Display Filter Reference: Remote Desktop Protocol
Protocol field name: rdp
Versions: 1.8.0 to 3.2.1
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| rdp.action | action | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.alternateShell | alternateShell | Character string | 1.8.0 to 3.2.1 |
| rdp.alternateShell.length | cbAlternateShell | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.autoReconnectCookie | autoReconnectCookie | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.autoReconnectCookie.length | cbAutoReconnectLen | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.bBitMask | bBitMask | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.Bias | Bias | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.Bias.daylight | DaylightBias | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.Bias.standard | StandardBias | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.blobData | blobData | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.bMsgType | bMsgType | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.bVersion | bVersion | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.capabilityData | capabilityData | Label | 1.8.0 to 3.2.1 |
| rdp.capabilitySet | capabilitySet | Label | 1.8.0 to 3.2.1 |
| rdp.capabilitySetType | capabilitySetType | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.channelCount | channelCount | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.channelDef | channelDef | Label | 1.8.0 to 3.2.1 |
| rdp.channelDefArray | channelDefArray | Label | 1.8.0 to 3.2.1 |
| rdp.channelFlag.first | channelFlagFirst | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelFlag.last | channelFlagLast | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelFlag.resume | channelFlagResume | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelFlag.showProtocol | channelFlagShowProtocol | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelFlag.suspend | channelFlagSuspend | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelFlags | channelFlags | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelIdArray | channelIdArray | Label | 1.8.0 to 3.2.1 |
| rdp.channelPacket.atFront | channelPacketAtFront | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelPacket.compressed | channelPacketCompressed | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelPacket.compressionType | channelPacketCompresssionType | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelPacket.flushed | channelPacketFlushed | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.channelPDUHeader | channelPDUHeader | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.client.address | clientAddress | Character string | 1.8.0 to 3.2.1 |
| rdp.client.address.length | cbClientAddress | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.client.addressFamily | clientAddressFamily | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.client.build | clientBuild | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.client.clusterData | clientClusterData | Label | 1.8.0 to 3.2.1 |
| rdp.client.coreData | clientCoreData | Label | 1.8.0 to 3.2.1 |
| rdp.client.digProductId | clientDigProductId | Character string | 1.8.0 to 3.2.1 |
| rdp.client.dir | clientDir | Character string | 1.8.0 to 3.2.1 |
| rdp.client.dir.length | cbClientDir | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.client.monitorData | clientMonitorData | Label | 2.0.0 to 3.2.1 |
| rdp.client.monitorDefData | clientMonitorDefData | Label | 3.0.0 to 3.2.1 |
| rdp.client.monitorExData | clientMonitorExData | Label | 2.0.0 to 3.2.1 |
| rdp.client.msgChannelData | clientMsgChannelData | Label | 2.0.0 to 3.2.1 |
| rdp.client.multiTransportData | clientMultiTransportData | Label | 2.0.0 to 3.2.1 |
| rdp.client.name | clientName | Character string | 1.8.0 to 3.2.1 |
| rdp.client.networkData | clientNetworkData | Label | 1.8.0 to 3.2.1 |
| rdp.client.productId | clientProductId | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.client.requestedProtocols | clientRequestedProtocols | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.client.securityData | clientSecurityData | Label | 1.8.0 to 3.2.1 |
| rdp.client.sessionId | clientSessionId | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.client.timeZone | clientTimeZone | Label | 1.8.0 to 3.2.1 |
| rdp.clientData | ClientData | Label | 1.8.0 to 3.2.1 |
| rdp.clientInfoPDU | clientInfoPDU | Label | 1.8.0 to 3.2.1 |
| rdp.clusterFlags | clusterFlags | Unsigned integer, 4 bytes | 1.10.0 to 3.2.1 |
| rdp.codePage | codePage | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.colorDepth | colorDepth | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.compressedData | compressedData | Label | 1.8.0 to 1.8.15 |
