EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 04:43:37.325 08/10/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 04:43:37.335 08/10/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 04:43:37.335 08/10/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 04:43:37.355 08/10/06 Sev=Info/6 CM/0x6310002F Allocated local TCP port 2880 for TCP connection. 5 04:43:37.606 08/10/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 04:43:37.606 08/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 04:43:37.606 08/10/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 2880, dst port 4005 8 04:43:37.606 08/10/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 2880 9 04:43:37.606 08/10/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 2880, dst port 4005 10 04:43:37.606 08/10/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 11 04:43:38.108 08/10/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 12 04:43:38.108 08/10/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 13 04:43:38.118 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 14 04:43:38.289 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 15 04:43:38.289 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 16 04:43:38.289 08/10/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 17 04:43:38.289 08/10/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 18 04:43:38.289 08/10/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 19 04:43:38.289 08/10/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 20 04:43:38.309 08/10/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 21 04:43:38.309 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 22 04:43:38.319 08/10/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 23 04:43:38.319 08/10/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 24 04:43:38.339 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 25 04:43:38.339 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 26 04:43:38.339 08/10/06 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 27 04:43:38.339 08/10/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=43887B786E0EE6AF R_Cookie=A0D6085CD85DC3E0) reason = DEL_REASON_LOAD_BALANCING 28 04:43:38.339 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 29 04:43:39.112 08/10/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=43887B786E0EE6AF R_Cookie=A0D6085CD85DC3E0) reason = DEL_REASON_LOAD_BALANCING 30 04:43:39.112 08/10/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 31 04:43:39.112 08/10/06 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 32 04:43:39.112 08/10/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 33 04:43:39.112 08/10/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 34 04:43:39.614 08/10/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 2880, dst port 4005 35 04:43:39.614 08/10/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 2880, dst port 4005 36 04:43:39.614 08/10/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 2880 37 04:43:39.614 08/10/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 2880, dst port 4005 38 04:43:39.614 08/10/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 39 04:43:40.116 08/10/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 40 04:43:40.116 08/10/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 41 04:43:40.126 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 42 04:43:40.297 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 43 04:43:40.297 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 44 04:43:40.297 08/10/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 45 04:43:40.297 08/10/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 46 04:43:40.297 08/10/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 47 04:43:40.297 08/10/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 48 04:43:40.297 08/10/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 49 04:43:40.297 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 50 04:43:40.297 08/10/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 51 04:43:40.297 08/10/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 52 04:43:40.317 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 53 04:43:40.317 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 54 04:43:40.317 08/10/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 55 04:43:46.933 08/10/06 Sev=Info/4 CM/0x63100017 xAuth application returned 56 04:43:46.933 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 57 04:43:49.322 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 58 04:43:49.322 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 59 04:43:49.322 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 60 04:43:49.322 08/10/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 61 04:43:49.382 08/10/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 62 04:43:49.382 08/10/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 63 04:43:49.382 08/10/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 64 04:43:49.382 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 65 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 66 04:43:50.296 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 67 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.6.119 68 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 69 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 70 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 71 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 72 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 73 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 74 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 75 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 76 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 77 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 78 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 79 04:43:50.296 08/10/06 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 80 04:43:50.296 08/10/06 Sev=Info/4 CM/0x63100019 Mode Config data received 81 04:43:50.306 08/10/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.6.119, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 82 04:43:50.306 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 83 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 84 04:43:50.336 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 85 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 86 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 10 seconds, setting expiry to 86390 seconds from now 87 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 88 04:43:50.336 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 89 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 90 04:43:50.336 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 91 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=66BCA040 OUTBOUND SPI = 0x1B53EE9D INBOUND SPI = 0x309869AA) 92 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x1B53EE9D 93 04:43:50.336 08/10/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x309869AA 94 04:43:52.834 08/10/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.6.119/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 95 04:43:52.925 08/10/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 96 04:43:52.955 08/10/06 Sev=Info/4 CM/0x6310001A One secure connection established 97 04:43:52.965 08/10/06 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.4. Current address(es): 192.168.1.4, 10.13.6.119. 98 04:43:52.965 08/10/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.6.119. Current address(es): 192.168.1.4, 10.13.6.119. 99 04:43:53.085 08/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 100 04:43:53.085 08/10/06 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 101 04:43:53.085 08/10/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 102 04:43:53.085 08/10/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x9dee531b into key list 103 04:43:53.085 08/10/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 104 04:43:53.085 08/10/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xaa699830 into key list 105 04:43:53.085 08/10/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.6.119 106 04:43:55.668 08/10/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x9dee531b for inbound key with SPI=0xaa699830 107 04:48:41.429 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 108 04:53:41.088 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 109 04:58:41.254 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 110 05:03:41.432 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 111 05:08:41.610 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 112 05:12:41.552 08/10/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 1731034390 113 05:12:41.552 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 114 05:12:41.572 08/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 115 05:12:41.572 08/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 116 05:12:41.572 08/10/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 1731034391, seq# expected = 1731034391 117 05:13:41.286 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 118 05:18:41.464 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 119 05:23:42.144 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 120 05:28:42.323 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 121 05:33:42.501 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 122 05:38:42.679 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 123 05:43:42.857 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 124 05:48:43.035 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 125 05:53:43.213 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 126 05:58:43.391 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 127 06:03:43.569 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 128 06:08:43.747 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 129 06:13:43.925 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 130 06:18:44.103 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 131 06:23:44.281 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 132 06:28:44.519 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 133 06:33:44.698 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 134 06:38:44.876 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 135 06:43:45.074 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 136 06:48:45.252 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 137 06:53:46.023 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 138 06:58:46.182 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 139 07:03:45.864 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 140 07:08:46.545 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 141 07:13:46.227 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 142 07:18:46.908 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 143 07:23:46.590 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 144 07:28:47.271 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 145 07:33:46.953 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 146 07:38:47.633 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 147 07:43:47.845 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 148 07:48:47.527 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 149 07:53:47.650 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 150 07:58:48.132 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 151 08:03:48.403 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 152 08:08:48.673 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 153 08:13:48.943 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 154 08:18:49.213 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 155 08:23:49.483 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 156 08:28:49.753 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 157 08:33:49.523 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 158 08:38:49.793 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 159 08:43:50.063 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 160 08:48:50.833 08/10/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 2880, dst port 4005 161 08:53:25.951 08/10/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 162 08:53:25.951 08/10/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 163 08:53:25.951 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.16 164 08:53:25.951 08/10/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 1B53EE9D INBOUND SPI = 309869AA) 165 08:53:25.951 08/10/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=66BCA040 166 08:53:25.951 08/10/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=EF72D97D397DBF90 R_Cookie=5510DDB116866D78) reason = DEL_REASON_RESET_SADB 167 08:53:25.951 08/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.16 168 08:53:25.951 08/10/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=EF72D97D397DBF90 R_Cookie=5510DDB116866D78) reason = DEL_REASON_RESET_SADB 169 08:53:25.951 08/10/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 170 08:53:25.951 08/10/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 171 08:53:25.951 08/10/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 172 08:53:25.951 08/10/06 Sev=Info/6 CM/0x63100030 Removed local TCP port 2880 for TCP connection. 173 08:53:25.951 08/10/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.16 disconnected: duration: 0 days 4:9:33 174 08:53:25.961 08/10/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 175 08:53:28.353 08/10/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 176 08:53:28.363 08/10/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 177 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xaa699830 178 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xaa699830 179 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x9dee531b 180 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x9dee531b 181 08:53:28.363 08/10/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 2880, dst port 4005 182 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 183 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 184 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 185 08:53:28.363 08/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys