| gnutella.header | Descriptor Header | No value | Gnutella Descriptor Header |
| gnutella.header.hops | Hops | Unsigned 8-bit integer | Gnutella Descriptor Hop Count |
| gnutella.header.id | ID | Byte array | Gnutella Descriptor ID |
| gnutella.header.payload | Payload | Unsigned 8-bit integer | Gnutella Descriptor Payload |
| gnutella.header.size | Length | Unsigned 8-bit integer | Gnutella Descriptor Payload Length |
| gnutella.header.ttl | TTL | Unsigned 8-bit integer | Gnutella Descriptor Time To Live |
| gnutella.pong.files | Files Shared | Unsigned 32-bit integer | Gnutella Pong Files Shared |
| gnutella.pong.ip | IP | IPv4 address | Gnutella Pong IP Address |
| gnutella.pong.kbytes | KBytes Shared | Unsigned 32-bit integer | Gnutella Pong KBytes Shared |
| gnutella.pong.payload | Pong | No value | Gnutella Pong Payload |
| gnutella.pong.port | Port | Unsigned 16-bit integer | Gnutella Pong TCP Port |
| gnutella.push.index | Index | Unsigned 32-bit integer | Gnutella Push Index |
| gnutella.push.ip | IP | IPv4 address | Gnutella Push IP Address |
| gnutella.push.payload | Push | No value | Gnutella Push Payload |
| gnutella.push.port | Port | Unsigned 16-bit integer | Gnutella Push Port |
| gnutella.push.servent_id | Servent ID | Byte array | Gnutella Push Servent ID |
| gnutella.query.min_speed | Min Speed | Unsigned 32-bit integer | Gnutella Query Minimum Speed |
| gnutella.query.payload | Query | No value | Gnutella Query Payload |
| gnutella.query.search | Search | String | Gnutella Query Search |
| gnutella.queryhit.count | Count | Unsigned 8-bit integer | Gnutella QueryHit Count |
| gnutella.queryhit.extra | Extra | Byte array | Gnutella QueryHit Extra |
| gnutella.queryhit.hit | Hit | No value | Gnutella QueryHit |
| gnutella.queryhit.hit.extra | Extra | Byte array | Gnutella Query Extra |
| gnutella.queryhit.hit.index | Index | Unsigned 32-bit integer | Gnutella QueryHit Index |
| gnutella.queryhit.hit.name | Name | String | Gnutella Query Name |
| gnutella.queryhit.hit.size | Size | Unsigned 32-bit integer | Gnutella QueryHit Size |
| gnutella.queryhit.ip | IP | IPv4 address | Gnutella QueryHit IP Address |
| gnutella.queryhit.payload | QueryHit | No value | Gnutella QueryHit Payload |
| gnutella.queryhit.port | Port | Unsigned 16-bit integer | Gnutella QueryHit Port |
| gnutella.queryhit.servent_id | Servent ID | Byte array | Gnutella QueryHit Servent ID |
| gnutella.queryhit.speed | Speed | Unsigned 32-bit integer | Gnutella QueryHit Speed |
| gnutella.stream | Gnutella Upload / Download Stream | No value | Gnutella Upload / Download Stream |
| gnutella.truncated | Truncated Frame | No value | The Gnutella Frame Was Truncated |