03/18 08:50:46 [3996] ~~~Sylink log started. (SEP Product Version in registry: 11.0.6200.754, Sylink File Version: 11.0.6200.530) 03/18 08:50:46 [3996] Stored HostGUID=E46B6E3EC0A80AA30059CF76AB437F88; outlen=16 03/18 08:50:46 [3996] Stored UserGuid=0; outlen=2 03/18 08:50:46 [3996] Sygate-SSN=6839 03/18 08:50:46 [3996] Read CSN=6840 03/18 08:50:46 [3996] Sygate-SSN=75 03/18 08:50:46 [3996] Read CSN=76 03/18 08:50:46 [3996] Product Type=1,Major Ver=6,Minor Ver=1,Platform ID=2,OSType=17170690 03/18 08:50:46 [3996] OS=Windows 7 Professional Edition; number=6.1.7601 03/18 08:50:46 [3996] SyLinkCreateInstance => Instance created: 0000000003B30160 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK 03/18 08:50:46 [3996] :Netport Count=1 03/18 08:50:46 [3996] :NicInfo 03/18 08:50:46 [3996] SyLinkCreateConfig => Created instance: 0000000003B50670 03/18 08:50:46 [3996] UseNewConfig => Created m_hNewConfig: 0000000003B50670 03/18 08:50:46 [3996] Importing ConfigObject: 0000000003B2DD80 into: 0000000003B50670 03/18 08:50:46 [3996] Importing ConfigObject: 0000000003B2DD80 into: 0000000003B4D280 03/18 08:50:46 [3996] stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED 03/18 08:50:46 [3996] SSA packageType is set as 105 03/18 08:50:46 [3996] SyLinkDeleteConfig => Deleting instance: 0000000003B2DD80 03/18 08:50:46 [3996] HI status is changed to=3; reason=105; rule=Host Integrity check is disabled. Host Integrity policy has been disabled by the administrator. 03/18 08:50:47 [3996] SyLinkCreateConfig => Created instance: 00000000057BC1C0 03/18 08:50:47 [3996] SetCurLocationName: Name is set to - Default 03/18 08:50:47 [3996] SetCurLocationID: ID is set to - 817CB2FDC0A80AA301BAF427063CB379 03/18 08:50:47 [3996] SyLinkCreateConfig => Created instance: 0000000005B76320 03/18 08:50:47 [3996] RemeberCurrentGroup=1,RememberCurrentPolicyMode=1 03/18 08:50:47 [3996] Importing ConfigObject: 0000000005B76320 into: 0000000003B50670 03/18 08:50:47 [3996] Importing ConfigObject: 0000000005B76320 into: 0000000003B4D280 03/18 08:50:47 [3996] stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED 03/18 08:50:47 [3996] SyLinkDeleteConfig => Deleting instance: 0000000005B76320 03/18 08:50:47 [3996] SyLinkDeleteConfig => Deleting instance: 00000000057BC1C0 03/18 08:50:47 [3996] 03/18 08:50:47 [3996] 03/18 08:50:47 [3996] The last server used was 'sfoapp10' 03/18 08:50:47 [3996] 03/18 08:50:47 [3996] CUpdateConfig::Dump 03/18 08:50:47 [3996] 03/18 08:50:47 [3996] msz_DomainName is taken from szDomainName 03/18 08:50:47 [3996] DomainName (Final)=jfcs.org 03/18 08:50:47 [3996] Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87 03/18 08:50:47 [3996] Unable to create Session with 'No Proxies' settings - Error Code: 87 03/18 08:50:47 [3364] Manually assigned heartbeat=3279 seconds 03/18 08:50:47 [3328] Thread is about to begin.. 03/18 08:50:47 [3364] Successfully created the heartbeat thread 03/18 08:50:47 [3996] Started, contact SMS every 3600 seconds 03/18 08:50:47 [3996] going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED 03/18 08:50:47 [3996] done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0 03/18 08:50:47 [3996] 03/18 08:50:48 [3996] Received new User/Domain from SMC.. User: Administrator User Domain: JFCS.ORG 03/18 08:50:48 [3996] Getting FQDN from XP or later OS. 03/18 08:50:48 [3996] user_name's length is: 14 03/18 08:50:48 [3996] domain_name's length is: 9 03/18 08:50:48 [3996] The sessions' total amount we get:7 03/18 08:50:48 [3996] User Administrator FQDN name is JFCS.ORG 03/18 08:50:48 [3996] Setting the User Domain to RDNS Domain .. 03/18 08:50:48 [3996] Logged in user info set to: JFCS.ORG/Administrator 03/18 08:50:48 [3996] Marking User Change Notify to redo registration.. 03/18 08:50:48 [3328] Previous LU data was not loaded or found 03/18 08:50:48 [3328] ====== Heartbeat loop starts at 08:50:48 ====== 03/18 08:50:48 [3328] :Netport Count=1 03/18 08:50:48 [3328] :NicInfo 03/18 08:50:48 [3328] Get Hardware ID 03/18 08:50:49 [3328] Hardware ID assigned: 4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:49 [3328] :CH=17394F65C0A80AA301EC239F43FE44DD1aochoa7jfcs.org4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:49 [3328] :CHKey=A9FE7BD35157003F593195AC55F522A7 03/18 08:50:49 [3328] :C=17394F65C0A80AA301EC239F43FE44DD1aochoa7jfcs.org 03/18 08:50:49 [3328] :CKey=FD18A20BF2E1DA046AE73451C023B602 03/18 08:50:49 [3328] :UCH=17394F65C0A80AA301EC239F43FE44DD0AdministratorJFCS.ORGaochoa7jfcs.org4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:49 [3328] :UCHKey=772CD16E2ECA884E1721C509A5D2A6F5 03/18 08:50:49 [3328] :UC=17394F65C0A80AA301EC239F43FE44DD0AdministratorJFCS.ORGaochoa7jfcs.org 03/18 08:50:49 [3328] :UCKey=361A83220933CDA5A1D29607BA84173B 03/18 08:50:49 [3328] HardwareID=4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:49 [3328] CHKey=A9FE7BD35157003F593195AC55F522A7 03/18 08:50:49 [3328] CKey=FD18A20BF2E1DA046AE73451C023B602 03/18 08:50:49 [3328] UCHKey=772CD16E2ECA884E1721C509A5D2A6F5 03/18 08:50:49 [3328] UCKey=361A83220933CDA5A1D29607BA84173B 03/18 08:50:49 [3328] Set heartbeat event 03/18 08:50:49 [3328] Use new configuration 03/18 08:50:49 [3328] ====== Reg Heartbeat loop starts at 08:50:49 ====== 03/18 08:50:50 [3328] HEARTBEAT: Check Point 1 03/18 08:50:50 [3328] HEARTBEAT: Check Point 2 03/18 08:50:50 [3328] going to post event=EVENT_SERVER_CONNECTING 03/18 08:50:50 [3328] done post event=EVENT_SERVER_CONNECTING, return=0 03/18 08:50:50 [3328] HEARTBEAT: Check Point 3 03/18 08:50:50 [3328] Setting the session timeout on Profile Session (Registration) to 30000 03/18 08:50:50 [3328] HEARTBEAT: Check Point 4 03/18 08:50:50 [3328] ===Registration STAGE=== 03/18 08:50:50 [3328] logon id (domain/user)=JFCS.ORG/Administrator 03/18 08:50:50 [3328] Loading current group:My Company\64-bit Test Group 03/18 08:50:50 [3328] Loading current mode:1 03/18 08:50:50 [3328] Loading preferred group:My Company\64-bit JFCS 03/18 08:50:50 [3328] Loading preferred mode:1 03/18 08:50:50 [3328] The client once registered to server, using the current group: My Company\64-bit Test Groupand current mode: 1 03/18 08:50:50 [3328] It will remember both current group and mode, PreferredGroup is My Company\64-bit Test Group, PreferredMode is 1 03/18 08:50:50 [3328] XML data: 03/18 08:50:50 [3328] [MakeRegisterData] registration Hardware Key=4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:50 [3328] ************Reg CSN=77 03/18 08:50:50 [3328] Request is: s_origin_length: 1296s_session_id: 4DF65BF271FD62ECBB2610116877E28CSygate-SSN: 77 03/18 08:50:50 [3328] http://sfoapp10:8014 [encrypted data] 03/18 08:50:50 [3328] 8:50:50=>Send HTTP REQUEST 03/18 08:50:50 [3328] 8:50:50=>HTTP REQUEST sent 03/18 08:50:50 [3328] 8:50:50=>QUERY return code 03/18 08:50:50 [3328] 8:50:50=>QUERY return code completed 03/18 08:50:50 [3328] SMS return=200 03/18 08:50:50 [3328] 200=>200 OK 03/18 08:50:50 [3328] Content Lenght => 1148 03/18 08:50:50 [3328] HTTP returns status code=200 03/18 08:50:50 [3328] RECEIVE STAGE COMPLETED 03/18 08:50:50 [3328] COMPLETED, returned 0 03/18 08:50:50 [3328] NextHop Not equal 192.168.10.163,return FALSE 03/18 08:50:50 [3328] NextHop is OnLink with 192.168.12.108,return TRUE 03/18 08:50:50 [3328] Next Hop IP is a local IP or ONLINK:192.168.12.108 03/18 08:50:50 [3328] HEARTBEAT: Check Point 5.1 03/18 08:50:50 [3328] Manually assigned heartbeat=3 seconds 03/18 08:50:50 [3328] going to post event=EVENT_SERVER_ONLINE 03/18 08:50:50 [3328] done post event=EVENT_SERVER_ONLINE, return=0 03/18 08:50:50 [3328] HEARTBEAT: Check Point 8 03/18 08:50:50 [3328] going to post event=EVENT_SERVER_DISCONNECTED 03/18 08:50:50 [3328] done post event=EVENT_SERVER_DISCONNECTED, return=0 03/18 08:50:50 [3328] ====== Registration Procedure stops at 08:50:50 ====== 03/18 08:50:50 [3328] HEARTBEAT: Check Point 10 03/18 08:50:51 [3328] HEARTBEAT: Check Point Complete 03/18 08:50:51 [3328] Done, Heartbeat=3seconds 03/18 08:50:51 [3328] ====== Heartbeat loop stops at 08:50:51 ====== 03/18 08:50:51 [3872] SyLinkCreateConfig => Created instance: 00000000038DACB0 03/18 08:50:51 [3872] Importing ConfigObject: 0000000003B4D280 into: 00000000038DACB0 03/18 08:50:51 [3872] SyLinkDeleteConfig => Deleting instance: 00000000038DACB0 03/18 08:50:54 [3328] ====== Heartbeat loop starts at 08:50:54 ====== 03/18 08:50:54 [3328] :Netport Count=1 03/18 08:50:54 [3328] :NicInfo 03/18 08:50:54 [3328] :CH=17394F65C0A80AA301EC239F43FE44DD1aochoa7jfcs.org4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:54 [3328] :CHKey=A9FE7BD35157003F593195AC55F522A7 03/18 08:50:54 [3328] :C=17394F65C0A80AA301EC239F43FE44DD1aochoa7jfcs.org 03/18 08:50:54 [3328] :CKey=FD18A20BF2E1DA046AE73451C023B602 03/18 08:50:54 [3328] :UCH=17394F65C0A80AA301EC239F43FE44DD0AdministratorJFCS.ORGaochoa7jfcs.org4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:54 [3328] :UCHKey=772CD16E2ECA884E1721C509A5D2A6F5 03/18 08:50:54 [3328] :UC=17394F65C0A80AA301EC239F43FE44DD0AdministratorJFCS.ORGaochoa7jfcs.org 03/18 08:50:54 [3328] :UCKey=361A83220933CDA5A1D29607BA84173B 03/18 08:50:54 [3328] HardwareID=4DF65BF271FD62ECBB2610116877E28C 03/18 08:50:54 [3328] CHKey=A9FE7BD35157003F593195AC55F522A7 03/18 08:50:54 [3328] CKey=FD18A20BF2E1DA046AE73451C023B602 03/18 08:50:54 [3328] UCHKey=772CD16E2ECA884E1721C509A5D2A6F5 03/18 08:50:54 [3328] UCKey=361A83220933CDA5A1D29607BA84173B 03/18 08:50:54 [3328] Set heartbeat event 03/18 08:50:54 [3328] Use new configuration 03/18 08:50:54 [3328] 03/18 08:50:54 [3328] Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003B4D280 03/18 08:50:54 [3328] ====== Reg Heartbeat loop starts at 08:50:54 ====== 03/18 08:50:55 [3328] HEARTBEAT: Check Point 1 03/18 08:50:55 [3328] Get First Server! 03/18 08:50:55 [3328] HEARTBEAT: Check Point 2 03/18 08:50:55 [3328] going to post event=EVENT_SERVER_CONNECTING 03/18 08:50:55 [3328] done post event=EVENT_SERVER_CONNECTING, return=0 03/18 08:50:55 [3328] HEARTBEAT: Check Point 3 03/18 08:50:55 [3328] Setting the session timeout on Profile Session to 30000 03/18 08:50:55 [3328] HEARTBEAT: Check Point 4 03/18 08:50:55 [3328] ===Get Index STAGE=== 03/18 08:50:55 [3328] ************CSN=6841 03/18 08:50:55 [3328] Request is: action=12&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&hid=4DF65BF271FD62ECBB2610116877E28C&groupid=17394F65C0A80AA301EC239F43FE44DD&mode=0&hbt=3600&as=6841&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:50:55 [3328] http://sfoapp10:8014/secars/secars.dll?h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end HTTP REQUEST 03/18 08:50:55 [3328] 8:50:55=>HTTP REQUEST sent 03/18 08:50:55 [3328] SMS return=200 03/18 08:50:55 [3328] 200=>200 OK 03/18 08:50:55 [3328] Sem-HashKey:=>A9FE7BD35157003F593195AC55F522A7 03/18 08:50:55 [3328] Loading the current mode:1 03/18 08:50:55 [3328] Sem-LANSensor:=>0 03/18 08:50:55 [3328] Sem-Signatue:=>6F077C7A887E6497D96C3D8FBB421AF6D14A58DDF4907E7CA910ACE36FE81071C462CA6ED89F88ADC18B915F809A166D7F1E85C5CAB7F34E7B4FC6F669EFF708F7F48E2E795C0F9A14B85B87485D9902C1EB349B7026A83F684796322E558326DF915F3ABD98D5EDB119D840218C30F31A7B5BE6FFC2D7242FD602EC69E822CE 03/18 08:50:55 [3328] Content Lenght => 1822 03/18 08:50:55 [3328] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 03/18 08:50:55 [3328] Index File: 03/18 08:50:55 [3328] set to download new Profile.. 03/18 08:50:55 [3328] Parser Index File! 03/18 08:50:55 [3328] RECEIVE STAGE COMPLETED 03/18 08:50:55 [3328] COMPLETED 03/18 08:50:55 [3328] GetIndexFile handling status: 0 03/18 08:50:55 [3328] Switch Server flag=0 03/18 08:50:55 [3328] HEARTBEAT: Check Point 5.1 03/18 08:50:55 [3328] NextHop Not equal 192.168.10.163,return FALSE 03/18 08:50:55 [3328] NextHop is OnLink with 192.168.12.108,return TRUE 03/18 08:50:55 [3328] Next Hop IP is a local IP or ONLINK:192.168.12.108 03/18 08:50:55 [3328] Saved IP Address: 192.168.10.163 03/18 08:50:55 [3328] ************CSN=6842 03/18 08:50:55 [3328] Request is: action=3&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&groupid=17394F65C0A80AA301EC239F43FE44DD&as=6842&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:50:55 [3328] http://sfoapp10:8014/secars/secars.dll?h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end HTTP REQUEST 03/18 08:50:55 [3328] 8:50:55=>HTTP REQUEST sent 03/18 08:50:55 [3328] 8:50:55=>QUERY return code 03/18 08:50:55 [3328] SMS return=200 03/18 08:50:55 [3328] 200=>200 OK 03/18 08:50:55 [3328] Content Lenght => 16036 03/18 08:50:55 [3328] Got profile from server, read bytes=16036 03/18 08:50:55 [3328] content len is 16036 03/18 08:50:55 [3328] going to post event=EVENT_SERVER_PROFILE_VERIFY 03/18 08:50:55 [3328] done post event=EVENT_SERVER_PROFILE_VERIFY, return=0 03/18 08:50:55 [3328] Profile Len:140544 03/18 08:50:55 [3328] going to post event=EVENT_SERVER_PROFILE_CHANGED 03/18 08:50:55 [3328] SyLinkCreateConfig => Created instance: 0000000003D8C430 03/18 08:50:55 [3328] SetCurLocationName: Name is set to - Default 03/18 08:50:55 [3328] SetCurLocationID: ID is set to - 817CB2FDC0A80AA301BAF427063CB379 03/18 08:50:55 [3328] SyLinkCreateConfig => Created instance: 0000000003DA03C0 03/18 08:50:55 [3328] RemeberCurrentGroup=1,RememberCurrentPolicyMode=1 03/18 08:50:55 [3328] Importing ConfigObject: 0000000003DA03C0 into: 0000000003B50670 03/18 08:50:55 [3328] SyLinkDeleteConfig => Deleting instance: 0000000003DA03C0 03/18 08:50:55 [3328] SyLinkDeleteConfig => Deleting instance: 0000000003D8C430 03/18 08:50:55 [3328] done post event=EVENT_SERVER_PROFILE_CHANGED, return=0 03/18 08:50:55 [3328] save profile checksum=4119F8A9BB0ED27546CFEC4C637B7735 03/18 08:50:55 [3328] ========== Received profile from server completed. ========= 03/18 08:50:55 [3328] completed 03/18 08:50:55 [3328] going to post event=EVENT_SERVER_ONLINE 03/18 08:50:55 [3328] done post event=EVENT_SERVER_ONLINE, return=0 03/18 08:50:55 [3328] completed 03/18 08:50:55 [3328] RECEIVE STAGE COMPLETED 03/18 08:50:55 [3328] COMPLETED 03/18 08:50:55 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:55 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:55 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:130318006 03/18 08:50:55 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:55 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:55 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:130317024 03/18 08:50:55 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:56 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:56 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:130317024 03/18 08:50:56 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:56 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:56 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:130315002 03/18 08:50:56 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:130313001 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:130313011 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:130213001 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {50B092DE-40D5-4724-971B-D3D90E9EE987} Seq:120726050 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120824025 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:130301011 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} Seq:130115021 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:130315002 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:50:58 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:50:58 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:130315002 03/18 08:50:58 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:18 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:18 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:18 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:18 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:130317024 03/18 08:51:18 [3328] going to post event=EVENT_PACKAGE_REQUIRE_STATUS 03/18 08:51:18 [3328] done post event=EVENT_PACKAGE_REQUIRE_STATUS, return=0 03/18 08:51:18 [3328] The package at Index 0 is needed by the client .. Begin Downloading the information.. 03/18 08:51:18 [3328] ************CSN=6843 03/18 08:51:18 [3328] Request is: action=301&hostid=E46B6E3EC0A80AA30059CF76AB437F88&groupid=17394F65C0A80AA301EC239F43FE44DD&as=6843&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247&agentpackagechecksum=2ddc2ee5931f600143fa0412c16926a5&agentpackagetargetchecksum=06c909b4f4f59d8e6196a1fa641796d8&agentpackagetargetmoniker={D410C452-0AB4-F6D4-0039-BF12E41A5E54}&lu=6 03/18 08:51:18 [3328] URL: /secars/secars.dll?h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http://sfoapp10:8014/secars/secars.dll?h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end HTTP REQUEST 03/18 08:51:18 [3328] 8:51:18=>HTTP REQUEST sent 03/18 08:51:18 [3328] SMS return=200 03/18 08:51:18 [3328] 200=>200 OK 03/18 08:51:18 [3328] Sem-PackageFileName:=>ClientPackages\06c909b4f4f59d8e6196a1fa641796d8\Full.zip 03/18 08:51:18 [3328] Sem-PackageFileLength:=>296232341 03/18 08:51:18 [3328] Sem-Signatue:=>0E399748FD03FBE789A61A77091258268C29E166DE5666487626D8A0B878B9207506BA03DD8596D65A82D35974A358E047A9A852E7BC295CAC53C68739243C9A1C4A017420931D064AC5F4B9EF9A185FFFABCF2466F072ECFA3E2179A51CF2384EC60B03343BCA6DAF5A0C48063D4609F309C0111B0E505F144CACAF4B2AEE22 03/18 08:51:18 [3328] Sem-PackageFull:=>1 03/18 08:51:18 [3328] going to post event=EVENT_SERVER_ONLINE 03/18 08:51:18 [3328] done post event=EVENT_SERVER_ONLINE, return=0 03/18 08:51:18 [3328] Reset Heartbeat factor index, hearbeat=3600 seconds 03/18 08:51:18 [3328] HEARTBEAT: Check Point 6 03/18 08:51:18 [3328] ===REQUESTING PLUG-IN OP-STATE: AVMan 03/18 08:51:19 [3328] ===REQUESTING PLUG-IN OP-STATE: GUP 03/18 08:51:19 [3328] ===REQUESTING PLUG-IN OP-STATE: LUMan 03/18 08:51:20 [3328] ===REQUESTING CMC OP-STATE === 03/18 08:51:20 [3328] going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE 03/18 08:51:20 [3328] done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0 03/18 08:51:20 [3328] ReasonDescForFailure*** = Host Integrity check is disabled. 