12/07 13:26:15 [5020] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
12/07 13:26:15 [1192] <CheckHeartbeatTimer>====== Heartbeat loop starts at 13:26:15 ======
12/07 13:26:16 [1192] <GetOnlineNicInfo>:Netport Count=1
12/07 13:26:16 [1192] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs>
12/07 13:26:16 [1192] <CalcAgentHashKey>:CH=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:16 [1192] <CalcAgentHashKey>:CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:26:16 [1192] <CalcAgentHashKey>:C=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP
12/07 13:26:16 [1192] <CalcAgentHashKey>:CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:26:16 [1192] <CalcAgentHashKey>:UCH=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:16 [1192] <CalcAgentHashKey>:UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:26:16 [1192] <CalcAgentHashKey>:UC=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP
12/07 13:26:16 [1192] <CalcAgentHashKey>:UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:26:16 [1192] <DoHeartbeat>HardwareID=5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:16 [1192] <DoHeartbeat>CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:26:16 [1192] <DoHeartbeat>CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:26:16 [1192] <DoHeartbeat>UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:26:16 [1192] <DoHeartbeat>UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:26:16 [1192] <DoHeartbeat> Set heartbeat event
12/07 13:26:16 [1192] Use new configuration
12/07 13:26:16 [1192] <CSyLink::IndexHeartbeatProc()>
12/07 13:26:16 [1192] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 00000000049EE2C0
12/07 13:26:16 [1192] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 13:26:16 ======
12/07 13:26:16 [1192] HEARTBEAT: Check Point 1
12/07 13:26:16 [1192] Get First Server!
12/07 13:26:16 [1192] <GetFirstSEMServer> Selecting a random server
12/07 13:26:16 [1192] HEARTBEAT: Check Point 2
12/07 13:26:16 [1192] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
12/07 13:26:16 [1192] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
12/07 13:26:16 [1192] HEARTBEAT: Check Point 3
12/07 13:26:16 [1192] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
12/07 13:26:16 [1192] HEARTBEAT: Check Point 4
12/07 13:26:16 [1192] <IndexHeartbeatProc>===Get Index STAGE===
12/07 13:26:16 [1192] ************CSN=888
12/07 13:26:16 [1192] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&hid=5E4C2F19A25301426FAB7AF635EF9738&groupid=58F523BD0A480FBB01A0D510C55A9638&mode=0&hbt=14400&as=888&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:16 [1192] <GetIndexFileRequest:>http://NRIDCCSEP1:8014/secars/secars.dll?h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
12/07 13:26:18 [2752] <CSyLink::mfn_DownloadNow()>
12/07 13:26:18 [2752] </CSyLink::mfn_DownloadNow()>
12/07 13:26:19 [1192] <GetIndexFileRequest:>Send Request failed.. Error Code = 12007
12/07 13:26:19 [1192] <ParseErrorCode:>12007=>The Server name could not be resolved.
12/07 13:26:19 [1192] <GetIndexFileRequest:>Send Request failed.. Error Code = 12007
12/07 13:26:19 [1192] <ParseErrorCode:>12007=>The Server name could not be resolved.
12/07 13:26:19 [1192] <GetIndexFileRequest:>COMPLETED
12/07 13:26:19 [1192] <IndexHeartbeatProc>GetIndexFile handling status: 6
12/07 13:26:19 [1192] <IndexHeartbeatProc>Switch Server flag=1
12/07 13:26:19 [1192] HEARTBEAT: Check Point 5.1
12/07 13:26:19 [1192] <ScheduleNextUpdate>new scheduled heartbeat=32 seconds
12/07 13:26:19 [1192] HEARTBEAT: Check Point 8
12/07 13:26:19 [1192] Get Next Server!
12/07 13:26:19 [1192] <IndexHeartbeatProc>switch to another server
12/07 13:26:19 [1192] HEARTBEAT: Check Point 1
12/07 13:26:19 [1192] HEARTBEAT: Check Point 2
12/07 13:26:19 [1192] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
12/07 13:26:19 [1192] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
12/07 13:26:19 [1192] HEARTBEAT: Check Point 3
12/07 13:26:19 [1192] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
12/07 13:26:19 [1192] HEARTBEAT: Check Point 4
12/07 13:26:19 [1192] <IndexHeartbeatProc>===Get Index STAGE===
12/07 13:26:19 [1192] ************CSN=889
12/07 13:26:19 [1192] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&hid=5E4C2F19A25301426FAB7AF635EF9738&groupid=58F523BD0A480FBB01A0D510C55A9638&mode=0&hbt=14400&as=889&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:19 [1192] <GetIndexFileRequest:>http://10.120.15.187:8014/secars/secars.dll?h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
12/07 13:26:35 [1192] <GetIndexFileRequest:>SMS return=200
12/07 13:26:35 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:26:35 [1192] <FindHeader>Sem-HashKey:=>AA1B360843384DAB8F353713268F617B
12/07 13:26:35 [1192] <GetIndexFileRequest:>Loading the current mode:0
12/07 13:26:35 [1192] <SyLink>Current Mode changes to: 1
12/07 13:26:35 [1192] <FindHeader>Sem-LANSensor:=>0
12/07 13:26:35 [1192] <FindHeader>Sem-Signatue:=>05518AB900C0F2E8677099CB59EC6C16CE47B4DF73759A33B2CC93867F4B8789B1F1CF8912753F59ECF147FF710B97E27B06B8053C9C6629685C421B7271941CC7562237671F10E171BAD8A33E610E2592CE83ED654EC0E741253388DF7094F45C75E07B23B0716C1F9C927B4110075467C14AD0244A68DB1CAF3551C1EBA72D
12/07 13:26:35 [1192] <mfn_DoGetIndexFile200>Content Lenght => 1345
12/07 13:26:35 [1192] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
12/07 13:26:35 [1192] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="9466D5380A780FBB0183BCB8015B93EE" ServerID="AE289A470A780FBB012C7BF652A92B79" GroupID="6B01D51D0A480FBB0072D165323D9CD1" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "07/12/2010 04:07:48">	<Profile Checksum="45CEEF1F4F5871B5C9161D8E14084295" SerialNumber="6B01-11/18/2010 16:53:24 140" LastModifiedTime="23/11/2010  16:31:48"/>	<ConfigFile Checksum="B1A4977D3411AC339DA77954028C45CE" LastModifiedTime="23/11/2010  16:31:48"/>	<IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="23/11/2010  16:31:48"/>	<SylinkFile Checksum="4BC5F3B050FE8BE8D20E207E648A1F9B" LastModifiedTime="23/11/2010  16:31:48"/>	<LSProfile Checksum="FE4E59673C04BABBD88C3E9C3F7B8FD9" SerialNumber ="6B01-11/18/2010 16:53:24 140" LastModifiedTime ="23/11/2010  16:31:48"/>
	<LiveUpdate>
		<File Checksum="878811D4765E9593085FE1DBA00986EC" DeltaFlag="1" FullSize="102065613" LastModifiedTime="1291674910340" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101206002"/>
 		<File Checksum="20853C14C52099229EB9EA33361E37E4" DeltaFlag="1" FullSize="103713414" LastModifiedTime="1291674804641" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101206002"/>
 		<File Checksum="64CA817F96D1FC1BA913E333C0C97B16" DeltaFlag="1" FullSize="964272" LastModifiedTime="1291492099359" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101203001"/>
 		<File Checksum="2AF4BBE28EA6F1E9229DE7E3C29F0775" DeltaFlag="1" FullSize="944694" LastModifiedTime="1291491941218" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101203001"/>
 		<File Checksum="DC2A6067CA13CCEC1ACC9822DFC304BD" DeltaFlag="1" FullSize="669829" LastModifiedTime="1225447250703" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
 		<File Checksum="CAE48C87F9953354CE84391B490F1B1C" DeltaFlag="1" FullSize="650307" LastModifiedTime="1225447255593" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
 		<File Checksum="68A3AD1A2926311336BE284D67C0C6F2" DeltaFlag="1" FullSize="88188" LastModifiedTime="1225447297156" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
 		<File Checksum="7399244F86CDB451FDCF0D8614ACC6E7" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1225447304359" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
 		<File Checksum="40EC8A4C393D3BAD2011B9D605B92DD0" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1225447321406" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
 		<File Checksum="D69247E81E000D0248A9E869FB2A8E32" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291322291640" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
 		<File Checksum="3754628BC50EC6C3AA36078C888B1011" DeltaFlag="1" FullSize="76787" LastModifiedTime="1291674915254" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101206009"/>
 		<File Checksum="A6AA25061A39C85FC48C0E28ECD7A038" DeltaFlag="1" FullSize="3739487" LastModifiedTime="1291674916439" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101206009"/>
 		<File Checksum="12F3A4AC9D0CBB439988EACD0C45633E" DeltaFlag="1" FullSize="3739514" LastModifiedTime="1291674918077" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101206009"/>
 		<File Checksum="3E1CFCA44F2827C6A219A9F4594DE584" DeltaFlag="1" FullSize="76770" LastModifiedTime="1291674918732" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101206009"/>
	</LiveUpdate>
</GroupIndex>
12/07 13:26:35 [1192] <mfn_ParseIndexFile2>set to download new Profile.. 
12/07 13:26:35 [1192] <mfn_ParseIndexFile2>set to download new Sylink.. 
12/07 13:26:35 [1192] <mfn_DoGetIndexFile200>Parser Index File!
12/07 13:26:35 [1192] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:26:35 [1192] <GetIndexFileRequest:>COMPLETED
12/07 13:26:35 [1192] <IndexHeartbeatProc>GetIndexFile handling status: 0
12/07 13:26:35 [1192] <IndexHeartbeatProc>Switch Server flag=0
12/07 13:26:35 [1192] HEARTBEAT: Check Point 5.1
12/07 13:26:35 [1192] <IsInClientIPorOnLink> NextHop Not equal 10.120.15.187,return FALSE
12/07 13:26:35 [1192] <IsInClientIPorOnLink> NextHop is OnLink with 10.80.15.107,return TRUE
12/07 13:26:35 [1192] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:10.80.15.107
12/07 13:26:35 [1192] <IndexHeartbeatProc> Saved IP Address: 10.120.15.187
12/07 13:26:35 [1192] ************CSN=890
12/07 13:26:35 [1192] <mfn_MakeGetProfileUrl:>Request is: action=3&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=890&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:35 [1192] <GetProfileRequest:>http://10.120.15.187:8014/secars/secars.dll?h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
12/07 13:26:36 [1192] <GetProfileRequest:>SMS return=200
12/07 13:26:36 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:26:37 [1192] <mfn_DoGetProfile200>Content Lenght => 8820
12/07 13:26:37 [1192] <mfn_DoGetProfile200>Got profile from server, read bytes=8820
12/07 13:26:37 [1192] <mfn_ParseNewProfile>content len is 8820
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_SERVER_PROFILE_VERIFY
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_SERVER_PROFILE_VERIFY, return=0
12/07 13:26:37 [1192] <mfn_ParseNewProfile>Profile Len:88960
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_SERVER_PROFILE_CHANGED
12/07 13:26:37 [1192] SyLinkCreateConfig => Created instance: 0000000005814B60
12/07 13:26:37 [1192] SetCurLocationName: Name is set to - Default
12/07 13:26:37 [1192] SetCurLocationID: ID is set to - 61FCEB8C0A480FBB01CAC94D3F8E9794
12/07 13:26:37 [1192] SyLinkCreateConfig => Created instance: 00000000057EC390
12/07 13:26:37 [1192] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
12/07 13:26:37 [1192] Importing ConfigObject: 00000000057EC390 into: 00000000049F11A0
12/07 13:26:37 [1192] SyLinkDeleteConfig => Deleting instance: 00000000057EC390
12/07 13:26:37 [1192] SyLinkDeleteConfig => Deleting instance: 0000000005814B60
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_SERVER_PROFILE_CHANGED, return=0
12/07 13:26:37 [1192] <mfn_ParseNewProfile>save profile checksum=45CEEF1F4F5871B5C9161D8E14084295
12/07 13:26:37 [1192] <mfn_ParseNewProfile>========== Received profile from server completed. =========
12/07 13:26:37 [1192] <mfn_ParseNewProfile>completed
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:26:37 [1192] <mfn_DoGetProfile200>completed
12/07 13:26:37 [1192] <GetProfileRequest:>RECEIVE STAGE COMPLETED
12/07 13:26:37 [1192] <GetProfileRequest:>COMPLETED
12/07 13:26:37 [1192] ************CSN=891
12/07 13:26:37 [1192] <mfn_MakeGetSylinkFileUrl:>Request is: action=6&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=891&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:37 [1192] <GetSylinkFileRequest:>http://10.120.15.187:8014/secars/secars.dll?h=3523763F0942C98F14D1679EFEE78FFFA3686EE44B3B572DEEE89116E76D233AED92BE94C50F4D06F941CE7CAEBF2DFA8F64540DC5ECC4F8362D21F27DAA0F4ED0E40BA55D94684ADF930746A14EE46FDAFB66BE217D35B79EB75307AFB939E9A869A98D5FC88AFFB9520F61342CA3B3B8B5671BBDC0BEF70097595E7852F54DC93AC246D107C96939D64F3908BB19BAFAEC5C122405403535464473A10A66918D7EA252245DA7FEC5189B7EC55FD8B3FFECCB4EB91E19DB4BED41BC3ABC848463C77A7EE85663393DC0C31B2648DB1FFD0D9734F5835FBCC3DC8DA01B6515581E46A26DDD9310177022B97D21BCC550558D1DD4D791E9DEE281D98F74E77B4CC5A23F34EBBCA7BFA2FD5AFA056FD93C182EC02E16BC72FD20AB9DB93F5E2CCFC41A926D60D10349AE91C2B6C52726AFCF46DBA3765CA85E49FC67754C864AEA661A61E40664454FAA8EE5805BAB0CB2058C6FE7F44CD1F187F451BB440427D9
12/07 13:26:37 [1192] <GetSylinkFileRequest:>SMS return=200
12/07 13:26:37 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:26:37 [1192] <mfn_DoGetSylinkFile200>Content Lenght => 2036
12/07 13:26:37 [1192] <mfn_DoGetSylinkFile200>Got sylink.xml from server, read bytes=2036
12/07 13:26:37 [1192] <mfn_DoGetSylinkFile200>Data Decrypt Status: 0Sylink File: 
<?xml version="1.0" encoding="UTF-8"?>
<ServerSettings DomainId="58F523BD0A480FBB01A0D510C55A9638" NameSpace="rpc">
  <CommConf>
    <AgentCommunicationSetting AlwaysConnect="1" CommunicationMode="PULL" DisableDownloadProfile="0" Kcs="94F9C60024223D2822F915E70D0998B6" PullHeartbeatSeconds="3600" RandomizationEnabled="1" RandomizationRange="300" RememberCurrentGroup="0" RememberCurrentPolicyMode="0" UploadCmdStateHeartbeatSeconds="300" UploadLearnedApp="1" UploadLogHeartbeatSeconds="300" UploadOpStateHeartbeatSeconds="300"/>
    <ServerList Name="BPCL-CDC Priority Server List">
      <ServerPriorityBlock Name="Priority1">
        <Server Address="10.72.15.187" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
        <Server Address="10.72.15.188" HttpsVerifyCA="0" VerifySignatures="1"/>
      </ServerPriorityBlock>
      <ServerPriorityBlock Name="Priority2">
        <Server Address="10.120.15.187" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
      </ServerPriorityBlock>
    </ServerList>
    <ServerCertList>
      <Certificate Name="cochocsep1">MIICPjCCAacCBEuowgswDQYJKoZIhvcNAQEFBQAwZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNB&#xd;
MRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxzeW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTET&#xd;
MBEGA1UEAxMKY29jaG9jc2VwMTAeFw0xMDAzMjMxMzI4NDNaFw0yMDAzMjAxMzI4NDNaMGYxCzAJ&#xd;
BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEQMA4GA1UEBxMHRnJlbW9udDEVMBMGA1UEChMMc3ltYW50&#xd;
ZWMuY29tMQwwCgYDVQQLEwNzY20xEzARBgNVBAMTCmNvY2hvY3NlcDEwgZ8wDQYJKoZIhvcNAQEB&#xd;
BQADgY0AMIGJAoGBAKvtbO7To3jxatrRuCH5Ft+6wVJ0nIFcyCArNRV4Mh4C4S27JKmiaHMJnW0Z&#xd;
OVh3hBLNiLXUwdeCJiPaTQPMuQTipcd/6XrCuyu5Hn104Mre9UC4aW8Z8F4fCBctXULusHZtj0ao&#xd;
n+f5oYZMPfqaEBf85jEAUjVQND/kzxju/DMjAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAg1a3Bvwl&#xd;
9oAyBoLDnGO5n5IoUCr5Vsm6FXKCVx41Gwdf0MRE3E5MXu59gYBINICoxyFD9idGBVIXaur8qUz7&#xd;
UevJFUgfAN+swm2Wpu1ZfmqWuFWA6Tt2mxyYW26v4mQ6e6ZlPrys0Tw8+F53zvfcZ/6oRdWTmNNS&#xd;
y9RjgZ54ucU=&#xd;
</Certificate>
      <Certificate Name="cochocsep2">MIICQzCCAaygAwIBAgIETKmD3jANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE&#xd;
CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD&#xd;
c2NtMRMwEQYDVQQDEwpjb2Nob2NzZXAyMB4XDTEwMTAwNDA3MzU1OFoXDTIwMTAwMTA3MzU1OFow&#xd;
ZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxz&#xd;
eW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTETMBEGA1UEAxMKY29jaG9jc2VwMjCBnzANBgkqhkiG&#xd;
9w0BAQEFAAOBjQAwgYkCgYEA1Oi1TJBM5byBegMXWm2nzCgMmR8KfCHisGbeWBUvxTKgP+VyN22A&#xd;
EvQ+Dp7/dAXOkvM6hYuOe7CGpCvYaXd2Gvq5Bpex6fIuI4mvec576Aix1LbIVpsJnI0kbpCbGoBh&#xd;
VdI7H8V8Jb+AzhrBI3iOSoD4RUsYvN7tDtUj0nga5VkCAwEAATANBgkqhkiG9w0BAQUFAAOBgQBg&#xd;
rV49ckyx4kDiepCHJRazyjP++MzDwNZTGR49/cwXJ6RH98JcILxHt842Bqo6rJcyMDEZ8UfELnn8&#xd;
gH0gNRLh5d2F7wXI8q0Dn+pSrQnRiYCEARSedhYPanJdFLF9zxW+2reRz98kOCoMEQimZyeLcA7b&#xd;
kFdDGkkPSX9gdNgq7A==&#xd;
</Certificate>
      <Certificate Name="NRIDCCSEP1">MIICQzCCAaygAwIBAgIES83VujANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE&#xd;
CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD&#xd;
c2NtMRMwEQYDVQQDEwpOUklEQ0NTRVAxMB4XDTEwMDQyMDE2MjYzNFoXDTIwMDQxNzE2MjYzNFow&#xd;
ZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxz&#xd;
eW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTETMBEGA1UEAxMKTlJJRENDU0VQMTCBnzANBgkqhkiG&#xd;
9w0BAQEFAAOBjQAwgYkCgYEAi6mbSz7NBecGWVSBBXDyAfYLmtT9k26Cy2T8M35F86KFaaznqxCv&#xd;
nuD58x8Mf204JUd/05PPLN55LkWIyVvHUBdohX3zR4DFzxGKYtPZfCSLoQTQ1aPGwbEBIkGtdn26&#xd;
pYhrZM+FOtLI9eqlrd1e3/Y+ZJhsex0WRco/18MjR8cCAwEAATANBgkqhkiG9w0BAQUFAAOBgQCC&#xd;
7cUpfXJWr5IfTVqVyAzp6DjsOU4wLUsRbkDnQNSQB4HvgOOuLD4HEfFEuyo2iIXakgiGMLo2R91F&#xd;
1iwz+BoFNdnf8k7v/jRGI4vEEqUrXGvv5UwV6HuZpJyzHTacGVsb0lemBRW7+5K9/nSmk9PkIkBy&#xd;
z3efmmf66+dtKEGK1A==&#xd;
</Certificate>
    </ServerCertList>
    <LogSetting MaxLogRecords="100" SendingLogAllowed="1" UploadProcessLog="1" UploadRawLog="1" UploadSecurityLog="1" UploadSystemLog="1" UploadTrafficLog="1"/>
  </CommConf>
</ServerSettings>

12/07 13:26:37 [1192] <mfn_DoGetSylinkFile200>Parsing Sylink.xml file.. 
12/07 13:26:37 [1192] SyLinkCreateConfig => Created instance: 0000000005814B60
12/07 13:26:37 [1192] <mfn_ParseSylinkFile>Created m_hNewGroupConfig: 0000000005814B60
12/07 13:26:37 [1192] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
12/07 13:26:37 [1192] <mfn_SaveConfigFile>Write data to a temp file as C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Sylink.tmp
12/07 13:26:37 [1192] <mfn_SaveConfigFile>Writing Sylink file data of length (in bytes) 3945
12/07 13:26:37 [1192] <mfn_SaveConfigFile>Posting Event to SMC to unlock the Sylink file..
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_SYLINK_FILES_UNLOCK
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_SYLINK_FILES_UNLOCK, return=0
12/07 13:26:37 [1192] <mfn_SaveConfigFile>result from SMC to unlock the Sylink file = 0
12/07 13:26:37 [1192] <mfn_SaveConfigFile>Deleted Temp Sylink file.. Posting Event to SMC to Lock the Sylink file..
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_SYLINK_FILES_LOCK
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_SYLINK_FILES_LOCK, return=0
12/07 13:26:37 [1192] <mfn_ParseSylinkFile>Now Sylink.xml is supposed to be good.. setting m_bBackupNewSylinkConfig to TRUE.
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:26:37 [1192] <mfn_DoGetSylinkFile200>completed
12/07 13:26:37 [1192] <GetSylinkFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:26:37 [1192] <GetSylinkFileRequest:>COMPLETED
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:37 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:101206002
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:26:37 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:26:37 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101206002
12/07 13:26:37 [1192] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101206002
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:26:37 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:26:37 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101203001
12/07 13:26:37 [1192] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}101203001
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:37 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:37 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:101203001
12/07 13:26:37 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:26:38 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:26:38 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}101201096
12/07 13:26:38 [1192] <Add2LUFileList:>File Info already exists, hence updating: {4F889C4A-784D-40de-8539-6A29BAA43139}101201096
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:101206009
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:101206009
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:101206009
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:38 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:101206009
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:26:38 [1192] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=14400 seconds
12/07 13:26:38 [1192] HEARTBEAT: Check Point 6
12/07 13:26:38 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
12/07 13:26:38 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
12/07 13:26:38 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
12/07 13:26:38 [1192] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
12/07 13:26:38 [1192] ReasonDescForFailure*** = Host Integrity check is disabled.
12/07 13:26:38 [1192] ReasonDescForFailure*** = Host Integrity check is disabled.
12/07 13:26:38 [1192] *** = <SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="6B01D51D0A480FBB0072D165323D9CD1">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="WRWROMTSM" HostDesc=""/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.0.6002" Desc="Windows Server 2008 Standard Edition" Type="50724882" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 44 Stepping 2" ProcessorClock="2665" ProcessorNum="24"/>
<Memory Size="34348085248"/>
<Disk Letter="C:\" Size="107372539904"/>
<BIOS Version="HP     - 2"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="6B01-11/18/2010 16:53:24 140"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>

<SSAUTC Bias="-330"/>
<DNSs><DNS Address="10.80.15.91"/><DNS Address="10.80.15.92"/></DNSs>
<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

12/07 13:26:38 [1192] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 557
12/07 13:26:38 [1192] <mfn_PostAgentInfo>Free memory difference: 110403584, Threshold: 4763284065
12/07 13:26:38 [1192] <mfn_PostAgentInfo>Free disk space difference: 286720, Threshold: 13923825855
12/07 13:26:38 [1192] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
12/07 13:26:38 [1192] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
12/07 13:26:38 [1192] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" Timestamp="1291708598407"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3252754</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280511000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>280B07070004</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>30350368</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>0:0</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="2B982FF90A480FBB01EC1DBD55098551"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1291703277385</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="6B01D51D0A480FBB0072D165323D9CD1">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="WRWROMTSM" HostDesc=""/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.0.6002" Desc="Windows Server 2008 Standard Edition" Type="50724882" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 44 Stepping 2" ProcessorClock="2665" ProcessorNum="24"/>
<Memory Size="34348085248"/>
<Disk Letter="C:\" Size="107372539904"/>
<BIOS Version="HP     - 2"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="6B01-11/18/2010 16:53:24 140"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="-330"/>
<DNSs><DNS Address="10.80.15.91"/><DNS Address="10.80.15.92"/></DNSs>
<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="6B01D51D0A480FBB0072D165323D9CD1">
<SSAHostInfo>
<Memory Free="31865630720"/>
<Disk Letter="C:\" Free="92825219072"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
12/07 13:26:38 [1192] ************CSN=892
12/07 13:26:38 [1192] <mfn_MakePostUrl:>Request is: action=192&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&as=892&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:38 [1192] <mfn_PostAgentInfo>http://10.120.15.187:8014/secars/secars.dll?h=8079188CF58F4B35037AFC5B49F2AFD00768569026626EB11CED491EC1C8786B40B643D613F0F3602673F1BE0585524DAE1F1B3E081B361EED7D748A5B64488CDEFDCDDD4BB37EA8DF29762036AA5A2A3A1FE6B61B4C167849E04DEE0C80ACA6300C14F4F5C42B868B0E0128058539D4C27F61E4B1977BE8F34DDBD31379A19AFD041370E25133BC22D4F8B2227B01A59233C891776F9BD411C065E4BF2E339CB1F0143C64A239E483457864F0B64C0625A7239DF01ACD5ECDFC1F4AB7572956CBF585B584499FEEAC510B74CFDA01C68A7FF3EE1C3903F2EA2E1080F4C07996F31CDC9B0152C0AB93CC01A969BB802376585CA6A42CC4C01B52C3939A68954C96F89D3F8AAEDBA4CA796E2CB73E06412BB8645FF3EB5CE598239F89290EB32BDE899E4CDCC1EA44884993232BC066B6BA9DBB63682BE353A3A9504CECAFCC71
12/07 13:26:39 [1192] <mfn_PostAgentInfo>POST the total size=1284
12/07 13:26:39 [1192] <mfn_PostAgentInfo>Done with return code = 200
12/07 13:26:39 [1192] <IndexHeartbeatProc>===UPLOAD STAGE===
12/07 13:26:39 [1192] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
12/07 13:26:39 [1192] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
12/07 13:26:39 [1192] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
12/07 13:26:39 [1192] <PrepareEventLog>initialized technology extension processing ok
12/07 13:26:39 [1192] <CalcEventLogIndex>Need to send Event Log Type(0) from id 581 to 585
12/07 13:26:39 [1192] <PrepareEventLog>Allow total logs to send=5
12/07 13:26:39 [1192] <PrepareEventLog>nSecurityRecordsTotal=0
12/07 13:26:39 [1192] <PrepareEventLog>nSecurityRecordsToSend=0
12/07 13:26:39 [1192] <PrepareEventLog>nSystemRecordsTotal=5
12/07 13:26:39 [1192] <PrepareEventLog>nSystemRecordsToSend=100
12/07 13:26:39 [1192] <PrepareEventLog>nTrafficRecordsTotal=0
12/07 13:26:39 [1192] <PrepareEventLog>nTrafficRecordsToSend=0
12/07 13:26:39 [1192] <PrepareEventLog>nRawRecordsTotal=0
12/07 13:26:39 [1192] <PrepareEventLog>nRawRecordsToSend=0
12/07 13:26:39 [1192] <PrepareEventLog>nProcessRecordsTotal=0
12/07 13:26:39 [1192] <PrepareEventLog>nProcessRecordsToSend=0
12/07 13:26:39 [1192] <PrepareEventLog>nLANSensorRecordsTotal=0
12/07 13:26:39 [1192] <PrepareEventLog>nLANSensorRecordsToSend=0
12/07 13:26:39 [1192] <PrepareEventLog>nTechExtensionRecordsTotal=0
12/07 13:26:39 [1192] <PrepareEventLog>nTechExtensionRecordsToSend=0
12/07 13:26:39 [1192] <MakeSystemLog>The size of SYSTEM event logs is 2841.
12/07 13:26:39 [1192] <SyLink>The size of SYSTEM event logs is 2841.
12/07 13:26:39 [1192] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
12/07 13:26:39 [1192] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
12/07 13:26:39 [1192] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
12/07 13:26:39 [1192] <MakeProcessLog>Attached total 0 bytes process event logs.
12/07 13:26:39 [1192] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
12/07 13:26:39 [1192] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
12/07 13:26:39 [1192] ************CSN=893
12/07 13:26:39 [1192] <mfn_MakePostUrl:>Request is: action=195&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=893&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:39 [1192] <SendEventLogToServer>http://10.120.15.187:8014/secars/secars.dll?h=9E23E42D2C971EED8A5E19D9912B78BB0768569026626EB11CED491EC1C8786B40B643D613F0F3602673F1BE0585524DAE1F1B3E081B361EED7D748A5B64488CDEFDCDDD4BB37EA8DF29762036AA5A2A3A1FE6B61B4C167849E04DEE0C80ACA6300C14F4F5C42B868B0E0128058539D4C27F61E4B1977BE8F34DDBD31379A19AFD041370E25133BC22D4F8B2227B01A59233C891776F9BD411C065E4BF2E339CB1F0143C64A239E483457864F0B64C0625A7239DF01ACD5ECDFC1F4AB7572956EE6156E4478A8F278C9AB4B6A6AB3EA8684DB52E14EA31B621471436D0B1EDF74ADA9D1B93662B1FFBDCE25B1BAD4ECC3ED85CF19BBBEB6AE16D5CE5F338E89D427F728961F1AA73AFDEF3BFAF8A2C0841F392B9FF1277BC12EECE2F8A743D57B37BD0DDFE81715BAF3471C0D10CC2BF098DB3A0FB1E54DCAB9696D0A419E981EF3571297A326D05DC1D2BFE15A62D5649880096A02FB2CA82B1B69DCF0A0564
12/07 13:26:41 [1192] <SendEventLogToServer>eventlog-->SMS, size=983
12/07 13:26:41 [1192] <SendEventLogToServer>uploads the eventlog to server, size=983
12/07 13:26:41 [1192] <SendEventLogToServer>Query return code = 200
12/07 13:26:41 [1192] <SendEventLogToServer>EventLog-->SEM DONE!
12/07 13:26:41 [1192] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
12/07 13:26:41 [1192] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
12/07 13:26:41 [1192] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
12/07 13:26:41 [1192] HEARTBEAT: Check Point 8
12/07 13:26:41 [1192] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
12/07 13:26:41 [1192] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
12/07 13:26:41 [1192] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 13:26:41 ======
12/07 13:26:41 [1192] <IndexHeartbeatProc>Set Heartbeat Result= 5
12/07 13:26:41 [1192] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
12/07 13:26:41 [1192] Importing ConfigObject: 0000000005814B60 into: 00000000049F11A0
12/07 13:26:41 [1192] Use new configuration
12/07 13:26:41 [1192] Importing ConfigObject: 00000000049F11A0 into: 00000000049EE2C0
12/07 13:26:41 [1192] <UseNewConfig:>PreferredGroup in new group specific settings has been saved into registry: My Company\WR\WRO\WRO Servers
12/07 13:26:41 [1192] <UseNewConfig:>PreferredMode in new group specific settings has been saved into registry: 1
12/07 13:26:41 [1192] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
12/07 13:26:41 [1192] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
12/07 13:26:41 [1192] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
12/07 13:26:41 [1192] HEARTBEAT: Check Point Complete
12/07 13:26:41 [1192] <IndexHeartbeatProc>Done, Heartbeat=1seconds
12/07 13:26:41 [1192] </CSyLink::IndexHeartbeatProc()>
12/07 13:26:41 [1192] <CheckHeartbeatTimer>====== Heartbeat loop stops at 13:26:41 ======
12/07 13:26:42 [1192] <CheckHeartbeatTimer>====== Heartbeat loop starts at 13:26:42 ======
12/07 13:26:42 [1192] <GetOnlineNicInfo>:Netport Count=1
12/07 13:26:42 [1192] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs>
12/07 13:26:42 [1192] <CalcAgentHashKey>:CH=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:42 [1192] <CalcAgentHashKey>:CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:26:42 [1192] <CalcAgentHashKey>:C=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP
12/07 13:26:42 [1192] <CalcAgentHashKey>:CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:26:42 [1192] <CalcAgentHashKey>:UCH=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:42 [1192] <CalcAgentHashKey>:UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:26:42 [1192] <CalcAgentHashKey>:UC=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP
12/07 13:26:42 [1192] <CalcAgentHashKey>:UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:26:42 [1192] <DoHeartbeat>HardwareID=5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:42 [1192] <DoHeartbeat>CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:26:42 [1192] <DoHeartbeat>CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:26:42 [1192] <DoHeartbeat>UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:26:42 [1192] <DoHeartbeat>UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:26:42 [1192] <DoHeartbeat> Set heartbeat event
12/07 13:26:42 [1192] Use new configuration
12/07 13:26:42 [1192] <CSyLink::IndexHeartbeatProc()>
12/07 13:26:42 [1192] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 00000000049EE2C0
12/07 13:26:42 [1192] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 13:26:42 ======
12/07 13:26:43 [1192] HEARTBEAT: Check Point 1
12/07 13:26:43 [1192] Get First Server!
12/07 13:26:43 [1192] <GetFirstSEMServer> Selecting a random server
12/07 13:26:43 [1192] HEARTBEAT: Check Point 2
12/07 13:26:43 [1192] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
12/07 13:26:43 [1192] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
12/07 13:26:43 [1192] HEARTBEAT: Check Point 3
12/07 13:26:43 [1192] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
12/07 13:26:43 [1192] HEARTBEAT: Check Point 4
12/07 13:26:43 [1192] <IndexHeartbeatProc>===Get Index STAGE===
12/07 13:26:43 [1192] ************CSN=894
12/07 13:26:43 [1192] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&hid=5E4C2F19A25301426FAB7AF635EF9738&groupid=58F523BD0A480FBB01A0D510C55A9638&mode=0&hbt=3600&as=894&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:43 [1192] <GetIndexFileRequest:>http://10.72.15.188:80/secars/secars.dll?h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
12/07 13:26:44 [1192] <GetIndexFileRequest:>SMS return=200
12/07 13:26:44 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:26:44 [1192] <FindHeader>Sem-HashKey:=>815C2116330939AD25E99E59B1A1CA48
12/07 13:26:44 [1192] <GetIndexFileRequest:>Loading the current mode:1
12/07 13:26:44 [1192] <SyLink>Current Mode changes to: 0
12/07 13:26:44 [1192] <FindHeader>Sem-LANSensor:=>0
12/07 13:26:44 [1192] <FindHeader>Sem-Signatue:=>5F0A731E6238D4EDDEEE4A82C357E8F5B65A5A6E64B8043810A4BA55B98A9D14A052E38BE840574825E373547EC0F3C089246C6E1525DB028332A9EBE1837A036E661D4F54A4A60CA4377059C98AD73B4915B96FC75CB9A9AD1C654A745894B86B57CAA7E2F02AD3E25D7183527BEEF1372CEC578C7E23349A4FEB5ACB98148D
12/07 13:26:44 [1192] <mfn_DoGetIndexFile200>Content Lenght => 1357
12/07 13:26:44 [1192] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
12/07 13:26:44 [1192] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="84BE5A720A480FBB0076D4AF0C09C9FB" ServerID="01C5544B0A480FBC01951F38661EA1B7" GroupID="1BF067500A780FBB016D0B63E0EB233D" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "07/12/2010 04:07:31">	<Profile Checksum="D6DBB809D39F62DD5FB63A7B133BB3C2" SerialNumber="1BF0-12/06/2010 17:51:14 222" LastModifiedTime="06/12/2010  18:53:34"/>	<ConfigFile Checksum="B1A4977D3411AC339DA77954028C45CE" LastModifiedTime="06/12/2010  17:39:17"/>	<IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="06/12/2010  18:53:34"/>	<SylinkFile Checksum="249FF96F50730764FA83AC9EC22B40CE" LastModifiedTime="06/12/2010  18:53:34"/>	<LSProfile Checksum="F5EA7534080DF5D49CD56638AF347204" SerialNumber ="1BF0-12/06/2010 17:51:14 222" LastModifiedTime ="06/12/2010  18:53:34"/>
	<LiveUpdate>
		<File Checksum="B8A4A4AF69180EFF28E159B0A4F8391B" DeltaFlag="1" FullSize="102065613" LastModifiedTime="1291674847234" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101206002"/>
 		<File Checksum="7F4A9D6A0483D33B6061F15DF05983CA" DeltaFlag="1" FullSize="103713414" LastModifiedTime="1291674726625" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101206002"/>
 		<File Checksum="D4FE3EBC1DECE0B2DE96D1DADA05B3C1" DeltaFlag="1" FullSize="964272" LastModifiedTime="1291493097859" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101203001"/>
 		<File Checksum="EC7B7DB0BF5ACBD1AD1B0BD6FCFD0617" DeltaFlag="1" FullSize="944694" LastModifiedTime="1291492854875" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101203001"/>
 		<File Checksum="DC2A6067CA13CCEC1ACC9822DFC304BD" DeltaFlag="1" FullSize="669829" LastModifiedTime="1225447250703" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
 		<File Checksum="CAE48C87F9953354CE84391B490F1B1C" DeltaFlag="1" FullSize="650307" LastModifiedTime="1225447255593" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
 		<File Checksum="68A3AD1A2926311336BE284D67C0C6F2" DeltaFlag="1" FullSize="88188" LastModifiedTime="1225447297156" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
 		<File Checksum="7399244F86CDB451FDCF0D8614ACC6E7" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1225447304359" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
 		<File Checksum="40EC8A4C393D3BAD2011B9D605B92DD0" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1225447321406" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
 		<File Checksum="90577604DDBE5E067B01CC064A751B7E" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291323674468" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
 		<File Checksum="6FB7E38B3403B24C3380771E806FCD7E" DeltaFlag="1" FullSize="76787" LastModifiedTime="1291674853578" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101206009"/>
 		<File Checksum="D3182F29BC9AA34964AA98EA1E8C6FE7" DeltaFlag="1" FullSize="3739487" LastModifiedTime="1291674855203" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101206009"/>
 		<File Checksum="D492F48E8C2E508330696C780BD282A8" DeltaFlag="1" FullSize="3739514" LastModifiedTime="1291674857250" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101206009"/>
 		<File Checksum="9130FA368DDC177F1BF5AA3630B9F339" DeltaFlag="1" FullSize="76770" LastModifiedTime="1291674858031" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101206009"/>
	</LiveUpdate>
</GroupIndex>
12/07 13:26:44 [1192] <mfn_ParseIndexFile2>set to download new Profile.. 
12/07 13:26:44 [1192] <mfn_ParseIndexFile2>set to download new Sylink.. 
12/07 13:26:44 [1192] <mfn_DoGetIndexFile200>Parser Index File!
12/07 13:26:44 [1192] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:26:44 [1192] <GetIndexFileRequest:>COMPLETED
12/07 13:26:44 [1192] <IndexHeartbeatProc>GetIndexFile handling status: 0
12/07 13:26:44 [1192] <IndexHeartbeatProc>Switch Server flag=0
12/07 13:26:44 [1192] HEARTBEAT: Check Point 5.1
12/07 13:26:44 [1192] <IsInClientIPorOnLink> NextHop Not equal 10.72.15.188,return FALSE
12/07 13:26:44 [1192] <IsInClientIPorOnLink> NextHop is OnLink with 10.80.15.107,return TRUE
12/07 13:26:44 [1192] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:10.80.15.107
12/07 13:26:44 [1192] <IndexHeartbeatProc> Saved IP Address: 10.72.15.188
12/07 13:26:44 [1192] ************CSN=895
12/07 13:26:44 [1192] <mfn_MakeGetProfileUrl:>Request is: action=3&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=895&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:44 [1192] <GetProfileRequest:>http://10.72.15.188:80/secars/secars.dll?h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
12/07 13:26:45 [1192] <GetProfileRequest:>SMS return=200
12/07 13:26:45 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:26:52 [1192] <mfn_DoGetProfile200>Content Lenght => 11060
12/07 13:26:52 [1192] <mfn_DoGetProfile200>Got profile from server, read bytes=11060
12/07 13:26:52 [1192] <mfn_ParseNewProfile>content len is 11060
12/07 13:26:52 [1192] <PostEvent>going to post event=EVENT_SERVER_PROFILE_VERIFY
12/07 13:26:52 [1192] <PostEvent>done post event=EVENT_SERVER_PROFILE_VERIFY, return=0
12/07 13:26:52 [1192] <mfn_ParseNewProfile>Profile Len:88960
12/07 13:26:52 [1192] <PostEvent>going to post event=EVENT_SERVER_PROFILE_CHANGED
12/07 13:26:52 [1192] SyLinkCreateConfig => Created instance: 000000000682EEA0
12/07 13:26:52 [1192] SetCurLocationName: Name is set to - Default
12/07 13:26:52 [1192] SetCurLocationID: ID is set to - 6BD5B2290A780FBB006EC1532A653244
12/07 13:26:52 [1192] SyLinkCreateConfig => Created instance: 0000000006831280
12/07 13:26:52 [1192] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
12/07 13:26:52 [1192] Importing ConfigObject: 0000000006831280 into: 00000000049F11A0
12/07 13:26:52 [1192] SyLinkDeleteConfig => Deleting instance: 0000000006831280
12/07 13:26:52 [1192] SyLinkDeleteConfig => Deleting instance: 000000000682EEA0
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_SERVER_PROFILE_CHANGED, return=0
12/07 13:26:53 [1192] <mfn_ParseNewProfile>save profile checksum=D6DBB809D39F62DD5FB63A7B133BB3C2
12/07 13:26:53 [1192] <mfn_ParseNewProfile>========== Received profile from server completed. =========
12/07 13:26:53 [1192] <mfn_ParseNewProfile>completed
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:26:53 [1192] <mfn_DoGetProfile200>completed
12/07 13:26:53 [1192] <GetProfileRequest:>RECEIVE STAGE COMPLETED
12/07 13:26:53 [1192] <GetProfileRequest:>COMPLETED
12/07 13:26:53 [1192] ************CSN=896
12/07 13:26:53 [1192] <mfn_MakeGetSylinkFileUrl:>Request is: action=6&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=896&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:53 [1192] <GetSylinkFileRequest:>http://10.72.15.188:80/secars/secars.dll?h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
12/07 13:26:53 [1192] <GetSylinkFileRequest:>SMS return=200
12/07 13:26:53 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:26:53 [1192] <mfn_DoGetSylinkFile200>Content Lenght => 2052
12/07 13:26:53 [1192] <mfn_DoGetSylinkFile200>Got sylink.xml from server, read bytes=2052
12/07 13:26:53 [1192] <mfn_DoGetSylinkFile200>Data Decrypt Status: 0Sylink File: 
<?xml version="1.0" encoding="UTF-8"?>
<ServerSettings DomainId="58F523BD0A480FBB01A0D510C55A9638" NameSpace="rpc">
  <CommConf>
    <AgentCommunicationSetting AlwaysConnect="1" CommunicationMode="PULL" DisableDownloadProfile="0" Kcs="94F9C60024223D2822F915E70D0998B6" PullHeartbeatSeconds="14400" RandomizationEnabled="1" RandomizationRange="300" RememberCurrentGroup="0" RememberCurrentPolicyMode="0" UploadCmdStateHeartbeatSeconds="300" UploadLearnedApp="0" UploadLogHeartbeatSeconds="300" UploadOpStateHeartbeatSeconds="300"/>
    <ServerList Name="BPCL IDC  Priority Server LIST">
      <ServerPriorityBlock Name="Priority1">
        <Server Address="10.120.15.187" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
        <Server Address="NRIDCCSEP1" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
      </ServerPriorityBlock>
      <ServerPriorityBlock Name="Priority2">
        <Server Address="10.72.15.187" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
        <Server Address="10.72.15.188" HttpsVerifyCA="0" VerifySignatures="1"/>
        <Server Address="cochocsep1" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
        <Server Address="cochocsep2" HttpsVerifyCA="0" VerifySignatures="1"/>
      </ServerPriorityBlock>
    </ServerList>
    <ServerCertList>
      <Certificate Name="cochocsep1">MIICPjCCAacCBEuowgswDQYJKoZIhvcNAQEFBQAwZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNB&#xd;
MRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxzeW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTET&#xd;
MBEGA1UEAxMKY29jaG9jc2VwMTAeFw0xMDAzMjMxMzI4NDNaFw0yMDAzMjAxMzI4NDNaMGYxCzAJ&#xd;
BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEQMA4GA1UEBxMHRnJlbW9udDEVMBMGA1UEChMMc3ltYW50&#xd;
ZWMuY29tMQwwCgYDVQQLEwNzY20xEzARBgNVBAMTCmNvY2hvY3NlcDEwgZ8wDQYJKoZIhvcNAQEB&#xd;
BQADgY0AMIGJAoGBAKvtbO7To3jxatrRuCH5Ft+6wVJ0nIFcyCArNRV4Mh4C4S27JKmiaHMJnW0Z&#xd;
OVh3hBLNiLXUwdeCJiPaTQPMuQTipcd/6XrCuyu5Hn104Mre9UC4aW8Z8F4fCBctXULusHZtj0ao&#xd;
n+f5oYZMPfqaEBf85jEAUjVQND/kzxju/DMjAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAg1a3Bvwl&#xd;
9oAyBoLDnGO5n5IoUCr5Vsm6FXKCVx41Gwdf0MRE3E5MXu59gYBINICoxyFD9idGBVIXaur8qUz7&#xd;
UevJFUgfAN+swm2Wpu1ZfmqWuFWA6Tt2mxyYW26v4mQ6e6ZlPrys0Tw8+F53zvfcZ/6oRdWTmNNS&#xd;
y9RjgZ54ucU=&#xd;
</Certificate>
      <Certificate Name="cochocsep2">MIICQzCCAaygAwIBAgIETKmD3jANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE&#xd;
CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD&#xd;
c2NtMRMwEQYDVQQDEwpjb2Nob2NzZXAyMB4XDTEwMTAwNDA3MzU1OFoXDTIwMTAwMTA3MzU1OFow&#xd;
ZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxz&#xd;
eW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTETMBEGA1UEAxMKY29jaG9jc2VwMjCBnzANBgkqhkiG&#xd;
9w0BAQEFAAOBjQAwgYkCgYEA1Oi1TJBM5byBegMXWm2nzCgMmR8KfCHisGbeWBUvxTKgP+VyN22A&#xd;
EvQ+Dp7/dAXOkvM6hYuOe7CGpCvYaXd2Gvq5Bpex6fIuI4mvec576Aix1LbIVpsJnI0kbpCbGoBh&#xd;
VdI7H8V8Jb+AzhrBI3iOSoD4RUsYvN7tDtUj0nga5VkCAwEAATANBgkqhkiG9w0BAQUFAAOBgQBg&#xd;
rV49ckyx4kDiepCHJRazyjP++MzDwNZTGR49/cwXJ6RH98JcILxHt842Bqo6rJcyMDEZ8UfELnn8&#xd;
gH0gNRLh5d2F7wXI8q0Dn+pSrQnRiYCEARSedhYPanJdFLF9zxW+2reRz98kOCoMEQimZyeLcA7b&#xd;
kFdDGkkPSX9gdNgq7A==&#xd;
</Certificate>
      <Certificate Name="NRIDCCSEP1">MIICQzCCAaygAwIBAgIES83VujANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE&#xd;
CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD&#xd;
c2NtMRMwEQYDVQQDEwpOUklEQ0NTRVAxMB4XDTEwMDQyMDE2MjYzNFoXDTIwMDQxNzE2MjYzNFow&#xd;
ZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxz&#xd;
eW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTETMBEGA1UEAxMKTlJJRENDU0VQMTCBnzANBgkqhkiG&#xd;
9w0BAQEFAAOBjQAwgYkCgYEAi6mbSz7NBecGWVSBBXDyAfYLmtT9k26Cy2T8M35F86KFaaznqxCv&#xd;
nuD58x8Mf204JUd/05PPLN55LkWIyVvHUBdohX3zR4DFzxGKYtPZfCSLoQTQ1aPGwbEBIkGtdn26&#xd;
pYhrZM+FOtLI9eqlrd1e3/Y+ZJhsex0WRco/18MjR8cCAwEAATANBgkqhkiG9w0BAQUFAAOBgQCC&#xd;
7cUpfXJWr5IfTVqVyAzp6DjsOU4wLUsRbkDnQNSQB4HvgOOuLD4HEfFEuyo2iIXakgiGMLo2R91F&#xd;
1iwz+BoFNdnf8k7v/jRGI4vEEqUrXGvv5UwV6HuZpJyzHTacGVsb0lemBRW7+5K9/nSmk9PkIkBy&#xd;
z3efmmf66+dtKEGK1A==&#xd;
</Certificate>
    </ServerCertList>
    <LogSetting MaxLogRecords="100" SendingLogAllowed="1" UploadProcessLog="1" UploadRawLog="1" UploadSecurityLog="1" UploadSystemLog="1" UploadTrafficLog="1"/>
  </CommConf>
</ServerSettings>

12/07 13:26:53 [1192] <mfn_DoGetSylinkFile200>Parsing Sylink.xml file.. 
