Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: RDP authentication redirection virtual channel Protocol

Protocol field name: rdp_ear

Versions: 4.4.0 to 4.4.9

Back to Display Filter Reference

Field name Description Type Versions
rdp_ear.lengthLengthUnsigned integer (32 bits)4.4.0 to 4.4.9
rdp_ear.magicProtocol magicUnsigned integer (32 bits)4.4.0 to 4.4.9
rdp_ear.payloadPayloadLabel4.4.0 to 4.4.9
rdp_ear.payload.bufferBufferByte sequence4.4.0 to 4.4.9
rdp_ear.payload.packagePackageCharacter string4.4.0 to 4.4.9
rdp_ear.payload.versionVersionSigned integer (32 bits)4.4.0 to 4.4.9
rdp_ear.reservedReservedUnsigned integer (32 bits)4.4.0 to 4.4.9
rdp_ear.tspkgcontextTsPkgContextUnsigned integer (64 bits)4.4.0 to 4.4.9
rdp_ear.versionVersionUnsigned integer (32 bits)4.4.0 to 4.4.9