Display Filter Reference: Microsoft Network Logon
Protocol field name: rpc_netlogon
Versions: 1.0.0 to 3.4.5
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| netlogon.accountdomaingroupcount | AccountDomainGroup count | Unsigned integer, 4 bytes | 3.4.0 to 3.4.5 |
| netlogon.acct.expiry_time | Acct Expiry Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.acct_desc | Acct Desc | Character string | 1.0.0 to 3.4.5 |
| netlogon.acct_name | Acct Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.alias_name | Alias Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.alias_rid | Alias RID | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.attrs | Attributes | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.audit_retention_period | Audit Retention Period | Time offset | 1.0.0 to 3.4.5 |
| netlogon.auditing_mode | Auditing Mode | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.auth.data | Auth Data | Sequence of bytes | 1.0.0 to 1.8.15 |
| netlogon.auth.size | Auth Size | Unsigned integer, 4 bytes | 1.0.0 to 1.8.15 |
| netlogon.auth_flags | Auth Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.authenticated | Authenticated NTHASH | Label | 3.4.0 to 3.4.5 |
| netlogon.authoritative | Authoritative | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.bad_pw_count | Bad PW Count | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.bad_pw_count16 | Bad PW Count | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.blob | BLOB | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.blob.size | Size | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.challenge | Challenge | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.cipher_current_data | Cipher Current Data | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.cipher_current_set_time | Cipher Current Set Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.cipher_len | Cipher Len | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.cipher_maxlen | Cipher Max Len | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.cipher_old_data | Cipher Old Data | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.cipher_old_set_time | Cipher Old Set Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.client.site_name | Client Site Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.client_dns_name | Client DNS Name | Character string | 1.4.0 to 3.4.5 |
| netlogon.clientchallenge | Client Challenge | Sequence of bytes | 1.4.0 to 3.4.5 |
| netlogon.clientcred | Client Credential | Sequence of bytes | 1.4.0 to 3.4.5 |
| netlogon.code | Code | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.codepage | Codepage | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.comment | Comment | Character string | 1.0.0 to 3.4.5 |
| netlogon.computer_name | Computer Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.count | Count | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.country | Country | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.credential | Credential | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.data.length | Length of Data | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.data.package_name | SSP Package Name | Character string | 1.4.0 to 3.4.5 |
| netlogon.database_id | Database Id | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.db_create_time | DB Create Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.db_modify_time | DB Modify Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.dc.address | DC Address | Character string | 1.0.0 to 3.4.5 |
| netlogon.dc.address_type | DC Address Type | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.dc.flags | Domain Controller Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.closest | Closest | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.dns_controller | DNS Controller | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.dns_domain | DNS Domain | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.dns_forest | DNS Forest | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.ds | DS | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.gc | GC | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.good_timeserv | Good Timeserv | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.kdc | KDC | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.ldap | LDAP | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.ndnc | NDNC | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.pdc | PDC | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.timeserv | Timeserv | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.flags.writable | Writable | Boolean | 1.0.0 to 3.4.5 |
| netlogon.dc.name | DC Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.dc.site_name | DC Site Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.delta_type | Delta Type | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.dir_drive | Dir Drive | Character string | 1.0.0 to 3.4.5 |
| netlogon.dns.forest_name | DNS Forest Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.dns_domain | DNS Domain | Character string | 1.0.0 to 3.4.5 |
| netlogon.dns_host | DNS Host | Character string | 1.0.0 to 3.4.5 |
| netlogon.dnsdomaininfo | DnsDomainInfo | Label | 1.2.0 to 1.8.15 |
| netlogon.domain | Domain | Character string | 1.0.0 to 3.4.5 |
| netlogon.domain_create_time | Domain Create Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.domain_modify_time | Domain Modify Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.domaingroupcount | DomainGroup count | Unsigned integer, 4 bytes | 3.4.0 to 3.4.5 |
| netlogon.dos.rc | DOS error code | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.downlevel_domain | Downlevel Domain | Character string | 1.0.0 to 3.4.5 |
| netlogon.dummy | Dummy | Character string | 1.0.0 to 3.4.5 |
| netlogon.dummy.long1 | Dummy1 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long10 | Dummy10 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long2 | Dummy2 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long3 | Dummy3 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long4 | Dummy4 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long5 | Dummy5 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long6 | Dummy6 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long7 | Dummy7 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long8 | Dummy8 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy.long9 | Dummy9 Long | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.dummy_string | Dummy String | Character string | 1.4.0 to 3.4.5 |
| netlogon.encryption.types | Supported Encryption Types | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.entries | Entries | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.event_audit_option | Event Audit Option | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.extra.flags.dc_firsthop | DC at the end of the first hop of cross forest | Boolean | 1.4.0 to 3.4.5 |
| netlogon.extra.flags.rodc_ntlm | Request is a NTLM auth passed by a RODC | Boolean | 1.4.0 to 3.4.5 |
| netlogon.extra.flags.rodc_to_dc | Request from a RODC to a DC from another domain | Boolean | 1.4.0 to 3.4.5 |
| netlogon.extra.flags.rootdc | Request passed to DC of root forest | Boolean | 1.4.0 to 3.4.5 |
| netlogon.extra_flags | Extra Flags | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.flags | Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.full_name | Full Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags | Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.avoid_self | Avoid Self | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.background_only | Background Only | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.ds_preferred | DS Preferred | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.ds_required | DS Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.force_rediscovery | Force Rediscovery | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.gc_server_required | GC Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.good_timeserv_preferred | Timeserv Preferred | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.ip_required | IP Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.is_dns_name | Is DNS Name | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.is_flat_name | Is Flat Name | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.kdc_required | KDC Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.only_ldap_needed | Only LDAP Needed | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.pdc_required | PDC Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.return_dns_name | Return DNS Name | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.return_flat_name | Return Flat Name | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.timeserv_required | Timeserv Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.get_dcname.request.flags.writable_required | Writable Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.group_desc | Group Desc | Character string | 1.0.0 to 3.4.5 |
| netlogon.group_name | Group Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.group_rid | Group RID | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.groups.attrs.enabled | Enabled | Boolean | 1.0.0 to 3.4.5 |
| netlogon.groups.attrs.enabled_by_default | Enabled By Default | Boolean | 1.0.0 to 3.4.5 |
| netlogon.groups.attrs.mandatory | Mandatory | Boolean | 1.0.0 to 3.4.5 |
| netlogon.handle | Handle | Character string | 1.0.0 to 3.4.5 |
| netlogon.home_dir | Home Dir | Character string | 1.0.0 to 3.4.5 |
| netlogon.kickoff_time | Kickoff Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.last_logoff_time | Last Logoff Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.len | Len | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.level | Level | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.level16 | Level | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.lm_chal_resp | LM Chal resp | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.lm_owf_pwd | LM Pwd | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.lm_owf_pwd.encrypted | Encrypted LM Pwd | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.lm_pwd_present | LM PWD Present | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.logoff_time | Logoff Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.logon.dnslogondomainname | DNS Logon Domain name | Character string | 1.4.0 to 3.4.5 |
| netlogon.logon.upn | UPN | Character string | 1.4.0 to 3.4.5 |
| netlogon.logon_attempts | Logon Attempts | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.logon_count | Logon Count | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.logon_count16 | Logon Count | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.logon_duration | Duration | Unsigned integer, 4 bytes | 2.0.0 to 3.4.5 |
| netlogon.logon_id | Logon ID | Unsigned integer, 8 bytes | 1.0.0 to 3.4.5 |
| netlogon.logon_script | Logon Script | Character string | 1.0.0 to 3.4.5 |
| netlogon.logon_time | Logon Time | Date and time | 1.0.0 to 3.4.5 |
| netlogon.lsapolicy.length | Length | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.lsapolicy.pointer | Pointer | Sequence of bytes | 1.4.0 to 1.8.15 |
| netlogon.lsapolicy.referentID | Referent ID | Unsigned integer, 4 bytes | 1.4.0 to 1.8.15 |
| netlogon.max_audit_event_count | Max Audit Event Count | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.max_log_size | Max Log Size | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.max_size | Max Size | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.max_working_set_size | Max Working Set Size | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.membershipsdomainscount | Membership Domains count | Unsigned integer, 4 bytes | 3.4.0 to 3.4.5 |
| netlogon.min_passwd_len | Min Password Len | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.min_working_set_size | Min Working Set Size | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.modify_count | Modify Count | Unsigned integer, 8 bytes | 1.0.0 to 3.4.5 |
| netlogon.neg_flags | Negotiation options | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.next_reference | Next Reference | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.nonpaged_pool_limit | Non-Paged Pool Limit | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.nt_chal_resp | NT Chal resp | Sequence of bytes | 1.0.0 to 1.8.15, 3.4.0 to 3.4.5 |
| netlogon.nt_owf_pwd | NT Pwd | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.nt_pwd_present | NT PWD Present | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.num_dc | Num DCs | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.num_deltas | Num Deltas | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.num_other_groups | Num Other Groups | Unsigned integer, 4 bytes | 1.0.0 to 1.2.18 |
| netlogon.num_rids | Num RIDs | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.num_sid | Num Extra SID | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.num_trusts | Num Trusts | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.oem_info | OEM Info | Character string | 1.0.0 to 3.4.5 |
| netlogon.opnum | Operation | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.os.version | OS version | Character string | 1.4.0 to 3.4.5 |
| netlogon.pac.data | Pac Data | Sequence of bytes | 1.0.0 to 1.8.15 |
| netlogon.pac.size | Pac Size | Unsigned integer, 4 bytes | 1.0.0 to 1.8.15 |
| netlogon.page_file_limit | Page File Limit | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.paged_pool_limit | Paged Pool Limit | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.param_ctrl | Param Ctrl | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.parameters | Parameters | Character string | 1.0.0 to 3.4.5 |
| netlogon.parent_index | Parent Index | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.passwd_history_len | Passwd History Len | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.pdc_connection_status | PDC Connection Status | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.principal | Principal | Character string | 1.0.0 to 1.8.15 |
| netlogon.priv | Priv | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.privilege_control | Privilege Control | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.privilege_entries | Privilege Entries | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.privilege_name | Privilege Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.profile_path | Profile Path | Character string | 1.0.0 to 3.4.5 |
| netlogon.pwd_age | PWD Age | Time offset | 1.0.0 to 3.4.5 |
| netlogon.pwd_can_change_time | PWD Can Change | Date and time | 1.0.0 to 3.4.5 |
| netlogon.pwd_expired | PWD Expired | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.pwd_last_set_time | PWD Last Set | Date and time | 1.0.0 to 3.4.5 |
| netlogon.pwd_must_change_time | PWD Must Change | Date and time | 1.0.0 to 3.4.5 |
| netlogon.rc | Return code | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.reference | Reference | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.reserved | Reserved | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.resourcegroupcount | ResourceGroup count | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.restart_state | Restart State | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.rid | User RID | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.s4u2proxytarget | S4U2proxyTarget | Character string | 1.8.0 to 3.4.5 |
| netlogon.sec_chan_type | Sec Chan Type | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.secchan.bind.unknown1 | Unknown1 | Unsigned integer, 4 bytes | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind.unknown2 | Unknown2 | Unsigned integer, 4 bytes | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind_ack.unknown1 | Unknown1 | Unsigned integer, 4 bytes | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind_ack.unknown2 | Unknown2 | Unsigned integer, 4 bytes | 1.0.0 to 1.2.18 |
| netlogon.secchan.bind_ack.unknown3 | Unknown3 | Unsigned integer, 4 bytes | 1.0.0 to 1.2.18 |
| netlogon.secchan.digest | Packet Digest | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.secchan.domain | Domain | Character string | 1.0.0 to 1.2.18 |
| netlogon.secchan.flags | Flags | Sequence of bytes | 1.4.0 to 3.4.5 |
| netlogon.secchan.host | Host | Character string | 1.0.0 to 1.2.18 |
| netlogon.secchan.nl_auth_message.dns_domain | DNS Domain | Character string | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.dns_host | DNS Host | Character string | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_flags | Message Flags | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_flags.dns_domain | DNS Domain | Boolean | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_flags.dns_host | DNS Host | Boolean | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_flags.nb_domain | NetBios Domain | Boolean | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_flags.nb_host | NetBios Host | Boolean | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_flags.nb_host_utf8 | NetBios Host(UTF8) | Boolean | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.message_type | Message Type | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.nb_domain | NetBios Domain | Character string | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.nb_host | NetBios Host | Character string | 1.4.0 to 3.4.5 |
| netlogon.secchan.nl_auth_message.nb_host_utf8 | NetBios Host(UTF8) | Character string | 1.4.0 to 3.4.5 |
| netlogon.secchan.nonce | Nonce | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.secchan.sealalg | Seal algorithm | Unsigned integer, 2 bytes | 1.4.0 to 3.4.5 |
| netlogon.secchan.seq | Sequence No | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.secchan.sig | Signature | Sequence of bytes | 1.0.0 to 1.2.18 |
| netlogon.secchan.signalg | Sign algorithm | Unsigned integer, 2 bytes | 1.4.0 to 3.4.5 |
| netlogon.secchan.verifier | Secure Channel Verifier | Label | 1.0.0 to 3.4.5 |
| netlogon.security_information | Security Information | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.sensitive_data | Data | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.sensitive_data_flag | Sensitive Data | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.sensitive_data_len | Length | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.serial_number | Serial Number | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.server | Server | Character string | 1.0.0 to 3.4.5 |
| netlogon.serverchallenge | Server Challenge | Sequence of bytes | 1.4.0 to 3.4.5 |
| netlogon.servercred | Server Credential | Sequence of bytes | 1.4.0 to 3.4.5 |
| netlogon.serverrid | Account RID | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| netlogon.sessionkey | SessionKey | Label | 3.4.0 to 3.4.5 |
| netlogon.site_name | Site Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.sync_context | Sync Context | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.system_flags | System Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.tc_connection_status | TC Connection Status | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.time_created | Time Created | Unsigned integer, 4 bytes | 2.0.0 to 3.4.5 |
| netlogon.time_limit | Time Limit | Time offset | 1.0.0 to 3.4.5 |
| netlogon.timestamp | Timestamp | Date and time | 1.0.0 to 3.4.5 |
| netlogon.transited_list_size | TransitedListSize | Unsigned integer, 4 bytes | 1.8.0 to 3.4.5 |
| netlogon.transited_service | Transited Service | Character string | 1.8.0 to 3.4.5 |
| netlogon.trust.attribs.cross_organization | Cross Organization | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.attribs.forest_transitive | Forest Transitive | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.attribs.non_transitive | Non Transitive | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.attribs.quarantined_domain | Quarantined Domain | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.attribs.treat_as_external | Treat As External | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.attribs.uplevel_only | Uplevel Only | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.attribs.within_forest | Within Forest | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.extension | Trust extension | Character string | 3.4.0 to 3.4.5 |
| netlogon.trust.extension.maxcount | Max Count | Unsigned integer, 4 bytes | 3.4.0 to 3.4.5 |
| netlogon.trust.extension_length | Length | Unsigned integer, 4 bytes | 3.4.0 to 3.4.5 |
| netlogon.trust.extension_offset | Offset | Unsigned integer, 4 bytes | 3.4.0 to 3.4.5 |
| netlogon.trust.extention | Trust extension | Character string | 1.4.0 to 3.2.13 |
| netlogon.trust.extention.maxcount | Max Count | Unsigned integer, 4 bytes | 1.4.0 to 3.2.13 |
| netlogon.trust.extention_length | Length | Unsigned integer, 4 bytes | 1.4.0 to 3.2.13 |
| netlogon.trust.extention_offset | Offset | Unsigned integer, 4 bytes | 1.4.0 to 3.2.13 |
| netlogon.trust.flags.in_forest | In Forest | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.flags.inbound | Inbound Trust | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.flags.native_mode | Native Mode | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.flags.outbound | Outbound Trust | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.flags.primary | Primary | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust.flags.tree_root | Tree Root | Boolean | 1.0.0 to 3.4.5 |
| netlogon.trust_attribs | Trust Attributes | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.trust_flags | Trust Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.trust_type | Trust Type | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.trusted_dc | Trusted DC | Character string | 1.0.0 to 3.4.5 |
