Diagnosing netsh logs

[Luken8r]

Hi

I have an L2TP connection that is failing and I started the netsh ras logging to try and diagnose it. I am not sure if it is something on my system that is causing the tunnel to close or something from the server side. If you could, please look over the attached logs and let

me know what all of this means

I am connecting from a WinXP SP2 machine through a L2TP tunnel using the following procedure

- Disable the client logging

-- netsh ras set tracing * disabled

- Save old log files

- Restart logging

--netsh ras set tracing * enabled

- Initiate my tunnel

= Send various network traffic through the tunnel

= Intermittently the tunnel closes and I need to log back on

Specifically:

[1560] 10:35:37:265: DeviceConnect: Changing state for VPN4-1 from 1 -> 4

* What are the state values associated to?

* What is state 1 and/or 4

[596] 10:35:42:671: PortDisconnect: VPN4-1

[596] 10:35:42:671:

[596] 10:35:42:671: PortClose: VPN4-1

[596] 10:35:42:671: PortClose: Changing state for VPN4-1 from 1 -> 0

[596] 10:35:42:671:

[1560] 10:36:46:125: PortOpen: VPN4-1

[1560] 10:36:46:125: PortOpen: successfully opened VPN4-1

* Who is issuing the disconnect? The PC I am connecting from or the server that I am going through to get to the other end of the tunnel?

I have the contents of the \Windows\tracing folder, however the .zip is too large of an attachment

Thanks!

[1560] 10:35:36:796: PortOpen: VPN4-1

[1560] 10:35:36:812: PortOpen: successfully opened VPN4-1

[1560] 10:35:36:812:

[1560] 10:35:36:984: DeviceConnect: calling lineMakeCall for VPN4-1, address=192.168.2.1

[1560] 10:35:37:265: DeviceConnect: Changing state for VPN4-1 from 1 -> 4

[600] 10:35:37:281: LINE_REPLY. param1=0x102bb

[600] 10:35:37:281: RasTapicallback: linecallstate=0x200

[600] 10:35:39:078: RasTapicallback: linecallstate=0x100

[600] 10:35:39:078: DwGetConnectInfo

[600] 10:35:39:078: DwGetIDInformation

[600] 10:35:39:078: DwGetIDInformation. 0

[600] 10:35:39:078: SizeRequired for CallID=0

[600] 10:35:39:078: CallIDSize=ConnectResponseSize=0

[600] 10:35:39:078: DwGetConnectInfo. 0x0

[600] 10:35:39:078: RasTapiCallback: DwGetConnectInforeturned 0x0

[600] 10:35:39:093: RasTapiCallback: Connected on VPN4-1

[600] 10:35:39:093: RasTapiCallback: Outgoing call

[596] 10:35:39:093: DeviceWork: VPN4-1. State = 4

[596] 10:35:39:093: DeviceWork: Changing state for VPN4-1 from 4 -> 3

[1560] 10:35:39:109: PortConnect: VPN4-1

[1560] 10:35:39:125:

[600] 10:35:42:656: RasTapicallback: linecallstate=0x4000

[600] 10:35:42:656: RasTapiCallback: lineGetCallStatus for VPN4-1 returned 0x4000

[600] 10:35:42:656: RasTapiCallback: DisconnectReason mapped to 2

[600] 10:35:42:656: RasTapiCallback: LINECALLSTATE - initiating Port Disconnect

[600] 10:35:42:656: InitiatePortDisconnection: VPN4-1

[600] 10:35:42:656: InitiatePortDisconnection: Changing state for VPN4-1 from 3 -> 5

[600] 10:35:42:656:

[600] 10:35:42:656: RasTapicallback: linecallstate=0x1

[600] 10:35:42:656: LINE_REPLY. param1=0x10288

[600] 10:35:42:656: RasTapiCallback: Idle Received for port VPN4-1

[600] 10:35:42:656: RasTapiCallback: changing state of VPN4-1. 5 -> 1

[600] 10:35:42:656: RasTapiCallback: lineDeallocateCall for VPN4-1,hcall = 0x10299

[596] 10:35:42:671: PortTestSignalState: DisconnectReason = 2

[596] 10:35:42:671: PortDisconnect: VPN4-1

[596] 10:35:42:671:

[596] 10:35:42:671: PortClose: VPN4-1

[596] 10:35:42:671: PortClose: Changing state for VPN4-1 from 1 -> 0

[596] 10:35:42:671:

[1560] 10:36:46:125: PortOpen: VPN4-1

[1560] 10:36:46:125: PortOpen: successfully opened VPN4-1

[1560] 10:36:46:125:

[1560] 10:36:46:296: DeviceConnect: calling lineMakeCall for VPN4-1, address=192.168.2.1

[1560] 10:36:46:312: DeviceConnect: Changing state for VPN4-1 from 1 -> 4

[600] 10:36:46:312: LINE_REPLY. param1=0x10255

[600] 10:36:46:312: RasTapicallback: linecallstate=0x200

[600] 10:36:48:406: RasTapicallback: linecallstate=0x100

[600] 10:36:48:406: DwGetConnectInfo

[600] 10:36:48:406: DwGetIDInformation

[600] 10:36:48:406: DwGetIDInformation. 0

[600] 10:36:48:406: SizeRequired for CallID=0

[600] 10:36:48:406: CallIDSize=ConnectResponseSize=0

[600] 10:36:48:406: DwGetConnectInfo. 0x0

[600] 10:36:48:406: RasTapiCallback: DwGetConnectInforeturned 0x0

[600] 10:36:48:406: RasTapiCallback: Connected on VPN4-1

[600] 10:36:48:406: RasTapiCallback: Outgoing call

[596] 10:36:48:406: DeviceWork: VPN4-1. State = 4

[596] 10:36:48:406: DeviceWork: Changing state for VPN4-1 from 4 -> 3

[1560] 10:36:48:406: PortConnect: VPN4-1

[1560] 10:36:48:406:

[600] 10:36:48:906: RasTapicallback: linecallstate=0x4000

[600] 10:36:48:906: RasTapiCallback: lineGetCallStatus for VPN4-1 returned 0x4000

[600] 10:36:48:906: RasTapiCallback: DisconnectReason mapped to 2

[600] 10:36:48:906: RasTapiCallback: LINECALLSTATE - initiating Port Disconnect

[600] 10:36:48:906: InitiatePortDisconnection: VPN4-1

[600] 10:36:48:906: InitiatePortDisconnection: Changing state for VPN4-1 from 3 -> 5

[600] 10:36:48:906:

[600] 10:36:48:906: RasTapicallback: linecallstate=0x1

[600] 10:36:48:906: LINE_REPLY. param1=0x10222

[600] 10:36:48:906: RasTapiCallback: Idle Received for port VPN4-1

[600] 10:36:48:906: RasTapiCallback: changing state of VPN4-1. 5 -> 1

[600] 10:36:48:906: RasTapiCallback: lineDeallocateCall for VPN4-1,hcall = 0x10233

[596] 10:36:48:906: PortTestSignalState: DisconnectReason = 2

[596] 10:36:48:906: PortDisconnect: VPN4-1

[596] 10:36:48:906:

[596] 10:36:48:906: PortClose: VPN4-1

[596] 10:36:48:906: PortClose: Changing state for VPN4-1 from 1 -> 0

[596] 10:36:48:906:

[1560] 10:38:48:406: PortOpen: VPN4-1

[1560] 10:38:48:406: PortOpen: successfully opened VPN4-1

[1560] 10:38:48:406:

[1560] 10:38:48:500: DeviceConnect: calling lineMakeCall for VPN4-1, address=192.168.2.1

[1560] 10:38:48:515: DeviceConnect: Changing state for VPN4-1 from 1 -> 4

[600] 10:38:48:515: LINE_REPLY. param1=0x101ff

[600] 10:38:48:515: RasTapicallback: linecallstate=0x200

[600] 10:38:51:484: RasTapicallback: linecallstate=0x100

[600] 10:38:51:484: DwGetConnectInfo

[600] 10:38:51:484: DwGetIDInformation

[600] 10:38:51:484: DwGetIDInformation. 0

[600] 10:38:51:484: SizeRequired for CallID=0

[600] 10:38:51:484: CallIDSize=ConnectResponseSize=0

[600] 10:38:51:484: DwGetConnectInfo. 0x0

[600] 10:38:51:484: RasTapiCallback: DwGetConnectInforeturned 0x0

[600] 10:38:51:484: RasTapiCallback: Connected on VPN4-1

[600] 10:38:51:484: RasTapiCallback: Outgoing call

[596] 10:38:51:484: DeviceWork: VPN4-1. State = 4

[596] 10:38:51:484: DeviceWork: Changing state for VPN4-1 from 4 -> 3

[1560] 10:38:51:484: PortConnect: VPN4-1

[1560] 10:38:51:484:

[736] 10:39:42:828: PortDisconnect: VPN4-1

[736] 10:39:42:828: InitiatePortDisconnection: VPN4-1

[736] 10:39:42:828: InitiatePortDisconnection: Changing state for VPN4-1 from 3 -> 5

[736] 10:39:42:828:

[736] 10:39:42:828:

[1560] 10:39:52:828: PortClose: VPN4-1

[1560] 10:39:52:828: PortClose: Changing state for VPN4-1 from 5 -> 0

[600] 10:39:52:828: LINE_REPLY. param1=0x101aa

[1560] 10:39:52:828:

[1560] 10:41:15:328: PortOpen: VPN4-1

[1560] 10:41:15:343: PortOpen: successfully opened VPN4-1

[1560] 10:41:15:343:

[1560] 10:41:15:500: DeviceConnect: calling lineMakeCall for VPN4-1, address=192.168.2.1

[1560] 10:41:15:515: DeviceConnect: Changing state for VPN4-1 from 1 -> 4

[600] 10:41:15:515: LINE_REPLY. param1=0x10177

[600] 10:41:15:515: RasTapicallback: linecallstate=0x200

[600] 10:41:17:578: RasTapicallback: linecallstate=0x100

[600] 10:41:17:578: DwGetConnectInfo

[600] 10:41:17:578: DwGetIDInformation

[600] 10:41:17:578: DwGetIDInformation. 0

[600] 10:41:17:578: SizeRequired for CallID=0

[600] 10:41:17:578: CallIDSize=ConnectResponseSize=0

[600] 10:41:17:578: DwGetConnectInfo. 0x0

[600] 10:41:17:578: RasTapiCallback: DwGetConnectInforeturned 0x0

[600] 10:41:17:578: RasTapiCallback: Connected on VPN4-1

[600] 10:41:17:578: RasTapiCallback: Outgoing call

[596] 10:41:17:578: DeviceWork: VPN4-1. State = 4

[596] 10:41:17:578: DeviceWork: Changing state for VPN4-1 from 4 -> 3

[1560] 10:41:17:593: PortConnect: VPN4-1

[1560] 10:41:17:593:

[736] 08:14:38:671: PortDisconnect: VPN4-1