12/11 08:08:47 [3168] ~~~Sylink log started. (SEP Product Version in registry: 11.0.6005.562, Sylink File Version: 11.0.6005.440) 12/11 08:08:47 [3168] Stored HostGUID=B34C8D2E0AFEC89701A9983693CAC504; outlen=16 12/11 08:08:47 [3168] Stored UserGuid=0; outlen=2 12/11 08:08:47 [3168] Sygate-SSN=223688 12/11 08:08:47 [3168] Read CSN=223689 12/11 08:08:47 [3168] Sygate-SSN=414 12/11 08:08:47 [3168] Read CSN=415 12/11 08:08:47 [3168] Product Type=1,Major Ver=5,Minor Ver=1,Platform ID=2,OSType=17105154 12/11 08:08:47 [3168] OS=Windows XP Professional ; number=5.1.2600 12/11 08:08:47 [3168] SyLinkCreateInstance => Instance created: 01D7E018 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK 12/11 08:08:47 [3168] :Netport Count=1 12/11 08:08:47 [3168] :NicInfo 12/11 08:08:47 [3168] SyLinkCreateConfig => Created instance: 01D9F310 12/11 08:08:47 [3168] UseNewConfig => Created m_hNewConfig: 01D9F310 12/11 08:08:47 [3168] Importing ConfigObject: 01D9B3F8 into: 01D9F310 12/11 08:08:47 [3168] Importing ConfigObject: 01D9B3F8 into: 01D9C6A0 12/11 08:08:47 [3168] stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED 12/11 08:08:47 [3168] SSA packageType is set as 105 12/11 08:08:47 [3168] SyLinkDeleteConfig => Deleting instance: 01D9B3F8 12/11 08:08:47 [3168] HI status is changed to=3; reason=105; rule=Host Integrity check is disabled. Host Integrity policy has been disabled by the administrator. 12/11 08:08:47 [3168] SyLinkCreateConfig => Created instance: 02FB2518 12/11 08:08:47 [3168] SetCurLocationName: Name is set to - Default 12/11 08:08:47 [3168] SetCurLocationID: ID is set to - 3AF4B0520AFEC8970038B4AFD11AA408 12/11 08:08:47 [3168] SyLinkCreateConfig => Created instance: 02FB37C0 12/11 08:08:47 [3168] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0 12/11 08:08:47 [3168] Importing ConfigObject: 02FB37C0 into: 01D9F310 12/11 08:08:47 [3168] Importing ConfigObject: 02FB37C0 into: 01D9C6A0 12/11 08:08:47 [3168] stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED 12/11 08:08:47 [3168] SyLinkDeleteConfig => Deleting instance: 02FB37C0 12/11 08:08:48 [3168] SyLinkDeleteConfig => Deleting instance: 02FB2518 12/11 08:08:48 [3168] 12/11 08:08:48 [3168] 12/11 08:08:48 [3168] The last server used was '10.254.200.151' 12/11 08:08:48 [3168] 12/11 08:08:48 [3168] CUpdateConfig::Dump 12/11 08:08:48 [3168] 12/11 08:08:48 [3168] msz_DomainName is taken from szDomainName 12/11 08:08:48 [3168] DomainName (Final)=domain.org 12/11 08:08:48 [3168] Get Hardware ID 12/11 08:08:48 [3168] Hardware ID assigned: BB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:48 [3168] Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87 12/11 08:08:48 [3168] Unable to create Session with 'No Proxies' settings - Error Code: 87 12/11 08:08:48 [3168] Previous LU data was not loaded or found 12/11 08:08:48 [3348] Thread is about to begin.. 12/11 08:08:48 [2556] Successfully created the heartbeat thread 12/11 08:08:48 [3168] Started, contact SMS every 300 seconds 12/11 08:08:48 [3168] going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED 12/11 08:08:48 [3168] done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0 12/11 08:08:48 [3168] 12/11 08:08:49 [3168] Received new User/Domain from SMC.. User: user User Domain: SCHC 12/11 08:08:49 [3168] Getting RDNS Domain Name (user domain in AD setup).. 12/11 08:08:49 [3168] DNS domain=domain.org 12/11 08:08:49 [3168] Setting the User Domain to RDNS Domain .. 12/11 08:08:49 [3168] Logged in user info set to: domain.org/user 12/11 08:08:49 [3168] Marking User Change Notify to redo registration.. 12/11 08:08:49 [3348] ====== Heartbeat loop starts at 08:08:49 ====== 12/11 08:08:49 [3348] :Netport Count=1 12/11 08:08:49 [3348] :NicInfo 12/11 08:08:50 [3348] :CH=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:50 [3348] :CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:08:50 [3348] :C=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.org 12/11 08:08:50 [3348] :CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:08:50 [3348] :UCH=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:50 [3348] :UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:08:50 [3348] :UC=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.org 12/11 08:08:50 [3348] :UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:08:50 [3348] HardwareID=BB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:50 [3348] CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:08:50 [3348] CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:08:50 [3348] UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:08:50 [3348] UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:08:50 [3348] Set heartbeat event 12/11 08:08:50 [3348] Use new configuration 12/11 08:08:50 [3348] ====== Reg Heartbeat loop starts at 08:08:50 ====== 12/11 08:08:50 [3040] SyLinkCreateConfig => Created instance: 02FB2518 12/11 08:08:50 [3040] Importing ConfigObject: 01D9C6A0 into: 02FB2518 12/11 08:08:50 [3040] SyLinkDeleteConfig => Deleting instance: 02FB2518 12/11 08:08:50 [3348] HEARTBEAT: Check Point 1 12/11 08:08:50 [3348] HEARTBEAT: Check Point 2 12/11 08:08:50 [3348] going to post event=EVENT_SERVER_CONNECTING 12/11 08:08:50 [3348] done post event=EVENT_SERVER_CONNECTING, return=0 12/11 08:08:50 [3348] HEARTBEAT: Check Point 3 12/11 08:08:50 [3348] Setting the session timeout on Profile Session (Registration) to 30000 12/11 08:08:50 [3348] HEARTBEAT: Check Point 4 12/11 08:08:50 [3348] ===Registration STAGE=== 12/11 08:08:50 [3348] logon id (domain/user)=domain.org/user 12/11 08:08:50 [3348] Loading current group:My Company\Happy Valley 12/11 08:08:50 [3348] Loading current mode:1 12/11 08:08:50 [3348] Loading preferred group:My Company 12/11 08:08:50 [3348] Loading preferred mode:1 12/11 08:08:50 [3348] It will remember nothing, PreferredGroup is My Company, PreferredMode is 1 12/11 08:08:50 [3348] XML data: 12/11 08:08:50 [3348] [MakeRegisterData] registration Hardware Key=BB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:50 [3348] ************Reg CSN=416 12/11 08:08:50 [3348] Request is: s_origin_length: 1278 s_session_id: BB114AC0D8BF5A42B93E447318B06A7C Sygate-SSN: 416 12/11 08:08:50 [3348] http://10.254.200.151:8014 [encrypted data] 12/11 08:08:50 [3348] 8:8:50=>Send HTTP REQUEST 12/11 08:08:51 [3348] 8:8:51=>HTTP REQUEST sent 12/11 08:08:51 [3348] 8:8:51=>QUERY return code 12/11 08:08:51 [3348] 8:8:51=>QUERY return code completed 12/11 08:08:51 [3348] SMS return=200 12/11 08:08:51 [3348] 200=>200 OK 12/11 08:08:51 [3348] Content Lenght => 350 12/11 08:08:51 [3348] HTTP returns status code=200 12/11 08:08:51 [3348] RECEIVE STAGE COMPLETED 12/11 08:08:51 [3348] COMPLETED, returned 0 12/11 08:08:51 [3348] NextHop Not equal 10.254.200.151,return FALSE 12/11 08:08:51 [3348] NextHop is OnLink with 10.254.101.147,return TRUE 12/11 08:08:51 [3348] Next Hop IP is a local IP or ONLINK:10.254.101.147 12/11 08:08:51 [3348] HEARTBEAT: Check Point 5.1 12/11 08:08:51 [3348] Manually assigned heartbeat=3 seconds 12/11 08:08:51 [3348] going to post event=EVENT_SERVER_ONLINE 12/11 08:08:51 [3348] done post event=EVENT_SERVER_ONLINE, return=0 12/11 08:08:51 [3348] HEARTBEAT: Check Point 8 12/11 08:08:51 [3348] going to post event=EVENT_SERVER_DISCONNECTED 12/11 08:08:51 [3348] done post event=EVENT_SERVER_DISCONNECTED, return=0 12/11 08:08:51 [3348] ====== Registration Procedure stops at 08:08:51 ====== 12/11 08:08:51 [3348] HEARTBEAT: Check Point 10 12/11 08:08:51 [3348] HEARTBEAT: Check Point Complete 12/11 08:08:51 [3348] Done, Heartbeat=3seconds 12/11 08:08:51 [3348] ====== Heartbeat loop stops at 08:08:51 ====== 12/11 08:08:55 [3348] ====== Heartbeat loop starts at 08:08:55 ====== 12/11 08:08:56 [3348] :Netport Count=1 12/11 08:08:56 [3348] :NicInfo 12/11 08:08:56 [3348] :CH=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:56 [3348] :CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:08:56 [3348] :C=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.org 12/11 08:08:56 [3348] :CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:08:56 [3348] :UCH=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:56 [3348] :UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:08:56 [3348] :UC=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.org 12/11 08:08:56 [3348] :UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:08:56 [3348] HardwareID=BB114AC0D8BF5A42B93E447318B06A7C 12/11 08:08:56 [3348] CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:08:56 [3348] CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:08:56 [3348] UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:08:56 [3348] UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:08:56 [3348] Set heartbeat event 12/11 08:08:56 [3348] Use new configuration 12/11 08:08:56 [3348] 12/11 08:08:56 [3348] Got ConfigObject to proceed the operation.. pSylinkConfig: 01D9C6A0 12/11 08:08:56 [3348] ====== Reg Heartbeat loop starts at 08:08:56 ====== 12/11 08:08:56 [3348] HEARTBEAT: Check Point 1 12/11 08:08:56 [3348] Get First Server! 12/11 08:08:56 [3348] HEARTBEAT: Check Point 2 12/11 08:08:56 [3348] going to post event=EVENT_SERVER_CONNECTING 12/11 08:08:56 [3348] done post event=EVENT_SERVER_CONNECTING, return=0 12/11 08:08:56 [3348] HEARTBEAT: Check Point 3 12/11 08:08:56 [3348] Setting the session timeout on Profile Session to 30000 12/11 08:08:56 [3348] HEARTBEAT: Check Point 4 12/11 08:08:56 [3348] ===Get Index STAGE=== 12/11 08:08:56 [3348] ************CSN=223690 12/11 08:08:56 [3348] Request is: action=12&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&hid=BB114AC0D8BF5A42B93E447318B06A7C&groupid=8C4B35980AFEC8970053C0FADA806CA1&mode=0&hbt=300&as=223690&cn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:08:56 [3348] http://10.254.200.151:8014/secars/secars.dll?h=40D248828C1ADDA03CEE358316B6B332C5D9D1567BCEB08B8A53DB212113937BD93500AAB644C4016C3B9B5D66F21D9CF5A3CC25FF65757484CAE6E1F30B4CA3BCC6851295786693B61716C20E0E9981568EDB73F6E76F9480C8F2EBA3F38B0A79F2C5C4E14EAA1E647F8FF41E65B71D8D61ACB4CE42AC773F0F39E4C0622AC20770082454B6B3883F8B4B18EB91567B9AFF4D5FBE9A06BBBCE87015C12AACFD5B83C10304B9248BCA6A9802C86201E0EA0EFD0BE954E8F896F7314E5AF73778885DB7926592C9DA8952571D08A495F9F890D142FE07B1AE7E37CFD7A1228E84C93B57885CAF1D27CDF1BBBB2BE1F6D919884448FA53DF04BB31B7EE98165EEB10CF9C0EA95A9A271F1C39401F9EE8AA0FE3DD814E0F49F203276297D987C630C5B86E36903D4E056D22D23B53EFF07D2C1E3A27FB2F576883F5C9700675C48FE9E37B69456AAB49039BF7098FDFACA36C3B33137D0B1A4379344CE2ECFCE396D9838B69E52ADE2E7760B42496C1C01839CB82D4A5096DD85DC3C8A6E4E977FDE7A490989435CAEE3B2BBDFDF9A654E2 12/11 08:08:56 [3348] 8:8:56=>Send HTTP REQUEST 12/11 08:08:56 [3348] 8:8:56=>HTTP REQUEST sent 12/11 08:08:56 [3348] SMS return=200 12/11 08:08:56 [3348] 200=>200 OK 12/11 08:08:56 [3348] Sem-HashKey:=>DF23E56860F46A6439E05B862E463344 12/11 08:08:56 [3348] Loading the current mode:1 12/11 08:08:56 [3348] Sem-LANSensor:=>0 12/11 08:08:56 [3348] Sem-Signatue:=>0264C008A788CE926813D263E09D84B279760018B635776F549377E132D9D226FD939D54D52C4EE69F63D9DB84ABB6DCFE498890E02F1C5A6979B805CC5ADACB85FCFA4DC986034A774B6AFE62C7A24408987B12C0D31D49F6483CFD892F37A95D9E6B65841BC054F8231547469F4394D821FAAEC9DDFA1A13E7C67F89F7041B 12/11 08:08:56 [3348] Content Lenght => 1372 12/11 08:08:56 [3348] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 12/11 08:08:56 [3348] Index File: 12/11 08:08:56 [3348] Parser Index File! 12/11 08:08:56 [3348] RECEIVE STAGE COMPLETED 12/11 08:08:56 [3348] COMPLETED 12/11 08:08:56 [3348] GetIndexFile handling status: 0 12/11 08:08:56 [3348] Switch Server flag=0 12/11 08:08:56 [3348] HEARTBEAT: Check Point 5.1 12/11 08:08:56 [3348] NextHop Not equal 10.254.200.151,return FALSE 12/11 08:08:56 [3348] NextHop is OnLink with 10.254.101.147,return TRUE 12/11 08:08:56 [3348] Next Hop IP is a local IP or ONLINK:10.254.101.147 12/11 08:08:56 [3348] Saved IP Address: 10.254.200.151 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:08:56 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:121208001 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:08:56 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:121210018 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:08:56 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:121208001 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:08:56 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:08:56 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:121210009 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:08:56 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:121210009 12/11 08:08:56 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:08:56 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:08:56 [3348] going to post event=EVENT_SERVER_ONLINE 12/11 08:08:56 [3348] done post event=EVENT_SERVER_ONLINE, return=0 12/11 08:08:56 [3348] Reset Heartbeat factor index, hearbeat=300 seconds 12/11 08:08:56 [3348] HEARTBEAT: Check Point 6 12/11 08:08:56 [3348] ===REQUESTING PLUG-IN OP-STATE: AVMan 12/11 08:08:57 [3348] ===REQUESTING PLUG-IN OP-STATE: GUP 12/11 08:08:57 [3348] ===REQUESTING PLUG-IN OP-STATE: LUMan 12/11 08:08:57 [3348] ===REQUESTING CMC OP-STATE === 12/11 08:08:57 [3348] going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE 12/11 08:08:57 [3348] done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0 12/11 08:08:57 [3348] ReasonDescForFailure*** = Host Integrity check is disabled. 12/11 08:08:57 [3348] ReasonDescForFailure*** = Host Integrity check is disabled. 12/11 08:08:57 [3348] *** = 12/11 08:08:57 [3348] Volatile op-state damper: 0, Interval passed: 1355242137 12/11 08:08:57 [3348] Free memory difference: 2725007360, Threshold: 0 12/11 08:08:57 [3348] Free disk space difference: 227897122816, Threshold: 0 12/11 08:08:57 [3348] going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS 12/11 08:08:57 [3348] done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0 12/11 08:08:57 [3348] 11838717621398992A0B0A0000000000000000002A0B0B040001999911027663362000000000000001.2.87340034:13]]> ]]>0]]> ]]> ]]> 12/11 08:08:57 [3348] ************CSN=223691 12/11 08:08:57 [3348] Request is: action=192&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&as=223691&cn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:08:57 [3348] http://10.254.200.151:8014/secars/secars.dll?h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the total size=1540 12/11 08:08:57 [3348] Done with return code = 200 12/11 08:08:57 [3348] ===UPLOAD STAGE=== 12/11 08:08:57 [3348] going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG 12/11 08:08:57 [3348] done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0 12/11 08:08:57 [3348] ===PREPARE EVENT LOG STAGE=== 12/11 08:08:57 [3348] initialized technology extension processing ok 12/11 08:08:57 [3348] Need to send Event Log Type(0) from id 827 to 835 12/11 08:08:57 [3348] Allow total logs to send=9 12/11 08:08:57 [3348] nSecurityRecordsTotal=0 12/11 08:08:57 [3348] nSecurityRecordsToSend=0 12/11 08:08:57 [3348] nSystemRecordsTotal=9 12/11 08:08:57 [3348] nSystemRecordsToSend=100 12/11 08:08:57 [3348] nTrafficRecordsTotal=0 12/11 08:08:57 [3348] nTrafficRecordsToSend=0 12/11 08:08:57 [3348] nRawRecordsTotal=0 12/11 08:08:57 [3348] nRawRecordsToSend=0 12/11 08:08:57 [3348] nProcessRecordsTotal=0 12/11 08:08:57 [3348] nProcessRecordsToSend=0 12/11 08:08:57 [3348] nLANSensorRecordsTotal=0 12/11 08:08:57 [3348] nLANSensorRecordsToSend=0 12/11 08:08:57 [3348] nTechExtensionRecordsTotal=0 12/11 08:08:57 [3348] nTechExtensionRecordsToSend=0 12/11 08:08:57 [3348] The size of SYSTEM event logs is 3696. 12/11 08:08:57 [3348] The size of SYSTEM event logs is 3696. 12/11 08:08:57 [3348] Attached total 0 bytes SECURITY event logs. 12/11 08:08:57 [3348] Attached total 0 bytes TRAFFIC event logs. 12/11 08:08:57 [3348] Attached total 0 bytes RAW TRAFFIC event logs. 12/11 08:08:57 [3348] Attached total 0 bytes process event logs. 12/11 08:08:57 [3348] ===COMPRESS EVENT LOG STAGE=== 12/11 08:08:57 [3348] ===SEND EVENT LOG STAGE=== 12/11 08:08:57 [3348] ************CSN=223692 12/11 08:08:57 [3348] Request is: action=195&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&groupid=8C4B35980AFEC8970053C0FADA806CA1&as=223692&cn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:08:57 [3348] http://10.254.200.151:8014/secars/secars.dll?h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eventlog-->SMS, size=919 12/11 08:08:57 [3348] uploads the eventlog to server, size=919 12/11 08:08:57 [3348] Query return code = 200 12/11 08:08:57 [3348] EventLog-->SEM DONE! 12/11 08:08:57 [3348] going to post event=EVENT_SERVER_EVENT_LOG_SENT 12/11 08:08:57 [3348] done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0 12/11 08:08:57 [3348] Communication Mode=1(Pull mode) 12/11 08:08:57 [3348] HEARTBEAT: Check Point 8 12/11 08:08:57 [3348] going to post event=EVENT_SERVER_DISCONNECTED 12/11 08:08:57 [3348] done post event=EVENT_SERVER_DISCONNECTED, return=0 12/11 08:08:57 [3348] ====== IndexHeartbeat Procedure stops at 08:08:57 ====== 12/11 08:08:57 [3348] Set Heartbeat Result= 2 12/11 08:08:57 [3348] Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0 12/11 08:08:57 [3348] Use new configuration 12/11 08:08:57 [3348] HEARTBEAT: Check Point Complete 12/11 08:08:57 [3348] Done, Heartbeat=300seconds 12/11 08:08:57 [3348] 12/11 08:08:57 [3348] ====== Heartbeat loop stops at 08:08:57 ====== 12/11 08:09:48 [2588] 12/11 08:09:48 [2588] 12/11 08:09:49 [2556] 12/11 08:09:49 [2556] 12/11 08:10:49 [2556] 12/11 08:10:49 [2556] 12/11 08:11:49 [2556] 12/11 08:11:49 [2556] 12/11 08:12:49 [2556] 12/11 08:12:49 [2556] 12/11 08:13:49 [2556] 12/11 08:13:49 [2556] 12/11 08:13:58 [3348] ====== Heartbeat loop starts at 08:13:58 ====== 12/11 08:13:58 [3348] :Netport Count=1 12/11 08:13:58 [3348] :NicInfo 12/11 08:13:58 [3348] :CH=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:13:58 [3348] :CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:13:58 [3348] :C=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.org 12/11 08:13:58 [3348] :CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:13:58 [3348] :UCH=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:13:58 [3348] :UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:13:58 [3348] :UC=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.org 12/11 08:13:58 [3348] :UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:13:58 [3348] HardwareID=BB114AC0D8BF5A42B93E447318B06A7C 12/11 08:13:58 [3348] CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:13:58 [3348] CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:13:58 [3348] UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:13:58 [3348] UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:13:58 [3348] Set heartbeat event 12/11 08:13:58 [3348] Use new configuration 12/11 08:13:58 [3348] 12/11 08:13:58 [3348] Got ConfigObject to proceed the operation.. pSylinkConfig: 01D9C6A0 12/11 08:13:58 [3348] ====== Reg Heartbeat loop starts at 08:13:58 ====== 12/11 08:13:59 [3348] HEARTBEAT: Check Point 1 12/11 08:13:59 [3348] Get First Server! 12/11 08:13:59 [3348] HEARTBEAT: Check Point 2 12/11 08:13:59 [3348] going to post event=EVENT_SERVER_CONNECTING 12/11 08:13:59 [3348] done post event=EVENT_SERVER_CONNECTING, return=0 12/11 08:13:59 [3348] HEARTBEAT: Check Point 3 12/11 08:13:59 [3348] Setting the session timeout on Profile Session to 30000 12/11 08:13:59 [3348] HEARTBEAT: Check Point 4 12/11 08:13:59 [3348] ===Get Index STAGE=== 12/11 08:13:59 [3348] ************CSN=223693 12/11 08:13:59 [3348] Request is: action=12&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&hid=BB114AC0D8BF5A42B93E447318B06A7C&groupid=8C4B35980AFEC8970053C0FADA806CA1&mode=0&hbt=300&as=223693&cn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:13:59 [3348] http://10.254.200.151:8014/secars/secars.dll?h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end HTTP REQUEST 12/11 08:13:59 [3348] 8:13:59=>HTTP REQUEST sent 12/11 08:13:59 [3348] SMS return=200 12/11 08:13:59 [3348] 200=>200 OK 12/11 08:13:59 [3348] Sem-HashKey:=>DF23E56860F46A6439E05B862E463344 12/11 08:13:59 [3348] Loading the current mode:1 12/11 08:13:59 [3348] Sem-LANSensor:=>0 12/11 08:13:59 [3348] Sem-Signatue:=>0264C008A788CE926813D263E09D84B279760018B635776F549377E132D9D226FD939D54D52C4EE69F63D9DB84ABB6DCFE498890E02F1C5A6979B805CC5ADACB85FCFA4DC986034A774B6AFE62C7A24408987B12C0D31D49F6483CFD892F37A95D9E6B65841BC054F8231547469F4394D821FAAEC9DDFA1A13E7C67F89F7041B 12/11 08:13:59 [3348] Content Lenght => 1372 12/11 08:13:59 [3348] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 12/11 08:13:59 [3348] Index File: 12/11 08:13:59 [3348] RECEIVE STAGE COMPLETED 12/11 08:13:59 [3348] COMPLETED 12/11 08:13:59 [3348] GetIndexFile handling status: 0 12/11 08:13:59 [3348] Switch Server flag=0 12/11 08:13:59 [3348] HEARTBEAT: Check Point 5.1 12/11 08:13:59 [3348] NextHop Not equal 10.254.200.151,return FALSE 12/11 08:13:59 [3348] NextHop is OnLink with 10.254.101.147,return TRUE 12/11 08:13:59 [3348] Next Hop IP is a local IP or ONLINK:10.254.101.147 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:13:59 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:121208001 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:13:59 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:121210018 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:13:59 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:121208001 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:13:59 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:13:59 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:121210009 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:13:59 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:121210009 12/11 08:13:59 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:13:59 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:13:59 [3348] going to post event=EVENT_SERVER_ONLINE 12/11 08:13:59 [3348] done post event=EVENT_SERVER_ONLINE, return=0 12/11 08:13:59 [3348] Reset Heartbeat factor index, hearbeat=300 seconds 12/11 08:13:59 [3348] HEARTBEAT: Check Point 6 12/11 08:13:59 [3348] ===REQUESTING PLUG-IN OP-STATE: AVMan 12/11 08:13:59 [3348] ===REQUESTING PLUG-IN OP-STATE: GUP 12/11 08:13:59 [3348] ===REQUESTING PLUG-IN OP-STATE: LUMan 12/11 08:13:59 [3348] ===REQUESTING CMC OP-STATE === 12/11 08:13:59 [3348] going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE 12/11 08:13:59 [3348] done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0 12/11 08:13:59 [3348] ReasonDescForFailure*** = Host Integrity check is disabled. 12/11 08:13:59 [3348] ReasonDescForFailure*** = Host Integrity check is disabled. 12/11 08:13:59 [3348] *** = 12/11 08:13:59 [3348] Volatile op-state damper: 0, Interval passed: 302 12/11 08:13:59 [3348] Free memory difference: 54480896, Threshold: 408751095 12/11 08:13:59 [3348] Free disk space difference: 1523712, Threshold: 34184568420 12/11 08:13:59 [3348] going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS 12/11 08:13:59 [3348] done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0 12/11 08:13:59 [3348] ===UPLOAD STAGE=== 12/11 08:13:59 [3348] going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG 12/11 08:13:59 [3348] done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0 12/11 08:13:59 [3348] ===PREPARE EVENT LOG STAGE=== 12/11 08:13:59 [3348] initialized technology extension processing ok 12/11 08:13:59 [3348] Allow total logs to send=0 12/11 08:13:59 [3348] Communication Mode=1(Pull mode) 12/11 08:13:59 [3348] HEARTBEAT: Check Point 8 12/11 08:13:59 [3348] going to post event=EVENT_SERVER_DISCONNECTED 12/11 08:13:59 [3348] done post event=EVENT_SERVER_DISCONNECTED, return=0 12/11 08:13:59 [3348] ====== IndexHeartbeat Procedure stops at 08:13:59 ====== 12/11 08:13:59 [3348] Set Heartbeat Result= 2 12/11 08:13:59 [3348] Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0 12/11 08:13:59 [3348] Use new configuration 12/11 08:13:59 [3348] HEARTBEAT: Check Point Complete 12/11 08:13:59 [3348] Done, Heartbeat=300seconds 12/11 08:13:59 [3348] 12/11 08:13:59 [3348] ====== Heartbeat loop stops at 08:13:59 ====== 12/11 08:14:49 [2556] 12/11 08:14:49 [2556] 12/11 08:15:49 [2556] 12/11 08:15:49 [2556] 12/11 08:16:49 [2556] 12/11 08:16:49 [2556] 12/11 08:17:50 [2556] 12/11 08:17:50 [2556] 12/11 08:18:50 [2556] 12/11 08:18:50 [2556] 12/11 08:19:00 [3348] ====== Heartbeat loop starts at 08:19:00 ====== 12/11 08:19:01 [3348] :Netport Count=1 12/11 08:19:01 [3348] :NicInfo 12/11 08:19:01 [3348] :CH=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:19:01 [3348] :CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:19:01 [3348] :C=8C4B35980AFEC8970053C0FADA806CA11HVLYW20domain.org 12/11 08:19:01 [3348] :CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:19:01 [3348] :UCH=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.orgBB114AC0D8BF5A42B93E447318B06A7C 12/11 08:19:01 [3348] :UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:19:01 [3348] :UC=8C4B35980AFEC8970053C0FADA806CA10userdomain.orgHVLYW20domain.org 12/11 08:19:01 [3348] :UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:19:01 [3348] HardwareID=BB114AC0D8BF5A42B93E447318B06A7C 12/11 08:19:01 [3348] CHKey=DF23E56860F46A6439E05B862E463344 12/11 08:19:01 [3348] CKey=55F6812349DEAD8919D8E28072E57757 12/11 08:19:01 [3348] UCHKey=0535FABE4968FDD04EB36DBE073F90A8 12/11 08:19:01 [3348] UCKey=3CC46F62F7CA3F7DF7C86BA053C1D12B 12/11 08:19:01 [3348] Set heartbeat event 12/11 08:19:01 [3348] Use new configuration 12/11 08:19:01 [3348] 12/11 08:19:01 [3348] Got ConfigObject to proceed the operation.. pSylinkConfig: 01D9C6A0 12/11 08:19:01 [3348] ====== Reg Heartbeat loop starts at 08:19:01 ====== 12/11 08:19:01 [3348] HEARTBEAT: Check Point 1 12/11 08:19:01 [3348] Get First Server! 12/11 08:19:01 [3348] HEARTBEAT: Check Point 2 12/11 08:19:01 [3348] going to post event=EVENT_SERVER_CONNECTING 12/11 08:19:01 [3348] done post event=EVENT_SERVER_CONNECTING, return=0 12/11 08:19:01 [3348] HEARTBEAT: Check Point 3 12/11 08:19:01 [3348] Setting the session timeout on Profile Session to 30000 12/11 08:19:01 [3348] HEARTBEAT: Check Point 4 12/11 08:19:01 [3348] ===Get Index STAGE=== 12/11 08:19:01 [3348] ************CSN=223694 12/11 08:19:01 [3348] Request is: action=12&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&hid=BB114AC0D8BF5A42B93E447318B06A7C&groupid=8C4B35980AFEC8970053C0FADA806CA1&mode=0&hbt=300&as=223694&cn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:19:01 [3348] http://10.254.200.151:8014/secars/secars.dll?h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end HTTP REQUEST 12/11 08:19:01 [3348] 8:19:1=>HTTP REQUEST sent 12/11 08:19:01 [3348] SMS return=200 12/11 08:19:01 [3348] 200=>200 OK 12/11 08:19:01 [3348] Sem-HashKey:=>DF23E56860F46A6439E05B862E463344 12/11 08:19:01 [3348] Loading the current mode:1 12/11 08:19:01 [3348] Sem-LANSensor:=>0 12/11 08:19:01 [3348] Sem-Signatue:=>0264C008A788CE926813D263E09D84B279760018B635776F549377E132D9D226FD939D54D52C4EE69F63D9DB84ABB6DCFE498890E02F1C5A6979B805CC5ADACB85FCFA4DC986034A774B6AFE62C7A24408987B12C0D31D49F6483CFD892F37A95D9E6B65841BC054F8231547469F4394D821FAAEC9DDFA1A13E7C67F89F7041B 12/11 08:19:01 [3348] Sem-CommandGUID:=>204E4C890AFEC8970062C1F5F54D10D5 12/11 08:19:01 [3348] Content Lenght => 1372 12/11 08:19:01 [3348] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 12/11 08:19:01 [3348] Index File: 12/11 08:19:01 [3348] RECEIVE STAGE COMPLETED 12/11 08:19:01 [3348] Before post command event, ID: 204E4C890AFEC8970062C1F5F54D10D5 12/11 08:19:01 [3348] going to post event=EVENT_SYLINK_QUERY_COMMANDIDS 12/11 08:19:01 [3348] done post event=EVENT_SYLINK_QUERY_COMMANDIDS, return=0 12/11 08:19:01 [3348] After post command event, ID: 204E4C890AFEC8970062C1F5F54D10D5 12/11 08:19:01 [3348] ************CSN=223695 12/11 08:19:01 [3348] Request is: action=10&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&groupid=8C4B35980AFEC8970053C0FADA806CA1&fn=[hex]32303445344338393041464543383937303036324331463546353444313044352E646178&hid=BB114AC0D8BF5A42B93E447318B06A7C&as=223695&cdn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:19:01 [3348] http://10.254.200.151:8014/secars/secars.dll?h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end HTTP REQUEST 12/11 08:19:01 [3348] 8:19:1=>HTTP REQUEST sent 12/11 08:19:01 [3348] 8:19:1=>QUERY return code 12/11 08:19:01 [3348] SMS return=200 12/11 08:19:01 [3348] 200=>200 OK 12/11 08:19:01 [3348] Sem-Signatue:=>375A50F222B9342FEAF3C20FA705E4A7D2D6228C51DD68B0D9B1AF53D5568C2563C8CA65027BE504D44A00AB9B9BD9E4791D6A4593AA90548866CAB61345EEE777B473F2BD78DE61ACFE86D81D4676C438075C5A8F0258A61F921CBC9E08687F4E2170CB5FB6A92E58C749459814829C8E9745B14D98D4BF4821719E6A57A80A 12/11 08:19:01 [3348] Content Lenght => 308 12/11 08:19:01 [3348] Got COMMAND file from server, read bytes=308 12/11 08:19:01 [3348] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful.. 12/11 08:19:01 [3348] content len is 308 12/11 08:19:01 [3348] ----------Checksum: C08EF2DBE2A1C4F2DD54F6E15C23B5D0 12/11 08:19:01 [3348] ----------New content: 12/11 08:19:01 [3348] going to post event=EVENT_SYLINK_ADD_COMMAND 12/11 08:19:01 [3348] done post event=EVENT_SYLINK_ADD_COMMAND, return=0 12/11 08:19:01 [3348] ========== Received command file from server completed. ========= 12/11 08:19:01 [3348] completed 12/11 08:19:01 [3348] going to post event=EVENT_SERVER_ONLINE 12/11 08:19:01 [3348] done post event=EVENT_SERVER_ONLINE, return=0 12/11 08:19:01 [3348] completed 12/11 08:19:01 [3348] RECEIVE STAGE COMPLETED 12/11 08:19:01 [3348] COMPLETED 12/11 08:19:01 [3348] going to post event=EVENT_SYLINK_PROCESS_COMMANDS 12/11 08:19:01 [3348] done post event=EVENT_SYLINK_PROCESS_COMMANDS, return=0 12/11 08:19:01 [3348] COMPLETED 12/11 08:19:01 [3348] GetIndexFile handling status: 0 12/11 08:19:01 [3348] Switch Server flag=0 12/11 08:19:01 [3348] HEARTBEAT: Check Point 5.1 12/11 08:19:01 [3348] NextHop Not equal 10.254.200.151,return FALSE 12/11 08:19:01 [3348] NextHop is OnLink with 10.254.101.147,return TRUE 12/11 08:19:01 [3348] Next Hop IP is a local IP or ONLINK:10.254.101.147 12/11 08:19:01 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:01 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:19:01 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:121208001 12/11 08:19:01 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:19:02 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:121210018 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:19:02 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:121208001 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:19:02 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:19:02 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:121210009 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=1 12/11 08:19:02 [3348] EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:121210009 12/11 08:19:02 [3348] going to post event=EVENT_LU_REQUIRE_STATUS 12/11 08:19:02 [3348] done post event=EVENT_LU_REQUIRE_STATUS, return=20 12/11 08:19:02 [3348] going to post event=EVENT_SERVER_ONLINE 12/11 08:19:02 [3348] done post event=EVENT_SERVER_ONLINE, return=0 12/11 08:19:02 [3348] Reset Heartbeat factor index, hearbeat=300 seconds 12/11 08:19:02 [3348] HEARTBEAT: Check Point 6 12/11 08:19:02 [3348] ===REQUESTING PLUG-IN OP-STATE: AVMan 12/11 08:19:02 [3348] ===REQUESTING PLUG-IN OP-STATE: GUP 12/11 08:19:02 [3348] ===REQUESTING PLUG-IN OP-STATE: LUMan 12/11 08:19:02 [3348] ===REQUESTING CMC OP-STATE === 12/11 08:19:02 [3348] going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE 12/11 08:19:02 [3348] done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0 12/11 08:19:02 [3348] ReasonDescForFailure*** = Host Integrity check is disabled. 12/11 08:19:02 [3348] ReasonDescForFailure*** = Host Integrity check is disabled. 12/11 08:19:02 [3348] *** = 12/11 08:19:02 [3348] Volatile op-state damper: 0, Interval passed: 303 12/11 08:19:02 [3348] Free memory difference: 52420608, Threshold: 408751095 12/11 08:19:02 [3348] Free disk space difference: 2179072, Threshold: 34184568420 12/11 08:19:02 [3348] going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS 12/11 08:19:02 [3348] done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0 12/11 08:19:02 [3348] 12/11 08:19:02 [3348] ************CSN=223696 12/11 08:19:02 [3348] Request is: action=192&hostid=B34C8D2E0AFEC89701A9983693CAC504&chk=DF23E56860F46A6439E05B862E463344&ck=55F6812349DEAD8919D8E28072E57757&uchk=0535FABE4968FDD04EB36DBE073F90A8&uck=3CC46F62F7CA3F7DF7C86BA053C1D12B&as=223696&cn=[hex]48564C59573230&lun=[hex]6A646576616E&udn=[hex]5348415354414845414C54482E4F5247 12/11 08:19:02 [3348] http://10.254.200.151:8014/secars/secars.dll?h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the total size=276 12/11 08:19:02 [3348] going to post event=EVENT_SYLINK_UPLOAD_COMMANDSTATUS_DONE 12/11 08:19:02 [3348] done post event=EVENT_SYLINK_UPLOAD_COMMANDSTATUS_DONE, return=0 12/11 08:19:02 [3348] Done with return code = 200 12/11 08:19:02 [3348] ===UPLOAD STAGE=== 12/11 08:19:02 [3348] going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG 12/11 08:19:02 [3348] done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0 12/11 08:19:02 [3348] ===PREPARE EVENT LOG STAGE=== 12/11 08:19:02 [3348] initialized technology extension processing ok 12/11 08:19:02 [3348] Allow total logs to send=0 12/11 08:19:02 [3348] Communication Mode=1(Pull mode) 12/11 08:19:02 [3348] HEARTBEAT: Check Point 8 12/11 08:19:02 [3348] going to post event=EVENT_SERVER_DISCONNECTED 12/11 08:19:02 [3348] done post event=EVENT_SERVER_DISCONNECTED, return=0 12/11 08:19:02 [3348] ====== IndexHeartbeat Procedure stops at 08:19:02 ====== 12/11 08:19:02 [3348] Set Heartbeat Result= 2 12/11 08:19:02 [3348] Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0 12/11 08:19:02 [3348] Use new configuration 12/11 08:19:02 [3348] HEARTBEAT: Check Point Complete 12/11 08:19:02 [3348] Done, Heartbeat=300seconds 12/11 08:19:02 [3348] 12/11 08:19:02 [3348] ====== Heartbeat loop stops at 08:19:02 ======