Display Filter Reference: Transport-Neutral Encapsulation Format

Protocol field name: tnef

Versions: 1.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
tnef.attribute Attribute Label 1.0.0 to 2.6.5
tnef.attribute.checksum Checksum Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date Date Label 1.4.0 to 2.6.5
tnef.attribute.date.day Day Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date.day_of_week Day Of Week Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date.hour Hour Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date.minute Minute Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date.month Month Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date.second Second Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.date.year Year Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.display_name Display Name Character string 1.0.0 to 2.6.5
tnef.attribute.email_address Email Address Character string 1.0.0 to 2.6.5
tnef.attribute.length Length Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.attribute.lvl Type Unsigned integer, 1 byte 1.0.0 to 2.6.5
tnef.attribute.string String Character string 1.0.0 to 2.6.5
tnef.attribute.tag Tag Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.attribute.tag.id Tag Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.tag.kind Kind Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.attribute.tag.name.id Name Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.attribute.tag.name.length Length Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.attribute.tag.name.string Name Character string 1.0.0 to 2.6.5
tnef.attribute.tag.set Set Globally Unique Identifier 1.0.0 to 2.6.5
tnef.attribute.tag.type Type Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.attribute.value Value Label 1.0.0 to 2.6.5
tnef.expect_single_item Expected single item Label 1.12.0 to 2.6.5
tnef.key Key Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.mapi_props MAPI Properties Label 1.0.0 to 2.6.5
tnef.mapi_props.count Count Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.message_class Message Class Character string 1.0.0 to 2.6.5
tnef.message_class.original Original Message Class Character string 1.0.0 to 2.6.5
tnef.oem_codepage OEM Codepage Unsigned integer, 8 bytes 1.0.0 to 2.6.5
tnef.padding Padding Label 1.0.0 to 2.6.5
tnef.priority Priority Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.property Property Label 1.0.0 to 2.6.5
tnef.property.padding Padding Label 1.0.0 to 2.6.5
tnef.property.tag Tag Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.property.tag.id Tag Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.property.tag.type Type Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.PropValue.b B Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.PropValue.bin Bin Label 1.0.0 to 2.6.5
tnef.PropValue.err Err Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.PropValue.ft Ft Label 1.0.0 to 2.6.5
tnef.PropValue.i I Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.PropValue.l L Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.PropValue.lpguid Lpguid Label 1.2.0 to 2.6.5
tnef.PropValue.lpszA Lpsza Character string 1.0.0 to 2.6.5
tnef.PropValue.lpszW Lpszw Character string 1.2.0 to 2.6.5
tnef.PropValue.MVbin Mvbin Label 1.0.0 to 2.6.5
tnef.PropValue.MVft Mvft Label 1.0.0 to 2.6.5
tnef.PropValue.MVguid Mvguid Label 1.0.0 to 2.6.5
tnef.PropValue.MVi Mvi Label 1.0.0 to 2.6.5
tnef.PropValue.MVl Mvl Label 1.0.0 to 2.6.5
tnef.PropValue.MVszA Mvsza Label 1.0.0 to 2.6.5
tnef.PropValue.MVszW Mvszw Label 1.0.0 to 2.6.5
tnef.PropValue.null Null Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.PropValue.object Object Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.signature Signature Unsigned integer, 4 bytes 1.0.0 to 2.6.5
tnef.signature.incorrect Incorrect signature Label 1.12.0 to 2.6.5
tnef.value.length Length Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.values.count Count Unsigned integer, 2 bytes 1.0.0 to 2.6.5
tnef.version Version Unsigned integer, 4 bytes 1.0.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More