Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Display Filter Reference: NetBIOS

Protocol field name: netbios

Versions: 1.0.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
netbios.ackAcknowledgeBoolean1.0.0 to 1.8.15
netbios.ack_expectedAcknowledge expectedBoolean1.0.0 to 1.8.15
netbios.ack_with_dataAcknowledge with dataBoolean1.0.0 to 1.8.15
netbios.call_name_typeCaller's Name TypeUnsigned integer (8 bits)1.0.0 to 4.2.4
netbios.commandCommandUnsigned integer (8 bits)1.0.0 to 4.2.4
netbios.data1DATA1 valueUnsigned integer (8 bits)1.0.0 to 1.8.15
netbios.data2DATA2 valueUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.data2.frameData length exceeds maximum frame sizeBoolean1.10.0 to 4.2.4
netbios.data2.statusStatus data lengthUnsigned integer (16 bits)1.10.0 to 4.2.4
netbios.data2.userData length exceeds user's bufferBoolean1.10.0 to 4.2.4
netbios.datagram_bcast_macSender's Node AddressEthernet or other MAC address1.10.0 to 4.2.4
netbios.datagram_macSender's MAC AddressEthernet or other MAC address1.10.0 to 4.2.4
netbios.delimiterDelimiterUnsigned integer (16 bits)2.0.0 to 4.2.4
netbios.flagsFlagsUnsigned integer (8 bits)1.10.0 to 4.2.4
netbios.flags.ackAcknowledgeBoolean1.10.0 to 4.2.4
netbios.flags.ack_expectedAcknowledge expectedBoolean1.10.0 to 4.2.4
netbios.flags.ack_with_dataAcknowledge with dataBoolean1.10.0 to 4.2.4
netbios.flags.recv_cont_reqRECEIVE_CONTINUE requestedBoolean1.10.0 to 4.2.4
netbios.flags.send_no_ackHandle SEND.NO.ACKBoolean1.10.0 to 4.2.4
netbios.fragmentNetBIOS FragmentFrame number1.0.0 to 4.2.4
netbios.fragment.countFragment countUnsigned integer (32 bits)1.6.0 to 4.2.4
netbios.fragment.errorDefragmentation errorFrame number1.0.0 to 4.2.4
netbios.fragment.multipletailsMultiple tail fragments foundBoolean1.0.0 to 4.2.4
netbios.fragment.overlapFragment overlapBoolean1.0.0 to 4.2.4
netbios.fragment.overlap.conflictConflicting data in fragment overlapBoolean1.0.0 to 4.2.4
netbios.fragment.toolongfragmentFragment too longBoolean1.0.0 to 4.2.4
netbios.fragmentsNetBIOS FragmentsLabel1.0.0 to 4.2.4
netbios.hdr_lenLengthUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.largest_frameLargest FrameUnsigned integer (8 bits)1.0.0 to 4.2.4
netbios.local_sessionLocal Session No.Unsigned integer (8 bits)1.0.0 to 4.2.4
netbios.local_session_noLocal Session No.Unsigned integer (8 bits)2.0.0 to 4.2.4
netbios.max_data_recv_sizeMaximum data receive sizeUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.name_typeName typeUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.nb_nameNetBIOS NameCharacter string1.0.0 to 4.2.4
netbios.nb_name_typeNetBIOS Name TypeUnsigned integer (8 bits)1.0.0 to 4.2.4
netbios.no_receive_flagsFlagsUnsigned integer (8 bits)1.10.0 to 4.2.4
netbios.no_receive_flags.send_no_ackSEND.NO.ACK data receivedBoolean1.10.0 to 4.2.4
netbios.num_data_bytes_acceptedNumber of data bytes acceptedUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.reassembled.lengthReassembled NetBIOS lengthUnsigned integer (32 bits)1.4.0 to 4.2.4
netbios.recv_cont_reqRECEIVE_CONTINUE requestedBoolean1.0.0 to 1.8.15
netbios.remote_sessionRemote Session No.Unsigned integer (8 bits)1.0.0 to 4.2.4
netbios.resp_corrlResponse CorrelatorUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.resync_indicatorRe-sync indicatorUnsigned integer (16 bits)2.0.0 to 4.2.4
netbios.send_no_ackHandle SEND.NO.ACKBoolean1.0.0 to 1.8.15
netbios.state_of_nameState of nameUnsigned integer (8 bits)2.0.0 to 4.2.4
netbios.statusStatusUnsigned integer (8 bits)1.0.0 to 4.2.4
netbios.status_buffer_lenLength of status bufferUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.status_requestStatus requestUnsigned integer (8 bits)2.0.0 to 4.2.4
netbios.status_responseStatus responseUnsigned integer (8 bits)2.0.0 to 4.2.4
netbios.termination_indicatorTermination indicatorUnsigned integer (16 bits)1.0.0 to 4.2.4
netbios.unknown_command_dataUnknown NetBIOS command dataLabel2.0.0 to 4.2.4
netbios.versionNetBIOS VersionBoolean1.0.0 to 4.2.4
netbios.xmit_corrlTransmit CorrelatorUnsigned integer (16 bits)1.0.0 to 4.2.4