I installed it for ether vpn server use at my company. I am curious about the difference between the successful log and the failed log of the vpn server I installed from the outside.
1. There are server_log, packet_log, and security_log, but there are no logs left by date other than server_log. Is there a reason?
2. In the server_log, when login is successful from outside at a specific time, can we know the signal of successful connection rather than simply scan from the log below?
3. In server_log, there are port numbers 1194, 5555,992,443, and there are differences in log methods. If the connection is successful, is there a specific port used?
2023-02-13 14:27:57 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 56402) has connected.
2023-02-13 14:27:57 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 56402), connection "CID-4169" has been created.
2023-02-13 14:27:57 SSL communication for connection "CID-4169" has been started. The encryption algorithm name is "TLS_AES_256_GCM_SHA384".
2023-02-13 14:27:57 Connection "CID-4169" terminated by the cause "A client which is non-SoftEther VPN software has connected to the port." (code 5).
2023-02-13 14:27:57 Connection "CID-4169" has been terminated.
2023-02-13 14:27:57 The connection with the client (IP address 27.x.x.x, Port number 56402) has been disconnected.
2023-02-13 14:27:57 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 57016) has connected.
2023-02-13 14:27:57 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 57016), connection "CID-4170" has been created.
2023-02-13 14:28:07 Connection "CID-4170" has been terminated.
2023-02-13 14:28:07 The connection with the client (IP address 27.x.x.x, Port number 57016) has been disconnected.
2023-02-13 14:28:08 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 34490) has connected.
2023-02-13 14:28:08 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 34490), connection "CID-4171" has been created.
2023-02-13 14:28:08 OpenVPN Module: The OpenVPN Server Module is starting.
2023-02-13 14:28:08 OpenVPN Session 1 (27.x.x.x:34490 -> 203.210.16.165:1194): A new session is created. Protocol: TCP
2023-02-13 14:28:08 OpenVPN Session 1 (27.x.x.x:34490 -> 203.210.16.165:1194) Channel 0: A new channel is created.
2023-02-13 14:28:26 OpenVPN Module: The OpenVPN Server Module is stopped.
2023-02-13 14:28:26 Connection "CID-4171" has been terminated.
2023-02-13 14:28:26 The connection with the client (IP address 27.x.x.x, Port number 34490) has been disconnected.
2023-02-13 14:28:26 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 44436) has connected.
2023-02-13 14:28:26 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 44436), connection "CID-4172" has been created.
2023-02-13 14:28:27 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 44804) has connected.
2023-02-13 14:28:27 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 44804), connection "CID-4173" has been created.
2023-02-13 14:28:27 Connection "CID-4172" has been terminated.
2023-02-13 14:28:27 The connection with the client (IP address 27.x.x.x, Port number 44436) has been disconnected.
2023-02-13 14:28:27 Connection "CID-4173" has been terminated.
2023-02-13 14:28:27 The connection with the client (IP address 27.x.x.x, Port number 44804) has been disconnected.
2023-02-13 14:28:27 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 45138) has connected.
2023-02-13 14:28:27 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 45138), connection "CID-4174" has been created.
2023-02-13 14:28:28 Connection "CID-4174" has been terminated.
2023-02-13 14:28:28 The connection with the client (IP address 27.x.x.x, Port number 45138) has been disconnected.
2023-02-13 14:28:28 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 45434) has connected.
2023-02-13 14:28:28 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 45434), connection "CID-4175" has been created.
2023-02-13 14:28:28 Connection "CID-4175" has been terminated.
2023-02-13 14:28:28 The connection with the client (IP address 27.x.x.x, Port number 45434) has been disconnected.
2023-02-13 14:28:29 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 45828) has connected.
2023-02-13 14:28:29 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 45828), connection "CID-4176" has been created.
2023-02-13 14:28:29 Connection "CID-4176" has been terminated.
2023-02-13 14:28:29 The connection with the client (IP address 27.x.x.x, Port number 45828) has been disconnected.
2023-02-13 14:28:29 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 46122) has connected.
2023-02-13 14:28:29 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 46122), connection "CID-4177" has been created.
2023-02-13 14:28:29 Connection "CID-4177" has been terminated.
2023-02-13 14:28:29 The connection with the client (IP address 27.x.x.x, Port number 46122) has been disconnected.
2023-02-13 14:28:31 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 46414) has connected.
2023-02-13 14:28:31 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 46414), connection "CID-4178" has been created.
2023-02-13 14:28:31 Connection "CID-4178" has been terminated.
2023-02-13 14:28:31 The connection with the client (IP address 27.x.x.x, Port number 46414) has been disconnected.
2023-02-13 14:28:31 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 47278) has connected.
2023-02-13 14:28:31 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 47278), connection "CID-4179" has been created.
2023-02-13 14:28:32 Connection "CID-4179" has been terminated.
2023-02-13 14:28:32 The connection with the client (IP address 27.x.x.x, Port number 47278) has been disconnected.
2023-02-13 14:28:32 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 47552) has connected.
2023-02-13 14:28:32 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 47552), connection "CID-4180" has been created.
2023-02-13 14:28:32 Connection "CID-4180" has been terminated.
2023-02-13 14:28:32 The connection with the client (IP address 27.x.x.x, Port number 47552) has been disconnected.
2023-02-13 14:28:32 On the TCP Listener (Port 1194), a Client (IP address 27.x.x.x, Host name "27.x.x.x", Port number 47812) has connected.
2023-02-13 14:28:32 For the client (IP address: 27.x.x.x, host name: "27.x.x.x", port number: 47812), connection "CID-4181" has been created.
2023-02-13 14:28:32 Connection "CID-4181" has been terminated.
2023-02-13 14:28:32 The connection with the client (IP address 27.x.x.x, Port number 47812) has been disconnected.
2023-02-13 14:59:13 On the TCP Listener (Port 5555), a Client (IP address 141.x.x.x, Host name "hostedby.privatelayer.com", Port number 53150) has connected.
2023-02-13 14:59:13 For the client (IP address: 141.x.x.x, host name: "hostedby.privatelayer.com", port number: 53150), connection "CID-4184" has been created.
2023-02-13 14:59:13 Connection "CID-4184" has been terminated.
2023-02-13 14:59:13 The connection with the client (IP address 141.x.x.x, Port number 53150) has been disconnected.
2023-02-13 15:03:06 On the TCP Listener (Port 443), a Client (IP address 162.x.x.x, Host name "zg-1220f-102.stretchoid.com", Port number 50758) has connected.
2023-02-13 15:03:06 For the client (IP address: 162.x.x.x, host name: "zg-1220f-102.stretchoid.com", port number: 50758), connection "CID-4185" has been created.
2023-02-13 15:03:07 SSL communication for connection "CID-4185" has been started. The encryption algorithm name is "AES128-SHA".
2023-02-13 15:03:07 Connection "CID-4185" terminated by the cause "A client which is non-SoftEther VPN software has connected to the port." (code 5).
2023-02-13 15:03:07 Connection "CID-4185" has been terminated.
2023-02-13 15:03:07 The connection with the client (IP address 162.x.x.x, Port number 50758) has been disconnected.
VPN SERVER_Log question
-
shakibamoshiri
- Posts: 288
- Joined: Wed Dec 28, 2022 9:10 pm
Re: VPN SERVER_Log question
server_log is the main one, you can disable security and packet logs (these have more details)
1. Yes successful and failed connection can be seen using server_log
2. No, SE does not have hooks to notify admins
3. It depends of which protocol the client is connecting with
- SSTP => 443
- L2TP => 500, 4500
- OpenVPN => 1194
but you can change these ports
1. Yes successful and failed connection can be seen using server_log
2. No, SE does not have hooks to notify admins
3. It depends of which protocol the client is connecting with
- SSTP => 443
- L2TP => 500, 4500
- OpenVPN => 1194
but you can change these ports
-
jycool
- Posts: 2
- Joined: Mon Mar 20, 2023 11:18 am
Re: VPN SERVER_Log question
What kind of log is taken when an anonymous user accesses successfully
for example...Is there no sample log in server_log?
for example...Is there no sample log in server_log?