12/14 21:57:49 [2964] ~~~Sylink log started. (SEP Product Version in registry: 11.0.6005.562, Sylink File Version: 11.0.6005.440) 12/14 21:57:49 [2964] Stored HostGUID=E6CB0798A9FE900B0039DA8A8266FB63; outlen=16 12/14 21:57:49 [2964] Stored UserGuid=0; outlen=2 12/14 21:57:49 [2964] Sygate-SSN=1891 12/14 21:57:49 [2964] Read CSN=1892 12/14 21:57:49 [2964] Sygate-SSN=15 12/14 21:57:49 [2964] Read CSN=16 12/14 21:57:49 [2964] Product Type=1,Major Ver=6,Minor Ver=1,Platform ID=2,OSType=17170690 12/14 21:57:49 [2964] OS=Windows 7 Ultimate Edition; number=6.1.7600 12/14 21:57:49 [2964] SyLinkCreateInstance => Instance created: 02A30008 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK 12/14 21:57:49 [2964] :Netport Count=1 12/14 21:57:49 [2964] :NicInfo 12/14 21:57:49 [2964] SyLinkCreateConfig => Created instance: 02A289C8 12/14 21:57:49 [2964] UseNewConfig => Created m_hNewConfig: 02A289C8 12/14 21:57:49 [2964] Importing ConfigObject: 0299F4E0 into: 02A289C8 12/14 21:57:49 [2964] Importing ConfigObject: 0299F4E0 into: 029A0788 12/14 21:57:49 [2964] stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED 12/14 21:57:49 [2964] SSA packageType is set as 105 12/14 21:57:49 [2964] SyLinkDeleteConfig => Deleting instance: 0299F4E0 12/14 21:57:49 [2964] HI status is changed to=3; reason=105; rule=Host Integrity check is disabled. Host Integrity policy has been disabled by the administrator. 12/14 21:57:51 [2964] SyLinkCreateConfig => Created instance: 03828DB0 12/14 21:57:51 [2964] SetCurLocationName: Name is set to - Default 12/14 21:57:51 [2964] SetCurLocationID: ID is set to - 1EB86B32A9FE900B01D3A7627BF12EA5 12/14 21:57:51 [2964] SyLinkCreateConfig => Created instance: 0386B4D0 12/14 21:57:51 [2964] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0 12/14 21:57:51 [2964] Importing ConfigObject: 0386B4D0 into: 02A289C8 12/14 21:57:51 [2964] Importing ConfigObject: 0386B4D0 into: 029A0788 12/14 21:57:51 [2964] stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED 12/14 21:57:51 [2964] SyLinkDeleteConfig => Deleting instance: 0386B4D0 12/14 21:57:51 [2964] SyLinkDeleteConfig => Deleting instance: 03828DB0 12/14 21:57:51 [3656] Manually assigned heartbeat=1 seconds 12/14 21:57:51 [3296] Manually assigned heartbeat=1 seconds 12/14 21:57:52 [2964] 12/14 21:57:52 [2964] 12/14 21:57:52 [2964] The last server used was '192.168.100.249' 12/14 21:57:52 [2964] 12/14 21:57:52 [2964] CUpdateConfig::Dump 12/14 21:57:52 [2964] 12/14 21:57:52 [2964] msz_DomainName is taken from szDomainName 12/14 21:57:52 [2964] DomainName (Final)=wlchina.local 12/14 21:57:52 [2964] Get Hardware ID 12/14 21:57:59 [2964] Hardware ID assigned: 05577E9287E059F3BA38391DBF56C709 12/14 21:57:59 [2964] Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87 12/14 21:57:59 [2964] Unable to create Session with 'No Proxies' settings - Error Code: 87 12/14 21:57:59 [2964] Previous LU data was not loaded or found 12/14 21:57:59 [1856] Manually assigned heartbeat=198 seconds 12/14 21:57:59 [1528] Thread is about to begin.. 12/14 21:57:59 [1856] Successfully created the heartbeat thread 12/14 21:57:59 [2964] Started, contact SMS every 300 seconds 12/14 21:57:59 [2964] going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED 12/14 21:57:59 [2964] done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0 12/14 21:57:59 [2964] 12/14 21:58:00 [1528] ====== Heartbeat loop starts at 21:58:00 ====== 12/14 21:58:00 [2964] Received new User/Domain from SMC.. User: WLdev5 User Domain: WLCHINA 12/14 21:58:00 [2964] Getting RDNS Domain Name (user domain in AD setup).. 12/14 21:58:00 [2964] DNS domain=WLCHINA.LOCAL 12/14 21:58:00 [2964] Setting the User Domain to RDNS Domain .. 12/14 21:58:00 [2964] Logged in user info set to: WLCHINA.LOCAL/WLdev5 12/14 21:58:00 [2964] Marking User Change Notify to redo registration.. 12/14 21:58:00 [3656] SyLinkCreateConfig => Created instance: 03828DB0 12/14 21:58:00 [3656] Importing ConfigObject: 029A0788 into: 03828DB0 12/14 21:58:00 [3656] SyLinkDeleteConfig => Deleting instance: 03828DB0 12/14 21:58:00 [1528] :Netport Count=1 12/14 21:58:00 [1528] :NicInfo 12/14 21:58:01 [1528] :CH=A42F065CA9FE900B013B425F110128DC1WLDEV5-PCwlchina.local05577E9287E059F3BA38391DBF56C709 12/14 21:58:01 [1528] :CHKey=539FCA2741E1B62BA67F2EB7946CC35B 12/14 21:58:01 [1528] :C=A42F065CA9FE900B013B425F110128DC1WLDEV5-PCwlchina.local 12/14 21:58:01 [1528] :CKey=E6C21E15DA44A1C68F3941471D16E3AB 12/14 21:58:01 [1528] :UCH=A42F065CA9FE900B013B425F110128DC0WLdev5WLCHINA.LOCALWLDEV5-PCwlchina.local05577E9287E059F3BA38391DBF56C709 12/14 21:58:01 [1528] :UCHKey=BA7C18DCA253BEF6EE5539A1E1A9B64B 12/14 21:58:01 [1528] :UC=A42F065CA9FE900B013B425F110128DC0WLdev5WLCHINA.LOCALWLDEV5-PCwlchina.local 12/14 21:58:01 [1528] :UCKey=0D9F2190C77DDBAE79E6C45E10A6AE25 12/14 21:58:01 [1528] HardwareID=05577E9287E059F3BA38391DBF56C709 12/14 21:58:01 [1528] CHKey=539FCA2741E1B62BA67F2EB7946CC35B 12/14 21:58:01 [1528] CKey=E6C21E15DA44A1C68F3941471D16E3AB 12/14 21:58:01 [1528] UCHKey=BA7C18DCA253BEF6EE5539A1E1A9B64B 12/14 21:58:01 [1528] UCKey=0D9F2190C77DDBAE79E6C45E10A6AE25 12/14 21:58:01 [1528] Set heartbeat event 12/14 21:58:01 [1528] Use new configuration 12/14 21:58:01 [1528] ====== Reg Heartbeat loop starts at 21:58:01 ====== 12/14 21:58:01 [1528] HEARTBEAT: Check Point 1 12/14 21:58:01 [1528] HEARTBEAT: Check Point 2 12/14 21:58:01 [1528] going to post event=EVENT_SERVER_CONNECTING 12/14 21:58:01 [1528] done post event=EVENT_SERVER_CONNECTING, return=0 12/14 21:58:01 [1528] HEARTBEAT: Check Point 3 12/14 21:58:01 [1528] Setting the session timeout on Profile Session (Registration) to 30000 12/14 21:58:01 [1528] HEARTBEAT: Check Point 4 12/14 21:58:01 [1528] ===Registration STAGE=== 12/14 21:58:01 [1528] logon id (domain/user)=WLCHINA.LOCAL/WLdev5 12/14 21:58:01 [1528] Loading current group:My Company\China Users 12/14 21:58:01 [1528] Loading current mode:1 12/14 21:58:01 [1528] Loading preferred group:My Company\Default Group 12/14 21:58:01 [1528] Loading preferred mode:1 12/14 21:58:01 [1528] It will remember nothing, PreferredGroup is My Company\Default Group, PreferredMode is 1 12/14 21:58:01 [1528] XML data: 12/14 21:58:01 [1528] [MakeRegisterData] registration Hardware Key=05577E9287E059F3BA38391DBF56C709 12/14 21:58:01 [1528] ************Reg CSN=17 12/14 21:58:01 [1528] Request is: s_origin_length: 1264 s_session_id: 05577E9287E059F3BA38391DBF56C709 Sygate-SSN: 17 12/14 21:58:01 [1528] http://192.168.100.249:8014 [encrypted data] 12/14 21:58:01 [1528] 21:58:1=>Send HTTP REQUEST 12/14 21:58:02 [1528] 21:58:2=>HTTP REQUEST sent 12/14 21:58:02 [1528] 21:58:2=>QUERY return code 12/14 21:58:02 [1528] 21:58:2=>QUERY return code completed 12/14 21:58:02 [1528] SMS return=200 12/14 21:58:02 [1528] 200=>200 OK 12/14 21:58:02 [1528] Content Lenght => 350 12/14 21:58:02 [1528] HTTP returns status code=200 12/14 21:58:02 [1528] RECEIVE STAGE COMPLETED 12/14 21:58:02 [1528] COMPLETED, returned 0 12/14 21:58:02 [1528] NextHop Not equal 192.168.100.249,return FALSE 12/14 21:58:02 [1528] NextHop is OnLink with 192.168.2.149,return TRUE 12/14 21:58:02 [1528] Next Hop IP is a local IP or ONLINK:192.168.2.149 12/14 21:58:02 [1528] HEARTBEAT: Check Point 5.1 12/14 21:58:02 [1528] Manually assigned heartbeat=3 seconds 12/14 21:58:02 [1528] going to post event=EVENT_SERVER_ONLINE 12/14 21:58:02 [1528] done post event=EVENT_SERVER_ONLINE, return=0 12/14 21:58:02 [1528] HEARTBEAT: Check Point 8 12/14 21:58:02 [1528] going to post event=EVENT_SERVER_DISCONNECTED 12/14 21:58:02 [1528] done post event=EVENT_SERVER_DISCONNECTED, return=0 12/14 21:58:02 [1528] ====== Registration Procedure stops at 21:58:02 ====== 12/14 21:58:02 [1528] HEARTBEAT: Check Point 10 12/14 21:58:03 [1528] HEARTBEAT: Check Point Complete 12/14 21:58:03 [1528] Done, Heartbeat=3seconds 12/14 21:58:03 [1528] ====== Heartbeat loop stops at 21:58:03 ====== 12/14 21:58:07 [1528] ====== Heartbeat loop starts at 21:58:07 ====== 12/14 21:58:07 [1528] :Netport Count=1 12/14 21:58:07 [1528] :NicInfo 12/14 21:58:07 [1528] :CH=A42F065CA9FE900B013B425F110128DC1WLDEV5-PCwlchina.local05577E9287E059F3BA38391DBF56C709 12/14 21:58:07 [1528] :CHKey=539FCA2741E1B62BA67F2EB7946CC35B 12/14 21:58:07 [1528] :C=A42F065CA9FE900B013B425F110128DC1WLDEV5-PCwlchina.local 12/14 21:58:07 [1528] :CKey=E6C21E15DA44A1C68F3941471D16E3AB 12/14 21:58:07 [1528] :UCH=A42F065CA9FE900B013B425F110128DC0WLdev5WLCHINA.LOCALWLDEV5-PCwlchina.local05577E9287E059F3BA38391DBF56C709 12/14 21:58:07 [1528] :UCHKey=BA7C18DCA253BEF6EE5539A1E1A9B64B 12/14 21:58:07 [1528] :UC=A42F065CA9FE900B013B425F110128DC0WLdev5WLCHINA.LOCALWLDEV5-PCwlchina.local 12/14 21:58:07 [1528] :UCKey=0D9F2190C77DDBAE79E6C45E10A6AE25 12/14 21:58:07 [1528] HardwareID=05577E9287E059F3BA38391DBF56C709 12/14 21:58:07 [1528] CHKey=539FCA2741E1B62BA67F2EB7946CC35B 12/14 21:58:07 [1528] CKey=E6C21E15DA44A1C68F3941471D16E3AB 12/14 21:58:07 [1528] UCHKey=BA7C18DCA253BEF6EE5539A1E1A9B64B 12/14 21:58:07 [1528] UCKey=0D9F2190C77DDBAE79E6C45E10A6AE25 12/14 21:58:07 [1528] Set heartbeat event 12/14 21:58:07 [1528] Use new configuration 12/14 21:58:07 [1528] 12/14 21:58:07 [1528] Got ConfigObject to proceed the operation.. pSylinkConfig: 029A0788 12/14 21:58:07 [1528] ====== Reg Heartbeat loop starts at 21:58:07 ====== 12/14 21:58:08 [1528] HEARTBEAT: Check Point 1 12/14 21:58:08 [1528] Get First Server! 12/14 21:58:08 [1528] HEARTBEAT: Check Point 2 12/14 21:58:08 [1528] going to post event=EVENT_SERVER_CONNECTING 12/14 21:58:08 [1528] done post event=EVENT_SERVER_CONNECTING, return=0 12/14 21:58:08 [1528] HEARTBEAT: Check Point 3 12/14 21:58:08 [1528] Setting the session timeout on Profile Session to 30000 12/14 21:58:08 [1528] HEARTBEAT: Check Point 4 12/14 21:58:08 [1528] ===Get Index STAGE=== 12/14 21:58:08 [1528] ************CSN=1893 12/14 21:58:08 [1528] Request is: action=12&hostid=E6CB0798A9FE900B0039DA8A8266FB63&chk=539FCA2741E1B62BA67F2EB7946CC35B&ck=E6C21E15DA44A1C68F3941471D16E3AB&uchk=BA7C18DCA253BEF6EE5539A1E1A9B64B&uck=0D9F2190C77DDBAE79E6C45E10A6AE25&hid=05577E9287E059F3BA38391DBF56C709&groupid=A42F065CA9FE900B013B425F110128DC&mode=0&hbt=300&as=1893&cn=[hex]574C444556352D5043&lun=[hex]574C64657635&udn=[hex]574C4348494E412E4C4F43414C 12/14 21:58:08 [1528] http://192.168.100.249:8014/secars/secars.dll?h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end HTTP REQUEST 12/14 21:58:09 [1528] 21:58:9=>HTTP REQUEST sent 12/14 21:58:09 [1528] SMS return=200 12/14 21:58:09 [1528] 200=>200 OK 12/14 21:58:09 [1528] Sem-HashKey:=>539FCA2741E1B62BA67F2EB7946CC35B 12/14 21:58:09 [1528] Loading the current mode:1 12/14 21:58:09 [1528] Sem-LANSensor:=>0 12/14 21:58:09 [1528] Sem-Signatue:=>592657623DE2493F361AD1496647BD9D82BA3D2671437FEC96CB2686F4E04A353B8591DC8906D4E06EA42DB1142BE596CE4C43AB6F89A2CAB82A425C005203729513EDEC91A1DA4C6099D1579A9EDCB16AD59CA48B14B1A88462C68CAC768C8A3CF582905FD5BDB2D406B760D4852EC2B0496BEBCD3F08A596F3E5AA42825525 12/14 21:58:09 [1528] Content Lenght => 1360 12/14 21:58:09 [1528] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 12/14 21:58:09 [1528] Index File: 12/14 21:58:09 [1528] Parser Index File! 12/14 21:58:09 [1528] RECEIVE STAGE COMPLETED 12/14 21:58:09 [1528] COMPLETED 12/14 21:58:09 [1528] GetIndexFile handling status: 0 12/14 21:58:09 [1528] Switch Server flag=0 12/14 21:58:09 [1528] HEARTBEAT: Check Point 5.1 12/14 21:58:09 [1528] NextHop Not equal 192.168.100.249,return FALSE 12/14 21:58:09 [1528] NextHop is OnLink with 192.168.2.149,return TRUE 12/14 21:58:09 [1528] Next Hop IP is a local IP or ONLINK:192.168.2.149 12/14 21:58:09 [1528] Saved IP Address: 192.168.100.249 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/14 21:58:09 [1528] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:101210001 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/14 21:58:09 [1528] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:101208002 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/14 21:58:09 [1528] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/14 21:58:09 [1528] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:101213020 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/14 21:58:09 [1528] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:101213020 12/14 21:58:09 [1528] going to post event=EVENT_LU_REQUIRE_STATUS 12/14 21:58:09 [1528] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/14 21:58:09 [1528] going to post event=EVENT_SERVER_ONLINE 12/14 21:58:09 [1528] done post event=EVENT_SERVER_ONLINE, return=0 12/14 21:58:09 [1528] Reset Heartbeat factor index, hearbeat=300 seconds 12/14 21:58:09 [1528] HEARTBEAT: Check Point 6 12/14 21:58:09 [1528] ===REQUESTING PLUG-IN OP-STATE: AVMan 12/14 21:58:10 [1528] ===REQUESTING PLUG-IN OP-STATE: GUP 12/14 21:58:10 [1528] ===REQUESTING PLUG-IN OP-STATE: LUMan 12/14 21:58:10 [1528] ===REQUESTING CMC OP-STATE === 12/14 21:58:10 [1528] going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE 12/14 21:58:10 [1528] done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0 12/14 21:58:10 [1528] ReasonDescForFailure*** = Host Integrity check is disabled. 12/14 21:58:10 [1528] ReasonDescForFailure*** = Host Integrity check is disabled. 12/14 21:58:10 [1528] *** = 12/14 21:58:10 [1528] Volatile op-state damper: 0, Interval passed: 1292335090 12/14 21:58:10 [1528] Free memory difference: 206700544, Threshold: 0 12/14 21:58:10 [1528] Free disk space difference: 26144247808, Threshold: 0 12/14 21:58:10 [1528] going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS 12/14 21:58:10 [1528] done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0 12/14 21:58:10 [1528] 1333489950280B0D000000000000000000280B0D040002711027663362000000000000001.2.57208961:196610]]> ]]>1291889406198]]> ]]> ]]> 12/14 21:58:10 [1528] ************CSN=1894 12/14 21:58:10 [1528] Request is: action=192&hostid=E6CB0798A9FE900B0039DA8A8266FB63&chk=539FCA2741E1B62BA67F2EB7946CC35B&ck=E6C21E15DA44A1C68F3941471D16E3AB&uchk=BA7C18DCA253BEF6EE5539A1E1A9B64B&uck=0D9F2190C77DDBAE79E6C45E10A6AE25&as=1894&cn=[hex]574C444556352D5043&lun=[hex]574C64657635&udn=[hex]574C4348494E412E4C4F43414C 12/14 21:58:10 [1528] http://192.168.100.249:8014/secars/secars.dll?h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the total size=1524 12/14 21:58:11 [1528] Done with return code = 200 12/14 21:58:11 [1528] ===UPLOAD STAGE=== 12/14 21:58:11 [1528] going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG 12/14 21:58:11 [1528] done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0 12/14 21:58:11 [1528] ===PREPARE EVENT LOG STAGE=== 12/14 21:58:11 [1528] initialized technology extension processing ok 12/14 21:58:11 [1528] Need to send Event Log Type(0) from id 62 to 72 12/14 21:58:11 [1528] Need to send Event Log Type(2) from id 1183 to 1185 12/14 21:58:11 [1528] Allow total logs to send=14 12/14 21:58:11 [1528] nSecurityRecordsTotal=0 12/14 21:58:11 [1528] nSecurityRecordsToSend=0 12/14 21:58:11 [1528] nSystemRecordsTotal=11 12/14 21:58:11 [1528] nSystemRecordsToSend=78 12/14 21:58:11 [1528] nTrafficRecordsTotal=3 12/14 21:58:11 [1528] nTrafficRecordsToSend=21 12/14 21:58:11 [1528] nRawRecordsTotal=0 12/14 21:58:11 [1528] nRawRecordsToSend=0 12/14 21:58:11 [1528] nProcessRecordsTotal=0 12/14 21:58:11 [1528] nProcessRecordsToSend=0 12/14 21:58:11 [1528] nLANSensorRecordsTotal=0 12/14 21:58:11 [1528] nLANSensorRecordsToSend=0 12/14 21:58:11 [1528] nTechExtensionRecordsTotal=0 12/14 21:58:11 [1528] nTechExtensionRecordsToSend=0 12/14 21:58:11 [1528] The size of SYSTEM event logs is 4548. 12/14 21:58:11 [1528] The size of SYSTEM event logs is 4548. 12/14 21:58:11 [1528] Attached total 0 bytes SECURITY event logs. 12/14 21:58:11 [1528] Attached total 1437 bytes TRAFFIC event logs. 12/14 21:58:11 [1528] Attached total 1437 bytes TRAFFIC event logs. 12/14 21:58:11 [1528] Attached total 0 bytes RAW TRAFFIC event logs. 12/14 21:58:11 [1528] Attached total 0 bytes process event logs. 12/14 21:58:11 [1528] ===COMPRESS EVENT LOG STAGE=== 12/14 21:58:11 [1528] ===SEND EVENT LOG STAGE=== 12/14 21:58:11 [1528] ************CSN=1895 12/14 21:58:11 [1528] Request is: action=195&hostid=E6CB0798A9FE900B0039DA8A8266FB63&chk=539FCA2741E1B62BA67F2EB7946CC35B&ck=E6C21E15DA44A1C68F3941471D16E3AB&uchk=BA7C18DCA253BEF6EE5539A1E1A9B64B&uck=0D9F2190C77DDBAE79E6C45E10A6AE25&groupid=A42F065CA9FE900B013B425F110128DC&as=1895&cn=[hex]574C444556352D5043&lun=[hex]574C64657635&udn=[hex]574C4348494E412E4C4F43414C 12/14 21:58:11 [1528] http://192.168.100.249:8014/secars/secars.dll?h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eventlog-->SMS, size=1146 12/14 21:58:12 [1528] uploads the eventlog to server, size=1146 12/14 21:58:12 [1528] Query return code = 200 12/14 21:58:12 [1528] EventLog-->SEM DONE! 12/14 21:58:12 [1528] going to post event=EVENT_SERVER_EVENT_LOG_SENT 12/14 21:58:12 [1528] done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0 12/14 21:58:12 [1528] Communication Mode=0(Push Mode) 12/14 21:58:12 [1528] Enter Push Session 12/14 21:58:12 [1528] Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000 12/14 21:58:12 [1528] Push Connecton! 12/14 21:58:12 [1528] ************CSN=1896 12/14 21:58:12 [1528] Request is: action=128&hostid=E6CB0798A9FE900B0039DA8A8266FB63&chk=539FCA2741E1B62BA67F2EB7946CC35B&ck=E6C21E15DA44A1C68F3941471D16E3AB&uchk=BA7C18DCA253BEF6EE5539A1E1A9B64B&uck=0D9F2190C77DDBAE79E6C45E10A6AE25&groupid=A42F065CA9FE900B013B425F110128DC&mode=0&as=1896 12/14 21:58:12 [1528] http://192.168.100.249:8014/secars/secars.dll?h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