here is the sylink log
10/22 10:34:34 [3788] ~~~Sylink log started. (SEP Product Version in registry: 11.0.6100.645, Sylink File Version: 11.0.6100.480)
10/22 10:34:34 [3788] Stored HostGUID=4C5233330A0102F40053FF8937DAC3BC; outlen=16
10/22 10:34:34 [3788] <RestoreSettings>Stored UserGuid=0; outlen=2
10/22 10:34:34 [3788] <mfn_DecodeSSN>Sygate-SSN=482
10/22 10:34:34 [3788] <mfn_DecodeSSN>Read CSN=483
10/22 10:34:34 [3788] <mfn_DecodeSSN>Sygate-SSN=7
10/22 10:34:34 [3788] <mfn_DecodeSSN>Read CSN=8
10/22 10:34:34 [3788] Product Type=3,Major Ver=6,Minor Ver=1,Platform ID=18,OSType=50725138
10/22 10:34:34 [3788] OS=Windows Server 2008 Standard Edition; number=6.1.7600
10/22 10:34:34 [3788] SyLinkCreateInstance => Instance created: 0000000003C5A7E0 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
10/22 10:34:34 [3788] <GetOnlineNicInfo>:Netport Count=0
10/22 10:34:34 [3788] <GetOnlineNicInfo>:NicInfo
10/22 10:34:34 [3788] SyLinkCreateConfig => Created instance: 0000000003C8B990
10/22 10:34:34 [3788] UseNewConfig => Created m_hNewConfig: 0000000003C8B990
10/22 10:34:34 [3788] Importing ConfigObject: 0000000003C856C0 into: 0000000003C8B990
10/22 10:34:34 [3788] Importing ConfigObject: 0000000003C856C0 into: 0000000003C87AA0
10/22 10:34:34 [3788] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
10/22 10:34:34 [3788] SSA packageType is set as 105
10/22 10:34:34 [3788] SyLinkDeleteConfig => Deleting instance: 0000000003C856C0
10/22 10:34:34 [3788] <SetHiStatus>HI status is changed to=3; reason=105; rule=Host Integrity check is disabled.
Host Integrity policy has been disabled by the administrator.
10/22 10:34:35 [3788] SyLinkCreateConfig => Created instance: 00000000048DD7A0
10/22 10:34:35 [3788] SetCurLocationName: Name is set to - Default
10/22 10:34:35 [3788] SetCurLocationID: ID is set to - 9FC56B650A0102F401FB85A19D3B3A10
10/22 10:34:35 [3788] SyLinkCreateConfig => Created instance: 00000000046BF910
10/22 10:34:35 [3788] RemeberCurrentGroup=0,RememberCurrentPolicyMode=0
10/22 10:34:35 [3788] Importing ConfigObject: 00000000046BF910 into: 0000000003C8B990
10/22 10:34:35 [3788] Importing ConfigObject: 00000000046BF910 into: 0000000003C87AA0
10/22 10:34:35 [3788] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
10/22 10:34:35 [3788] SyLinkDeleteConfig => Deleting instance: 00000000046BF910
10/22 10:34:35 [3788] SyLinkDeleteConfig => Deleting instance: 00000000048DD7A0
10/22 10:34:35 [5740] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
10/22 10:34:35 [824] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
10/22 10:34:35 [3788] <CSyLink::Start()>
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <CSyLink::Start> The last server used was '10.1.2.244'
10/22 10:34:35 [3788] <CSyLink::ImportConfigFile()>
10/22 10:34:35 [3788] CUpdateConfig::Dump
10/22 10:34:35 [3788] </CSyLink::ImportConfigFile()>
10/22 10:34:35 [3788] <GetDomainHostName>msz_DomainName is taken from szDomainName
10/22 10:34:35 [3788] <GetDomainHostName>DomainName (Final)=w3domain.com
10/22 10:34:35 [3788] <HWID CSyLink::GetHardwareKey> Get Hardware ID
10/22 10:34:35 [3788] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: E395AD7072470FA4BE9F711474732CCC
10/22 10:34:35 [3788] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101021049
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101020001
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {CC40C428-1830-44ef-B8B2-920A0B761793}101021009
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}91111048
10/22 10:34:35 [3788] <EncodeHelper::DecryptUrl>
10/22 10:34:35 [3788] <Add2LUFileList:>Adding LU Info to LU Download File List: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}101021009
10/22 10:34:35 [6012] <HeartbeatThreadProc:>Thread is about to begin..
10/22 10:34:35 [5540] Successfully created the heartbeat thread
10/22 10:34:35 [3788] <Start>Started, contact SMS every 300 seconds
10/22 10:34:35 [3788] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
10/22 10:34:35 [3788] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
10/22 10:34:35 [3788] </CSyLink::Start()>
10/22 10:34:36 [3788] <SetClientAuth>Received new User/Domain from SMC.. User: operations User Domain: W3DOMAIN
10/22 10:34:36 [3788] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
10/22 10:34:36 [3788] <GetLoginRdnsDomain>DNS domain=W3DOMAIN.COM
10/22 10:34:36 [3788] <SetClientAuth>Setting the User Domain to RDNS Domain ..
10/22 10:34:36 [3788] <SetClientAuth>Logged in user info set to: W3DOMAIN.COM/operations
10/22 10:34:36 [3788] <SetClientAuth>Marking User Change Notify to redo registration..
10/22 10:34:36 [6012] <CheckHeartbeatTimer>====== Heartbeat loop starts at 10:34:36 ======
10/22 10:34:36 [6012] <GetOnlineNicInfo>:Netport Count=1
10/22 10:34:36 [6012] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>
10/22 10:34:37 [6012] <CalcAgentHashKey>:CH=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] <CalcAgentHashKey>:CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:37 [6012] <CalcAgentHashKey>:C=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.com
10/22 10:34:37 [6012] <CalcAgentHashKey>:CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:37 [6012] <CalcAgentHashKey>:UCH=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] <CalcAgentHashKey>:UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:37 [6012] <CalcAgentHashKey>:UC=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.com
10/22 10:34:37 [6012] <CalcAgentHashKey>:UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:37 [6012] <DoHeartbeat>HardwareID=E395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] <DoHeartbeat>CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:37 [6012] <DoHeartbeat>CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:37 [6012] <DoHeartbeat>UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:37 [6012] <DoHeartbeat>UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:37 [6012] <DoHeartbeat> Set heartbeat event
10/22 10:34:37 [6012] Use new configuration
10/22 10:34:37 [6012] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 10:34:37 ======
10/22 10:34:37 [6012] HEARTBEAT: Check Point 1
10/22 10:34:37 [6012] HEARTBEAT: Check Point 2
10/22 10:34:37 [6012] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/22 10:34:37 [6012] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/22 10:34:37 [6012] HEARTBEAT: Check Point 3
10/22 10:34:37 [6012] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
10/22 10:34:37 [5740] SyLinkCreateConfig => Created instance: 00000000048DD7A0
10/22 10:34:37 [5740] Importing ConfigObject: 0000000003C87AA0 into: 00000000048DD7A0
10/22 10:34:37 [5740] SyLinkDeleteConfig => Deleting instance: 00000000048DD7A0
10/22 10:34:37 [6012] HEARTBEAT: Check Point 4
10/22 10:34:37 [6012] <RegHeartbeatProc>===Registration STAGE===
10/22 10:34:37 [6012] <MakeRegisterData:>logon id (domain/user)=W3DOMAIN.COM/operations
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading current group:My Company\Servers64Bit
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading current mode:1
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred group:My Company\Servers64Bit
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>Loading preferred mode:1
10/22 10:34:37 [6012] <GeneratePreferredGroupAndModeInRegistration:>It will remember nothing, PreferredGroup is My Company\Servers64Bit, PreferredMode is 1
10/22 10:34:37 [6012] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="0A9DFE140A0102F40116703AD2D23100" AgentType="105" UserDomain="W3DOMAIN.COM" LoginUser="operations" ComputerDomain="w3domain.com" ComputerName="ArtServer" PreferredGroup="My%20Company%5cServers64Bit" PreferredMode="1" HardwareKey="E395AD7072470FA4BE9F711474732CCC" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer" />
<SSAProduct Version="11.0.6100.645" />
<SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="50725138" ServicePack=""/>
<Processor ProcessorType="Intel64%20Family%206%20Model%2026%20Stepping%205" ProcessorClock="2128" ProcessorNum="4"/>
<Memory Size="6432055296"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="DF71-10%2f20%2f2010%2014%3a32%3a48%20841"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="480" />
<DNSs><DNS Address="10.1.2.240"/></DNSs>
<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
10/22 10:34:37 [6012] <SyLink>[MakeRegisterData] registration Hardware Key=E395AD7072470FA4BE9F711474732CCC
10/22 10:34:37 [6012] ************Reg CSN=9
10/22 10:34:37 [6012] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1217
s_session_id: E395AD7072470FA4BE9F711474732CCC
Sygate-SSN: 9
<?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="0A9DFE140A0102F40116703AD2D23100" AgentType="105" UserDomain="W3DOMAIN.COM" LoginUser="operations" ComputerDomain="w3domain.com" ComputerName="ArtServer" PreferredGroup="My%20Company%5cServers64Bit" PreferredMode="1" HardwareKey="E395AD7072470FA4BE9F711474732CCC" SiteDomainName=""/>
<SSAHostInfo><NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer" />
<SSAProduct Version="11.0.6100.645" />
<SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="50725138" ServicePack=""/>
<Processor ProcessorType="Intel64%20Family%206%20Model%2026%20Stepping%205" ProcessorClock="2128" ProcessorNum="4"/>
<Memory Size="6432055296"/>
<BIOS Version="DELL%20%20%20-%201"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="DF71-10%2f20%2f2010%2014%3a32%3a48%20841"/>
<SSAIDS Version="" SerialNumber=""/>
<SSAUTC Bias="480" />
<DNSs><DNS Address="10.1.2.240"/></DNSs>
<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>
</SSAHostInfo>
</SSARegData>
10/22 10:34:37 [6012] <SendRegistrationRequest:>http://10.1.2.244:8014 [encrypted data]
10/22 10:34:37 [6012] 10:34:37=>Send HTTP REQUEST
10/22 10:34:38 [6012] 10:34:38=>HTTP REQUEST sent
10/22 10:34:38 [6012] 10:34:38=>QUERY return code
10/22 10:34:38 [6012] 10:34:38=>QUERY return code completed
10/22 10:34:38 [6012] <SendRegistrationRequest:>SMS return=200
10/22 10:34:38 [6012] <ParseHTTPStatusCode:>200=>200 OK
10/22 10:34:38 [6012] <SendRegistrationRequest:>Content Lenght => 350
10/22 10:34:38 [6012] HTTP returns status code=200
10/22 10:34:38 [6012] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
10/22 10:34:38 [6012] <SendRegistrationRequest:>COMPLETED, returned 0
10/22 10:34:38 [6012] <IsInClientIPorOnLink> NextHop is equal to10.1.2.244,return TRUE
10/22 10:34:38 [6012] <mfn_GetOutIP> Out IP is:10.1.2.244
10/22 10:34:38 [6012] HEARTBEAT: Check Point 5.1
10/22 10:34:38 [6012] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
10/22 10:34:38 [6012] <PostEvent>going to post event=EVENT_SERVER_ONLINE
10/22 10:34:38 [6012] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
10/22 10:34:38 [6012] HEARTBEAT: Check Point 8
10/22 10:34:38 [6012] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
10/22 10:34:38 [6012] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
10/22 10:34:38 [6012] <RegHeartbeatProc>====== Registration Procedure stops at 10:34:38 ======
10/22 10:34:38 [6012] HEARTBEAT: Check Point 10
10/22 10:34:38 [6012] HEARTBEAT: Check Point Complete
10/22 10:34:38 [6012] <RegHeartbeatProc>Done, Heartbeat=3seconds
10/22 10:34:38 [6012] <CheckHeartbeatTimer>====== Heartbeat loop stops at 10:34:38 ======
10/22 10:34:41 [6012] <CheckHeartbeatTimer>====== Heartbeat loop starts at 10:34:41 ======
10/22 10:34:42 [6012] <GetOnlineNicInfo>:Netport Count=1
10/22 10:34:42 [6012] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs>
10/22 10:34:42 [6012] <CalcAgentHashKey>:CH=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:42 [6012] <CalcAgentHashKey>:CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:42 [6012] <CalcAgentHashKey>:C=0A9DFE140A0102F40116703AD2D231001ArtServerw3domain.com
10/22 10:34:42 [6012] <CalcAgentHashKey>:CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:42 [6012] <CalcAgentHashKey>:UCH=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.comE395AD7072470FA4BE9F711474732CCC
10/22 10:34:42 [6012] <CalcAgentHashKey>:UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:42 [6012] <CalcAgentHashKey>:UC=0A9DFE140A0102F40116703AD2D231000operationsW3DOMAIN.COMArtServerw3domain.com
10/22 10:34:42 [6012] <CalcAgentHashKey>:UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:42 [6012] <DoHeartbeat>HardwareID=E395AD7072470FA4BE9F711474732CCC
10/22 10:34:42 [6012] <DoHeartbeat>CHKey=7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:42 [6012] <DoHeartbeat>CKey=9D62BF7F8D8AA7FFD448C6474165505C
10/22 10:34:42 [6012] <DoHeartbeat>UCHKey=38854544E2C15BC382C23D2829937466
10/22 10:34:42 [6012] <DoHeartbeat>UCKey=FCC81D3B07940333A6B27F4E25D59165
10/22 10:34:42 [6012] <DoHeartbeat> Set heartbeat event
10/22 10:34:42 [6012] Use new configuration
10/22 10:34:42 [6012] <CSyLink::IndexHeartbeatProc()>
10/22 10:34:42 [6012] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003C87AA0
10/22 10:34:42 [6012] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 10:34:42 ======
10/22 10:34:42 [6012] HEARTBEAT: Check Point 1
10/22 10:34:42 [6012] Get First Server!
10/22 10:34:42 [6012] HEARTBEAT: Check Point 2
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
10/22 10:34:42 [6012] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
10/22 10:34:42 [6012] HEARTBEAT: Check Point 3
10/22 10:34:42 [6012] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
10/22 10:34:42 [6012] HEARTBEAT: Check Point 4
10/22 10:34:42 [6012] <IndexHeartbeatProc>===Get Index STAGE===
10/22 10:34:42 [6012] ************CSN=484
10/22 10:34:42 [6012] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&hid=E395AD7072470FA4BE9F711474732CCC&groupid=0A9DFE140A0102F40116703AD2D23100&mode=0&hbt=300&as=484&cn=[hex]417274536572766572&lun=[hex]6F7065726174696F6E73&udn=[hex]5733444F4D41494E2E434F4D
10/22 10:34:42 [6012] <GetIndexFileRequest:>http://10.1.2.244:8014/secars/secars.dll?h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
10/22 10:34:42 [6012] 10:34:42=>Send HTTP REQUEST
10/22 10:34:42 [6012] 10:34:42=>HTTP REQUEST sent
10/22 10:34:42 [6012] <GetIndexFileRequest:>SMS return=200
10/22 10:34:42 [6012] <ParseHTTPStatusCode:>200=>200 OK
10/22 10:34:42 [6012] <FindHeader>Sem-HashKey:=>7308C04D9BBA9774CECAEE98682421B1
10/22 10:34:42 [6012] <GetIndexFileRequest:>Loading the current mode:1
10/22 10:34:42 [6012] <FindHeader>Sem-LANSensor:=>0
10/22 10:34:42 [6012] <FindHeader>Sem-Signatue:=>2B3A0D768C61B958B805235C7D7FCCDB6CC98FAD64E7E5A131260728AA05B8ACF8B31EE62BFFD8D7575FF7D23CB342B4668E7924B031DBB592F1352EF62091FED6C671D38C2AA64D634D85C00237C99E733DF5FF126A2F21CC7AE292420A221CBAFDBAB10B9E2CE2160D66B4C10B658ED6E8EF41FC2CE206E0A496DF2EC819BF
10/22 10:34:42 [6012] <mfn_DoGetIndexFile200>Content Lenght => 1343
10/22 10:34:42 [6012] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
10/22 10:34:42 [6012] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="556693110A0102F40054F13C64CE3E31" ServerID="5621AD300A0102F4010AC03569B20173" GroupID="DF71F3140A0102F40067692E98CD6670" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "22/10/2010 02:53:18"> <Profile Checksum="0E9AD6B7D34BE0C1ADA3A6AD9BBD960A" SerialNumber="DF71-10/20/2010 14:32:48 841" LastModifiedTime="21/10/2010 18:03:44"/> <ConfigFile Checksum="B1A4977D3411AC339DA77954028C45CE" LastModifiedTime="21/10/2010 14:15:37"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="21/10/2010 14:15:38"/> <SylinkFile Checksum="0443CBD8CA2AE738877E2A969C6EC0A7" LastModifiedTime="21/10/2010 18:03:44"/> <LSProfile Checksum="7554B7BE17A287D56013C765DE5C6651" SerialNumber ="DF71-10/20/2010 14:32:48 841" LastModifiedTime ="21/10/2010 18:03:44"/>
<LiveUpdate>
<File Checksum="084E02A6876E3CC4C9A81C0E52EA6851" DeltaFlag="1" FullSize="95453531" LastModifiedTime="1287741190099" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="101021049"/>
<File Checksum="24D7CFF6884BB395950E05D76003934E" DeltaFlag="1" FullSize="97101008" LastModifiedTime="1287741126097" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="101021049"/>
<File Checksum="5373BC888C4BA982BBE765A0DEF4C8BB" DeltaFlag="1" FullSize="972943" LastModifiedTime="1287693747794" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="101020001"/>
<File Checksum="FD34E4D55805DABB726F4EB854B4F3B1" DeltaFlag="1" FullSize="953363" LastModifiedTime="1287693738811" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="101020001"/>
<File Checksum="704BFE3ADF342859EAB4FEF6D449A498" DeltaFlag="1" FullSize="669829" LastModifiedTime="1287693739315" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
<File Checksum="4B7BD1E94D0BB1C2AE9B95682920120D" DeltaFlag="1" FullSize="650307" LastModifiedTime="1287693742443" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
<File Checksum="B014E3924B314F09E79D090EEEEC5784" DeltaFlag="1" FullSize="76770" LastModifiedTime="1287693742734" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="101021009"/>
<File Checksum="D5B6E2E9B6BC4680C0C1C3DCAD526635" DeltaFlag="1" FullSize="2927034" LastModifiedTime="1287693743505" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="101021009"/>
<File Checksum="48DAD8B30B02BCA6FE5E4C22E6193362" DeltaFlag="1" FullSize="88188" LastModifiedTime="1287693744838" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
<File Checksum="E4775359564F549B7AFAEFF44281AAE4" DeltaFlag="1" FullSize="6487" LastModifiedTime="1287693745084" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91111048"/>
<File Checksum="0E9987631E6D6E99A5D0EDE2EE0532D1" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1287693745718" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
<File Checksum="F73A6CAEE24D79DE940CAF525CEA54C0" DeltaFlag="1" FullSize="2927064" LastModifiedTime="1287693748450" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="101021009"/>
<File Checksum="210E9367B3EF245FC16C151D605AA092" DeltaFlag="1" FullSize="76760" LastModifiedTime="1287693750797" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="101021009"/>
<File Checksum="1F86AEEAE9E7B57F6EEFFF543210C35D" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1287693751310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
</LiveUpdate>
</GroupIndex>
10/22 10:34:42 [6012] <mfn_DoGetIndexFile200>Parser Index File!
10/22 10:34:42 [6012] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
10/22 10:34:42 [6012] <GetIndexFileRequest:>COMPLETED
10/22 10:34:42 [6012] <IndexHeartbeatProc>GetIndexFile handling status: 0
10/22 10:34:42 [6012] <IndexHeartbeatProc>Switch Server flag=0
10/22 10:34:42 [6012] HEARTBEAT: Check Point 5.1
10/22 10:34:42 [6012] <IsInClientIPorOnLink> NextHop is equal to10.1.2.244,return TRUE
10/22 10:34:42 [6012] <mfn_GetOutIP> Out IP is:10.1.2.244
10/22 10:34:42 [6012] <IndexHeartbeatProc> Saved IP Address: 10.1.2.244
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:42 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:42 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:101021049
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:42 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:42 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: 100617018
10/22 10:34:42 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101021049
10/22 10:34:42 [6012] <Add2LUFileList:>File Info already exists, hence updating: {1CD85198-26C6-4bac-8C72-5D34B025DE35}101021049
10/22 10:34:42 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: 100313002
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {42B17E5E-4E9D-4157-88CB-966FB4985928}101020001
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {42B17E5E-4E9D-4157-88CB-966FB4985928}101020001
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:101020001
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {CC40C428-1830-44ef-B8B2-920A0B761793}101021009
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {CC40C428-1830-44ef-B8B2-920A0B761793}101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {4F889C4A-784D-40de-8539-6A29BAA43139}91111048
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {4F889C4A-784D-40de-8539-6A29BAA43139}91111048
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
10/22 10:34:43 [6012] <mfn_LiveUpdate:> Agent returned closest matching seq: <None>
10/22 10:34:43 [6012] <Add2LUFileList:>Adding LU Info to LU Download File List: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}101021009
10/22 10:34:43 [6012] <Add2LUFileList:>File Info already exists, hence updating: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:101021009
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
10/22 10:34:43 [6012] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_ONLINE
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
10/22 10:34:43 [6012] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
10/22 10:34:43 [6012] HEARTBEAT: Check Point 6
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
10/22 10:34:43 [6012] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
10/22 10:34:43 [6012] ReasonDescForFailure*** = Host Integrity check is disabled.
10/22 10:34:43 [6012] ReasonDescForFailure*** = Host Integrity check is disabled.
10/22 10:34:43 [6012] *** = <SSAInfo NameSpace="rpc" AgentID="4C5233330A0102F40053FF8937DAC3BC" ComputerID="0A2520C30A0102F40053FF8983B22A94" HardwareKey="E395AD7072470FA4BE9F711474732CCC" GroupID="DF71F3140A0102F40067692E98CD6670">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer"/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="50725138" ServicePack="" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 26 Stepping 5" ProcessorClock="2128" ProcessorNum="4"/>
<Memory Size="6432055296"/>
<Disk Letter="C:\" Size="106624446464"/>
<BIOS Version="DELL - 1"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="DF71-10/20/2010 14:32:48 841"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="480"/>
<DNSs><DNS Address="10.1.2.240"/></DNSs>
<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1287768883
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Free memory difference: 4669587456, Threshold: 0
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Free disk space difference: 77550534656, Threshold: 0
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
10/22 10:34:43 [6012] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="4C5233330A0102F40053FF8937DAC3BC" Timestamp="1287768883247"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3252754</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>280511000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>000000000000</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>30350368</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7208961:78</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929017" Owner="SyKnAppS" /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH" /><Moniker Id="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Version="6.1.0" Seq="80820001" Owner="COH" /></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
<GupStatus IsGup="0" NameSpace="rpc" ComputerID="0A2520C30A0102F40053FF8983B22A94"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1287755678650</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="4C5233330A0102F40053FF8937DAC3BC" ComputerID="0A2520C30A0102F40053FF8983B22A94" HardwareKey="E395AD7072470FA4BE9F711474732CCC" GroupID="DF71F3140A0102F40067692E98CD6670">
<AgentHIInfo Status="3" ReasonCode="105" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="W3DOMAIN.COM" LogonUser="operations" HostDomain="w3domain.com" HostName="ArtServer" HostDesc="ArtServer"/>
<SSAProduct Version="11.0.6100.645"/>
<SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="50725138" ServicePack="" Language="9"/>
<Processor ProcessorType="Intel64 Family 6 Model 26 Stepping 5" ProcessorClock="2128" ProcessorNum="4"/>
<Memory Size="6432055296"/>
<Disk Letter="C:\" Size="106624446464"/>
<BIOS Version="DELL - 1"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="DF71-10/20/2010 14:32:48 841"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="100313002"/>
<SSAUTC Bias="480"/>
<DNSs><DNS Address="10.1.2.240"/></DNSs>
<SSANICs><SSANIC Ip="10.1.2.244" Mac="f0-4d-a2-00-46-35" Gateway="10.1.2.1" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="4C5233330A0102F40053FF8937DAC3BC" ComputerID="0A2520C30A0102F40053FF8983B22A94" HardwareKey="E395AD7072470FA4BE9F711474732CCC" GroupID="DF71F3140A0102F40067692E98CD6670">
<SSAHostInfo>
<Memory Free="4669587456"/>
<Disk Letter="C:\" Free="77550534656"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
10/22 10:34:43 [6012] ************CSN=485
10/22 10:34:43 [6012] <mfn_MakePostUrl:>Request is: action=192&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&as=485&cn=[hex]417274536572766572&lun=[hex]6F7065726174696F6E73&udn=[hex]5733444F4D41494E2E434F4D
10/22 10:34:43 [6012] <mfn_PostAgentInfo>http://10.1.2.244:8014/secars/secars.dll?h=17BDEB2C2EF02A9CD9477954A90F9F1D5EFD4A78E4AD8D9160C27CD13D706E633D0E200E83E09F1C7CC313047A353368ECE4764BE37C250F956C097A5E3E9C0B9805228EAC2044FC76C65FA2E1FC80302684DF2E311BAF4AC30AE1F7927F11D7547F007DF790FCC4ECFF40CF00954396BEB37DE94062BA75E8F89F37D2249CB91CE9BBF1A379C1BB12C49056B001A0D2764B7DA419124A75A728AB9C497C15EB14DCA9FF0CDCE6ABBD5B8AD7598ACB2F26431FA36A1894790D15A431DC6C9F5DE88DE51A87A2F07FF8A3DD4860B6FC0565EE1AC5B26B60971F379BFB3665C78F43528E14D4A81301CD31DEE327D63A4BEABF8C79E79B95C74B13BE96B847CAD6E400527CC425CC2AC02C3743BC368FA20399B2A05E3249B713AA3686BB5B7DE31EA969B0905FF3E5348C5FE3E4E799DB
10/22 10:34:43 [6012] <mfn_PostAgentInfo>POST the total size=1412
10/22 10:34:43 [6012] <mfn_PostAgentInfo>Done with return code = 200
10/22 10:34:43 [6012] <IndexHeartbeatProc>===UPLOAD STAGE===
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
10/22 10:34:43 [6012] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
10/22 10:34:43 [6012] <PrepareEventLog>initialized technology extension processing ok
10/22 10:34:43 [6012] <CalcEventLogIndex>Need to send Event Log Type(0) from id 32 to 41
10/22 10:34:43 [6012] <PrepareEventLog>Allow total logs to send=10
10/22 10:34:43 [6012] <PrepareEventLog>nSecurityRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nSecurityRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nSystemRecordsTotal=10
10/22 10:34:43 [6012] <PrepareEventLog>nSystemRecordsToSend=100
10/22 10:34:43 [6012] <PrepareEventLog>nTrafficRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nTrafficRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nRawRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nRawRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nProcessRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nProcessRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nLANSensorRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nLANSensorRecordsToSend=0
10/22 10:34:43 [6012] <PrepareEventLog>nTechExtensionRecordsTotal=0
10/22 10:34:43 [6012] <PrepareEventLog>nTechExtensionRecordsToSend=0
10/22 10:34:43 [6012] <MakeSystemLog>The size of SYSTEM event logs is 4145.
10/22 10:34:43 [6012] <SyLink>The size of SYSTEM event logs is 4145.
10/22 10:34:43 [6012] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
10/22 10:34:43 [6012] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
10/22 10:34:43 [6012] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
10/22 10:34:43 [6012] <MakeProcessLog>Attached total 0 bytes process event logs.
10/22 10:34:43 [6012] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
10/22 10:34:43 [6012] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
10/22 10:34:43 [6012] ************CSN=486
10/22 10:34:43 [6012] <mfn_MakePostUrl:>Request is: action=195&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&groupid=0A9DFE140A0102F40116703AD2D23100&as=486&cn=[hex]417274536572766572&lun=[hex]6F7065726174696F6E73&udn=[hex]5733444F4D41494E2E434F4D
10/22 10:34:43 [6012] <SendEventLogToServer>http://10.1.2.244:8014/secars/secars.dll?h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
10/22 10:34:43 [6012] <SendEventLogToServer>eventlog-->SMS, size=911
10/22 10:34:43 [6012] <SendEventLogToServer>uploads the eventlog to server, size=911
10/22 10:34:43 [6012] <SendEventLogToServer>Query return code = 200
10/22 10:34:43 [6012] <SendEventLogToServer>EventLog-->SEM DONE!
10/22 10:34:43 [6012] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
10/22 10:34:43 [6012] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
10/22 10:34:43 [6012] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
10/22 10:34:43 [6012] <IndexHeartbeatProc>Enter Push Session
10/22 10:34:43 [6012] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
10/22 10:34:43 [6012] <MaintainPushConnection:>Push Connecton!
10/22 10:34:43 [6012] ************CSN=487
10/22 10:34:43 [6012] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=4C5233330A0102F40053FF8937DAC3BC&chk=7308C04D9BBA9774CECAEE98682421B1&ck=9D62BF7F8D8AA7FFD448C6474165505C&uchk=38854544E2C15BC382C23D2829937466&uck=FCC81D3B07940333A6B27F4E25D59165&groupid=0A9DFE140A0102F40116703AD2D23100&mode=0&as=487
10/22 10:34:43 [6012] <MaintainPushConnection:>http://10.1.2.244:8014/secars/secars.dll?h=EA556AB38A1EFFFDF02191FC68749FC65EFD4A78E4AD8D9160C27CD13D706E633D0E200E83E09F1C7CC313047A353368ECE4764BE37C250F956C097A5E3E9C0B9805228EAC2044FC76C65FA2E1FC80302684DF2E311BAF4AC30AE1F7927F11D7547F007DF790FCC4ECFF40CF00954396BEB37DE94062BA75E8F89F37D2249CB91CE9BBF1A379C1BB12C49056B001A0D2764B7DA419124A75A728AB9C497C15EB14DCA9FF0CDCE6ABBD5B8AD7598ACB2F26431FA36A1894790D15A431DC6C9F5D74F69BC3A2701F44FDF25D12B99B26EFF3310B38CDE0DED14D33A78A24CAFCCCB8FD2CC0F39C73C36FEDF3D352E78A4C9A80258F142F596508AB34742878E2148BD42F239984644B4514072701E3E345
10/22 10:35:35 [5000] <CExpBackoff::CExpBackoff()>
10/22 10:35:35 [5000] </CExpBackoff::CExpBackoff()>
10/22 10:35:35 [5000] SyLinkCreateConfig => Created instance: 0000000003B435C0
10/22 10:35:35 [5000] Importing ConfigObject: 0000000003C87AA0 into: 0000000003B435C0
10/22 10:35:35 [5000] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000003B435C0
10/22 10:35:35 [5000] <CRandomDelay::CRandomDelay()>
10/22 10:35:35 [5000] Random delay window: 0hour 5min 0sec
10/22 10:35:35 [5000] Computed random delay:0hour 0min 27sec 0millisec
10/22 10:35:35 [5000] </CRandomDelay::CRandomDelay()>
10/22 10:35:35 [5000] <LUThreadProc>Waiting for: 27000 milliseconds to start downloading LU contents
10/22 10:35:39 [5540] <CSyLink::mfn_DownloadNow()>
10/22 10:35:39 [5540] </CSyLink::mfn_DownloadNow()>
10/22 10:36:02 [5000] <LUThreadProc>Starting LU download.
10/22 10:36:02 [5000] <SetupTempLUFilePath:>NEW download: C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{1CD85198-26C6-4bac-8C72-5D34B025DE35}1010210491.TMP
10/22 10:36:02 [5000] <CHttpFileDownload::CHttpFileDownload()>
10/22 10:36:02 [5000] </CHttpFileDownload::CHttpFileDownload()>
10/22 10:36:02 [5000] <CHttpFileDownload::Do()>
10/22 10:36:02 [5000] <CHttpFileDownload::getRemainingBytesToDownload()>
10/22 10:36:02 [5000] Remaining bytes to download: 97101008
10/22 10:36:02 [5000] </CHttpFileDownload::getRemainingBytesToDownload()>
10/22 10:36:02 [5000] <CHttpConnector::SendRequest()>
10/22 10:36:02 [5000] Request> http://10.1.2.244:8014/content/{1CD85198-26C6-4bac-8C72-5D34B025DE35}/101021049/Full.zip
10/22 10:36:02 [5000] </CHttpConnector::SendRequest()>
10/22 10:36:02 [5000] <CHttpFileDownload::read()>
10/22 10:36:02 [5000] </CHttpFileDownload::read()>
10/22 10:36:02 [5000] </CHttpFileDownload::Do()>
10/22 10:36:02 [5000] <LUDownloader::GetContentToFile> completed.
10/22 10:36:02 [5000] <CHttpFileDownload::~CHttpFileDownload()>
10/22 10:36:02 [5000] </CHttpFileDownload::~CHttpFileDownload()>
10/22 10:36:02 [5000] <LUThreadProc>@@@@@@@@@ LU DEBUG ONLY- Download file failed due to wrong file size.
FileName:C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{1CD85198-26C6-4bac-8C72-5D34B025DE35}1010210491.TMP Expected file size: 97101008
10/22 10:36:02 [5000] <CExpBackoff::Increment()>
10/22 10:36:02 [5000] Backoff index incremented
10/22 10:36:02 [5000] Backoff wait index: 1
10/22 10:36:02 [5000] </CExpBackoff::Increment()>
10/22 10:36:02 [5000] <CExpBackoff::Wait()>
10/22 10:36:02 [5000] CExpBackoff wait time in seconds: 32
10/22 10:36:34 [5000] </CExpBackoff::Wait()>
10/22 10:36:42 [5540] <CSyLink::mfn_DownloadNow()>
10/22 10:36:42 [5540] </CSyLink::mfn_DownloadNow()>
10/22 10:37:34 [5000] SyLinkDeleteConfig => Deleting instance: 0000000003B435C0
10/22 10:37:34 [5000] SyLinkCreateConfig => Created instance: 0000000004706DA0
10/22 10:37:34 [5000] Importing ConfigObject: 0000000003C87AA0 into: 0000000004706DA0
10/22 10:37:34 [5000] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000004706DA0
10/22 10:37:34 [5000] <CRandomDelay::CRandomDelay()>
10/22 10:37:34 [5000] Random delay window: 0hour 5min 0sec
10/22 10:37:34 [5000] Computed random delay:0hour 3min 20sec 0millisec
10/22 10:37:34 [5000] </CRandomDelay::CRandomDelay()>
10/22 10:37:34 [5000] <LUThreadProc>Waiting for: 200000 milliseconds to start downloading LU contents
10/22 10:37:45 [5540] <CSyLink::mfn_DownloadNow()>
10/22 10:37:45 [5540] </CSyLink::mfn_DownloadNow()>