Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: SMB Pipe Protocol

Protocol field name: smb_pipe

Versions: 1.12.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
smb_pipe.bad_typeBad type fieldLabel1.12.0 to 4.6.0
smb_pipe.bogus_netwkstauserlogon_parametersBogus NetWkstaUserLogon parametersLabel1.12.0 to 4.6.0
smb_pipe.byte_paramByte ParamUnsigned integer (8 bits)1.12.0 to 4.6.0
smb_pipe.bytes_paramBytes ParamByte sequence1.12.0 to 4.6.0
smb_pipe.doubleword_paramDoubleword ParamUnsigned integer (32 bits)1.12.0 to 4.6.0
smb_pipe.fragmentFragmentFrame number1.12.0 to 4.6.0
smb_pipe.fragment.countFragment countUnsigned integer (32 bits)1.12.0 to 4.6.0
smb_pipe.fragment.errorDefragmentation errorFrame number1.12.0 to 4.6.0
smb_pipe.fragment.multipletailsMultiple tail fragments foundBoolean1.12.0 to 4.6.0
smb_pipe.fragment.overlapFragment overlapBoolean1.12.0 to 4.6.0
smb_pipe.fragment.overlap.conflictConflicting data in fragment overlapBoolean1.12.0 to 4.6.0
smb_pipe.fragment.toolongfragmentFragment too longBoolean1.12.0 to 4.6.0
smb_pipe.fragmentsFragmentsLabel1.12.0 to 4.6.0
smb_pipe.functionFunctionUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.getinfo.current_instancesCurrent InstancesUnsigned integer (8 bits)1.12.0 to 4.6.0
smb_pipe.getinfo.info_levelInformation LevelUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.getinfo.input_buffer_sizeInput Buffer SizeUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.getinfo.maximum_instancesMaximum InstancesUnsigned integer (8 bits)1.12.0 to 4.6.0
smb_pipe.getinfo.output_buffer_sizeOutput Buffer SizeUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.getinfo.pipe_namePipe NameCharacter string1.12.0 to 4.6.0
smb_pipe.getinfo.pipe_name_lengthPipe Name LengthUnsigned integer (8 bits)1.12.0 to 4.6.0
smb_pipe.peek.available_bytesAvailable BytesUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.peek.remaining_bytesBytes RemainingUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.peek.statusPipe StatusUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.priorityPriorityUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.reassembled.lengthReassembled SMB Pipe lengthUnsigned integer (32 bits)1.12.0 to 4.6.0
smb_pipe.reassembled_inThis PDU is reassembled inFrame number1.12.0 to 4.6.0
smb_pipe.string_paramString ParamCharacter string1.12.0 to 4.6.0
smb_pipe.word_paramWord ParamUnsigned integer (16 bits)1.12.0 to 4.6.0
smb_pipe.write_raw.bytes_writtenBytes WrittenUnsigned integer (16 bits)1.12.0 to 4.6.0