You can pipe WLOG_LEVEL=DEBUG xfreerdp <args> through the script and it will
try to parse and dump smartcard commands and results. The script has a basic
support for PIV and GIDS applications. The script can also operate on a saved
log file
This wireshark plugin can decode RDPUDP traffic according to MS-RDPEUDP and MS-RDPEUDP2.
The plugin is statefull and is able to track protocol versions and does its best to
reassemble TLS and DTLS records, even when they are fragmented across different PDUs.
David Fort