connections can be opened by client request (which is covered by CommandFailed) or upon incoming connections (which is not)