Display Filter Reference: Simple Protected Negotiation

Protocol field name: spnego

Versions: 1.0.0 to 2.6.3

Back to Display Filter Reference

Field name Description Type Versions
spnego.anonFlag anonFlag Boolean 1.0.0 to 2.6.3
spnego.confFlag confFlag Boolean 1.0.0 to 2.6.3
spnego.decrypted_keytype Decryted keytype Label 2.0.0 to 2.6.3
spnego.delegFlag delegFlag Boolean 1.0.0 to 2.6.3
spnego.hintAddress hintAddress Sequence of bytes 1.12.0 to 2.6.3
spnego.hintName hintName Character string 1.12.0 to 2.6.3
spnego.innerContextToken innerContextToken Label 1.0.0 to 1.10.14
spnego.innerContextToken_element innerContextToken Label 1.12.0 to 2.6.3
spnego.integFlag integFlag Boolean 1.0.0 to 2.6.3
spnego.krb5.acceptor_subkey AcceptorSubkey Boolean 1.2.0 to 2.6.3
spnego.krb5.blob krb5_blob Sequence of bytes 1.0.0 to 2.6.3
spnego.krb5.cfx_ec krb5_cfx_ec Unsigned integer, 2 bytes 1.2.0 to 2.6.3
spnego.krb5.cfx_flags krb5_cfx_flags Unsigned integer, 1 byte 1.2.0 to 2.6.3
spnego.krb5.cfx_rrc krb5_cfx_rrc Unsigned integer, 2 bytes 1.2.0 to 2.6.3
spnego.krb5.cfx_seq krb5_cfx_seq Unsigned integer, 8 bytes 1.2.0 to 2.6.3
spnego.krb5.confounder krb5_confounder Sequence of bytes 1.0.0 to 2.6.3
spnego.krb5.filler krb5_filler Sequence of bytes 1.2.0 to 2.6.3
spnego.krb5.seal_alg krb5_seal_alg Unsigned integer, 2 bytes 1.0.0 to 2.6.3
spnego.krb5.sealed Sealed Boolean 1.2.0 to 2.6.3
spnego.krb5.send_by_acceptor SendByAcceptor Boolean 1.2.0 to 2.6.3
spnego.krb5.sgn_alg krb5_sgn_alg Unsigned integer, 2 bytes 1.0.0 to 2.6.3
spnego.krb5.sgn_cksum krb5_sgn_cksum Sequence of bytes 1.0.0 to 2.6.3
spnego.krb5.snd_seq krb5_snd_seq Sequence of bytes 1.0.0 to 2.6.3
spnego.krb5.tok_id krb5_tok_id Unsigned integer, 2 bytes 1.0.0 to 2.6.3
spnego.krb5_oid KRB5 OID Character string 1.0.0 to 2.6.3
spnego.mechListMIC mechListMIC Sequence of bytes 1.0.0 to 2.6.3
spnego.mechToken mechToken Sequence of bytes 1.0.0 to 2.6.3
spnego.MechType MechType ASN.1 object identifier 1.2.0 to 2.6.3
spnego.MechTypeList_item MechTypeList ASN.1 object identifier 1.0.0 to 1.0.16
spnego.mechTypes mechTypes Unsigned integer, 4 bytes 1.0.0 to 2.6.3
spnego.mutualFlag mutualFlag Boolean 1.0.0 to 2.6.3
spnego.negHints_element negHints Label 1.12.0 to 2.6.3
spnego.negResult negResult Unsigned integer, 4 bytes 1.0.0 to 2.6.3
spnego.negTokenInit negTokenInit Label 1.0.0 to 1.10.14
spnego.negTokenInit_element negTokenInit Label 1.12.0 to 2.6.3
spnego.negTokenTarg negTokenTarg Label 1.0.0 to 1.10.14
spnego.negTokenTarg_element negTokenTarg Label 1.12.0 to 2.6.3
spnego.principal principal Character string 1.0.0 to 1.10.14
spnego.replayFlag replayFlag Boolean 1.0.0 to 2.6.3
spnego.reqFlags reqFlags Sequence of bytes 1.0.0 to 2.6.3
spnego.responseToken responseToken Sequence of bytes 1.0.0 to 2.6.3
spnego.sequenceFlag sequenceFlag Boolean 1.0.0 to 2.6.3
spnego.supportedMech supportedMech ASN.1 object identifier 1.0.0 to 2.6.3
spnego.thisMech thisMech ASN.1 object identifier 1.0.0 to 2.6.3
spnego.unknown_header Unknown header Label 2.0.0 to 2.6.3
spnego.wraptoken wrapToken Label 1.0.0 to 2.6.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More