Ask Your Question

Revision history [back]

MAPI is the Microsoft Messaging API used for communication between mail clients and Exchange servers and is an MS RPC protocol so based on DCE/RPC.

As Wireshark has a dissector for MAPI, that dissector adds the "MAPI" entry to the protocol column. The dissector adds many display filter fields and these can be seen in the appropriate part of the Wireshark Display Filter Reference.

The source for the dissector can be found in the Wireshark GitLab Repository here. Like other DCE/RPC dissectors the dissector code is generated using PIDL from the protocol IDL file and a dissector specific interface configuration file.