2022-09-20 07:45:45.3352 Warn EventActivityEntityResolver ResolveLdapSearchDebuggingEventAsync ldapSearchDebuggingEvent detected [Time=09/20/2022 07:45:44 BaseObject=DC=testbug,DC=com RequiredAttributes=distinguishedName SearchScope=subtree SearchFilter= ( & ( | (objectClass=user) (objectClass=computer) (objectClass=group) ) (objectSid=S-1-5-21-1565902300-91303804-2055468830-1107) ) SourceComputerId= SourceComputerName= SourceComputerIpAddress=fe80::89dd:539:eb6:4b27 DestinationComputerId= DestinationComputerName=DomainName= Name=DC.testbug.com Client=[fe80::89dd:539:eb6:4b27%5]:58058 ReturnedEntries=1 SourceAccountSid=S-1-5-21-1565902300-91303804-2055468830-500 SourceAccountName=TESTBUG\Administrator SourceAccountId=c0f7e76b-2d4f-452c-9be8-2ba91294c97e]
2022-09-20 07:45:45.3352 Warn EventActivityEntityResolver ResolveLdapSearchDebuggingEventAsync ldapSearchDebuggingEvent detected [Time=09/20/2022 07:45:44 BaseObject=CN=血精灵elf,CN=Users,DC=testbug,DC=com RequiredAttributes=canonicalName,objectClass,whenCreated,displayName,distinguishedName,objectGUID,isDeleted,name,nTSecurityDescriptor,objectSid,whenChanged,sAMAccountType,description,adminCount,isCriticalSystemObject,memberOf,tokenGroups,sAMAccountName,sIDHistory,badPasswordTime,msDS-AllowedToDelegateTo,accountExpires,lockoutTime,msDS-UserPasswordExpiryTimeComputed,pwdLastSet,primaryGroupID,msDS-AllowedToActOnBehalfOfOtherIdentity,servicePrincipalName,msDS-SupportedEncryptionTypes,userPrincipalName,userAccountControl,msDS-User-Account-Control-Computed,department,givenName,lastLogon,lastLogonTimestamp,sn,mail,manager,mobile,physicalDeliveryOfficeName,telephoneNumber,thumbnailPhoto,title,dNSHostName,serverReferenceBL,msDS-GroupMSAMembership,operatingSystem,operatingSystemServicePack,operatingSystemVersion,member,groupType SearchScope=base SearchFilter= ( | (objectClass=user) (objectClass=computer) (objectClass=group) ) SourceComputerId= SourceComputerName= SourceComputerIpAddress=fe80::89dd:539:eb6:4b27 DestinationComputerId= DestinationComputerName=DomainName= Name=DC.testbug.com Client=[fe80::89dd:539:eb6:4b27%5]:58059 ReturnedEntries=1 SourceAccountSid=S-1-5-21-1565902300-91303804-2055468830-500 SourceAccountName=TESTBUG\Administrator SourceAccountId=c0f7e76b-2d4f-452c-9be8-2ba91294c97e]
2022-09-20 07:45:49.0213 Warn EventActivityEntityResolver ResolveLdapSearchDebuggingEventAsync ldapSearchDebuggingEvent detected [Time=09/20/2022 07:45:48 BaseObject=CN=NTDS Settings,CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=testbug,DC=com RequiredAttributes=canonicalName,objectClass,whenCreated,displayName,distinguishedName,objectGUID,isDeleted,name,nTSecurityDescriptor,objectSid,whenChanged,msDS-HasDomainNCs,invocationId,msDS-isRODC,options SearchScope=base SearchFilter= (objectClass=*) SourceComputerId= SourceComputerName= SourceComputerIpAddress=fe80::89dd:539:eb6:4b27 DestinationComputerId= DestinationComputerName=DomainName= Name=DC.testbug.com Client=[fe80::89dd:539:eb6:4b27%5]:58061 ReturnedEntries=1 SourceAccountSid=S-1-5-21-1565902300-91303804-2055468830-500 SourceAccountName=TESTBUG\Administrator SourceAccountId=c0f7e76b-2d4f-452c-9be8-2ba91294c97e]
2022-09-20 07:46:36.0056 Error ExceptionDispatchInfo RunPeriodic <RegisterPeriodicTask>b__1 failed
System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: A connection that was expected to be kept alive was closed by the server. ---> System.IO.IOException: Unable to read data from the transport connection: 远程主机强迫关闭了一个现有的连接。. ---> System.Net.Sockets.SocketException: 远程主机强迫关闭了一个现有的连接。
at int System.Net.Sockets.Socket.EndReceive(IAsyncResult asyncResult)
at int System.Net.Sockets.NetworkStream.EndRead(IAsyncResult asyncResult)
--- End of inner exception stack trace ---
at int System.Net.Security._SslStream.EndRead(IAsyncResult asyncResult)
at int System.Net.TlsStream.EndRead(IAsyncResult asyncResult)
at void System.Net.Connection.ReadCallback(IAsyncResult asyncResult)
--- End of inner exception stack trace ---
at WebResponse System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at void System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
at async Task<HttpResponseMessage> System.Net.Http.HttpClient.FinishSendAsyncBuffered(Task<HttpResponseMessage> sendTask, HttpRequestMessage request, CancellationTokenSource cts, bool disposeCts)
at async Task<TResponse> Microsoft.Tri.Common.CommunicationWebClient.SendAsync<TResponse>(byte[] requestBytes, int offset, int count)
at async Task<TResponse> Microsoft.Tri.Common.CommunicationWebClient.SendWithRetryAsync<TResponse>(byte[] requestBytes, int offset, int count)
at async Task<TResponse> Microsoft.Tri.Common.CommunicationWebClient.SendAsync<TResponse>(IRequestWithResponse<TResponse> request)
at async Task<TResponse> Microsoft.Tri.Sensor.Common.ServiceProxy<TWebClientConfiguration>.SendAsync<TResponse>(IRequestWithResponse<TResponse> request)
at async Task<DomainControllerSyncData> Microsoft.Tri.Sensor.DirectoryServicesResolver.GetDomainControllerSyncDataAsync(Domain domain)
at async Task Microsoft.Tri.Sensor.DirectoryServicesResolver.UpdateDirectoryEntityChangesAsync()
at async Task Microsoft.Tri.Infrastructure.Module.RunTaskAsync(Func<Task> actionAsync, string name, SimpleTimeMetric timeMetric)
at void Microsoft.Tri.Infrastructure.Module+<>c__DisplayClass28_0+<<RegisterPeriodicTask>b__1>d.MoveNext()
at void Microsoft.Tri.Infrastructure.TaskExtension+<>c__DisplayClass22_0+<<RunPeriodic>b__0>d.MoveNext()