JSI Tip 4505. Event 20048 logs a byte count of 0 when a user requests a disconnect from Windows 2000 RAS?

When an administrator forces a RAS disconnect, the event description for Event ID 20048 is similar to:

The user <DomainName\UserName> connected on port VPN4-127 on 12/04/2001 at 03:21pm and disconnected on 12/04/2001 at 03:22pm. The user was active for 0 minutes 17 seconds. 631 bytes were sent and 3495 bytes were received. The port speed was 10000000. The reason for disconnecting was administrator's request.

When a user request the RAS disconnect the event description is similar to:

The user <DomainName\UserName> connected on port VPN4-127 on 12/04/2001 at 03:21pm and disconnected on 12/04/2001 at 03:22pm. The user was active for 0 minutes 17 seconds. 0 bytes were sent and 0 bytes were received. The port speed was 10000000. The reason for disconnecting was user request.


Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish