Remote Desktop connection drops after 10 seconds

If no action is taken in remote desktop (10 seconds), connection drops and re-established

FreeBSD 10.1-RELEASE

Code:
tcp.first                   120s
tcp.opening                  30s
tcp.established           86400s
tcp.closing                 900s
tcp.finwait                  45s
tcp.closed                   90s
tcp.tsdiff                   30s
udp.first                    60s
udp.single                   30s
udp.multiple                 60s
icmp.first                   20s
icmp.error                   10s
other.first                  60s
other.single                 30s
other.multiple               60s
frag                         30s
interval                     10s
adaptive.start           307200 states
adaptive.end             614400 states
src.track                     0s


Code:
12:27:12.249134 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 673
12:27:12.250248 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 170
12:27:12.374278 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:12.476195 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 108
12:27:12.476885 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 59
12:27:12.496339 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 66
12:27:12.497879 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.517721 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 62
12:27:12.584440 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:12.657057 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 264
12:27:12.681060 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:12.681564 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 67
12:27:12.703808 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:12.707104 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 67
12:27:12.730605 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 63
12:27:12.734015 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.753790 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 61
12:27:12.757024 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.778354 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:12.788193 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 353
12:27:12.842905 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 64
12:27:12.912327 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 61
12:27:12.912786 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:12.912902 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 59
12:27:12.933723 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 113
12:27:12.935190 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.953367 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 62
12:27:13.039209 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:13.071878 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 348
12:27:13.071896 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 112
12:27:13.088984 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:13.091942 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 65
12:27:13.092538 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 75
12:27:13.111142 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:13.114350 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 67
12:27:13.131901 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 63
12:27:13.135113 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 63
12:27:13.153165 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 61
12:27:13.156469 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:13.176160 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:13.185167 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 357
12:27:13.311183 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:13.773293 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8397:8448, ack 8551, win 63350, length 51
12:27:13.776344 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 214
12:27:13.778308 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 130
12:27:13.814452 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8448, win 259, length 0
12:27:13.873773 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:14.805429 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8448:8499, ack 8551, win 63350, length 51
12:27:14.807787 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 116
12:27:14.808917 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 130
12:27:14.837009 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 129
12:27:14.838133 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 75
12:27:14.845891 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8499, win 258, length 0
12:27:14.936421 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:15.843237 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8499:8550, ack 8551, win 63350, length 51
12:27:15.883900 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8550, win 258, length 0
12:27:16.857771 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8550:8601, ack 8551, win 63350, length 51
12:27:16.899257 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8601, win 258, length 0
12:27:18.872897 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8601:8652, ack 8551, win 63350, length 51
12:27:18.914111 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8652, win 258, length 0
12:27:20.888704 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8652:8703, ack 8551, win 63350, length 51
12:27:20.929554 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8703, win 258, length 0
12:27:21.903880 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8703:8754, ack 8551, win 63350, length 51
12:27:21.944663 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8754, win 257, length 0
12:27:22.920526 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8754:8805, ack 8551, win 63350, length 51
12:27:22.960738 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8805, win 257, length 0
12:27:23.934601 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8805:8856, ack 8551, win 63350, length 51
12:27:23.974752 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8856, win 257, length 0
12:27:24.950420 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8856:8907, ack 8551, win 63350, length 51
12:27:24.991318 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8907, win 257, length 0
12:27:25.965352 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8907:8958, ack 8551, win 63350, length 51
12:27:26.006148 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8958, win 257, length 0
12:27:26.980292 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8958:9009, ack 8551, win 63350, length 51
12:27:27.020940 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9009, win 256, length 0
12:27:27.996414 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 9009:9060, ack 8551, win 63350, length 51
12:27:28.037282 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9060, win 256, length 0
12:27:29.011320 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 9060:9111, ack 8551, win 63350, length 51
12:27:29.051783 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9111, win 256, length 0
12:27:29.886292 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:30.027144 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 9111:9162, ack 8551, win 63350, length 51
12:27:30.067905 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9162, win 256, length 0
 
FreeBSD 10.1 has been End-of-Life since December 2016 and is not supported any more. You should update your system as soon as possible.

Second remark, don't open RDP (3389) to the world if you value your security. Your initial post actually had your external IP address and I had no problems connecting to it. You have now masked it in the post (which is good) but it still means it's open to the world.

connection drops and re-established
UDP is a connection-less protocol.
 
Back
Top