03/18 08:51:20 [3328] ReasonDescForFailure*** = Host Integrity check is disabled. 03/18 08:51:20 [3328] *** = 03/18 08:51:20 [3328] Volatile op-state damper: 0, Interval passed: 1363621880 03/18 08:51:20 [3328] Free memory difference: 2667925504, Threshold: 0 03/18 08:51:20 [3328] Free disk space difference: 216471650304, Threshold: 0 03/18 08:51:20 [3328] going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS 03/18 08:51:20 [3328] done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0 03/18 08:51:20 [3328] 118398901002B020F0000000000000000002B0206131E00999912033627268000000000000001.2.87340034:13]]> ]]>1363392909994]]>]]>]]> 03/18 08:51:20 [3328] ************CSN=6844 03/18 08:51:20 [3328] Request is: action=192&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&as=6844&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:51:20 [3328] http://sfoapp10:8014/secars/secars.dll?h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the total size=1524 03/18 08:51:20 [3328] Done with return code = 200 03/18 08:51:20 [3328] ===UPLOAD STAGE=== 03/18 08:51:20 [3328] going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG 03/18 08:51:20 [3328] done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0 03/18 08:51:20 [3328] ===PREPARE EVENT LOG STAGE=== 03/18 08:51:20 [3328] initialized technology extension processing ok 03/18 08:51:20 [3328] Need to send Event Log Type(0) from id 69 to 80 03/18 08:51:20 [3328] Need to send Event Log Type(2) from id 94 to 96 03/18 08:51:20 [3328] Allow total logs to send=15 03/18 08:51:20 [3328] nSecurityRecordsTotal=0 03/18 08:51:20 [3328] nSecurityRecordsToSend=0 03/18 08:51:20 [3328] nSystemRecordsTotal=12 03/18 08:51:20 [3328] nSystemRecordsToSend=80 03/18 08:51:20 [3328] nTrafficRecordsTotal=3 03/18 08:51:20 [3328] nTrafficRecordsToSend=20 03/18 08:51:20 [3328] nRawRecordsTotal=0 03/18 08:51:20 [3328] nRawRecordsToSend=0 03/18 08:51:20 [3328] nProcessRecordsTotal=0 03/18 08:51:20 [3328] nProcessRecordsToSend=0 03/18 08:51:20 [3328] nLANSensorRecordsTotal=0 03/18 08:51:20 [3328] nLANSensorRecordsToSend=0 03/18 08:51:20 [3328] nTechExtensionRecordsTotal=0 03/18 08:51:20 [3328] nTechExtensionRecordsToSend=0 03/18 08:51:20 [3328] The size of SYSTEM event logs is 5006. 03/18 08:51:20 [3328] The size of SYSTEM event logs is 5006. 03/18 08:51:20 [3328] Attached total 0 bytes SECURITY event logs. 03/18 08:51:20 [3328] Attached total 1514 bytes TRAFFIC event logs. 03/18 08:51:20 [3328] Attached total 1514 bytes TRAFFIC event logs. 03/18 08:51:20 [3328] Attached total 0 bytes RAW TRAFFIC event logs. 03/18 08:51:20 [3328] Attached total 0 bytes process event logs. 03/18 08:51:20 [3328] ===COMPRESS EVENT LOG STAGE=== 03/18 08:51:20 [3328] ===SEND EVENT LOG STAGE=== 03/18 08:51:20 [3328] ************CSN=6845 03/18 08:51:20 [3328] Request is: action=195&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&groupid=17394F65C0A80AA301EC239F43FE44DD&as=6845&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:51:20 [3328] http://sfoapp10:8014/secars/secars.dll?h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eventlog-->SMS, size=1382 03/18 08:51:20 [3328] uploads the eventlog to server, size=1382 03/18 08:51:20 [3328] Query return code = 200 03/18 08:51:20 [3328] EventLog-->SEM DONE! 03/18 08:51:20 [3328] going to post event=EVENT_SERVER_EVENT_LOG_SENT 03/18 08:51:20 [3328] done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0 03/18 08:51:20 [3328] Communication Mode=1(Pull mode) 03/18 08:51:20 [3328] HEARTBEAT: Check Point 8 03/18 08:51:20 [3328] going to post event=EVENT_SERVER_DISCONNECTED 03/18 08:51:20 [3328] done post event=EVENT_SERVER_DISCONNECTED, return=0 03/18 08:51:20 [3328] ====== IndexHeartbeat Procedure stops at 08:51:20 ====== 03/18 08:51:20 [3328] Set Heartbeat Result= 5 03/18 08:51:20 [3328] Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0 03/18 08:51:20 [3328] Use new configuration 03/18 08:51:20 [3328] Importing ConfigObject: 0000000003B50670 into: 0000000003B4D280 03/18 08:51:20 [3328] Manually assigned heartbeat=1 seconds 03/18 08:51:20 [3328] going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED 03/18 08:51:20 [3328] done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0 03/18 08:51:20 [3328] HEARTBEAT: Check Point Complete 03/18 08:51:20 [3328] Done, Heartbeat=1seconds 03/18 08:51:20 [3328] 03/18 08:51:20 [3328] ====== Heartbeat loop stops at 08:51:20 ====== 03/18 08:51:22 [3328] ====== Heartbeat loop starts at 08:51:22 ====== 03/18 08:51:23 [3328] :Netport Count=1 03/18 08:51:23 [3328] :NicInfo 03/18 08:51:23 [3328] :CH=17394F65C0A80AA301EC239F43FE44DD1aochoa7jfcs.org4DF65BF271FD62ECBB2610116877E28C 03/18 08:51:23 [3328] :CHKey=A9FE7BD35157003F593195AC55F522A7 03/18 08:51:23 [3328] :C=17394F65C0A80AA301EC239F43FE44DD1aochoa7jfcs.org 03/18 08:51:23 [3328] :CKey=FD18A20BF2E1DA046AE73451C023B602 03/18 08:51:23 [3328] :UCH=17394F65C0A80AA301EC239F43FE44DD0AdministratorJFCS.ORGaochoa7jfcs.org4DF65BF271FD62ECBB2610116877E28C 03/18 08:51:23 [3328] :UCHKey=772CD16E2ECA884E1721C509A5D2A6F5 03/18 08:51:23 [3328] :UC=17394F65C0A80AA301EC239F43FE44DD0AdministratorJFCS.ORGaochoa7jfcs.org 03/18 08:51:23 [3328] :UCKey=361A83220933CDA5A1D29607BA84173B 03/18 08:51:23 [3328] HardwareID=4DF65BF271FD62ECBB2610116877E28C 03/18 08:51:23 [3328] CHKey=A9FE7BD35157003F593195AC55F522A7 03/18 08:51:23 [3328] CKey=FD18A20BF2E1DA046AE73451C023B602 03/18 08:51:23 [3328] UCHKey=772CD16E2ECA884E1721C509A5D2A6F5 03/18 08:51:23 [3328] UCKey=361A83220933CDA5A1D29607BA84173B 03/18 08:51:23 [3328] Set heartbeat event 03/18 08:51:23 [3328] Use new configuration 03/18 08:51:23 [3328] 03/18 08:51:23 [3328] Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003B4D280 03/18 08:51:23 [3328] ====== Reg Heartbeat loop starts at 08:51:23 ====== 03/18 08:51:23 [3328] HEARTBEAT: Check Point 1 03/18 08:51:23 [3328] Get First Server! 03/18 08:51:23 [3328] Selecting a random server 03/18 08:51:23 [3328] HEARTBEAT: Check Point 2 03/18 08:51:23 [3328] going to post event=EVENT_SERVER_CONNECTING 03/18 08:51:23 [3328] done post event=EVENT_SERVER_CONNECTING, return=0 03/18 08:51:23 [3328] HEARTBEAT: Check Point 3 03/18 08:51:23 [3328] Setting the session timeout on Profile Session to 30000 03/18 08:51:23 [3328] HEARTBEAT: Check Point 4 03/18 08:51:23 [3328] ===Get Index STAGE=== 03/18 08:51:23 [3328] ************CSN=6846 03/18 08:51:23 [3328] Request is: action=12&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&hid=4DF65BF271FD62ECBB2610116877E28C&groupid=17394F65C0A80AA301EC239F43FE44DD&mode=0&hbt=3600&as=6846&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:51:23 [3328] http://192.168.10.163:8014/secars/secars.dll?h=7A390A1D837EFCC3767C70CB27EC6F5DF4D48DAA932EE389D1F50C24FB1D8F2562DD556C44157F35CC79BAE23FF452BEC8A910FC954EDD958A11BEC96BB470F6B3C71CA1B28C206AA88D659DA25C96D1304B936A8EDAD9E4DDD50108959D7F11317349A39F33E9C20735E684D8E7B6EA6F26CCAA040CBA9DCDFFEBA84BAB974FB80487957505EAEACA4ECFBBCC24A9D76145546599F46960B48E5D952425F9BC141F4E68836C584A31078ED052DEBBA3FB3850AD664BF4FB2DEA72C8547FC47E7763EA35D17ADF9EC010BBCB31EDD23C46E111F544221F396E5599789770B33E257105743007A65C730089C773C4053294B265AA072C6D41268E60C37678392CAEFECA4716E5AF487D93D19CA9FFD96F755F748D946244E4F25F3905DBD2B2618B8CE3CBE08B3786D0ED2364852B0FE3856589DEDE7A4C98958D91797AAF48C51BE09B0F8E5B699B1BB2124FEFBD4EA344F4814B22A723243B3B3F0AF030C8F89E5A5D5337F6CE05980546AA82E36040BE84B2746C85F99969D3002C9384A7F2345EE001FA413E97AD953D352F0B8245 03/18 08:51:23 [3328] 8:51:23=>Send HTTP REQUEST 03/18 08:51:23 [3328] 8:51:23=>HTTP REQUEST sent 03/18 08:51:23 [3328] SMS return=200 03/18 08:51:23 [3328] 200=>200 OK 03/18 08:51:23 [3328] Sem-HashKey:=>A9FE7BD35157003F593195AC55F522A7 03/18 08:51:23 [3328] Loading the current mode:1 03/18 08:51:23 [3328] Sem-LANSensor:=>0 03/18 08:51:23 [3328] Sem-Signatue:=>6F077C7A887E6497D96C3D8FBB421AF6D14A58DDF4907E7CA910ACE36FE81071C462CA6ED89F88ADC18B915F809A166D7F1E85C5CAB7F34E7B4FC6F669EFF708F7F48E2E795C0F9A14B85B87485D9902C1EB349B7026A83F684796322E558326DF915F3ABD98D5EDB119D840218C30F31A7B5BE6FFC2D7242FD602EC69E822CE 03/18 08:51:23 [3328] Content Lenght => 1822 03/18 08:51:23 [3328] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 03/18 08:51:23 [3328] Index File: 03/18 08:51:23 [3328] RECEIVE STAGE COMPLETED 03/18 08:51:23 [3328] COMPLETED 03/18 08:51:23 [3328] GetIndexFile handling status: 0 03/18 08:51:23 [3328] Switch Server flag=0 03/18 08:51:23 [3328] HEARTBEAT: Check Point 5.1 03/18 08:51:23 [3328] NextHop Not equal 192.168.10.163,return FALSE 03/18 08:51:23 [3328] NextHop is OnLink with 192.168.12.108,return TRUE 03/18 08:51:23 [3328] Next Hop IP is a local IP or ONLINK:192.168.12.108 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:130318006 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:130317024 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:130317024 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:130315002 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:130313001 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:130313011 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:130213001 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {50B092DE-40D5-4724-971B-D3D90E9EE987} Seq:120726050 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120824025 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:130301011 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:23 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:23 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E8827B4A-4F58-4dea-8C93-07B32A63D1C5} Seq:130115021 03/18 08:51:23 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:24 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:24 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:24 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:24 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:31 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:31 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:130315002 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:31 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:130315002 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=20 03/18 08:51:31 [3328] going to post event=EVENT_LU_REQUIRE_STATUS 03/18 08:51:31 [3328] done post event=EVENT_LU_REQUIRE_STATUS, return=1 03/18 08:51:31 [3328] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:130317024 03/18 08:51:31 [3328] going to post event=EVENT_SERVER_ONLINE 03/18 08:51:31 [3328] done post event=EVENT_SERVER_ONLINE, return=0 03/18 08:51:31 [3328] Reset Heartbeat factor index, hearbeat=3600 seconds 03/18 08:51:31 [3328] HEARTBEAT: Check Point 6 03/18 08:51:31 [3328] ===REQUESTING PLUG-IN OP-STATE: AVMan 03/18 08:51:31 [3328] ===REQUESTING PLUG-IN OP-STATE: GUP 03/18 08:51:31 [3328] ===REQUESTING PLUG-IN OP-STATE: LUMan 03/18 08:51:31 [3328] ===REQUESTING CMC OP-STATE === 03/18 08:51:31 [3328] going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE 03/18 08:51:31 [3328] done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0 03/18 08:51:31 [3328] ReasonDescForFailure*** = Host Integrity check is disabled. 03/18 08:51:31 [3328] ReasonDescForFailure*** = Host Integrity check is disabled. 03/18 08:51:31 [3328] *** = 03/18 08:51:31 [3328] Volatile op-state damper: 0, Interval passed: 11 03/18 08:51:31 [3328] Free memory difference: 18984960, Threshold: 400188825 03/18 08:51:31 [3328] Free disk space difference: 102400, Threshold: 32470747545 03/18 08:51:31 [3328] going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS 03/18 08:51:31 [3328] done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0 03/18 08:51:31 [3328] 24399004002B0211000000]]> 03/18 08:51:31 [3328] ************CSN=6847 03/18 08:51:31 [3328] Request is: action=192&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&as=6847&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:51:31 [3328] http://192.168.10.163:8014/secars/secars.dll?h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the total size=276 03/18 08:51:31 [3328] Done with return code = 200 03/18 08:51:31 [3328] ===UPLOAD STAGE=== 03/18 08:51:31 [3328] going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG 03/18 08:51:31 [3328] done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0 03/18 08:51:31 [3328] ===PREPARE EVENT LOG STAGE=== 03/18 08:51:31 [3328] initialized technology extension processing ok 03/18 08:51:31 [3328] Need to send Event Log Type(0) from id 81 to 81 03/18 08:51:31 [3328] Allow total logs to send=1 03/18 08:51:31 [3328] nSecurityRecordsTotal=0 03/18 08:51:31 [3328] nSecurityRecordsToSend=0 03/18 08:51:31 [3328] nSystemRecordsTotal=1 03/18 08:51:31 [3328] nSystemRecordsToSend=100 03/18 08:51:31 [3328] nTrafficRecordsTotal=0 03/18 08:51:31 [3328] nTrafficRecordsToSend=0 03/18 08:51:31 [3328] nRawRecordsTotal=0 03/18 08:51:31 [3328] nRawRecordsToSend=0 03/18 08:51:31 [3328] nProcessRecordsTotal=0 03/18 08:51:31 [3328] nProcessRecordsToSend=0 03/18 08:51:31 [3328] nLANSensorRecordsTotal=0 03/18 08:51:31 [3328] nLANSensorRecordsToSend=0 03/18 08:51:31 [3328] nTechExtensionRecordsTotal=0 03/18 08:51:31 [3328] nTechExtensionRecordsToSend=0 03/18 08:51:31 [3328] The size of SYSTEM event logs is 411. 03/18 08:51:31 [3328] The size of SYSTEM event logs is 411. 03/18 08:51:31 [3328] Attached total 0 bytes SECURITY event logs. 03/18 08:51:31 [3328] Attached total 0 bytes TRAFFIC event logs. 03/18 08:51:31 [3328] Attached total 0 bytes RAW TRAFFIC event logs. 03/18 08:51:31 [3328] Attached total 0 bytes process event logs. 03/18 08:51:31 [3328] ===COMPRESS EVENT LOG STAGE=== 03/18 08:51:31 [3328] ===SEND EVENT LOG STAGE=== 03/18 08:51:31 [3328] ************CSN=6848 03/18 08:51:31 [3328] Request is: action=195&hostid=E46B6E3EC0A80AA30059CF76AB437F88&chk=A9FE7BD35157003F593195AC55F522A7&ck=FD18A20BF2E1DA046AE73451C023B602&uchk=772CD16E2ECA884E1721C509A5D2A6F5&uck=361A83220933CDA5A1D29607BA84173B&groupid=17394F65C0A80AA301EC239F43FE44DD&as=6848&cn=[hex]616F63686F6137&lun=[hex]41646D696E6973747261746F72&udn=[hex]4A4643532E4F5247 03/18 08:51:31 [3328] http://192.168.10.163:8014/secars/secars.dll?h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eventlog-->SMS, size=356 03/18 08:51:31 [3328] uploads the eventlog to server, size=356 03/18 08:51:31 [3328] Query return code = 200 03/18 08:51:31 [3328] EventLog-->SEM DONE! 03/18 08:51:31 [3328] going to post event=EVENT_SERVER_EVENT_LOG_SENT 03/18 08:51:31 [3328] done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0 03/18 08:51:31 [3328] Communication Mode=1(Pull mode) 03/18 08:51:31 [3328] HEARTBEAT: Check Point 8 03/18 08:51:31 [3328] going to post event=EVENT_SERVER_DISCONNECTED 03/18 08:51:31 [3328] done post event=EVENT_SERVER_DISCONNECTED, return=0 03/18 08:51:31 [3328] ====== IndexHeartbeat Procedure stops at 08:51:31 ====== 03/18 08:51:31 [3328] Set Heartbeat Result= 2 03/18 08:51:31 [3328] Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0 03/18 08:51:31 [3328] Use new configuration 03/18 08:51:31 [3328] HEARTBEAT: Check Point Complete 03/18 08:51:31 [3328] Done, Heartbeat=3600seconds 03/18 08:51:31 [3328] 03/18 08:51:31 [3328] ====== Heartbeat loop stops at 08:51:31 ====== 03/18 08:51:47 [3356] 03/18 08:51:47 [3356] 03/18 08:51:49 [3364] 03/18 08:51:49 [3364] Checking client package: 03/18 08:51:49 [3364] going to post event=EVENT_SERVER_UPGRADE_AVAILABLE 03/18 08:51:49 [3364] done post event=EVENT_SERVER_UPGRADE_AVAILABLE, return=0 03/18 08:51:49 [3364] Set download URL=http://192.168.10.163:8014/ClientPackages\06c909b4f4f59d8e6196a1fa641796d8\Full.zip 03/18 08:51:49 [3364] Set storage path=C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Download\PKG06c909b4f4f59d8e6196a1fa641796d811.0.6200.7541 03/18 08:51:49 [3364] 03/18 08:51:49 [3364] 03/18 08:51:49 [3364] going to post event=EVENT_SERVER_CONNECTING 03/18 08:51:49 [3364] done post event=EVENT_SERVER_CONNECTING, return=0 03/18 08:51:49 [3364] DOWNLOADing new client package 03/18 08:51:49 [3364] Cached install size: 215386629, Package size: 296232341, Space required: 1238624569 03/18 08:51:49 [3364] Setting the session timeout on ClientPackage download session to 2 min. 03/18 08:51:49 [3364] 03/18 08:51:49 [2620] 03/18 08:51:49 [2620] CDownloadManager::mfn_CreateInetSession => Creating System Proxy (default) Session .. 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] CDownloadManager::HttpDownload() Sufficient disk space (1238624569 bytes) is available to start the download. 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] Remaining bytes to download: 296232341 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] Request> http://192.168.10.163:8014/ClientPackages/06c909b4f4f59d8e6196a1fa641796d8/Full.zip 03/18 08:51:50 [2620] Unable to query return content length for SendRequest, 122 03/18 08:51:50 [2620] 03/18 08:51:50 [2620] 03/18 08:52:04 [2620] 03/18 08:52:10 [3996] SyLinkDeleteConfig => Deleting instance: 00000000007E3270 03/18 08:52:10 [3996] going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED 03/18 08:52:10 [3996] done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=17 03/18 08:52:10 [3996] Stopping SyLink module... 03/18 08:52:10 [3996] 8:52:10=>To stop LU download thread 03/18 08:52:10 [3996] 8:52:10=>To stop LU download thread returned 03/18 08:52:10 [3996] 8:52:10=>To stop MAIN thread 03/18 08:52:10 [3328] Heartbeat is NOT enabled.. 03/18 08:52:10 [3328] stopping 03/18 08:52:10 [3328] Thread is stopping.. 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] Client package file download HTTP status:200. Win32 Error status: 0 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] Backoff wait index: 0 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] 03/18 08:52:10 [2620] New SSA package download as a single file is completed. 03/18 08:52:10 [2620]