EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 12:25:54.306 04/08/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 12:25:54.376 04/08/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 12:25:54.376 04/08/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 12:25:54.396 04/08/06 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1746 for TCP connection. 5 12:25:54.416 04/08/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 12:25:54.416 04/08/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 12:25:54.416 04/08/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1746, dst port 4005 8 12:25:54.416 04/08/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1746 9 12:25:54.416 04/08/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1746, dst port 4005 10 12:25:54.416 04/08/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 11 12:25:54.846 04/08/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 12 12:25:54.876 04/08/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 13 12:25:54.906 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 14 12:25:55.065 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 15 12:25:55.065 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 16 12:25:55.065 04/08/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 17 12:25:55.065 04/08/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 18 12:25:55.065 04/08/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 19 12:25:55.065 04/08/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 20 12:25:55.095 04/08/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 21 12:25:55.095 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 22 12:25:55.095 04/08/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 23 12:25:55.095 04/08/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 24 12:25:55.125 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 25 12:25:55.125 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 26 12:25:55.125 04/08/06 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 27 12:25:55.125 04/08/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=61B417477DA0A20E R_Cookie=A79EE9DACE01BE3A) reason = DEL_REASON_LOAD_BALANCING 28 12:25:55.125 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 29 12:25:55.845 04/08/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=61B417477DA0A20E R_Cookie=A79EE9DACE01BE3A) reason = DEL_REASON_LOAD_BALANCING 30 12:25:55.845 04/08/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 31 12:25:55.845 04/08/06 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 32 12:25:55.845 04/08/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 33 12:25:55.845 04/08/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 34 12:25:56.354 04/08/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1746, dst port 4005 35 12:25:56.354 04/08/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 1746, dst port 4005 36 12:25:56.354 04/08/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 1746 37 12:25:56.354 04/08/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 1746, dst port 4005 38 12:25:56.354 04/08/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 39 12:25:56.843 04/08/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 40 12:25:56.863 04/08/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 41 12:25:56.893 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 42 12:25:57.063 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 43 12:25:57.063 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 44 12:25:57.063 04/08/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 45 12:25:57.063 04/08/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 46 12:25:57.063 04/08/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 47 12:25:57.063 04/08/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 48 12:25:57.073 04/08/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 49 12:25:57.073 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 50 12:25:57.073 04/08/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 51 12:25:57.073 04/08/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 52 12:25:57.103 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 53 12:25:57.103 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 54 12:25:57.103 04/08/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 55 12:26:13.136 04/08/06 Sev=Info/4 CM/0x63100017 xAuth application returned 56 12:26:13.136 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 57 12:26:15.514 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 58 12:26:15.514 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 59 12:26:15.514 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 60 12:26:15.514 04/08/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 61 12:26:15.624 04/08/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 62 12:26:15.624 04/08/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 63 12:26:15.624 04/08/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 64 12:26:15.624 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 65 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 66 12:26:16.453 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 67 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.6.71 68 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 69 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 70 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 71 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 72 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 73 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 74 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 75 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 76 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 77 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 78 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 79 12:26:16.453 04/08/06 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 80 12:26:16.463 04/08/06 Sev=Info/4 CM/0x63100019 Mode Config data received 81 12:26:16.473 04/08/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.6.71, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 82 12:26:16.473 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 83 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 84 12:26:16.523 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 85 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 86 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 20 seconds, setting expiry to 86380 seconds from now 87 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 88 12:26:16.523 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 89 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 90 12:26:16.523 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 91 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=CB638F93 OUTBOUND SPI = 0x47A5E1E9 INBOUND SPI = 0xCFA67734) 92 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x47A5E1E9 93 12:26:16.523 04/08/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xCFA67734 94 12:26:19.340 04/08/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.6.71/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 95 12:26:19.360 04/08/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 96 12:26:19.600 04/08/06 Sev=Info/4 CM/0x6310001A One secure connection established 97 12:26:19.660 04/08/06 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.11. Current address(es): 192.168.1.11, 10.13.6.71. 98 12:26:19.660 04/08/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.6.71. Current address(es): 192.168.1.11, 10.13.6.71. 99 12:26:19.920 04/08/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 100 12:26:19.920 04/08/06 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 101 12:26:19.920 04/08/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 102 12:26:19.920 04/08/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xe9e1a547 into key list 103 12:26:19.920 04/08/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 104 12:26:19.920 04/08/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x3477a6cf into key list 105 12:26:19.920 04/08/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.6.71 106 12:26:34.842 04/08/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0xe9e1a547 for inbound key with SPI=0x3477a6cf 107 12:30:57.279 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 108 12:35:58.262 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 109 12:40:58.724 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 110 12:44:32.521 04/08/06 Sev=Info/4 IPSEC/0x63700005 Packet size greater than ip header 111 12:44:32.521 04/08/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 112 12:44:32.521 04/08/06 Sev=Warning/3 IPSEC/0xA370001C Bad cTCP trailer, Rsvd 10472, Magic# 34697bd6h, trailer len 27, MajorVer 168, MinorVer 255 113 12:45:54.139 04/08/06 Sev=Info/4 IPSEC/0x63700006 Packet size less than ip header (drop) 114 12:45:59.647 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 115 12:46:50.730 04/08/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 116 12:46:50.740 04/08/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 117 12:46:50.740 04/08/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 118 12:46:51.732 04/08/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 119 12:46:51.732 04/08/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 120 12:46:51.732 04/08/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 121 12:50:59.361 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 122 12:51:07.061 04/08/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 123 12:51:07.061 04/08/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 124 12:51:07.061 04/08/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 125 12:55:59.763 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 126 13:00:59.985 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 127 13:06:00.666 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 128 13:08:06.033 04/08/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 129 13:08:06.033 04/08/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 130 13:08:06.033 04/08/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 131 13:11:00.348 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 132 13:16:01.039 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 133 13:21:01.380 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 134 13:26:01.072 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 135 13:31:01.773 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 136 13:36:01.465 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 137 13:41:02.126 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 138 13:46:01.798 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 139 13:51:02.553 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 140 13:56:02.049 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 141 14:01:02.257 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 142 14:06:02.435 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 143 14:11:02.623 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 144 14:16:02.811 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 145 14:21:02.989 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 146 14:26:04.182 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 147 14:31:04.350 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 148 14:36:04.548 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 149 14:41:04.726 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 150 14:46:04.914 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 151 14:51:05.406 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 152 14:56:05.278 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 153 15:01:05.448 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 154 15:06:05.134 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 155 15:11:05.834 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 156 15:16:06.033 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 157 15:21:06.733 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 158 15:26:06.409 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 159 15:31:06.597 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 160 15:36:06.785 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 161 15:41:06.963 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 162 15:46:07.141 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 163 15:51:07.401 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 164 15:56:07.803 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 165 16:01:08.470 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 166 16:06:08.162 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 167 16:11:08.853 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 168 16:16:08.535 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 169 16:21:09.226 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 170 16:26:08.908 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 171 16:31:09.099 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 172 16:36:09.281 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 173 16:41:09.971 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 174 16:46:09.653 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 175 16:51:09.875 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 176 16:56:10.556 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 177 17:01:10.248 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 178 17:06:10.929 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 179 17:11:10.611 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 180 17:16:11.312 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 181 17:21:11.523 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 182 17:26:11.715 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 183 17:31:11.397 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 184 17:36:12.098 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 185 17:41:11.790 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 186 17:46:12.470 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 187 17:51:12.652 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 188 17:56:12.334 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 189 18:01:12.515 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 190 18:06:12.697 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 191 18:11:13.388 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 192 18:16:13.080 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 193 18:21:13.811 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 194 18:26:13.493 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 195 18:31:14.204 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 196 18:36:13.916 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 197 18:41:14.596 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 198 18:46:14.278 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 199 18:50:20.018 04/08/06 Sev=Info/4 IPSEC/0x6370000E Key with outbound SPI=0xe9e1a547 is about to expire, requesting a new one 200 18:50:20.018 04/08/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.6.71, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 201 18:50:20.018 04/08/06 Sev=Info/4 IKE/0x63000050 Initiating IKE Phase 2 (MsgID=1A102635) Initiator = ID=10.13.6.71 Protocol=0 port=0, Responder = ID=0.0.0.0/0.0.0.0 Protocol=0 port=0 202 18:50:20.018 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 203 18:50:20.068 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 204 18:50:20.068 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 205 18:50:20.068 04/08/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 206 18:50:20.068 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 207 18:50:20.068 04/08/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=1A102635 OUTBOUND SPI = 0x4398FB32 INBOUND SPI = 0x1F2903E3) 208 18:50:20.068 04/08/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x4398FB32 209 18:50:20.068 04/08/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x1F2903E3 210 18:50:20.068 04/08/06 Sev=Info/4 CM/0x63100021 Additional Phase 2 SA established. 211 18:50:21.017 04/08/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 212 18:50:21.017 04/08/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x32fb9843 into key list 213 18:50:21.017 04/08/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 214 18:50:21.017 04/08/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xe303291f into key list 215 18:50:49.986 04/08/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 216 18:50:49.986 04/08/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from 137.69.115.16 217 18:50:49.996 04/08/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 47A5E1E9 INBOUND SPI = CFA67734) 218 18:50:49.996 04/08/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=CB638F93 219 18:50:49.996 04/08/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x3477a6cf 220 18:50:49.996 04/08/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x3477a6cf 221 18:50:49.996 04/08/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xe9e1a547 222 18:50:49.996 04/08/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xe9e1a547 223 18:50:51.494 04/08/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x32fb9843 for inbound key with SPI=0xe303291f 224 18:51:14.460 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 225 18:56:15.151 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 226 19:01:14.853 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 227 19:06:15.044 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 228 19:11:15.216 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 229 19:16:15.917 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 230 19:21:15.599 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 231 19:26:16.280 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 232 19:31:15.982 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 233 19:36:16.173 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 234 19:41:16.345 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 235 19:46:17.026 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 236 19:51:16.747 04/08/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1746, dst port 4005 237 19:51:50.342 04/08/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 238 19:51:50.342 04/08/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 239 19:51:50.342 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.16 240 19:51:50.342 04/08/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 4398FB32 INBOUND SPI = 1F2903E3) 241 19:51:50.342 04/08/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=1A102635 242 19:51:50.342 04/08/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=30B6CB119554678A R_Cookie=2B58C7B0AD4E476B) reason = DEL_REASON_RESET_SADB 243 19:51:50.342 04/08/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.16 244 19:51:50.342 04/08/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=30B6CB119554678A R_Cookie=2B58C7B0AD4E476B) reason = DEL_REASON_RESET_SADB 245 19:51:50.342 04/08/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 246 19:51:50.342 04/08/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 247 19:51:50.342 04/08/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 248 19:51:50.342 04/08/06 Sev=Info/6 CM/0x63100030 Removed local TCP port 1746 for TCP connection. 249 19:51:50.342 04/08/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.16 disconnected: duration: 0 days 7:25:31 250 19:51:50.412 04/08/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 251 19:51:53.189 04/08/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 252 19:51:53.189 04/08/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 253 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xe303291f 254 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xe303291f 255 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x32fb9843 256 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x32fb9843 257 19:51:53.199 04/08/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 1746, dst port 4005 258 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 259 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 260 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 261 19:51:53.199 04/08/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys