2.2.1.1.2 RDP Correlation Info (RDP_NEG_CORRELATION_INFO)

The RDP Correlation Info structure is used by a client to propagate connection correlation information to the server. This information allows diagnostic tools on the server to track and monitor a specific connection as it is handled by Terminal Services components.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

type

flags

length

correlationId (16 bytes)

...

...

reserved (16 bytes)

...

...

type (1 byte): An 8-bit, unsigned integer that indicates the packet type. This field MUST be set to 0x06 (TYPE_RDP_CORRELATION_INFO).

flags (1 byte): An 8-bit, unsigned integer that contains protocol flags. There are currently no defined flags, so this field MUST be set to 0x00.

length (2 bytes): A 16-bit, unsigned integer that specifies the packet size. This field MUST be set to 0x0024 (36 bytes).

correlationId (16 bytes): An array of sixteen 8-bit, unsigned integers that specifies a unique identifier to associate with the connection. The first byte in the array SHOULD NOT have a value of 0x00 or 0xF4 and the value 0x0D SHOULD NOT be contained in any of the bytes.

reserved (16 bytes): An array of sixteen 8-bit, unsigned integers reserved for future use. All sixteen integers within this array MUST be set to zero.