Endpoint Protection

 View Only
Expand all | Collapse all

GUP not update

Migration User

Migration UserMay 17, 2012 10:07 AM

  • 1.  GUP not update

    Posted May 17, 2012 09:00 AM

    Recently I have upgrade EPM version 12.RU1 MP1. I realized my GUP machine not taking update from server.

    GUPS system is windows server 2008 they showing last update 5 MAY 2012

    I have check GUPpoxy log and registry setting its showing propel y. and I have check telnet port B/W this to machine 2967 and 80 port also open but I don’t know what happen why GUP not taking update from SEPM server. Is it version issue B/W two diff server or some or…

    You can check below debug log. I have took from GUP machine.

    05/17 18:26:39 [3152:2572] Enterprise version, Build 301!!!

    05/17 18:26:39 [3152:2572] 2  -stop

    05/17 18:26:39 [3152:2572] User tried to stop smc service.

    05/17 18:26:39 [3152:2572] Smc service exit is protected by password. 

    05/17 18:26:39 [3152:2572] Setting Stop password event

    05/17 18:26:39 [3152:2572] Command line has been handled

    05/17 18:26:39 [976:256] command line stop fails

    05/17 18:26:43 [976:1880] SMCGui - 2948: Log viewerCloseAllPopupWindows

    05/17 18:26:43 [976:1880] User tried to stop smc service.

    05/17 18:26:43 [976:1880] Smc is stopping service

    05/17 18:26:43 [976:256] Service is shutting down

    05/17 18:26:43 [976:256] AVMan: Entering ReceiveMessage with msg id 458754

    05/17 18:26:43 [976:256] AVMan: Disabled event forwarding.

    05/17 18:26:43 [976:256] AVMan: Leaving ReceiveMessage

    05/17 18:26:43 [976:256] LUMan: Entering ReceiveMessage with message id 458754

     

    05/17 18:26:43 [976:256] LUMan: CMC notified LuMan that it is stopping

     

    05/17 18:26:43 [976:2616] HI: HI Engine thread is terminated

    05/17 18:26:43 [976:1880] SMCGui - 2948: SMC Closing all popups

    05/17 18:26:43 [976:1880] SMCGui - 2948: Log viewerCloseAllPopupWindows

    05/17 18:26:43 [976:1880] SMCGui - 2948: Kill Timer: 1024

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> !!!! ERROR !!!! The invalid parameter handler was called!

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> File       : (unavailable)

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> Function   : (unavailable)

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> Expression : (unavailable)

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> Line       : 0

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> !!!! ERROR !!!! (end)

    05/17 18:26:44 [976:256] Saving SMC State

    05/17 18:26:44 [976:256] chmod on file C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SerState.dat to read/write.

    05/17 18:26:44 [976:256] AVMan: Entering Enable -- enable=false

    05/17 18:26:44 [976:256] AVMan: Disabled event forwarding.

    05/17 18:26:44 [976:256] GUProxy: Enable called.

    05/17 18:26:44 [976:256] GUProxy: Enable

    05/17 18:26:44 [976:1352] Ending Auto location ThreadID = 1352

    05/17 18:26:44 [976:256] LUMan: Terminating plugin

     

    05/17 18:26:44 [976:256] LUMan: StopWorkerThread waiting for worker thread to complete

     

    05/17 18:26:44 [976:256] GUProxy: Terminate called.

    05/17 18:26:44 [976:256] GUProxy: Terminate

    05/17 18:26:44 [976:256] GUProxy: StopGUPServer

    05/17 18:26:44 [976:256] GUProxy: StopServerMonitor

    05/17 18:26:44 [976:256] GUProxy: StopListenThread

    05/17 18:26:44 [976:1548] GUProxy: invalid socket on accept, error 10004

    05/17 18:26:44 [976:256] AVMan: Entering Terminate

    05/17 18:26:44 [976:256] AVMan: Leaving Terminate

    05/17 18:26:44 [976:256] Stopping SyLink...

    05/17 18:26:44 [976:256] <SyLink>Stop begin.---->

    05/17 18:26:44 [976:256] <SyLink>Stopping LU download Thread.

    05/17 18:26:44 [976:2612] AH: Setting the Browser Session end option & Resetting the URL session ..

    05/17 18:26:44 [976:2604] <SyLink>***** Main Thread Exit ****

    05/17 18:26:45 [976:2612] <ParseHTTPStatusCode:>200=>200 OK

    05/17 18:26:45 [976:2612] AH: Setting the Browser Session end option & Resetting the URL session ..

    05/17 18:26:47 [976:2612] <ParseHTTPStatusCode:>200=>200 OK

    05/17 18:26:47 [976:2612] AH: Setting the Browser Session end option & Resetting the URL session ..

     

    Pleas share your opinion.

     

    Thanks

     

     



  • 2.  RE: GUP not update

    Broadcom Employee
    Posted May 17, 2012 09:05 AM

    can you post the sylink log from the GUP machine?

    How to enable Sylink Debugging for Symantec Endpoint Protection in the registry- SEP 12.1
    http://www.symantec.com/business/support/index?page=content&id=TECH104758
     



  • 3.  RE: GUP not update

    Trusted Advisor
    Posted May 17, 2012 09:08 AM

    Hello,

    Could you please upload the Sylink logs from the GUP client machine?

    What OS is this client machine running?



  • 4.  RE: GUP not update

    Posted May 17, 2012 09:20 AM

    Hi all

    find below sylink log

    GUP system OS is windows server 2008

    05/17 18:55:54 [1356] ~~~Sylink log started. (SEP Product Version in registry: 11.0.5002.333, Sylink File Version: 11.0.5002.301)
    05/17 18:55:54 [1356] Stored HostGUID=EA811C00C0A85A9600F52A14A1E1DBCD; outlen=16
    05/17 18:55:54 [1356] <RestoreSettings>Stored UserGuid=0; outlen=2
    05/17 18:55:54 [1356] <mfn_DecodeSSN>Sygate-SSN=7191
    05/17 18:55:54 [1356] <mfn_DecodeSSN>Read CSN=7192
    05/17 18:55:54 [1356] <mfn_DecodeSSN>Sygate-SSN=34
    05/17 18:55:54 [1356] <mfn_DecodeSSN>Read CSN=35
    05/17 18:55:54 [1356] Product Type=2,Major Ver=6,Minor Ver=1,Platform ID=18,OSType=33947922
    05/17 18:55:54 [1356] OS=Windows Server 2008 Standard Edition; number=6.1.7600
    05/17 18:55:54 [1356] SyLinkCreateInstance => Instance created: 00000000041D8180 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
    05/17 18:55:54 [1356] <GetOnlineNicInfo>:Netport Count=0
    05/17 18:55:54 [1356] <GetOnlineNicInfo>:NicInfo
    05/17 18:55:54 [1356] SyLinkCreateConfig => Created instance: 0000000004129650
    05/17 18:55:54 [1356] UseNewConfig => Created m_hNewConfig: 0000000004129650
    05/17 18:55:54 [1356] Importing ConfigObject: 0000000004149C60 into: 0000000004129650
    05/17 18:55:54 [1356] Importing ConfigObject: 0000000004149C60 into: 0000000004127270
    05/17 18:55:54 [1356] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/17 18:55:54 [1356] SSA packageType is set as 105
    05/17 18:55:54 [1356] SyLinkDeleteConfig => Deleting instance: 0000000004149C60
    05/17 18:55:54 [1356] <SetHiStatus>HI status is changed to=1; reason=127; rule=Host Integrity check passed
      Requirement: "Disable Windows Autoplay features on all device types" passed
      Requirement: "Disable Windows Autoplay features on all device types 2" passed
      Requirement: "Disable Guest Account 2" passed
      Requirement: "Disable Registry Tools" passed

    05/17 18:55:54 [1356] SyLinkCreateConfig => Created instance: 000000000540CEA0
    05/17 18:55:54 [1356] SetCurLocationName: Name is set to - Default
    05/17 18:55:54 [1356] SetCurLocationID: ID is set to - 90FDEB4DC0A85A9600A1918E4D7E4C16
    05/17 18:55:54 [1356] SyLinkCreateConfig => Created instance: 000000000540F280
    05/17 18:55:54 [1356] Importing ConfigObject: 000000000540F280 into: 0000000004129650
    05/17 18:55:54 [1356] Importing ConfigObject: 000000000540F280 into: 0000000004127270
    05/17 18:55:54 [1356] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/17 18:55:54 [1356] SyLinkDeleteConfig => Deleting instance: 000000000540F280
    05/17 18:55:54 [1356] SyLinkDeleteConfig => Deleting instance: 000000000540CEA0
    05/17 18:55:54 [1356] <CSyLink::Start()>
    05/17 18:55:54 [1356] <EncodeHelper::DecryptUrl>
    05/17 18:55:54 [1356] <CSyLink::Start> The last server used was '192.168.90.150'
    05/17 18:55:54 [1356] <CSyLink::ImportConfigFile()>
    05/17 18:55:54 [1356] CUpdateConfig::Dump
    05/17 18:55:54 [1356] </CSyLink::ImportConfigFile()>
    05/17 18:55:54 [1356] <GetDomainHostName>msz_DomainName is taken from szDomainName
    05/17 18:55:54 [1356] <GetDomainHostName>DomainName (Final)=dmart.in
    05/17 18:55:54 [1356] <HWID CSyLink::GetHardwareKey> Get Hardware ID
    05/17 18:55:54 [1356] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: A03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:55:54 [1356] <Start>Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87
    05/17 18:55:54 [1356] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
    05/17 18:55:54 [2120] <ScheduleNextUpdate>Manually assigned heartbeat=7065 seconds
    05/17 18:55:54 [2576] <HeartbeatThreadProc:>Thread is about to begin..
    05/17 18:55:54 [2120] Successfully created the heartbeat thread
    05/17 18:55:54 [1356] <Start>Started, contact SMS every 7200 seconds
    05/17 18:55:54 [1356] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/17 18:55:54 [1356] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    05/17 18:55:54 [1356] </CSyLink::Start()>
    05/17 18:55:55 [1356] <SetClientAuth>Received new User/Domain from SMC..  User: mubeen.khan User Domain: DMART
    05/17 18:55:55 [1356] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
    05/17 18:55:55 [1356] <GetLoginRdnsDomain>DNS domain=DMART.IN
    05/17 18:55:55 [1356] <SetClientAuth>Setting the User Domain to RDNS Domain ..
    05/17 18:55:55 [1356] <SetClientAuth>Logged in user info set to: DMART.IN/mubeen.khan
    05/17 18:55:55 [1356] <SetClientAuth>Marking User Change Notify to redo registration..
    05/17 18:55:55 [2576] <CheckHeartbeatTimer>====== Heartbeat loop starts at 18:55:55 ======
    05/17 18:55:55 [2576] <GetOnlineNicInfo>:Netport Count=1
    05/17 18:55:55 [2576] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.29.15" Mac="d0-67-e5-1a-76-37" Gateway="192.168.29.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/17 18:55:56 [2576] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRVE-4028-PDCdmart.inA03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:55:56 [2576] <CalcAgentHashKey>:CHKey=4424158D75ED82014710C95D62B618EF
    05/17 18:55:56 [2576] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRVE-4028-PDCdmart.in
    05/17 18:55:56 [2576] <CalcAgentHashKey>:CKey=36D96EE35D5FC767D835F5421412771B
    05/17 18:55:56 [2576] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRVE-4028-PDCdmart.inA03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:55:56 [2576] <CalcAgentHashKey>:UCHKey=2A16C4DA73FD603A11FAD1955449EC2B
    05/17 18:55:56 [2576] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRVE-4028-PDCdmart.in
    05/17 18:55:56 [2576] <CalcAgentHashKey>:UCKey=8FE6A660BEA457BD13AD43222435A9A6
    05/17 18:55:56 [2576] <DoHeartbeat>HardwareID=A03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:55:56 [2576] <DoHeartbeat>CHKey=4424158D75ED82014710C95D62B618EF
    05/17 18:55:56 [2576] <DoHeartbeat>CKey=36D96EE35D5FC767D835F5421412771B
    05/17 18:55:56 [2576] <DoHeartbeat>UCHKey=2A16C4DA73FD603A11FAD1955449EC2B
    05/17 18:55:56 [2576] <DoHeartbeat>UCKey=8FE6A660BEA457BD13AD43222435A9A6
    05/17 18:55:56 [2576] <DoHeartbeat> Set heartbeat event
    05/17 18:55:56 [2576] Use new configuration
    05/17 18:55:56 [2576] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 18:55:56 ======
    05/17 18:55:56 [2576] HEARTBEAT: Check Point 1
    05/17 18:55:56 [2576] HEARTBEAT: Check Point 2
    05/17 18:55:56 [2576] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/17 18:55:56 [2576] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/17 18:55:56 [2576] HEARTBEAT: Check Point 3
    05/17 18:55:56 [2576] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    05/17 18:55:56 [2576] HEARTBEAT: Check Point 4
    05/17 18:55:56 [2576] <RegHeartbeatProc>===Registration STAGE===
    05/17 18:55:56 [2576] <MakeRegisterData:>logon id (domain/user)=DMART.IN/mubeen.khan
    05/17 18:55:56 [2576] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="A4F23E3B0A01012A003B6DBDF6CBB652" AgentType="105" UserDomain="DMART.IN" LoginUser="mubeen.khan" ComputerDomain="dmart.in" ComputerName="DMSRVE-4028-PDC" PreferredGroup="My%20Company%5cH.O%5cHO%2064BIT%20DESKTOPS" PreferredMode="1" HardwareKey="A03C6E5F5B9A19313D7588952AD62DE4" SiteDomainName=""/>

    <SSAHostInfo><NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRVE-4028-PDC" HostDesc="" />

    <SSAProduct Version="11.0.5002.333" />

    <SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="33947922" ServicePack=""/>

    <Processor ProcessorType="Intel64%20Family%206%20Model%2023%20Stepping%2010" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <BIOS Version="DELL%20%20%20-%2020110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="0C1C-05%2f17%2f2012%2009%3a01%3a31%20796"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330" />

    <DNSs><DNS Address="192.168.29.15"/><DNS Address="192.168.29.13"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.29.15" Mac="d0-67-e5-1a-76-37" Gateway="192.168.29.100" SubnetMask="255.255.255.0"/></SSANICs>

    </SSAHostInfo>

    </SSARegData>
    05/17 18:55:56 [2576] <SyLink>[MakeRegisterData] registration Hardware Key=A03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:55:56 [2576] ************Reg CSN=36
    05/17 18:55:56 [2576] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1276

    s_session_id: A03C6E5F5B9A19313D7588952AD62DE4

    Sygate-SSN: 36

    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="A4F23E3B0A01012A003B6DBDF6CBB652" AgentType="105" UserDomain="DMART.IN" LoginUser="mubeen.khan" ComputerDomain="dmart.in" ComputerName="DMSRVE-4028-PDC" PreferredGroup="My%20Company%5cH.O%5cHO%2064BIT%20DESKTOPS" PreferredMode="1" HardwareKey="A03C6E5F5B9A19313D7588952AD62DE4" SiteDomainName=""/>

    <SSAHostInfo><NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRVE-4028-PDC" HostDesc="" />

    <SSAProduct Version="11.0.5002.333" />

    <SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="33947922" ServicePack=""/>

    <Processor ProcessorType="Intel64%20Family%206%20Model%2023%20Stepping%2010" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <BIOS Version="DELL%20%20%20-%2020110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="0C1C-05%2f17%2f2012%2009%3a01%3a31%20796"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330" />

    <DNSs><DNS Address="192.168.29.15"/><DNS Address="192.168.29.13"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.29.15" Mac="d0-67-e5-1a-76-37" Gateway="192.168.29.100" SubnetMask="255.255.255.0"/></SSANICs>

    </SSAHostInfo>

    </SSARegData>
    05/17 18:55:56 [2576] <SendRegistrationRequest:>http://192.168.90.150:80 [encrypted data]
    05/17 18:55:56 [2576] 18:55:56=>Send HTTP REQUEST
    05/17 18:55:57 [2576] 18:55:57=>HTTP REQUEST sent
    05/17 18:55:57 [2576] 18:55:57=>QUERY return code
    05/17 18:55:57 [2576] 18:55:57=>QUERY return code completed
    05/17 18:55:57 [2576] <SendRegistrationRequest:>SMS return=200
    05/17 18:55:57 [2576] <ParseHTTPStatusCode:>200=>200 OK
    05/17 18:55:57 [2576] <SendRegistrationRequest:>Content Lenght => 679
    05/17 18:55:57 [2576] HTTP returns status code=200
    05/17 18:55:57 [2576] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    05/17 18:55:57 [2576] <SendRegistrationRequest:>COMPLETED, returned 0
    05/17 18:55:57 [2576] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/17 18:55:57 [2576] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.29.15,return TRUE
    05/17 18:55:57 [2576] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.29.15
    05/17 18:55:57 [4032] SyLinkCreateConfig => Created instance: 000000000540C910
    05/17 18:55:57 [4032] Importing ConfigObject: 0000000004127270 into: 000000000540C910
    05/17 18:55:57 [4032] SyLinkDeleteConfig => Deleting instance: 000000000540C910
    05/17 18:55:57 [2576] HEARTBEAT: Check Point 5.1
    05/17 18:55:57 [2576] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
    05/17 18:55:57 [2576] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/17 18:55:57 [2576] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/17 18:55:57 [2576] HEARTBEAT: Check Point 8
    05/17 18:55:57 [2576] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/17 18:55:57 [2576] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/17 18:55:57 [2576] <RegHeartbeatProc>====== Registration Procedure stops at 18:55:57 ======
    05/17 18:55:57 [2576] HEARTBEAT: Check Point 10
    05/17 18:55:57 [2576] HEARTBEAT: Check Point Complete
    05/17 18:55:57 [2576] <RegHeartbeatProc>Done, Heartbeat=3seconds
    05/17 18:55:57 [2576] <CheckHeartbeatTimer>====== Heartbeat loop stops at 18:55:57 ======
    05/17 18:56:00 [2576] <CheckHeartbeatTimer>====== Heartbeat loop starts at 18:56:00 ======
    05/17 18:56:01 [2576] <GetOnlineNicInfo>:Netport Count=1
    05/17 18:56:01 [2576] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.29.15" Mac="d0-67-e5-1a-76-37" Gateway="192.168.29.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/17 18:56:01 [2576] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRVE-4028-PDCdmart.inA03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:56:01 [2576] <CalcAgentHashKey>:CHKey=4424158D75ED82014710C95D62B618EF
    05/17 18:56:01 [2576] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRVE-4028-PDCdmart.in
    05/17 18:56:01 [2576] <CalcAgentHashKey>:CKey=36D96EE35D5FC767D835F5421412771B
    05/17 18:56:01 [2576] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRVE-4028-PDCdmart.inA03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:56:01 [2576] <CalcAgentHashKey>:UCHKey=2A16C4DA73FD603A11FAD1955449EC2B
    05/17 18:56:01 [2576] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRVE-4028-PDCdmart.in
    05/17 18:56:01 [2576] <CalcAgentHashKey>:UCKey=8FE6A660BEA457BD13AD43222435A9A6
    05/17 18:56:01 [2576] <DoHeartbeat>HardwareID=A03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:56:01 [2576] <DoHeartbeat>CHKey=4424158D75ED82014710C95D62B618EF
    05/17 18:56:01 [2576] <DoHeartbeat>CKey=36D96EE35D5FC767D835F5421412771B
    05/17 18:56:01 [2576] <DoHeartbeat>UCHKey=2A16C4DA73FD603A11FAD1955449EC2B
    05/17 18:56:01 [2576] <DoHeartbeat>UCKey=8FE6A660BEA457BD13AD43222435A9A6
    05/17 18:56:01 [2576] <DoHeartbeat> Set heartbeat event
    05/17 18:56:01 [2576] Use new configuration
    05/17 18:56:01 [2576] <CSyLink::IndexHeartbeatProc()>
    05/17 18:56:01 [2576] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 0000000004127270
    05/17 18:56:01 [2576] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 18:56:01 ======
    05/17 18:56:01 [2576] HEARTBEAT: Check Point 1
    05/17 18:56:01 [2576] Get First Server!
    05/17 18:56:01 [2576] HEARTBEAT: Check Point 2
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/17 18:56:01 [2576] HEARTBEAT: Check Point 3
    05/17 18:56:01 [2576] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    05/17 18:56:01 [2576] HEARTBEAT: Check Point 4
    05/17 18:56:01 [2576] <IndexHeartbeatProc>===Get Index STAGE===
    05/17 18:56:01 [2576] ************CSN=7193
    05/17 18:56:01 [2576] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=EA811C00C0A85A9600F52A14A1E1DBCD&chk=4424158D75ED82014710C95D62B618EF&ck=36D96EE35D5FC767D835F5421412771B&uchk=2A16C4DA73FD603A11FAD1955449EC2B&uck=8FE6A660BEA457BD13AD43222435A9A6&hid=A03C6E5F5B9A19313D7588952AD62DE4&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&mode=0&hbt=7200&as=7193&cn=[hex]444D535256452D343032382D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E
    05/17 18:56:01 [2576] <GetIndexFileRequest:>http://192.168.90.150:80/secars/secars.dll?h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
    05/17 18:56:01 [2576] 18:56:1=>Send HTTP REQUEST
    05/17 18:56:01 [2576] 18:56:1=>HTTP REQUEST sent
    05/17 18:56:01 [2576] <GetIndexFileRequest:>SMS return=200
    05/17 18:56:01 [2576] <ParseHTTPStatusCode:>200=>200 OK
    05/17 18:56:01 [2576] <FindHeader>Sem-HashKey:=>4424158D75ED82014710C95D62B618EF
    05/17 18:56:01 [2576] <FindHeader>Sem-LANSensor:=>0
    05/17 18:56:01 [2576] <FindHeader>Sem-Signatue:=>5509D5AF38A4B8DA2F88DB9BC495C5D27060DA7CFE5BDD1985735F09EC72BAF68E9529F8E4767BCF87D2820820143585A4C13C11716A1DE16863AAA6B87986083FF51B729456673C9DBE67B43F4E503AE0EC49BF7B798F49EF8B1D5D2CE13A416C63D988EE23367C0DD3564FE971B0108C0B98F072040CAB5B75CCF1A53430F7
    05/17 18:56:01 [2576] <mfn_DoGetIndexFile200>Content Lenght => 1803
    05/17 18:56:01 [2576] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/17 18:56:01 [2576] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="4C6CBA3B0A01012A00E2B74594E6D7F4" ServerID="F80BE22E0A01012A0008E00D65A1F19E" GroupID="0C1CE975C0A85A96001F8CD2372C2BBE" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "17/05/2012 14:33:31">    <Profile Checksum="193EED12323D0C5DD8AB09DF69A24F51" SerialNumber="0C1C-05/17/2012 09:01:31 796" LastModifiedTime="17/05/2012  14:33:29"/>    <ConfigFile Checksum="1D3FD873E202F733057C8E324E1736FA" LastModifiedTime="09/05/2012  12:29:21"/>    <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="17/05/2012  14:33:31"/>    <SylinkFile Checksum="6EBCF973FE7215034BE5922ECAB6CF79" LastModifiedTime="17/05/2012  14:33:31"/>    <LSProfile Checksum="9E8660DAB864630DFC6E09F8BFFD3C14" SerialNumber ="0C1C-05/17/2012 09:01:31 796" LastModifiedTime ="17/05/2012  14:33:31"/>
        <LiveUpdate>
            <File Checksum="42141D64D6A40508A7AEDE2364040A53" DeltaFlag="1" FullSize="191636546" LastModifiedTime="1337215159640" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="120516003"/>
              <File Checksum="37678E3B3BE9B85AFCC06D89F48736F6" DeltaFlag="1" FullSize="1233446" LastModifiedTime="1337214965765" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="120515001"/>
              <File Checksum="570D9BE8AC905469511950626D124B94" DeltaFlag="1" FullSize="3501472" LastModifiedTime="1337214962906" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="120515001"/>
              <File Checksum="DE1C8B794EF1222E834B87D45A47F1AE" DeltaFlag="1" FullSize="631046" LastModifiedTime="1337214954468" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="120516024"/>
              <File Checksum="1F76A81C90DEFF9B6E5F4C5BFEAC1936" DeltaFlag="1" FullSize="1787688" LastModifiedTime="1337214944218" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="120516003"/>
              <File Checksum="D1E40576A4DAFDF1F25C5CC6F9CD3FC6" DeltaFlag="1" FullSize="193633934" LastModifiedTime="1337214610218" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="120516003"/>
              <File Checksum="94C8491DF0E126A4F0D9F2EB221A8F78" DeltaFlag="1" FullSize="1210969" LastModifiedTime="1337127212312" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="120515001"/>
              <File Checksum="55C9BFCF6BE45BACB972A0750BFDD86C" DeltaFlag="1" FullSize="2290935" LastModifiedTime="1336698481687" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="120508011"/>
              <File Checksum="A63A9B34531C78B465244FE862FCC565" DeltaFlag="1" FullSize="5013" LastModifiedTime="1336551047734" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="110607005"/>
              <File Checksum="115C2CA95B2080123FF7F8B1A2667164" DeltaFlag="1" FullSize="26328" LastModifiedTime="1336549659500" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="120411035"/>
              <File Checksum="C1DE1ACA67D1B83A53134971ADAB0946" DeltaFlag="1" FullSize="669829" LastModifiedTime="1262959698871" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
              <File Checksum="CC62A6A3C908DAC0EA75DE68543C0725" DeltaFlag="1" FullSize="650307" LastModifiedTime="1262959706175" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
              <File Checksum="E95512292358D9A67294FDF360D23EF5" DeltaFlag="1" FullSize="88188" LastModifiedTime="1262959905742" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
              <File Checksum="9B759D9C7D5F9790DB24E977AE112838" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1262959908348" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
              <File Checksum="3BA4DF96038CBE26F5E4A04C28F4E9A1" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1262959914310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
              <File Checksum="0684E4361FC0A9A82AF197E35E59F7DA" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291340590656" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
              <File Checksum="D1E40576A4DAFDF1F25C5CC6F9CD3FC6" DeltaFlag="1" FullSize="193633934" LastModifiedTime="1337214610218" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="120516003"/>
              <File Checksum="B37F8BFFC325F9E3F842BA559AB929A7" DeltaFlag="1" FullSize="88891" LastModifiedTime="1337214841078" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="120516003"/>
              <File Checksum="CD4B520C5E3B93515DA4B989A483589A" DeltaFlag="1" FullSize="11315689" LastModifiedTime="1337214939687" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="120516003"/>
              <File Checksum="42141D64D6A40508A7AEDE2364040A53" DeltaFlag="1" FullSize="191636546" LastModifiedTime="1337215159640" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="120516003"/>
              <File Checksum="9C55AEA803255E700B981726BCA0932B" DeltaFlag="1" FullSize="11315718" LastModifiedTime="1337215286000" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="120516003"/>
              <File Checksum="809DEDC48EC4694D415942C924D44DE2" DeltaFlag="1" FullSize="88877" LastModifiedTime="1337215342671" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="120516003"/>

        </LiveUpdate>
    </GroupIndex>
    05/17 18:56:01 [2576] <mfn_DoGetIndexFile200>Parser Index File!
    05/17 18:56:01 [2576] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    05/17 18:56:01 [2576] <GetIndexFileRequest:>COMPLETED
    05/17 18:56:01 [2576] <IndexHeartbeatProc>GetIndexFile handling status: 0
    05/17 18:56:01 [2576] <IndexHeartbeatProc>Switch Server flag=0
    05/17 18:56:01 [2576] HEARTBEAT: Check Point 5.1
    05/17 18:56:01 [2576] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/17 18:56:01 [2576] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.29.15,return TRUE
    05/17 18:56:01 [2576] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.29.15
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:120515001
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:120515001
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:120516024
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:120515001
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:120508011
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:110607005
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120411035
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    05/17 18:56:01 [2576] <mfn_LiveUpdate:> Agent returned closest matching seq: 120504033
    05/17 18:56:01 [2576] <Add2LUFileList:>Adding LU Info to LU Download File List: {1CD85198-26C6-4bac-8C72-5D34B025DE35}120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:120516003
    05/17 18:56:01 [2576] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/17 18:56:01 [2576] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/17 18:56:01 [2576] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:120516003
    05/17 18:56:01 [2576] <mfn_PrepareLUContent:>Requesting LU Info for :  Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Target Seq:120516003
    05/17 18:56:01 [2576] ************CSN=7194
    05/17 18:56:01 [2576] <GetContentFileInfoUrl:> Request is: action=52&hostid=EA811C00C0A85A9600F52A14A1E1DBCD&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&fn=[hex]7B31434438353139382D323643362D346261632D384337322D3544333442303235444533357D&cdn=[hex]444D535256452D343032382D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E&lu=6&luseq=120504033,&lulasttriedseq=&lutargetseq=120516003&lucontentstate=0
    05/17 18:56:01 [2576] <mfn_RequestLUContentInfo:>URL: /secars/secars.dll?h=5F678D110CCFE614D544322C1F46FE8042D6CC7EC0C2D19BD6000949F690658190843B320438FC878F4E5EA9221A08F71FDD9635368246C77C63BADE96F8DC03D2033D5EC17583355ECEEDD25E78FA5732264753D97D0517A08EDE11B66FC7F5FE13DFBCC659FED55E58CB415ECC7A500EC4A43177AE2490E4E0AF9D6CEDA874D6F4ABC5BB043900FF33DE0DCA04C1685292AFCBD39D600CF25B3B0AA442A8275FE4FBB258CE65F93A215169D6453A27C24C761236CF5155A6EA6192F218574CE3DAFF75C538BDEF27307BE9EB0B71ABFE01CC8C17E2C4397F46CF130E687781F95F2C9E87390C853BA1480C8A98D5437A15DD574582F11F5F5CF222718CD282749ADE15B84C9D8266FFFE4B593A698F931A083FF6DFC71FC5649C26DE74FAF47AB4F66E1C2BD2148AA2741BA022F8D88A339197FCD5F56B7440820EC2BAAFA4EBDA2454659C2122DF2A690C2314B74BDFE93B2805882C1A889041E7EBC6294891A92D8A9C361C8A3D73B285BE8306DC
    05/17 18:56:01 [2576] <SendUrlAndReceiveResponse:>http://192.168.90.150:80/secars/secars.dll?h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
    05/17 18:56:01 [2576] 18:56:1=>Send HTTP REQUEST
    05/17 18:56:02 [2576] 18:56:2=>HTTP REQUEST sent
    05/17 18:56:02 [2576] <SendUrlAndReceiveResponse:>SMS return=200
    05/17 18:56:02 [2576] <ParseHTTPStatusCode:>200=>200 OK
    05/17 18:56:02 [2576] <mfn_RequestLUContentInfo:>Received LU Info :  Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Target Seq:120516003 Response header: HTTP/1.1 200 OK

    Date: Thu, 17 May 2012 13:15:59 GMT

    Server: Apache

    Sem-SetContentLength: 1

    Sem-FileLength: 193633934

    Sem-PackageFileLength: 193633934

    Sem-LUPath: /content/{07B590B3-9282-482f-BBAA-6D515D385869}/120516003/Full.zip

    Sem-LUFull: 1

    Sem-LUDeltaBaseSeqName:

    Sem-PackageType: 1

    Sem-DeltaMethod: 1

    Connection: close

    Content-Length: 193633934

    Content-Type: text/html




    05/17 18:56:02 [2576] <FindHeader>Sem-LUFull:=>1
    05/17 18:56:02 [2576] <mfn_RequestLUContentInfo:>Sem-LUFull:1
    05/17 18:56:02 [2576] <FindHeader>Sem-PackageType:=>1
    05/17 18:56:02 [2576] <mfn_RequestLUContentInfo:>Sem-PackageType:1
    05/17 18:56:02 [2576] <FindHeader>Sem-DeltaMethod:=>1
    05/17 18:56:02 [2576] <FindHeader>Sem-LUPath:=>/content/{07B590B3-9282-482f-BBAA-6D515D385869}/120516003/Full.zip
    05/17 18:56:02 [2576] <FindHeader>Content-Length:=>193633934
    05/17 18:56:02 [2576] <UpdateLUFileList:>Updating existing Download File List with : {1CD85198-26C6-4bac-8C72-5D34B025DE35}120516003
    05/17 18:56:02 [2576] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/17 18:56:02 [2576] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/17 18:56:02 [2576] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=7200 seconds
    05/17 18:56:02 [2576] HEARTBEAT: Check Point 6
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    05/17 18:56:02 [2576] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    05/17 18:56:02 [2576] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    05/17 18:56:02 [2576] ReasonDescForFailure*** = Host Integrity check passed
    05/17 18:56:02 [2576] ReasonDescForFailure*** = Host Integrity check passed
    05/17 18:56:02 [2576] *** = <SSAInfo NameSpace="rpc" AgentID="EA811C00C0A85A9600F52A14A1E1DBCD" ComputerID="B57F89F7C0A85A9600F52A1408B03EFD" HardwareKey="A03C6E5F5B9A19313D7588952AD62DE4" GroupID="0C1CE975C0A85A96001F8CD2372C2BBE">

    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRVE-4028-PDC" HostDesc=""/>

    <SSAProduct Version="11.0.5002.333"/>

    <SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="33947922" ServicePack="" Language="9"/>

    <Processor ProcessorType="Intel64 Family 6 Model 23 Stepping 10" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <Disk Letter="C:\" Size="41943035904"/>

    <BIOS Version="DELL   - 20110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="0C1C-05/17/2012 09:01:31 796"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330"/>

    <DNSs><DNS Address="192.168.29.15"/><DNS Address="192.168.29.13"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.29.15" Mac="d0-67-e5-1a-76-37" Gateway="192.168.29.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>

    </SSAHostInfo>

    <RebootRequired Status="0"></RebootRequired>

    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

    </SSAInfo>


    05/17 18:56:02 [2576] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1337261162
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>Free memory difference: 2786557952, Threshold: 0
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>Free disk space difference: 27678420992, Threshold: 0
    05/17 18:56:02 [2576] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    05/17 18:56:02 [2576] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    05/17 18:56:02 [2576] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>

    <SESAgentOpState AgentID="EA811C00C0A85A9600F52A14A1E1DBCD" Timestamp="1337261162019"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>33</PatternFileRevision><UsingPattern>3754017</UsingPattern><PatternFileSequence>134029</PatternFileSequence><PatternFileDate>2A0404000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>2A0411062302</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>19011542</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7274498:131081</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
    <GupStatus IsGup="0" NameSpace="rpc" ComputerID="B57F89F7C0A85A9600F52A1408B03EFD"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>0</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="EA811C00C0A85A9600F52A14A1E1DBCD" ComputerID="B57F89F7C0A85A9600F52A1408B03EFD" HardwareKey="A03C6E5F5B9A19313D7588952AD62DE4" GroupID="0C1CE975C0A85A96001F8CD2372C2BBE">

    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRVE-4028-PDC" HostDesc=""/>

    <SSAProduct Version="11.0.5002.333"/>

    <SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="33947922" ServicePack="" Language="9"/>

    <Processor ProcessorType="Intel64 Family 6 Model 23 Stepping 10" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <Disk Letter="C:\" Size="41943035904"/>

    <BIOS Version="DELL   - 20110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="0C1C-05/17/2012 09:01:31 796"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330"/>

    <DNSs><DNS Address="192.168.29.15"/><DNS Address="192.168.29.13"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.29.15" Mac="d0-67-e5-1a-76-37" Gateway="192.168.29.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>

    </SSAHostInfo>

    <RebootRequired Status="0"></RebootRequired>

    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

    </SSAInfo>

    ]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="EA811C00C0A85A9600F52A14A1E1DBCD" ComputerID="B57F89F7C0A85A9600F52A1408B03EFD" HardwareKey="A03C6E5F5B9A19313D7588952AD62DE4" GroupID="0C1CE975C0A85A96001F8CD2372C2BBE">

    <SSAHostInfo>

    <Memory Free="2786557952"/>

    <Disk Letter="C:\" Free="27678420992"/>

    </SSAHostInfo>

    </SSAInfo>

    ]]></Data></TechID></SESAgentOpState>
    05/17 18:56:02 [2576] ************CSN=7195
    05/17 18:56:02 [2576] <mfn_MakePostUrl:>Request is: action=192&hostid=EA811C00C0A85A9600F52A14A1E1DBCD&chk=4424158D75ED82014710C95D62B618EF&ck=36D96EE35D5FC767D835F5421412771B&uchk=2A16C4DA73FD603A11FAD1955449EC2B&uck=8FE6A660BEA457BD13AD43222435A9A6&as=7195&cn=[hex]444D535256452D343032382D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>http://192.168.90.150:80/secars/secars.dll?h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
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>POST the total size=1268
    05/17 18:56:02 [2576] <mfn_PostAgentInfo>Done with return code = 200
    05/17 18:56:02 [2576] <IndexHeartbeatProc>===UPLOAD STAGE===
    05/17 18:56:02 [2576] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    05/17 18:56:02 [2576] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    05/17 18:56:02 [2576] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    05/17 18:56:02 [2576] <PrepareEventLog>initialized technology extension processing ok
    05/17 18:56:02 [2576] <CalcEventLogIndex>Need to send Event Log Type(0) from id 314 to 322
    05/17 18:56:02 [2576] <PrepareEventLog>Allow total logs to send=9
    05/17 18:56:02 [2576] <PrepareEventLog>nSecurityRecordsTotal=0
    05/17 18:56:02 [2576] <PrepareEventLog>nSecurityRecordsToSend=0
    05/17 18:56:02 [2576] <PrepareEventLog>nSystemRecordsTotal=9
    05/17 18:56:02 [2576] <PrepareEventLog>nSystemRecordsToSend=100
    05/17 18:56:02 [2576] <PrepareEventLog>nTrafficRecordsTotal=0
    05/17 18:56:02 [2576] <PrepareEventLog>nTrafficRecordsToSend=0
    05/17 18:56:02 [2576] <PrepareEventLog>nRawRecordsTotal=0
    05/17 18:56:02 [2576] <PrepareEventLog>nRawRecordsToSend=0
    05/17 18:56:02 [2576] <PrepareEventLog>nProcessRecordsTotal=0
    05/17 18:56:02 [2576] <PrepareEventLog>nProcessRecordsToSend=0
    05/17 18:56:02 [2576] <PrepareEventLog>nLANSensorRecordsTotal=0
    05/17 18:56:02 [2576] <PrepareEventLog>nLANSensorRecordsToSend=0
    05/17 18:56:02 [2576] <PrepareEventLog>nTechExtensionRecordsTotal=0
    05/17 18:56:02 [2576] <PrepareEventLog>nTechExtensionRecordsToSend=0
    05/17 18:56:02 [2576] <MakeSystemLog>The size of SYSTEM event logs is 3761.
    05/17 18:56:02 [2576] <SyLink>The size of SYSTEM event logs is 3761.
    05/17 18:56:02 [2576] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
    05/17 18:56:02 [2576] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    05/17 18:56:02 [2576] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    05/17 18:56:02 [2576] <MakeProcessLog>Attached total 0 bytes process event logs.
    05/17 18:56:02 [2576] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    05/17 18:56:02 [2576] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    05/17 18:56:02 [2576] ************CSN=7196
    05/17 18:56:02 [2576] <mfn_MakePostUrl:>Request is: action=195&hostid=EA811C00C0A85A9600F52A14A1E1DBCD&chk=4424158D75ED82014710C95D62B618EF&ck=36D96EE35D5FC767D835F5421412771B&uchk=2A16C4DA73FD603A11FAD1955449EC2B&uck=8FE6A660BEA457BD13AD43222435A9A6&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=7196&cn=[hex]444D535256452D343032382D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E
    05/17 18:56:02 [2576] <SendEventLogToServer>http://192.168.90.150:80/secars/secars.dll?h=39613E136FC4ED04D2E7E4D1D5CF010BE7A46B9C05B7CF0F7854C70C8763556D68D74ECF762A95A56640C66752708CF6599963FBA6FF932203AC731A2BA4C3626B2E2751F06DF4619CEBD76A659535BA6D60D7DB20F5487ABA272A761455E18310DF4D1507C724113CF566772F87E13C121881F9B5E1B324EBE27030286040DB64B8608FBE452D1FC125D14F39BFC35DCDAD19FEA8824AD71BC7078CAAE290B757C360BEC4159DEDA261DD3C9E9E108F43CFFFCBF8873CE6FF745737AEE8B60D7B41D1CF7B3B06E8C6BED83B76183CB204C88478C7013B152728C07D6E44000A8FC85E3FCA69B4AFFB01C355BEC8E6ED408E7F93980B7196F63B78F313D21EA6AE12260519F606BD763D65BF182E14A7A16D0963631A89834D861F6D61278DD75DB516645C371D7BAB2E46B9EE492BE7A14A818EE2E475418E61A23192ECB39940F5A2674C591846AA6DB9A23CC0A0D823BE7459D839DCE96A5BBE1FCFD7DD07
    05/17 18:56:02 [2576] <SendEventLogToServer>eventlog-->SMS, size=868
    05/17 18:56:02 [2576] <SendEventLogToServer>uploads the eventlog to server, size=868
    05/17 18:56:02 [2576] <SendEventLogToServer>Query return code = 200
    05/17 18:56:02 [2576] <SendEventLogToServer>EventLog-->SEM DONE!
    05/17 18:56:02 [2576] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    05/17 18:56:02 [2576] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    05/17 18:56:02 [2576] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
    05/17 18:56:02 [2576] HEARTBEAT: Check Point 8
    05/17 18:56:02 [2576] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/17 18:56:02 [2576] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/17 18:56:02 [2576] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 18:56:02 ======
    05/17 18:56:02 [2576] <IndexHeartbeatProc>Set Heartbeat Result= 2
    05/17 18:56:02 [2576] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    05/17 18:56:02 [2576] Use new configuration
    05/17 18:56:02 [2576] HEARTBEAT: Check Point Complete
    05/17 18:56:02 [2576] <IndexHeartbeatProc>Done, Heartbeat=7200seconds
    05/17 18:56:02 [2576] </CSyLink::IndexHeartbeatProc()>
    05/17 18:56:02 [2576] <CheckHeartbeatTimer>====== Heartbeat loop stops at 18:56:02 ======
     



  • 5.  RE: GUP not update

    Trusted Advisor
    Posted May 17, 2012 09:35 AM

    Hello,

    Upon checking your Logs, we see the Below:

    05/17 18:55:54 [1356] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: A03C6E5F5B9A19313D7588952AD62DE4
    05/17 18:55:54 [1356] <Start>Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87
    05/17 18:55:54 [1356] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87

    05/17 18:55:54 [2120] <ScheduleNextUpdate>Manually assigned heartbeat=7065 seconds
    05/17 18:55:54 [2576] <HeartbeatThreadProc:>Thread is about to begin..

    Check this Article:

    Symantec Endpoint Protection (SEP) client cannot connect to Symantec Endpoint Protection Manager (SEPM), Error: Unable to create Session with 'No Proxies' settings - Error Code: 87

    http://www.symantec.com/docs/TECH158994

    Hope that helps!!



  • 6.  RE: GUP not update

    Broadcom Employee
    Posted May 17, 2012 09:35 AM

    the client running with 2012/05/04/ rev 033 have requested SEPM to download the definition 2012/05/16 rev003. The update is full.zip around 180 MB. There is no mention of failure!
     



  • 7.  RE: GUP not update

    Posted May 17, 2012 09:55 AM
    we have use only 128 but link is to possible is this 128 mb get this line??


  • 8.  RE: GUP not update

    Posted May 17, 2012 10:05 AM
    we have use only 128 bit link b/w sepm and gup so is to possible is this 128 mb get this line??


  • 9.  RE: GUP not update

    Posted May 17, 2012 10:07 AM
    i" ll check and get back to you


  • 10.  RE: GUP not update

    Posted May 18, 2012 08:26 AM

    Keep in mind a SEP client acting as a GUP will use its own GUP feature to update, like any other clients.

    First, I would suggest you to take a look at SharedUpdates folder in SEP install path, and see if it already contains definitions. If not, it means the definitions were not downloaded from the SEPM by the GUP feature.

    To see if the GUP is seeing clients connecting, and asking for files to the manager, you will need to enable SMC debugging (http://www.symantec.com/docs/TECH104758) and check for such lines in the log:
     

    04/02 08:35:53 [984:3416] GUProxy: accepted socket 2780 for 10.0.31.105 port 2814
    04/02 08:35:53 [984:3244] GUProxy: Begin to handle accepted socket 2780

    => a client (10.0.31.105) get connected to the GUP
     

    03/24 13:26:08 [1436:1796] GUPROXY - GUProxy mangled file - #content#{C60DC234-65F9-4674-94AE-62158EFCA433}#80324005#delta80323019!dax 

    => GUP start downloading content (32bits virus definitions here) from the SEPM

     

    Please refer to http://www.symantec.com/docs/TECH104539 for deeper troubleshooting.

     



  • 11.  RE: GUP not update

    Posted May 19, 2012 02:33 AM

     

    Hi John,,,,

    You can check below debug log. I have took from GUP machine.

    05/17 18:26:39 [3152:2572] Enterprise version, Build 301!!!

    05/17 18:26:39 [3152:2572] 2  -stop

    05/17 18:26:39 [3152:2572] User tried to stop smc service.

    05/17 18:26:39 [3152:2572] Smc service exit is protected by password. 

    05/17 18:26:39 [3152:2572] Setting Stop password event

    05/17 18:26:39 [3152:2572] Command line has been handled

    05/17 18:26:39 [976:256] command line stop fails

    05/17 18:26:43 [976:1880] SMCGui - 2948: Log viewerCloseAllPopupWindows

    05/17 18:26:43 [976:1880] User tried to stop smc service.

    05/17 18:26:43 [976:1880] Smc is stopping service

    05/17 18:26:43 [976:256] Service is shutting down

    05/17 18:26:43 [976:256] AVMan: Entering ReceiveMessage with msg id 458754

    05/17 18:26:43 [976:256] AVMan: Disabled event forwarding.

    05/17 18:26:43 [976:256] AVMan: Leaving ReceiveMessage

    05/17 18:26:43 [976:256] LUMan: Entering ReceiveMessage with message id 458754

     

    05/17 18:26:43 [976:256] LUMan: CMC notified LuMan that it is stopping

     

    05/17 18:26:43 [976:2616] HI: HI Engine thread is terminated

    05/17 18:26:43 [976:1880] SMCGui - 2948: SMC Closing all popups

    05/17 18:26:43 [976:1880] SMCGui - 2948: Log viewerCloseAllPopupWindows

    05/17 18:26:43 [976:1880] SMCGui - 2948: Kill Timer: 1024

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> !!!! ERROR !!!! The invalid parameter handler was called!

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> File       : (unavailable)

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> Function   : (unavailable)

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> Expression : (unavailable)

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> Line       : 0

    05/17 18:26:43 [976:1880] <HandleInvalidParameter> !!!! ERROR !!!! (end)

    05/17 18:26:44 [976:256] Saving SMC State

    05/17 18:26:44 [976:256] chmod on file C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SerState.dat to read/write.

    05/17 18:26:44 [976:256] AVMan: Entering Enable -- enable=false

    05/17 18:26:44 [976:256] AVMan: Disabled event forwarding.

    05/17 18:26:44 [976:256] GUProxy: Enable called.

    05/17 18:26:44 [976:256] GUProxy: Enable

    05/17 18:26:44 [976:1352] Ending Auto location ThreadID = 1352

    05/17 18:26:44 [976:256] LUMan: Terminating plugin

     

    05/17 18:26:44 [976:256] LUMan: StopWorkerThread waiting for worker thread to complete

     

    05/17 18:26:44 [976:256] GUProxy: Terminate called.

    05/17 18:26:44 [976:256] GUProxy: Terminate

    05/17 18:26:44 [976:256] GUProxy: StopGUPServer

    05/17 18:26:44 [976:256] GUProxy: StopServerMonitor

    05/17 18:26:44 [976:256] GUProxy: StopListenThread

    05/17 18:26:44 [976:1548] GUProxy: invalid socket on accept, error 10004

    05/17 18:26:44 [976:256] AVMan: Entering Terminate

    05/17 18:26:44 [976:256] AVMan: Leaving Terminate

    05/17 18:26:44 [976:256] Stopping SyLink...

    05/17 18:26:44 [976:256] <SyLink>Stop begin.---->

    05/17 18:26:44 [976:256] <SyLink>Stopping LU download Thread.

    05/17 18:26:44 [976:2612] AH: Setting the Browser Session end option & Resetting the URL session ..

    05/17 18:26:44 [976:2604] <SyLink>***** Main Thread Exit ****

    05/17 18:26:45 [976:2612] <ParseHTTPStatusCode:>200=>200 OK

    05/17 18:26:45 [976:2612] AH: Setting the Browser Session end option & Resetting the URL session ..

    05/17 18:26:47 [976:2612] <ParseHTTPStatusCode:>200=>200 OK

    05/17 18:26:47 [976:2612] AH: Setting the Browser Session end option & Resetting the URL session ..

     

    Pleas share your opinion.

     

    Thanks



  • 12.  RE: GUP not update

    Broadcom Employee
    Posted May 19, 2012 02:54 AM

    i suggest to open a support ticket , this log does not indicate much about failure of content



  • 13.  RE: GUP not update

    Posted May 19, 2012 07:53 PM

    Hi Revenge,

    Not sure, but this issue could be related to your other thread:

    https://www-secure.symantec.com/connect/forums/sepm-121ru1-mp1-issue

    Shulk.



  • 14.  RE: GUP not update

    Posted May 21, 2012 03:22 AM

    ok thanks for replay..

    but another scenario,,

    my GUPs machinea take update from SEPM but clients not taking update from GUP.

    see below sylink monitor logs

    and please suggest...

     

    05/21 12:38:47 [4860] ~~~Sylink log started. (SEP Product Version in registry: 11.0.5002.333, Sylink File Version: 11.0.5002.301)
    05/21 12:38:47 [4860] Stored HostGUID=635347D6C0A85A9600661C780037AF7E; outlen=16
    05/21 12:38:47 [4860] <RestoreSettings>Stored UserGuid=0; outlen=2
    05/21 12:38:47 [4860] <mfn_DecodeSSN>Sygate-SSN=41599
    05/21 12:38:47 [4860] <mfn_DecodeSSN>Read CSN=41600
    05/21 12:38:47 [4860] <mfn_DecodeSSN>Sygate-SSN=31
    05/21 12:38:47 [4860] <mfn_DecodeSSN>Read CSN=32
    05/21 12:38:47 [4860] Product Type=3,Major Ver=5,Minor Ver=2,Platform ID=34,OSType=50659874
    05/21 12:38:47 [4860] OS=Windows Server 2003 family Enterprise Edition; number=5.2.3790
    05/21 12:38:47 [4860] SyLinkCreateInstance => Instance created: 02029008 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
    05/21 12:38:47 [4860] <GetOnlineNicInfo>:Netport Count=0
    05/21 12:38:47 [4860] <GetOnlineNicInfo>:NicInfo
    05/21 12:38:47 [4860] SyLinkCreateConfig => Created instance: 01F926E8
    05/21 12:38:47 [4860] UseNewConfig => Created m_hNewConfig: 01F926E8
    05/21 12:38:47 [4860] Importing ConfigObject: 01F8F1A0 into: 01F926E8
    05/21 12:38:47 [4860] Importing ConfigObject: 01F8F1A0 into: 01F91448
    05/21 12:38:47 [4860] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 12:38:47 [4860] SSA packageType is set as 105
    05/21 12:38:47 [4860] SyLinkDeleteConfig => Deleting instance: 01F8F1A0
    05/21 12:38:48 [4860] <SetHiStatus>HI status is changed to=1; reason=127; rule=Host Integrity check passed
      Requirement: "Disable Windows Autoplay features on all device types" passed
      Requirement: "Disable Windows Autoplay features on all device types 2" passed
      Requirement: "Disable Guest Account 2" passed
      Requirement: "Disable Registry Tools" passed

    05/21 12:38:48 [4860] SyLinkCreateConfig => Created instance: 02332648
    05/21 12:38:48 [4860] SetCurLocationName: Name is set to - Default
    05/21 12:38:48 [4860] SetCurLocationID: ID is set to - E24EDDDDC0A85A9600BBE647E4AB370F
    05/21 12:38:48 [4860] SyLinkCreateConfig => Created instance: 023338E8
    05/21 12:38:48 [4860] Importing ConfigObject: 023338E8 into: 01F926E8
    05/21 12:38:48 [4860] Importing ConfigObject: 023338E8 into: 01F91448
    05/21 12:38:48 [4860] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 12:38:48 [4860] SyLinkDeleteConfig => Deleting instance: 023338E8
    05/21 12:38:48 [4860] SyLinkDeleteConfig => Deleting instance: 02332648
    05/21 12:38:48 [4860] <CSyLink::Start()>
    05/21 12:38:48 [4860] <EncodeHelper::DecryptUrl>
    05/21 12:38:48 [4860] <CSyLink::Start> The last server used was '192.168.90.150'
    05/21 12:38:48 [4860] <CSyLink::ImportConfigFile()>
    05/21 12:38:48 [4860] CUpdateConfig::Dump
    05/21 12:38:48 [4860] </CSyLink::ImportConfigFile()>
    05/21 12:38:48 [4860] ******Sid=S-1-5-21-176308966-2048763445-702939920-500
    05/21 12:38:48 [4860] <GetDomainHostName>NT user Name=
    05/21 12:38:48 [4860] <GetDomainHostName>NT domain Name=
    05/21 12:38:48 [4860] <GetDomainHostName>Current Login User Name=/
    05/21 12:38:48 [4860] <GetDomainHostName>msz_DomainName is taken from m_strPrevDomainName
    05/21 12:38:48 [4860] <GetDomainHostName>DomainName (Final)=WORKGROUP
    05/21 12:38:48 [4860] <HWID CSyLink::GetHardwareKey> Get Hardware ID
    05/21 12:38:48 [4860] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: A1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:48 [3360] <ScheduleNextUpdate>Manually assigned heartbeat=1424 seconds
    05/21 12:38:48 [5580] <HeartbeatThreadProc:>Thread is about to begin..
    05/21 12:38:48 [3360] Successfully created the heartbeat thread
    05/21 12:38:48 [4860] <Start>Started, contact SMS every 3600 seconds
    05/21 12:38:48 [4860] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 12:38:48 [4860] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    05/21 12:38:48 [4860] </CSyLink::Start()>
    05/21 12:38:49 [4860] <SetClientAuth>Received new User/Domain from SMC..  User: Administrator User Domain: DMSRV-4033
    05/21 12:38:49 [4860] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
    05/21 12:38:49 [4860] <GetLoginRdnsDomain>DNS domain=
    05/21 12:38:49 [4860] <SetClientAuth>Checking if the new user domain name is the same as Local Host ..
    05/21 12:38:49 [4860] <SetClientAuth>HostName=dmsrv-4033
    05/21 12:38:49 [4860] <SetClientAuth>New User DomainName=dmsrv-4033
    05/21 12:38:49 [4860] <SetClientAuth>User Domain name is same as Host name .. Setting 'Login Domain' to =LocalComputer
    05/21 12:38:49 [4860] <SetClientAuth>Logged in user info set to: LocalComputer/Administrator
    05/21 12:38:49 [4860] <SetClientAuth>Marking User Change Notify to redo registration..
    05/21 12:38:49 [5580] <CheckHeartbeatTimer>====== Heartbeat loop starts at 12:38:49 ======
    05/21 12:38:49 [5580] <GetOnlineNicInfo>:Netport Count=1
    05/21 12:38:49 [5580] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 12:38:50 [5580] <DoHeartbeat>Try to get domain again...
    05/21 12:38:50 [5580] ******Sid=S-1-5-21-176308966-2048763445-702939920-500
    05/21 12:38:50 [5580] <GetDomainHostName>NT user Name=
    05/21 12:38:50 [5580] <GetDomainHostName>NT domain Name=
    05/21 12:38:50 [5580] <GetDomainHostName>Current Login User Name=LocalComputer/Administrator
    05/21 12:38:50 [5580] <GetDomainHostName>use netbios to query computer domain name. IP and Host name are: 192.168.51.10DMSRV-4033
    05/21 12:38:50 [5580] Got domain name using NetWkstaGetInfo
    05/21 12:38:50 [5580] <GetDomainHostName>Got domain name (using netbios) for IP 192.168.51.10
    05/21 12:38:50 [5580] <GetDomainHostName>computer domain name = WORKGROUP
    05/21 12:38:50 [5580] <GetDomainHostName>msz_DomainName is taken from szDomainName
    05/21 12:38:50 [5580] <GetDomainHostName>DomainName (Final)=WORKGROUP
    05/21 12:38:50 [5580] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:50 [5580] <CalcAgentHashKey>:CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:38:50 [5580] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUP
    05/21 12:38:50 [5580] <CalcAgentHashKey>:CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 12:38:50 [5580] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:50 [5580] <CalcAgentHashKey>:UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 12:38:50 [5580] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUP
    05/21 12:38:50 [5580] <CalcAgentHashKey>:UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 12:38:50 [5580] <DoHeartbeat>HardwareID=A1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:50 [5580] <DoHeartbeat>CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:38:50 [5580] <DoHeartbeat>CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 12:38:50 [5580] <DoHeartbeat>UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 12:38:50 [5580] <DoHeartbeat>UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 12:38:50 [5580] <DoHeartbeat> Set heartbeat event
    05/21 12:38:50 [5580] Use new configuration
    05/21 12:38:50 [5580] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 12:38:50 ======
    05/21 12:38:50 [5580] HEARTBEAT: Check Point 1
    05/21 12:38:50 [5580] HEARTBEAT: Check Point 2
    05/21 12:38:50 [5580] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 12:38:50 [5580] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 12:38:50 [5580] HEARTBEAT: Check Point 3
    05/21 12:38:50 [5580] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    05/21 12:38:50 [5580] HEARTBEAT: Check Point 4
    05/21 12:38:50 [5580] <RegHeartbeatProc>===Registration STAGE===
    05/21 12:38:50 [5580] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator

    read error, exit
    05/21 12:38:50 [4200] SyLinkCreateConfig => Created instance: 02332648
    05/21 12:38:50 [4200] Importing ConfigObject: 01F91448 into: 02332648
    05/21 12:38:50 [4200] SyLinkDeleteConfig => Deleting instance: 02332648
    05/21 12:38:51 [5580] <SendRegistrationRequest:>SMS return=200
    05/21 12:38:51 [5580] <ParseHTTPStatusCode:>200=>200 OK
    05/21 12:38:51 [5580] <SendRegistrationRequest:>Content Lenght => 679
    05/21 12:38:51 [5580] HTTP returns status code=200
    05/21 12:38:51 [5580] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    05/21 12:38:51 [5580] <SendRegistrationRequest:>COMPLETED, returned 0
    05/21 12:38:51 [5580] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 12:38:51 [5580] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.10,return TRUE
    05/21 12:38:51 [5580] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.10
    05/21 12:38:51 [5580] HEARTBEAT: Check Point 5.1
    05/21 12:38:51 [5580] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
    05/21 12:38:51 [5580] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 12:38:51 [5580] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 12:38:51 [5580] HEARTBEAT: Check Point 8
    05/21 12:38:51 [5580] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 12:38:51 [5580] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 12:38:51 [5580] <RegHeartbeatProc>====== Registration Procedure stops at 12:38:51 ======
    05/21 12:38:51 [5580] HEARTBEAT: Check Point 10
    05/21 12:38:51 [5580] HEARTBEAT: Check Point Complete
    05/21 12:38:51 [5580] <RegHeartbeatProc>Done, Heartbeat=3seconds
    05/21 12:38:51 [5580] <CheckHeartbeatTimer>====== Heartbeat loop stops at 12:38:51 ======
    05/21 12:38:55 [5580] <CheckHeartbeatTimer>====== Heartbeat loop starts at 12:38:55 ======
    05/21 12:38:56 [5580] <GetOnlineNicInfo>:Netport Count=1
    05/21 12:38:56 [5580] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 12:38:56 [5580] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:56 [5580] <CalcAgentHashKey>:CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:38:56 [5580] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUP
    05/21 12:38:56 [5580] <CalcAgentHashKey>:CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 12:38:56 [5580] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:56 [5580] <CalcAgentHashKey>:UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 12:38:56 [5580] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUP
    05/21 12:38:56 [5580] <CalcAgentHashKey>:UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 12:38:56 [5580] <DoHeartbeat>HardwareID=A1E613495B2C6505AE1558D8B303F8D9
    05/21 12:38:56 [5580] <DoHeartbeat>CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:38:56 [5580] <DoHeartbeat>CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 12:38:56 [5580] <DoHeartbeat>UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 12:38:56 [5580] <DoHeartbeat>UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 12:38:56 [5580] <DoHeartbeat> Set heartbeat event
    05/21 12:38:56 [5580] Use new configuration
    05/21 12:38:56 [5580] <CSyLink::IndexHeartbeatProc()>
    05/21 12:38:56 [5580] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01F91448
    05/21 12:38:56 [5580] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 12:38:56 ======
    05/21 12:38:56 [5580] HEARTBEAT: Check Point 1
    05/21 12:38:56 [5580] Get First Server!
    05/21 12:38:56 [5580] HEARTBEAT: Check Point 2
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 12:38:56 [5580] HEARTBEAT: Check Point 3
    05/21 12:38:56 [5580] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    05/21 12:38:56 [5580] HEARTBEAT: Check Point 4
    05/21 12:38:56 [5580] <IndexHeartbeatProc>===Get Index STAGE===
    05/21 12:38:56 [5580] ************CSN=41601
    05/21 12:38:56 [5580] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&hid=A1E613495B2C6505AE1558D8B303F8D9&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&mode=0&hbt=3600&as=41601&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:38:56 [5580] <GetIndexFileRequest:>http://192.168.90.150:80/secars/secars.dll?h=60E8B18C343490F40CA87E28F6B49CF7941288A5689193313CA20BD36929B7B8621E286784AC5E75ADA49F86087182D5674AC6DA0C3F7B3E82E19413AF7ED4C964CBB40AE0FBF1CE23DD294DF284FAEB17400BB5BF35E17CBC49A89CC8E04529AA0171573FCF26B275BCBAF2C255B67D514D19DC7B702392AC7C2FD46665A64F8480950286DFF4C1C42E2FF6A6BD01C8C04BB6D5B97BC2BF5B65D14E6174D635CA0B2C5A8BC4766FE3668137A7C3F8E53B94626A39A840F39872B2CEB240B34C493FC463CF7846937AE1D8AD3A95560E3E97E4866BFE2ACB524B13A187EBE86C115F2AF212DE559B381504F0C200CC1C246FE148A5E7715BFC3E1F3A0484D841097B6D362A1A46E762769E0E5F517906A3DB6F7B020E9DEB1DFD380B43DF7F3098F01BBAF8C6CCEC9325B301F3572DFB42CDAB4C75F345949CD0FE2092FF51A815E9EB24073FC029C351AC7E2FD3021CAF9CBB378D17DCF85EAA7AA53C7FACE1F90795DD5B59CD0D0FA5A8EC374C0BFAFF5BF8A1F6D44392C31BC8E2FF09C874ADB78AAF99207E99626A0AAB10D283730B69CE723D258146CA0E07FD12110FA8
    05/21 12:38:56 [5580] <GetIndexFileRequest:>SMS return=200
    05/21 12:38:56 [5580] <ParseHTTPStatusCode:>200=>200 OK
    05/21 12:38:56 [5580] <FindHeader>Sem-HashKey:=>5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:38:56 [5580] <FindHeader>Sem-LANSensor:=>0
    05/21 12:38:56 [5580] <FindHeader>Sem-Signatue:=>2986ED64741E49036ADBFCA6AD79D705F04F3AD667036AA2A257DBA0B318009F15DFAA3BAC717C26356445549A598D7D7568E28302305B1688F220951561A23308350570EA06B933B0E0333D49D7FAA0C327971FCFB13AB76B01FF10EFE551D21E84FED07493130817032A74BB5C9B536C4E0B107F55714468F0C12746F15B06
    05/21 12:38:56 [5580] <mfn_DoGetIndexFile200>Content Lenght => 1823
    05/21 12:38:56 [5580] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 12:38:56 [5580] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="4C6CBA3B0A01012A00E2B74594E6D7F4" ServerID="F80BE22E0A01012A0008E00D65A1F19E" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "21/05/2012 11:49:11">    <Profile Checksum="B9A04AEBBD2DF98DE2E3836411748A22" SerialNumber="26C2-05/16/2012 18:30:54 281" LastModifiedTime="17/05/2012  00:02:31"/>    <ConfigFile Checksum="1D3FD873E202F733057C8E324E1736FA" LastModifiedTime="09/05/2012  12:29:21"/>    <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="10/05/2012  17:55:08"/>    <SylinkFile Checksum="8287289EFACB99A4E60371D2C70E2318" LastModifiedTime="17/05/2012  00:02:31"/>    <LSProfile Checksum="D227B701BCBAF3C309284562B2AAC2AD" SerialNumber ="26C2-05/16/2012 18:30:54 281" LastModifiedTime ="17/05/2012  00:02:31"/>
        <LiveUpdate>
            <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="120520009"/>
              <File Checksum="62DFA85FCEB31321C9FAD040A7569A66" DeltaFlag="1" FullSize="632982" LastModifiedTime="1337580559953" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="120520032"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="120520009"/>
              <File Checksum="0F99DBF7BED0ADEFF325EC46375FA955" DeltaFlag="1" FullSize="1234420" LastModifiedTime="1337471358390" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="120518001"/>
              <File Checksum="9828034DCE5411AED5B60F902BA1C2F6" DeltaFlag="1" FullSize="3503390" LastModifiedTime="1337471345250" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="120518001"/>
              <File Checksum="2206E867D7010B9FCDB8DC7BF20F3373" DeltaFlag="1" FullSize="1211940" LastModifiedTime="1337471282125" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="120518001"/>
              <File Checksum="5FEA556B22C0689CC7F2F6589D12C198" DeltaFlag="1" FullSize="1786870" LastModifiedTime="1337387970625" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="120518002"/>
              <File Checksum="55C9BFCF6BE45BACB972A0750BFDD86C" DeltaFlag="1" FullSize="2290935" LastModifiedTime="1336698481687" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="120508011"/>
              <File Checksum="A63A9B34531C78B465244FE862FCC565" DeltaFlag="1" FullSize="5013" LastModifiedTime="1336551047734" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="110607005"/>
              <File Checksum="115C2CA95B2080123FF7F8B1A2667164" DeltaFlag="1" FullSize="26328" LastModifiedTime="1336549659500" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="120411035"/>
              <File Checksum="C1DE1ACA67D1B83A53134971ADAB0946" DeltaFlag="1" FullSize="669829" LastModifiedTime="1262959698871" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
              <File Checksum="CC62A6A3C908DAC0EA75DE68543C0725" DeltaFlag="1" FullSize="650307" LastModifiedTime="1262959706175" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
              <File Checksum="E95512292358D9A67294FDF360D23EF5" DeltaFlag="1" FullSize="88188" LastModifiedTime="1262959905742" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
              <File Checksum="9B759D9C7D5F9790DB24E977AE112838" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1262959908348" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
              <File Checksum="3BA4DF96038CBE26F5E4A04C28F4E9A1" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1262959914310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
              <File Checksum="0684E4361FC0A9A82AF197E35E59F7DA" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291340590656" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
              <File Checksum="B9E2E5C166F4DF30C408B2C9BD903E2B" DeltaFlag="1" FullSize="88886" LastModifiedTime="1337387900437" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="120518002"/>
              <File Checksum="263727A82C58D7E3C6261B2455CAEECE" DeltaFlag="1" FullSize="11316042" LastModifiedTime="1337387961937" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="120518002"/>
              <File Checksum="C7E6AC243746819A45B36B2EF8301A68" DeltaFlag="1" FullSize="11316070" LastModifiedTime="1337388438421" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="120518002"/>
              <File Checksum="533D5A4DAB2F94021943097D8576ABF3" DeltaFlag="1" FullSize="88867" LastModifiedTime="1337388456171" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="120518002"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="120520009"/>
              <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="120520009"/>

        </LiveUpdate>
    </GroupIndex>
    05/21 12:38:56 [5580] <mfn_DoGetIndexFile200>Parser Index File!
    05/21 12:38:56 [5580] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    05/21 12:38:56 [5580] <GetIndexFileRequest:>COMPLETED
    05/21 12:38:56 [5580] <IndexHeartbeatProc>GetIndexFile handling status: 0
    05/21 12:38:56 [5580] <IndexHeartbeatProc>Switch Server flag=0
    05/21 12:38:56 [5580] HEARTBEAT: Check Point 5.1
    05/21 12:38:56 [5580] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 12:38:56 [5580] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.10,return TRUE
    05/21 12:38:56 [5580] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.10
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:120520009
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:120520032
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:120520009
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:120518001
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:120518001
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:120518001
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:120518002
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:120508011
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:110607005
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120411035
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:120518002
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:120518002
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:120518002
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:120518002
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:38:56 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:120520009
    05/21 12:38:56 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:38:56 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    05/21 12:38:56 [5580] <mfn_LiveUpdate:> Agent returned closest matching seq: 120329018
    05/21 12:38:56 [5580] <Add2LUFileList:>Adding LU Info to LU Download File List: {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 12:38:56 [5580] <mfn_PrepareLUContent:>Requesting LU Info for :  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:120520009
    05/21 12:38:56 [5580] ************CSN=41602
    05/21 12:38:56 [5580] <GetContentFileInfoUrl:> Request is: action=52&hostid=635347D6C0A85A9600661C780037AF7E&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&fn=[hex]7B43363044433233342D363546392D343637342D393441452D3632313538454643413433337D&cdn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572&lu=6&luseq=120329018,120327037,&lulasttriedseq=&lutargetseq=120520009&lucontentstate=0
    05/21 12:38:56 [5580] <mfn_RequestLUContentInfo:>URL: /secars/secars.dll?h=FA9DB1459DDF0E9CAF71A3591DB01F33941288A5689193313CA20BD36929B7B8621E286784AC5E75ADA49F86087182D5D3B975C39CE470CCA9F2A434E266A71DD2033D5EC17583355ECEEDD25E78FA5732264753D97D0517A08EDE11B66FC7F590ED04CD0F0F8293724EA506E96E9F8D49304AC83CA1F7B53D1BA51BA805BEF60925B5E1DB9B49D7B4C0C9C76D96B31339E9F8A7ADC5F4D13C1CDA5D6F8D20B6BAE494D5D37C6EA2F967CB311E69A599ADF5B6826F06CF5743A5268CCE0812D4A621B0A8541BFF18BD224329E376F0B4DEAF71622E45BFA4A77E62E8EB008FE0A343C554CA187ECDB650A4E1BD434980DAD53D674FC5B6AEEB4C9FC5CCA78C7601070168E21F12BABCD5661E06B9496484F42D64C89A35EEE2CCDF223CB58C470430CF424743CE5311C7C25F4F8EBF4F480498226080385BA1E9D6C0C2764603A3BF5C1039618334BDF3C3D12178378A9DEF3469C7191DF86BB3A2BCE4550A12467827C75675A215598E051901A1592CC651518E78735EC13DA5A2E562D94BE4
    05/21 12:38:56 [5580] <SendUrlAndReceiveResponse:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 12:38:57 [5580] <SendUrlAndReceiveResponse:>SMS return=200
    05/21 12:38:57 [5580] <ParseHTTPStatusCode:>200=>200 OK
    05/21 12:38:57 [5580] <mfn_RequestLUContentInfo:>Received LU Info :  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:120520009 Response header: HTTP/1.1 200 OK
    Date: Mon, 21 May 2012 07:04:35 GMT
    Server: Apache
    Sem-SetContentLength: 1
    Sem-FileLength: 192034890
    Sem-PackageFileLength: 192034890
    Sem-LUPath: /content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    Sem-LUFull: 1
    Sem-LUDeltaBaseSeqName:
    Sem-PackageType: 1
    Sem-DeltaMethod: 1
    Connection: close
    Content-Length: 192034890
    Content-Type: text/html


    05/21 12:38:57 [5580] <FindHeader>Sem-LUFull:=>1
    05/21 12:38:57 [5580] <mfn_RequestLUContentInfo:>Sem-LUFull:1
    05/21 12:38:57 [5580] <FindHeader>Sem-PackageType:=>1
    05/21 12:38:57 [5580] <mfn_RequestLUContentInfo:>Sem-PackageType:1
    05/21 12:38:57 [5580] <FindHeader>Sem-DeltaMethod:=>1
    05/21 12:38:57 [5580] <FindHeader>Sem-LUPath:=>/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    05/21 12:38:57 [5580] <FindHeader>Content-Length:=>192034890
    05/21 12:38:57 [5580] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 12:38:57 [5580] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 12:38:57 [5580] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 12:38:57 [5580] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=3600 seconds
    05/21 12:38:57 [5580] HEARTBEAT: Check Point 6
    05/21 12:38:57 [5580] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    05/21 12:39:12 [5580] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    05/21 12:39:12 [5580] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    05/21 12:39:12 [5580] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    05/21 12:39:12 [5580] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    05/21 12:39:12 [5580] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    05/21 12:39:12 [5580] ReasonDescForFailure*** = Host Integrity check passed
    05/21 12:39:12 [5580] ReasonDescForFailure*** = Host Integrity check passed
    05/21 12:39:12 [5580] *** = <SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>

    05/21 12:39:12 [5580] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1337584152
    05/21 12:39:12 [5580] <mfn_PostAgentInfo>Free memory difference: 3254702080, Threshold: 0
    05/21 12:39:12 [5580] <mfn_PostAgentInfo>Free disk space difference: 45995487232, Threshold: 0
    05/21 12:39:12 [5580] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    05/21 12:39:12 [5580] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    05/21 12:39:12 [5580] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
    <SESAgentOpState AgentID="635347D6C0A85A9600661C780037AF7E" Timestamp="1337584137203"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3734034</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>2A021D000000</PatternFileDate><TimeOfLastVirus>2A02060A3826</TimeOfLastVirus><TimeOfLastScan>2A0415062301</TimeOfLastScan><WorstInfectionType>0</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>1</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>19011542</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7274498:131081</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
    <GupStatus IsGup="0" NameSpace="rpc" ComputerID="233FAE4DC0A85A9600661C781AF0BC63"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1336975582843</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>
    ]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <SSAHostInfo>
    <Memory Free="3254702080"/>
    <Disk Letter="C:\" Free="45995487232"/>
    </SSAHostInfo>
    </SSAInfo>
    ]]></Data></TechID></SESAgentOpState>
    05/21 12:39:12 [5580] ************CSN=41603
    05/21 12:39:12 [5580] <mfn_MakePostUrl:>Request is: action=192&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&as=41603&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:39:12 [5580] <mfn_PostAgentInfo>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 12:39:15 [5580] <mfn_PostAgentInfo>POST the total size=1284
    05/21 12:39:15 [5580] <mfn_PostAgentInfo>Done with return code = 200
    05/21 12:39:15 [5580] <IndexHeartbeatProc>===UPLOAD STAGE===
    05/21 12:39:15 [5580] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    05/21 12:39:15 [5580] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    05/21 12:39:15 [5580] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    05/21 12:39:15 [5580] <PrepareEventLog>initialized technology extension processing ok
    05/21 12:39:15 [5580] <CalcEventLogIndex>Need to send Event Log Type(0) from id 216 to 224
    05/21 12:39:15 [5580] <PrepareEventLog>Allow total logs to send=11
    05/21 12:39:15 [5580] <PrepareEventLog>nSecurityRecordsTotal=0
    05/21 12:39:15 [5580] <PrepareEventLog>nSecurityRecordsToSend=0
    05/21 12:39:15 [5580] <PrepareEventLog>nSystemRecordsTotal=9
    05/21 12:39:15 [5580] <PrepareEventLog>nSystemRecordsToSend=81
    05/21 12:39:15 [5580] <PrepareEventLog>nTrafficRecordsTotal=0
    05/21 12:39:15 [5580] <PrepareEventLog>nTrafficRecordsToSend=0
    05/21 12:39:15 [5580] <PrepareEventLog>nRawRecordsTotal=0
    05/21 12:39:15 [5580] <PrepareEventLog>nRawRecordsToSend=0
    05/21 12:39:15 [5580] <PrepareEventLog>nProcessRecordsTotal=0
    05/21 12:39:15 [5580] <PrepareEventLog>nProcessRecordsToSend=0
    05/21 12:39:15 [5580] <PrepareEventLog>nLANSensorRecordsTotal=0
    05/21 12:39:15 [5580] <PrepareEventLog>nLANSensorRecordsToSend=0
    05/21 12:39:15 [5580] <PrepareEventLog>nTechExtensionRecordsTotal=2
    05/21 12:39:15 [5580] <PrepareEventLog>nTechExtensionRecordsToSend=18
    05/21 12:39:15 [5580] <MakeSystemLog>The size of SYSTEM event logs is 3704.
    05/21 12:39:15 [5580] <SyLink>The size of SYSTEM event logs is 3704.
    05/21 12:39:15 [5580] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
    05/21 12:39:15 [5580] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    05/21 12:39:15 [5580] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    05/21 12:39:15 [5580] <MakeProcessLog>Attached total 0 bytes process event logs.
    05/21 12:39:15 [5580] <MakeTechExtensionLog> Attached total 1655 bytes to Tech Extension event log section.
    05/21 12:39:15 [5580] <SyLink> Attached total 1655 bytes to Tech Extension event log section.
    05/21 12:39:15 [5580] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    05/21 12:39:15 [5580] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    05/21 12:39:15 [5580] ************CSN=41604
    05/21 12:39:15 [5580] <mfn_MakePostUrl:>Request is: action=195&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41604&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:39:15 [5580] <SendEventLogToServer>http://192.168.90.150:80/secars/secars.dll?h=225DFDC03A4A95193EF826E8E8A915DA87A3ADAF2C53AC89F4DD4FAA22981FCD520DFA5040D8905F94EDEBC9E41DF5907DA687BA660143A07E52C069FC4D17625A5FEABAF1359D1307258F783485CC938DD9A7AC18EBB1BFCE2847664392534B35A0BF74FF89978979C0ACB71D317DD897AEC187AEC439240EC95A737E90EF63DC496F5102D45F9BC22DE6A9BCFF3D81F4F104EC589B26BAF34E0BA53617EB8550B0790D2F69DF273B0798E45A8734CB8A51F1AB24B8A5AA1FE45AA64C01D6E7E6101519FD26A4F509EA42A31D18842D04C88478C7013B152728C07D6E44000A8FC85E3FCA69B4AFFB01C355BEC8E6EDB5F4F8FD1508565757AC28661DF6A02F5FF1F91FE8F29BE42C5D6BCFCEEEBE1CE0E533CF5C5FF4461D968E30BEEB341A2C90CFD6B54AEE9035A462F00AA36879B36E78C88BF6BB5A67002430D456A380DB42AC5C1D5F967FA6E8C72D1ACCEF7EF39E3D7D0228F2BAAAF9CAD30726DAA054EE094693AEC67972E171057FA67689
    05/21 12:39:15 [5580] <SendEventLogToServer>eventlog-->SMS, size=1296
    05/21 12:39:15 [5580] <SendEventLogToServer>uploads the eventlog to server, size=1296
    05/21 12:39:15 [5580] <SendEventLogToServer>Query return code = 200
    05/21 12:39:15 [5580] <SendEventLogToServer>EventLog-->SEM DONE!
    05/21 12:39:15 [5580] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    05/21 12:39:15 [5580] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    05/21 12:39:15 [5580] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
    05/21 12:39:15 [5580] HEARTBEAT: Check Point 8
    05/21 12:39:15 [5580] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 12:39:15 [5580] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 12:39:15 [5580] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 12:39:15 ======
    05/21 12:39:15 [5580] <IndexHeartbeatProc>Set Heartbeat Result= 2
    05/21 12:39:15 [5580] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    05/21 12:39:15 [5580] Use new configuration
    05/21 12:39:15 [5580] HEARTBEAT: Check Point Complete
    05/21 12:39:15 [5580] <IndexHeartbeatProc>Done, Heartbeat=3600seconds
    05/21 12:39:15 [5580] </CSyLink::IndexHeartbeatProc()>
    05/21 12:39:15 [5580] <CheckHeartbeatTimer>====== Heartbeat loop stops at 12:39:15 ======
    05/21 12:39:48 [3180] <CExpBackoff::CExpBackoff()>
    05/21 12:39:48 [3180] </CExpBackoff::CExpBackoff()>
    05/21 12:39:48 [3180] SyLinkCreateConfig => Created instance: 02332648
    05/21 12:39:48 [3180] Importing ConfigObject: 01F91448 into: 02332648
    05/21 12:39:48 [3180] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02332648
    05/21 12:39:48 [3180] <CRandomDelay::CRandomDelay()>
    05/21 12:39:48 [3180] Random delay window: 0hour 5min 0sec
    05/21 12:39:48 [3180] Computed random delay:0hour 2min 9sec 0millisec
    05/21 12:39:48 [3180] </CRandomDelay::CRandomDelay()>
    05/21 12:39:48 [3180] <LUThreadProc>Waiting for: 129000 milliseconds to start downloading LU contents
    05/21 12:39:48 [3360] <CSyLink::mfn_DownloadNow()>
    05/21 12:39:48 [3360] </CSyLink::mfn_DownloadNow()>
    05/21 12:40:49 [3360] <CSyLink::mfn_DownloadNow()>
    05/21 12:40:49 [3360] </CSyLink::mfn_DownloadNow()>
    05/21 12:41:49 [3360] <CalcEventLogIndex>Need to send Event Log Type(1) from id 6532 to 6532
    05/21 12:41:49 [3360] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    05/21 12:41:49 [3360] <CSyLink::mfn_DownloadNow()>
    05/21 12:41:49 [3360] </CSyLink::mfn_DownloadNow()>
    05/21 12:41:49 [5580] <CheckHeartbeatTimer>====== Heartbeat loop starts at 12:41:49 ======
    05/21 12:41:49 [5580] <GetOnlineNicInfo>:Netport Count=1
    05/21 12:41:49 [5580] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 12:41:49 [5580] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 12:41:49 [5580] <CalcAgentHashKey>:CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:41:49 [5580] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUP
    05/21 12:41:49 [5580] <CalcAgentHashKey>:CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 12:41:49 [5580] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 12:41:49 [5580] <CalcAgentHashKey>:UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 12:41:49 [5580] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUP
    05/21 12:41:49 [5580] <CalcAgentHashKey>:UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 12:41:49 [5580] <DoHeartbeat>HardwareID=A1E613495B2C6505AE1558D8B303F8D9
    05/21 12:41:49 [5580] <DoHeartbeat>CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:41:49 [5580] <DoHeartbeat>CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 12:41:49 [5580] <DoHeartbeat>UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 12:41:49 [5580] <DoHeartbeat>UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 12:41:49 [5580] <DoHeartbeat> Set heartbeat event
    05/21 12:41:49 [5580] Use new configuration
    05/21 12:41:49 [5580] <CSyLink::IndexHeartbeatProc()>
    05/21 12:41:49 [5580] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01F91448
    05/21 12:41:49 [5580] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 12:41:49 ======
    05/21 12:41:50 [5580] HEARTBEAT: Check Point 1
    05/21 12:41:50 [5580] Get First Server!
    05/21 12:41:50 [5580] HEARTBEAT: Check Point 2
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 12:41:50 [5580] HEARTBEAT: Check Point 3
    05/21 12:41:50 [5580] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    05/21 12:41:50 [5580] HEARTBEAT: Check Point 4
    05/21 12:41:50 [5580] <IndexHeartbeatProc>===Get Index STAGE===
    05/21 12:41:50 [5580] ************CSN=41605
    05/21 12:41:50 [5580] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&hid=A1E613495B2C6505AE1558D8B303F8D9&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&mode=0&hbt=3600&as=41605&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:41:50 [5580] <GetIndexFileRequest:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 12:41:50 [5580] <GetIndexFileRequest:>SMS return=200
    05/21 12:41:50 [5580] <ParseHTTPStatusCode:>200=>200 OK
    05/21 12:41:50 [5580] <FindHeader>Sem-HashKey:=>5BE1057D3F1D6558E908AF956CCFD17B
    05/21 12:41:50 [5580] <FindHeader>Sem-LANSensor:=>0
    05/21 12:41:50 [5580] <FindHeader>Sem-Signatue:=>2986ED64741E49036ADBFCA6AD79D705F04F3AD667036AA2A257DBA0B318009F15DFAA3BAC717C26356445549A598D7D7568E28302305B1688F220951561A23308350570EA06B933B0E0333D49D7FAA0C327971FCFB13AB76B01FF10EFE551D21E84FED07493130817032A74BB5C9B536C4E0B107F55714468F0C12746F15B06
    05/21 12:41:50 [5580] <mfn_DoGetIndexFile200>Content Lenght => 1823
    05/21 12:41:50 [5580] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 12:41:50 [5580] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="4C6CBA3B0A01012A00E2B74594E6D7F4" ServerID="F80BE22E0A01012A0008E00D65A1F19E" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "21/05/2012 11:49:11">    <Profile Checksum="B9A04AEBBD2DF98DE2E3836411748A22" SerialNumber="26C2-05/16/2012 18:30:54 281" LastModifiedTime="17/05/2012  00:02:31"/>    <ConfigFile Checksum="1D3FD873E202F733057C8E324E1736FA" LastModifiedTime="09/05/2012  12:29:21"/>    <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="10/05/2012  17:55:08"/>    <SylinkFile Checksum="8287289EFACB99A4E60371D2C70E2318" LastModifiedTime="17/05/2012  00:02:31"/>    <LSProfile Checksum="D227B701BCBAF3C309284562B2AAC2AD" SerialNumber ="26C2-05/16/2012 18:30:54 281" LastModifiedTime ="17/05/2012  00:02:31"/>
        <LiveUpdate>
            <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="120520009"/>
              <File Checksum="62DFA85FCEB31321C9FAD040A7569A66" DeltaFlag="1" FullSize="632982" LastModifiedTime="1337580559953" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="120520032"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="120520009"/>
              <File Checksum="0F99DBF7BED0ADEFF325EC46375FA955" DeltaFlag="1" FullSize="1234420" LastModifiedTime="1337471358390" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="120518001"/>
              <File Checksum="9828034DCE5411AED5B60F902BA1C2F6" DeltaFlag="1" FullSize="3503390" LastModifiedTime="1337471345250" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="120518001"/>
              <File Checksum="2206E867D7010B9FCDB8DC7BF20F3373" DeltaFlag="1" FullSize="1211940" LastModifiedTime="1337471282125" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="120518001"/>
              <File Checksum="5FEA556B22C0689CC7F2F6589D12C198" DeltaFlag="1" FullSize="1786870" LastModifiedTime="1337387970625" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="120518002"/>
              <File Checksum="55C9BFCF6BE45BACB972A0750BFDD86C" DeltaFlag="1" FullSize="2290935" LastModifiedTime="1336698481687" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="120508011"/>
              <File Checksum="A63A9B34531C78B465244FE862FCC565" DeltaFlag="1" FullSize="5013" LastModifiedTime="1336551047734" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="110607005"/>
              <File Checksum="115C2CA95B2080123FF7F8B1A2667164" DeltaFlag="1" FullSize="26328" LastModifiedTime="1336549659500" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="120411035"/>
              <File Checksum="C1DE1ACA67D1B83A53134971ADAB0946" DeltaFlag="1" FullSize="669829" LastModifiedTime="1262959698871" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
              <File Checksum="CC62A6A3C908DAC0EA75DE68543C0725" DeltaFlag="1" FullSize="650307" LastModifiedTime="1262959706175" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
              <File Checksum="E95512292358D9A67294FDF360D23EF5" DeltaFlag="1" FullSize="88188" LastModifiedTime="1262959905742" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
              <File Checksum="9B759D9C7D5F9790DB24E977AE112838" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1262959908348" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
              <File Checksum="3BA4DF96038CBE26F5E4A04C28F4E9A1" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1262959914310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
              <File Checksum="0684E4361FC0A9A82AF197E35E59F7DA" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291340590656" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
              <File Checksum="B9E2E5C166F4DF30C408B2C9BD903E2B" DeltaFlag="1" FullSize="88886" LastModifiedTime="1337387900437" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="120518002"/>
              <File Checksum="263727A82C58D7E3C6261B2455CAEECE" DeltaFlag="1" FullSize="11316042" LastModifiedTime="1337387961937" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="120518002"/>
              <File Checksum="C7E6AC243746819A45B36B2EF8301A68" DeltaFlag="1" FullSize="11316070" LastModifiedTime="1337388438421" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="120518002"/>
              <File Checksum="533D5A4DAB2F94021943097D8576ABF3" DeltaFlag="1" FullSize="88867" LastModifiedTime="1337388456171" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="120518002"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="120520009"/>
              <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="120520009"/>

        </LiveUpdate>
    </GroupIndex>
    05/21 12:41:50 [5580] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    05/21 12:41:50 [5580] <GetIndexFileRequest:>COMPLETED
    05/21 12:41:50 [5580] <IndexHeartbeatProc>GetIndexFile handling status: 0
    05/21 12:41:50 [5580] <IndexHeartbeatProc>Switch Server flag=0
    05/21 12:41:50 [5580] HEARTBEAT: Check Point 5.1
    05/21 12:41:50 [5580] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 12:41:50 [5580] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.10,return TRUE
    05/21 12:41:50 [5580] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.10
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:120520009
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:120520032
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:120520009
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:120518001
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:120518001
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:120518001
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:120518002
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:120508011
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:110607005
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120411035
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:120518002
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:120518002
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:120518002
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:120518002
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 12:41:50 [5580] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:120520009
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    05/21 12:41:50 [5580] <mfn_LiveUpdate:> Agent returned closest matching seq: 120329018
    05/21 12:41:50 [5580] <Add2LUFileList:>Adding LU Info to LU Download File List: {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 12:41:50 [5580] <Add2LUFileList:>File Info already exists, hence updating: {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 12:41:50 [5580] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=3600 seconds
    05/21 12:41:50 [5580] HEARTBEAT: Check Point 6
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    05/21 12:41:50 [5580] ReasonDescForFailure*** = Host Integrity check passed
    05/21 12:41:50 [5580] ReasonDescForFailure*** = Host Integrity check passed
    05/21 12:41:50 [5580] *** = <SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="0" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>

    05/21 12:41:50 [5580] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 158
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>Free memory difference: 25989120, Threshold: 488205300
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>Free disk space difference: 786432, Threshold: 6899323080
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    05/21 12:41:50 [5580] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
    <SESAgentOpState AgentID="635347D6C0A85A9600661C780037AF7E" Timestamp="1337584310687"><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="0" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>
    ]]></Data></TechID></SESAgentOpState>
    05/21 12:41:50 [5580] ************CSN=41606
    05/21 12:41:50 [5580] <mfn_MakePostUrl:>Request is: action=192&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&as=41606&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>POST the total size=884
    05/21 12:41:50 [5580] <mfn_PostAgentInfo>Done with return code = 200
    05/21 12:41:50 [5580] <IndexHeartbeatProc>===UPLOAD STAGE===
    05/21 12:41:50 [5580] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    05/21 12:41:50 [5580] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    05/21 12:41:50 [5580] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    05/21 12:41:50 [5580] <PrepareEventLog>initialized technology extension processing ok
    05/21 12:41:50 [5580] <CalcEventLogIndex>Need to send Event Log Type(1) from id 6532 to 6532
    05/21 12:41:50 [5580] <CalcEventLogIndex>Need to send Event Log Type(0) from id 225 to 225
    05/21 12:41:50 [5580] <PrepareEventLog>Allow total logs to send=2
    05/21 12:41:50 [5580] <PrepareEventLog>nSecurityRecordsTotal=1
    05/21 12:41:50 [5580] <PrepareEventLog>nSecurityRecordsToSend=50
    05/21 12:41:50 [5580] <PrepareEventLog>nSystemRecordsTotal=1
    05/21 12:41:50 [5580] <PrepareEventLog>nSystemRecordsToSend=50
    05/21 12:41:50 [5580] <PrepareEventLog>nTrafficRecordsTotal=0
    05/21 12:41:50 [5580] <PrepareEventLog>nTrafficRecordsToSend=0
    05/21 12:41:50 [5580] <PrepareEventLog>nRawRecordsTotal=0
    05/21 12:41:50 [5580] <PrepareEventLog>nRawRecordsToSend=0
    05/21 12:41:50 [5580] <PrepareEventLog>nProcessRecordsTotal=0
    05/21 12:41:50 [5580] <PrepareEventLog>nProcessRecordsToSend=0
    05/21 12:41:50 [5580] <PrepareEventLog>nLANSensorRecordsTotal=0
    05/21 12:41:50 [5580] <PrepareEventLog>nLANSensorRecordsToSend=0
    05/21 12:41:50 [5580] <PrepareEventLog>nTechExtensionRecordsTotal=0
    05/21 12:41:50 [5580] <PrepareEventLog>nTechExtensionRecordsToSend=0
    05/21 12:41:50 [5580] <MakeSystemLog>The size of SYSTEM event logs is 381.
    05/21 12:41:50 [5580] <SyLink>The size of SYSTEM event logs is 381.
    05/21 12:41:50 [5580] <MakeSecurityLog>Attached total 3120 bytes SECURITY event logs.
    05/21 12:41:50 [5580] <SyLink>Attached total 3120 bytes SECURITY event logs.
    05/21 12:41:50 [5580] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    05/21 12:41:50 [5580] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    05/21 12:41:50 [5580] <MakeProcessLog>Attached total 0 bytes process event logs.
    05/21 12:41:50 [5580] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    05/21 12:41:50 [5580] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    05/21 12:41:50 [5580] ************CSN=41607
    05/21 12:41:50 [5580] <mfn_MakePostUrl:>Request is: action=195&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41607&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:41:50 [5580] <SendEventLogToServer>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 12:41:51 [5580] <SendEventLogToServer>eventlog-->SMS, size=978
    05/21 12:41:51 [5580] <SendEventLogToServer>uploads the eventlog to server, size=978
    05/21 12:41:51 [5580] <SendEventLogToServer>Query return code = 200
    05/21 12:41:51 [5580] <SendEventLogToServer>EventLog-->SEM DONE!
    05/21 12:41:51 [5580] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    05/21 12:41:51 [5580] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    05/21 12:41:51 [5580] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
    05/21 12:41:51 [5580] HEARTBEAT: Check Point 8
    05/21 12:41:51 [5580] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 12:41:51 [5580] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 12:41:51 [5580] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 12:41:51 ======
    05/21 12:41:51 [5580] <IndexHeartbeatProc>Set Heartbeat Result= 2
    05/21 12:41:51 [5580] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    05/21 12:41:51 [5580] Use new configuration
    05/21 12:41:51 [5580] HEARTBEAT: Check Point Complete
    05/21 12:41:51 [5580] <IndexHeartbeatProc>Done, Heartbeat=3600seconds
    05/21 12:41:51 [5580] </CSyLink::IndexHeartbeatProc()>
    05/21 12:41:51 [5580] <CheckHeartbeatTimer>====== Heartbeat loop stops at 12:41:51 ======
    05/21 12:41:57 [3180] <LUThreadProc>Starting LU download.
    05/21 12:41:57 [3180] SyLinkCreateConfig => Created instance: 01EEA4C8
    05/21 12:41:57 [3180] Importing ConfigObject: 01F91448 into: 01EEA4C8
    05/21 12:41:57 [3180] <UpdateGUPList>Setting the session timeout on GlobalItemsSession to 2 min.
    05/21 12:41:57 [3180] ************CSN=41608
    05/21 12:41:57 [3180] <MakeGetGlobalIndexUrl:>Request is: action=310&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41608&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:41:57 [3180] <GetGlobalIndex:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 12:41:57 [3180] <GetGlobalIndex:>SMS return=200
    05/21 12:41:57 [3180] <ParseHTTPStatusCode:>200=>200 OK
    05/21 12:41:57 [3180] <FindHeader>Sem-Signatue:=>62F8791C938EB023A925348B8A444B6476B58751855615DFE43FD517FA0D1ADF5A0D9AA3CFD810C5F76EEBDCE46964F0263EAC0F529B622D605FF9B541C6F507EB2599DA9E795701B5D1BDAD4BD85EE7F9C2613F7485C66DD6FEE8DB825E917984B89230578D21BA7C11C3B50CA01E14FC083EFD4D0E99A4EF15341FCCDD6A25
    05/21 12:41:57 [3180] <DoGetGlobalIndex200>Content Lenght => 196
    05/21 12:41:57 [3180] <DoGetGlobalIndex200>Got Global Index from server, read bytes=196
    05/21 12:41:57 [3180] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 12:41:57 [3180] <DoGetGlobalIndex200>completed
    05/21 12:41:57 [3180] <GetGlobalIndex:>RECEIVE STAGE COMPLETED
    05/21 12:41:57 [3180] <GetGlobalIndex:>COMPLETED
    05/21 12:41:57 [3180] ************CSN=41609
    05/21 12:41:57 [3180] <mfn_MakeGetGupListUrl:>Request is: action=320&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41609&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 12:41:57 [3180] <GetGupList:>http://192.168.90.150:80/secars/secars.dll?h=85FC2FF9C90C7442FE0984B22559A9B887A3ADAF2C53AC89F4DD4FAA22981FCD520DFA5040D8905F94EDEBC9E41DF5907DA687BA660143A07E52C069FC4D17625A5FEABAF1359D1307258F783485CC938DD9A7AC18EBB1BFCE2847664392534B35A0BF74FF89978979C0ACB71D317DD897AEC187AEC439240EC95A737E90EF63DC496F5102D45F9BC22DE6A9BCFF3D81F4F104EC589B26BAF34E0BA53617EB8550B0790D2F69DF273B0798E45A8734CB8A51F1AB24B8A5AA1FE45AA64C01D6E7E6101519FD26A4F509EA42A31D18842D04C88478C7013B152728C07D6E44000A8FC85E3FCA69B4AFFB01C355BEC8E6ED4247454E1E2097DAE4B2FA59F0AFF86F5FF1F91FE8F29BE42C5D6BCFCEEEBE1CE0E533CF5C5FF4461D968E30BEEB341A2C90CFD6B54AEE9035A462F00AA36879B36E78C88BF6BB5A67002430D456A380DB42AC5C1D5F967FA6E8C72D1ACCEF7EF39E3D7D0228F2BAAAF9CAD30726DAA054EE094693AEC67972E171057FA67689
    05/21 12:41:57 [3180] <GetGupList:>SMS return=200
    05/21 12:41:57 [3180] <ParseHTTPStatusCode:>200=>200 OK
    05/21 12:41:57 [3180] <mfn_DoGetGupList200>Content Lenght => 340
    05/21 12:41:57 [3180] <mfn_DoGetGupList200>Got Gup List from server, read bytes=340
    05/21 12:41:57 [3180] <mfn_DoGetGupList200>completed
    05/21 12:41:57 [3180] <GetGupList:>RECEIVE STAGE COMPLETED
    05/21 12:41:57 [3180] <GetGupList:>COMPLETED
    05/21 12:41:57 [3180] SyLinkDeleteConfig => Deleting instance: 01EEA4C8
    05/21 12:41:57 [3180] <SetupTempLUFilePath:>NEW download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{C60DC234-65F9-4674-94AE-62158EFCA433}1205200091.TMP
    05/21 12:41:57 [3180] <CHttpFileDownload::CHttpFileDownload()>
    05/21 12:41:57 [3180] </CHttpFileDownload::CHttpFileDownload()>
    05/21 12:41:57 [3180] <CHttpFileDownload::Do()>
    05/21 12:41:57 [3180] <CHttpFileDownload::getRemainingBytesToDownload()>
    05/21 12:41:57 [3180] Remaining bytes to download: 192034890
    05/21 12:41:57 [3180] </CHttpFileDownload::getRemainingBytesToDownload()>
    05/21 12:41:57 [3180] <CHttpConnector::SendRequest()>
    05/21 12:41:57 [3180] Request> http://192.168.51.15:2967/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    05/21 12:42:18 [3180] SendRequest() failed.
    05/21 12:42:18 [3180] </CHttpConnector::SendRequest()>
    05/21 12:42:18 [3180] </CHttpFileDownload::Do()>
    05/21 12:42:18 [3180] <LUDownloader::GetContentToFile> completed.
    05/21 12:42:18 [3180] <CHttpFileDownload::~CHttpFileDownload()>
    05/21 12:42:18 [3180] </CHttpFileDownload::~CHttpFileDownload()>
    05/21 12:42:18 [3180] <LUThreadProc>LU file download failed due to HTTP error:0
    05/21 12:42:18 [3180] <CExpBackoff::Increment()>
    05/21 12:42:18 [3180] Backoff index incremented
    05/21 12:42:18 [3180] Backoff wait index: 1
    05/21 12:42:18 [3180] </CExpBackoff::Increment()>
    05/21 12:42:18 [3180] <CExpBackoff::Wait()>
    05/21 12:42:18 [3180] CExpBackoff wait time in seconds: 32
    05/21 12:42:49 [3360] <CSyLink::mfn_DownloadNow()>
    05/21 12:42:49 [3360] </CSyLink::mfn_DownloadNow()>
    05/21 12:42:50 [3180] </CExpBackoff::Wait()>
    05/21 12:42:50 [3180] <IsLUTempFileValid:> File: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{C60DC234-65F9-4674-94AE-62158EFCA433}1205200091.TMP is currently used
    05/21 12:43:49 [3360] <CSyLink::mfn_DownloadNow()>
    05/21 12:43:49 [3360] </CSyLink::mfn_DownloadNow()>
    05/21 12:43:50 [3180] SyLinkDeleteConfig => Deleting instance: 02332648
    05/21 12:43:50 [3180] SyLinkCreateConfig => Created instance: 02332648
    05/21 12:43:50 [3180] Importing ConfigObject: 01F91448 into: 02332648
    05/21 12:43:50 [3180] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02332648
    05/21 12:43:50 [3180] <CRandomDelay::CRandomDelay()>
    05/21 12:43:50 [3180] Random delay window: 0hour 5min 0sec
    05/21 12:43:50 [3180] Computed random delay:0hour 3min 35sec 0millisec
    05/21 12:43:50 [3180] </CRandomDelay::CRandomDelay()>
    05/21 12:43:50 [3180] <LUThreadProc>Waiting for: 215000 milliseconds to start downloading LU contents
     



  • 15.  RE: GUP not update

    Broadcom Employee
    Posted May 21, 2012 03:24 AM

    as per the logs it is downloadin

    05/21 12:41:57 [3180] Request> http://192.168.51.15:2967/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
     

    and waiting to complete.  



  • 16.  RE: GUP not update

    Posted May 21, 2012 03:28 AM

    Thanks for replay…

    But same system AV date not reflecting...Its showing 29 march 2012

     



  • 17.  RE: GUP not update

    Broadcom Employee
    Posted May 21, 2012 03:38 AM

    yes, the client is updated with 29/03/2012 rev 018, it has asked SEPM for full.zip and SEP client is contacying the GUP for updates.



  • 18.  RE: GUP not update

    Posted May 21, 2012 03:46 AM

    What was reason behind my clients not updating since last 3 month. Almost all machines showing same date in that group..



  • 19.  RE: GUP not update

    Broadcom Employee
    Posted May 21, 2012 03:48 AM

    open a support ticket. whats the SEP GUP client version? can you restart smc on the GUP machine?



  • 20.  RE: GUP not update

    Posted May 21, 2012 03:50 AM

    The problem seems to be on your GUP side, as it apparently does not accept the connection:

     

    05/21 12:41:57 [3180] Request> http://192.168.51.15:2967/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    05/21 12:42:18 [3180] SendRequest() failed.
    05/21 12:42:18 [3180] </CHttpConnector::SendRequest()>
    05/21 12:42:18 [3180] </CHttpFileDownload::Do()>
    05/21 12:42:18 [3180] <LUDownloader::GetContentToFile> completed.
    05/21 12:42:18 [3180] <CHttpFileDownload::~CHttpFileDownload()>
    05/21 12:42:18 [3180] </CHttpFileDownload::~CHttpFileDownload()>
    05/21 12:42:18 [3180] <LUThreadProc>LU file download failed due to HTTP error:0

     

    You need to collect SMC Debug log on the GUP side that would be longer than a few seconds (let it run for few hours), plus Sylink log from a client not updating covering the same time period in order to cross-compare.

    I would anyway suggest you to open Support Case to investigate deeper what is happening on your GUP.

     



  • 21.  RE: GUP not update

    Posted May 21, 2012 05:58 AM

    check sylink moniter logs from clients side

    05/21 15:23:10 [4860] SyLinkDeleteConfig => Deleting instance: 00E00048
    05/21 15:23:10 [4860] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:23:10 [4860] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    05/21 15:23:10 [4860] <Stop>Stopping SyLink module...
    05/21 15:23:11 [3360] <CSyLink::mfn_DownloadNow()>
    05/21 15:23:11 [3360] </CSyLink::mfn_DownloadNow()>
    05/21 15:23:11 [3360] <IsToStop:>stopping
    05/21 15:23:11 [3360] <MainThreadProc:>***** Main Thread Exit ****
    05/21 15:23:11 [5580] <IsToStop:>stopping
    05/21 15:23:11 [5580] <HeartbeatThreadProc:>Thread is stopping..
    05/21 15:23:13 [3180] </CExpBackoff::Wait()>
    05/21 15:23:13 [3180] <IsLUTempFileValid:> File: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{C60DC234-65F9-4674-94AE-62158EFCA433}1205200091.TMP is currently used
    05/21 15:23:13 [3180] <IsToStop:>stopping
    05/21 15:23:13 [4860] HEARTBEAT RUN TIME=127sec
    05/21 15:23:13 [4860] <StopHbThread>Heartbeat thread stopped, Heartbeat=3600
    05/21 15:23:13 [4860] <CDownloadManager::mfn_StopDownload()>
    05/21 15:23:13 [4860] </CDownloadManager::mfn_StopDownload()>
    05/21 15:23:13 [4860] <Stop>Switch the new setting.
    05/21 15:23:13 [4860] Importing ConfigObject: 01F926E8 into: 01F91448
    05/21 15:23:13 [4860] SyLinkDeleteConfig => Deleting instance: 01F926E8
    05/21 15:23:13 [4860] Write to registry UserGUID=0
    05/21 15:23:13 [4860] <Stop>Stopped!
    05/21 15:23:13 [4860] SyLinkDeleteInstance => Deleting instance: 02029008
    05/21 15:23:13 [4860] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:23:13 [4860] <Stop>Not started yet!.
    05/21 15:23:13 [4860] SyLinkDeleteConfig => Deleting instance: 01F91448
    05/21 15:23:13 [4860] <FreeProcessingDetails> Freeing: AVMan
    05/21 15:23:13 [4860] <FreeProcessingDetails> Freeing: GUP
    05/21 15:23:13 [4860] <FreeProcessingDetails> Freeing: LUMan
    05/21 15:23:13 [4860] <FreeProcessingDetails> Freeing: NacMan
    05/21 15:23:13 [4860] SyLink object is deleted !
    05/21 15:23:13 [4860] <CDownloadManager::mfn_StopDownload()>
    05/21 15:23:13 [4860] </CDownloadManager::mfn_StopDownload()>

    read error, exit
    05/21 15:23:32 [2464] ~~~Sylink log started. (SEP Product Version in registry: 11.0.5002.333, Sylink File Version: 11.0.5002.301)
    05/21 15:23:32 [2464] Stored HostGUID=635347D6C0A85A9600661C780037AF7E; outlen=16
    05/21 15:23:32 [2464] <RestoreSettings>Stored UserGuid=0; outlen=2
    05/21 15:23:32 [2464] <mfn_DecodeSSN>Sygate-SSN=41635
    05/21 15:23:32 [2464] <mfn_DecodeSSN>Read CSN=41636
    05/21 15:23:32 [2464] <mfn_DecodeSSN>Sygate-SSN=33
    05/21 15:23:32 [2464] <mfn_DecodeSSN>Read CSN=34
    05/21 15:23:32 [2464] Product Type=3,Major Ver=5,Minor Ver=2,Platform ID=34,OSType=50659874
    05/21 15:23:32 [2464] OS=Windows Server 2003 family Enterprise Edition; number=5.2.3790
    05/21 15:23:32 [2464] SyLinkCreateInstance => Instance created: 0203C008 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
    05/21 15:23:32 [2464] <GetOnlineNicInfo>:Netport Count=0
    05/21 15:23:32 [2464] <GetOnlineNicInfo>:NicInfo
    05/21 15:23:32 [2464] SyLinkCreateConfig => Created instance: 01F926D0
    05/21 15:23:32 [2464] UseNewConfig => Created m_hNewConfig: 01F926D0
    05/21 15:23:32 [2464] Importing ConfigObject: 01F8F188 into: 01F926D0
    05/21 15:23:32 [2464] Importing ConfigObject: 01F8F188 into: 01F91430
    05/21 15:23:32 [2464] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:23:32 [2464] SSA packageType is set as 105
    05/21 15:23:32 [2464] SyLinkDeleteConfig => Deleting instance: 01F8F188
    05/21 15:23:32 [2464] <SetHiStatus>HI status is changed to=1; reason=127; rule=Host Integrity check passed
      Requirement: "Disable Windows Autoplay features on all device types" passed
      Requirement: "Disable Windows Autoplay features on all device types 2" passed
      Requirement: "Disable Guest Account 2" passed
      Requirement: "Disable Registry Tools" passed

    05/21 15:23:32 [2464] SyLinkCreateConfig => Created instance: 02332628
    05/21 15:23:32 [2464] SetCurLocationName: Name is set to - Default
    05/21 15:23:32 [2464] SetCurLocationID: ID is set to - E24EDDDDC0A85A9600BBE647E4AB370F
    05/21 15:23:32 [2464] SyLinkCreateConfig => Created instance: 023338C8
    05/21 15:23:32 [2464] Importing ConfigObject: 023338C8 into: 01F926D0
    05/21 15:23:32 [2464] Importing ConfigObject: 023338C8 into: 01F91430
    05/21 15:23:32 [2464] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:23:32 [2464] SyLinkDeleteConfig => Deleting instance: 023338C8
    05/21 15:23:32 [2464] SyLinkDeleteConfig => Deleting instance: 02332628
    05/21 15:23:32 [2464] <CSyLink::Start()>
    05/21 15:23:32 [2464] <EncodeHelper::DecryptUrl>
    05/21 15:23:32 [2464] <CSyLink::Start> The last server used was '192.168.90.150'
    05/21 15:23:32 [2464] <CSyLink::ImportConfigFile()>
    05/21 15:23:32 [2464] CUpdateConfig::Dump
    05/21 15:23:32 [2464] </CSyLink::ImportConfigFile()>
    05/21 15:23:32 [2464] ******Sid=S-1-5-21-176308966-2048763445-702939920-500
    05/21 15:23:32 [2464] <GetDomainHostName>NT user Name=
    05/21 15:23:32 [2464] <GetDomainHostName>NT domain Name=
    05/21 15:23:32 [2464] <GetDomainHostName>Current Login User Name=/
    05/21 15:23:32 [2464] <GetDomainHostName>msz_DomainName is taken from m_strPrevDomainName
    05/21 15:23:32 [2464] <GetDomainHostName>DomainName (Final)=WORKGROUP
    05/21 15:23:32 [2464] <HWID CSyLink::GetHardwareKey> Get Hardware ID
    05/21 15:23:33 [2464] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: A1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:33 [6116] <ScheduleNextUpdate>Manually assigned heartbeat=3468 seconds
    05/21 15:23:33 [3088] <HeartbeatThreadProc:>Thread is about to begin..
    05/21 15:23:33 [6116] Successfully created the heartbeat thread
    05/21 15:23:33 [2464] <Start>Started, contact SMS every 3600 seconds
    05/21 15:23:33 [2464] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:23:33 [2464] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    05/21 15:23:33 [2464] </CSyLink::Start()>
    05/21 15:23:33 [2464] <SetClientAuth>Received new User/Domain from SMC..  User: Administrator User Domain: DMSRV-4033
    05/21 15:23:33 [2464] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
    05/21 15:23:33 [2464] <GetLoginRdnsDomain>DNS domain=
    05/21 15:23:33 [2464] <SetClientAuth>Checking if the new user domain name is the same as Local Host ..
    05/21 15:23:33 [2464] <SetClientAuth>HostName=dmsrv-4033
    05/21 15:23:33 [2464] <SetClientAuth>New User DomainName=dmsrv-4033
    05/21 15:23:33 [2464] <SetClientAuth>User Domain name is same as Host name .. Setting 'Login Domain' to =LocalComputer
    05/21 15:23:33 [2464] <SetClientAuth>Logged in user info set to: LocalComputer/Administrator
    05/21 15:23:33 [2464] <SetClientAuth>Marking User Change Notify to redo registration..
    05/21 15:23:33 [3088] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:23:33 ======
    05/21 15:23:34 [3088] <GetOnlineNicInfo>:Netport Count=1
    05/21 15:23:34 [3088] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 15:23:34 [3088] <DoHeartbeat>Try to get domain again...
    05/21 15:23:34 [3088] ******Sid=S-1-5-21-176308966-2048763445-702939920-500
    05/21 15:23:34 [3088] <GetDomainHostName>NT user Name=
    05/21 15:23:34 [3088] <GetDomainHostName>NT domain Name=
    05/21 15:23:34 [3088] <GetDomainHostName>Current Login User Name=LocalComputer/Administrator
    05/21 15:23:34 [3088] <GetDomainHostName>use netbios to query computer domain name. IP and Host name are: 192.168.51.10DMSRV-4033
    05/21 15:23:34 [3088] Got domain name using NetWkstaGetInfo
    05/21 15:23:34 [3088] <GetDomainHostName>Got domain name (using netbios) for IP 192.168.51.10
    05/21 15:23:34 [3088] <GetDomainHostName>computer domain name = WORKGROUP
    05/21 15:23:34 [3088] <GetDomainHostName>msz_DomainName is taken from szDomainName
    05/21 15:23:34 [3088] <GetDomainHostName>DomainName (Final)=WORKGROUP
    05/21 15:23:34 [3088] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:34 [3088] <CalcAgentHashKey>:CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:23:34 [3088] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUP
    05/21 15:23:34 [3088] <CalcAgentHashKey>:CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 15:23:34 [3088] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:34 [3088] <CalcAgentHashKey>:UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 15:23:34 [3088] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUP
    05/21 15:23:34 [3088] <CalcAgentHashKey>:UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 15:23:34 [3088] <DoHeartbeat>HardwareID=A1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:34 [3088] <DoHeartbeat>CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:23:34 [3088] <DoHeartbeat>CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 15:23:34 [3088] <DoHeartbeat>UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 15:23:34 [3088] <DoHeartbeat>UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 15:23:34 [3088] <DoHeartbeat> Set heartbeat event
    05/21 15:23:34 [3088] Use new configuration
    05/21 15:23:34 [3088] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 15:23:34 ======
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 1
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 2
    05/21 15:23:35 [3088] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 15:23:35 [3088] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 3
    05/21 15:23:35 [3088] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 4
    05/21 15:23:35 [3088] <RegHeartbeatProc>===Registration STAGE===
    05/21 15:23:35 [3088] <MakeRegisterData:>logon id (domain/user)=LocalComputer/Administrator

    read error, exit
    05/21 15:23:35 [2008] SyLinkCreateConfig => Created instance: 01EEA4C8
    05/21 15:23:35 [2008] Importing ConfigObject: 01F91430 into: 01EEA4C8
    05/21 15:23:35 [2008] SyLinkDeleteConfig => Deleting instance: 01EEA4C8
    05/21 15:23:35 [3088] <SendRegistrationRequest:>SMS return=200
    05/21 15:23:35 [3088] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:23:35 [3088] <SendRegistrationRequest:>Content Lenght => 679
    05/21 15:23:35 [3088] HTTP returns status code=200
    05/21 15:23:35 [3088] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    05/21 15:23:35 [3088] <SendRegistrationRequest:>COMPLETED, returned 0
    05/21 15:23:35 [3088] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 15:23:35 [3088] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.10,return TRUE
    05/21 15:23:35 [3088] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.10
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 5.1
    05/21 15:23:35 [3088] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
    05/21 15:23:35 [3088] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 15:23:35 [3088] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 8
    05/21 15:23:35 [3088] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 15:23:35 [3088] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 15:23:35 [3088] <RegHeartbeatProc>====== Registration Procedure stops at 15:23:35 ======
    05/21 15:23:35 [3088] HEARTBEAT: Check Point 10
    05/21 15:23:36 [3088] HEARTBEAT: Check Point Complete
    05/21 15:23:36 [3088] <RegHeartbeatProc>Done, Heartbeat=3seconds
    05/21 15:23:36 [3088] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:23:36 ======
    05/21 15:23:40 [3088] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:23:40 ======
    05/21 15:23:40 [3088] <GetOnlineNicInfo>:Netport Count=1
    05/21 15:23:40 [3088] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 15:23:40 [3088] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:40 [3088] <CalcAgentHashKey>:CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:23:40 [3088] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUP
    05/21 15:23:40 [3088] <CalcAgentHashKey>:CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 15:23:40 [3088] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:40 [3088] <CalcAgentHashKey>:UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 15:23:40 [3088] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUP
    05/21 15:23:40 [3088] <CalcAgentHashKey>:UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 15:23:40 [3088] <DoHeartbeat>HardwareID=A1E613495B2C6505AE1558D8B303F8D9
    05/21 15:23:40 [3088] <DoHeartbeat>CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:23:40 [3088] <DoHeartbeat>CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 15:23:40 [3088] <DoHeartbeat>UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 15:23:40 [3088] <DoHeartbeat>UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 15:23:40 [3088] <DoHeartbeat> Set heartbeat event
    05/21 15:23:40 [3088] Use new configuration
    05/21 15:23:40 [3088] <CSyLink::IndexHeartbeatProc()>
    05/21 15:23:40 [3088] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01F91430
    05/21 15:23:40 [3088] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 15:23:40 ======
    05/21 15:23:41 [3088] HEARTBEAT: Check Point 1
    05/21 15:23:41 [3088] Get First Server!
    05/21 15:23:41 [3088] HEARTBEAT: Check Point 2
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 15:23:41 [3088] HEARTBEAT: Check Point 3
    05/21 15:23:41 [3088] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    05/21 15:23:41 [3088] HEARTBEAT: Check Point 4
    05/21 15:23:41 [3088] <IndexHeartbeatProc>===Get Index STAGE===
    05/21 15:23:41 [3088] ************CSN=41637
    05/21 15:23:41 [3088] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&hid=A1E613495B2C6505AE1558D8B303F8D9&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&mode=0&hbt=3600&as=41637&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:23:41 [3088] <GetIndexFileRequest:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:23:41 [3088] <GetIndexFileRequest:>SMS return=200
    05/21 15:23:41 [3088] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:23:41 [3088] <FindHeader>Sem-HashKey:=>5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:23:41 [3088] <FindHeader>Sem-LANSensor:=>0
    05/21 15:23:41 [3088] <FindHeader>Sem-Signatue:=>2986ED64741E49036ADBFCA6AD79D705F04F3AD667036AA2A257DBA0B318009F15DFAA3BAC717C26356445549A598D7D7568E28302305B1688F220951561A23308350570EA06B933B0E0333D49D7FAA0C327971FCFB13AB76B01FF10EFE551D21E84FED07493130817032A74BB5C9B536C4E0B107F55714468F0C12746F15B06
    05/21 15:23:41 [3088] <mfn_DoGetIndexFile200>Content Lenght => 1823
    05/21 15:23:41 [3088] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 15:23:41 [3088] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="4C6CBA3B0A01012A00E2B74594E6D7F4" ServerID="F80BE22E0A01012A0008E00D65A1F19E" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "21/05/2012 11:49:11">    <Profile Checksum="B9A04AEBBD2DF98DE2E3836411748A22" SerialNumber="26C2-05/16/2012 18:30:54 281" LastModifiedTime="17/05/2012  00:02:31"/>    <ConfigFile Checksum="1D3FD873E202F733057C8E324E1736FA" LastModifiedTime="09/05/2012  12:29:21"/>    <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="10/05/2012  17:55:08"/>    <SylinkFile Checksum="8287289EFACB99A4E60371D2C70E2318" LastModifiedTime="17/05/2012  00:02:31"/>    <LSProfile Checksum="D227B701BCBAF3C309284562B2AAC2AD" SerialNumber ="26C2-05/16/2012 18:30:54 281" LastModifiedTime ="17/05/2012  00:02:31"/>
        <LiveUpdate>
            <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="120520009"/>
              <File Checksum="62DFA85FCEB31321C9FAD040A7569A66" DeltaFlag="1" FullSize="632982" LastModifiedTime="1337580559953" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="120520032"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="120520009"/>
              <File Checksum="0F99DBF7BED0ADEFF325EC46375FA955" DeltaFlag="1" FullSize="1234420" LastModifiedTime="1337471358390" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="120518001"/>
              <File Checksum="9828034DCE5411AED5B60F902BA1C2F6" DeltaFlag="1" FullSize="3503390" LastModifiedTime="1337471345250" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="120518001"/>
              <File Checksum="2206E867D7010B9FCDB8DC7BF20F3373" DeltaFlag="1" FullSize="1211940" LastModifiedTime="1337471282125" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="120518001"/>
              <File Checksum="5FEA556B22C0689CC7F2F6589D12C198" DeltaFlag="1" FullSize="1786870" LastModifiedTime="1337387970625" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="120518002"/>
              <File Checksum="55C9BFCF6BE45BACB972A0750BFDD86C" DeltaFlag="1" FullSize="2290935" LastModifiedTime="1336698481687" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="120508011"/>
              <File Checksum="A63A9B34531C78B465244FE862FCC565" DeltaFlag="1" FullSize="5013" LastModifiedTime="1336551047734" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="110607005"/>
              <File Checksum="115C2CA95B2080123FF7F8B1A2667164" DeltaFlag="1" FullSize="26328" LastModifiedTime="1336549659500" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="120411035"/>
              <File Checksum="C1DE1ACA67D1B83A53134971ADAB0946" DeltaFlag="1" FullSize="669829" LastModifiedTime="1262959698871" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
              <File Checksum="CC62A6A3C908DAC0EA75DE68543C0725" DeltaFlag="1" FullSize="650307" LastModifiedTime="1262959706175" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
              <File Checksum="E95512292358D9A67294FDF360D23EF5" DeltaFlag="1" FullSize="88188" LastModifiedTime="1262959905742" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
              <File Checksum="9B759D9C7D5F9790DB24E977AE112838" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1262959908348" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
              <File Checksum="3BA4DF96038CBE26F5E4A04C28F4E9A1" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1262959914310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
              <File Checksum="0684E4361FC0A9A82AF197E35E59F7DA" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291340590656" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
              <File Checksum="B9E2E5C166F4DF30C408B2C9BD903E2B" DeltaFlag="1" FullSize="88886" LastModifiedTime="1337387900437" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="120518002"/>
              <File Checksum="263727A82C58D7E3C6261B2455CAEECE" DeltaFlag="1" FullSize="11316042" LastModifiedTime="1337387961937" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="120518002"/>
              <File Checksum="C7E6AC243746819A45B36B2EF8301A68" DeltaFlag="1" FullSize="11316070" LastModifiedTime="1337388438421" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="120518002"/>
              <File Checksum="533D5A4DAB2F94021943097D8576ABF3" DeltaFlag="1" FullSize="88867" LastModifiedTime="1337388456171" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="120518002"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="120520009"/>
              <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="120520009"/>

        </LiveUpdate>
    </GroupIndex>
    05/21 15:23:41 [3088] <mfn_DoGetIndexFile200>Parser Index File!
    05/21 15:23:41 [3088] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    05/21 15:23:41 [3088] <GetIndexFileRequest:>COMPLETED
    05/21 15:23:41 [3088] <IndexHeartbeatProc>GetIndexFile handling status: 0
    05/21 15:23:41 [3088] <IndexHeartbeatProc>Switch Server flag=0
    05/21 15:23:41 [3088] HEARTBEAT: Check Point 5.1
    05/21 15:23:41 [3088] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 15:23:41 [3088] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.10,return TRUE
    05/21 15:23:41 [3088] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.10
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:120520009
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:120520032
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:120520009
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:120518001
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:120518001
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:120518001
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:120518002
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:120508011
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:110607005
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120411035
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:120518002
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:120518002
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:120518002
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:120518002
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:23:41 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:120520009
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    05/21 15:23:41 [3088] <mfn_LiveUpdate:> Agent returned closest matching seq: 120329018
    05/21 15:23:41 [3088] <Add2LUFileList:>Adding LU Info to LU Download File List: {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 15:23:41 [3088] <mfn_PrepareLUContent:>Requesting LU Info for :  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:120520009
    05/21 15:23:41 [3088] ************CSN=41638
    05/21 15:23:41 [3088] <GetContentFileInfoUrl:> Request is: action=52&hostid=635347D6C0A85A9600661C780037AF7E&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&fn=[hex]7B43363044433233342D363546392D343637342D393441452D3632313538454643413433337D&cdn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572&lu=6&luseq=120329018,120327037,&lulasttriedseq=&lutargetseq=120520009&lucontentstate=0
    05/21 15:23:41 [3088] <mfn_RequestLUContentInfo:>URL: /secars/secars.dll?h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
    05/21 15:23:41 [3088] <SendUrlAndReceiveResponse:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:23:41 [3088] <SendUrlAndReceiveResponse:>SMS return=200
    05/21 15:23:41 [3088] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:23:41 [3088] <mfn_RequestLUContentInfo:>Received LU Info :  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:120520009 Response header: HTTP/1.1 200 OK
    Date: Mon, 21 May 2012 09:50:00 GMT
    Server: Apache
    Sem-SetContentLength: 1
    Sem-FileLength: 192034890
    Sem-PackageFileLength: 192034890
    Sem-LUPath: /content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    Sem-LUFull: 1
    Sem-LUDeltaBaseSeqName:
    Sem-PackageType: 1
    Sem-DeltaMethod: 1
    Connection: close
    Content-Length: 192034890
    Content-Type: text/html


    05/21 15:23:41 [3088] <FindHeader>Sem-LUFull:=>1
    05/21 15:23:41 [3088] <mfn_RequestLUContentInfo:>Sem-LUFull:1
    05/21 15:23:41 [3088] <FindHeader>Sem-PackageType:=>1
    05/21 15:23:41 [3088] <mfn_RequestLUContentInfo:>Sem-PackageType:1
    05/21 15:23:41 [3088] <FindHeader>Sem-DeltaMethod:=>1
    05/21 15:23:41 [3088] <FindHeader>Sem-LUPath:=>/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    05/21 15:23:41 [3088] <FindHeader>Content-Length:=>192034890
    05/21 15:23:41 [3088] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 15:23:41 [3088] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=3600 seconds
    05/21 15:23:41 [3088] HEARTBEAT: Check Point 6
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    05/21 15:23:41 [3088] ReasonDescForFailure*** = Host Integrity check passed
    05/21 15:23:41 [3088] ReasonDescForFailure*** = Host Integrity check passed
    05/21 15:23:41 [3088] *** = <SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>

    05/21 15:23:41 [3088] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1337594021
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>Free memory difference: 3304132608, Threshold: 0
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>Free disk space difference: 45994291200, Threshold: 0
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    05/21 15:23:41 [3088] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
    <SESAgentOpState AgentID="635347D6C0A85A9600661C780037AF7E" Timestamp="1337594021390"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>18</PatternFileRevision><UsingPattern>3734034</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>2A021D000000</PatternFileDate><TimeOfLastVirus>2A02060A3826</TimeOfLastVirus><TimeOfLastScan>2A0415062301</TimeOfLastScan><WorstInfectionType>0</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>1</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>19011542</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7274498:131081</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
    <GupStatus IsGup="0" NameSpace="rpc" ComputerID="233FAE4DC0A85A9600661C781AF0BC63"/>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>1336975582843</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>
    ]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <SSAHostInfo>
    <Memory Free="3304132608"/>
    <Disk Letter="C:\" Free="45994291200"/>
    </SSAHostInfo>
    </SSAInfo>
    ]]></Data></TechID></SESAgentOpState>
    05/21 15:23:41 [3088] ************CSN=41639
    05/21 15:23:41 [3088] <mfn_MakePostUrl:>Request is: action=192&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&as=41639&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>POST the total size=1284
    05/21 15:23:41 [3088] <mfn_PostAgentInfo>Done with return code = 200
    05/21 15:23:41 [3088] <IndexHeartbeatProc>===UPLOAD STAGE===
    05/21 15:23:41 [3088] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    05/21 15:23:41 [3088] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    05/21 15:23:41 [3088] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    05/21 15:23:41 [3088] <PrepareEventLog>initialized technology extension processing ok
    05/21 15:23:41 [3088] <CalcEventLogIndex>Need to send Event Log Type(0) from id 226 to 234
    05/21 15:23:41 [3088] <PrepareEventLog>Allow total logs to send=9
    05/21 15:23:41 [3088] <PrepareEventLog>nSecurityRecordsTotal=0
    05/21 15:23:41 [3088] <PrepareEventLog>nSecurityRecordsToSend=0
    05/21 15:23:41 [3088] <PrepareEventLog>nSystemRecordsTotal=9
    05/21 15:23:41 [3088] <PrepareEventLog>nSystemRecordsToSend=100
    05/21 15:23:41 [3088] <PrepareEventLog>nTrafficRecordsTotal=0
    05/21 15:23:41 [3088] <PrepareEventLog>nTrafficRecordsToSend=0
    05/21 15:23:41 [3088] <PrepareEventLog>nRawRecordsTotal=0
    05/21 15:23:41 [3088] <PrepareEventLog>nRawRecordsToSend=0
    05/21 15:23:41 [3088] <PrepareEventLog>nProcessRecordsTotal=0
    05/21 15:23:41 [3088] <PrepareEventLog>nProcessRecordsToSend=0
    05/21 15:23:41 [3088] <PrepareEventLog>nLANSensorRecordsTotal=0
    05/21 15:23:41 [3088] <PrepareEventLog>nLANSensorRecordsToSend=0
    05/21 15:23:41 [3088] <PrepareEventLog>nTechExtensionRecordsTotal=0
    05/21 15:23:41 [3088] <PrepareEventLog>nTechExtensionRecordsToSend=0
    05/21 15:23:41 [3088] <MakeSystemLog>The size of SYSTEM event logs is 3704.
    05/21 15:23:41 [3088] <SyLink>The size of SYSTEM event logs is 3704.
    05/21 15:23:41 [3088] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
    05/21 15:23:41 [3088] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    05/21 15:23:41 [3088] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    05/21 15:23:41 [3088] <MakeProcessLog>Attached total 0 bytes process event logs.
    05/21 15:23:41 [3088] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    05/21 15:23:41 [3088] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    05/21 15:23:41 [3088] ************CSN=41640
    05/21 15:23:41 [3088] <mfn_MakePostUrl:>Request is: action=195&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41640&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:23:41 [3088] <SendEventLogToServer>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:23:42 [3088] <SendEventLogToServer>eventlog-->SMS, size=857
    05/21 15:23:42 [3088] <SendEventLogToServer>uploads the eventlog to server, size=857
    05/21 15:23:42 [3088] <SendEventLogToServer>Query return code = 200
    05/21 15:23:42 [3088] <SendEventLogToServer>EventLog-->SEM DONE!
    05/21 15:23:42 [3088] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    05/21 15:23:42 [3088] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    05/21 15:23:42 [3088] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
    05/21 15:23:42 [3088] HEARTBEAT: Check Point 8
    05/21 15:23:42 [3088] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 15:23:42 [3088] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 15:23:42 [3088] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 15:23:42 ======
    05/21 15:23:42 [3088] <IndexHeartbeatProc>Set Heartbeat Result= 2
    05/21 15:23:42 [3088] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    05/21 15:23:42 [3088] Use new configuration
    05/21 15:23:42 [3088] HEARTBEAT: Check Point Complete
    05/21 15:23:42 [3088] <IndexHeartbeatProc>Done, Heartbeat=3600seconds
    05/21 15:23:42 [3088] </CSyLink::IndexHeartbeatProc()>
    05/21 15:23:42 [3088] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:23:42 ======
    05/21 15:24:33 [2476] <CExpBackoff::CExpBackoff()>
    05/21 15:24:33 [2476] </CExpBackoff::CExpBackoff()>
    05/21 15:24:33 [2476] SyLinkCreateConfig => Created instance: 01EEA4C8
    05/21 15:24:33 [2476] Importing ConfigObject: 01F91430 into: 01EEA4C8
    05/21 15:24:33 [2476] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01EEA4C8
    05/21 15:24:33 [2476] <CRandomDelay::CRandomDelay()>
    05/21 15:24:33 [2476] Random delay window: 0hour 5min 0sec
    05/21 15:24:33 [2476] Computed random delay:0hour 4min 15sec 0millisec
    05/21 15:24:33 [2476] </CRandomDelay::CRandomDelay()>
    05/21 15:24:33 [2476] <LUThreadProc>Waiting for: 255000 milliseconds to start downloading LU contents
    05/21 15:24:33 [6116] <CSyLink::mfn_DownloadNow()>
    05/21 15:24:33 [6116] </CSyLink::mfn_DownloadNow()>
    05/21 15:25:33 [6116] <CSyLink::mfn_DownloadNow()>
    05/21 15:25:33 [6116] </CSyLink::mfn_DownloadNow()>
    05/21 15:26:33 [6116] <CalcEventLogIndex>Need to send Event Log Type(1) from id 6535 to 6535
    05/21 15:26:33 [6116] <ScheduleNextUpdate>Manually assigned heartbeat=1 seconds
    05/21 15:26:33 [6116] <CSyLink::mfn_DownloadNow()>
    05/21 15:26:33 [6116] </CSyLink::mfn_DownloadNow()>
    05/21 15:26:34 [3088] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:26:34 ======
    05/21 15:26:34 [3088] <GetOnlineNicInfo>:Netport Count=1
    05/21 15:26:34 [3088] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 15:26:34 [3088] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 15:26:34 [3088] <CalcAgentHashKey>:CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:26:34 [3088] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033WORKGROUP
    05/21 15:26:34 [3088] <CalcAgentHashKey>:CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 15:26:34 [3088] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUPA1E613495B2C6505AE1558D8B303F8D9
    05/21 15:26:34 [3088] <CalcAgentHashKey>:UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 15:26:34 [3088] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520AdministratorLocalComputerDMSRV-4033WORKGROUP
    05/21 15:26:34 [3088] <CalcAgentHashKey>:UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 15:26:34 [3088] <DoHeartbeat>HardwareID=A1E613495B2C6505AE1558D8B303F8D9
    05/21 15:26:34 [3088] <DoHeartbeat>CHKey=5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:26:34 [3088] <DoHeartbeat>CKey=814D3A6FB709155A008080E5E7E69EEA
    05/21 15:26:34 [3088] <DoHeartbeat>UCHKey=2C6A70BE9F86CED795D3087C00204713
    05/21 15:26:34 [3088] <DoHeartbeat>UCKey=FEEC1302359FE52EB1A4856695E07A4F
    05/21 15:26:34 [3088] <DoHeartbeat> Set heartbeat event
    05/21 15:26:34 [3088] Use new configuration
    05/21 15:26:34 [3088] <CSyLink::IndexHeartbeatProc()>
    05/21 15:26:34 [3088] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 01F91430
    05/21 15:26:34 [3088] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 15:26:34 ======
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 1
    05/21 15:26:35 [3088] Get First Server!
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 2
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 3
    05/21 15:26:35 [3088] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 4
    05/21 15:26:35 [3088] <IndexHeartbeatProc>===Get Index STAGE===
    05/21 15:26:35 [3088] ************CSN=41641
    05/21 15:26:35 [3088] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&hid=A1E613495B2C6505AE1558D8B303F8D9&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&mode=0&hbt=3600&as=41641&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:26:35 [3088] <GetIndexFileRequest:>http://192.168.90.150:80/secars/secars.dll?h=60E8B18C343490F40CA87E28F6B49CF7941288A5689193313CA20BD36929B7B8621E286784AC5E75ADA49F86087182D5674AC6DA0C3F7B3E82E19413AF7ED4C964CBB40AE0FBF1CE23DD294DF284FAEB17400BB5BF35E17CBC49A89CC8E04529AA0171573FCF26B275BCBAF2C255B67D514D19DC7B702392AC7C2FD46665A64F8480950286DFF4C1C42E2FF6A6BD01C8C04BB6D5B97BC2BF5B65D14E6174D635CA0B2C5A8BC4766FE3668137A7C3F8E53B94626A39A840F39872B2CEB240B34C493FC463CF7846937AE1D8AD3A95560E3E97E4866BFE2ACB524B13A187EBE86C115F2AF212DE559B381504F0C200CC1C246FE148A5E7715BFC3E1F3A0484D841097B6D362A1A46E762769E0E5F517906A3DB6F7B020E9DEB1DFD380B43DF7F3098F01BBAF8C6CCEC9325B301F3572DFBB2A8B6A0733BC955A1E32E2DDA4FE65615E9EB24073FC029C351AC7E2FD3021CAF9CBB378D17DCF85EAA7AA53C7FACE1F90795DD5B59CD0D0FA5A8EC374C0BFAFF5BF8A1F6D44392C31BC8E2FF09C874ADB78AAF99207E99626A0AAB10D283730B69CE723D258146CA0E07FD12110FA8
    05/21 15:26:35 [3088] <GetIndexFileRequest:>SMS return=200
    05/21 15:26:35 [3088] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:26:35 [3088] <FindHeader>Sem-HashKey:=>5BE1057D3F1D6558E908AF956CCFD17B
    05/21 15:26:35 [3088] <FindHeader>Sem-LANSensor:=>0
    05/21 15:26:35 [3088] <FindHeader>Sem-Signatue:=>2986ED64741E49036ADBFCA6AD79D705F04F3AD667036AA2A257DBA0B318009F15DFAA3BAC717C26356445549A598D7D7568E28302305B1688F220951561A23308350570EA06B933B0E0333D49D7FAA0C327971FCFB13AB76B01FF10EFE551D21E84FED07493130817032A74BB5C9B536C4E0B107F55714468F0C12746F15B06
    05/21 15:26:35 [3088] <mfn_DoGetIndexFile200>Content Lenght => 1823
    05/21 15:26:35 [3088] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 15:26:35 [3088] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="4C6CBA3B0A01012A00E2B74594E6D7F4" ServerID="F80BE22E0A01012A0008E00D65A1F19E" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "21/05/2012 11:49:11">    <Profile Checksum="B9A04AEBBD2DF98DE2E3836411748A22" SerialNumber="26C2-05/16/2012 18:30:54 281" LastModifiedTime="17/05/2012  00:02:31"/>    <ConfigFile Checksum="1D3FD873E202F733057C8E324E1736FA" LastModifiedTime="09/05/2012  12:29:21"/>    <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="10/05/2012  17:55:08"/>    <SylinkFile Checksum="8287289EFACB99A4E60371D2C70E2318" LastModifiedTime="17/05/2012  00:02:31"/>    <LSProfile Checksum="D227B701BCBAF3C309284562B2AAC2AD" SerialNumber ="26C2-05/16/2012 18:30:54 281" LastModifiedTime ="17/05/2012  00:02:31"/>
        <LiveUpdate>
            <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="120520009"/>
              <File Checksum="62DFA85FCEB31321C9FAD040A7569A66" DeltaFlag="1" FullSize="632982" LastModifiedTime="1337580559953" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="120520032"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="120520009"/>
              <File Checksum="0F99DBF7BED0ADEFF325EC46375FA955" DeltaFlag="1" FullSize="1234420" LastModifiedTime="1337471358390" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="120518001"/>
              <File Checksum="9828034DCE5411AED5B60F902BA1C2F6" DeltaFlag="1" FullSize="3503390" LastModifiedTime="1337471345250" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="120518001"/>
              <File Checksum="2206E867D7010B9FCDB8DC7BF20F3373" DeltaFlag="1" FullSize="1211940" LastModifiedTime="1337471282125" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="120518001"/>
              <File Checksum="5FEA556B22C0689CC7F2F6589D12C198" DeltaFlag="1" FullSize="1786870" LastModifiedTime="1337387970625" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="120518002"/>
              <File Checksum="55C9BFCF6BE45BACB972A0750BFDD86C" DeltaFlag="1" FullSize="2290935" LastModifiedTime="1336698481687" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="120508011"/>
              <File Checksum="A63A9B34531C78B465244FE862FCC565" DeltaFlag="1" FullSize="5013" LastModifiedTime="1336551047734" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="110607005"/>
              <File Checksum="115C2CA95B2080123FF7F8B1A2667164" DeltaFlag="1" FullSize="26328" LastModifiedTime="1336549659500" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="120411035"/>
              <File Checksum="C1DE1ACA67D1B83A53134971ADAB0946" DeltaFlag="1" FullSize="669829" LastModifiedTime="1262959698871" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
              <File Checksum="CC62A6A3C908DAC0EA75DE68543C0725" DeltaFlag="1" FullSize="650307" LastModifiedTime="1262959706175" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
              <File Checksum="E95512292358D9A67294FDF360D23EF5" DeltaFlag="1" FullSize="88188" LastModifiedTime="1262959905742" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
              <File Checksum="9B759D9C7D5F9790DB24E977AE112838" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1262959908348" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
              <File Checksum="3BA4DF96038CBE26F5E4A04C28F4E9A1" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1262959914310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
              <File Checksum="0684E4361FC0A9A82AF197E35E59F7DA" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291340590656" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
              <File Checksum="B9E2E5C166F4DF30C408B2C9BD903E2B" DeltaFlag="1" FullSize="88886" LastModifiedTime="1337387900437" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="120518002"/>
              <File Checksum="263727A82C58D7E3C6261B2455CAEECE" DeltaFlag="1" FullSize="11316042" LastModifiedTime="1337387961937" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="120518002"/>
              <File Checksum="C7E6AC243746819A45B36B2EF8301A68" DeltaFlag="1" FullSize="11316070" LastModifiedTime="1337388438421" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="120518002"/>
              <File Checksum="533D5A4DAB2F94021943097D8576ABF3" DeltaFlag="1" FullSize="88867" LastModifiedTime="1337388456171" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="120518002"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="120520009"/>
              <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="120520009"/>

        </LiveUpdate>
    </GroupIndex>
    05/21 15:26:35 [3088] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    05/21 15:26:35 [3088] <GetIndexFileRequest:>COMPLETED
    05/21 15:26:35 [3088] <IndexHeartbeatProc>GetIndexFile handling status: 0
    05/21 15:26:35 [3088] <IndexHeartbeatProc>Switch Server flag=0
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 5.1
    05/21 15:26:35 [3088] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 15:26:35 [3088] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.10,return TRUE
    05/21 15:26:35 [3088] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.10
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:120520009
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:120520032
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:120520009
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:120518001
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:120518001
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:120518001
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:120518002
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:120508011
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:110607005
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120411035
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:120518002
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:120518002
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:120518002
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:120518002
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:26:35 [3088] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:120520009
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=0
    05/21 15:26:35 [3088] <mfn_LiveUpdate:> Agent returned closest matching seq: 120329018
    05/21 15:26:35 [3088] <Add2LUFileList:>Adding LU Info to LU Download File List: {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 15:26:35 [3088] <Add2LUFileList:>File Info already exists, hence updating: {C60DC234-65F9-4674-94AE-62158EFCA433}120520009
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 15:26:35 [3088] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=3600 seconds
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 6
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    05/21 15:26:35 [3088] ReasonDescForFailure*** = Host Integrity check passed
    05/21 15:26:35 [3088] ReasonDescForFailure*** = Host Integrity check passed
    05/21 15:26:35 [3088] *** = <SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="0" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>

    05/21 15:26:35 [3088] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 174
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>Free memory difference: 21553152, Threshold: 495619890
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>Free disk space difference: 245760, Threshold: 6899143680
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    05/21 15:26:35 [3088] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
    <SESAgentOpState AgentID="635347D6C0A85A9600661C780037AF7E" Timestamp="1337594195562"><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="635347D6C0A85A9600661C780037AF7E" ComputerID="233FAE4DC0A85A9600661C781AF0BC63" HardwareKey="A1E613495B2C6505AE1558D8B303F8D9" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">
    <AgentHIInfo Status="1" ReasonCode="0" ReasonDescForFailure="Host Integrity check passed"/>
    <SSAHostInfo>
    <NetworkIdentity UserDomain="LocalComputer" LogonUser="Administrator" HostDomain="WORKGROUP" HostName="DMSRV-4033" HostDesc=""/>
    <SSAProduct Version="11.0.5002.333"/>
    <SSAOS Version="5.2.3790" Desc="Windows Server 2003 family Enterprise Edition" Type="50659874" ServicePack="Service Pack 1" Language="9"/>
    <Processor ProcessorType="x86 Family 6 Model 44 Stepping 2" ProcessorClock="2266" ProcessorNum="4"/>
    <Memory Size="4249214976"/>
    <Disk Letter="C:\" Size="52427931648"/>
    <BIOS Version="IBM    - 0"/>
    <TpmDevice Id="0"/>
    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>
    <SSAIDS Version="" SerialNumber=""/>
    <SSAUTC Bias="-330"/>
    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.51.13"/></DNSs>
    <SSANICs><SSANIC Ip="192.168.51.10" Mac="5c-f3-fc-56-7b-42" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>
    </SSAHostInfo>
    <RebootRequired Status="0"></RebootRequired>
    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
    </SSAInfo>
    ]]></Data></TechID></SESAgentOpState>
    05/21 15:26:35 [3088] ************CSN=41642
    05/21 15:26:35 [3088] <mfn_MakePostUrl:>Request is: action=192&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&as=41642&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>POST the total size=884
    05/21 15:26:35 [3088] <mfn_PostAgentInfo>Done with return code = 200
    05/21 15:26:35 [3088] <IndexHeartbeatProc>===UPLOAD STAGE===
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    05/21 15:26:35 [3088] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    05/21 15:26:35 [3088] <PrepareEventLog>initialized technology extension processing ok
    05/21 15:26:35 [3088] <CalcEventLogIndex>Need to send Event Log Type(1) from id 6535 to 6535
    05/21 15:26:35 [3088] <CalcEventLogIndex>Need to send Event Log Type(0) from id 235 to 235
    05/21 15:26:35 [3088] <PrepareEventLog>Allow total logs to send=2
    05/21 15:26:35 [3088] <PrepareEventLog>nSecurityRecordsTotal=1
    05/21 15:26:35 [3088] <PrepareEventLog>nSecurityRecordsToSend=50
    05/21 15:26:35 [3088] <PrepareEventLog>nSystemRecordsTotal=1
    05/21 15:26:35 [3088] <PrepareEventLog>nSystemRecordsToSend=50
    05/21 15:26:35 [3088] <PrepareEventLog>nTrafficRecordsTotal=0
    05/21 15:26:35 [3088] <PrepareEventLog>nTrafficRecordsToSend=0
    05/21 15:26:35 [3088] <PrepareEventLog>nRawRecordsTotal=0
    05/21 15:26:35 [3088] <PrepareEventLog>nRawRecordsToSend=0
    05/21 15:26:35 [3088] <PrepareEventLog>nProcessRecordsTotal=0
    05/21 15:26:35 [3088] <PrepareEventLog>nProcessRecordsToSend=0
    05/21 15:26:35 [3088] <PrepareEventLog>nLANSensorRecordsTotal=0
    05/21 15:26:35 [3088] <PrepareEventLog>nLANSensorRecordsToSend=0
    05/21 15:26:35 [3088] <PrepareEventLog>nTechExtensionRecordsTotal=0
    05/21 15:26:35 [3088] <PrepareEventLog>nTechExtensionRecordsToSend=0
    05/21 15:26:35 [3088] <MakeSystemLog>The size of SYSTEM event logs is 381.
    05/21 15:26:35 [3088] <SyLink>The size of SYSTEM event logs is 381.
    05/21 15:26:35 [3088] <MakeSecurityLog>Attached total 3120 bytes SECURITY event logs.
    05/21 15:26:35 [3088] <SyLink>Attached total 3120 bytes SECURITY event logs.
    05/21 15:26:35 [3088] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    05/21 15:26:35 [3088] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    05/21 15:26:35 [3088] <MakeProcessLog>Attached total 0 bytes process event logs.
    05/21 15:26:35 [3088] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    05/21 15:26:35 [3088] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    05/21 15:26:35 [3088] ************CSN=41643
    05/21 15:26:35 [3088] <mfn_MakePostUrl:>Request is: action=195&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41643&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:26:35 [3088] <SendEventLogToServer>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:26:35 [3088] <SendEventLogToServer>eventlog-->SMS, size=984
    05/21 15:26:35 [3088] <SendEventLogToServer>uploads the eventlog to server, size=984
    05/21 15:26:35 [3088] <SendEventLogToServer>Query return code = 200
    05/21 15:26:35 [3088] <SendEventLogToServer>EventLog-->SEM DONE!
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    05/21 15:26:35 [3088] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
    05/21 15:26:35 [3088] HEARTBEAT: Check Point 8
    05/21 15:26:35 [3088] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 15:26:35 [3088] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 15:26:35 [3088] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 15:26:35 ======
    05/21 15:26:35 [3088] <IndexHeartbeatProc>Set Heartbeat Result= 2
    05/21 15:26:35 [3088] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    05/21 15:26:35 [3088] Use new configuration
    05/21 15:26:35 [3088] HEARTBEAT: Check Point Complete
    05/21 15:26:35 [3088] <IndexHeartbeatProc>Done, Heartbeat=3600seconds
    05/21 15:26:35 [3088] </CSyLink::IndexHeartbeatProc()>
    05/21 15:26:35 [3088] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:26:35 ======
    05/21 15:27:33 [6116] <CSyLink::mfn_DownloadNow()>
    05/21 15:27:33 [6116] </CSyLink::mfn_DownloadNow()>
    05/21 15:28:33 [6116] <CSyLink::mfn_DownloadNow()>
    05/21 15:28:33 [6116] </CSyLink::mfn_DownloadNow()>
    05/21 15:28:48 [2476] <LUThreadProc>Starting LU download.
    05/21 15:28:48 [2476] SyLinkCreateConfig => Created instance: 01EC3648
    05/21 15:28:48 [2476] Importing ConfigObject: 01F91430 into: 01EC3648
    05/21 15:28:48 [2476] <UpdateGUPList>Setting the session timeout on GlobalItemsSession to 2 min.
    05/21 15:28:48 [2476] ************CSN=41644
    05/21 15:28:48 [2476] <MakeGetGlobalIndexUrl:>Request is: action=310&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41644&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:28:48 [2476] <GetGlobalIndex:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:28:48 [2476] <GetGlobalIndex:>SMS return=200
    05/21 15:28:48 [2476] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:28:48 [2476] <FindHeader>Sem-Signatue:=>767B9B3F79F4BBF422D558E6FE0147C3D9CBE83B4DAEB37C992AD07D57E0038346BE4BE0E8CAF6652A4E4B1567F7F083DB6F5496888B5E1FE8D50233FE4AAFD93C80B2FD1E0DE2F43526D1C5A6138FAD550D2C25FDCB4136D69EDF7DEB779CDF2F5DEC166CB60A0660C803006D00245605AEC6E8904D47892CCDBCCBBD06A644
    05/21 15:28:48 [2476] <DoGetGlobalIndex200>Content Lenght => 196
    05/21 15:28:48 [2476] <DoGetGlobalIndex200>Got Global Index from server, read bytes=196
    05/21 15:28:48 [2476] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 15:28:48 [2476] <DoGetGlobalIndex200>completed
    05/21 15:28:48 [2476] <GetGlobalIndex:>RECEIVE STAGE COMPLETED
    05/21 15:28:48 [2476] <GetGlobalIndex:>COMPLETED
    05/21 15:28:48 [2476] ************CSN=41645
    05/21 15:28:48 [2476] <mfn_MakeGetGupListUrl:>Request is: action=320&hostid=635347D6C0A85A9600661C780037AF7E&chk=5BE1057D3F1D6558E908AF956CCFD17B&ck=814D3A6FB709155A008080E5E7E69EEA&uchk=2C6A70BE9F86CED795D3087C00204713&uck=FEEC1302359FE52EB1A4856695E07A4F&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=41645&cn=[hex]444D5352562D34303333&lun=[hex]41646D696E6973747261746F72&udn=[hex]4C6F63616C436F6D7075746572
    05/21 15:28:48 [2476] <GetGupList:>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:28:48 [2476] <GetGupList:>SMS return=200
    05/21 15:28:48 [2476] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:28:48 [2476] <mfn_DoGetGupList200>Content Lenght => 340
    05/21 15:28:48 [2476] <mfn_DoGetGupList200>Got Gup List from server, read bytes=340
    05/21 15:28:48 [2476] <mfn_DoGetGupList200>completed
    05/21 15:28:48 [2476] <GetGupList:>RECEIVE STAGE COMPLETED
    05/21 15:28:48 [2476] <GetGupList:>COMPLETED
    05/21 15:28:48 [2476] SyLinkDeleteConfig => Deleting instance: 01EC3648
    05/21 15:28:48 [2476] <SetupTempLUFilePath:>NEW download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF{C60DC234-65F9-4674-94AE-62158EFCA433}1205200091.TMP
    05/21 15:28:48 [2476] <CHttpFileDownload::CHttpFileDownload()>
    05/21 15:28:48 [2476] </CHttpFileDownload::CHttpFileDownload()>
    05/21 15:28:48 [2476] <CHttpFileDownload::Do()>
    05/21 15:28:48 [2476] <CHttpFileDownload::getRemainingBytesToDownload()>
    05/21 15:28:48 [2476] Remaining bytes to download: 192034890
    05/21 15:28:48 [2476] </CHttpFileDownload::getRemainingBytesToDownload()>
    05/21 15:28:48 [2476] <CHttpConnector::SendRequest()>
    05/21 15:28:48 [2476] Request> http://192.168.51.15:2967/content/{535CB6A4-441F-4e8a-A897-804CD859100E}/120520009/Full.zip
    05/21 15:29:09 [2476] SendRequest() failed.
    05/21 15:29:09 [2476] </CHttpConnector::SendRequest()>
    05/21 15:29:09 [2476] </CHttpFileDownload::Do()>
    05/21 15:29:09 [2476] <LUDownloader::GetContentToFile> completed.
    05/21 15:29:09 [2476] <CHttpFileDownload::~CHttpFileDownload()>
    05/21 15:29:09 [2476] </CHttpFileDownload::~CHttpFileDownload()>
    05/21 15:29:09 [2476] <LUThreadProc>LU file download failed due to HTTP error:0
    05/21 15:29:09 [2476] <CExpBackoff::Increment()>
    05/21 15:29:09 [2476] Backoff index incremented
    05/21 15:29:09 [2476] Backoff wait index: 1
    05/21 15:29:09 [2476] </CExpBackoff::Increment()>
    05/21 15:29:09 [2476] <CExpBackoff::Wait()>
    05/21 15:29:09 [2476] CExpBackoff wait time in seconds: 32
     

     

    and also check debug logs from GUP machine

    05/21 15:35:55 [3384] ~~~Sylink log started. (SEP Product Version in registry: 11.0.5002.333, Sylink File Version: 11.0.5002.301)
    05/21 15:35:55 [3384] Stored HostGUID=0268785AC0A85A9600661C783735522C; outlen=16
    05/21 15:35:55 [3384] <RestoreSettings>Stored UserGuid=0; outlen=2
    05/21 15:35:55 [3384] <mfn_DecodeSSN>Sygate-SSN=30805
    05/21 15:35:55 [3384] <mfn_DecodeSSN>Read CSN=30806
    05/21 15:35:55 [3384] <mfn_DecodeSSN>Sygate-SSN=127
    05/21 15:35:55 [3384] <mfn_DecodeSSN>Read CSN=128
    05/21 15:35:55 [3384] Product Type=2,Major Ver=6,Minor Ver=1,Platform ID=18,OSType=33947922
    05/21 15:35:55 [3384] OS=Windows Server 2008 Standard Edition; number=6.1.7600
    05/21 15:35:55 [3384] SyLinkCreateInstance => Instance created: 00000000045C4B00 Registry path: SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK
    05/21 15:35:55 [3384] <GetOnlineNicInfo>:Netport Count=0
    05/21 15:35:55 [3384] <GetOnlineNicInfo>:NicInfo
    05/21 15:35:55 [3384] SyLinkCreateConfig => Created instance: 00000000045A6EE0
    05/21 15:35:55 [3384] UseNewConfig => Created m_hNewConfig: 00000000045A6EE0
    05/21 15:35:55 [3384] Importing ConfigObject: 00000000045A4B00 into: 00000000045A6EE0
    05/21 15:35:55 [3384] Importing ConfigObject: 00000000045A4B00 into: 00000000045E1BF0
    05/21 15:35:55 [3384] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:35:55 [3384] SSA packageType is set as 105
    05/21 15:35:55 [3384] SyLinkDeleteConfig => Deleting instance: 00000000045A4B00
    05/21 15:35:55 [3384] <SetHiStatus>HI status is changed to=1; reason=127; rule=Host Integrity check passed
      Requirement: "Disable Windows Autoplay features on all device types" passed
      Requirement: "Disable Windows Autoplay features on all device types 2" passed
      Requirement: "Disable Guest Account 2" passed
      Requirement: "Disable Registry Tools" passed

    05/21 15:35:55 [3384] SyLinkCreateConfig => Created instance: 000000000586AFF0
    05/21 15:35:55 [3384] SetCurLocationName: Name is set to - Default
    05/21 15:35:55 [3384] SetCurLocationID: ID is set to - E24EDDDDC0A85A9600BBE647E4AB370F
    05/21 15:35:55 [3384] SyLinkCreateConfig => Created instance: 00000000058713D0
    05/21 15:35:55 [3384] Importing ConfigObject: 00000000058713D0 into: 00000000045A6EE0
    05/21 15:35:55 [3384] Importing ConfigObject: 00000000058713D0 into: 00000000045E1BF0
    05/21 15:35:55 [3384] <PostEvent>stopping...ignore event ID=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:35:55 [3384] SyLinkDeleteConfig => Deleting instance: 00000000058713D0
    05/21 15:35:56 [3384] SyLinkDeleteConfig => Deleting instance: 000000000586AFF0
    05/21 15:35:56 [3384] <CSyLink::Start()>
    05/21 15:35:56 [3384] <EncodeHelper::DecryptUrl>
    05/21 15:35:56 [3384] <CSyLink::Start> The last server used was '192.168.90.150'
    05/21 15:35:56 [3384] <CSyLink::ImportConfigFile()>
    05/21 15:35:56 [3384] CUpdateConfig::Dump
    05/21 15:35:56 [3384] </CSyLink::ImportConfigFile()>
    05/21 15:35:56 [3384] <GetDomainHostName>msz_DomainName is taken from szDomainName
    05/21 15:35:56 [3384] <GetDomainHostName>DomainName (Final)=dmart.in
    05/21 15:35:56 [3384] <HWID CSyLink::GetHardwareKey> Get Hardware ID
    05/21 15:35:56 [3384] <HWID CSyLink::GetHardwareKey> Hardware ID assigned: 158661278CD2093425906CC8BAC161C3
    05/21 15:35:56 [3384] <Start>Unable to create Session with 'User Proxy' settings - Proxy Server: Error Code: 87
    05/21 15:35:56 [3384] <Start>Unable to create Session with 'No Proxies' settings - Error Code: 87
    05/21 15:35:56 [2660] <ScheduleNextUpdate>Manually assigned heartbeat=3075 seconds
    05/21 15:35:56 [3264] <HeartbeatThreadProc:>Thread is about to begin..
    05/21 15:35:56 [2660] Successfully created the heartbeat thread
    05/21 15:35:56 [3384] <Start>Started, contact SMS every 3600 seconds
    05/21 15:35:56 [3384] <PostEvent>going to post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED
    05/21 15:35:56 [3384] <PostEvent>done post event=EVENT_SYLINK_CONFIG_SETTING_CHANGED, return=0
    05/21 15:35:56 [3384] </CSyLink::Start()>
    05/21 15:35:57 [3384] <SetClientAuth>Received new User/Domain from SMC..  User: mubeen.khan User Domain: DMART
    05/21 15:35:57 [3384] <SetClientAuth>Getting RDNS Domain Name (user domain in AD setup)..
    05/21 15:35:57 [3384] <GetLoginRdnsDomain>DNS domain=DMART.IN
    05/21 15:35:57 [3384] <SetClientAuth>Setting the User Domain to RDNS Domain ..
    05/21 15:35:57 [3384] <SetClientAuth>Logged in user info set to: DMART.IN/mubeen.khan
    05/21 15:35:57 [3384] <SetClientAuth>Marking User Change Notify to redo registration..
    05/21 15:35:57 [3264] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:35:57 ======
    05/21 15:35:57 [3264] <GetOnlineNicInfo>:Netport Count=1
    05/21 15:35:57 [3264] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.15" Mac="d0-67-e5-1a-76-40" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 15:35:58 [3264] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033-PDCdmart.in158661278CD2093425906CC8BAC161C3
    05/21 15:35:58 [3264] <CalcAgentHashKey>:CHKey=64B7AEB82C65FB31320CAF35C247428C
    05/21 15:35:58 [3264] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033-PDCdmart.in
    05/21 15:35:58 [3264] <CalcAgentHashKey>:CKey=962504C051EA01B39916812469E3D216
    05/21 15:35:58 [3264] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRV-4033-PDCdmart.in158661278CD2093425906CC8BAC161C3
    05/21 15:35:58 [3264] <CalcAgentHashKey>:UCHKey=BB9EFBCF6BE1D7381B90B9E4B0BA8F19
    05/21 15:35:58 [3264] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRV-4033-PDCdmart.in
    05/21 15:35:58 [3264] <CalcAgentHashKey>:UCKey=1BA359B471EFF32735FC23719AE7D4F0
    05/21 15:35:58 [3264] <DoHeartbeat>HardwareID=158661278CD2093425906CC8BAC161C3
    05/21 15:35:58 [3264] <DoHeartbeat>CHKey=64B7AEB82C65FB31320CAF35C247428C
    05/21 15:35:58 [3264] <DoHeartbeat>CKey=962504C051EA01B39916812469E3D216
    05/21 15:35:58 [3264] <DoHeartbeat>UCHKey=BB9EFBCF6BE1D7381B90B9E4B0BA8F19
    05/21 15:35:58 [3264] <DoHeartbeat>UCKey=1BA359B471EFF32735FC23719AE7D4F0
    05/21 15:35:58 [3264] <DoHeartbeat> Set heartbeat event
    05/21 15:35:58 [3264] Use new configuration
    05/21 15:35:58 [3264] <RegHeartbeatProc>====== Reg Heartbeat loop starts at 15:35:58 ======
    05/21 15:35:58 [3264] HEARTBEAT: Check Point 1
    05/21 15:35:58 [3264] HEARTBEAT: Check Point 2
    05/21 15:35:58 [3264] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 15:35:58 [3264] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 15:35:58 [3264] HEARTBEAT: Check Point 3
    05/21 15:35:58 [3264] <RegHeartbeatProc>Setting the session timeout on Profile Session (Registration) to 30000
    05/21 15:35:58 [3264] HEARTBEAT: Check Point 4
    05/21 15:35:58 [3264] <RegHeartbeatProc>===Registration STAGE===
    05/21 15:35:58 [3264] <MakeRegisterData:>logon id (domain/user)=DMART.IN/mubeen.khan
    05/21 15:35:58 [3264] <MakeRegisterData:>XML data: <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="A4F23E3B0A01012A003B6DBDF6CBB652" AgentType="105" UserDomain="DMART.IN" LoginUser="mubeen.khan" ComputerDomain="dmart.in" ComputerName="DMSRV-4033-PDC" PreferredGroup="My%20Company%5cH.O%5cHO%2064BIT%20DESKTOPS" PreferredMode="1" HardwareKey="158661278CD2093425906CC8BAC161C3" SiteDomainName=""/>

    <SSAHostInfo><NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRV-4033-PDC" HostDesc="" />

    <SSAProduct Version="11.0.5002.333" />

    <SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="33947922" ServicePack=""/>

    <Processor ProcessorType="Intel64%20Family%206%20Model%2023%20Stepping%2010" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <BIOS Version="DELL%20%20%20-%2020110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05%2f16%2f2012%2018%3a30%3a54%20281"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330" />

    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.90.10"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.51.15" Mac="d0-67-e5-1a-76-40" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>

    </SSAHostInfo>

    </SSARegData>
    05/21 15:35:58 [3264] <SyLink>[MakeRegisterData] registration Hardware Key=158661278CD2093425906CC8BAC161C3
    05/21 15:35:58 [3264] ************Reg CSN=129
    05/21 15:35:58 [3264] <mfn_GenPostData (for Registration):>Request is: s_origin_length: 1274

    s_session_id: 158661278CD2093425906CC8BAC161C3

    Sygate-SSN: 129

    <?xml version="1.0" encoding="UTF-8" ?><SSARegData NameSpace="rpc"><AgentInfo DomainID="A4F23E3B0A01012A003B6DBDF6CBB652" AgentType="105" UserDomain="DMART.IN" LoginUser="mubeen.khan" ComputerDomain="dmart.in" ComputerName="DMSRV-4033-PDC" PreferredGroup="My%20Company%5cH.O%5cHO%2064BIT%20DESKTOPS" PreferredMode="1" HardwareKey="158661278CD2093425906CC8BAC161C3" SiteDomainName=""/>

    <SSAHostInfo><NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRV-4033-PDC" HostDesc="" />

    <SSAProduct Version="11.0.5002.333" />

    <SSAOS Version="6.1.7600" Desc="Windows%20Server%202008%20Standard%20Edition" Type="33947922" ServicePack=""/>

    <Processor ProcessorType="Intel64%20Family%206%20Model%2023%20Stepping%2010" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <BIOS Version="DELL%20%20%20-%2020110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05%2f16%2f2012%2018%3a30%3a54%20281"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330" />

    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.90.10"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.51.15" Mac="d0-67-e5-1a-76-40" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>

    </SSAHostInfo>

    </SSARegData>
    05/21 15:35:58 [3264] <SendRegistrationRequest:>http://192.168.90.150:80 [encrypted data]
    05/21 15:35:58 [3264] 15:35:58=>Send HTTP REQUEST
    05/21 15:35:58 [3188] SyLinkCreateConfig => Created instance: 00000000039B2720
    05/21 15:35:58 [3188] Importing ConfigObject: 00000000045E1BF0 into: 00000000039B2720
    05/21 15:35:58 [3188] SyLinkDeleteConfig => Deleting instance: 00000000039B2720
    05/21 15:35:59 [3264] 15:35:59=>HTTP REQUEST sent
    05/21 15:35:59 [3264] 15:35:59=>QUERY return code
    05/21 15:35:59 [3264] 15:35:59=>QUERY return code completed
    05/21 15:35:59 [3264] <SendRegistrationRequest:>SMS return=200
    05/21 15:35:59 [3264] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:35:59 [3264] <SendRegistrationRequest:>Content Lenght => 679
    05/21 15:35:59 [3264] HTTP returns status code=200
    05/21 15:35:59 [3264] <SendRegistrationRequest:>RECEIVE STAGE COMPLETED
    05/21 15:35:59 [3264] <SendRegistrationRequest:>COMPLETED, returned 0
    05/21 15:35:59 [3264] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 15:35:59 [3264] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.15,return TRUE
    05/21 15:35:59 [3264] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.15
    05/21 15:35:59 [3264] HEARTBEAT: Check Point 5.1
    05/21 15:35:59 [3264] <ScheduleNextUpdate>Manually assigned heartbeat=3 seconds
    05/21 15:35:59 [3264] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 15:35:59 [3264] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 15:35:59 [3264] HEARTBEAT: Check Point 8
    05/21 15:35:59 [3264] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 15:35:59 [3264] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 15:35:59 [3264] <RegHeartbeatProc>====== Registration Procedure stops at 15:35:59 ======
    05/21 15:35:59 [3264] HEARTBEAT: Check Point 10
    05/21 15:36:00 [3264] HEARTBEAT: Check Point Complete
    05/21 15:36:00 [3264] <RegHeartbeatProc>Done, Heartbeat=3seconds
    05/21 15:36:00 [3264] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:36:00 ======
    05/21 15:36:03 [3264] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:36:03 ======
    05/21 15:36:03 [3264] <GetOnlineNicInfo>:Netport Count=1
    05/21 15:36:03 [3264] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="192.168.51.15" Mac="d0-67-e5-1a-76-40" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs>
    05/21 15:36:03 [3264] <CalcAgentHashKey>:CH=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033-PDCdmart.in158661278CD2093425906CC8BAC161C3
    05/21 15:36:03 [3264] <CalcAgentHashKey>:CHKey=64B7AEB82C65FB31320CAF35C247428C
    05/21 15:36:03 [3264] <CalcAgentHashKey>:C=A4F23E3B0A01012A003B6DBDF6CBB6521DMSRV-4033-PDCdmart.in
    05/21 15:36:03 [3264] <CalcAgentHashKey>:CKey=962504C051EA01B39916812469E3D216
    05/21 15:36:03 [3264] <CalcAgentHashKey>:UCH=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRV-4033-PDCdmart.in158661278CD2093425906CC8BAC161C3
    05/21 15:36:03 [3264] <CalcAgentHashKey>:UCHKey=BB9EFBCF6BE1D7381B90B9E4B0BA8F19
    05/21 15:36:03 [3264] <CalcAgentHashKey>:UC=A4F23E3B0A01012A003B6DBDF6CBB6520mubeen.khanDMART.INDMSRV-4033-PDCdmart.in
    05/21 15:36:03 [3264] <CalcAgentHashKey>:UCKey=1BA359B471EFF32735FC23719AE7D4F0
    05/21 15:36:03 [3264] <DoHeartbeat>HardwareID=158661278CD2093425906CC8BAC161C3
    05/21 15:36:03 [3264] <DoHeartbeat>CHKey=64B7AEB82C65FB31320CAF35C247428C
    05/21 15:36:03 [3264] <DoHeartbeat>CKey=962504C051EA01B39916812469E3D216
    05/21 15:36:03 [3264] <DoHeartbeat>UCHKey=BB9EFBCF6BE1D7381B90B9E4B0BA8F19
    05/21 15:36:03 [3264] <DoHeartbeat>UCKey=1BA359B471EFF32735FC23719AE7D4F0
    05/21 15:36:03 [3264] <DoHeartbeat> Set heartbeat event
    05/21 15:36:03 [3264] Use new configuration
    05/21 15:36:03 [3264] <CSyLink::IndexHeartbeatProc()>
    05/21 15:36:03 [3264] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 00000000045E1BF0
    05/21 15:36:03 [3264] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 15:36:03 ======
    05/21 15:36:04 [3264] HEARTBEAT: Check Point 1
    05/21 15:36:04 [3264] Get First Server!
    05/21 15:36:04 [3264] HEARTBEAT: Check Point 2
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
    05/21 15:36:04 [3264] HEARTBEAT: Check Point 3
    05/21 15:36:04 [3264] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
    05/21 15:36:04 [3264] HEARTBEAT: Check Point 4
    05/21 15:36:04 [3264] <IndexHeartbeatProc>===Get Index STAGE===
    05/21 15:36:04 [3264] ************CSN=30807
    05/21 15:36:04 [3264] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=0268785AC0A85A9600661C783735522C&chk=64B7AEB82C65FB31320CAF35C247428C&ck=962504C051EA01B39916812469E3D216&uchk=BB9EFBCF6BE1D7381B90B9E4B0BA8F19&uck=1BA359B471EFF32735FC23719AE7D4F0&hid=158661278CD2093425906CC8BAC161C3&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&mode=0&hbt=3600&as=30807&cn=[hex]444D5352562D343033332D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E
    05/21 15:36:04 [3264] <GetIndexFileRequest:>http://192.168.90.150:80/secars/secars.dll?h=B97A6A88616A6827A21930BE4991F4BBC8438218368AE0524D170543EE110BC529CD4B4FC9265A1BAACE5BF4683C07D81632399AEB7667BDCA709B913D62D0A07436EFD9DD8AFEBC0DF28B6480D683BDAF300B14B55A0749A9E45FFEB8E1E9D7C7649E66AC05856C7976F1FECBB67310AC6CE851AEB95EB1A4C1C5E4EFED698D8468C50E982F45EBF8914B51C70BA01746FE635347C5EE8AF10307079E2CE595E68B2519998D0D08696C5F57F18B33B1D67248FF5D153972926B5D8681C01E0C40C2DE7942914AC4B40782FEBCBD13C878B9CB74F2DEAAE8C8708BDA6294B83F91103589CFB36C8C51F3567BC520225F246FE148A5E7715BFC3E1F3A0484D841097B6D362A1A46E762769E0E5F517906A3DB6F7B020E9DEB1DFD380B43DF7F3084CD03FCBF44E7E2B2C31FF340E3C7B606EA0A4B1579F8DC6690CF1575F4AE02DF8A8F8F61AB074DF9CF663D87C0637261B2AA237FBCE3DB93FE14D82E374A025A164063AC32782DC3886F9E95B4C7FD1B71EDAC025786BCFA882A27EED8B152F6CF5DA8060FCDB94F6B92E7FF78168E4F4A510E7C1067FD221F629C9917C130
    05/21 15:36:04 [3264] 15:36:4=>Send HTTP REQUEST
    05/21 15:36:04 [3264] 15:36:4=>HTTP REQUEST sent
    05/21 15:36:04 [3264] <GetIndexFileRequest:>SMS return=200
    05/21 15:36:04 [3264] <ParseHTTPStatusCode:>200=>200 OK
    05/21 15:36:04 [3264] <FindHeader>Sem-HashKey:=>64B7AEB82C65FB31320CAF35C247428C
    05/21 15:36:04 [3264] <FindHeader>Sem-LANSensor:=>0
    05/21 15:36:04 [3264] <FindHeader>Sem-Signatue:=>2986ED64741E49036ADBFCA6AD79D705F04F3AD667036AA2A257DBA0B318009F15DFAA3BAC717C26356445549A598D7D7568E28302305B1688F220951561A23308350570EA06B933B0E0333D49D7FAA0C327971FCFB13AB76B01FF10EFE551D21E84FED07493130817032A74BB5C9B536C4E0B107F55714468F0C12746F15B06
    05/21 15:36:04 [3264] <mfn_DoGetIndexFile200>Content Lenght => 1823
    05/21 15:36:04 [3264] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
    05/21 15:36:04 [3264] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="4C6CBA3B0A01012A00E2B74594E6D7F4" ServerID="F80BE22E0A01012A0008E00D65A1F19E" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "21/05/2012 11:49:11">    <Profile Checksum="B9A04AEBBD2DF98DE2E3836411748A22" SerialNumber="26C2-05/16/2012 18:30:54 281" LastModifiedTime="17/05/2012  00:02:31"/>    <ConfigFile Checksum="1D3FD873E202F733057C8E324E1736FA" LastModifiedTime="09/05/2012  12:29:21"/>    <IDSFile Checksum="97687F2BB28E62EBBDF0DFA74AE237ED" LastModifiedTime="10/05/2012  17:55:08"/>    <SylinkFile Checksum="8287289EFACB99A4E60371D2C70E2318" LastModifiedTime="17/05/2012  00:02:31"/>    <LSProfile Checksum="D227B701BCBAF3C309284562B2AAC2AD" SerialNumber ="26C2-05/16/2012 18:30:54 281" LastModifiedTime ="17/05/2012  00:02:31"/>
        <LiveUpdate>
            <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{535CB6A4-441F-4e8a-A897-804CD859100E}" Seq="120520009"/>
              <File Checksum="62DFA85FCEB31321C9FAD040A7569A66" DeltaFlag="1" FullSize="632982" LastModifiedTime="1337580559953" Moniker="{810D5A61-809F-49c2-BD75-177F0647D2BA}" Seq="120520032"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{07B590B3-9282-482f-BBAA-6D515D385869}" Seq="120520009"/>
              <File Checksum="0F99DBF7BED0ADEFF325EC46375FA955" DeltaFlag="1" FullSize="1234420" LastModifiedTime="1337471358390" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="120518001"/>
              <File Checksum="9828034DCE5411AED5B60F902BA1C2F6" DeltaFlag="1" FullSize="3503390" LastModifiedTime="1337471345250" Moniker="{55DE35DC-862A-44c9-8A2B-3EF451665D0A}" Seq="120518001"/>
              <File Checksum="2206E867D7010B9FCDB8DC7BF20F3373" DeltaFlag="1" FullSize="1211940" LastModifiedTime="1337471282125" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="120518001"/>
              <File Checksum="5FEA556B22C0689CC7F2F6589D12C198" DeltaFlag="1" FullSize="1786870" LastModifiedTime="1337387970625" Moniker="{EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758}" Seq="120518002"/>
              <File Checksum="55C9BFCF6BE45BACB972A0750BFDD86C" DeltaFlag="1" FullSize="2290935" LastModifiedTime="1336698481687" Moniker="{D6AEBC07-D833-485f-9723-6C908D37F806}" Seq="120508011"/>
              <File Checksum="A63A9B34531C78B465244FE862FCC565" DeltaFlag="1" FullSize="5013" LastModifiedTime="1336551047734" Moniker="{263395A0-D3D8-4be4-80B5-202C94EF4AA0}" Seq="110607005"/>
              <File Checksum="115C2CA95B2080123FF7F8B1A2667164" DeltaFlag="1" FullSize="26328" LastModifiedTime="1336549659500" Moniker="{B6DC6C8F-46FA-40c7-A806-B669BE1D2D19}" Seq="120411035"/>
              <File Checksum="C1DE1ACA67D1B83A53134971ADAB0946" DeltaFlag="1" FullSize="669829" LastModifiedTime="1262959698871" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
              <File Checksum="CC62A6A3C908DAC0EA75DE68543C0725" DeltaFlag="1" FullSize="650307" LastModifiedTime="1262959706175" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
              <File Checksum="E95512292358D9A67294FDF360D23EF5" DeltaFlag="1" FullSize="88188" LastModifiedTime="1262959905742" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
              <File Checksum="9B759D9C7D5F9790DB24E977AE112838" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1262959908348" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
              <File Checksum="3BA4DF96038CBE26F5E4A04C28F4E9A1" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1262959914310" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
              <File Checksum="0684E4361FC0A9A82AF197E35E59F7DA" DeltaFlag="1" FullSize="6473" LastModifiedTime="1291340590656" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="101201096"/>
              <File Checksum="B9E2E5C166F4DF30C408B2C9BD903E2B" DeltaFlag="1" FullSize="88886" LastModifiedTime="1337387900437" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="120518002"/>
              <File Checksum="263727A82C58D7E3C6261B2455CAEECE" DeltaFlag="1" FullSize="11316042" LastModifiedTime="1337387961937" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="120518002"/>
              <File Checksum="C7E6AC243746819A45B36B2EF8301A68" DeltaFlag="1" FullSize="11316070" LastModifiedTime="1337388438421" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="120518002"/>
              <File Checksum="533D5A4DAB2F94021943097D8576ABF3" DeltaFlag="1" FullSize="88867" LastModifiedTime="1337388456171" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="120518002"/>
              <File Checksum="852C26C26C9F17D1FA1A0A4B6C9B6299" DeltaFlag="1" FullSize="194032278" LastModifiedTime="1337580425796" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="120520009"/>
              <File Checksum="80F55BE6FE8A7FB7FA5A15B34BDFF467" DeltaFlag="1" FullSize="192034890" LastModifiedTime="1337580853656" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="120520009"/>

        </LiveUpdate>
    </GroupIndex>
    05/21 15:36:04 [3264] <mfn_DoGetIndexFile200>Parser Index File!
    05/21 15:36:04 [3264] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
    05/21 15:36:04 [3264] <GetIndexFileRequest:>COMPLETED
    05/21 15:36:04 [3264] <IndexHeartbeatProc>GetIndexFile handling status: 0
    05/21 15:36:04 [3264] <IndexHeartbeatProc>Switch Server flag=0
    05/21 15:36:04 [3264] HEARTBEAT: Check Point 5.1
    05/21 15:36:04 [3264] <IsInClientIPorOnLink> NextHop Not equal 192.168.90.150,return FALSE
    05/21 15:36:04 [3264] <IsInClientIPorOnLink> NextHop is OnLink with 192.168.51.15,return TRUE
    05/21 15:36:04 [3264] <mfn_GetOutIP> Next Hop IP is a local IP or ONLINK:192.168.51.15
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {535CB6A4-441F-4e8a-A897-804CD859100E} Seq:120520009
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {810D5A61-809F-49c2-BD75-177F0647D2BA} Seq:120520032
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {07B590B3-9282-482f-BBAA-6D515D385869} Seq:120520009
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:120518001
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {55DE35DC-862A-44c9-8A2B-3EF451665D0A} Seq:120518001
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq:120518001
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EDBD3BD0-8395-4d4d-BAC9-19DD32EF4758} Seq:120518002
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {D6AEBC07-D833-485f-9723-6C908D37F806} Seq:120508011
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {263395A0-D3D8-4be4-80B5-202C94EF4AA0} Seq:110607005
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {B6DC6C8F-46FA-40c7-A806-B669BE1D2D19} Seq:120411035
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C25CEA47-63E5-447b-8D95-C79CAE13FF79} Seq:80929016
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {EA960B33-2196-4d53-8AC4-D5043A5B6F9B} Seq:80820001
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C13726A9-8DF7-4583-9B39-105B7EBD55E2} Seq:80820001
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:120518002
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq:120518002
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:120518002
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq:120518002
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
    05/21 15:36:04 [3264] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq:120520009
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_SERVER_ONLINE
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
    05/21 15:36:04 [3264] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=3600 seconds
    05/21 15:36:04 [3264] HEARTBEAT: Check Point 6
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: GUP
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
    05/21 15:36:04 [3264] ReasonDescForFailure*** = Host Integrity check passed
    05/21 15:36:04 [3264] ReasonDescForFailure*** = Host Integrity check passed
    05/21 15:36:04 [3264] *** = <SSAInfo NameSpace="rpc" AgentID="0268785AC0A85A9600661C783735522C" ComputerID="37322BF6C0A85A9600661C782CE937C9" HardwareKey="158661278CD2093425906CC8BAC161C3" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">

    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRV-4033-PDC" HostDesc=""/>

    <SSAProduct Version="11.0.5002.333"/>

    <SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="33947922" ServicePack="" Language="9"/>

    <Processor ProcessorType="Intel64 Family 6 Model 23 Stepping 10" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <Disk Letter="C:\" Size="62914555904"/>

    <BIOS Version="DELL   - 20110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330"/>

    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.90.10"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.51.15" Mac="d0-67-e5-1a-76-40" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>

    </SSAHostInfo>

    <RebootRequired Status="0"></RebootRequired>

    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

    </SSAInfo>


    05/21 15:36:04 [3264] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 1337594764
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>Free memory difference: 2478735360, Threshold: 0
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>Free disk space difference: 49521008640, Threshold: 0
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
    05/21 15:36:04 [3264] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>

    <SESAgentOpState AgentID="0268785AC0A85A9600661C783735522C" Timestamp="1337594764617"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><RTVScanRunning>1</RTVScanRunning><PatternFileRevision>9</PatternFileRevision><UsingPattern>3762185</UsingPattern><PatternFileSequence>0</PatternFileSequence><PatternFileDate>2A0414000000</PatternFileDate><TimeOfLastVirus>000000000000</TimeOfLastVirus><TimeOfLastScan>2A0415062304</TimeOfLastScan><WorstInfectionType>9999</WorstInfectionType><OnOff>1</OnOff><SymProtectOnOff>2</SymProtectOnOff><SymSentryInstalled>0</SymSentryInstalled><SavProductVersion>19011542</SavProductVersion><Licensed>0</Licensed><LicenseStatus>0</LicenseStatus><LicenseExpirationTime>000000000000</LicenseExpirationTime><DecAbiVer>1.2.5</DecAbiVer><EraserEngineVer>7274498:131081</EraserEngineVer></avstate>]]></Data></TechID><TechID Name="GUP"><Data><![CDATA[<?xml version='1.0' encoding='UTF-8' ?>
    <GupStatus IsGup="1" NameSpace="rpc" ComputerID="37322BF6C0A85A9600661C782CE937C9"><GupItem Address="192.168.51.15" Port="2967"/></GupStatus>]]></Data></TechID><TechID Name="LUMan"><Data><![CDATA[<lustate><lastUpdateTime>0</lastUpdateTime></lustate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="0268785AC0A85A9600661C783735522C" ComputerID="37322BF6C0A85A9600661C782CE937C9" HardwareKey="158661278CD2093425906CC8BAC161C3" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">

    <AgentHIInfo Status="1" ReasonCode="127" ReasonDescForFailure="Host Integrity check passed"/>

    <SSAHostInfo>

    <NetworkIdentity UserDomain="DMART.IN" LogonUser="mubeen.khan" HostDomain="dmart.in" HostName="DMSRV-4033-PDC" HostDesc=""/>

    <SSAProduct Version="11.0.5002.333"/>

    <SSAOS Version="6.1.7600" Desc="Windows Server 2008 Standard Edition" Type="33947922" ServicePack="" Language="9"/>

    <Processor ProcessorType="Intel64 Family 6 Model 23 Stepping 10" ProcessorClock="2926" ProcessorNum="2"/>

    <Memory Size="4258062336"/>

    <Disk Letter="C:\" Size="62914555904"/>

    <BIOS Version="DELL   - 20110524"/>

    <TpmDevice Id="0"/>

    <SSAProfile Version="12.1.1101" SerialNumber="26C2-05/16/2012 18:30:54 281"/>

    <SSAIDS Version="" SerialNumber=""/>

    <SSAUTC Bias="-330"/>

    <DNSs><DNS Address="192.168.51.15"/><DNS Address="192.168.90.10"/></DNSs>

    <SSANICs><SSANIC Ip="192.168.51.15" Mac="d0-67-e5-1a-76-40" Gateway="192.168.51.100" SubnetMask="255.255.255.0"/></SSANICs><Firewall OnOff="0" Installed="0"/>

    </SSAHostInfo>

    <RebootRequired Status="0"></RebootRequired>

    <InstalledFeatures><Feature Id ="256"/></InstalledFeatures>

    </SSAInfo>

    ]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="0268785AC0A85A9600661C783735522C" ComputerID="37322BF6C0A85A9600661C782CE937C9" HardwareKey="158661278CD2093425906CC8BAC161C3" GroupID="26C29905C0A85A9600C7AAEFD1B36AA4">

    <SSAHostInfo>

    <Memory Free="2478735360"/>

    <Disk Letter="C:\" Free="49521008640"/>

    </SSAHostInfo>

    </SSAInfo>

    ]]></Data></TechID></SESAgentOpState>
    05/21 15:36:04 [3264] ************CSN=30808
    05/21 15:36:04 [3264] <mfn_MakePostUrl:>Request is: action=192&hostid=0268785AC0A85A9600661C783735522C&chk=64B7AEB82C65FB31320CAF35C247428C&ck=962504C051EA01B39916812469E3D216&uchk=BB9EFBCF6BE1D7381B90B9E4B0BA8F19&uck=1BA359B471EFF32735FC23719AE7D4F0&as=30808&cn=[hex]444D5352562D343033332D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>POST the total size=1284
    05/21 15:36:04 [3264] <mfn_PostAgentInfo>Done with return code = 200
    05/21 15:36:04 [3264] <IndexHeartbeatProc>===UPLOAD STAGE===
    05/21 15:36:04 [3264] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
    05/21 15:36:04 [3264] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
    05/21 15:36:04 [3264] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
    05/21 15:36:04 [3264] <PrepareEventLog>initialized technology extension processing ok
    05/21 15:36:04 [3264] <CalcEventLogIndex>Need to send Event Log Type(0) from id 344 to 353
    05/21 15:36:04 [3264] <PrepareEventLog>Allow total logs to send=10
    05/21 15:36:04 [3264] <PrepareEventLog>nSecurityRecordsTotal=0
    05/21 15:36:04 [3264] <PrepareEventLog>nSecurityRecordsToSend=0
    05/21 15:36:04 [3264] <PrepareEventLog>nSystemRecordsTotal=10
    05/21 15:36:04 [3264] <PrepareEventLog>nSystemRecordsToSend=100
    05/21 15:36:04 [3264] <PrepareEventLog>nTrafficRecordsTotal=0
    05/21 15:36:04 [3264] <PrepareEventLog>nTrafficRecordsToSend=0
    05/21 15:36:04 [3264] <PrepareEventLog>nRawRecordsTotal=0
    05/21 15:36:04 [3264] <PrepareEventLog>nRawRecordsToSend=0
    05/21 15:36:04 [3264] <PrepareEventLog>nProcessRecordsTotal=0
    05/21 15:36:04 [3264] <PrepareEventLog>nProcessRecordsToSend=0
    05/21 15:36:04 [3264] <PrepareEventLog>nLANSensorRecordsTotal=0
    05/21 15:36:04 [3264] <PrepareEventLog>nLANSensorRecordsToSend=0
    05/21 15:36:04 [3264] <PrepareEventLog>nTechExtensionRecordsTotal=0
    05/21 15:36:04 [3264] <PrepareEventLog>nTechExtensionRecordsToSend=0
    05/21 15:36:04 [3264] <MakeSystemLog>The size of SYSTEM event logs is 4162.
    05/21 15:36:04 [3264] <SyLink>The size of SYSTEM event logs is 4162.
    05/21 15:36:04 [3264] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
    05/21 15:36:04 [3264] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
    05/21 15:36:04 [3264] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
    05/21 15:36:04 [3264] <MakeProcessLog>Attached total 0 bytes process event logs.
    05/21 15:36:04 [3264] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
    05/21 15:36:04 [3264] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
    05/21 15:36:04 [3264] ************CSN=30809
    05/21 15:36:04 [3264] <mfn_MakePostUrl:>Request is: action=195&hostid=0268785AC0A85A9600661C783735522C&chk=64B7AEB82C65FB31320CAF35C247428C&ck=962504C051EA01B39916812469E3D216&uchk=BB9EFBCF6BE1D7381B90B9E4B0BA8F19&uck=1BA359B471EFF32735FC23719AE7D4F0&groupid=A4F23E3B0A01012A003B6DBDF6CBB652&as=30809&cn=[hex]444D5352562D343033332D504443&lun=[hex]6D756265656E2E6B68616E&udn=[hex]444D4152542E494E
    05/21 15:36:04 [3264] <SendEventLogToServer>http://192.168.90.150:80/secars/secars.dll?h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
    05/21 15:36:05 [3264] <SendEventLogToServer>eventlog-->SMS, size=944
    05/21 15:36:05 [3264] <SendEventLogToServer>uploads the eventlog to server, size=944
    05/21 15:36:05 [3264] <SendEventLogToServer>Query return code = 200
    05/21 15:36:05 [3264] <SendEventLogToServer>EventLog-->SEM DONE!
    05/21 15:36:05 [3264] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
    05/21 15:36:05 [3264] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
    05/21 15:36:05 [3264] <IndexHeartbeatProc>Communication Mode=1(Pull mode)
    05/21 15:36:05 [3264] HEARTBEAT: Check Point 8
    05/21 15:36:05 [3264] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
    05/21 15:36:05 [3264] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
    05/21 15:36:05 [3264] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 15:36:05 ======
    05/21 15:36:05 [3264] <IndexHeartbeatProc>Set Heartbeat Result= 2
    05/21 15:36:05 [3264] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
    05/21 15:36:05 [3264] Use new configuration
    05/21 15:36:05 [3264] HEARTBEAT: Check Point Complete
    05/21 15:36:05 [3264] <IndexHeartbeatProc>Done, Heartbeat=3600seconds
    05/21 15:36:05 [3264] </CSyLink::IndexHeartbeatProc()>
    05/21 15:36:05 [3264] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:36:05 ======
    05/21 15:36:56 [2628] <CExpBackoff::CExpBackoff()>
    05/21 15:36:56 [2628] </CExpBackoff::CExpBackoff()>
    05/21 15:36:57 [2660] <CSyLink::mfn_DownloadNow()>
    05/21 15:36:57 [2660] </CSyLink::mfn_DownloadNow()>
     

     

    please suggest..



  • 22.  RE: GUP not update

    Posted May 24, 2012 03:57 AM

    Hi,

    i found windows firewall rules in GUP machine (windows 2008 server)

    is thier something wrong in this rules pls check and suggest.....

    Name    Group    Profile    Enabled    Action    Override    Program    Local Address    Remote Address    Protocol    Local Port    Remote Port    Allowed Users    Allowed Computers    
    SMC Service        Public    Yes    Allow    No    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe    Any    Any    TCP    Any    Any    Any    Any    
    SMC Service        Public    Yes    Allow    No    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe    Any    Any    UDP    Any    Any    Any    Any    
    SNAC64 Service        Public    Yes    Allow    No    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE    Any    Any    TCP    Any    Any    Any    Any    
    SNAC64 Service        Public    Yes    Allow    No    C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE    Any    Any    UDP    Any    Any    Any    Any    
    Symantec Email        Public    Yes    Allow    No    C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe    Any    Any    TCP    Any    Any    Any    Any    
    Symantec Email        Public    Yes    Allow    No    C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe    Any    Any    UDP    Any    Any    Any    Any    
    Active Directory Domain Controller -  Echo Request (ICMPv4-In)    Active Directory Domain Services    All    Yes    Allow    No    Any    Any    Any    ICMPv4    Any    Any    Any    Any    
    Active Directory Domain Controller -  Echo Request (ICMPv6-In)    Active Directory Domain Services    All    Yes    Allow    No    Any    Any    Any    ICMPv6    Any    Any    Any    Any    
    Active Directory Domain Controller - LDAP (TCP-In)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    389    Any    Any    Any    
    Active Directory Domain Controller - LDAP (UDP-In)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    UDP    389    Any    Any    Any    
    Active Directory Domain Controller - LDAP for Global Catalog (TCP-In)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    3268    Any    Any    Any    
    Active Directory Domain Controller - NetBIOS name resolution (UDP-In)    Active Directory Domain Services    All    Yes    Allow    No    System    Any    Any    UDP    138    Any    Any    Any    
    Active Directory Domain Controller - SAM/LSA (NP-TCP-In)    Active Directory Domain Services    All    Yes    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    Active Directory Domain Controller - SAM/LSA (NP-UDP-In)    Active Directory Domain Services    All    Yes    Allow    No    System    Any    Any    UDP    445    Any    Any    Any    
    Active Directory Domain Controller - Secure LDAP (TCP-In)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    636    Any    Any    Any    
    Active Directory Domain Controller - Secure LDAP for Global Catalog (TCP-In)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    3269    Any    Any    Any    
    Active Directory Domain Controller - W32Time (NTP-UDP-In)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\svchost.exe    Any    Any    UDP    123    Any    Any    Any    
    Active Directory Domain Controller (RPC)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Active Directory Domain Controller (RPC-EPMAP)    Active Directory Domain Services    All    Yes    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Active Directory Web Services (TCP-In)    Active Directory Web Services    All    Yes    Allow    No    %systemroot%\ADWS\Microsoft.ActiveDirectory.WebServices.exe    Any    Any    TCP    9389    Any    Any    Any    
    BranchCache Content Retrieval (HTTP-In)    BranchCache - Content Retrieval (Uses HTTP)    All    No    Allow    No    SYSTEM    Any    Any    TCP    80    Any    Any    Any    
    BranchCache Hosted Cache Server (HTTP-In)    BranchCache - Hosted Cache Server (Uses HTTPS)    All    No    Allow    No    SYSTEM    Any    Any    TCP    443    Any    Any    Any    
    BranchCache Peer Discovery (WSD-In)    BranchCache - Peer Discovery (Uses WSD)    All    No    Allow    No    %systemroot%\system32\svchost.exe    Any    Local subnet    UDP    3702    Any    Any    Any    
    COM+ Network Access (DCOM-In)    COM+ Network Access    All    No    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    135    Any    Any    Any    
    COM+ Remote Administration (DCOM-In)    COM+ Remote Administration    All    No    Allow    No    %systemroot%\system32\dllhost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Core Networking - Destination Unreachable (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    Core Networking - Destination Unreachable Fragmentation Needed (ICMPv4-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv4    Any    Any    Any    Any    
    Core Networking - Dynamic Host Configuration Protocol (DHCP-In)    Core Networking    All    Yes    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    UDP    68    67    Any    Any    
    Core Networking - Dynamic Host Configuration Protocol for IPv6(DHCPV6-In)    Core Networking    All    Yes    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    UDP    546    547    Any    Any    
    Core Networking - Internet Group Management Protocol (IGMP-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    IGMP    Any    Any    Any    Any    
    Core Networking - IPHTTPS (TCP-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    TCP    IPHTTPS    Any    Any    Any    
    Core Networking - IPv6 (IPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    IPv6    Any    Any    Any    Any    
    Core Networking - Multicast Listener Done (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Local subnet    ICMPv6    Any    Any    Any    Any    
    Core Networking - Multicast Listener Query (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Local subnet    ICMPv6    Any    Any    Any    Any    
    Core Networking - Multicast Listener Report (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Local subnet    ICMPv6    Any    Any    Any    Any    
    Core Networking - Multicast Listener Report v2 (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Local subnet    ICMPv6    Any    Any    Any    Any    
    Core Networking - Neighbor Discovery Advertisement (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    Core Networking - Neighbor Discovery Solicitation (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    Core Networking - Packet Too Big (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    Core Networking - Parameter Problem (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    Core Networking - Router Advertisement (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    fe80::/64    ICMPv6    Any    Any    Any    Any    
    Core Networking - Router Solicitation (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    Core Networking - Teredo (UDP-In)    Core Networking    All    Yes    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    UDP    Edge Traversal    Any    Any    Any    
    Core Networking - Time Exceeded (ICMPv6-In)    Core Networking    All    Yes    Allow    No    System    Any    Any    ICMPv6    Any    Any    Any    Any    
    DFS Management (DCOM-In)    DFS Management    All    Yes    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    135    Any    Any    Any    
    DFS Management (SMB-In)    DFS Management    All    Yes    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    DFS Management (TCP-In)    DFS Management    All    Yes    Allow    No    %systemroot%\system32\dfsfrsHost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    DFS Management (WMI-In)    DFS Management    All    Yes    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    DFS Replication (RPC-EPMAP)    DFS Replication    All    Yes    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    DFS Replication (RPC-In)    DFS Replication    All    Yes    Allow    No    %SystemRoot%\system32\dfsrs.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Distributed Transaction Coordinator (RPC)    Distributed Transaction Coordinator    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Distributed Transaction Coordinator (RPC-EPMAP)    Distributed Transaction Coordinator    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Distributed Transaction Coordinator (TCP-In)    Distributed Transaction Coordinator    All    No    Allow    No    %SystemRoot%\system32\msdtc.exe    Any    Any    TCP    Any    Any    Any    Any    
    DNS (TCP, Incoming)    DNS Service    All    Yes    Allow    No    %systemroot%\System32\dns.exe    Any    Any    TCP    53    Any    Any    Any    
    DNS (UDP, Incoming)    DNS Service    All    Yes    Allow    No    %systemroot%\System32\dns.exe    Any    Any    UDP    53    Any    Any    Any    
    RPC (TCP, Incoming)    DNS Service    All    Yes    Allow    No    %systemroot%\System32\dns.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    RPC Endpoint Mapper (TCP, Incoming)    DNS Service    All    Yes    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    File and Printer Sharing (Echo Request - ICMPv4-In)    File and Printer Sharing    All    Yes    Allow    No    Any    Any    Any    ICMPv4    Any    Any    Any    Any    
    File and Printer Sharing (Echo Request - ICMPv6-In)    File and Printer Sharing    All    Yes    Allow    No    Any    Any    Any    ICMPv6    Any    Any    Any    Any    
    File and Printer Sharing (LLMNR-UDP-In)    File and Printer Sharing    All    Yes    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Local subnet    UDP    5355    Any    Any    Any    
    File and Printer Sharing (NB-Datagram-In)    File and Printer Sharing    All    Yes    Allow    No    System    Any    Any    UDP    138    Any    Any    Any    
    File and Printer Sharing (NB-Name-In)    File and Printer Sharing    All    Yes    Allow    No    System    Any    Any    UDP    137    Any    Any    Any    
    File and Printer Sharing (NB-Session-In)    File and Printer Sharing    All    Yes    Allow    No    System    Any    Any    TCP    139    Any    Any    Any    
    File and Printer Sharing (SMB-In)    File and Printer Sharing    All    Yes    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    File and Printer Sharing (Spooler Service - RPC)    File and Printer Sharing    All    Yes    Allow    No    %SystemRoot%\system32\spoolsv.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    File and Printer Sharing (Spooler Service - RPC-EPMAP)    File and Printer Sharing    All    Yes    Allow    No    Any    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    File Replication (RPC)    File Replication    All    Yes    Allow    No    %SystemRoot%\system32\NTFRS.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    File Replication (RPC-EPMAP)    File Replication    All    Yes    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    iSCSI Service (TCP-In)    iSCSI Service    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    Any    Any    Any    Any    
    Kerberos Key Distribution Center - PCR (TCP-In)    Kerberos Key Distribution Center    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    464    Any    Any    Any    
    Kerberos Key Distribution Center - PCR (UDP-In)    Kerberos Key Distribution Center    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    UDP    464    Any    Any    Any    
    Kerberos Key Distribution Center (TCP-In)    Kerberos Key Distribution Center    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    TCP    88    Any    Any    Any    
    Kerberos Key Distribution Center (UDP-In)    Kerberos Key Distribution Center    All    Yes    Allow    No    %systemroot%\System32\lsass.exe    Any    Any    UDP    88    Any    Any    Any    
    Key Management Service (TCP-In)    Key Management Service    All    No    Allow    No    %SystemRoot%\system32\sppsvc.exe    Any    Any    TCP    1688    Any    Any    Any    
    Netlogon Service (NP-In)    Netlogon Service    All    No    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    Network Discovery (LLMNR-UDP-In)    Network Discovery    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Local subnet    UDP    5355    Any    Any    Any    
    Network Discovery (NB-Datagram-In)    Network Discovery    All    No    Allow    No    System    Any    Any    UDP    138    Any    Any    Any    
    Network Discovery (NB-Name-In)    Network Discovery    All    No    Allow    No    System    Any    Any    UDP    137    Any    Any    Any    
    Network Discovery (Pub-WSD-In)    Network Discovery    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Local subnet    UDP    3702    Any    Any    Any    
    Network Discovery (SSDP-In)    Network Discovery    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Local subnet    UDP    1900    Any    Any    Any    
    Network Discovery (UPnP-In)    Network Discovery    All    No    Allow    No    System    Any    Any    TCP    2869    Any    Any    Any    
    Network Discovery (WSD Events-In)    Network Discovery    All    No    Allow    No    System    Any    Any    TCP    5357    Any    Any    Any    
    Network Discovery (WSD EventsSecure-In)    Network Discovery    All    No    Allow    No    System    Any    Any    TCP    5358    Any    Any    Any    
    Network Discovery (WSD-In)    Network Discovery    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Local subnet    UDP    3702    Any    Any    Any    
    Performance Logs and Alerts (DCOM-In)    Performance Logs and Alerts    Private, Public    No    Allow    No    %systemroot%\system32\svchost.exe    Any    Local subnet    TCP    135    Any    Any    Any    
    Performance Logs and Alerts (DCOM-In)    Performance Logs and Alerts    Domain    No    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    135    Any    Any    Any    
    Performance Logs and Alerts (TCP-In)    Performance Logs and Alerts    Domain    No    Allow    No    %systemroot%\system32\plasrv.exe    Any    Any    TCP    Any    Any    Any    Any    
    Performance Logs and Alerts (TCP-In)    Performance Logs and Alerts    Private, Public    No    Allow    No    %systemroot%\system32\plasrv.exe    Any    Local subnet    TCP    Any    Any    Any    Any    
    Remote Administration (NP-In)    Remote Administration    All    No    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    Remote Administration (RPC)    Remote Administration    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Remote Administration (RPC-EPMAP)    Remote Administration    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Remote Desktop (TCP-In)    Remote Desktop    All    Yes    Allow    No    System    Any    Any    TCP    3389    Any    Any    Any    
    Remote Event Log Management (NP-In)    Remote Event Log Management    All    No    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    Remote Event Log Management (RPC)    Remote Event Log Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Remote Event Log Management (RPC-EPMAP)    Remote Event Log Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Remote Scheduled Tasks Management (RPC)    Remote Scheduled Tasks Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Remote Scheduled Tasks Management (RPC-EPMAP)    Remote Scheduled Tasks Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Remote Service Management (NP-In)    Remote Service Management    All    No    Allow    No    System    Any    Any    TCP    445    Any    Any    Any    
    Remote Service Management (RPC)    Remote Service Management    All    No    Allow    No    %SystemRoot%\system32\services.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Remote Service Management (RPC-EPMAP)    Remote Service Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Remote Volume Management - Virtual Disk Service (RPC)    Remote Volume Management    All    No    Allow    No    %SystemRoot%\system32\vds.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Remote Volume Management - Virtual Disk Service Loader (RPC)    Remote Volume Management    All    No    Allow    No    %SystemRoot%\system32\vdsldr.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Remote Volume Management (RPC-EPMAP)    Remote Volume Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Routing and Remote Access (GRE-In)    Routing and Remote Access    All    No    Allow    No    System    Any    Any    GRE    Any    Any    Any    Any    
    Routing and Remote Access (L2TP-In)    Routing and Remote Access    All    No    Allow    No    System    Any    Any    UDP    1701    Any    Any    Any    
    Routing and Remote Access (PPTP-In)    Routing and Remote Access    All    No    Allow    No    System    Any    Any    TCP    1723    Any    Any    Any    
    Secure Socket Tunneling Protocol (SSTP-In)    Secure Socket Tunneling Protocol    All    No    Allow    No    System    Any    Any    TCP    443    Any    Any    Any    
    SNMP Trap Service (UDP In)    SNMP Trap    Private, Public    No    Allow    No    %SystemRoot%\system32\snmptrap.exe    Any    Local subnet    UDP    162    Any    Any    Any    
    SNMP Trap Service (UDP In)    SNMP Trap    Domain    No    Allow    No    %SystemRoot%\system32\snmptrap.exe    Any    Any    UDP    162    Any    Any    Any    
    Windows Firewall Remote Management (RPC)    Windows Firewall Remote Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    Windows Firewall Remote Management (RPC-EPMAP)    Windows Firewall Remote Management    All    No    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    Windows Management Instrumentation (ASync-In)    Windows Management Instrumentation (WMI)    All    Yes    Allow    No    %systemroot%\system32\wbem\unsecapp.exe    Any    Any    TCP    Any    Any    Any    Any    
    Windows Management Instrumentation (DCOM-In)    Windows Management Instrumentation (WMI)    All    Yes    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    135    Any    Any    Any    
    Windows Management Instrumentation (WMI-In)    Windows Management Instrumentation (WMI)    All    Yes    Allow    No    %SystemRoot%\system32\svchost.exe    Any    Any    TCP    Any    Any    Any    Any    
    Windows Remote Management - Compatibility Mode (HTTP-In)    Windows Remote Management    All    No    Allow    No    System    Any    Any    TCP    80    Any    Any    Any    
    Windows Remote Management (HTTP-In)    Windows Remote Management    All    No    Allow    No    System    Any    Any    TCP    5985    Any    Any    Any    
    SCW remote access firewall rule - Scshost - Dynamic RPC    Windows Security Configuration Wizard    All    No    Allow    No    %systemroot%\system32\scshost.exe    Any    Any    TCP    RPC Dynamic Ports    Any    Any    Any    
    SCW remote access firewall rule - Scshost - End Point RPC Mapper    Windows Security Configuration Wizard    All    No    Allow    No    %systemroot%\system32\scshost.exe    Any    Any    TCP    RPC Endpoint Mapper    Any    Any    Any    
    SCW remote access firewall rule - Svchost - TCP    Windows Security Configuration Wizard    All    No    Allow    No    %systemroot%\system32\svchost.exe    Any    Any    TCP    135    Any    Any    Any    
                                                                                                                                                         

    thnks