The X.224 is equal with ISO/IEC International Standard 8073 which is
implemented in the Wireshark.
If you use Decode as TPKT on the RDP stream, it makes partially valid
output.
> -----Original Message-----
> From: wireshark-dev-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of
> ronnie sahlberg
> Sent: Thursday, October 25, 2007 12:43 AM
> To: Developer support list for Wireshark
> Subject: Re: [Wireshark-dev] decoding Remote Desktop Protocol
>
> X.224 is documented here :
> http://www.itu.int/rec/T-REC-X.224-199511-I/en
>
>
>
> On 10/25/07, ronnie sahlberg <ronniesahlberg@xxxxxxxxx> wrote:
> > Please start a wiki page and add as many example captures
> as possible
> > and interested people can start chipping in.
> >
> > Maybe the rdesktop people can/want to help out as well?
> >
> >
> >
> >
> > On 10/25/07, DePriest, Jason R. <jrdepriest@xxxxxxxxx> wrote:
> > > From the EULA
> > > 2. ADDITIONAL LICENSING REQUIREMENTS AND/OR USE RIGHTS.
> > > a. Distributable Code. The software contains code
> that you are
> > > permitted to modify and distribute internally within your
> organization
> > > if you comply with the terms below.
> > > i. Right to Use and Distribute. The code and text
> files listed below
> > > are "Distributable Code."
> > > * Files with an ".npl" file extension. You may
> copy and distribute
> > > the object code form of code of only those files marked
> with an ".npl"
> > > file extension and copy and use such modified files
> solely for your
> > > internal use.
> > >
> > > So, no joy there. I bow to your wisdom.
> > >
> > > -Jason
> > >
> > > On 10/24/07, ronnie sahlberg wrote:
> > > > > The parser files are plain-text with no sort of
> licensing information
> > > > > in them. How likely is it that I would get in
> trouble for posting
> > > > > them to this list? I'll do some more reading before
> venturing into
> > > > > that.
> > > >
> > > > Please DON'T !
> > > > The files are still copyrighted.
> > > >
> > > > since the rdesktop tool can connect to RDP just fine,
> the source
> > > > code for rdesktop should contain everything anyone would need to
> > > > implement a dissector.
> > > _______________________________________________
> > > Wireshark-dev mailing list
> > > Wireshark-dev@xxxxxxxxxxxxx
> > > http://www.wireshark.org/mailman/listinfo/wireshark-dev
> > >
> >
> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
>