| dcerpc.negotiateflags | Flags | Unsigned 32-bit integer | |
| ntlmssp.auth.domain | Domain name | String | |
| ntlmssp.auth.hostname | Host name | String | |
| ntlmssp.auth.lmresponse | Lan Manager Response | Byte array | |
| ntlmssp.auth.ntresponse | NTLM Response | Byte array | |
| ntlmssp.auth.sesskey | Session Key | Byte array | |
| ntlmssp.auth.username | User name | String | |
| ntlmssp.blob.length | Length | Unsigned 16-bit integer | |
| ntlmssp.blob.maxlen | Maxlen | Unsigned 16-bit integer | |
| ntlmssp.blob.offset | Offset | Unsigned 32-bit integer | |
| ntlmssp.challenge.addresslist | Address List | No value | |
| ntlmssp.challenge.addresslist.domaindns | Domain DNS Name | String | |
| ntlmssp.challenge.addresslist.domainnb | Domain NetBIOS Name | String | |
| ntlmssp.challenge.addresslist.length | Length | Unsigned 16-bit integer | |
| ntlmssp.challenge.addresslist.maxlen | Maxlen | Unsigned 16-bit integer | |
| ntlmssp.challenge.addresslist.offset | Offset | Unsigned 32-bit integer | |
| ntlmssp.challenge.addresslist.serverdns | Server DNS Name | String | |
| ntlmssp.challenge.addresslist.servernb | Server NetBIOS Name | String | |
| ntlmssp.challenge.domain | Domain | String | |
| ntlmssp.identifier | NTLMSSP identifier | String | NTLMSSP Identifier |
| ntlmssp.messagetype | NTLM Message Type | Unsigned 32-bit integer | |
| ntlmssp.negotiate.callingworkstation | Calling workstation name | String | |
| ntlmssp.negotiate.callingworkstation.buffer | Calling workstation name buffer | Unsigned 32-bit integer | |
| ntlmssp.negotiate.callingworkstation.maxlen | Calling workstation name max length | Unsigned 16-bit integer | |
| ntlmssp.negotiate.callingworkstation.strlen | Calling workstation name length | Unsigned 16-bit integer | |
| ntlmssp.negotiate.domain | Calling workstation domain | String | |
| ntlmssp.negotiate.domain.buffer | Calling workstation domain buffer | Unsigned 32-bit integer | |
| ntlmssp.negotiate.domain.maxlen | Calling workstation domain max length | Unsigned 16-bit integer | |
| ntlmssp.negotiate.domain.strlen | Calling workstation domain length | Unsigned 16-bit integer | |
| ntlmssp.negotiate00000008 | Request 0x00000008 | Boolean | |
| ntlmssp.negotiate00000400 | Negotiate 0x00000400 | Boolean | |
| ntlmssp.negotiate00000800 | Negotiate 0x00000800 | Boolean | |
| ntlmssp.negotiate128 | Negotiate 128 | Boolean | |
| ntlmssp.negotiatealwayssign | Negotiate Always Sign | Boolean | |
| ntlmssp.negotiatechallengeacceptresponse | Negotiate Challenge Accept Response | Boolean | |
| ntlmssp.negotiatechallengeinitresponse | Negotiate Challenge Init Response | Boolean | |
| ntlmssp.negotiatechallengenonntsessionkey | Negotiate Challenge Non NT Session Key | Boolean | |
| ntlmssp.negotiatedatagramstyle | Negotiate Datagram Style | Boolean | |
| ntlmssp.negotiatedomainsupplied | Negotiate Domain Supplied | Boolean | |
| ntlmssp.negotiatekeyexch | Negotiate Key Exchange | Boolean | |
| ntlmssp.negotiatelmkey | Negotiate Lan Manager Key | Boolean | |
| ntlmssp.negotiatenetware | Negotiate Netware | Boolean | |
| ntlmssp.negotiatent00100000 | Negotiate 0x00100000 | Boolean | |
| ntlmssp.negotiatent00200000 | Negotiate 0x00200000 | Boolean | |
| ntlmssp.negotiatent00400000 | Negotiate 0x00400000 | Boolean | |
| ntlmssp.negotiatent01000000 | Negotiate 0x01000000 | Boolean | |
| ntlmssp.negotiatent02000000 | Negotiate 0x02000000 | Boolean | |
| ntlmssp.negotiatent04000000 | Negotiate 0x04000000 | Boolean | |
| ntlmssp.negotiatent08000000 | Negotiate 0x08000000 | Boolean | |
| ntlmssp.negotiatent10000000 | Negotiate 0x10000000 | Boolean | |
| ntlmssp.negotiatent80000000 | Negotiate 0x80000000 | Boolean | |
| ntlmssp.negotiatentlm | Negotiate NTLM key | Boolean | |
| ntlmssp.negotiatentlm2 | Negotiate NTLM2 key | Boolean | |
| ntlmssp.negotiateoem | Negotiate OEM | Boolean | |
| ntlmssp.negotiateseal | Negotiate Seal | Boolean | |
| ntlmssp.negotiatesign | Negotiate Sign | Boolean | |
| ntlmssp.negotiatetargetinfo | Negotiate Target Info | Boolean | |
| ntlmssp.negotiatethisislocalcall | Negotiate This is Local Call | Boolean | |
| ntlmssp.negotiateunicode | Negotiate UNICODE | Boolean | |
| ntlmssp.negotiateworkstationsupplied | Negotiate Workstation Supplied | Boolean | |
| ntlmssp.ntlmchallenge | NTLM Challenge | Byte array | |
| ntlmssp.requesttarget | Request Target | Boolean | |
| ntlmssp.reserved | Reserved | Byte array | |
| ntlmssp.string.length | Length | Unsigned 16-bit integer | |
| ntlmssp.string.maxlen | Maxlen | Unsigned 16-bit integer | |
| ntlmssp.string.offset | Offset | Unsigned 32-bit integer | |