Query on Connections and Disconnections to softether from inside my network.

allaboutthebase · Post by **allaboutthebase** » Sat May 16, 2020 3:35 pm

A question about logs.
I normally see these entries for users connecting to VPN remotely with the client (using softether vpn) but I see them internally on the LAN too in the logs. the source of the connections is from my Domain Controller.

The connect and disconnect happens within 1 or 2 seconds so Im not sure what is happening.

It happens 3-4 times a day.

Port numbers are random too.

[xxxxxxxx0101/VPN] (2020-05-16 16:01:25.218) <SERVER_LOG>: On the TCP Listener (Port 443), a Client (IP address 192.168.xxx.xxx, Host name "my_domain_controller Sever", Port number 60616) has connected.

[xxxxxxxx0101/VPN] (2020-05-16 08:01:26.973) <SERVER_LOG>: Connection "CID-xxxxxxxxxxx" has been terminated.

[xxxxxxxx01/VPN] (2020-05-16 08:01:26.973) <SERVER_LOG>: The connection with the client (IP address 192.168.xxx.xxx, Port number 55832) has been disconnected.