# RDFP

RDFP is a Network Detection and Response product. It runs on-premises. Pricing is free.

Zeek Remote desktop fingerprinting script for fingerprinting Remote Desktop clients.

Checked October 2026.

## What is RDFP?

Zeek Remote desktop fingerprinting script based on FATT (Fingerprint All The Things). This is a Zeek package used to fingerprint Remote Desktop clients by extracting fields from different data packets to create a unique fingerprint log with details like client version, encryption method, flags, and more.

Tags: Packet Analysis, Remote Desktop, Zeek, Fingerprinting

## Where it fits in your security program (NIST CSF 2.0)

- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Network Security](https://cybersectools.com/categories/network-security) · [Network Detection and Response](https://cybersectools.com/categories/ndr)
- Deployment: On-Premises
- Company size fit: SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 40
- Website: github.com

## Where it ranks

No shortlist covers this product's category yet. The closest is [Best SASE Solutions for Business](https://cybersectools.com/shortlists/best-sase-solutions).

## RDFP FAQ

### What is RDFP?

RDFP is a product in the Network Detection and Response category. It covers Packet Analysis, Remote Desktop and Zeek.

### What is the pricing for RDFP?

RDFP is free. Download and setup instructions are at https://github.com/theparanoids/rdfp.

### What are alternatives to RDFP?

Alternatives to RDFP listed on CybersecTools:

1. [Fox IO JA4+](https://cybersectools.com/tools/fox-io-ja4) - Protocol-layer network fingerprinting suite for bot, proxy & malware detection. (Commercial)
2. [Array NTB Series](https://cybersectools.com/tools/array-ntb-series) - Network traffic broker for visibility, monitoring, and traffic optimization (Commercial)
3. [Corelight Open NDR Platform](https://cybersectools.com/tools/corelight-open-ndr-platform) - Network detection and response platform with IDS, NSM, and threat intel. (Commercial)
4. [cPacket Network Observability Platform](https://cybersectools.com/tools/cpacket-network-observability-platform) - Packet-based network observability platform for hybrid environments. (Commercial)
5. [Repacket](https://cybersectools.com/tools/repacket) - Enterprise network monitoring via deep packet inspection & traffic classification. (Commercial)

Compare all RDFP alternatives at [https://cybersectools.com/alternatives/rdfp](https://cybersectools.com/alternatives/rdfp)

### What deployment and organization size does RDFP fit?

RDFP is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.

## Compare RDFP with similar solutions

- [RDFP vs Fox IO JA4+](https://cybersectools.com/compare/fox-io-ja4-vs-rdfp)
- [RDFP vs Array NTB Series](https://cybersectools.com/compare/array-ntb-series-vs-rdfp)
- [RDFP vs Corelight Open NDR Platform](https://cybersectools.com/compare/corelight-open-ndr-platform-vs-rdfp)

All alternatives to RDFP: [/alternatives/rdfp](https://cybersectools.com/alternatives/rdfp)

---

Source: https://cybersectools.com/tools/rdfp

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on RDFP: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md