Display Filter Reference: Microsoft Service Control

Protocol field name: svcctl

Versions: 1.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
svcctl.access_mask Access Mask Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.binarypathname Binary Path Name Character string 1.6.0 to 2.6.5
svcctl.buffer Buffer Unsigned integer, 4 bytes 1.6.0 to 2.6.5
svcctl.bytes_needed Bytes Needed Unsigned integer, 4 bytes 1.6.0 to 1.8.15
svcctl.database Database Character string 1.0.0 to 2.6.5
svcctl.depend_size Depend Size Unsigned integer, 4 bytes 1.6.0 to 2.6.5
svcctl.dependencies Dependencies Character string 1.6.0 to 2.6.5
svcctl.displayname Display Name Character string 1.6.0 to 2.6.5
svcctl.hnd Context Handle Sequence of bytes 1.0.0 to 2.6.5
svcctl.is_locked IsLocked Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.loadordergroup Load Order Group Character string 1.6.0 to 2.6.5
svcctl.lock Lock Sequence of bytes 1.0.0 to 2.6.5
svcctl.lock_duration Duration Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.lock_owner Owner Character string 1.0.0 to 2.6.5
svcctl.machinename MachineName Character string 1.0.0 to 2.6.5
svcctl.opnum Operation Unsigned integer, 2 bytes 1.0.0 to 2.6.5
svcctl.password Password Character string 1.6.0 to 2.6.5
svcctl.password_size Password Size Unsigned integer, 4 bytes 1.6.0 to 2.6.5
svcctl.rc Return code Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.required_size Required Size Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.resume Resume Handle Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.scm_rights_connect Connect Boolean 1.0.0 to 2.6.5
svcctl.scm_rights_create_service Create Service Boolean 1.0.0 to 2.6.5
svcctl.scm_rights_enumerate_service Enumerate Service Boolean 1.0.0 to 2.6.5
svcctl.scm_rights_lock Lock Boolean 1.0.0 to 2.6.5
svcctl.scm_rights_modify_boot_config Modify Boot Config Boolean 1.0.0 to 2.6.5
svcctl.scm_rights_query_lock_status Query Lock Status Boolean 1.0.0 to 2.6.5
svcctl.service_error_control Service Error Control Unsigned integer, 4 bytes 1.6.0 to 2.6.5
svcctl.service_start_name Service Start Name Character string 1.6.0 to 2.6.5
svcctl.service_start_type Service Start Type Unsigned integer, 4 bytes 1.6.0 to 2.6.5
svcctl.service_state Service State Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.service_type Service Type Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.service_type.fs File System Driver Service Boolean 1.6.0 to 2.6.5
svcctl.service_type.interactive Interactive Process Service Boolean 1.6.0 to 2.6.5
svcctl.service_type.kernel Kernel Driver Service Boolean 1.6.0 to 2.6.5
svcctl.service_type.win32_own Self Process Service Boolean 1.6.0 to 2.6.5
svcctl.service_type.win32_shared Shared Process Service Boolean 1.6.0 to 2.6.5
svcctl.servicename Service Name Character string 1.6.0 to 2.6.5
svcctl.services_returned Services Returned Unsigned integer, 4 bytes 1.6.0 to 1.8.15
svcctl.size Size Unsigned integer, 4 bytes 1.0.0 to 2.6.5
svcctl.tagid Tag Id Unsigned integer, 4 bytes 1.6.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More