This a filtered extract from my event log. Event 20159 is
"The connection to IBurst made by user ? using device PPPoE7-0 was disconnected."
I exported the list to Excel and added the final column which shows the time elapsed between disconnects. There is a small cluster around 4 hours and very large cluster around 2 hours.Code:Date Time Source Event Elapsed Note 2/17/2005 4:50:30 PM RemoteAccess 20159 2:02:19 2/17/2005 2:48:11 PM RemoteAccess 20159 1:14:36 2/17/2005 1:33:35 PM RemoteAccess 20159 2:02:17 2/17/2005 11:31:18 AM RemoteAccess 20159 2:09:57 2/17/2005 9:21:21 AM RemoteAccess 20159 1:19:28 2/17/2005 8:01:53 AM RemoteAccess 20159 0:52:55 2/17/2005 7:08:58 AM RemoteAccess 20159 2:01:16 2/17/2005 5:07:42 AM RemoteAccess 20159 2:01:17 2/17/2005 3:06:25 AM RemoteAccess 20159 2:01:17 2/17/2005 1:05:08 AM RemoteAccess 20159 2:01:15 2/16/2005 11:03:53 PM RemoteAccess 20159 2:01:55 2/16/2005 9:01:58 PM RemoteAccess 20159 2:01:39 2/16/2005 7:00:19 PM RemoteAccess 20159 0:44:18 2/16/2005 6:16:01 PM RemoteAccess 20159 2:02:22 2/16/2005 4:13:39 PM RemoteAccess 20159 2:01:29 2/16/2005 2:12:10 PM RemoteAccess 20159 2:02:09 2/16/2005 12:10:01 PM RemoteAccess 20159 2:02:04 2/16/2005 10:07:57 AM RemoteAccess 20159 2:02:09 2/16/2005 8:05:48 AM RemoteAccess 20159 2:01:15 2/16/2005 6:04:33 AM RemoteAccess 20159 2:01:13 2/16/2005 4:03:20 AM RemoteAccess 20159 2:01:23 2/16/2005 2:01:57 AM RemoteAccess 20159 2:24:44 2/15/2005 11:37:13 PM RemoteAccess 20159 2:01:18 2/15/2005 9:35:55 PM RemoteAccess 20159 2:02:35 2/15/2005 7:33:20 PM RemoteAccess 20159 2:02:42 2/15/2005 5:30:38 PM RemoteAccess 20159 2:07:28 2/15/2005 3:23:10 PM RemoteAccess 20159 2:02:25 2/15/2005 1:20:45 PM RemoteAccess 20159 2:02:09 2/15/2005 11:18:36 AM RemoteAccess 20159 4:23:51 2/15/2005 6:54:45 AM RemoteAccess 20159 0:59:36 2/15/2005 5:55:09 AM RemoteAccess 20159 2:01:15 2/15/2005 3:53:54 AM RemoteAccess 20159 2:07:01 2/15/2005 1:46:53 AM RemoteAccess 20159 0:44:49 2/15/2005 1:02:04 AM RemoteAccess 20159 1:03:48 2/14/2005 11:58:16 PM RemoteAccess 20159 2:01:20 2/14/2005 9:56:56 PM RemoteAccess 20159 0:01:41 2/14/2005 9:55:15 PM RemoteAccess 20159 2:01:28 2/14/2005 7:53:47 PM RemoteAccess 20159 2:02:04 2/14/2005 5:51:43 PM RemoteAccess 20159 2:01:47 2/14/2005 3:49:56 PM RemoteAccess 20159 2:02:18 2/14/2005 1:47:38 PM RemoteAccess 20159 2:01:26 2/14/2005 11:46:12 AM RemoteAccess 20159 2:01:52 2/14/2005 9:44:20 AM RemoteAccess 20159 2:01:25 2/14/2005 7:42:55 AM RemoteAccess 20159 2:02:16 2/14/2005 5:40:39 AM RemoteAccess 20159 2:01:59 2/14/2005 3:38:40 AM RemoteAccess 20159 2:01:12 2/14/2005 1:37:28 AM RemoteAccess 20159 2:01:18 2/13/2005 11:36:10 PM RemoteAccess 20159 2:01:15 2/13/2005 9:34:55 PM RemoteAccess 20159 0:10:25 2/13/2005 9:24:30 PM RemoteAccess 20159 4:07:54 2/13/2005 5:16:36 PM RemoteAccess 20159 2:01:18 2/13/2005 3:15:18 PM RemoteAccess 20159 0:05:47 2/13/2005 3:09:31 PM RemoteAccess 20159 0:05:59 2/13/2005 3:03:32 PM RemoteAccess 20159 4:10:30 2/13/2005 10:53:02 AM RemoteAccess 20159 0:10:05 2/13/2005 10:42:57 AM RemoteAccess 20159 2:09:56 2/13/2005 8:33:01 AM RemoteAccess 20159 2:02:09 2/13/2005 6:30:52 AM RemoteAccess 20159 2:01:27 2/13/2005 4:29:25 AM RemoteAccess 20159 2:01:23 2/13/2005 2:28:02 AM RemoteAccess 20159 2:03:20 2/13/2005 12:24:42 AM RemoteAccess 20159 0:15:34 2/13/2005 12:09:08 AM RemoteAccess 20159 2:02:08 2/12/2005 10:07:00 PM RemoteAccess 20159 2:01:36 2/12/2005 8:05:24 PM RemoteAccess 20159 2:01:20 2/12/2005 6:04:04 PM RemoteAccess 20159 2:01:13 2/12/2005 4:02:51 PM RemoteAccess 20159 4:12:31 2/12/2005 11:50:20 AM RemoteAccess 20159 Authentication Downtime 2/11/2005 10:21:43 PM RemoteAccess 20159 2:02:06 2/11/2005 8:19:37 PM RemoteAccess 20159 2:28:59 2/11/2005 5:50:38 PM RemoteAccess 20159 1:30:48 2/11/2005 4:19:50 PM RemoteAccess 20159 2:16:20 2/11/2005 2:03:30 PM RemoteAccess 20159 0:20:55 2/11/2005 1:42:35 PM RemoteAccess 20159 2:09:17 2/11/2005 11:33:18 AM RemoteAccess 20159 2:01:20 2/11/2005 9:31:58 AM RemoteAccess 20159 2:01:16 2/11/2005 7:30:42 AM RemoteAccess 20159 2:02:23 2/11/2005 5:28:19 AM RemoteAccess 20159 2:01:19 2/11/2005 3:27:00 AM RemoteAccess 20159 2:16:58 2/11/2005 1:10:02 AM RemoteAccess 20159 2:02:16 2/10/2005 11:07:46 PM RemoteAccess 20159 2:02:12 2/10/2005 9:05:34 PM RemoteAccess 20159 2:41:23 2/10/2005 6:24:11 PM RemoteAccess 20159 2:02:09 2/10/2005 4:22:02 PM RemoteAccess 20159 2:01:29 2/10/2005 2:20:33 PM RemoteAccess 20159 2:02:16 2/10/2005 12:18:17 PM RemoteAccess 20159 2:02:06 2/10/2005 10:16:11 AM RemoteAccess 20159 2:02:07 2/10/2005 8:14:04 AM RemoteAccess 20159 2:02:07 2/10/2005 6:11:57 AM RemoteAccess 20159 2:02:05 2/10/2005 4:09:52 AM RemoteAccess 20159 2:02:06 2/10/2005 2:07:46 AM RemoteAccess 20159 2:50:59 2/9/2005 11:16:47 PM RemoteAccess 20159 88:36:51 2/6/2005 6:39:56 AM RemoteAccess 20159
These disconnects are not random. There is a distinct pattern (with some randomity thrown in). They are regular, almost like clockwork! They began around midnight on 9 February and have continued ever since.
Before then I had been connected uninterrupted for almost 4 days.










Reply With Quote

Bookmarks