I am looking for someone with a lot of experience with Windows Remote Desktop Connection to answer a basic question or two...
I have a WireShark capture (only one side) which shows 880 MBytes sent from the client running the Remote Desktop Connection, to the host; but I have no WireShark capture of the packet volume coming from the host to the client IP address. The capture is for a period spanning 32 hours. I am being asked to and determine the amount of data that might have been sent from the host to the client... I know this is a real out there question; which is why I'm looking for someone with real Remote Desktop Connection experience.
I assume that of the volume of traffic from the client to the host is 880MBytes over 32 hours; is there any way at all of guessing how much might have been sent from the host to the client?
Please be kind, this is important and I am presenting all of the information I have.
I do not fully understand the point.
Do you need a method for measuring the traffic in both directions somewhen in future experiments? Then I'd suggest: can't WireShark do that?
Or do you want to "guess" the traffic based on the measurement of the opposite direction only? There is no way to get that.