_EDATA_NTSTATUS.unknown2 Unknown2 Unsigned integer, 4 bytes 1.12.0 to 3.2.2
misc.ndr_syntax_id.if_version If Version Unsigned integer, 4 bytes 1.12.0 to 3.2.2
misc.ndr_syntax_id.uuid Uuid Globally Unique Identifier 1.12.0 to 3.2.2
misc.opnum Operation Unsigned integer, 2 bytes 1.12.0 to 3.2.2
misc.policy_handle.handle_type Handle Type Unsigned integer, 4 bytes 1.12.0 to 3.2.2
misc.policy_handle.uuid Uuid Globally Unique Identifier 1.12.0 to 3.2.2
misc.winreg_Data.binary Binary Label 1.12.0 to 1.12.13
misc.winreg_Data.data Data Label 1.12.0 to 1.12.13
misc.winreg_Data.string String Character string 1.12.0 to 1.12.13
misc.winreg_Data.string_array String Array Character string 1.12.0 to 1.12.13
misc.winreg_Data.value Value Unsigned integer, 4 bytes 1.12.0 to 1.12.13
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More