Yes the log files we need are the ones from netcam studio (requires logging to file to be enabled).
TEARDOWN command is to notify the camera that we close the connection, netcam studio is sending this command when connection to the camera is lost or when stopping the app / service properly.
Some cameras may refuse new TCP connections until:
1) there is an internal timeout / period without any connectivity
2) the camera is reset
3) sometime if another url / stream is pulled then it will reset the connection)
Maybe in your case only 2 and 3 applies, i don't know how the camera works internally but it looks like it is refusing the connection. Probably OnvifDM is doing something that puts it back on track.
My little dlink that I use 24/7 had problems with this but they fixed it by firmware updates to make it more robust / solid and since i never had issues anymore.