Event ID - 3224

Event Id3224
SourceEventTracker
DescriptionSocket MODIFIED:
Type: TCP
Status: Changed
Local Address:
Local Port:
Remote Address:
Remote Port:
New Connection States:
Old Connection States:
Process Name:
Event InformationCause:
The event is logged by EventTracker as part of the Network Connection Monitoring feature where any modification to an existing TCP connection can be logged as an Event. This event specifies the details of the modification that has occurred to the TCP connection.

Resolution:
This event is for information only and requires no user action.

EventTracker provides users with an option to monitor all modifications to existing TCP connections, the description of this event contains - The Type of Connection, i.e. TCP

- Details of the system on which the new connection was created, i.e. Local IP Address and Port Number

- Details of the system, which initiated the new connection, i.e. Remote IP Address and Port Number

- Details about the state of the connection

- Details of the local process that is providing this connection.

Related Events:
Event ID: 3223, Event Source: EventTracker
Event ID: 3225, Event Source: EventTracker
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.