user access log

[sofia_]

hi,

could you help me to understand the subsequent user access log?

in particular I'm not able to understand the meaning of line number 3 (Closed connection to 10.36.240.5-0:agentman port 0 after 25424 seconds, with 701 bytes read (in 36 chunks) and 543 bytes written (in 31 chunks)), where 10.36.240.5 is the ip address of another user correctly authenticated.

best regards,

2008-06-17 08:25:13 - xx-ic12 - [10.36.240.8] xx1(Realm)[role1, role2] - Agent login succeeded for xx1/Realm from 10.36.240.8. 2008-06-17 08:25:14 - xx-ic12 - [10.36.240.8] xx1(Realm)[role1, role2] - Connected to 10.36.240.8-0:agentman port 0 2008-06-17 2008-06-17 14:40:05 - xx-ic12 - [10.36.240.8] xx1(Realm)[role1, role2] - Closed connection to 10.36.240.5-0:agentman port 0 after 25424 seconds, with 701 bytes read (in 36 chunks) and 543 bytes written (in 31 chunks)

[sylvain_]

Hi Sofia,

Can you just explain what kind of behaviors you have with your user ? Also did you do a policy tracing to understand what has happened ?

[ManojReddy_]

>Closed connection to 10.36.240.5-0:agentman port 0 after 25424 seconds, with 701 bytes read (in 36 chunks) and 543 bytes written (in 31 chunks)

this means the user at 10.36.240.5 had either logged out or lost connection with IC.

Thanks

ManojReddy