Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Network Monitor Process

Protocol field name: netmon_process

Versions: 2.6.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
netmon_process.command_lineCommandlineCharacter string2.6.0 to 4.6.0
netmon_process.directory_table_baseDirectory table baseUnsigned integer (64 bits)2.6.0 to 4.6.0
netmon_process.directory_table_base32Directory table baseUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.exit_statusExit statusSigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.handle_countHandle countUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.image_file_nameImage file nameCharacter string2.6.0 to 4.6.0
netmon_process.page_directory_basePage directory baseUnsigned integer (64 bits)2.6.0 to 4.6.0
netmon_process.page_fault_countPage fault countUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.pagefile_usagePagefile usageUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.parent_idParent IDUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.peak_page_file_usagePeak page file usageUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.peak_virtual_sizePeak virtual sizeUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.peak_working_set_sizePeak working set sizeUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.private_page_countPrivate page countUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.process_idProcess IDUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.process_user_sid.invalidInvalid SIDLabel2.6.0 to 4.6.0
netmon_process.quota_non_paged_pool_usageQuota nonpaged pool usageUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.quota_paged_pool_usageQuota paged pool usageUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.quota_peak_non_paged_pool_usageQuota peak non-paged pool usageUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.quota_peak_paged_pool_usageQuota peak paged pool usageUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.reservedReservedUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.session_idSession IDUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.unique_process_keyUnique process keyUnsigned integer (64 bits)2.6.0 to 4.6.0
netmon_process.unknownUnknownByte sequence2.6.0 to 4.6.0
netmon_process.user_sid.authorityUser SID AuthorityUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.user_sid.idUser SID Identifier AuthorityByte sequence2.6.0 to 4.6.0
netmon_process.user_sid.revisionUser SID RevisionUnsigned integer (8 bits)2.6.0 to 4.6.0
netmon_process.user_sid.subauth_countUser SID Subauth countUnsigned integer (8 bits)2.6.0 to 4.6.0
netmon_process.virtual_sizeVirtual sizeUnsigned integer (32 bits)2.6.0 to 4.6.0
netmon_process.workingset_sizeWorking set sizeUnsigned integer (32 bits)2.6.0 to 4.6.0