Replay a FreeRDP Session

Question

I have setup FreeRDP on Windows using vcpkg, CMAKE, Visual Studio Build Tools, Windows SDK and have got the exe and dll files after building the repo.

I am connecting to a RDP machine using sdl2-freerdp.exe with the command

./sdl2-freerdp /v:IP /u:USER /p:PASS /cert:ignore +rfx /gfx:RFX /dump:"record,file:session.pcap"

After doing this, the packets are getting stored in the mentioned file but I am not able to replay the session.

I tried commands like,

./sdl2-freerdp /play-rfx:"session.pcap" /v:IP /cert:ignore

./sdl2-freerdp /dump:"replay,file:session.pcap" /v:IP /cert:ignore

but none of them are working. Tried many other ways like editing the source code to add debug statements but not able to figure out usage of this replaying component of SDL in FreeRDP due to very poor documentation support.

Answer 1

This seems to be broken on Windows.

Working well on Linux systems.

You can do,

xfreerdp /v:IP /u:USERNAME /p:PASSWORD /cert:ignore /dump:"record,file:session.pcap"

This will save all the packets in the mentioned file. Wireshark and tcpdump won't be able to read this file (if you want to see the packets) due to different encoding and saving technique used by FreeRDP. Only SDL3 client and xfreerdp are being actively maintained for now.

Replay the recording using,

xfreerdp /v:IP /dump:"replay,file:session.pcap"