| Event Id | 3227 |
| Source | EventTracker |
| Description | Socket DELETED: Type: UDP Status: Deleted Local Address: <Local address> Local Port: <Port number > Connection active time: <Connection active time > Process ID: <Process ID> Process Name: <Process name> Image File Name: <Full path of the file name> |
| Event Information | Cause: The event is logged by EventTracker as part of the Network Connection Monitoring feature where the termination of any existing UDP connection can be logged as an Event. This event specifies the details of the newly connected port. Resolution: This event is for information only and requires no user action. EventTracker provides users with an option to monitor for the termination of all existing UDP connections, the description of this event contains - The Type of Connection, i.e. UDP - Details of the system on which the new connection was created, i.e. Local IP Address and Port Number - Details about the active connection time. i.e. The time between the connection being established and the connection being terminated. - Details of the local process that is providing this connection. Related Events: Event ID: 3226, Event Source: EventTracker |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.