NTLM Secure Service Provider (ntlmssp)

Table 179. NTLM Secure Service Provider (ntlmssp)

FieldField NameTypeDescription
dcerpc.negotiateflagsFlagsUnsigned 32-bit integer 
ntlmssp.auth.domainDomain nameString 
ntlmssp.auth.hostnameHost nameString 
ntlmssp.auth.lmresponseLan Manager ResponseByte array 
ntlmssp.auth.ntresponseNTLM ResponseByte array 
ntlmssp.auth.sesskeySession KeyByte array 
ntlmssp.auth.usernameUser nameString 
ntlmssp.blob.lengthLengthUnsigned 16-bit integer 
ntlmssp.blob.maxlenMaxlenUnsigned 16-bit integer 
ntlmssp.blob.offsetOffsetUnsigned 32-bit integer 
ntlmssp.challenge.addresslistAddress ListNo value 
ntlmssp.challenge.addresslist.domaindnsDomain DNS NameString 
ntlmssp.challenge.addresslist.domainnbDomain NetBIOS NameString 
ntlmssp.challenge.addresslist.lengthLengthUnsigned 16-bit integer 
ntlmssp.challenge.addresslist.maxlenMaxlenUnsigned 16-bit integer 
ntlmssp.challenge.addresslist.offsetOffsetUnsigned 32-bit integer 
ntlmssp.challenge.addresslist.serverdnsServer DNS NameString 
ntlmssp.challenge.addresslist.servernbServer NetBIOS NameString 
ntlmssp.challenge.domainDomainString 
ntlmssp.identifierNTLMSSP identifierStringNTLMSSP Identifier
ntlmssp.messagetypeNTLM Message TypeUnsigned 32-bit integer 
ntlmssp.negotiate.callingworkstationCalling workstation nameString 
ntlmssp.negotiate.callingworkstation.bufferCalling workstation name bufferUnsigned 32-bit integer 
ntlmssp.negotiate.callingworkstation.maxlenCalling workstation name max lengthUnsigned 16-bit integer 
ntlmssp.negotiate.callingworkstation.strlenCalling workstation name lengthUnsigned 16-bit integer 
ntlmssp.negotiate.domainCalling workstation domainString 
ntlmssp.negotiate.domain.bufferCalling workstation domain bufferUnsigned 32-bit integer 
ntlmssp.negotiate.domain.maxlenCalling workstation domain max lengthUnsigned 16-bit integer 
ntlmssp.negotiate.domain.strlenCalling workstation domain lengthUnsigned 16-bit integer 
ntlmssp.negotiate00000008Request 0x00000008Boolean 
ntlmssp.negotiate00000400Negotiate 0x00000400Boolean 
ntlmssp.negotiate00000800Negotiate 0x00000800Boolean 
ntlmssp.negotiate128Negotiate 128Boolean 
ntlmssp.negotiatealwayssignNegotiate Always SignBoolean 
ntlmssp.negotiatechallengeacceptresponseNegotiate Challenge Accept ResponseBoolean 
ntlmssp.negotiatechallengeinitresponseNegotiate Challenge Init ResponseBoolean 
ntlmssp.negotiatechallengenonntsessionkeyNegotiate Challenge Non NT Session KeyBoolean 
ntlmssp.negotiatedatagramstyleNegotiate Datagram StyleBoolean 
ntlmssp.negotiatedomainsuppliedNegotiate Domain SuppliedBoolean 
ntlmssp.negotiatekeyexchNegotiate Key ExchangeBoolean 
ntlmssp.negotiatelmkeyNegotiate Lan Manager KeyBoolean 
ntlmssp.negotiatenetwareNegotiate NetwareBoolean 
ntlmssp.negotiatent00100000Negotiate 0x00100000Boolean 
ntlmssp.negotiatent00200000Negotiate 0x00200000Boolean 
ntlmssp.negotiatent00400000Negotiate 0x00400000Boolean 
ntlmssp.negotiatent01000000Negotiate 0x01000000Boolean 
ntlmssp.negotiatent02000000Negotiate 0x02000000Boolean 
ntlmssp.negotiatent04000000Negotiate 0x04000000Boolean 
ntlmssp.negotiatent08000000Negotiate 0x08000000Boolean 
ntlmssp.negotiatent10000000Negotiate 0x10000000Boolean 
ntlmssp.negotiatent80000000Negotiate 0x80000000Boolean 
ntlmssp.negotiatentlmNegotiate NTLM keyBoolean 
ntlmssp.negotiatentlm2Negotiate NTLM2 keyBoolean 
ntlmssp.negotiateoemNegotiate OEMBoolean 
ntlmssp.negotiatesealNegotiate SealBoolean 
ntlmssp.negotiatesignNegotiate SignBoolean 
ntlmssp.negotiatetargetinfoNegotiate Target InfoBoolean 
ntlmssp.negotiatethisislocalcallNegotiate This is Local CallBoolean 
ntlmssp.negotiateunicodeNegotiate UNICODEBoolean 
ntlmssp.negotiateworkstationsuppliedNegotiate Workstation SuppliedBoolean 
ntlmssp.ntlmchallengeNTLM ChallengeByte array 
ntlmssp.requesttargetRequest TargetBoolean 
ntlmssp.reservedReservedByte array 
ntlmssp.string.lengthLengthUnsigned 16-bit integer 
ntlmssp.string.maxlenMaxlenUnsigned 16-bit integer 
ntlmssp.string.offsetOffsetUnsigned 32-bit integer