From 7085104c3394e4f606fed90ace37c714b9588df6 Mon Sep 17 00:00:00 2001
From: jeff-bb <38505668+jeff-bb@users.noreply.github.com>
Date: Mon, 23 Jan 2023 09:12:48 -0600
Subject: [PATCH] Log raw keyboard value on best guess

---
 scripts/base/protocols/rdp/main.zeek | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/base/protocols/rdp/main.zeek b/scripts/base/protocols/rdp/main.zeek
index 310784073a..488204e0c8 100644
--- a/scripts/base/protocols/rdp/main.zeek
+++ b/scripts/base/protocols/rdp/main.zeek
@@ -195,7 +195,7 @@ event rdp_client_core_data(c: connection, data: RDP::ClientCoreData) &priority=5
 		{
 		if (data$keyboard_layout & 0xffff in RDP::languages)
 			{
-			c$rdp$keyboard_layout = fmt("%s (Best Guess)", RDP::languages[data$keyboard_layout & 0xffff]);
+			c$rdp$keyboard_layout = fmt("%s (Best Guess of %d)", RDP::languages[data$keyboard_layout & 0xffff], data$keyboard_layout);
 			}
 		else
 			{