RDP

Description

This indicates an attempt to use the RDP protocol.
Remote Desktop Protocol (RDP) is a proprietary protocol, by Microsoft, that is used to connect to another computer over a network connection. The RDP client provides a graphical interface upon a successful connection. The RDP servers needed for a connection from the client is built into the Windows OS. On the other hand, RDP server for Unix and OS X exist and need to be installed.

Affected Products

RDP

Impact

Network bandwidth consumption

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Reasonable

Default Ports

• TCP/3389
• UDP/3389

References

• https://github.com/boundary/wireshark/blob/master/asn1/t125/MCS-PROTOCOL.asn
• https://msdn.microsoft.com/en-us/library/cc240445.aspx
• https://msdn.microsoft.com/en-us/library/cc241066.aspx