EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 00:00:28.392 03/09/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 00:00:28.422 03/09/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 00:00:28.422 03/09/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 00:00:28.432 03/09/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1095 for TCP connection. 5 00:00:28.542 03/09/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 00:00:28.542 03/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 00:00:28.542 03/09/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1095, dst port 4005 8 00:00:28.542 03/09/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1095 9 00:00:28.542 03/09/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1095, dst port 4005 10 00:00:28.542 03/09/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 11 00:00:29.053 03/09/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 12 00:00:29.063 03/09/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 13 00:00:29.093 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 14 00:00:29.263 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 15 00:00:29.263 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 16 00:00:29.263 03/09/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 17 00:00:29.263 03/09/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 18 00:00:29.263 03/09/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 19 00:00:29.263 03/09/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 20 00:00:29.293 03/09/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 21 00:00:29.293 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 22 00:00:29.303 03/09/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 23 00:00:29.303 03/09/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 24 00:00:29.323 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 25 00:00:29.323 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 26 00:00:29.323 03/09/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 27 00:00:29.323 03/09/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=7301597A1711C52E R_Cookie=0A75E0846A02CC90) reason = DEL_REASON_LOAD_BALANCING 28 00:00:29.323 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 29 00:00:30.044 03/09/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=7301597A1711C52E R_Cookie=0A75E0846A02CC90) reason = DEL_REASON_LOAD_BALANCING 30 00:00:30.044 03/09/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 31 00:00:30.044 03/09/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 32 00:00:30.044 03/09/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 33 00:00:30.064 03/09/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 34 00:00:30.545 03/09/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1095, dst port 4005 35 00:00:30.545 03/09/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 1095, dst port 4005 36 00:00:30.545 03/09/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 1095 37 00:00:30.545 03/09/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 1095, dst port 4005 38 00:00:30.545 03/09/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 39 00:00:31.046 03/09/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 40 00:00:31.056 03/09/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 41 00:00:31.076 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 42 00:00:31.236 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 43 00:00:31.236 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 44 00:00:31.246 03/09/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 45 00:00:31.246 03/09/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 46 00:00:31.246 03/09/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 47 00:00:31.246 03/09/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 48 00:00:31.266 03/09/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 49 00:00:31.266 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 50 00:00:31.266 03/09/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 51 00:00:31.266 03/09/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 52 00:00:31.296 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 53 00:00:31.296 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 54 00:00:31.296 03/09/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 55 00:00:44.615 03/09/07 Sev=Info/4 CM/0x63100017 xAuth application returned 56 00:00:44.615 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 57 00:00:49.062 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 58 00:00:49.062 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 59 00:00:49.062 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 60 00:00:49.062 03/09/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 61 00:00:49.132 03/09/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 62 00:00:49.132 03/09/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 63 00:00:49.132 03/09/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 64 00:00:49.142 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 65 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 66 00:00:50.133 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 67 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.8.1 68 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 69 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 70 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 71 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 72 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 73 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 74 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 75 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 76 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 77 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 78 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 79 00:00:50.133 03/09/07 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 80 00:00:50.243 03/09/07 Sev=Info/4 CM/0x63100019 Mode Config data received 81 00:00:50.264 03/09/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.8.1, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 82 00:00:50.264 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 83 00:00:50.294 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 84 00:00:50.294 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 85 00:00:50.294 03/09/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 86 00:00:50.294 03/09/07 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 19 seconds, setting expiry to 86381 seconds from now 87 00:00:50.304 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 88 00:00:50.304 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 89 00:00:50.304 03/09/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 90 00:00:50.304 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 91 00:00:50.304 03/09/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=C55A5F4A OUTBOUND SPI = 0x0BF10E99 INBOUND SPI = 0xC869398F) 92 00:00:50.304 03/09/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x0BF10E99 93 00:00:50.304 03/09/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xC869398F 94 00:00:52.577 03/09/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.8.1/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 95 00:00:52.717 03/09/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 96 00:00:52.747 03/09/07 Sev=Info/4 CM/0x6310001A One secure connection established 97 00:00:52.867 03/09/07 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.101. Current address(es): 192.168.1.101, 10.13.8.1, 192.168.6.1, 192.168.5.1. 98 00:00:52.867 03/09/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.8.1. Current address(es): 192.168.1.101, 10.13.8.1, 192.168.6.1, 192.168.5.1. 99 00:00:52.997 03/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 100 00:00:52.997 03/09/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 101 00:00:52.997 03/09/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 102 00:00:52.997 03/09/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x990ef10b into key list 103 00:00:52.997 03/09/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 104 00:00:52.997 03/09/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x8f3969c8 into key list 105 00:00:52.997 03/09/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.8.1 106 00:00:56.082 03/09/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x990ef10b for inbound key with SPI=0x8f3969c8 107 00:05:32.008 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 108 00:10:32.372 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 109 00:15:32.804 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 110 00:20:32.747 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 111 00:25:33.200 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 112 00:30:34.151 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 113 00:35:34.594 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 114 00:40:34.934 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 115 00:45:35.345 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 116 00:50:35.776 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 117 00:55:35.747 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 118 01:00:36.200 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 119 01:05:37.147 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 120 01:10:37.563 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 121 01:15:38.019 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 122 01:20:38.445 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 123 01:25:38.871 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 124 01:30:39.325 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 125 01:35:39.763 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 126 01:40:40.198 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 127 01:45:40.633 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 128 01:50:41.068 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 129 01:55:41.513 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 130 02:00:41.938 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 131 02:05:42.328 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 132 02:10:42.251 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 133 02:15:43.174 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 134 02:20:43.320 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 135 02:25:43.767 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 136 02:30:44.199 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 137 02:35:44.630 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 138 02:40:02.498 03/09/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 3810087579 139 02:40:02.498 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 140 02:40:02.518 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 141 02:40:02.518 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 142 02:40:02.518 03/09/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 3810087580, seq# expected = 3810087580 143 02:40:44.559 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 144 02:45:45.492 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 145 02:47:51.673 03/09/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 3810087580 146 02:47:51.673 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 147 02:47:51.693 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 148 02:47:51.693 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 149 02:47:51.693 03/09/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 3810087581, seq# expected = 3810087581 150 02:48:22.718 03/09/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 3810087581 151 02:48:22.718 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 152 02:48:22.738 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 153 02:48:22.738 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 154 02:48:22.738 03/09/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 3810087582, seq# expected = 3810087582 155 02:50:45.573 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 156 02:55:45.259 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 157 03:00:46.229 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 158 03:05:46.350 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 159 03:10:46.382 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 160 03:15:46.313 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 161 03:20:46.745 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 162 03:25:47.177 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 163 03:30:47.615 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 164 03:35:48.548 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 165 03:40:48.980 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 166 03:45:49.442 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 167 03:48:24.164 03/09/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 3810087582 168 03:48:24.164 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 169 03:48:24.184 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 170 03:48:24.184 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 171 03:48:24.184 03/09/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 3810087583, seq# expected = 3810087583 172 03:50:49.874 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 173 03:55:50.306 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 174 04:00:50.236 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 175 04:05:51.161 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 176 04:10:51.593 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 177 04:15:52.025 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 178 04:20:52.457 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 179 04:25:52.669 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 180 04:30:53.101 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 181 04:35:53.533 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 182 04:40:53.965 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 183 04:45:54.397 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 184 04:50:54.829 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 185 04:55:55.261 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 186 05:00:55.693 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 187 05:05:56.125 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 188 05:10:56.545 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 189 05:15:56.966 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 190 05:20:57.395 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 191 05:25:57.824 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 192 05:30:58.253 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 193 05:35:58.682 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 194 05:40:58.610 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 195 05:45:59.039 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 196 05:50:59.969 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 197 05:56:00.398 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 198 06:01:00.827 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 199 06:06:01.256 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 200 06:11:01.685 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 201 06:16:02.114 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 202 06:21:02.578 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 203 06:24:50.411 03/09/07 Sev=Info/4 IPSEC/0x6370000E Key with outbound SPI=0x990ef10b is about to expire, requesting a new one 204 06:24:50.411 03/09/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.8.1, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 205 06:24:50.411 03/09/07 Sev=Info/4 IKE/0x63000050 Initiating IKE Phase 2 (MsgID=E7FC948C) Initiator = ID=10.13.8.1 Protocol=0 port=0, Responder = ID=0.0.0.0/0.0.0.0 Protocol=0 port=0 206 06:24:50.411 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 207 06:24:50.441 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 208 06:24:50.441 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 209 06:24:50.441 03/09/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 210 06:24:50.441 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 211 06:24:50.441 03/09/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=E7FC948C OUTBOUND SPI = 0x29A99386 INBOUND SPI = 0x11CA7961) 212 06:24:50.441 03/09/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x29A99386 213 06:24:50.441 03/09/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x11CA7961 214 06:24:50.441 03/09/07 Sev=Info/4 CM/0x63100021 Additional Phase 2 SA established. 215 06:24:50.932 03/09/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 216 06:24:50.932 03/09/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x8693a929 into key list 217 06:24:50.932 03/09/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 218 06:24:50.932 03/09/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x6179ca11 into key list 219 06:25:20.435 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 220 06:25:20.435 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from 137.69.115.16 221 06:25:20.435 03/09/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = BF10E99 INBOUND SPI = C869398F) 222 06:25:20.435 03/09/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=C55A5F4A 223 06:25:20.455 03/09/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x8f3969c8 224 06:25:20.455 03/09/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x8f3969c8 225 06:25:20.455 03/09/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x990ef10b 226 06:25:20.455 03/09/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x990ef10b 227 06:25:20.955 03/09/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x8693a929 for inbound key with SPI=0x6179ca11 228 06:26:02.516 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 229 06:31:03.451 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 230 06:36:03.886 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 231 06:41:04.321 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 232 06:46:04.756 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 233 06:51:05.191 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 234 06:56:05.626 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 235 07:01:06.061 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 236 07:06:06.496 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 237 07:11:06.931 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 238 07:16:07.366 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 239 07:21:07.801 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 240 07:26:08.218 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 241 07:31:08.605 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 242 07:36:09.040 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 243 07:41:09.475 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 244 07:46:09.910 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 245 07:51:10.345 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 246 07:56:10.780 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 247 08:01:11.215 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 248 08:06:11.150 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 249 08:11:12.136 03/09/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1095, dst port 4005 250 08:11:39.175 03/09/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 3810087583 251 08:11:39.175 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 252 08:11:39.195 03/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 253 08:11:39.195 03/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 254 08:11:39.195 03/09/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 3810087584, seq# expected = 3810087584 255 08:12:52.921 03/09/07 Sev=Info/4 CM/0x6310000A Secure connections terminated 256 08:12:52.921 03/09/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 257 08:12:52.921 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.16 258 08:12:52.921 03/09/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 29A99386 INBOUND SPI = 11CA7961) 259 08:12:52.931 03/09/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=E7FC948C 260 08:12:52.931 03/09/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=5A03637754B5078F R_Cookie=DB99AB2BAC9CA0D4) reason = DEL_REASON_RESET_SADB 261 08:12:52.931 03/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.16 262 08:12:52.931 03/09/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=5A03637754B5078F R_Cookie=DB99AB2BAC9CA0D4) reason = DEL_REASON_RESET_SADB 263 08:12:52.931 03/09/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 264 08:12:52.931 03/09/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 265 08:12:52.931 03/09/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 266 08:12:52.931 03/09/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1095 for TCP connection. 267 08:12:52.931 03/09/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.16 disconnected: duration: 0 days 8:12:0 268 08:12:52.951 03/09/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 269 08:12:54.804 03/09/07 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 270 08:12:54.804 03/09/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 271 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x6179ca11 272 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x6179ca11 273 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x8693a929 274 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x8693a929 275 08:12:54.814 03/09/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 1095, dst port 4005 276 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 277 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 278 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 279 08:12:54.814 03/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys