diff options
author | Gerald Combs <gerald@wireshark.org> | 2006-09-15 21:35:01 +0000 |
---|---|---|
committer | Gerald Combs <gerald@wireshark.org> | 2006-09-15 21:35:01 +0000 |
commit | 7d95399a0de71c7d352ace83d4ce4b0a2315ef12 (patch) | |
tree | a1c7de18bcb0cafc0d29dd89e4b4432626f26cda /util.c | |
parent | 5f38a25c0b010f1b3bd3c2d0cfbbec7862377b8e (diff) |
Use SESSIONNAME instead of CLIENTNAME to try to detect RDP sessions.
Look for a string that starts with "rdp". This should take care of
cases where a default capture filter is set needlessly.
Update the docs accordingly.
svn path=/trunk/; revision=19236
Diffstat (limited to 'util.c')
-rw-r--r-- | util.c | 20 |
1 files changed, 16 insertions, 4 deletions
@@ -134,7 +134,7 @@ compute_timestamp_diff(gint *diffsec, gint *diffusec, SSH_CLIENT (ssh): <remote IP> <remote port> <local port> REMOTEHOST (tcsh, others?): <remote name> DISPLAY (x11): [remote name]:<display num> - CLIENTNAME (terminal server): <remote name> + SESSIONNAME (terminal server): <remote name> */ const gchar *get_conn_cfilter(void) { @@ -174,9 +174,21 @@ const gchar *get_conn_cfilter(void) { host_ip_af(tokens[0]), tokens[0]); return filter_str->str; } - } else if ((env = getenv("CLIENTNAME")) != NULL) { - g_string_sprintf(filter_str, "not tcp port 3389"); - return filter_str->str; + } else if ((env = getenv("SESSIONNAME")) != NULL) { + /* Apparently the KB article at + * http://technet2.microsoft.com/WindowsServer/en/library/6caf87bf-3d70-4801-9485-87e9ec3df0171033.mspx?mfr=true + * is incorrect. There are _plenty_ of cases where CLIENTNAME + * and SESSIONNAME are set outside of a Terminal Terver session. + * It looks like Terminal Server sets SESSIONNAME to RDP-TCP#<number> + * for "real" sessions. + * + * XXX - There's a better way to do this described at + * http://www.microsoft.com/technet/archive/termsrv/maintain/featusability/tsrvapi.mspx?mfr=true + */ + if (g_strncasecmp(env, "rdp", 3) == 0) { + g_string_sprintf(filter_str, "not tcp port 3389"); + return filter_str->str; + } } return ""; } |