If no action is taken in remote desktop (10 seconds), connection drops and re-established
FreeBSD 10.1-RELEASE
FreeBSD 10.1-RELEASE
Code:
tcp.first 120s
tcp.opening 30s
tcp.established 86400s
tcp.closing 900s
tcp.finwait 45s
tcp.closed 90s
tcp.tsdiff 30s
udp.first 60s
udp.single 30s
udp.multiple 60s
icmp.first 20s
icmp.error 10s
other.first 60s
other.single 30s
other.multiple 60s
frag 30s
interval 10s
adaptive.start 307200 states
adaptive.end 614400 states
src.track 0s
Code:
12:27:12.249134 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 673
12:27:12.250248 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 170
12:27:12.374278 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:12.476195 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 108
12:27:12.476885 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 59
12:27:12.496339 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 66
12:27:12.497879 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.517721 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 62
12:27:12.584440 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:12.657057 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 264
12:27:12.681060 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:12.681564 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 67
12:27:12.703808 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:12.707104 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 67
12:27:12.730605 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 63
12:27:12.734015 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.753790 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 61
12:27:12.757024 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.778354 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:12.788193 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 353
12:27:12.842905 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 64
12:27:12.912327 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 61
12:27:12.912786 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:12.912902 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 59
12:27:12.933723 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 113
12:27:12.935190 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:12.953367 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 62
12:27:13.039209 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:13.071878 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 348
12:27:13.071896 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 112
12:27:13.088984 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:13.091942 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 65
12:27:13.092538 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 75
12:27:13.111142 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:13.114350 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 67
12:27:13.131901 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 63
12:27:13.135113 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 63
12:27:13.153165 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 61
12:27:13.156469 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 61
12:27:13.176160 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 67
12:27:13.185167 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 357
12:27:13.311183 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:13.773293 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8397:8448, ack 8551, win 63350, length 51
12:27:13.776344 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 214
12:27:13.778308 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 130
12:27:13.814452 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8448, win 259, length 0
12:27:13.873773 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:14.805429 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8448:8499, ack 8551, win 63350, length 51
12:27:14.807787 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 116
12:27:14.808917 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 130
12:27:14.837009 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 129
12:27:14.838133 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 75
12:27:14.845891 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8499, win 258, length 0
12:27:14.936421 IP 1.2.3.4.3389 > 192.168.12.2.49162: UDP, length 12
12:27:15.843237 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8499:8550, ack 8551, win 63350, length 51
12:27:15.883900 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8550, win 258, length 0
12:27:16.857771 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8550:8601, ack 8551, win 63350, length 51
12:27:16.899257 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8601, win 258, length 0
12:27:18.872897 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8601:8652, ack 8551, win 63350, length 51
12:27:18.914111 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8652, win 258, length 0
12:27:20.888704 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8652:8703, ack 8551, win 63350, length 51
12:27:20.929554 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8703, win 258, length 0
12:27:21.903880 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8703:8754, ack 8551, win 63350, length 51
12:27:21.944663 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8754, win 257, length 0
12:27:22.920526 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8754:8805, ack 8551, win 63350, length 51
12:27:22.960738 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8805, win 257, length 0
12:27:23.934601 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8805:8856, ack 8551, win 63350, length 51
12:27:23.974752 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8856, win 257, length 0
12:27:24.950420 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8856:8907, ack 8551, win 63350, length 51
12:27:24.991318 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8907, win 257, length 0
12:27:25.965352 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8907:8958, ack 8551, win 63350, length 51
12:27:26.006148 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 8958, win 257, length 0
12:27:26.980292 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 8958:9009, ack 8551, win 63350, length 51
12:27:27.020940 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9009, win 256, length 0
12:27:27.996414 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 9009:9060, ack 8551, win 63350, length 51
12:27:28.037282 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9060, win 256, length 0
12:27:29.011320 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 9060:9111, ack 8551, win 63350, length 51
12:27:29.051783 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9111, win 256, length 0
12:27:29.886292 IP 192.168.12.2.49162 > 1.2.3.4.3389: UDP, length 12
12:27:30.027144 IP 1.2.3.4.3389 > 192.168.12.2.62620: Flags [P.], seq 9111:9162, ack 8551, win 63350, length 51
12:27:30.067905 IP 192.168.12.2.62620 > 1.2.3.4.3389: Flags [.], ack 9162, win 256, length 0