The only advise I can give you, is to use make a capture of traffic to and from the Citrix Server (use pass-through if you have this available), with a filter on IP or MAC of this server. If you then open a session and work on a terminal connected to the terminal server, you should be able to detect the RDP or ICA protocol(s). You can then set a filter based on the frames you detected.
Regards,
Last time I check there was not a decode for ICA due to it being a privately encrypted protocol owned by Citrix. There had been talk of a decode being done but I have not anything more about it.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.