Need to find out why there is a disconnection

edit

yes I do need an assistance. Unfortunately I'm not able to attach file due to low on point. I need to know, leading up to the disconnection what trigger the disconnection or any hint as to why.

9/8/2021
Disconnect Time 5:19 PM Reconnect Time 5:24 PM

Hi, Option A

1. Sanitize the file with tracewrangler.
2. Don't perform this step unless you are successful with sanitizing the file. Upload to a drop box and post the link to the forum.

Option B From your comments, VPN established and then dropped after 5 minutes.
1. Can you figure out if the connection was TCP or UDP? 2. If it was TCP, what Wireshark TCP options are enabled? Wireshark is great for analyzing TCP.

Option C Ask a friend or peer that has experience with analyzing pcap files.

Note to all, this isn't a forum, it's a Q & A site, so only post "Answers" that are actual answers, all other comments and hints should be posted as comments to either the question or an answer.

The VPN itself is connected but the is lost of connectivity to the destination. Perform ping to 3 destination just to make sure and to get the timestamp. Probably not the VPN itself but maybe the local machine don't see any disconnection.

We are using a cloud base VPN and have several node. Only this one node if selected will not having the disconnection

A brief summary of your first paragraph. The "VPN itself is connected", but pings are good to the VPN server. When the "VPN itself is connected", is the VPN status from the client computer screen?

I am going to assume that the VPN is using TCP. In Wireshark, make sure the TCP option "Analyze TCP sequence numbers" is enabled. Look at the Wireshark analysis (square brackets [ ]) in the Wireshark INFO column. TCP DUP-ACKs, retransmission, previous segment not capture, or out-of-order will create VPN connection problems.