| rdp.compressedLength | compressedLength | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.compressedType | compressedType | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.compressedType.atFront | compressedTypeAtFront | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.compressedType.compressed | compressedTypeCompressed | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.compressedType.flushed | compressedTypeFlushed | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.compressedType.type | compressedTypeType | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.connectionType | connectionType | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.controlId | controlId | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.correlationInfo.correlationId | correlationId | Sequence of bytes | 2.2.0 to 3.2.1 |
| rdp.correlationInfo.flags | Flags | Unsigned integer, 1 byte | 2.2.0 to 3.2.1 |
| rdp.correlationInfo.reserved | Reserved | Sequence of bytes | 2.2.0 to 3.2.1 |
| rdp.dataSignature | dataSignature | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.Date.Daylight | DaylightDate | Label | 1.8.0 to 3.2.1 |
| rdp.Date.Standard | StandardDate | Label | 1.8.0 to 3.2.1 |
| rdp.desktop.height | desktopHeight | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.desktop.width | desktopWidth | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.domain | domain | Character string | 1.8.0 to 3.2.1 |
| rdp.domain.length | cbDomain | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.earlyCapabilityFlags | earlyCapabilityFlags | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.encryptedClientRandom | encryptedClientRandom | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.encryptedData | encryptedData | Label | 1.8.0 to 3.2.1 |
| rdp.encryptionLevel | encryptionLevel | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.encryptionMethod | encryptionMethod | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.encryptionMethods | encryptionMethods | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.entrySize | entrySize | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.errorCode | errorCode | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.extEncryptionMethods | extEncryptionMethods | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.fipsLength | fipsLength | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.fipsVersion | fipsVersion | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.flags | flags | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.encrypt | flagsEncrypt | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.flagshivalid | flagsHiValid | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.ignoreseqno | flagsIgnoreSeqno | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.licenseencrypt | flagsLicenseEncrypt | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.pkt | flagsPkt | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.resetseqno | flagsResetSeqno | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flags.securechecksum | flagsSecureChecksum | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.flagsHi | flagsHi | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.grantId | grantId | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.header.length | headerLength | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.header.type | headerType | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.highColorDepth | highColorDepth | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.imeFileName | imeFileName | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.Key1 | Key1 | Unsigned integer, 4 bytes | 1.8.0 to 1.8.15 |
| rdp.Key2 | Key2 | Unsigned integer, 4 bytes | 1.8.0 to 1.8.15 |
| rdp.keyboard.functionkey | keyboardFunctionKey | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.keyboard.subtype | keyboardSubType | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.keyboard.type | keyboardType | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.keyboardLayout | keyboardLayout | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.length | length | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.lengthCapability | lengthCapability | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.lengthCombinedCapabilities | lengthCombinedCapabilities | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.lengthSourceDescriptor | lengthSourceDescriptor | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.mapFlags | mapFlags | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.mapFlags.fontMapFirst | fontMapFirst | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.mapFlags.fontMapLast | fontMapLast | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.MCSChannelId | MCSChannelId | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.messageType | messageType | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.monitorAttributeSize | monitorAttributeSize | Unsigned integer, 4 bytes | 2.0.0 to 3.2.1 |
| rdp.monitorCount | monitorCount | Unsigned integer, 4 bytes | 2.0.0 to 3.2.1 |
| rdp.monitorDef.bottom | bottom | Signed integer, 4 bytes | 3.0.0 to 3.2.1 |
| rdp.monitorDef.flags | flags | Unsigned integer, 4 bytes | 3.0.0 to 3.2.1 |
| rdp.monitorDef.left | left | Signed integer, 4 bytes | 3.0.0 to 3.2.1 |
| rdp.monitorDef.right | right | Signed integer, 4 bytes | 3.0.0 to 3.2.1 |
| rdp.monitorDef.top | top | Signed integer, 4 bytes | 3.0.0 to 3.2.1 |
| rdp.monitorExFlags | monitorExFlags | Unsigned integer, 4 bytes | 2.0.0 to 3.2.1 |
| rdp.monitorFlags | monitorFlags | Unsigned integer, 4 bytes | 3.0.0 to 3.2.1 |
| rdp.msgChannelFlags | msgChannelFlags | Unsigned integer, 4 bytes | 2.0.0 to 3.2.1 |
| rdp.msgChannelId | msgChannelId | Unsigned integer, 2 bytes | 2.0.0 to 3.2.1 |
| rdp.multiTransportFlags | multiTransportFlags | Unsigned integer, 4 bytes | 2.0.0 to 3.2.1 |
| rdp.name | name | Character string | 1.8.0 to 3.2.1 |
| rdp.Name.Daylight | DaylightName | Character string | 1.8.0 to 3.2.1 |
| rdp.Name.Standard | StandardName | Character string | 1.8.0 to 3.2.1 |
| rdp.neg_len.invalid | Invalid length | Label | 2.2.0 to 3.2.1 |
| rdp.neg_length | Length | Unsigned integer, 2 bytes | 2.2.0 to 3.2.1 |
| rdp.neg_type | Type | Unsigned integer, 1 byte | 2.2.0 to 3.2.1 |
| rdp.negFailure.failureCode | failureCode | Unsigned integer, 4 bytes | 2.2.0 to 3.2.1 |
| rdp.negReq.flags | Flags | Unsigned integer, 1 byte | 2.2.0 to 3.2.1 |
| rdp.negReq.flags.correlation_info_present | Correlation info present | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.flags.restricted_admin_mode_req | Restricted admin mode required | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.requestedProtocols | requestedProtocols | Unsigned integer, 4 bytes | 2.2.0 to 3.2.1 |
| rdp.negReq.requestedProtocols.hybrid | CredSSP supported | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.requestedProtocols.hybrid_ex | Early User Authorization Result PDU supported | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.requestedProtocols.ssl | TLS security supported | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.selectedProtocol | selectedProtocol | Unsigned integer, 4 bytes | 2.2.0 to 3.2.1 |
| rdp.negReq.selectedProtocol.hybrid | CredSSP selected | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.selectedProtocol.hybrid_ex | Early User Authorization Result PDU selected | Boolean | 2.2.0 to 3.2.1 |
| rdp.negReq.selectedProtocol.ssl | TLS security selected | Boolean | 2.2.0 to 3.2.1 |
| rdp.negRsp.flags | Flags | Unsigned integer, 1 byte | 2.2.0 to 3.2.1 |
| rdp.negRsp.flags.dynvc_gfx_protocol_supported | Graphics Pipeline Extension Protocol supported | Boolean | 2.2.0 to 3.2.1 |
| rdp.negRsp.flags.extended_client_data_supported | Extended Client Data Blocks supported | Boolean | 2.2.0 to 3.2.1 |
| rdp.negRsp.flags.restricted_admin_mode_supported | Restricted admin mode supported | Boolean | 2.2.0 to 3.2.1 |
| rdp.not_correlation_info | What follows RDP Negotiation Request is not an RDP Correlation Info | Label | 2.2.0 to 3.2.1 |
| rdp.notYetImplemented | notYetImplemented | Label | 1.8.0 to 3.2.1 |
| rdp.numberCapabilities | numberCapabilities | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.numberEntries | numberEntries | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.numEntriesCache0 | numEntriesCache0 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.numEntriesCache1 | numEntriesCache1 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.numEntriesCache2 | numEntriesCache2 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.numEntriesCache3 | numEntriesCache3 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.numEntriesCache4 | numEntriesCache4 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.optionFlags | optionFlags | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options | options | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.compress | compress | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.compress.rdp | compressRDP | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.encrypt.cs | encryptCS | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.encrypt.rdp | encryptRDP | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.encrypt.sc | encryptSC | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.initialized | optionsInitialized | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.priority.high | priorityHigh | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.priority.low | priorityLow | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.priority.med | priorityMed | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.remotecontrolpersistent | remoteControlPersistent | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.options.showprotocol | showProtocol | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.OriginatorId | originatorId | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.Pad | Pad | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pad1 | pad1 | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.pad1octet | pad1octet | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.Pad2 | Pad2 | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.pad2Octets | pad2Octets | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.Pad3 | Pad3 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.padlen | padlen | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.password | password | Character string | 1.8.0 to 3.2.1 |
| rdp.password.length | cbPassword | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pduSource | pduSource | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pduType | pduType | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pduType.type | pduTypeType | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pduType.versionHigh | pduTypeVersionHigh | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pduType.versionLow | pduTypeVersionLow | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.pduType2 | pduType2 | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.performanceFlags | performanceFlags | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.postBeta2ColorDepth | postBeta2ColorDepth | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.redirectedSessionId | redirectedSessionId | Unsigned integer, 4 bytes | 1.10.0 to 3.2.1 |
| rdp.reserved1 | reserved1 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.reserved2 | reserved2 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.rt_cookie | Routing Token/Cookie | Character string | 2.2.0 to 3.2.1 |
| rdp.SASSequence | SASSequence | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.securityExchangePDU | securityExchangePDU | Label | 1.8.0 to 3.2.1 |
| rdp.sendData | SendData | Label | 1.8.0 to 3.2.1 |
| rdp.serialNumber | serialNumber | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.server.coreData | serverCoreData | Label | 1.8.0 to 3.2.1 |
| rdp.server.msgChannelData | serverMsgChannelData | Label | 2.0.0 to 3.2.1 |
| rdp.server.multiTransportData | serverMultiTransportData | Label | 2.0.0 to 3.2.1 |
| rdp.server.networkData | serverNetworkData | Label | 1.8.0 to 3.2.1 |
| rdp.server.securityData | serverSecurityData | Label | 1.8.0 to 3.2.1 |
| rdp.serverCertificate | serverCertificate | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.serverCertLen | serverCertLen | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.serverData | ServerData | Label | 1.8.0 to 3.2.1 |
| rdp.serverRandom | serverRandom | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.serverRandomLen | serverRandomLen | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.serverSelectedProtocol | serverSelectedProtocol | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.sessionId | sessionId | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.shareControlHeader | shareControlHeader | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.shareId | shareId | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.sourceDescriptor | sourceDescriptor | Character string | 1.8.0 to 3.2.1 |
| rdp.stateTransition | stateTransition | Unsigned integer, 4 bytes | 1.8.0 to 3.2.1 |
| rdp.streamId | streamId | Unsigned integer, 1 byte | 1.8.0 to 3.2.1 |
| rdp.supportedColorDepths | supportedColorDepths | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.targetUser | targetUser | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalEntriesCache0 | totalEntriesCache0 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalEntriesCache1 | totalEntriesCache1 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalEntriesCache2 | totalEntriesCache2 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalEntriesCache3 | totalEntriesCache3 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalEntriesCache4 | totalEntriesCache4 | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalLength | totalLength | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.totalNumberEntries | totalNumberEntries | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.uncompressedLength | uncompressedLength | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.unknownData | unknownData | Label | 1.8.0 to 1.8.15 |
| rdp.unknownData.client | clientUnknownData | Label | 1.8.0 to 3.2.1 |
| rdp.unknownData.server | serverUnknownData | Label | 1.8.0 to 3.2.1 |
| rdp.unused | Unused | Label | 1.10.0 to 2.6.14 |
| rdp.userName | userName | Character string | 1.8.0 to 3.2.1 |
| rdp.userName.length | cbUserName | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.validClientLicenseData | validClientLicenseData | Label | 1.8.0 to 3.2.1 |
| rdp.version.major | versionMajor | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.version.minor | versionMinor | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.virtualChannelData | virtualChannelData | Sequence of bytes | 1.8.0 to 3.2.1 |
| rdp.wBlobLen | wBlobLen | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wBlobType | wBlobType | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wDay | wDay | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wDayOfWeek | wDayOfWeek | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wHour | wHour | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wMilliseconds | wMilliseconds | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wMinute | wMinute | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wMonth | wMonth | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wMsgSize | wMsgSize | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.workingDir | workingDir | Character string | 1.8.0 to 3.2.1 |
| rdp.workingDir.length | cbWorkingDir | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wSecond | wSecond | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
| rdp.wYear | wYear | Unsigned integer, 2 bytes | 1.8.0 to 3.2.1 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance