Display Filter Reference: DCE/RPC Endpoint Mapper

Protocol field name: epm

Versions: 1.0.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
epm.ann_len Annotation length Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.ann_offset Annotation offset Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.annotation Annotation Character string 1.0.0 to 2.4.4
epm.hnd Handle Sequence of bytes 1.0.0 to 2.4.4
epm.if_id Interface Globally Unique Identifier 1.0.0 to 2.4.4
epm.inq_type Inquiry type Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.max_ents Max entries Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.max_towers Max Towers Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.num_ents Num entries Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.num_towers Num Towers Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.object Object Globally Unique Identifier 1.0.0 to 2.4.4
epm.opnum Operation Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.proto.http_port TCP Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.proto.ip IP IPv4 address 1.0.0 to 2.4.4
epm.proto.named_pipe Named Pipe Character string 1.0.0 to 2.4.4
epm.proto.netbios_name NetBIOS Name Character string 1.0.0 to 2.4.4
epm.proto.tcp_port TCP Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.proto.udp_port UDP Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.proto_id.undecoded RightHandSide not decoded yet for proto_id Label 1.12.0 to 2.4.4
epm.rc Return code Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.replace Replace Unsigned integer, 1 byte 1.0.0 to 2.4.4
epm.tower Tower Sequence of bytes 1.0.0 to 1.8.15
epm.tower.len Length Unsigned integer, 4 bytes 1.0.0 to 2.4.4
epm.tower.lhs.len LHS Length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.tower.num_floors Number of floors Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.tower.proto_id Protocol Unsigned integer, 1 byte 1.0.0 to 2.4.4
epm.tower.rhs.len RHS Length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.uuid UUID Globally Unique Identifier 1.0.0 to 2.4.4
epm.uuid_version Version Unsigned integer, 2 bytes 2.0.0 to 2.4.4
epm.ver_maj Version Major Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.ver_min Version Minor Unsigned integer, 2 bytes 1.0.0 to 2.4.4
epm.ver_opt Version Option Unsigned integer, 4 bytes 1.0.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More