EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 23:05:17.711 03/14/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 23:05:17.791 03/14/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 23:05:17.791 03/14/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 23:05:18.212 03/14/06 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1417 for TCP connection. 5 23:05:18.232 03/14/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 23:05:18.232 03/14/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 23:05:18.232 03/14/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1417, dst port 4005 8 23:05:19.273 03/14/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1417 9 23:05:19.273 03/14/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1417, dst port 4005 10 23:05:19.273 03/14/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 11 23:05:19.774 03/14/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 12 23:05:19.804 03/14/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 13 23:05:19.984 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 14 23:05:20.675 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 15 23:05:20.675 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 16 23:05:20.675 03/14/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 17 23:05:20.675 03/14/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 18 23:05:20.675 03/14/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 19 23:05:20.675 03/14/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 20 23:05:20.695 03/14/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 21 23:05:20.695 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 22 23:05:20.695 03/14/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 23 23:05:20.695 03/14/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 24 23:05:21.276 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 25 23:05:21.276 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 26 23:05:21.276 03/14/06 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.17" from primary server 27 23:05:21.276 03/14/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=A3BE0BAD376C49CA R_Cookie=7A3A1899421BCC79) reason = DEL_REASON_LOAD_BALANCING 28 23:05:21.276 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 29 23:05:21.787 03/14/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=A3BE0BAD376C49CA R_Cookie=7A3A1899421BCC79) reason = DEL_REASON_LOAD_BALANCING 30 23:05:21.787 03/14/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 31 23:05:21.787 03/14/06 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.17" given by the primary server 32 23:05:21.787 03/14/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 33 23:05:21.807 03/14/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 34 23:05:21.817 03/14/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1417, dst port 4005 35 23:05:21.817 03/14/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.17, src port 1417, dst port 4005 36 23:05:22.778 03/14/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.17, src port 4005, dst port 1417 37 23:05:22.778 03/14/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.17, src port 1417, dst port 4005 38 23:05:22.778 03/14/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.17" 39 23:05:23.279 03/14/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 40 23:05:23.289 03/14/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.17. 41 23:05:23.319 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.17 42 23:05:24.000 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 43 23:05:24.000 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.17 44 23:05:24.000 03/14/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 45 23:05:24.000 03/14/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 46 23:05:24.000 03/14/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 47 23:05:24.000 03/14/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 48 23:05:24.020 03/14/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 49 23:05:24.020 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.17 50 23:05:24.020 03/14/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 51 23:05:24.020 03/14/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 52 23:05:24.531 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 53 23:05:24.531 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 54 23:05:24.531 03/14/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 55 23:05:34.305 03/14/06 Sev=Info/4 CM/0x63100017 xAuth application returned 56 23:05:34.305 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 57 23:05:43.238 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 58 23:05:43.238 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 59 23:05:43.238 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 60 23:05:43.238 03/14/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 61 23:05:43.338 03/14/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 62 23:05:43.338 03/14/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 63 23:05:43.338 03/14/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 64 23:05:43.338 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 65 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 66 23:05:44.720 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 67 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.32.103 68 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 69 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 70 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 71 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 72 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 73 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 74 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 75 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 76 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 77 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 78 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 79 23:05:44.720 03/14/06 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 80 23:05:44.720 03/14/06 Sev=Info/4 CM/0x63100019 Mode Config data received 81 23:05:44.730 03/14/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.32.103, GW IP = 137.69.115.17, Remote IP = 0.0.0.0 82 23:05:44.730 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.17 83 23:05:44.850 03/14/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 84 23:05:44.850 03/14/06 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 85 23:05:45.351 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 86 23:05:45.351 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.17 87 23:05:45.351 03/14/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 88 23:05:45.351 03/14/06 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 22 seconds, setting expiry to 86378 seconds from now 89 23:05:45.361 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 90 23:05:45.361 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.17 91 23:05:45.361 03/14/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 92 23:05:45.361 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.17 93 23:05:45.361 03/14/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=9CAB8C35 OUTBOUND SPI = 0x3FE022F9 INBOUND SPI = 0x0816C011) 94 23:05:45.361 03/14/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x3FE022F9 95 23:05:45.361 03/14/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x0816C011 96 23:05:47.494 03/14/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.32.103/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 97 23:05:47.534 03/14/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 98 23:05:47.584 03/14/06 Sev=Info/4 CM/0x6310001A One secure connection established 99 23:05:47.614 03/14/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.1.22.252. Current address(es): 10.1.22.252, 10.13.32.103. 100 23:05:47.614 03/14/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.32.103. Current address(es): 10.1.22.252, 10.13.32.103. 101 23:05:47.714 03/14/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 102 23:05:47.714 03/14/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xf922e03f into key list 103 23:05:47.714 03/14/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 104 23:05:47.714 03/14/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x11c01608 into key list 105 23:05:47.714 03/14/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.32.103 106 23:05:51.319 03/14/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0xf922e03f for inbound key with SPI=0x11c01608 107 23:10:24.732 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 108 23:15:24.353 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 109 23:19:02.387 03/14/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849093 110 23:19:02.387 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 111 23:19:02.657 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 112 23:19:02.657 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 113 23:19:02.657 03/14/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849094, seq# expected = 3991849094 114 23:20:24.535 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 115 23:25:24.556 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 116 23:26:10.813 03/14/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849094 117 23:26:10.813 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 118 23:26:10.963 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 119 23:26:10.963 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 120 23:26:10.963 03/14/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849095, seq# expected = 3991849095 121 23:26:21.358 03/14/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849095 122 23:26:21.358 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 123 23:26:21.518 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 124 23:26:21.518 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 125 23:26:21.518 03/14/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849096, seq# expected = 3991849096 126 23:26:47.866 03/14/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849096 127 23:26:47.866 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 128 23:26:48.086 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 129 23:26:48.086 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 130 23:26:48.086 03/14/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849097, seq# expected = 3991849097 131 23:27:08.826 03/14/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849097 132 23:27:08.826 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 133 23:27:08.956 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 134 23:27:08.956 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 135 23:27:08.956 03/14/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849098, seq# expected = 3991849098 136 23:30:24.718 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 137 23:31:00.800 03/14/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849098 138 23:31:00.800 03/14/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 139 23:31:00.930 03/14/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 140 23:31:00.930 03/14/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 141 23:31:00.930 03/14/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849099, seq# expected = 3991849099 142 23:35:25.691 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 143 23:40:26.032 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 144 23:45:25.633 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 145 23:50:25.715 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 146 23:55:25.918 03/14/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 147 00:00:26.181 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 148 00:05:26.803 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 149 00:10:26.965 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 150 00:15:27.617 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 151 00:20:27.278 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 152 00:25:06.630 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849099 153 00:25:06.630 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 154 00:25:11.637 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849100 155 00:25:11.637 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 156 00:25:11.757 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 157 00:25:11.757 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 158 00:25:11.757 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849101, seq# expected = 3991849101 159 00:25:27.159 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 160 00:35:28.154 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 161 00:40:28.295 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 162 00:45:28.567 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 163 00:50:28.588 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 164 00:55:29.191 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 165 01:00:29.052 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 166 01:05:29.394 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 167 01:05:45.036 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849101 168 01:05:45.036 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 169 01:05:45.176 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 170 01:05:45.176 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 171 01:05:45.176 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849102, seq# expected = 3991849102 172 01:09:36.869 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849102 173 01:09:36.869 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 174 01:09:37.000 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 175 01:09:37.000 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 176 01:09:37.000 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849103, seq# expected = 3991849103 177 01:10:29.445 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 178 01:10:42.964 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849103 179 01:10:42.964 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 180 01:10:43.095 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 181 01:10:43.095 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 182 01:10:43.095 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849104, seq# expected = 3991849104 183 01:15:30.378 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 184 01:20:30.810 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 185 01:25:31.242 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 186 01:30:31.674 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 187 01:35:32.106 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 188 01:40:32.558 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 189 01:45:33.030 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 190 01:50:33.462 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 191 01:55:33.912 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 192 01:56:18.998 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849104 193 01:56:18.998 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 194 01:56:19.128 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 195 01:56:19.128 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 196 01:56:19.128 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849105, seq# expected = 3991849105 197 02:00:34.481 03/15/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1417, dst port 4005 198 02:02:21.679 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849105 199 02:02:21.679 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 200 02:02:21.799 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 201 02:02:21.799 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 202 02:02:21.799 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849106, seq# expected = 3991849106 203 02:04:32.931 03/15/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3991849106 204 02:04:32.931 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 205 02:04:33.062 03/15/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 206 02:04:33.062 03/15/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 207 02:04:33.062 03/15/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3991849107, seq# expected = 3991849107 208 02:04:38.913 03/15/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 209 02:04:38.913 03/15/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 210 02:04:38.913 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.17 211 02:04:38.913 03/15/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 3FE022F9 INBOUND SPI = 816C011) 212 02:04:38.913 03/15/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=9CAB8C35 213 02:04:38.913 03/15/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=57B923BC22A34137 R_Cookie=5F671477729B2B74) reason = DEL_REASON_RESET_SADB 214 02:04:38.923 03/15/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.17 215 02:04:38.923 03/15/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=57B923BC22A34137 R_Cookie=5F671477729B2B74) reason = DEL_REASON_RESET_SADB 216 02:04:38.923 03/15/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 217 02:04:38.923 03/15/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 218 02:04:38.923 03/15/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 219 02:04:38.923 03/15/06 Sev=Info/6 CM/0x63100030 Removed local TCP port 1417 for TCP connection. 220 02:04:38.923 03/15/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.17 disconnected: duration: 0 days 2:58:51 221 02:04:38.963 03/15/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 222 02:04:40.986 03/15/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 223 02:04:40.996 03/15/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 224 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x11c01608 225 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x11c01608 226 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xf922e03f 227 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xf922e03f 228 02:04:41.016 03/15/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.17, src port 1417, dst port 4005 229 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 230 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 231 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 232 02:04:41.016 03/15/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys