cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
435
Views
1
Helpful
5
Replies

How to read DART logs

richyvrlimited
Level 1
Level 1

Hi,

Are there any guides or advise on interperting / reading the crrect DART log to diagniose a user Secure Client connection issue. I'm struggling to pinpoint the cause for a single user.

The client connects fine, but experiences regular disconnects, particularly when on TEAMS calls, (I suspect it's more noticable during the teams call rather than it causing/exacberating the issue).

The User has tried both wired and wireless when WFH/roamiung with no change in behavior, and their partner at home (who works for a different organisation) also uses Secure Client and doesn't suffer from disconnect issues so I feel that rules out a home network issue.

I am seeing

 

A network interface has received new DHCP configuration.

pretty frequently in the AnyConnectVPN logs, but I'm not really sure what to make of that as I can't see anything in related WLAN / Ethernet logs to correlate a device disconnection.

Any advice that can be offered would be very much appreciated

Many thanks

Rich

5 Replies 5

Disable the DTLS of anyconnect and check the stability of VPN

MHM

I really should've mentioned thethings I've tried!

I've disabled DTLS, confirmed no change

I've blocked all UDP traffic from the vpnclient.exe, no change

i have a ton of experience reading DARTs... many of them are self explanatory.. i would suggest look at +- 30 seconds before a disconnect.. look at the time up to disconnect when and then look at logs at that time... start a few second before that will tell you what happened.

maybe you can add a snip of the logs...

this not the best but will you give you some idea..

https://www.youtube.com/watch?v=TgBZloJ9YBY

but just message me here on any questions...

**Please rate as helpful if this was useful**

 

This video is to explain how to read through DART file and figure out the problem. Reading DART requires patience, so have one while watching this video. #Cisco #Anyconnect #DART #TcpListenTransport.cpp #0x0000271D #Return Code: 10013

Apologies for the slow reply,

 

Appreciate the link, I watched the link and just got my head in the logs, discovered that the client was completely changing network (seperate 2.4G and 5G wireless networks, in addition when wired, WiFi stayed enabled and kept switching which again caused the client to disconnect and reconnect.

Fix for the user was to tweak the roaming & prefer 2.4G (mainly due to range issues)

That is great to hear that and i have had to troubleshoot 100s of problems using the DART.... and the feeling is great when you can get to the root cause.

**Please rate as helpful if this was useful **