Showing results for 
Search instead for 
Did you mean: 

How to read DART logs for AnyConnect troubleshooting?



Is there any document/guide describing in detail how to interpret DART logs for AnyConnect troubleshooting?


I am trying to troubleshoot a single-user AnyConnect connection issue using DART logs for the first time. A user received a new corporate laptop and since then he is unable connect to VPN from home.


There are a lot of generated logs and i am trying to figure out what could be a useful clue, and what is noise.


For example, I see these logs (between many others) from the day the user received new laptop:


A new network interface has been detected.

Network Interface change detected, refreshing physical MAC addresses

The client's public address is now set to x.x.x.x


Failed to resolve [A] query via DNS server y.y.y.y

Host z.z.z.z  could not be resolved to an IPv4 address

NETENVIRONMENT_ERROR_DNS_RESOLUTION_FAILED:Domain name resolution of the host targeted by the network probe has failed



NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target

And then these same logs pretty much repeats again and again.


Maybe someone could give some troubleshooting tips given this output of DART logs?


Thank you





VIP Advocate

Re: How to read DART logs for AnyConnect troubleshooting?

There is no guide that I know that explains how to read DART logs. I can highlight a few tips from experience:


1) DART logs every connection, so there could be multiple sessions. Start from the last "has been requested by the user" message on wards to that you only have to deal with one connection attempt. Separate them all logs from that point into a separate text file.

2) Look for Errors in the type under each message. You should see something like "Type: Errors". This may not always be the case, but most of the time a connection failure has one Error type message that is related. 

3) Correlate the exact failure time with the DART message. Anyconnect connections could take anywhere from 15-90 seconds for a normal attempt. If you can note the exact time when the user received the message (including seconds), go backwards from there and look for an error that corresponds to it. 

Hope this helps. 

Re: How to read DART logs for AnyConnect troubleshooting?

Hello Rahul/TAC team,

We have a user , who is facing VPN when switches from LAN to WLAN he is fine but from WLAN to LAN he faces issues.

Attached are is DART bundle logs. Further we had some internal discussion and it came up some issues with Trusted Network Detection (TDN), could you please let us know what is it by some definition and please help us in how to review these logs.


Re: How to read DART logs for AnyConnect troubleshooting?

Hi, Facing the same issue. getting "Posture Assessment Failed: Hostscan CSD prelogin verification failed" error while connecting to VPN. I have DART log and there is multiple folder in the zip file. Out of all which one I should refer to resolve this error issue. please help.

Hall of Fame Master

Re: How to read DART logs for AnyConnect troubleshooting?

For the Hostscan failed error it's generally much easier to just have a look at your hostscan requirements on the ASA side and from there ascertain which are not met by the problematic client PC.