Hallo Zusammen,
aktuell haben wir das Problem, dass immer wieder die SSL VPN Tunnel abrupt abbrechen und die User aus sämtlichen Sessions fliegen.
Diesen Fehler hat nur ein kleiner anwenderkreis, diese haben das aber mehrfach am tag und haben unabhängig voneinander andere Internet Provider.
Ich habe dazu folgende Logs dabei und hoffe, dass mir einer von euch helfen kann diese zu entschlüsseln oder etwas zu erkennen.
Die unten aufgeführten Logs sind aus mehreren Dateien und durch leere Zeilen getrennt.
Ich hoffe ihr könnt mir dabei helfen.
Wed Sep 18 12:25:39 2024 Connection reset, restarting [-1]
Wed Sep 18 12:25:39 2024 SIGUSR1[soft,connection-reset] received, process restarting
Wed Sep 18 12:25:39 2024 MANAGEMENT: >STATE:1726655139,RECONNECTING,connection-reset,,,,,
Wed Sep 18 12:25:39 2024 Restart pause, 5 second(s)
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 C:\WINDOWS\system32\route.exe DELETE XXX MASK XXX XXX
Wed Sep 18 12:25:39 2024 Route deletion via service succeeded
Wed Sep 18 12:25:39 2024 Closing TUN/TAP interface
Wed Sep 18 12:25:51 2024 TAP: DHCP address released
Wed Sep 18 12:25:51 2024 SIGTERM[hard,init_instance] received, process exiting
Wed Sep 18 12:25:51 2024 MANAGEMENT: >STATE:1726655151,EXITING,init_instance,,,,,
Wed Sep 18 13:08:53 2024 OpenVPN 2.4.12 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 17 2022
Wed Sep 18 13:08:53 2024 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Sep 18 13:08:53 2024 library versions: OpenSSL 1.1.1n 15 Mar 2022, LZO 2.10
Enter Management Password:
Wed Sep 18 13:08:53 2024 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Wed Sep 18 13:08:53 2024 Need hold release from management interface, waiting...
Wed Sep 18 13:08:54 2024 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'state on'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'log all on'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'echo all on'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'bytecount 5'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'hold off'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'hold release'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'username "Auth" USER'
Wed Sep 18 13:08:54 2024 MANAGEMENT: CMD 'password [...]'
Wed Sep 18 13:08:54 2024 MANAGEMENT: >STATE:1726657734,RESOLVE,,,,,,
2024-09-18 12:25:51PM [5172] err Information über das Zurücksetzen der Verbindung von Gateway: mysophos.mysophos PORT erhalten
2024-09-18 12:25:39PM [1396] dbg read TCP_CLIENT: Unknown error (code=10060)
2024-09-18 12:25:39PM [1396] dbg read TCP_CLIENT: Unknown error (code=10060)
2024-09-18 12:25:39PM [1396] dbg Connection reset, restarting [-1]
2024-09-18 12:25:39PM [1396] dbg Received connection reset
2024-09-18 12:25:39PM [1396] dbg mysophos.mysophos VPN state changed to disconnecting
2024-09-18 12:25:39PM [13688] dbg Tunnel is stopped
2024-09-18 12:25:51PM [1396] dbg received exiting event
2024-09-18 12:25:51PM [10924] dbg mysophos.mysophos VPN state changed to disconnected
2024-09-18 12:25:51PM [10924] dbg Sending notification: Received connection reset from gateway: mysophos.mysophos PORT
2024-09-18 12:25:57PM [8244] dbg mysophos.mysophos VPN state changed to connecting
2024-09-18 12:25:57PM [8244] dbg Starting tunnel (connecting)
2024-09-18 12:26:09PM [8244] dbg State is connecting, setting to disconnected
2024-09-18 12:26:09PM [8244] dbg mysophos.mysophos VPN state changed to disconnected
2024-09-18 12:26:09PM [8244] dbg Sending notification: DNS resolution failed for gateway: mysophos.mysophos
2024-09-18 01:08:51PM [6996] dbg mysophos.mysophos VPN state changed to connecting
2024-09-18 01:08:51PM [6996] dbg Starting tunnel (connecting)
2024-09-18 01:08:51PM [6996] inf Remote added to list: mysophos.mysophos PORT
2024-09-18 01:08:54PM [6996] dbg Tunnel initiated to mysophos.mysophos PORT
2024-09-18 01:09:07PM [6124] dbg WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-09-18 01:09:07PM [6124] dbg WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2024-09-18 01:09:07PM [6124] dbg Connection to open vpn has been established
2024-09-18 01:09:07PM [6124] dbg Adding watch for physical IP 192.168.XXX.XXX down
2024-09-18 01:09:07PM [6124] dbg mysophos.mysophos VPN state changed to connected
2024-09-18 11:45:52AM 00[DMN] Starting IKE service charon-svc (strongSwan 5.9.5, Windows Client 6.2.9200 (SP 0.0)
2024-09-18 11:45:52AM 00[LIB] TAP-Windows driver version 1.0 available.
2024-09-18 11:45:54AM 00[LIB] opened TUN device: {7D609D6B-B01D-488E-A0A6-5778C6E22065}
2024-09-18 11:45:54AM 00[LIB] loaded plugins: charon-svc nonce x509 pubkey pkcs1 pkcs7 pkcs8 pkcs12 pem openssl kernel-libipsec kernel-iph socket-win vici eap-identity eap-gtc eap-mschapv2 xauth-generic windows-dns
2024-09-18 11:45:54AM 00[JOB] spawning 16 worker threads
2024-09-18 11:45:55AM 17[KNL] interface 19 'Intel(R) Wi-Fi 6 AX201 160MHz' changed state from Down to Up
2024-09-18 11:46:01AM 17[KNL] interface 16 'Microsoft Wi-Fi Direct Virtual Adapter' appeared
2024-09-18 11:47:46AM 18[KNL] interface 4 'Microsoft Wi-Fi Direct Virtual Adapter #2' appeared
2024-09-18 11:49:36AM 19[KNL] interface 9 'TAP-Windows Adapter V9' changed state from Down to Up
2024-09-18 11:49:36AM 20[KNL] 169.254.92.182 disappeared from interface 9 'TAP-Windows Adapter V9'
2024-09-18 12:05:10PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:05:10PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:06:20PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:06:37PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:06:37PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:07:47PM 22[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:08:31PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:08:31PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:09:36PM 21[KNL] interface 9 'TAP-Windows Adapter V9' changed state from Up to Down
2024-09-18 12:09:36PM 21[KNL] IPADDRESS disappeared from interface 9 'TAP-Windows Adapter V9'
2024-09-18 12:09:36PM 22[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:09:37PM 22[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:09:37PM 22[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:09:48PM 21[KNL] interface 9 'TAP-Windows Adapter V9' changed state from Down to Up
2024-09-18 12:09:48PM 21[KNL] 169.254.92.182 disappeared from interface 9 'TAP-Windows Adapter V9'
2024-09-18 12:11:02PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:11:23PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:11:23PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:12:00PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:13:25PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:13:25PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:14:35PM 21[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:16:03PM 23[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:16:03PM 23[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:17:13PM 23[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:20:10PM 24[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:20:11PM 24[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 12:21:20PM 24[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:22:28PM 24[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 12:22:28PM 24[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
2024-09-18 12:25:51PM 25[KNL] interface 9 'TAP-Windows Adapter V9' changed state from Up to Down
2024-09-18 12:25:51PM 25[KNL] IPADDRESS disappeared from interface 9 'TAP-Windows Adapter V9'
2024-09-18 01:09:03PM 26[KNL] interface 9 'TAP-Windows Adapter V9' changed state from Down to Up
2024-09-18 01:09:03PM 26[KNL] 169.254.92.182 disappeared from interface 9 'TAP-Windows Adapter V9'
2024-09-18 01:09:24PM 27[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' appeared
2024-09-18 01:09:24PM 27[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' changed state from Down to Up
2024-09-18 01:10:34PM 26[KNL] interface 12 'Microsoft Teredo Tunneling Adapter' disappeared
Added TAGs
[edited by: Raphael Alganes at 11:31 PM (GMT -7) on 18 Sep 2024]