Here is a trace on ras from Windows 1909:
[0]0E70.1174::2020-06-15 14:58:00.168 [Microsoft-Windows-RRAS]RasGetInfo Guid {NA} for devie type 0x00010009
[0]0E70.1174::2020-06-15 14:58:00.168 [Microsoft-Windows-RRAS]Rasman state change received from port 260, 1->5
[0]0E70.1174::2020-06-15 14:58:00.169 [Microsoft-Windows-RRAS]DdmLegacyDevice::ListenCompleted: Entered, hPort=260, fFlags=0xe0
[0]0E70.1174::2020-06-15 14:58:00.170 [Microsoft-Windows-RRAS]RmEventHandler
[0]0E70.1174::2020-06-15 14:58:00.170 [Microsoft-Windows-RRAS]Rasman state change received from port 260, 5->2
[0]0E70.1174::2020-06-15 14:58:00.170 [Microsoft-Windows-RRAS]DdmLegacyDevice::Connected: Entered, hPort=260
[0]0E70.1174::2020-06-15 14:58:00.170 [Microsoft-Windows-RRAS]TimerQRemove called
[0]0E70.1174::2020-06-15 14:58:00.173 [Microsoft-Windows-RRAS]DdmLegacyDevice::FrameReceived: Entered, hPort: 260
[0]0E70.1174::2020-06-15 14:58:00.173 [Microsoft-Windows-RRAS]SvFrameReceived: PPP frame on port 260
[0]0E70.1174::2020-06-15 14:58:00.173 [Microsoft-Windows-RRAS]DdmDevice::SendDdmStartToProtocolEngine (hport: 260)
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]Line up event occurred on port 260
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]PortName: VPN3-124
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]CorrelationGuidStr: {NA} from ddm
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]Starting PPP on link with IfType=0x0,IPIf=0x0,IPv6If=0x0
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]RasGetBuffer returned 6cec7d50 for SendBuf
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]FsmInit called for protocol = c021, port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]FsmInit for protocol = c021 Configuration 0x80860a
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]PPP ConfigMask 0x80860a
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]PPP ConfigMask = 80860a
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]PPP ConfigMask = 80860a
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]APs available = 3
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]FsmReset called for protocol = c021, port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]Inserting port in bucket # 16
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]Inserting bundle in bucket # 16
[0]0E70.0FB4::2020-06-15 14:58:00.174 [Microsoft-Windows-RRAS]FsmOpen event received for protocol c021 on port 260
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]FsmThisLayerStarted called for protocol = c021, port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]FsmUp event received for protocol c021 on port 260
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:58:00:168
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Req, Length = 0x36, Id = 0x0, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=7374,Id=0,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=7374,Id=0,Protocol=0,EventType=3,fAuth=0,Timeout=150
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:168
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Req, Length = 0x17, Id = 0x0, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 2
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 22
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options a2
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 1a2
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 21a2
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:58:00:168
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Ack, Length = 0x17, Id = 0x0, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.175 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0EBC::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]Packet received (33 bytes) for hPort 260
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:168
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Reject, Length = 0x21, Id = 0x0, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=7374,Id=0,Protocol=c021,EventType=0,fAuth=0
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:58:00:168
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Req, Length = 0x1b, Id = 0x1, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.181 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=7374,Id=1,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[0]0E70.0EBC::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]Packet received (11 bytes) for hPort 260
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:183
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Nak, Length = 0xb, Id = 0x1, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 8
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=7374,Id=1,Protocol=c021,EventType=0,fAuth=0
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:58:00:183
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Req, Length = 0x1c, Id = 0x2, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.189 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=7374,Id=2,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[0]0E70.0EBC::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]Packet received (28 bytes) for hPort 260
[0]0E70.0EBC::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]Packet received (20 bytes) for hPort 260
[0]0E70.0EBC::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]Packet received (31 bytes) for hPort 260
[0]0E70.0EBC::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]Packet received (26 bytes) for hPort 260
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:183
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Ack, Length = 0x1c, Id = 0x2, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=7374,Id=2,Protocol=c021,EventType=0,fAuth=0
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]FsmThisLayerUp called for protocol = c021, port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]LCP Local Options-------------
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS] MRU=1400,ACCM=-1,Auth=c223,MagicNumber=2007895429,PFC=ON,ACFC=ON
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS] Recv Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]LCP Remote Options-------------
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS] MRU=1400,ACCM=-1,Auth=0,MagicNumber=1683907176,PFC=ON,ACFC=ON
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS] Send Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]LCP Configured successfully
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]Authenticating phase started
[0]0E70.0FB4::2020-06-15 14:58:00.197 [Microsoft-Windows-RRAS]Calling APWork in APStart
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:58:00:199
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]<Protocol = CHAP, Type = Protocol specific, Length = 0x20, Id = 0x0, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=7374,Id=0,Protocol=c223,EventType=0,fAuth=1,Timeout=1
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:199
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Identification, Length = 0x14, Id = 0x1, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]Identification packet received
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]Remote identification = MSRASV5.20 length 11-13
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:199
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Identification, Length = 0x1f, Id = 0x2, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]Identification packet received
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]Remote identification = MSRAS-0-BMS-L-17RJSY1 length 22-24
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:199
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Identification, Length = 0x1a, Id = 0x3, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]Identification packet received
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]pPcb->CorrelationGuidStr = {NA}
[0]0E70.0FB4::2020-06-15 14:58:00.198 [Microsoft-Windows-RRAS]Remote identification guid = {DA978400-B469-4943-887B-183E0AD9E649} length 39-41
[0]0E70.0EBC::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Packet received (73 bytes) for hPort 260
[0]0E70.0FB4::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:58:00:199
[0]0E70.0FB4::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]>Protocol = CHAP, Type = Protocol specific, Length = 0x49, Id = 0x0, Port = 260
[0]0E70.0FB4::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0E70.0FB4::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=7374,Id=0,Protocol=c223,EventType=0,fAuth=1
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthProviderAuthenticateUser called
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=10
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=44, Length=5
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=32, Length=9
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=4, Length=4, Value=0xa010164
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=6, Length=4, Value=0x2
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=7, Length=4, Value=0x1
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=5, Length=4, Value=0x104
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=10
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=16
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=61, Length=4, Value=0x5
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=64, Length=4, Value=0x3
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=65, Length=4, Value=0x1
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=30, Length=12
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=67, Length=12
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=31, Length=13
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=66, Length=13
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=17
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=28
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=45
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=1, Length=17
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=22
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Type=26, Length=56
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 44
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 32
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 4
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 6
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 7
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 5
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 61
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 64
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 65
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 30
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 67
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 31
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 66
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 1
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 26
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 4108
[0]0E70.0F70::2020-06-15 14:58:00.209 [Microsoft-Windows-RRAS]Inserting attribute type 4128
Here is from WIndows 2004:
[0]0684.0730::2020-06-15 14:02:30.521 [Microsoft-Windows-RRAS]RasGetInfo Guid {NA} for devie type 0x00010009
[0]0684.0730::2020-06-15 14:02:30.521 [Microsoft-Windows-RRAS]Rasman state change received from port 258, 1->5
[0]0684.0730::2020-06-15 14:02:30.545 [Microsoft-Windows-RRAS]DdmLegacyDevice::ListenCompleted: Entered, hPort=258, fFlags=0xe0
[0]0684.0730::2020-06-15 14:02:30.547 [Microsoft-Windows-RRAS]RmEventHandler
[0]0684.0730::2020-06-15 14:02:30.547 [Microsoft-Windows-RRAS]Rasman state change received from port 258, 5->2
[0]0684.0730::2020-06-15 14:02:30.547 [Microsoft-Windows-RRAS]DdmLegacyDevice::Connected: Entered, hPort=258
[0]0684.0730::2020-06-15 14:02:30.547 [Microsoft-Windows-RRAS]TimerQRemove called
[0]0684.0730::2020-06-15 14:02:32.552 [Microsoft-Windows-RRAS]DdmLegacyDevice::FrameReceived: Entered, hPort: 258
[0]0684.0730::2020-06-15 14:02:32.552 [Microsoft-Windows-RRAS]SvFrameReceived: PPP frame on port 258
[0]0684.0730::2020-06-15 14:02:32.552 [Microsoft-Windows-RRAS]DdmDevice::SendDdmStartToProtocolEngine (hport: 258)
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]Line up event occurred on port 258
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]PortName: VPN3-126
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]CorrelationGuidStr: {NA} from ddm
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]Starting PPP on link with IfType=0x0,IPIf=0x0,IPv6If=0x0
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]RasGetBuffer returned 8e1ca930 for SendBuf
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]FsmInit called for protocol = c021, port = 258
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]FsmInit for protocol = c021 Configuration 0x80870a
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]PPP ConfigMask 0x80870a
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]PPP ConfigMask = 80870a
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]PPP ConfigMask = 80870a
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]APs available = 3
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]FsmReset called for protocol = c021, port = 258
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]Inserting port in bucket # 14
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]Inserting bundle in bucket # 47
[0]0684.0D98::2020-06-15 14:02:32.554 [Microsoft-Windows-RRAS]FsmOpen event received for protocol c021 on port 258
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]FsmThisLayerStarted called for protocol = c021, port = 258
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]FsmUp event received for protocol c021 on port 258
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:02:32:543
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Req, Length = 0x36, Id = 0x0, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=9376,Id=0,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=9376,Id=0,Protocol=0,EventType=3,fAuth=0,Timeout=150
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:543
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Req, Length = 0x17, Id = 0x0, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 2
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 22
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options a2
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 1a2
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 21a2
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:02:32:543
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Ack, Length = 0x17, Id = 0x0, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.555 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0C7C::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]Packet received (33 bytes) for hPort 258
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:559
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Reject, Length = 0x21, Id = 0x0, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=9376,Id=0,Protocol=c021,EventType=0,fAuth=0
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:02:32:559
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Req, Length = 0x1b, Id = 0x1, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.571 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.572 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=9376,Id=1,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[0]0684.0C7C::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]Packet received (11 bytes) for hPort 258
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:574
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Nak, Length = 0xb, Id = 0x1, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]CheckOption: Negotiated Options 8
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=9376,Id=1,Protocol=c021,EventType=0,fAuth=0
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:02:32:574
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]<Protocol = LCP, Type = Configure-Req, Length = 0x1c, Id = 0x2, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.583 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=9376,Id=2,Protocol=c021,EventType=0,fAuth=0,Timeout=1
[0]0684.0C7C::2020-06-15 14:02:32.595 [Microsoft-Windows-RRAS]Packet received (28 bytes) for hPort 258
[0]0684.0C7C::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]Packet received (20 bytes) for hPort 258
[0]0684.0C7C::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]Packet received (33 bytes) for hPort 258
[0]0684.0C7C::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]Packet received (26 bytes) for hPort 258
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:590
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Configure-Ack, Length = 0x1c, Id = 0x2, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=9376,Id=2,Protocol=c021,EventType=0,fAuth=0
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]FsmThisLayerUp called for protocol = c021, port = 258
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]LCP Local Options-------------
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS] MRU=1400,ACCM=-1,Auth=c223,MagicNumber=543127047,PFC=ON,ACFC=ON
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS] Recv Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]LCP Remote Options-------------
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS] MRU=1400,ACCM=-1,Auth=0,MagicNumber=1688232490,PFC=ON,ACFC=ON
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS] Send Framing = PPP,SSHF=OFF,MRRU=1500,LinkDiscrim=0
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]LCP Configured successfully
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]Authenticating phase started
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]Calling APWork in APStart
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]<PPP packet sent at 06/15/2020 12:02:32:590
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]<Protocol = CHAP, Type = Protocol specific, Length = 0x20, Id = 0x0, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.596 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]InsertInTimerQ called portid=9376,Id=0,Protocol=c223,EventType=0,fAuth=1,Timeout=1
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:590
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Identification, Length = 0x14, Id = 0x1, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]Identification packet received
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]Remote identification = MSRASV5.20 length 11-13
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:590
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Identification, Length = 0x21, Id = 0x2, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]Identification packet received
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]Remote identification = MSRAS-0-BMSIT-L-2ZF7HX2 length 24-26
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:590
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]>Protocol = LCP, Type = Identification, Length = 0x1a, Id = 0x3, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]Identification packet received
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]pPcb->CorrelationGuidStr = {NA}
[0]0684.0D98::2020-06-15 14:02:32.597 [Microsoft-Windows-RRAS]Remote identification guid = {D6A4DBB3-42F9-0004-9383-A5D6F942D601} length 39-41
[0]0684.0C7C::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Packet received (64 bytes) for hPort 258
[0]0684.0D98::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]>PPP packet received at 06/15/2020 12:02:32:606
[0]0684.0D98::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]>Protocol = CHAP, Type = Protocol specific, Length = 0x40, Id = 0x0, Port = 258
[0]0684.0D98::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]PPP Packet buffer
[0]0684.0D98::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RemoveFromTimerQ called portid=9376,Id=0,Protocol=c223,EventType=0,fAuth=1
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RasAuthProviderAuthenticateUser called
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=26, Length=10
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=44, Length=5
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=32, Length=9
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=4, Length=4, Value=0xa010132
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=6, Length=4, Value=0x2
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=7, Length=4, Value=0x1
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=5, Length=4, Value=0x102
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=26, Length=10
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=26, Length=16
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]RasAuthAttributesPrint: Auth Attrib
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=61, Length=4, Value=0x5
[0]0684.10BC::2020-06-15 14:02:32.605 [Microsoft-Windows-RRAS]Type=64, Length=4, Value=0x3