| mapi.decrypted.data | Decrypted data | Byte array | Decrypted data |
| mapi.decrypted.data.len | Length | Unsigned 32-bit integer | Used size of buffer for decrypted data |
| mapi.decrypted.data.maxlen | Max Length | Unsigned 32-bit integer | Maximum size of buffer for decrypted data |
| mapi.decrypted.data.offset | Offset | Unsigned 32-bit integer | Offset into buffer for decrypted data |
| mapi.encap_len | Length | Unsigned 16-bit integer | Length of encapsulated/encrypted data |
| mapi.hnd | Context Handle | Byte array | |
| mapi.pdu.extra_trailer | unknown | Byte array | If you know what this is, contact ethereal developers |
| mapi.pdu.len | Length | Unsigned 16-bit integer | Size of the command PDU |
| mapi.pdu.trailer | Trailer | Unsigned 32-bit integer | If you know what this is, contact ethereal developers |
| mapi.rc | Return code | Unsigned 32-bit integer | |
| mapi.unknown_data | unknown encrypted data | Byte array | Unknown data. If you know what this is, contact ethereal developers. |
| mapi.unknown_short | Unknown short | Unsigned 16-bit integer | Unknown short. If you know what this is, contact ethereal developers. |
| mapi.unknown_string | Unknown string | String | Unknown string. If you know what this is, contact ethereal developers. |