| rpc.array.len | num | Unsigned 32-bit integer | Length of RPC array |
| rpc.auth.flavor | Flavor | Unsigned 32-bit integer | Flavor |
| rpc.auth.gid | GID | Unsigned 32-bit integer | GID |
| rpc.auth.length | Length | Unsigned 32-bit integer | Length |
| rpc.auth.machinename | Machine Name | String | Machine Name |
| rpc.auth.stamp | Stamp | Unsigned 32-bit integer | Stamp |
| rpc.auth.uid | UID | Unsigned 32-bit integer | UID |
| rpc.authdes.convkey | Conversation Key (encrypted) | Unsigned 32-bit integer | Conversation Key (encrypted) |
| rpc.authdes.namekind | Namekind | Unsigned 32-bit integer | Namekind |
| rpc.authdes.netname | Netname | String | Netname |
| rpc.authdes.nickname | Nickname | Unsigned 32-bit integer | Nickname |
| rpc.authdes.timestamp | Timestamp (encrypted) | Unsigned 32-bit integer | Timestamp (encrypted) |
| rpc.authdes.timeverf | Timestamp verifier (encrypted) | Unsigned 32-bit integer | Timestamp verifier (encrypted) |
| rpc.authdes.window | Window (encrypted) | Unsigned 32-bit integer | Windows (encrypted) |
| rpc.authdes.windowverf | Window verifier (encrypted) | Unsigned 32-bit integer | Window verifier (encrypted) |
| rpc.authgss.checksum | GSS Checksum | Byte array | GSS Checksum |
| rpc.authgss.context | GSS Context | Byte array | GSS Context |
| rpc.authgss.data | GSS Data | Byte array | GSS Data |
| rpc.authgss.data.length | Length | Unsigned 32-bit integer | Length |
| rpc.authgss.major | GSS Major Status | Unsigned 32-bit integer | GSS Major Status |
| rpc.authgss.minor | GSS Minor Status | Unsigned 32-bit integer | GSS Minor Status |
| rpc.authgss.procedure | GSS Procedure | Unsigned 32-bit integer | GSS Procedure |
| rpc.authgss.seqnum | GSS Sequence Number | Unsigned 32-bit integer | GSS Sequence Number |
| rpc.authgss.service | GSS Service | Unsigned 32-bit integer | GSS Service |
| rpc.authgss.token_length | GSS Token Length | Unsigned 32-bit integer | GSS Token Length |
| rpc.authgss.version | GSS Version | Unsigned 32-bit integer | GSS Version |
| rpc.authgss.window | GSS Sequence Window | Unsigned 32-bit integer | GSS Sequence Window |
| rpc.call.dup | Duplicate Call | Unsigned 32-bit integer | Duplicate Call |
| rpc.dup | Duplicate Transaction | Unsigned 32-bit integer | Duplicate Transaction |
| rpc.fraglen | Fragment Length | Unsigned 32-bit integer | Fragment Length |
| rpc.fragment | RPC Fragment | No value | RPC Fragment |
| rpc.fragment.error | Defragmentation error | No value | Defragmentation error due to illegal fragments |
| rpc.fragment.multipletails | Multiple tail fragments found | Boolean | Several tails were found when defragmenting the packet |
| rpc.fragment.overlap | Fragment overlap | Boolean | Fragment overlaps with other fragments |
| rpc.fragment.overlap.conflict | Conflicting data in fragment overlap | Boolean | Overlapping fragments contained conflicting data |
| rpc.fragment.toolongfragment | Fragment too long | Boolean | Fragment contained data past end of packet |
| rpc.fragments | RPC Fragments | No value | RPC Fragments |
| rpc.lastfrag | Last Fragment | Boolean | Last Fragment |
| rpc.msgtyp | Message Type | Unsigned 32-bit integer | Message Type |
| rpc.procedure | Procedure | Unsigned 32-bit integer | Procedure |
| rpc.program | Program | Unsigned 32-bit integer | Program |
| rpc.programversion | Program Version | Unsigned 32-bit integer | Program Version |
| rpc.programversion.max | Program Version (Maximum) | Unsigned 32-bit integer | Program Version (Maximum) |
| rpc.programversion.min | Program Version (Minimum) | Unsigned 32-bit integer | Program Version (Minimum) |
| rpc.reply.dup | Duplicate Reply | Unsigned 32-bit integer | Duplicate Reply |
| rpc.replystat | Reply State | Unsigned 32-bit integer | Reply State |
| rpc.state_accept | Accept State | Unsigned 32-bit integer | Accept State |
| rpc.state_auth | Auth State | Unsigned 32-bit integer | Auth State |
| rpc.state_reject | Reject State | Unsigned 32-bit integer | Reject State |
| rpc.time | Time from request | Time duration | Time between Request and Reply for ONC-RPC calls |
| rpc.value_follows | Value Follows | Boolean | Value Follows |
| rpc.version | RPC Version | Unsigned 32-bit integer | RPC Version |
| rpc.version.max | RPC Version (Maximum) | Unsigned 32-bit integer | RPC Version (Maximum) |
| rpc.version.min | RPC Version (Minimum) | Unsigned 32-bit integer | Program Version (Minimum) |
| rpc.xid | XID | Unsigned 32-bit integer | XID |