| netlogon.TrustedDomainName | TrustedDomainName | Character string | 1.6.0 to 3.4.5 |
| netlogon.unknown.char | Unknown char | Unsigned integer, 1 byte | 1.0.0 to 3.4.5 |
| netlogon.unknown.long | Unknown long | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.unknown.short | Unknown short | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.unknown_string | Unknown string | Character string | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.account_auto_locked | Account Auto Locked | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.account_disabled | Account Disabled | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.dont_expire_password | Don\'t Expire Password | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.dont_require_preauth | Don\'t Require PreAuth | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.encrypted_text_password_allowed | Encrypted Text Password Allowed | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.home_directory_required | Home Directory Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.interdomain_trust_account | Interdomain trust Account | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.mns_logon_account | MNS Logon Account | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.normal_account | Normal Account | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.not_delegated | Not Delegated | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.password_not_required | Password Not Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.server_trust_account | Server Trust Account | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.smartcard_required | SmartCard Required | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.temp_duplicate_account | Temp Duplicate Account | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.trusted_for_delegation | Trusted For Delegation | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.use_des_key_only | Use DES Key Only | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.account_control.workstation_trust_account | Workstation Trust Account | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.flags.extra_sids | Extra SIDs | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user.flags.resource_groups | Resource Groups | Boolean | 1.0.0 to 3.4.5 |
| netlogon.user_account_control | User Account Control | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.user_flags | User Flags | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.user_session_key | User Session Key | Sequence of bytes | 1.0.0 to 3.4.5 |
| netlogon.UserName | UserName | Character string | 1.6.0 to 3.4.5 |
| netlogon.validation_level | Validation Level | Unsigned integer, 2 bytes | 1.0.0 to 3.4.5 |
| netlogon.werr.rc | WERR error code | Unsigned integer, 4 bytes | 1.0.0 to 3.4.5 |
| netlogon.wkst.fqdn | Wkst FQDN | Character string | 1.0.0 to 3.4.5 |
| netlogon.wkst.name | Wkst Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.wkst.os | Wkst OS | Character string | 1.0.0 to 3.4.5 |
| netlogon.wkst.site_name | Wkst Site Name | Character string | 1.0.0 to 3.4.5 |
| netlogon.wksts | Workstations | Character string | 1.0.0 to 3.4.5 |
| netlogon.workstation.flags | Workstation Flags | Unsigned integer, 4 bytes | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na1 | Account lockout | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na10 | BDC handling Changelogs | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na100 | Refusal of password change | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na1000 | Avoid replication account database | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na10000 | DNS trusts supported | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na100000 | AES supported | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na2 | NT3.5 BDC continuous update | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na20 | Restarting full DC sync | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na200 | SendToSam | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na2000 | Avoid replication Auth database | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na20000 | ServerPasswordSet2 supported | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na200000 | RODC pass-through | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na4 | RC4 encryption | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na40 | Handle multiple SIDs | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na400 | Generic pass-through | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na4000 | Strong key | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na40000 | GetDomainInfo supported | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na400000 | AES & SHA2 supported | Boolean | 1.4.0 to 3.2.13 |
| ntlmssp.neg_flags.na8 | Promotion count(deprecated) | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na80 | DatabaseRedo call | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na800 | Concurrent RPC | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na8000 | Transitive trusts | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na80000 | Cross forest trust | Boolean | 1.4.0 to 3.4.5 |
| ntlmssp.neg_flags.na800000 | Not used 8000000 | Boolean | 1.4.0 to 1.8.15 |
| ntlmssp.neg_flags.na8000000 | Authenticated RPC supported | Boolean | 1.4.0 to 3.4.5 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance