sudo tail -F /var/log/xrdp*

==> /var/log/xrdp.log <==
[2024-06-14T14:16:47.826+0000] [INFO ] Received termination signal, stopping the server accept new connections thread
[2024-06-14T14:16:47.119+0000] [DEBUG] Closed socket 13 ([::]:3389)
[2024-06-14T14:16:47.678+0000] [INFO ] starting xrdp with pid 93181
[2024-06-14T14:16:47.694+0000] [INFO ] address [0.0.0.0] port [3389] mode 1
[2024-06-14T14:16:47.706+0000] [INFO ] listening to port 3389 on 0.0.0.0
[2024-06-14T14:16:47.717+0000] [INFO ] xrdp_listen_pp done

==> /var/log/xrdp-sesman.log <==
[2024-06-14T14:16:47.191+0000] [INFO ] sesman_main_loop: sesman asked to terminate
[2024-06-14T14:16:47.461+0000] [INFO ] starting xrdp-sesman with pid 93180
[2024-06-14T14:16:47.483+0000] [INFO ] Sesman now listening on /run/xrdp/sesman.socket

==> /var/log/xrdp.log <==
[2024-06-14T14:16:52.446+0000] [INFO ] Socket 14: connection accepted from [::ffff:10.0.33.85]:54461
[2024-06-14T14:16:52.449+0000] [DEBUG] Closed socket 14 ([::ffff:10.0.41.73]:3389)
[2024-06-14T14:16:52.449+0000] [DEBUG] Closed socket 13 ([::]:3389)
[2024-06-14T14:16:52.454+0000] [DEBUG] item ini_version, value 1
[2024-06-14T14:16:52.456+0000] [DEBUG] item fork, value true
[2024-06-14T14:16:52.458+0000] [DEBUG] item port, value 3389
[2024-06-14T14:16:52.459+0000] [DEBUG] item use_vsock, value false
[2024-06-14T14:16:52.461+0000] [DEBUG] item tcp_nodelay, value true
[2024-06-14T14:16:52.463+0000] [DEBUG] item tcp_keepalive, value true
[2024-06-14T14:16:52.465+0000] [DEBUG] item security_layer, value negotiate
[2024-06-14T14:16:52.467+0000] [DEBUG] item crypt_level, value high
[2024-06-14T14:16:52.469+0000] [DEBUG] item certificate, value /etc/pki/tls/certs/hostname_removed.crt
[2024-06-14T14:16:52.471+0000] [DEBUG] item key_file, value /etc/pki/tls/private/hostname_removed.key
[2024-06-14T14:16:52.473+0000] [DEBUG] item ssl_protocols, value TLSv1.2, TLSv1.3
[2024-06-14T14:16:52.475+0000] [DEBUG] TLSv1.3 enabled
[2024-06-14T14:16:52.477+0000] [DEBUG] TLSv1.2 enabled
[2024-06-14T14:16:52.478+0000] [DEBUG] item autorun, value 
[2024-06-14T14:16:52.480+0000] [DEBUG] item allow_channels, value true
[2024-06-14T14:16:52.482+0000] [DEBUG] item allow_multimon, value true
[2024-06-14T14:16:52.484+0000] [DEBUG] item bitmap_cache, value true
[2024-06-14T14:16:52.486+0000] [DEBUG] item bitmap_compression, value true
[2024-06-14T14:16:52.487+0000] [DEBUG] item bulk_compression, value true
[2024-06-14T14:16:52.489+0000] [DEBUG] item max_bpp, value 32
[2024-06-14T14:16:52.490+0000] [DEBUG] item new_cursors, value true
[2024-06-14T14:16:52.492+0000] [DEBUG] item use_fastpath, value both
[2024-06-14T14:16:52.493+0000] [DEBUG] item grey, value e1e1e1
[2024-06-14T14:16:52.495+0000] [DEBUG] item dark_grey, value b4b4b4
[2024-06-14T14:16:52.496+0000] [DEBUG] item blue, value 0078d7
[2024-06-14T14:16:52.498+0000] [DEBUG] item dark_blue, value 0078d7
[2024-06-14T14:16:52.499+0000] [DEBUG] item ls_top_window_bg_color, value 003057
[2024-06-14T14:16:52.500+0000] [DEBUG] item ls_width, value 350
[2024-06-14T14:16:52.501+0000] [DEBUG] item ls_height, value 360
[2024-06-14T14:16:52.502+0000] [DEBUG] item ls_bg_color, value f0f0f0
[2024-06-14T14:16:52.503+0000] [DEBUG] item ls_logo_filename, value 
[2024-06-14T14:16:52.505+0000] [DEBUG] item ls_logo_transform, value scale
[2024-06-14T14:16:52.506+0000] [DEBUG] item ls_logo_width, value 250
[2024-06-14T14:16:52.507+0000] [DEBUG] item ls_logo_height, value 110
[2024-06-14T14:16:52.508+0000] [DEBUG] item ls_logo_x_pos, value 55
[2024-06-14T14:16:52.509+0000] [DEBUG] item ls_logo_y_pos, value 35
[2024-06-14T14:16:52.510+0000] [DEBUG] item ls_label_x_pos, value 30
[2024-06-14T14:16:52.511+0000] [DEBUG] item ls_label_width, value 68
[2024-06-14T14:16:52.511+0000] [DEBUG] item ls_input_x_pos, value 110
[2024-06-14T14:16:52.512+0000] [DEBUG] item ls_input_width, value 210
[2024-06-14T14:16:52.513+0000] [DEBUG] item ls_input_y_pos, value 158
[2024-06-14T14:16:52.514+0000] [DEBUG] item ls_btn_ok_x_pos, value 142
[2024-06-14T14:16:52.515+0000] [DEBUG] item ls_btn_ok_y_pos, value 308
[2024-06-14T14:16:52.516+0000] [DEBUG] item ls_btn_ok_width, value 85
[2024-06-14T14:16:52.517+0000] [DEBUG] item ls_btn_ok_height, value 30
[2024-06-14T14:16:52.517+0000] [DEBUG] item ls_btn_cancel_x_pos, value 237
[2024-06-14T14:16:52.521+0000] [DEBUG] item ls_btn_cancel_y_pos, value 308
[2024-06-14T14:16:52.522+0000] [DEBUG] item ls_btn_cancel_width, value 85
[2024-06-14T14:16:52.523+0000] [DEBUG] item ls_btn_cancel_height, value 30
[2024-06-14T14:16:52.524+0000] [INFO ] Security protocol: configured [SSL|RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [SSL]
[2024-06-14T14:16:52.555+0000] [DEBUG] Using TLS security, and setting RDP security crypto to LEVEL_NONE and METHOD_NONE
[2024-06-14T14:16:52.556+0000] [DEBUG] [MCS Connection Sequence] receive connection request
[2024-06-14T14:16:52.558+0000] [INFO ] Connected client computer name: JT49162C6C
[2024-06-14T14:16:52.560+0000] [INFO ] client supports gfx protocol
[2024-06-14T14:16:52.561+0000] [DEBUG] Client supports 40 bit encryption
[2024-06-14T14:16:52.562+0000] [DEBUG] Client supports 128 bit encryption
[2024-06-14T14:16:52.563+0000] [DEBUG] Client supports 56 bit encryption
[2024-06-14T14:16:52.565+0000] [DEBUG] Client supports fips encryption
[2024-06-14T14:16:52.566+0000] [DEBUG] The connection is using TLS, skipping RDP crypto negotiation
[2024-06-14T14:16:52.567+0000] [DEBUG] Adding channel: name rdpdr, channel id 1004, flags 0x80800000
[2024-06-14T14:16:52.568+0000] [DEBUG] Adding channel: name rdpsnd, channel id 1005, flags 0xc0000000
[2024-06-14T14:16:52.569+0000] [DEBUG] Adding channel: name cliprdr, channel id 1006, flags 0xc0a00000
[2024-06-14T14:16:52.571+0000] [DEBUG] Adding channel: name drdynvc, channel id 1007, flags 0xc0800000
[2024-06-14T14:16:52.573+0000] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[2024-06-14T14:16:52.574+0000] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[2024-06-14T14:16:52.576+0000] [DEBUG] [MCS Connection Sequence] construct connection response
[2024-06-14T14:16:52.577+0000] [DEBUG] using no security
[2024-06-14T14:16:52.578+0000] [DEBUG] [MCS Connection Sequence] send connection response
[2024-06-14T14:16:52.579+0000] [DEBUG] [MCS Connection Sequence] receive erect domain request
[2024-06-14T14:16:52.588+0000] [DEBUG] [MCS Connection Sequence] receive attach user request
[2024-06-14T14:16:52.590+0000] [DEBUG] [MCS Connection Sequence] send attach user confirm
[2024-06-14T14:16:52.591+0000] [DEBUG] [MCS Connection Sequence (TLS)] receive channel join request
[2024-06-14T14:16:52.602+0000] [DEBUG] [MCS Connection Sequence (TLS)] send channel join confirm
[2024-06-14T14:16:52.603+0000] [DEBUG] [MCS Connection Sequence (TLS)] receive channel join request
[2024-06-14T14:16:52.613+0000] [DEBUG] [MCS Connection Sequence (TLS)] send channel join confirm
[2024-06-14T14:16:52.615+0000] [DEBUG] [MCS Connection Sequence (TLS)] receive channel join request
[2024-06-14T14:16:52.626+0000] [DEBUG] [MCS Connection Sequence (TLS)] send channel join confirm
[2024-06-14T14:16:52.627+0000] [DEBUG] [MCS Connection Sequence (TLS)] receive channel join request
[2024-06-14T14:16:52.639+0000] [DEBUG] [MCS Connection Sequence (TLS)] send channel join confirm
[2024-06-14T14:16:52.641+0000] [DEBUG] [MCS Connection Sequence (TLS)] receive channel join request
[2024-06-14T14:16:52.651+0000] [DEBUG] [MCS Connection Sequence (TLS)] send channel join confirm
[2024-06-14T14:16:52.653+0000] [DEBUG] [MCS Connection Sequence (TLS)] receive channel join request
[2024-06-14T14:16:52.663+0000] [DEBUG] [MCS Connection Sequence (TLS)] send channel join confirm
[2024-06-14T14:16:52.665+0000] [DEBUG] [MCS Connection Sequence (TLS)] completed
[2024-06-14T14:16:52.666+0000] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[2024-06-14T14:16:52.668+0000] [DEBUG] keyboard_cfg_file /etc/xrdp/xrdp_keyboard.ini
[2024-06-14T14:16:52.669+0000] [DEBUG] xrdp_load_keyboard_layout: item rdp_layout_us value 0x00000409
[2024-06-14T14:16:52.670+0000] [DEBUG] xrdp_load_keyboard_layout: skipping configuration item - rdp_layout_us, continuing to next section
[2024-06-14T14:16:52.671+0000] [DEBUG] xrdp_load_keyboard_layout: item rdp_layout_us value us
[2024-06-14T14:16:52.672+0000] [DEBUG] xrdp_load_keyboard_layout: skipping configuration item - rdp_layout_us, continuing to next section
[2024-06-14T14:16:52.674+0000] [DEBUG] xrdp_load_keyboard_layout: item keyboard_type value 4
[2024-06-14T14:16:52.675+0000] [DEBUG] xrdp_load_keyboard_layout: item keyboard_subtype value 3
[2024-06-14T14:16:52.676+0000] [DEBUG] xrdp_load_keyboard_layout: item keyboard_type value 7
[2024-06-14T14:16:52.677+0000] [DEBUG] xrdp_load_keyboard_layout: item keyboard_subtype value 2
[2024-06-14T14:16:52.678+0000] [DEBUG] xrdp_load_keyboard_layout: item model value pc105
[2024-06-14T14:16:52.679+0000] [DEBUG] xrdp_load_keyboard_layout: item rdp_layouts value default_rdp_layouts
[2024-06-14T14:16:52.680+0000] [DEBUG] xrdp_load_keyboard_layout: item layouts_map value default_layouts_map
[2024-06-14T14:16:52.681+0000] [DEBUG] xrdp_load_keyboard_layout: item rdp_layout_us value us
[2024-06-14T14:16:52.682+0000] [DEBUG] xrdp_load_keyboard_layout: skipping configuration item - rdp_layout_us, continuing to next section
[2024-06-14T14:16:52.683+0000] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[2024-06-14T14:16:52.684+0000] [INFO ] TLS connection established from [::ffff:10.0.33.85]:54461 TLSv1.3 with cipher TLS_AES_256_GCM_SHA384
[2024-06-14T14:16:52.685+0000] [DEBUG] Client requested compression enabled.
[2024-06-14T14:16:52.686+0000] [DEBUG] Client supplied domain: DOMAIN_REMOVED
[2024-06-14T14:16:52.687+0000] [DEBUG] Client supplied username: USER_REMOVED
[2024-06-14T14:16:52.688+0000] [DEBUG] Client supplied password: <omitted from log>
[2024-06-14T14:16:52.689+0000] [DEBUG] Client supplied program: 
[2024-06-14T14:16:52.690+0000] [DEBUG] Client supplied directory: 
[2024-06-14T14:16:52.722+0000] [INFO ] Client supports single-screen resizes by xrdp
[2024-06-14T14:16:52.725+0000] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[2024-06-14T14:16:52.726+0000] [INFO ] xrdp_process_offscreen_bmpcache: support level 0 cache size 0 MB cache entries 0
[2024-06-14T14:16:52.727+0000] [INFO ] xrdp_caps_process_codecs: NSCodec(CA8D1BB9-000F-154F-589F-AE2D1A87E2D6), codec id [1], properties len [3]
[2024-06-14T14:16:52.728+0000] [INFO ] Client Capability: LARGE_POINTER_FLAG_96x96 supported
[2024-06-14T14:16:52.729+0000] [DEBUG] xrdp_00016bff_wm_login_state_event_00000001
[2024-06-14T14:16:52.734+0000] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[2024-06-14T14:16:52.736+0000] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file
[2024-06-14T14:16:52.738+0000] [DEBUG] Login state change request WMLS_RESET -> WMLS_RESET
[2024-06-14T14:16:52.739+0000] [DEBUG] libxrdp_query_channel - Channel 0 name rdpdr
[2024-06-14T14:16:52.740+0000] [DEBUG] xrdp_wm_load_channel_config: channel rdpdr channel id 0 is enabled
[2024-06-14T14:16:52.740+0000] [DEBUG] Enabling channel 1004 (rdpdr)
[2024-06-14T14:16:52.741+0000] [DEBUG] libxrdp_query_channel - Channel 1 name rdpsnd
[2024-06-14T14:16:52.742+0000] [DEBUG] xrdp_wm_load_channel_config: channel rdpsnd channel id 1 is enabled
[2024-06-14T14:16:52.743+0000] [DEBUG] Enabling channel 1005 (rdpsnd)
[2024-06-14T14:16:52.744+0000] [DEBUG] libxrdp_query_channel - Channel 2 name cliprdr
[2024-06-14T14:16:52.745+0000] [DEBUG] xrdp_wm_load_channel_config: channel cliprdr channel id 2 is enabled
[2024-06-14T14:16:52.745+0000] [DEBUG] Enabling channel 1006 (cliprdr)
[2024-06-14T14:16:52.746+0000] [DEBUG] libxrdp_query_channel - Channel 3 name drdynvc
[2024-06-14T14:16:52.747+0000] [DEBUG] xrdp_wm_load_channel_config: channel drdynvc channel id 3 is enabled
[2024-06-14T14:16:52.748+0000] [DEBUG] Enabling channel 1007 (drdynvc)
[2024-06-14T14:16:52.749+0000] [DEBUG] Login state has changed to WMLS_RESET
[2024-06-14T14:16:52.749+0000] [DEBUG] Login state change request WMLS_RESET -> WMLS_USER_PROMPT
[2024-06-14T14:16:52.750+0000] [DEBUG] in xrdp_wm_init: 
[2024-06-14T14:16:52.751+0000] [DEBUG] ini_version:             1
[2024-06-14T14:16:52.752+0000] [DEBUG] use_bitmap_cache:        1
[2024-06-14T14:16:52.753+0000] [DEBUG] use_bitmap_compression:  1
[2024-06-14T14:16:52.753+0000] [DEBUG] port:                    3389
[2024-06-14T14:16:52.754+0000] [DEBUG] crypt_level:             3
[2024-06-14T14:16:52.755+0000] [DEBUG] allow_channels:          1
[2024-06-14T14:16:52.756+0000] [DEBUG] max_bpp:                 32
[2024-06-14T14:16:52.756+0000] [DEBUG] fork:                    1
[2024-06-14T14:16:52.757+0000] [DEBUG] tcp_nodelay:             1
[2024-06-14T14:16:52.758+0000] [DEBUG] tcp_keepalive:           1
[2024-06-14T14:16:52.759+0000] [DEBUG] tcp_send_buffer_bytes:   0
[2024-06-14T14:16:52.759+0000] [DEBUG] tcp_recv_buffer_bytes:   0
[2024-06-14T14:16:52.760+0000] [DEBUG] grey:                    14803425
[2024-06-14T14:16:52.761+0000] [DEBUG] black:                   0
[2024-06-14T14:16:52.762+0000] [DEBUG] dark_grey:               11842740
[2024-06-14T14:16:52.762+0000] [DEBUG] blue:                    30935
[2024-06-14T14:16:52.763+0000] [DEBUG] dark_blue:               30935
[2024-06-14T14:16:52.764+0000] [DEBUG] white:                   0
[2024-06-14T14:16:52.765+0000] [DEBUG] red:                     0
[2024-06-14T14:16:52.766+0000] [DEBUG] green:                   0
[2024-06-14T14:16:52.766+0000] [DEBUG] background:              0
[2024-06-14T14:16:52.767+0000] [DEBUG] autorun:                 
[2024-06-14T14:16:52.768+0000] [DEBUG] hidelogwindow:           0
[2024-06-14T14:16:52.768+0000] [DEBUG] require_credentials:     0
[2024-06-14T14:16:52.769+0000] [DEBUG] bulk_compression:        1
[2024-06-14T14:16:52.770+0000] [DEBUG] new_cursors:             1
[2024-06-14T14:16:52.771+0000] [DEBUG] nego_sec_layer:          0
[2024-06-14T14:16:52.772+0000] [DEBUG] allow_multimon:          1
[2024-06-14T14:16:52.773+0000] [DEBUG] enable_token_login:      0
[2024-06-14T14:16:52.773+0000] [DEBUG] ls_top_window_bg_color:  573000
[2024-06-14T14:16:52.774+0000] [DEBUG] ls_width (unscaled):     350
[2024-06-14T14:16:52.775+0000] [DEBUG] ls_height (unscaled):    360
[2024-06-14T14:16:52.775+0000] [DEBUG] ls_bg_color:             f0f0f0
[2024-06-14T14:16:52.776+0000] [DEBUG] ls_title:                
[2024-06-14T14:16:52.777+0000] [DEBUG] ls_logo_filename:        
[2024-06-14T14:16:52.778+0000] [DEBUG] ls_logo_x_pos :          55
[2024-06-14T14:16:52.778+0000] [DEBUG] ls_logo_y_pos :          35
[2024-06-14T14:16:52.779+0000] [DEBUG] ls_label_x_pos :         30
[2024-06-14T14:16:52.780+0000] [DEBUG] ls_label_width :         68
[2024-06-14T14:16:52.781+0000] [DEBUG] ls_input_x_pos :         110
[2024-06-14T14:16:52.781+0000] [DEBUG] ls_input_width :         210
[2024-06-14T14:16:52.782+0000] [DEBUG] ls_input_y_pos :         158
[2024-06-14T14:16:52.783+0000] [DEBUG] ls_btn_ok_x_pos :        142
[2024-06-14T14:16:52.784+0000] [DEBUG] ls_btn_ok_y_pos :        308
[2024-06-14T14:16:52.785+0000] [DEBUG] ls_btn_ok_width :        85
[2024-06-14T14:16:52.785+0000] [DEBUG] ls_btn_ok_height :       30
[2024-06-14T14:16:52.786+0000] [DEBUG] ls_btn_cancel_x_pos :    237
[2024-06-14T14:16:52.787+0000] [DEBUG] ls_btn_cancel_y_pos :    308
[2024-06-14T14:16:52.787+0000] [DEBUG] ls_btn_cancel_width :    85
[2024-06-14T14:16:52.788+0000] [DEBUG] ls_btn_cancel_height :   30
[2024-06-14T14:16:52.789+0000] [INFO ] Login screen monitor height is 1068 pixels over 211 mm (128 DPI)
[2024-06-14T14:16:52.792+0000] [DEBUG] Login screen scale factor 1.000000
[2024-06-14T14:16:52.794+0000] [DEBUG]    xrdp_wm_init: no autologin / auto run detected, draw login window
[2024-06-14T14:16:52.795+0000] [DEBUG] ls_logo_filename: /usr/share/xrdp/xrdp_logo.png
[2024-06-14T14:16:52.806+0000] [DEBUG] Login state change request WMLS_USER_PROMPT -> WMLS_USER_PROMPT
[2024-06-14T14:16:52.808+0000] [DEBUG] out xrdp_wm_init: 
[2024-06-14T14:16:52.809+0000] [DEBUG] Login state has changed to WMLS_USER_PROMPT
[2024-06-14T14:16:52.810+0000] [INFO ] xrdp_egfx_create: error 0 channel_id 1
[2024-06-14T14:16:52.825+0000] [INFO ] xrdp_mm_egfx_caps_advertise:
[2024-06-14T14:16:52.826+0000] [INFO ]   version 0x00080004 flags 0x00000002 (index: 0)
[2024-06-14T14:16:52.828+0000] [INFO ]   version 0x00080105 flags 0x00000002 (index: 1)
[2024-06-14T14:16:52.829+0000] [INFO ]   version 0x000a0002 flags 0x00000022 (index: 2)
[2024-06-14T14:16:52.830+0000] [INFO ]   version 0x000a0200 flags 0x00000022 (index: 3)
[2024-06-14T14:16:52.830+0000] [INFO ]   version 0x000a0301 flags 0x00000020 (index: 4)
[2024-06-14T14:16:52.831+0000] [INFO ]   version 0x000a0400 flags 0x00000002 (index: 5)
[2024-06-14T14:16:52.832+0000] [INFO ]   version 0x000a0701 flags 0x00000082 (index: 6)
[2024-06-14T14:16:52.833+0000] [INFO ]   replying version 0x000a0701 flags 0x00000082
[2024-06-14T14:16:52.834+0000] [DEBUG] xrdp_egfx_send_capsconfirm: xrdp_egfx_send_s error 0
[2024-06-14T14:16:52.835+0000] [INFO ] xrdp_mm_egfx_caps_advertise: xrdp_egfx_send_capsconfirm error 0 best_index 6
[2024-06-14T14:16:52.836+0000] [INFO ] xrdp_egfx_reset_graphics:
[2024-06-14T14:16:52.837+0000] [INFO ] xrdp_egfx_reset_graphics: width 1708 height 1068 monitorcount 1
[2024-06-14T14:16:52.838+0000] [DEBUG] xrdp_egfx_send_reset_graphics: xrdp_egfx_send_s error 0
[2024-06-14T14:16:52.838+0000] [INFO ] xrdp_mm_egfx_caps_advertise: xrdp_egfx_send_reset_graphics error 0 monitorCount 0
[2024-06-14T14:16:52.839+0000] [DEBUG] xrdp_egfx_send_map_surface: xrdp_egfx_send_s error 0
[2024-06-14T14:16:52.840+0000] [INFO ] xrdp_mm_egfx_create_surfaces: map surface_id 0 left 0 top 0 width 1708 height 1068
[2024-06-14T14:16:52.841+0000] [INFO ] xrdp_encoder_create: starting gfx rfx pro codec session
[2024-06-14T14:16:52.842+0000] [INFO ] xrdp_mm_egfx_invalidate_wm_screen:
[2024-06-14T14:16:52.842+0000] [INFO ] xrdp_mm_egfx_caps_advertise: egfx created.