Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] RDP Client

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jay Taylor <foosyou@xxxxxxxxx>
Date: Thu, 16 Jun 2005 19:53:38 -0500
Because RDP is encrypted I doubt you would see any correlation between what you see of your screen and the packets going across the network. As suggested sending a ping from the RDP client after a specific action on the RDP server would help you find the corresponding packets but the application layer data would still be encrypted.

Hansang Bae wrote:
On 10:09 AM 6/16/2005, Nush Ahmed wrote:
  
I have a problem which is getting very tricky! I am trying to capture data being sent over an RDP client. For example, when I perform an action on my app using RDP I want to know when the data packet was and when the bitmap image is returned to screen. I can capture packets going to from the machines, however I can't get the data in the packets into a human recogniseable form. Also the bitmap which is sent back may be split into a number of packets.  
    

As far as I know, this is not possible because everything is being tunneled inside the RDP.  One possible work around would be to send ping packets in between actions *outside* of the rdp session.  So if you have a PC hitting a terminal server, use RDP to do your actions.  Then after each action, ping from your PC to the terminal server - these will act as markers.

But if you need fine granularity, this won't work.

hsb 

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users