12/07 13:26:53 [1192] SyLinkCreateConfig => Created instance: 00000000048FF830
12/07 13:26:53 [1192] <mfn_ParseSylinkFile>Created m_hNewGroupConfig: 00000000048FF830
12/07 13:26:53 [1192] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
12/07 13:26:53 [1192] <mfn_SaveConfigFile>Write data to a temp file as C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Sylink.tmp
12/07 13:26:53 [1192] <mfn_SaveConfigFile>Writing Sylink file data of length (in bytes) 4213
12/07 13:26:53 [1192] <mfn_SaveConfigFile>Posting Event to SMC to unlock the Sylink file..
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_SYLINK_FILES_UNLOCK
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_SYLINK_FILES_UNLOCK, return=0
12/07 13:26:53 [1192] <mfn_SaveConfigFile>result from SMC to unlock the Sylink file = 0
12/07 13:26:53 [1192] <mfn_SaveConfigFile>Deleted Temp Sylink file.. Posting Event to SMC to Lock the Sylink file..
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_SYLINK_FILES_LOCK
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_SYLINK_FILES_LOCK, return=0
12/07 13:26:53 [1192] <mfn_ParseSylinkFile>Now Sylink.xml is supposed to be good.. setting m_bBackupNewSylinkConfig to TRUE.
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:26:53 [1192] <mfn_DoGetSylinkFile200>completed
12/07 13:26:53 [1192] <GetSylinkFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:26:53 [1192] <GetSylinkFileRequest:>COMPLETED
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:53 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:101206002
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:26:53 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:26:53 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101206002
12/07 13:26:53 [1192] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101206002
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:26:53 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:26:53 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101203001
12/07 13:26:53 [1192] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}101203001
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:53 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:101203001
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:53 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:53 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:53 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:53 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:53 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
12/07 13:26:53 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:54 [5020] <CSyLink::SetNewLearnedAppList()>
12/07 13:26:54 [5020] ***NewLearnedApps - Current count: 0
12/07 13:26:54 [5020] ***app=SescLU.exe
12/07 13:26:54 [5020] ***app=LUCOMS~1.EXE
12/07 13:26:54 [5020] ***app=verclsid.exe
12/07 13:26:54 [5020] ***app=SLUI.exe
12/07 13:26:54 [5020] ***app=dllhost.exe
12/07 13:26:54 [5020] ***app=SNAC64.EXE
12/07 13:26:54 [5020] ***app=SymCorpUI.exe
12/07 13:26:54 [5020] ***app=explorer.exe
12/07 13:26:54 [5020] ***app=WerFault.exe
12/07 13:26:54 [5020] ***app=mmc.exe
12/07 13:26:54 [5020] ***app=SylinkMonitor_6733.exe
12/07 13:26:54 [5020] ***app=notepad.exe
12/07 13:26:54 [5020] ***NewLearnedApps - New count: 12
12/07 13:26:54 [5020] </CSyLink::SetNewLearnedAppList()>
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:26:54 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:26:54 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}101201096
12/07 13:26:54 [1192] <Add2LUFileList:>File Info already exists, hence updating: {4F889C4A-784D-40de-8539-6A29BAA43139}101201096
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:54 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:101206009
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:54 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:101206009
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:54 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:101206009
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:26:54 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:101206009
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:26:54 [1192] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=3600 seconds
12/07 13:26:54 [1192] HEARTBEAT: Check Point 6
12/07 13:26:54 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
12/07 13:26:54 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
12/07 13:26:54 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
12/07 13:26:54 [1192] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
12/07 13:26:54 [1192] ReasonDescForFailure*** = Host Integrity check is disabled.
12/07 13:26:54 [1192] ReasonDescForFailure*** = Host Integrity check is disabled.
12/07 13:26:54 [1192] *** = <SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="1BF067500A780FBB016D0B63E0EB233D">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="WRWROMTSM" HostDesc=""/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.0.6002" Desc="Windows Server 2008 Standard Edition" Type="50724882" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 44 Stepping 2" ProcessorClock="2665" ProcessorNum="24"/>
<Memory Size="34348085248"/>
<Disk Letter="C:\" Size="107372539904"/>
<BIOS Version="HP     - 2"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="1BF0-12/06/2010 17:51:14 222"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>

<SSAUTC Bias="-330"/>
<DNSs><DNS Address="10.80.15.91"/><DNS Address="10.80.15.92"/></DNSs>
<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

12/07 13:26:54 [1192] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 16
12/07 13:26:54 [1192] <mfn_PostAgentInfo>Free memory difference: 6619136, Threshold: 4779844605
12/07 13:26:54 [1192] <mfn_PostAgentInfo>Free disk space difference: 49152, Threshold: 13923782850
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
12/07 13:26:54 [1192] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" Timestamp="1291708614272"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3252754</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280511000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>280B07070004</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>30350368</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>0:0</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="2B982FF90A480FBB01EC1DBD55098551"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1291703277385</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="1BF067500A780FBB016D0B63E0EB233D">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="WRWROMTSM" HostDesc=""/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.0.6002" Desc="Windows Server 2008 Standard Edition" Type="50724882" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 44 Stepping 2" ProcessorClock="2665" ProcessorNum="24"/>
<Memory Size="34348085248"/>
<Disk Letter="C:\" Size="107372539904"/>
<BIOS Version="HP     - 2"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="1BF0-12/06/2010 17:51:14 222"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="-330"/>
<DNSs><DNS Address="10.80.15.91"/><DNS Address="10.80.15.92"/></DNSs>
<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="1BF067500A780FBB016D0B63E0EB233D">
<SSAHostInfo>
<Memory Free="31872249856"/>
<Disk Letter="C:\" Free="92825268224"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
12/07 13:26:54 [1192] ************CSN=897
12/07 13:26:54 [1192] <mfn_MakePostUrl:>Request is: action=192&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&as=897&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:54 [1192] <mfn_PostAgentInfo>http://10.72.15.188:80/secars/secars.dll?h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
12/07 13:26:54 [1192] <mfn_PostAgentInfo>POST the total size=1284
12/07 13:26:54 [1192] <mfn_PostAgentInfo>Done with return code = 200
12/07 13:26:54 [1192] <IndexHeartbeatProc>===UPLOAD STAGE===
12/07 13:26:54 [1192] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
12/07 13:26:54 [1192] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
12/07 13:26:54 [1192] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
12/07 13:26:54 [1192] <PrepareEventLog>initialized technology extension processing ok
12/07 13:26:54 [1192] <CalcEventLogIndex>Need to send Event Log Type(0) from id 586 to 589
12/07 13:26:54 [1192] <PrepareEventLog>Allow total logs to send=4
12/07 13:26:54 [1192] <PrepareEventLog>nSecurityRecordsTotal=0
12/07 13:26:54 [1192] <PrepareEventLog>nSecurityRecordsToSend=0
12/07 13:26:54 [1192] <PrepareEventLog>nSystemRecordsTotal=4
12/07 13:26:54 [1192] <PrepareEventLog>nSystemRecordsToSend=100
12/07 13:26:54 [1192] <PrepareEventLog>nTrafficRecordsTotal=0
12/07 13:26:54 [1192] <PrepareEventLog>nTrafficRecordsToSend=0
12/07 13:26:54 [1192] <PrepareEventLog>nRawRecordsTotal=0
12/07 13:26:54 [1192] <PrepareEventLog>nRawRecordsToSend=0
12/07 13:26:54 [1192] <PrepareEventLog>nProcessRecordsTotal=0
12/07 13:26:54 [1192] <PrepareEventLog>nProcessRecordsToSend=0
12/07 13:26:54 [1192] <PrepareEventLog>nLANSensorRecordsTotal=0
12/07 13:26:54 [1192] <PrepareEventLog>nLANSensorRecordsToSend=0
12/07 13:26:54 [1192] <PrepareEventLog>nTechExtensionRecordsTotal=0
12/07 13:26:54 [1192] <PrepareEventLog>nTechExtensionRecordsToSend=0
12/07 13:26:54 [1192] <MakeSystemLog>The size of SYSTEM event logs is 2446.
12/07 13:26:54 [1192] <SyLink>The size of SYSTEM event logs is 2446.
12/07 13:26:54 [1192] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
12/07 13:26:54 [1192] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
12/07 13:26:54 [1192] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
12/07 13:26:54 [1192] <MakeProcessLog>Attached total 0 bytes process event logs.
12/07 13:26:54 [1192] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
12/07 13:26:54 [1192] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
12/07 13:26:54 [1192] ************CSN=898
12/07 13:26:54 [1192] <mfn_MakePostUrl:>Request is: action=195&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=898&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:54 [1192] <SendEventLogToServer>http://10.72.15.188:80/secars/secars.dll?h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
12/07 13:26:55 [1192] <SendEventLogToServer>eventlog-->SMS, size=914
12/07 13:26:55 [1192] <SendEventLogToServer>uploads the eventlog to server, size=914
12/07 13:26:55 [1192] <SendEventLogToServer>Query return code = 200
12/07 13:26:55 [1192] <SendEventLogToServer>EventLog-->SEM DONE!
12/07 13:26:55 [1192] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
12/07 13:26:55 [1192] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
12/07 13:26:55 [1192] ************CSN=899
12/07 13:26:55 [1192] <mfn_MakePostUrl:>Request is: action=196&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&ert=1&as=899&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:55 [1192] <mfn_PostApplication>http://10.72.15.188:80/secars/secars.dll?h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
12/07 13:26:56 [1192] <mfn_PostApplication>POST the total size=1364
12/07 13:26:56 [1192] <mfn_PostApplication>Done with return code = 200
12/07 13:26:56 [1192] <CSyLink::mfn_EraseApps()>
12/07 13:26:56 [1192] </CSyLink::mfn_EraseApps()>
12/07 13:26:56 [1192] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
12/07 13:26:56 [1192] HEARTBEAT: Check Point 8
12/07 13:26:56 [1192] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
12/07 13:26:56 [1192] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
12/07 13:26:56 [1192] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 13:26:56 ======
12/07 13:26:56 [1192] <IndexHeartbeatProc>Set Heartbeat Result= 5
12/07 13:26:56 [1192] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
12/07 13:26:56 [1192] Importing ConfigObject: 00000000048FF830 into: 00000000049F11A0
12/07 13:26:56 [1192] Use new configuration
12/07 13:26:56 [1192] Importing ConfigObject: 00000000049F11A0 into: 00000000049EE2C0
12/07 13:26:56 [1192] <UseNewConfig:>PreferredGroup in new group specific settings has been saved into registry: My Company\WR\WRO\WRO Servers
12/07 13:26:56 [1192] <UseNewConfig:>PreferredMode in new group specific settings has been saved into registry: 1
12/07 13:26:56 [1192] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
12/07 13:26:56 [1192] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
12/07 13:26:56 [1192] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
12/07 13:26:56 [1192] HEARTBEAT: Check Point Complete
12/07 13:26:56 [1192] <IndexHeartbeatProc>Done, Heartbeat=1seconds
12/07 13:26:56 [1192] </CSyLink::IndexHeartbeatProc()>
12/07 13:26:56 [1192] <CheckHeartbeatTimer>====== Heartbeat loop stops at 13:26:56 ======
12/07 13:26:57 [1192] <CheckHeartbeatTimer>====== Heartbeat loop starts at 13:26:57 ======
12/07 13:26:57 [1192] <GetOnlineNicInfo>:Netport Count=1
12/07 13:26:57 [1192] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs>
12/07 13:26:57 [1192] <CalcAgentHashKey>:CH=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:57 [1192] <CalcAgentHashKey>:CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:26:57 [1192] <CalcAgentHashKey>:C=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP
12/07 13:26:57 [1192] <CalcAgentHashKey>:CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:26:57 [1192] <CalcAgentHashKey>:UCH=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:57 [1192] <CalcAgentHashKey>:UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:26:57 [1192] <CalcAgentHashKey>:UC=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP
12/07 13:26:57 [1192] <CalcAgentHashKey>:UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:26:57 [1192] <DoHeartbeat>HardwareID=5E4C2F19A25301426FAB7AF635EF9738
12/07 13:26:57 [1192] <DoHeartbeat>CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:26:57 [1192] <DoHeartbeat>CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:26:57 [1192] <DoHeartbeat>UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:26:57 [1192] <DoHeartbeat>UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:26:57 [1192] <DoHeartbeat> Set heartbeat event
12/07 13:26:57 [1192] Use new configuration
12/07 13:26:57 [1192] <CSyLink::IndexHeartbeatProc()>
12/07 13:26:57 [1192] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 00000000049EE2C0
12/07 13:26:57 [1192] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 13:26:57 ======
12/07 13:26:58 [1192] HEARTBEAT: Check Point 1
12/07 13:26:58 [1192] Get First Server!
12/07 13:26:58 [1192] <GetFirstSEMServer> Selecting a random server
12/07 13:26:58 [1192] HEARTBEAT: Check Point 2
12/07 13:26:58 [1192] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
12/07 13:26:58 [1192] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
12/07 13:26:58 [1192] HEARTBEAT: Check Point 3
12/07 13:26:58 [1192] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
12/07 13:26:58 [1192] HEARTBEAT: Check Point 4
12/07 13:26:58 [1192] <IndexHeartbeatProc>===Get Index STAGE===
12/07 13:26:58 [1192] ************CSN=900
12/07 13:26:58 [1192] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&hid=5E4C2F19A25301426FAB7AF635EF9738&groupid=58F523BD0A480FBB01A0D510C55A9638&mode=0&hbt=14400&as=900&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:26:58 [1192] <GetIndexFileRequest:>http://10.120.15.187:8014/secars/secars.dll?h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
12/07 13:27:02 [1192] <GetIndexFileRequest:>SMS return=200
12/07 13:27:02 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:27:02 [1192] <FindHeader>Sem-HashKey:=>AA1B360843384DAB8F353713268F617B
12/07 13:27:02 [1192] <GetIndexFileRequest:>Loading the current mode:0
12/07 13:27:02 [1192] <SyLink>Current Mode changes to: 1
12/07 13:27:02 [1192] <FindHeader>Sem-LANSensor:=>0
12/07 13:27:02 [1192] <FindHeader>Sem-Signatue:=>05518AB900C0F2E8677099CB59EC6C16CE47B4DF73759A33B2CC93867F4B8789B1F1CF8912753F59ECF147FF710B97E27B06B8053C9C6629685C421B7271941CC7562237671F10E171BAD8A33E610E2592CE83ED654EC0E741253388DF7094F45C75E07B23B0716C1F9C927B4110075467C14AD0244A68DB1CAF3551C1EBA72D
12/07 13:27:02 [1192] <mfn_DoGetIndexFile200>Content Lenght => 1345
12/07 13:27:02 [1192] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
12/07 13:27:02 [1192] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="9466D5380A780FBB0183BCB8015B93EE" ServerID="AE289A470A780FBB012C7BF652A92B79" GroupID="6B01D51D0A480FBB0072D165323D9CD1" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "07/12/2010 04:07:48">	<Profile Checksum="45CEEF1F4F5871B5C9161D8E14084295" SerialNumber="6B01-11/18/2010 16:53:24 140" LastModifiedTime="23/11/2010  16:31:48"/>	<ConfigFile Checksum="B1A4977D3411AC339DA77954028C45CE" LastModifiedTime="23/11/2010  16:31:48"/>	<IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="23/11/2010  16:31:48"/>	<SylinkFile Checksum="4BC5F3B050FE8BE8D20E207E648A1F9B" LastModifiedTime="23/11/2010  16:31:48"/>	<LSProfile Checksum="FE4E59673C04BABBD88C3E9C3F7B8FD9" SerialNumber ="6B01-11/18/2010 16:53:24 140" LastModifiedTime ="23/11/2010  16:31:48"/>
	<LiveUpdate>
		<File Checksum="878811D4765E9593085FE1DBA00986EC" DeltaFlag="1" FullSize="102065613" LastModifiedTime="1291674910340" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101206002"/>
 		<File Checksum="20853C14C52099229EB9EA33361E37E4" DeltaFlag="1" FullSize="103713414" LastModifiedTime="1291674804641" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101206002"/>
 		<File Checksum="64CA817F96D1FC1BA913E333C0C97B16" DeltaFlag="1" FullSize="964272" LastModifiedTime="1291492099359" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101203001"/>
 		<File Checksum="2AF4BBE28EA6F1E9229DE7E3C29F0775" DeltaFlag="1" FullSize="944694" LastModifiedTime="1291491941218" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101203001"/>
 		<File Checksum="DC2A6067CA13CCEC1ACC9822DFC304BD" DeltaFlag="1" FullSize="669829" LastModifiedTime="1225447250703" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
 		<File Checksum="CAE48C87F9953354CE84391B490F1B1C" DeltaFlag="1" FullSize="650307" LastModifiedTime="1225447255593" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
 		<File Checksum="68A3AD1A2926311336BE284D67C0C6F2" DeltaFlag="1" FullSize="88188" LastModifiedTime="1225447297156" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
 		<File Checksum="7399244F86CDB451FDCF0D8614ACC6E7" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1225447304359" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
 		<File Checksum="40EC8A4C393D3BAD2011B9D605B92DD0" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1225447321406" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
 		<File Checksum="D69247E81E000D0248A9E869FB2A8E32" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291322291640" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
 		<File Checksum="3754628BC50EC6C3AA36078C888B1011" DeltaFlag="1" FullSize="76787" LastModifiedTime="1291674915254" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101206009"/>
 		<File Checksum="A6AA25061A39C85FC48C0E28ECD7A038" DeltaFlag="1" FullSize="3739487" LastModifiedTime="1291674916439" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101206009"/>
 		<File Checksum="12F3A4AC9D0CBB439988EACD0C45633E" DeltaFlag="1" FullSize="3739514" LastModifiedTime="1291674918077" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101206009"/>
 		<File Checksum="3E1CFCA44F2827C6A219A9F4594DE584" DeltaFlag="1" FullSize="76770" LastModifiedTime="1291674918732" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101206009"/>
	</LiveUpdate>
</GroupIndex>
12/07 13:27:02 [1192] <mfn_ParseIndexFile2>set to download new Profile.. 
12/07 13:27:02 [1192] <mfn_ParseIndexFile2>set to download new Sylink.. 
12/07 13:27:02 [1192] <mfn_DoGetIndexFile200>Parser Index File!
12/07 13:27:02 [1192] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:27:02 [1192] <GetIndexFileRequest:>COMPLETED
12/07 13:27:02 [1192] <IndexHeartbeatProc>GetIndexFile handling status: 0
12/07 13:27:02 [1192] <IndexHeartbeatProc>Switch Server flag=0
12/07 13:27:02 [1192] HEARTBEAT: Check Point 5.1
12/07 13:27:02 [1192] <IsInClientIPorOnLink> NextHop Not equal 10.120.15.187,return FALSE
12/07 13:27:02 [1192] <IsInClientIPorOnLink> NextHop is OnLink with 10.80.15.107,return TRUE
12/07 13:27:02 [1192] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:10.80.15.107
12/07 13:27:02 [1192] <IndexHeartbeatProc> Saved IP Address: 10.120.15.187
12/07 13:27:02 [1192] ************CSN=901
12/07 13:27:02 [1192] <mfn_MakeGetProfileUrl:>Request is: action=3&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=901&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:27:02 [1192] <GetProfileRequest:>http://10.120.15.187:8014/secars/secars.dll?h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
12/07 13:27:03 [1192] <GetProfileRequest:>SMS return=200
12/07 13:27:03 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:27:03 [1192] <mfn_DoGetProfile200>Content Lenght => 8820
12/07 13:27:03 [1192] <mfn_DoGetProfile200>Got profile from server, read bytes=8820
12/07 13:27:03 [1192] <mfn_ParseNewProfile>content len is 8820
12/07 13:27:03 [1192] <PostEvent>going to post event=EVENT_SERVER_PROFILE_VERIFY
12/07 13:27:03 [1192] <PostEvent>done post event=EVENT_SERVER_PROFILE_VERIFY, return=0
12/07 13:27:03 [1192] <mfn_ParseNewProfile>Profile Len:88960
12/07 13:27:03 [1192] <PostEvent>going to post event=EVENT_SERVER_PROFILE_CHANGED
12/07 13:27:03 [1192] SyLinkCreateConfig => Created instance: 0000000005814B60
12/07 13:27:03 [1192] SetCurLocationName: Name is set to - Default
12/07 13:27:03 [1192] SetCurLocationID: ID is set to - 61FCEB8C0A480FBB01CAC94D3F8E9794
12/07 13:27:03 [1192] SyLinkCreateConfig => Created instance: 0000000002969340
12/07 13:27:03 [1192] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
12/07 13:27:03 [1192] Importing ConfigObject: 0000000002969340 into: 00000000049F11A0
12/07 13:27:03 [1192] SyLinkDeleteConfig => Deleting instance: 0000000002969340
12/07 13:27:03 [1192] SyLinkDeleteConfig => Deleting instance: 0000000005814B60
12/07 13:27:03 [1192] <PostEvent>done post event=EVENT_SERVER_PROFILE_CHANGED, return=0
12/07 13:27:03 [1192] <mfn_ParseNewProfile>save profile checksum=45CEEF1F4F5871B5C9161D8E14084295
12/07 13:27:03 [1192] <mfn_ParseNewProfile>========== Received profile from server completed. =========
12/07 13:27:03 [1192] <mfn_ParseNewProfile>completed
12/07 13:27:03 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:27:03 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:27:03 [1192] <mfn_DoGetProfile200>completed
12/07 13:27:03 [1192] <GetProfileRequest:>RECEIVE STAGE COMPLETED
12/07 13:27:03 [1192] <GetProfileRequest:>COMPLETED
12/07 13:27:03 [1192] ************CSN=902
12/07 13:27:03 [1192] <mfn_MakeGetSylinkFileUrl:>Request is: action=6&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=902&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:27:03 [1192] <GetSylinkFileRequest:>http://10.120.15.187:8014/secars/secars.dll?h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
12/07 13:27:04 [1192] <GetSylinkFileRequest:>SMS return=200
12/07 13:27:04 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:27:04 [1192] <mfn_DoGetSylinkFile200>Content Lenght => 2036
12/07 13:27:04 [1192] <mfn_DoGetSylinkFile200>Got sylink.xml from server, read bytes=2036
12/07 13:27:04 [1192] <mfn_DoGetSylinkFile200>Data Decrypt Status: 0Sylink File: 
<?xml version="1.0" encoding="UTF-8"?>
<ServerSettings DomainId="58F523BD0A480FBB01A0D510C55A9638" NameSpace="rpc">
  <CommConf>
    <AgentCommunicationSetting AlwaysConnect="1" CommunicationMode="PULL" DisableDownloadProfile="0" Kcs="94F9C60024223D2822F915E70D0998B6" PullHeartbeatSeconds="3600" RandomizationEnabled="1" RandomizationRange="300" RememberCurrentGroup="0" RememberCurrentPolicyMode="0" UploadCmdStateHeartbeatSeconds="300" UploadLearnedApp="1" UploadLogHeartbeatSeconds="300" UploadOpStateHeartbeatSeconds="300"/>
    <ServerList Name="BPCL-CDC Priority Server List">
      <ServerPriorityBlock Name="Priority1">
        <Server Address="10.72.15.187" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
        <Server Address="10.72.15.188" HttpsVerifyCA="0" VerifySignatures="1"/>
      </ServerPriorityBlock>
      <ServerPriorityBlock Name="Priority2">
        <Server Address="10.120.15.187" HttpPort="8014" HttpsVerifyCA="0" VerifySignatures="1"/>
      </ServerPriorityBlock>
    </ServerList>
    <ServerCertList>
      <Certificate Name="cochocsep1">MIICPjCCAacCBEuowgswDQYJKoZIhvcNAQEFBQAwZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNB&#xd;
MRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxzeW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTET&#xd;
MBEGA1UEAxMKY29jaG9jc2VwMTAeFw0xMDAzMjMxMzI4NDNaFw0yMDAzMjAxMzI4NDNaMGYxCzAJ&#xd;
BgNVBAYTAlVTMQswCQYDVQQIEwJDQTEQMA4GA1UEBxMHRnJlbW9udDEVMBMGA1UEChMMc3ltYW50&#xd;
ZWMuY29tMQwwCgYDVQQLEwNzY20xEzARBgNVBAMTCmNvY2hvY3NlcDEwgZ8wDQYJKoZIhvcNAQEB&#xd;
BQADgY0AMIGJAoGBAKvtbO7To3jxatrRuCH5Ft+6wVJ0nIFcyCArNRV4Mh4C4S27JKmiaHMJnW0Z&#xd;
OVh3hBLNiLXUwdeCJiPaTQPMuQTipcd/6XrCuyu5Hn104Mre9UC4aW8Z8F4fCBctXULusHZtj0ao&#xd;
n+f5oYZMPfqaEBf85jEAUjVQND/kzxju/DMjAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAg1a3Bvwl&#xd;
9oAyBoLDnGO5n5IoUCr5Vsm6FXKCVx41Gwdf0MRE3E5MXu59gYBINICoxyFD9idGBVIXaur8qUz7&#xd;
UevJFUgfAN+swm2Wpu1ZfmqWuFWA6Tt2mxyYW26v4mQ6e6ZlPrys0Tw8+F53zvfcZ/6oRdWTmNNS&#xd;
y9RjgZ54ucU=&#xd;
</Certificate>
      <Certificate Name="cochocsep2">MIICQzCCAaygAwIBAgIETKmD3jANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE&#xd;
CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD&#xd;
c2NtMRMwEQYDVQQDEwpjb2Nob2NzZXAyMB4XDTEwMTAwNDA3MzU1OFoXDTIwMTAwMTA3MzU1OFow&#xd;
ZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxz&#xd;
eW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTETMBEGA1UEAxMKY29jaG9jc2VwMjCBnzANBgkqhkiG&#xd;
9w0BAQEFAAOBjQAwgYkCgYEA1Oi1TJBM5byBegMXWm2nzCgMmR8KfCHisGbeWBUvxTKgP+VyN22A&#xd;
EvQ+Dp7/dAXOkvM6hYuOe7CGpCvYaXd2Gvq5Bpex6fIuI4mvec576Aix1LbIVpsJnI0kbpCbGoBh&#xd;
VdI7H8V8Jb+AzhrBI3iOSoD4RUsYvN7tDtUj0nga5VkCAwEAATANBgkqhkiG9w0BAQUFAAOBgQBg&#xd;
rV49ckyx4kDiepCHJRazyjP++MzDwNZTGR49/cwXJ6RH98JcILxHt842Bqo6rJcyMDEZ8UfELnn8&#xd;
gH0gNRLh5d2F7wXI8q0Dn+pSrQnRiYCEARSedhYPanJdFLF9zxW+2reRz98kOCoMEQimZyeLcA7b&#xd;
kFdDGkkPSX9gdNgq7A==&#xd;
</Certificate>
      <Certificate Name="NRIDCCSEP1">MIICQzCCAaygAwIBAgIES83VujANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE&#xd;
CBMCQ0ExEDAOBgNVBAcTB0ZyZW1vbnQxFTATBgNVBAoTDHN5bWFudGVjLmNvbTEMMAoGA1UECxMD&#xd;
c2NtMRMwEQYDVQQDEwpOUklEQ0NTRVAxMB4XDTEwMDQyMDE2MjYzNFoXDTIwMDQxNzE2MjYzNFow&#xd;
ZjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRAwDgYDVQQHEwdGcmVtb250MRUwEwYDVQQKEwxz&#xd;
eW1hbnRlYy5jb20xDDAKBgNVBAsTA3NjbTETMBEGA1UEAxMKTlJJRENDU0VQMTCBnzANBgkqhkiG&#xd;
9w0BAQEFAAOBjQAwgYkCgYEAi6mbSz7NBecGWVSBBXDyAfYLmtT9k26Cy2T8M35F86KFaaznqxCv&#xd;
nuD58x8Mf204JUd/05PPLN55LkWIyVvHUBdohX3zR4DFzxGKYtPZfCSLoQTQ1aPGwbEBIkGtdn26&#xd;
pYhrZM+FOtLI9eqlrd1e3/Y+ZJhsex0WRco/18MjR8cCAwEAATANBgkqhkiG9w0BAQUFAAOBgQCC&#xd;
7cUpfXJWr5IfTVqVyAzp6DjsOU4wLUsRbkDnQNSQB4HvgOOuLD4HEfFEuyo2iIXakgiGMLo2R91F&#xd;
1iwz+BoFNdnf8k7v/jRGI4vEEqUrXGvv5UwV6HuZpJyzHTacGVsb0lemBRW7+5K9/nSmk9PkIkBy&#xd;
z3efmmf66+dtKEGK1A==&#xd;
</Certificate>
    </ServerCertList>
    <LogSetting MaxLogRecords="100" SendingLogAllowed="1" UploadProcessLog="1" UploadRawLog="1" UploadSecurityLog="1" UploadSystemLog="1" UploadTrafficLog="1"/>
  </CommConf>
</ServerSettings>

12/07 13:27:04 [1192] <mfn_DoGetSylinkFile200>Parsing Sylink.xml file.. 
12/07 13:27:04 [1192] SyLinkCreateConfig => Created instance: 00000000048FF830
12/07 13:27:04 [1192] <mfn_ParseSylinkFile>Created m_hNewGroupConfig: 00000000048FF830
12/07 13:27:04 [1192] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
12/07 13:27:04 [1192] <mfn_SaveConfigFile>Write data to a temp file as C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Sylink.tmp
12/07 13:27:04 [1192] <mfn_SaveConfigFile>Writing Sylink file data of length (in bytes) 3945
12/07 13:27:04 [1192] <mfn_SaveConfigFile>Posting Event to SMC to unlock the Sylink file..
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_SYLINK_FILES_UNLOCK
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_SYLINK_FILES_UNLOCK, return=0
12/07 13:27:04 [1192] <mfn_SaveConfigFile>result from SMC to unlock the Sylink file = 0
12/07 13:27:04 [1192] <mfn_SaveConfigFile>Deleted Temp Sylink file.. Posting Event to SMC to Lock the Sylink file..
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_SYLINK_FILES_LOCK
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_SYLINK_FILES_LOCK, return=0
12/07 13:27:04 [1192] <mfn_ParseSylinkFile>Now Sylink.xml is supposed to be good.. setting m_bBackupNewSylinkConfig to TRUE.
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:27:04 [1192] <mfn_DoGetSylinkFile200>completed
12/07 13:27:04 [1192] <GetSylinkFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:27:04 [1192] <GetSylinkFileRequest:>COMPLETED
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:101206002
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:27:04 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:27:04 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101206002
12/07 13:27:04 [1192] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101206002
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:27:04 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:27:04 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101203001
12/07 13:27:04 [1192] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}101203001
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:101203001
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
12/07 13:27:04 [1192] <mfn_LiveUpdate:> Agent returned closest matching seq: <None> 
12/07 13:27:04 [1192] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}101201096
12/07 13:27:04 [1192] <Add2LUFileList:>File Info already exists, hence updating: {4F889C4A-784D-40de-8539-6A29BAA43139}101201096
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:101206009
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:101206009
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:101206009
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
12/07 13:27:04 [1192] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:101206009
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_SERVER_ONLINE
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
12/07 13:27:04 [1192] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=14400 seconds
12/07 13:27:04 [1192] HEARTBEAT: Check Point 6
12/07 13:27:04 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
12/07 13:27:04 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
12/07 13:27:04 [1192] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
12/07 13:27:04 [1192] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
12/07 13:27:04 [1192] ReasonDescForFailure*** = Host Integrity check is disabled.
12/07 13:27:04 [1192] ReasonDescForFailure*** = Host Integrity check is disabled.
12/07 13:27:04 [1192] *** = <SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="6B01D51D0A480FBB0072D165323D9CD1">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="WRWROMTSM" HostDesc=""/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.0.6002" Desc="Windows Server 2008 Standard Edition" Type="50724882" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 44 Stepping 2" ProcessorClock="2665" ProcessorNum="24"/>
<Memory Size="34348085248"/>
<Disk Letter="C:\" Size="107372539904"/>
<BIOS Version="HP     - 2"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="6B01-11/18/2010 16:53:24 140"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>

<SSAUTC Bias="-330"/>
<DNSs><DNS Address="10.80.15.91"/><DNS Address="10.80.15.92"/></DNSs>
<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

12/07 13:27:04 [1192] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 10
12/07 13:27:04 [1192] <mfn_PostAgentInfo>Free memory difference: 638976, Threshold: 4780837470
12/07 13:27:04 [1192] <mfn_PostAgentInfo>Free disk space difference: 61440, Threshold: 13923790230
12/07 13:27:04 [1192] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
12/07 13:27:04 [1192] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
12/07 13:27:04 [1192] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" Timestamp="1291708624958"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3252754</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280511000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>280B07070004</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>30350368</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>0:0</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="2B982FF90A480FBB01EC1DBD55098551"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1291703277385</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="6B01D51D0A480FBB0072D165323D9CD1">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="WRWROMTSM" HostDesc=""/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.0.6002" Desc="Windows Server 2008 Standard Edition" Type="50724882" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 44 Stepping 2" ProcessorClock="2665" ProcessorNum="24"/>
<Memory Size="34348085248"/>
<Disk Letter="C:\" Size="107372539904"/>
<BIOS Version="HP     - 2"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="6B01-11/18/2010 16:53:24 140"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="-330"/>
<DNSs><DNS Address="10.80.15.91"/><DNS Address="10.80.15.92"/></DNSs>
<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="93F3C57A0A480FBB01EC1DBDFBF156BE" ComputerID="2B982FF90A480FBB01EC1DBD55098551" HardwareKey="5E4C2F19A25301426FAB7AF635EF9738" GroupID="6B01D51D0A480FBB0072D165323D9CD1">
<SSAHostInfo>
<Memory Free="31871610880"/>
<Disk Letter="C:\" Free="92825329664"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
12/07 13:27:04 [1192] ************CSN=903
12/07 13:27:04 [1192] <mfn_MakePostUrl:>Request is: action=192&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&as=903&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:27:04 [1192] <mfn_PostAgentInfo>http://10.120.15.187:8014/secars/secars.dll?h=8079188CF58F4B35037AFC5B49F2AFD00768569026626EB11CED491EC1C8786B40B643D613F0F3602673F1BE0585524DAE1F1B3E081B361EED7D748A5B64488CDEFDCDDD4BB37EA8DF29762036AA5A2A3A1FE6B61B4C167849E04DEE0C80ACA6300C14F4F5C42B868B0E0128058539D4C27F61E4B1977BE8F34DDBD31379A19AFD041370E25133BC22D4F8B2227B01A59233C891776F9BD411C065E4BF2E339CB1F0143C64A239E483457864F0B64C0625A7239DF01ACD5ECDFC1F4AB7572956CBF585B584499FEEAC510B74CFDA01C623546FB11A04F756C34490CF49EFF89AF31CDC9B0152C0AB93CC01A969BB802376585CA6A42CC4C01B52C3939A68954C96F89D3F8AAEDBA4CA796E2CB73E06412BB8645FF3EB5CE598239F89290EB32BDE899E4CDCC1EA44884993232BC066B6BA9DBB63682BE353A3A9504CECAFCC71
12/07 13:27:06 [1192] <mfn_PostAgentInfo>POST the total size=1284
12/07 13:27:06 [1192] <mfn_PostAgentInfo>Done with return code = 200
12/07 13:27:06 [1192] <IndexHeartbeatProc>===UPLOAD STAGE===
12/07 13:27:06 [1192] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
12/07 13:27:06 [1192] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
12/07 13:27:06 [1192] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
12/07 13:27:06 [1192] <PrepareEventLog>initialized technology extension processing ok
12/07 13:27:06 [1192] <CalcEventLogIndex>Need to send Event Log Type(0) from id 590 to 592
12/07 13:27:06 [1192] <PrepareEventLog>Allow total logs to send=3
12/07 13:27:06 [1192] <PrepareEventLog>nSecurityRecordsTotal=0
12/07 13:27:06 [1192] <PrepareEventLog>nSecurityRecordsToSend=0
12/07 13:27:06 [1192] <PrepareEventLog>nSystemRecordsTotal=3
12/07 13:27:06 [1192] <PrepareEventLog>nSystemRecordsToSend=100
12/07 13:27:06 [1192] <PrepareEventLog>nTrafficRecordsTotal=0
12/07 13:27:06 [1192] <PrepareEventLog>nTrafficRecordsToSend=0
12/07 13:27:06 [1192] <PrepareEventLog>nRawRecordsTotal=0
12/07 13:27:06 [1192] <PrepareEventLog>nRawRecordsToSend=0
12/07 13:27:06 [1192] <PrepareEventLog>nProcessRecordsTotal=0
12/07 13:27:06 [1192] <PrepareEventLog>nProcessRecordsToSend=0
12/07 13:27:06 [1192] <PrepareEventLog>nLANSensorRecordsTotal=0
12/07 13:27:06 [1192] <PrepareEventLog>nLANSensorRecordsToSend=0
12/07 13:27:06 [1192] <PrepareEventLog>nTechExtensionRecordsTotal=0
12/07 13:27:06 [1192] <PrepareEventLog>nTechExtensionRecordsToSend=0
12/07 13:27:06 [1192] <MakeSystemLog>The size of SYSTEM event logs is 1298.
12/07 13:27:06 [1192] <SyLink>The size of SYSTEM event logs is 1298.
12/07 13:27:06 [1192] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
12/07 13:27:06 [1192] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
12/07 13:27:06 [1192] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
12/07 13:27:06 [1192] <MakeProcessLog>Attached total 0 bytes process event logs.
12/07 13:27:06 [1192] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
12/07 13:27:06 [1192] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
12/07 13:27:06 [1192] ************CSN=904
12/07 13:27:06 [1192] <mfn_MakePostUrl:>Request is: action=195&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=904&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:27:06 [1192] <SendEventLogToServer>http://10.120.15.187:8014/secars/secars.dll?h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
12/07 13:27:07 [1192] <SendEventLogToServer>eventlog-->SMS, size=525
12/07 13:27:07 [1192] <SendEventLogToServer>uploads the eventlog to server, size=525
12/07 13:27:07 [1192] <SendEventLogToServer>Query return code = 200
12/07 13:27:07 [1192] <SendEventLogToServer>EventLog-->SEM DONE!
12/07 13:27:07 [1192] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
12/07 13:27:07 [1192] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
12/07 13:27:07 [1192] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
12/07 13:27:07 [1192] HEARTBEAT: Check Point 8
12/07 13:27:07 [1192] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
12/07 13:27:07 [1192] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
12/07 13:27:07 [1192] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 13:27:07 ======
12/07 13:27:07 [1192] <IndexHeartbeatProc>Set Heartbeat Result= 5
12/07 13:27:07 [1192] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
12/07 13:27:07 [1192] Importing ConfigObject: 00000000048FF830 into: 00000000049F11A0
12/07 13:27:07 [1192] Use new configuration
12/07 13:27:07 [1192] Importing ConfigObject: 00000000049F11A0 into: 00000000049EE2C0
12/07 13:27:07 [1192] <UseNewConfig:>PreferredGroup in new group specific settings has been saved into registry: My Company\WR\WRO\WRO Servers
12/07 13:27:07 [1192] <UseNewConfig:>PreferredMode in new group specific settings has been saved into registry: 1
12/07 13:27:07 [1192] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
12/07 13:27:07 [1192] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
12/07 13:27:07 [1192] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
12/07 13:27:07 [1192] HEARTBEAT: Check Point Complete
12/07 13:27:07 [1192] <IndexHeartbeatProc>Done, Heartbeat=1seconds
12/07 13:27:07 [1192] </CSyLink::IndexHeartbeatProc()>
12/07 13:27:07 [1192] <CheckHeartbeatTimer>====== Heartbeat loop stops at 13:27:07 ======
12/07 13:27:08 [1192] <CheckHeartbeatTimer>====== Heartbeat loop starts at 13:27:08 ======
12/07 13:27:08 [1192] <GetOnlineNicInfo>:Netport Count=1
12/07 13:27:08 [1192] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.80.15.107" Mac="1c-c1-de-1a-3e-b4" Gateway="10.80.15.201" SubnetMask="255.255.248.0"/></SSANICs>
12/07 13:27:08 [1192] <CalcAgentHashKey>:CH=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:27:08 [1192] <CalcAgentHashKey>:CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:27:08 [1192] <CalcAgentHashKey>:C=58F523BD0A480FBB01A0D510C55A96381WRWROMTSMWORKGROUP
12/07 13:27:08 [1192] <CalcAgentHashKey>:CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:27:08 [1192] <CalcAgentHashKey>:UCH=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP5E4C2F19A25301426FAB7AF635EF9738
12/07 13:27:08 [1192] <CalcAgentHashKey>:UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:27:08 [1192] <CalcAgentHashKey>:UC=58F523BD0A480FBB01A0D510C55A96380AdministratorLocalComputerWRWROMTSMWORKGROUP
12/07 13:27:08 [1192] <CalcAgentHashKey>:UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:27:08 [1192] <DoHeartbeat>HardwareID=5E4C2F19A25301426FAB7AF635EF9738
12/07 13:27:08 [1192] <DoHeartbeat>CHKey=AA1B360843384DAB8F353713268F617B
12/07 13:27:08 [1192] <DoHeartbeat>CKey=F90C4B239475C4C3719251449E6CC5F9
12/07 13:27:08 [1192] <DoHeartbeat>UCHKey=815C2116330939AD25E99E59B1A1CA48
12/07 13:27:08 [1192] <DoHeartbeat>UCKey=7A6088411E02328BAF199CF2C6E36466
12/07 13:27:08 [1192] <DoHeartbeat> Set heartbeat event
12/07 13:27:08 [1192] Use new configuration
12/07 13:27:08 [1192] <CSyLink::IndexHeartbeatProc()>
12/07 13:27:08 [1192] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 00000000049EE2C0
12/07 13:27:08 [1192] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 13:27:08 ======
12/07 13:27:09 [1192] HEARTBEAT: Check Point 1
12/07 13:27:09 [1192] Get First Server!
12/07 13:27:09 [1192] <GetFirstSEMServer> Selecting a random server
12/07 13:27:09 [1192] HEARTBEAT: Check Point 2
12/07 13:27:09 [1192] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
12/07 13:27:09 [1192] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
12/07 13:27:09 [1192] HEARTBEAT: Check Point 3
12/07 13:27:09 [1192] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
12/07 13:27:09 [1192] HEARTBEAT: Check Point 4
12/07 13:27:09 [1192] <IndexHeartbeatProc>===Get Index STAGE===
12/07 13:27:09 [1192] ************CSN=905
12/07 13:27:09 [1192] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&hid=5E4C2F19A25301426FAB7AF635EF9738&groupid=58F523BD0A480FBB01A0D510C55A9638&mode=0&hbt=3600&as=905&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:27:09 [1192] <GetIndexFileRequest:>http://10.72.15.187:8014/secars/secars.dll?h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
12/07 13:27:09 [1192] <GetIndexFileRequest:>SMS return=200
12/07 13:27:09 [1192] <ParseHTTPStatusCode:>200=>200 OK
12/07 13:27:09 [1192] <FindHeader>Sem-HashKey:=>815C2116330939AD25E99E59B1A1CA48
12/07 13:27:09 [1192] <GetIndexFileRequest:>Loading the current mode:1
12/07 13:27:09 [1192] <SyLink>Current Mode changes to: 0
12/07 13:27:09 [1192] <FindHeader>Sem-LANSensor:=>0
12/07 13:27:09 [1192] <FindHeader>Sem-Signatue:=>31427B9770E3F360F5435D9CC4735CC03FCF9B77CACF008E6F31755B8ECA4A206E48A6C84F8067F420AD527DF58033AB6367E37FF349B5679C63E360B0FA0A37E7E54EA31E0ECDB29E275CA651DD9DC163A80BF8C46540D896BD06BE79E897C473F8D3B349E3A070D3C30B8A6C6676D71A98817C9D39D13D93221ACCB9EF7A8A
12/07 13:27:09 [1192] <mfn_DoGetIndexFile200>Content Lenght => 1355
12/07 13:27:09 [1192] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 
12/07 13:27:09 [1192] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="84BE5A720A480FBB0076D4AF0C09C9FB" ServerID="02501A6E0A480FBB00750E300B0D8ED3" GroupID="1BF067500A780FBB016D0B63E0EB233D" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "07/12/2010 04:08:55">	<Profile Checksum="73B3970F2DAEBAC70D9F75B15C910819" SerialNumber="1BF0-12/06/2010 17:51:14 222" LastModifiedTime="06/12/2010  18:54:11"/>	<ConfigFile Checksum="B1A4977D3411AC339DA77954028C45CE" LastModifiedTime="06/12/2010  17:39:23"/>	<IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="06/12/2010  18:54:12"/>	<SylinkFile Checksum="249FF96F50730764FA83AC9EC22B40CE" LastModifiedTime="06/12/2010  18:54:12"/>	<LSProfile Checksum="4038F93328F2A1E21E8ED6DFA7DADE5E" SerialNumber ="1BF0-12/06/2010 17:51:14 222" LastModifiedTime ="06/12/2010  18:54:12"/>
	<LiveUpdate>
		<File Checksum="B8A4A4AF69180EFF28E159B0A4F8391B" DeltaFlag="1" FullSize="102065613" LastModifiedTime="1291674847234" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101206002"/>
 		<File Checksum="7F4A9D6A0483D33B6061F15DF05983CA" DeltaFlag="1" FullSize="103713414" LastModifiedTime="1291674726625" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101206002"/>
 		<File Checksum="D4FE3EBC1DECE0B2DE96D1DADA05B3C1" DeltaFlag="1" FullSize="964272" LastModifiedTime="1291493097859" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101203001"/>
 		<File Checksum="EC7B7DB0BF5ACBD1AD1B0BD6FCFD0617" DeltaFlag="1" FullSize="944694" LastModifiedTime="1291492854875" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101203001"/>
 		<File Checksum="DC2A6067CA13CCEC1ACC9822DFC304BD" DeltaFlag="1" FullSize="669829" LastModifiedTime="1225447250703" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
 		<File Checksum="CAE48C87F9953354CE84391B490F1B1C" DeltaFlag="1" FullSize="650307" LastModifiedTime="1225447255593" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
 		<File Checksum="68A3AD1A2926311336BE284D67C0C6F2" DeltaFlag="1" FullSize="88188" LastModifiedTime="1225447297156" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
 		<File Checksum="7399244F86CDB451FDCF0D8614ACC6E7" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1225447304359" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
 		<File Checksum="40EC8A4C393D3BAD2011B9D605B92DD0" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1225447321406" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
 		<File Checksum="90577604DDBE5E067B01CC064A751B7E" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291323674468" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
 		<File Checksum="6FB7E38B3403B24C3380771E806FCD7E" DeltaFlag="1" FullSize="76787" LastModifiedTime="1291674853578" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101206009"/>
 		<File Checksum="D3182F29BC9AA34964AA98EA1E8C6FE7" DeltaFlag="1" FullSize="3739487" LastModifiedTime="1291674855203" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101206009"/>
 		<File Checksum="D492F48E8C2E508330696C780BD282A8" DeltaFlag="1" FullSize="3739514" LastModifiedTime="1291674857250" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101206009"/>
 		<File Checksum="9130FA368DDC177F1BF5AA3630B9F339" DeltaFlag="1" FullSize="76770" LastModifiedTime="1291674858031" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101206009"/>
	</LiveUpdate>
</GroupIndex>
12/07 13:27:09 [1192] <mfn_ParseIndexFile2>set to download new Profile.. 
12/07 13:27:09 [1192] <mfn_ParseIndexFile2>set to download new Sylink.. 
12/07 13:27:09 [1192] <mfn_DoGetIndexFile200>Parser Index File!
12/07 13:27:09 [1192] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
12/07 13:27:09 [1192] <GetIndexFileRequest:>COMPLETED
12/07 13:27:09 [1192] <IndexHeartbeatProc>GetIndexFile handling status: 0
12/07 13:27:09 [1192] <IndexHeartbeatProc>Switch Server flag=0
12/07 13:27:09 [1192] HEARTBEAT: Check Point 5.1
12/07 13:27:09 [1192] <IsInClientIPorOnLink> NextHop Not equal 10.72.15.187,return FALSE
12/07 13:27:09 [1192] <IsInClientIPorOnLink> NextHop is OnLink with 10.80.15.107,return TRUE
12/07 13:27:09 [1192] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:10.80.15.107
12/07 13:27:09 [1192] <IndexHeartbeatProc> Saved IP Address: 10.72.15.187
12/07 13:27:09 [1192] ************CSN=906
12/07 13:27:09 [1192] <mfn_MakeGetProfileUrl:>Request is: action=3&hostid=93F3C57A0A480FBB01EC1DBDFBF156BE&chk=AA1B360843384DAB8F353713268F617B&ck=F90C4B239475C4C3719251449E6CC5F9&uchk=815C2116330939AD25E99E59B1A1CA48&uck=7A6088411E02328BAF199CF2C6E36466&groupid=58F523BD0A480FBB01A0D510C55A9638&as=906&cn=[hex]575257524F4D54534D&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
12/07 13:27:09 [1192] <GetProfileRequest:>http://10.72.15.187:8014/secars/secars.dll?h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
12/07 13:27:10 [1192] <GetProfileRequest:>SMS return=200
12/07 13:27:10 [1192] <ParseHTTPStatusCode:>200=>200 OK