Can VNC traffic be monitored?

Article Id: 160381

Status: Published

Updated On: 26-08-2011 19:58

Legacy Id: TECH221059

Products:

Data Loss Prevention Endpoint Prevent , Data Loss Prevention Network Monitor , Data Loss Prevention Network Prevent for Email , Data Loss Prevention Network Prevent for Web , Data Loss Prevention Network Protect , Data Loss Prevention Endpoint Discover

Issue/Introduction:

Is monitoring of VNC traffic possible?

Resolution:

In short: No, you can not monitor VNC traffic.

VNC uses an RFB Protocol (Remote Frame Buffer) to display information by rendering the screen on the remote desktop. The communication essentially consists of the API call made to the graphic driver and this can not be detected. In addition, the communication can be encrypted based on which RFB implementation is used. Encrypted traffic can not be decrypted.