By default, servers listen on TCP port 3389.
l7-filter uses the rdp pattern. It has been tested with Windows XP and Windows 2000 Server. It has been reported to work by at least one person and it has been reported not to work by at least one other.
 Alternate Pattern
Tested with XP Pro, 7 Pro, 2000 Server, 2003 Server, 2008 Server, 2008 R2 Server