SMB2 Data Fields and Properties

Properties:  Property.SMBFileIDPersistent – For SMB2, the file ID can be one of two types.  This represents the Persistent type. Property.SMBFileIDColatile – For SMB2, the file ID can be one of two types.  This represents the Volitle type. Property.SMBFileName – The file name for an SMB request.  This might also represent state information so frame data…

1

IPv4 Data Fields and Properties

Fields: IPv4.Address – Useful for filtering on an address independent of the direction. IPV4.SourceAddress – Represents the source address and is useful for filtering for traffic from a specific source. IPV4.DestinationAddress – Represents the source address and is useful for filtering for traffic toa specific destination.

0

SMB Data Fields and Properties

Properties:  Property.SMBFileID – The File ID for any kind of SMB request property.SMBFileID==0x4000 Property.SMBFileName – The file name for an SMB request.  This might also represent state information so frame data does not have to exist for this to be populated. Property.SMBCommand – Represents the SMB command for the current frame.  If two SMB Commands…

1

TCP Data Fields and Properties

Fields: TCP.Port – Filters on the Source or Destination port.  Used to find traffic based on port which is often associated with an application. TCP.Port==80    // filters on the default port for HTTP traffic. TCP.Flags.Reset – Can be used to test and see if the reset flag is set. TCP.Window – Window Size of the…

3

Network Monitor Fields and Properties

Collected here are a list of the most common data fields and properties.  They are categorized by protocol.  This list is helpful for getting an idea of the most common data fields and properties with descriptions of what they do.  The list will continue to grow as we add new propreties, indetify helpful data fields, and…

1

Map Of Visitors

Report Web Site  

1