EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 01:48:38.390 07/20/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 01:48:38.551 07/20/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 01:48:38.551 07/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 01:48:38.611 07/20/06 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1138 for TCP connection. 5 01:48:38.611 07/20/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 01:48:38.611 07/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 01:48:38.611 07/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1138, dst port 4005 8 01:48:39.302 07/20/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1138 9 01:48:39.302 07/20/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1138, dst port 4005 10 01:48:39.302 07/20/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 11 01:48:39.802 07/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 12 01:48:39.832 07/20/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 13 01:48:39.842 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 14 01:48:40.013 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 15 01:48:40.013 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 16 01:48:40.013 07/20/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 17 01:48:40.013 07/20/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 18 01:48:40.013 07/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 19 01:48:40.013 07/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 20 01:48:40.023 07/20/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 21 01:48:40.023 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 22 01:48:40.023 07/20/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 23 01:48:40.023 07/20/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 24 01:48:40.043 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 25 01:48:40.043 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 26 01:48:40.043 07/20/06 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.17" from primary server 27 01:48:40.043 07/20/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=F5CBB708A20B45D3 R_Cookie=F07CAF72D9255685) reason = DEL_REASON_LOAD_BALANCING 28 01:48:40.043 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 29 01:48:40.804 07/20/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=F5CBB708A20B45D3 R_Cookie=F07CAF72D9255685) reason = DEL_REASON_LOAD_BALANCING 30 01:48:40.804 07/20/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 31 01:48:40.804 07/20/06 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.17" given by the primary server 32 01:48:40.804 07/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 33 01:48:40.804 07/20/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 34 01:48:41.315 07/20/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1138, dst port 4005 35 01:48:41.315 07/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.17, src port 1138, dst port 4005 36 01:48:41.315 07/20/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.17, src port 4005, dst port 1138 37 01:48:41.315 07/20/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.17, src port 1138, dst port 4005 38 01:48:41.315 07/20/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.17" 39 01:48:41.815 07/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 40 01:48:41.815 07/20/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.17. 41 01:48:41.825 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.17 42 01:48:41.996 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 43 01:48:41.996 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.17 44 01:48:41.996 07/20/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 45 01:48:41.996 07/20/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 46 01:48:41.996 07/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 47 01:48:41.996 07/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 48 01:48:42.006 07/20/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 49 01:48:42.006 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.17 50 01:48:42.006 07/20/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 51 01:48:42.006 07/20/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 52 01:48:42.026 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 53 01:48:42.026 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 54 01:48:42.026 07/20/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 55 01:49:10.496 07/20/06 Sev=Info/4 CM/0x63100017 xAuth application returned 56 01:49:10.496 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 57 01:49:13.130 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 58 01:49:13.130 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 59 01:49:13.130 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 60 01:49:13.130 07/20/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 61 01:49:13.200 07/20/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 62 01:49:13.200 07/20/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 63 01:49:13.200 07/20/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 64 01:49:13.200 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 65 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 66 01:49:14.152 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 67 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.32.96 68 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 69 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 70 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 71 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 72 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 73 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 74 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 75 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 76 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 77 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 78 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 79 01:49:14.152 07/20/06 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 80 01:49:14.152 07/20/06 Sev=Info/4 CM/0x63100019 Mode Config data received 81 01:49:14.162 07/20/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.32.96, GW IP = 137.69.115.17, Remote IP = 0.0.0.0 82 01:49:14.162 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.17 83 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 84 01:49:14.192 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.17 85 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 86 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 33 seconds, setting expiry to 86367 seconds from now 87 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 88 01:49:14.192 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.17 89 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 90 01:49:14.192 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.17 91 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=3B9B9FE4 OUTBOUND SPI = 0x48669F2A INBOUND SPI = 0xAD769582) 92 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x48669F2A 93 01:49:14.192 07/20/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xAD769582 94 01:49:16.315 07/20/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.32.96/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 95 01:49:16.345 07/20/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 96 01:49:16.385 07/20/06 Sev=Info/4 CM/0x6310001A One secure connection established 97 01:49:16.405 07/20/06 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.4. Current address(es): 192.168.1.4, 10.13.32.96. 98 01:49:16.425 07/20/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.32.96. Current address(es): 192.168.1.4, 10.13.32.96. 99 01:49:16.625 07/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 100 01:49:16.625 07/20/06 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 101 01:49:16.625 07/20/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 102 01:49:16.625 07/20/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x2a9f6648 into key list 103 01:49:16.625 07/20/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 104 01:49:16.625 07/20/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x829576ad into key list 105 01:49:16.625 07/20/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.32.96 106 01:49:22.864 07/20/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x2a9f6648 for inbound key with SPI=0x829576ad 107 01:53:42.858 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 108 01:58:43.170 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 109 02:03:45.144 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 110 02:08:45.035 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 111 02:13:45.467 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 112 02:18:45.899 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 113 02:23:46.361 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 114 02:28:46.857 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 115 02:33:47.316 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 116 02:38:47.758 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 117 02:43:48.691 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 118 02:48:48.622 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 119 02:53:49.064 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 120 02:58:49.526 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 121 03:03:49.958 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 122 03:08:50.390 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 123 03:13:50.822 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 124 03:18:51.254 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 125 03:23:51.696 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 126 03:28:52.128 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 127 03:30:01.228 07/20/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 128 03:30:01.228 07/20/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 129 03:30:01.228 07/20/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 130 03:30:01.228 07/20/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 131 03:30:01.228 07/20/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 132 03:30:01.238 07/20/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 133 03:33:52.560 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 134 03:36:11.260 07/20/06 Sev=Info/6 IPSEC/0x63700023 CNIReceiveComplete: Invalid TCP checksum 135 03:36:11.260 07/20/06 Sev=Warning/2 IPSEC/0xE3700010 BSafe ESP Decrypt HMAC mismatch. 136 03:36:11.260 07/20/06 Sev=Warning/2 IPSEC/0xE3700003 Function BSafeESPDecrypt() failed with an error code of 0xffffffff (IpSecDrvTransform.c:1652) 137 03:38:52.992 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 138 03:43:53.424 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 139 03:48:53.856 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 140 03:53:54.298 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 141 03:58:54.730 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 142 04:03:55.172 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 143 04:08:55.604 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 144 04:13:56.036 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 145 04:18:56.468 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 146 04:23:56.900 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 147 04:28:57.395 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 148 04:33:57.599 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 149 04:37:28.929 07/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 1832819631 150 04:37:28.939 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 151 04:37:28.959 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 152 04:37:28.959 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 153 04:37:28.959 07/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 1832819632, seq# expected = 1832819632 154 04:38:58.279 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 155 04:43:58.467 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 156 04:48:58.635 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 157 04:53:57.830 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 158 04:58:58.991 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 159 05:03:58.668 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 160 05:08:58.846 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 161 05:13:33.925 07/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 1832819632 162 05:13:33.925 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 163 05:13:33.945 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 164 05:13:33.945 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 165 05:13:33.945 07/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 1832819633, seq# expected = 1832819633 166 05:13:58.532 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 167 05:18:59.704 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 168 05:23:59.380 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 169 05:29:00.060 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 170 05:34:00.248 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 171 05:39:00.436 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 172 05:44:00.112 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 173 05:49:00.290 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 174 05:54:00.468 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 175 05:59:01.158 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 176 06:04:00.824 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 177 06:09:01.002 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 178 06:14:01.180 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 179 06:19:01.379 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 180 06:24:01.557 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 181 06:29:01.726 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 182 06:34:02.283 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 183 06:39:02.726 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 184 06:44:02.416 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 185 06:49:02.857 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 186 06:49:30.387 07/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 1832819633 187 06:49:30.387 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 188 06:49:30.407 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 189 06:49:30.407 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 190 06:49:30.407 07/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 1832819634, seq# expected = 1832819634 191 06:54:03.288 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 192 06:59:03.739 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 193 07:01:02.403 07/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 1832819634 194 07:01:02.403 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 195 07:01:02.433 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 196 07:01:02.433 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 197 07:01:02.433 07/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 1832819635, seq# expected = 1832819635 198 07:04:04.170 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 199 07:09:04.611 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 200 07:13:27.496 07/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 1832819635 201 07:13:27.496 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 202 07:13:27.526 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 203 07:13:27.526 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 204 07:13:27.526 07/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 1832819636, seq# expected = 1832819636 205 07:14:04.551 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 206 07:19:05.503 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 207 07:24:05.944 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 208 07:25:26.552 07/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 1832819636 209 07:25:26.552 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 210 07:25:26.572 07/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 211 07:25:26.572 07/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 212 07:25:26.572 07/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 1832819637, seq# expected = 1832819637 213 07:29:06.331 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 214 07:34:06.738 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 215 07:39:07.176 07/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 1138, dst port 4005 216 07:39:37.791 07/20/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 217 07:39:37.791 07/20/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 218 07:39:37.791 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.17 219 07:39:37.791 07/20/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 48669F2A INBOUND SPI = AD769582) 220 07:39:37.791 07/20/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=3B9B9FE4 221 07:39:37.791 07/20/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=D210A8D00AEC44C7 R_Cookie=66DCCB986E7372E2) reason = DEL_REASON_RESET_SADB 222 07:39:37.791 07/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.17 223 07:39:37.791 07/20/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=D210A8D00AEC44C7 R_Cookie=66DCCB986E7372E2) reason = DEL_REASON_RESET_SADB 224 07:39:37.791 07/20/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 225 07:39:37.791 07/20/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 226 07:39:37.791 07/20/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 227 07:39:37.791 07/20/06 Sev=Info/6 CM/0x63100030 Removed local TCP port 1138 for TCP connection. 228 07:39:37.791 07/20/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.17 disconnected: duration: 0 days 5:50:21 229 07:39:37.801 07/20/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 230 07:39:40.094 07/20/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 231 07:39:40.124 07/20/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 232 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x829576ad 233 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x829576ad 234 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x2a9f6648 235 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x2a9f6648 236 07:39:40.134 07/20/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.17, src port 1138, dst port 4005 237 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 238 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 239 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 240 07:39:40.134 07/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys