Endpoint Protection

Hello.I received an error SescLU event id 13 in my gup server and clients not receiving updates from him.After that i uninstall the symantec endpoint protection from server and reinstall it again.My clients continue not to get their updates from gup but from sepm.Any suggestion?
Thank you

Title: 'Troubleshooting Content Delivery to the Symantec Endpoint Protection client'
Document ID: 2008092511045348
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008092511045348?Open&seg=ent

How can i see if my clients are downloading from GUP.I can see that they are start using but why they cannot get their updates from him.Server has the latest updates

Once a computer receives the policy nominating it as a GUP from the SEP11 servers, the folder C:\Program Files\Symantec\Symantec Endpoint Protection\SharedUpdates will be created. When the GUP connects to the SEPM server for updates, it will store the updates it downloads in the shared updates folder. The file GUP.DAT will also reside in the folder
ref: SEP11 Frequently Asked Questions File  

Yes i can see all that.I can see the updates,i can see the gup.dat.But  that group cannot be updated from The gup i have set.I tried another gup but same.....

Can you pate sylink monitor logs here.. 

I do not know how to use it...Any help?

Sylink Monitor 

SylinkWatcher and SylinkMonitor - tools for real-time debugging of SPA 5.x and SEP 11.x 

11/04 15:13:57 [1492] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02451A40
11/04 15:13:57 [1492] <LUThreadProc>Starting LU download.
11/04 15:13:57 [1492] <LUThreadProc>Got a valid context from GetCurrentServerEx
11/04 15:13:57 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:13:57 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zip
11/04 15:13:57 [1492] <GetLUFileRequest:>IIS URL: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zip
11/04 15:13:57 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zip
11/04 15:13:57 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp
11/04 15:13:57 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:13:57 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433}Server File Path:/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp
11/04 15:14:10 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:14:10 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:14:16 [1492] <mfn_DoGetLUFile200>Content Length => 60480689
11/04 15:14:16 [1492] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}91103022
11/04 15:14:16 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp
11/04 15:14:16 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:91103022 Full version:1 Delta Base Seq:
11/04 15:14:16 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:15:09 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:15:09 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq: 91103022 File size: 60480689
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:15:09 [1492] File download returns status code=0
11/04 15:15:09 [1492] Removing LU download from queue {C60DC234-65F9-4674-94AE-62158EFCA433}
11/04 15:15:09 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:15:09 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:15:09 [1492] LU file download succeceded with HTTP status:200
11/04 15:15:09 [1492] <CExpBackoff::Decrement()>
11/04 15:15:09 [1492] Backoff wait index: 5
11/04 15:15:09 [1492] </CExpBackoff::Decrement()>
11/04 15:15:09 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:15:09 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zip
11/04 15:15:09 [1492] <GetLUFileRequest:>IIS URL: /content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zip
11/04 15:15:09 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zip
11/04 15:15:09 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp
11/04 15:15:09 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3}Server File Path:/content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>Content Length => 1253637
11/04 15:15:09 [1492] <UpdateLUFileList:>Updating existing Download File List with : {D3769926-05B7-4ad1-9DCF-23051EEE78E3}91023001
11/04 15:15:09 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Target Seq:91023001 Full version:1 Delta Base Seq:
11/04 15:15:09 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:15:13 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:15:13 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:15:14 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:15:14 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq: 91023001 File size: 1253637
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:15:14 [1492] File download returns status code=0
11/04 15:15:14 [1492] Removing LU download from queue {D3769926-05B7-4ad1-9DCF-23051EEE78E3}
11/04 15:15:14 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:15:14 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:15:14 [1492] LU file download succeceded with HTTP status:200
11/04 15:15:14 [1492] <CExpBackoff::Decrement()>
11/04 15:15:14 [1492] Backoff wait index: 5
11/04 15:15:14 [1492] </CExpBackoff::Decrement()>
11/04 15:15:14 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:15:14 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.dax
11/04 15:15:14 [1492] <GetLUFileRequest:>IIS URL: /content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.dax
11/04 15:15:14 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.dax
11/04 15:15:14 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp
11/04 15:15:14 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139}Server File Path:/content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.daxLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>Content Length => 4063
11/04 15:15:14 [1492] <UpdateLUFileList:>Updating existing Download File List with : {4F889C4A-784D-40de-8539-6A29BAA43139}91030032
11/04 15:15:14 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139} Target Seq:91030032 Full version:0 Delta Base Seq:90603054
11/04 15:15:14 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:15:43 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:15:43 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139} Seq: 91030032 File size: 4063
11/04 15:15:43 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:15:43 [1492] File download returns status code=0
11/04 15:15:43 [1492] Removing LU download from queue {4F889C4A-784D-40de-8539-6A29BAA43139}
11/04 15:15:43 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:15:43 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:15:43 [1492] LU file download succeceded with HTTP status:200
11/04 15:15:43 [1492] <CExpBackoff::Decrement()>
11/04 15:15:43 [1492] Backoff wait index: 5
11/04 15:15:43 [1492] </CExpBackoff::Decrement()>
11/04 15:15:43 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:15:43 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zip
11/04 15:15:43 [1492] <GetLUFileRequest:>IIS URL: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zip
11/04 15:15:43 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zip
11/04 15:15:43 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp
11/04 15:15:43 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:15:43 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF}Server File Path:/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp
11/04 15:15:44 [1492] <mfn_DoGetLUFile200>Content Length => 539811
11/04 15:15:44 [1492] <UpdateLUFileList:>Updating existing Download File List with : {812CD25E-1049-4086-9DDD-A4FAE649FBDF}91103016
11/04 15:15:44 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp
11/04 15:15:44 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Target Seq:91103016 Full version:1 Delta Base Seq:
11/04 15:15:44 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:16:17 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:16:17 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:17:05 [1488] AH: (InetWaiting) time out. Timeout period: 320000
11/04 15:17:06 [1488] Throw Internet Exception, Error Code=4294967287;Internet Session Timeout
11/04 15:17:06 [1488] <MaintainPushConnection:>COMPLETED
11/04 15:17:06 [1488] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
11/04 15:17:06 [1488] HEARTBEAT: Check Point 8
11/04 15:17:06 [1488] CAsyncHttpConnection Close.. waiting for Pending request to be completed
11/04 15:17:07 [1488] CAsyncHttpConnection Close.. waiting for Pending request to be completed
11/04 15:17:08 [1488] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/04 15:17:20 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:17:20 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:17:27 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:17:27 [1488] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/04 15:17:27 [1488] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 15:17:27 ======
11/04 15:17:27 [1488] <IndexHeartbeatProc>Set Heartbeat Result= 2
11/04 15:17:27 [1488] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 1, 'Using Location Config' = 0
11/04 15:17:27 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq: 91103016 File size: 539811
11/04 15:17:27 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:17:27 [1492] File download returns status code=0
11/04 15:17:27 [1492] Removing LU download from queue {812CD25E-1049-4086-9DDD-A4FAE649FBDF}
11/04 15:17:27 [1488] Use new configuration
11/04 15:17:27 [1488] HEARTBEAT: Check Point Complete
11/04 15:17:27 [1488] <IndexHeartbeatProc>Done, Heartbeat=5seconds
11/04 15:17:27 [1488] </CSyLink::IndexHeartbeatProc()>
11/04 15:17:27 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:17:27 [1488] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:17:27 ======
11/04 15:17:27 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:17:27 [1492] LU file download succeceded with HTTP status:200
11/04 15:17:27 [1492] <CExpBackoff::Decrement()>
11/04 15:17:27 [1492] Backoff wait index: 5
11/04 15:17:27 [1492] </CExpBackoff::Decrement()>
11/04 15:17:27 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:17:27 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zip
11/04 15:17:27 [1492] <GetLUFileRequest:>IIS URL: /content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zip
11/04 15:17:27 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zip
11/04 15:17:27 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp
11/04 15:17:28 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:17:28 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522}Server File Path:/content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp
11/04 15:17:28 [1492] <mfn_DoGetLUFile200>Content Length => 76782
11/04 15:17:28 [1492] <UpdateLUFileList:>Updating existing Download File List with : {E5A3EBEE-D580-421e-86DF-54C0B3739522}91103016
11/04 15:17:28 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp
11/04 15:17:28 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Target Seq:91103016 Full version:1 Delta Base Seq:
11/04 15:17:28 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:17:32 [1488] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:17:32 ======
11/04 15:17:33 [1488] <GetOnlineNicInfo>:Netport Count=1
11/04 15:17:33 [1488] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.150.96.167" Mac="00-12-3f-bf-14-33" Gateway="10.150.96.251" SubnetMask="0.0.0.0"/></SSANICs>
11/04 15:17:33 [1488] <CalcAgentHashKey>:CH=64C633930A64767F004D350075E95D2E1STN-4564MHG.GR1B583AE7AE149930232BBCB738264F6C
11/04 15:17:33 [1488] <CalcAgentHashKey>:CHKey=25F24456DE327AD6477D32521E1CBD1D
11/04 15:17:33 [1488] <CalcAgentHashKey>:C=64C633930A64767F004D350075E95D2E1STN-4564MHG.GR
11/04 15:17:33 [1488] <CalcAgentHashKey>:CKey=C66E650975BE62ACBE38FB164B0AE2D9
11/04 15:17:33 [1488] <CalcAgentHashKey>:UCH=64C633930A64767F004D350075E95D2E0APOKOTOSPMHG.GRSTN-4564MHG.GR1B583AE7AE149930232BBCB738264F6C
11/04 15:17:33 [1488] <CalcAgentHashKey>:UCHKey=1584AC433B95FE71AA3CC1C5754CA841
11/04 15:17:33 [1488] <CalcAgentHashKey>:UC=64C633930A64767F004D350075E95D2E0APOKOTOSPMHG.GRSTN-4564MHG.GR
11/04 15:17:33 [1488] <CalcAgentHashKey>:UCKey=18842C080ED7BA61FF098A3728C00662
11/04 15:17:34 [1488] <DoHeartbeat>HardwareID=1B583AE7AE149930232BBCB738264F6C
11/04 15:17:34 [1488] <DoHeartbeat>CHKey=25F24456DE327AD6477D32521E1CBD1D
11/04 15:17:34 [1488] <DoHeartbeat>CKey=C66E650975BE62ACBE38FB164B0AE2D9
11/04 15:17:34 [1488] <DoHeartbeat>UCHKey=1584AC433B95FE71AA3CC1C5754CA841
11/04 15:17:34 [1488] <DoHeartbeat>UCKey=18842C080ED7BA61FF098A3728C00662
11/04 15:17:34 [1488] <DoHeartbeat> Set heartbeat event
11/04 15:17:34 [1488] Use new configuration
11/04 15:17:34 [1488] <CSyLink::IndexHeartbeatProc()>
11/04 15:17:34 [1488] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02451A40
11/04 15:17:34 [1488] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 15:17:34 ======
11/04 15:17:34 [1488] HEARTBEAT: Check Point 1
11/04 15:17:34 [1488] Get First Server!
11/04 15:17:34 [1488] HEARTBEAT: Check Point 2
11/04 15:17:34 [1488] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/04 15:18:22 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:18:23 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:18:36 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:18:36 [1488] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/04 15:18:36 [1488] HEARTBEAT: Check Point 3
11/04 15:18:36 [1488] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
11/04 15:18:36 [1488] HEARTBEAT: Check Point 4
11/04 15:18:36 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq: 91103016 File size: 76782
11/04 15:18:36 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:18:36 [1492] File download returns status code=0
11/04 15:18:36 [1492] Removing LU download from queue {E5A3EBEE-D580-421e-86DF-54C0B3739522}
11/04 15:18:36 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:18:36 [1488] <IndexHeartbeatProc>===Get Index STAGE===
11/04 15:18:36 [1488] ************CSN=75768
11/04 15:18:36 [1488] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&hid=1B583AE7AE149930232BBCB738264F6C&groupid=64C633930A64767F004D350075E95D2E&mode=0&hbt=300&as=75768&cn=[hex]53544E2D34353634&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/04 15:18:36 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:18:36 [1492] LU file download succeceded with HTTP status:200
11/04 15:18:36 [1492] <CExpBackoff::Decrement()>
11/04 15:18:36 [1488] <GetIndexFileRequest:>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:18:36 [1492] Backoff wait index: 5
11/04 15:18:36 [1492] </CExpBackoff::Decrement()>
11/04 15:18:37 [1488] <GetIndexFileRequest:>SMS return=200
11/04 15:18:37 [1488] <ParseHTTPStatusCode:>200=>200 OK
11/04 15:18:37 [1488] <FindHeader>Sem-HashKey:=>25F24456DE327AD6477D32521E1CBD1D
11/04 15:18:37 [1488] <FindHeader>Sem-LANSensor:=>0
11/04 15:18:37 [1488] <FindHeader>Sem-Signatue:=>6321797C118F171258BBD8862D74D589EB9941C9EE7F03EC2ECE394241C0C12740EFDE276F0BA14A12FE4363D79A81F6011B3A12A3B059A4B99F912AA3472A7C926C7A3C328DEB4D90AEBDCDFE088FCFB18D988793E5AA218A889C9F6DEB9E8F3DE490AAA6FCACD38277ACC6E44FC1DA96980D8B77D9B6ED6846CC53755A883C
11/04 15:18:37 [1488] <mfn_DoGetIndexFile200>Content Lenght => 1370
11/04 15:18:37 [1488] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
11/04 15:18:37 [1488] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D4E82BAF0A64767F0097304B7AEB5A83" ServerID="01A9BC730A64767F01F00B6AD4CE7963" GroupID="EC69EC780A64767F01AAB84EB04906CA" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "04/11/2009 14:21:54"> <Profile Checksum="1424AE3835834A80C7B74EF4112FE545" SerialNumber="EC69-11/04/2009 13:12:53 228" LastModifiedTime="04/11/2009  14:21:54"/> <ConfigFile Checksum="CE9F9B8576EE68E0F4F00323843CFE98" LastModifiedTime="04/11/2009  14:21:53"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="04/11/2009  14:21:54"/> <SylinkFile Checksum="4EA56C7C6206E2D821C9EDACF06A2B76" LastModifiedTime="04/11/2009  14:21:54"/> <LSProfile Checksum="D697C59CFDFC7032EB576D472F74E131" SerialNumber ="EC69-11/04/2009 13:12:53 228" LastModifiedTime ="04/11/2009  14:21:54"/>
 <LiveUpdate>
  <File Checksum="8E3D563688D7F8ED0C8D53B24380B3B8" DeltaFlag="1" FullSize="60480689" LastModifiedTime="1257305697297" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="91103022"/>
   <File Checksum="47E7C25FD9B88BC3E1D1505AC5784A8A" DeltaFlag="1" FullSize="60671877" LastModifiedTime="1257305543985" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="91103022"/>
   <File Checksum="F1F97A7EBEB0CE4B8DAB27936B1B8755" DeltaFlag="1" FullSize="1269871" LastModifiedTime="1256335147920" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="91023001"/>
   <File Checksum="174DC6D6D8E6A2BF73E647694DC6C79E" DeltaFlag="1" FullSize="1253637" LastModifiedTime="1256335105982" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="91023001"/>
   <File Checksum="D851C80CA6B39C046CE5F6DB6EC2377A" DeltaFlag="1" FullSize="650307" LastModifiedTime="1208775294536" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="C45F954B7A7590C1AC26CC45DB3EE0C9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222725798073" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="3CBBE65E8302713E3346101001413A97" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223501951390" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="DAF1925B9FBB2A042F776EFC917309C9" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223501964577" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="8FE4B509581ED9F5A2E19DCD8F4F938E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223501979155" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
   <File Checksum="2755ECC72B5690380E75DA62DC4FD562" DeltaFlag="1" FullSize="6477" LastModifiedTime="1256940166549" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91030032"/>
   <File Checksum="4FC0DBE2DBB55C70B86BE997FF2A4E3B" DeltaFlag="1" FullSize="76802" LastModifiedTime="1257275185059" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="91103016"/>
   <File Checksum="567B62FDFC6E14EAA954DF49FDFB5A9E" DeltaFlag="1" FullSize="539811" LastModifiedTime="1257275197077" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="91103016"/>
   <File Checksum="1E1315B9A6636EB8042EA8AD7D41C84E" DeltaFlag="1" FullSize="539838" LastModifiedTime="1257275216331" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="91103016"/>
   <File Checksum="26C96FDE936430CB236C2F3D01B73D11" DeltaFlag="1" FullSize="76782" LastModifiedTime="1257275232100" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="91103016"/>
 </LiveUpdate>
</GroupIndex>
11/04 15:18:37 [1488] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:18:37 [1488] <GetIndexFileRequest:>COMPLETED
11/04 15:18:37 [1488] <IndexHeartbeatProc>GetIndexFile handling status: 0
11/04 15:18:37 [1488] <IndexHeartbeatProc>Switch Server flag=0
11/04 15:18:37 [1488] HEARTBEAT: Check Point 5.1
11/04 15:18:37 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:38 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:91103022
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:38 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:91023001
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:39 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:39 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:91103016
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:39 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:91103016
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_SERVER_ONLINE
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
11/04 15:18:39 [1488] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
11/04 15:18:39 [1488] HEARTBEAT: Check Point 6
11/04 15:18:39 [1488] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
11/04 15:18:43 [1488] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
11/04 15:18:43 [1488] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
11/04 15:18:43 [1488] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
11/04 15:18:43 [1488] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
11/04 15:18:43 [1488] ReasonDescForFailure*** = Host Integrity check is disabled.
11/04 15:18:43 [1488] ReasonDescForFailure*** = Host Integrity check is disabled.
11/04 15:18:43 [1488] *** = <SSAInfo NameSpace="rpc" AgentID="3E215E810A64767F0169C39840910835" ComputerID="8E7FBB080A64767F0169C3989311E9E8" HardwareKey="1B583AE7AE149930232BBCB738264F6C" GroupID="EC69EC780A64767F01AAB84EB04906CA">
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="MHG.GR" LogonUser="APOKOTOSP" HostDomain="MHG.GR" HostName="STN-4564" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 4 Stepping 3" ProcessorClock="3192" ProcessorNum="2"/>
<Memory Size="526454784"/>
<Disk Letter="C:\" Size="39991275520"/>
<BIOS Version="DELL   - 7"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="EC69-11/04/2009 13:12:53 228"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.118.63"/><DNS Address="10.100.118.64"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.150.96.167" Mac="00-12-3f-bf-14-33" Gateway="10.150.96.251" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

11/04 15:18:43 [1488] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 420
11/04 15:18:43 [1488] <mfn_PostAgentInfo>Free memory difference: 121221120, Threshold: 37408350
11/04 15:18:43 [1488] <mfn_PostAgentInfo>Free disk space difference: 55951360, Threshold: 4903531305
11/04 15:18:43 [1488] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
11/04 15:18:47 [1488] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
11/04 15:18:47 [1488] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="3E215E810A64767F0169C39840910835" Timestamp="1257340719944"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><PatternFileRevision>22</PatternFileRevision><UsingPattern>3065366</UsingPattern><PatternFileSequence>102099</PatternFileSequence><PatternFileDate>270A03000000</PatternFileDate><TimeOfLastScan>270A040D0F3A</TimeOfLastScan><EraserEngineVer>7143426:131076</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929016" Owner="SyKnAppS"  /><Moniker Id="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Version="MicroDefsB.CurDefs" Seq="91103016" Owner="SyKnAppS"  /><Moniker Id="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Version="MicroDefsB.CurDefs" Seq="91103016" Owner="SyKnAppS"  /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH"  /><Moniker Id="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Version="6.1.0" Seq="80820001" Owner="COH"  /></avstate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAI
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="MHG.GR" LogonUser="APOKOTOSP" HostDomain="MHG.GR" HostName="STN-4564" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 4 Stepping 3" ProcessorClock="3192" ProcessorNum="2"/>
<Memory Size="526454784"/>
<Disk Letter="C:\" Size="39991275520"/>
<BIOS Version="DELL   - 7"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="EC69-11/04/2009 13:12:53 228"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.118.63"/><DNS Address="10.100.118.64"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.150.96.167" Mac="00-12-3f-bf-14-33" Gateway="10.150.96.251" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="3E215E810A64767F0169C39840910835" ComputerID="8E7FBB080A64767F0169C3989311E9E8" HardwareKey="1B583AE7AE149930232BBCB738264F6C" GroupID="EC69EC780A64767F01AAB84EB04906CA">
<SSAHostInfo>
<Memory Free="128167936"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
11/04 15:18:48 [1488] ************CSN=75769
11/04 15:18:48 [1488] <mfn_MakePostUrl:>Request is: action=192&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&as=75769&cn=[hex]53544E2D34353634&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/04 15:18:48 [1488] <mfn_PostAgentInfo>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:18:48 [1488] <mfn_PostAgentInfo>POST the total size=1300
11/04 15:18:48 [1488] <mfn_PostAgentInfo>Done with return code = 200
11/04 15:18:48 [1488] <IndexHeartbeatProc>===UPLOAD STAGE===
11/04 15:18:48 [1488] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
11/04 15:18:48 [1488] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
11/04 15:18:48 [1488] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
11/04 15:18:48 [1488] <PrepareEventLog>initialized technology extension processing ok
11/04 15:18:48 [1488] <CalcEventLogIndex>Need to send Event Log Type(0) from id 144 to 144
11/04 15:18:48 [1488] <PrepareEventLog>Allow total logs to send=2
11/04 15:18:48 [1488] <PrepareEventLog>nSecurityRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nSecurityRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nSystemRecordsTotal=1
11/04 15:18:48 [1488] <PrepareEventLog>nSystemRecordsToSend=50
11/04 15:18:48 [1488] <PrepareEventLog>nTrafficRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nTrafficRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nRawRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nRawRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nProcessRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nProcessRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nLANSensorRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nLANSensorRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nTechExtensionRecordsTotal=1
11/04 15:18:48 [1488] <PrepareEventLog>nTechExtensionRecordsToSend=50
11/04 15:18:48 [1488] <MakeSystemLog>The size of SYSTEM event logs is 892.
11/04 15:18:48 [1488] <SyLink>The size of SYSTEM event logs is 892.
11/04 15:18:48 [1488] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
11/04 15:18:48 [1488] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
11/04 15:18:48 [1488] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
11/04 15:18:48 [1488] <MakeProcessLog>Attached total 0 bytes process event logs.
11/04 15:18:48 [1488] <MakeTechExtensionLog> Attached total 872 bytes to Tech Extension event log section.
11/04 15:18:48 [1488] <SyLink> Attached total 872 bytes to Tech Extension event log section.
11/04 15:18:48 [1488] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
11/04 15:18:48 [1488] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
11/04 15:18:48 [1488] ************CSN=75770
11/04 15:18:48 [1488] <mfn_MakePostUrl:>Request is: action=195&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&groupid=64C633930A64767F004D350075E95D2E&as=75770&cn=[hex]53544E2D34353634&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/04 15:18:48 [1488] <SendEventLogToServer>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:18:48 [1488] <SendEventLogToServer>eventlog-->SMS, size=843
11/04 15:18:48 [1488] <SendEventLogToServer>uploads the eventlog to server, size=843
11/04 15:18:48 [1488] <SendEventLogToServer>Query return code = 200
11/04 15:18:48 [1488] <SendEventLogToServer>EventLog-->SEM DONE!
11/04 15:18:48 [1488] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
11/04 15:18:48 [1488] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
11/04 15:18:48 [1488] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
11/04 15:18:48 [1488] <IndexHeartbeatProc>Enter Push Session
11/04 15:18:48 [1488] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
11/04 15:18:48 [1488] <MaintainPushConnection:>Push Connecton!
11/04 15:18:49 [1488] ************CSN=75771
11/04 15:18:49 [1488] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&groupid=64C633930A64767F004D350075E95D2E&mode=0&as=75771
11/04 15:18:49 [1488] <MaintainPushConnection:>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:19:25 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:19:25 [1424] </CSyLink::mfn_DownloadNow()>


The time tha has start downloading.It seems that it tries to download from server 10.100.118.127 but that is not correct.Any suggestions?
Thanks

11/04 15:13:57 [1492] <LUThreadProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02451A40
11/04 15:13:57 [1492] <LUThreadProc>Starting LU download.
11/04 15:13:57 [1492] <LUThreadProc>Got a valid context from GetCurrentServerEx
11/04 15:13:57 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:13:57 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zip
11/04 15:13:57 [1492] <GetLUFileRequest:>IIS URL: /content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zip
11/04 15:13:57 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zip
11/04 15:13:57 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp
11/04 15:13:57 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:13:57 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433}Server File Path:/content/{C60DC234-65F9-4674-94AE-62158EFCA433}/91103022/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp
11/04 15:14:10 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:14:10 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:14:16 [1492] <mfn_DoGetLUFile200>Content Length => 60480689
11/04 15:14:16 [1492] <UpdateLUFileList:>Updating existing Download File List with : {C60DC234-65F9-4674-94AE-62158EFCA433}91103022
11/04 15:14:16 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp
11/04 15:14:16 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Target Seq:91103022 Full version:1 Delta Base Seq:
11/04 15:14:16 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:15:09 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:15:09 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24C.tmp Moniker: {C60DC234-65F9-4674-94AE-62158EFCA433} Seq: 91103022 File size: 60480689
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:15:09 [1492] File download returns status code=0
11/04 15:15:09 [1492] Removing LU download from queue {C60DC234-65F9-4674-94AE-62158EFCA433}
11/04 15:15:09 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:15:09 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:15:09 [1492] LU file download succeceded with HTTP status:200
11/04 15:15:09 [1492] <CExpBackoff::Decrement()>
11/04 15:15:09 [1492] Backoff wait index: 5
11/04 15:15:09 [1492] </CExpBackoff::Decrement()>
11/04 15:15:09 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:15:09 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zip
11/04 15:15:09 [1492] <GetLUFileRequest:>IIS URL: /content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zip
11/04 15:15:09 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zip
11/04 15:15:09 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp
11/04 15:15:09 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3}Server File Path:/content/{D3769926-05B7-4ad1-9DCF-23051EEE78E3}/91023001/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>Content Length => 1253637
11/04 15:15:09 [1492] <UpdateLUFileList:>Updating existing Download File List with : {D3769926-05B7-4ad1-9DCF-23051EEE78E3}91023001
11/04 15:15:09 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp
11/04 15:15:09 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Target Seq:91023001 Full version:1 Delta Base Seq:
11/04 15:15:09 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:15:13 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:15:13 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:15:14 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:15:14 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24D.tmp Moniker: {D3769926-05B7-4ad1-9DCF-23051EEE78E3} Seq: 91023001 File size: 1253637
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:15:14 [1492] File download returns status code=0
11/04 15:15:14 [1492] Removing LU download from queue {D3769926-05B7-4ad1-9DCF-23051EEE78E3}
11/04 15:15:14 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:15:14 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:15:14 [1492] LU file download succeceded with HTTP status:200
11/04 15:15:14 [1492] <CExpBackoff::Decrement()>
11/04 15:15:14 [1492] Backoff wait index: 5
11/04 15:15:14 [1492] </CExpBackoff::Decrement()>
11/04 15:15:14 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:15:14 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.dax
11/04 15:15:14 [1492] <GetLUFileRequest:>IIS URL: /content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.dax
11/04 15:15:14 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.dax
11/04 15:15:14 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp
11/04 15:15:14 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139}Server File Path:/content/{4F889C4A-784D-40de-8539-6A29BAA43139}/91030032/delta90603054.daxLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>Content Length => 4063
11/04 15:15:14 [1492] <UpdateLUFileList:>Updating existing Download File List with : {4F889C4A-784D-40de-8539-6A29BAA43139}91030032
11/04 15:15:14 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp
11/04 15:15:14 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139} Target Seq:91030032 Full version:0 Delta Base Seq:90603054
11/04 15:15:14 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:15:43 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:15:43 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24E.tmp Moniker: {4F889C4A-784D-40de-8539-6A29BAA43139} Seq: 91030032 File size: 4063
11/04 15:15:43 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:15:43 [1492] File download returns status code=0
11/04 15:15:43 [1492] Removing LU download from queue {4F889C4A-784D-40de-8539-6A29BAA43139}
11/04 15:15:43 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:15:43 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:15:43 [1492] LU file download succeceded with HTTP status:200
11/04 15:15:43 [1492] <CExpBackoff::Decrement()>
11/04 15:15:43 [1492] Backoff wait index: 5
11/04 15:15:43 [1492] </CExpBackoff::Decrement()>
11/04 15:15:43 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:15:43 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zip
11/04 15:15:43 [1492] <GetLUFileRequest:>IIS URL: /content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zip
11/04 15:15:43 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zip
11/04 15:15:43 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp
11/04 15:15:43 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:15:43 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF}Server File Path:/content/{812CD25E-1049-4086-9DDD-A4FAE649FBDF}/91103016/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp
11/04 15:15:44 [1492] <mfn_DoGetLUFile200>Content Length => 539811
11/04 15:15:44 [1492] <UpdateLUFileList:>Updating existing Download File List with : {812CD25E-1049-4086-9DDD-A4FAE649FBDF}91103016
11/04 15:15:44 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp
11/04 15:15:44 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Target Seq:91103016 Full version:1 Delta Base Seq:
11/04 15:15:44 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:16:17 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:16:17 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:17:05 [1488] AH: (InetWaiting) time out. Timeout period: 320000
11/04 15:17:06 [1488] Throw Internet Exception, Error Code=4294967287;Internet Session Timeout
11/04 15:17:06 [1488] <MaintainPushConnection:>COMPLETED
11/04 15:17:06 [1488] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
11/04 15:17:06 [1488] HEARTBEAT: Check Point 8
11/04 15:17:06 [1488] CAsyncHttpConnection Close.. waiting for Pending request to be completed
11/04 15:17:07 [1488] CAsyncHttpConnection Close.. waiting for Pending request to be completed
11/04 15:17:08 [1488] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/04 15:17:20 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:17:20 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:17:27 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:17:27 [1488] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/04 15:17:27 [1488] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 15:17:27 ======
11/04 15:17:27 [1488] <IndexHeartbeatProc>Set Heartbeat Result= 2
11/04 15:17:27 [1488] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 1, 'Using Location Config' = 0
11/04 15:17:27 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF24F.tmp Moniker: {812CD25E-1049-4086-9DDD-A4FAE649FBDF} Seq: 91103016 File size: 539811
11/04 15:17:27 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:17:27 [1492] File download returns status code=0
11/04 15:17:27 [1492] Removing LU download from queue {812CD25E-1049-4086-9DDD-A4FAE649FBDF}
11/04 15:17:27 [1488] Use new configuration
11/04 15:17:27 [1488] HEARTBEAT: Check Point Complete
11/04 15:17:27 [1488] <IndexHeartbeatProc>Done, Heartbeat=5seconds
11/04 15:17:27 [1488] </CSyLink::IndexHeartbeatProc()>
11/04 15:17:27 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:17:27 [1488] <CheckHeartbeatTimer>====== Heartbeat loop stops at 15:17:27 ======
11/04 15:17:27 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:17:27 [1492] LU file download succeceded with HTTP status:200
11/04 15:17:27 [1492] <CExpBackoff::Decrement()>
11/04 15:17:27 [1492] Backoff wait index: 5
11/04 15:17:27 [1492] </CExpBackoff::Decrement()>
11/04 15:17:27 [1492] <LUThreadProc>Setting the session timeout on LUSession to 2 min.
11/04 15:17:27 [1492] <mfn_MakeGetLUFileIISUrl:>Requested Content Path is: /content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zip
11/04 15:17:27 [1492] <GetLUFileRequest:>IIS URL: /content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zip
11/04 15:17:27 [1492] <GetLUFileRequest:>http://10.100.118.127:80/content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zip
11/04 15:17:27 [1492] <GetLUFileRequest:>RESUME download: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp
11/04 15:17:28 [1492] <GetLUFileRequest:>IIS return=200
11/04 15:17:28 [1492] <mfn_DoGetLUFile200>Downloading LU file from server. Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522}Server File Path:/content/{E5A3EBEE-D580-421e-86DF-54C0B3739522}/91103016/Full.zipLocal Path:C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp
11/04 15:17:28 [1492] <mfn_DoGetLUFile200>Content Length => 76782
11/04 15:17:28 [1492] <UpdateLUFileList:>Updating existing Download File List with : {E5A3EBEE-D580-421e-86DF-54C0B3739522}91103016
11/04 15:17:28 [1492] <UpdateLUFileList:>Updating existing Download File List Temp file name from: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp to C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp
11/04 15:17:28 [1492] <mfn_DoGetLUFile200>LU Content Downloaded.  Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Target Seq:91103016 Full version:1 Delta Base Seq:
11/04 15:17:28 [1492] <PostEvent>going to post event=EVENT_LU_DOWNLOAD_COMPLETED
11/04 15:17:32 [1488] <CheckHeartbeatTimer>====== Heartbeat loop starts at 15:17:32 ======
11/04 15:17:33 [1488] <GetOnlineNicInfo>:Netport Count=1
11/04 15:17:33 [1488] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.150.96.167" Mac="00-12-3f-bf-14-33" Gateway="10.150.96.251" SubnetMask="0.0.0.0"/></SSANICs>
11/04 15:17:33 [1488] <CalcAgentHashKey>:CH=64C633930A64767F004D350075E95D2E1STN-4564MHG.GR1B583AE7AE149930232BBCB738264F6C
11/04 15:17:33 [1488] <CalcAgentHashKey>:CHKey=25F24456DE327AD6477D32521E1CBD1D
11/04 15:17:33 [1488] <CalcAgentHashKey>:C=64C633930A64767F004D350075E95D2E1STN-4564MHG.GR
11/04 15:17:33 [1488] <CalcAgentHashKey>:CKey=C66E650975BE62ACBE38FB164B0AE2D9
11/04 15:17:33 [1488] <CalcAgentHashKey>:UCH=64C633930A64767F004D350075E95D2E0APOKOTOSPMHG.GRSTN-4564MHG.GR1B583AE7AE149930232BBCB738264F6C
11/04 15:17:33 [1488] <CalcAgentHashKey>:UCHKey=1584AC433B95FE71AA3CC1C5754CA841
11/04 15:17:33 [1488] <CalcAgentHashKey>:UC=64C633930A64767F004D350075E95D2E0APOKOTOSPMHG.GRSTN-4564MHG.GR
11/04 15:17:33 [1488] <CalcAgentHashKey>:UCKey=18842C080ED7BA61FF098A3728C00662
11/04 15:17:34 [1488] <DoHeartbeat>HardwareID=1B583AE7AE149930232BBCB738264F6C
11/04 15:17:34 [1488] <DoHeartbeat>CHKey=25F24456DE327AD6477D32521E1CBD1D
11/04 15:17:34 [1488] <DoHeartbeat>CKey=C66E650975BE62ACBE38FB164B0AE2D9
11/04 15:17:34 [1488] <DoHeartbeat>UCHKey=1584AC433B95FE71AA3CC1C5754CA841
11/04 15:17:34 [1488] <DoHeartbeat>UCKey=18842C080ED7BA61FF098A3728C00662
11/04 15:17:34 [1488] <DoHeartbeat> Set heartbeat event
11/04 15:17:34 [1488] Use new configuration
11/04 15:17:34 [1488] <CSyLink::IndexHeartbeatProc()>
11/04 15:17:34 [1488] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02451A40
11/04 15:17:34 [1488] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 15:17:34 ======
11/04 15:17:34 [1488] HEARTBEAT: Check Point 1
11/04 15:17:34 [1488] Get First Server!
11/04 15:17:34 [1488] HEARTBEAT: Check Point 2
11/04 15:17:34 [1488] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/04 15:18:22 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:18:23 [1424] </CSyLink::mfn_DownloadNow()>
11/04 15:18:36 [1492] <PostEvent>done post event=EVENT_LU_DOWNLOAD_COMPLETED, return=0
11/04 15:18:36 [1488] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/04 15:18:36 [1488] HEARTBEAT: Check Point 3
11/04 15:18:36 [1488] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
11/04 15:18:36 [1488] HEARTBEAT: Check Point 4
11/04 15:18:36 [1492] <mfn_DoGetLUFile200> Download LU file succeeded. FileName: C:\Program Files\Symantec\Symantec Endpoint Protection\LiveUpdate\LUF250.tmp Moniker: {E5A3EBEE-D580-421e-86DF-54C0B3739522} Seq: 91103016 File size: 76782
11/04 15:18:36 [1492] <mfn_DoGetLUFile200>completed.
11/04 15:18:36 [1492] File download returns status code=0
11/04 15:18:36 [1492] Removing LU download from queue {E5A3EBEE-D580-421e-86DF-54C0B3739522}
11/04 15:18:36 [1492] <GetLUFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:18:36 [1488] <IndexHeartbeatProc>===Get Index STAGE===
11/04 15:18:36 [1488] ************CSN=75768
11/04 15:18:36 [1488] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&hid=1B583AE7AE149930232BBCB738264F6C&groupid=64C633930A64767F004D350075E95D2E&mode=0&hbt=300&as=75768&cn=[hex]53544E2D34353634&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/04 15:18:36 [1492] <GetLUFileRequest:>COMPLETED
11/04 15:18:36 [1492] LU file download succeceded with HTTP status:200
11/04 15:18:36 [1492] <CExpBackoff::Decrement()>
11/04 15:18:36 [1488] <GetIndexFileRequest:>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:18:36 [1492] Backoff wait index: 5
11/04 15:18:36 [1492] </CExpBackoff::Decrement()>
11/04 15:18:37 [1488] <GetIndexFileRequest:>SMS return=200
11/04 15:18:37 [1488] <ParseHTTPStatusCode:>200=>200 OK
11/04 15:18:37 [1488] <FindHeader>Sem-HashKey:=>25F24456DE327AD6477D32521E1CBD1D
11/04 15:18:37 [1488] <FindHeader>Sem-LANSensor:=>0
11/04 15:18:37 [1488] <FindHeader>Sem-Signatue:=>6321797C118F171258BBD8862D74D589EB9941C9EE7F03EC2ECE394241C0C12740EFDE276F0BA14A12FE4363D79A81F6011B3A12A3B059A4B99F912AA3472A7C926C7A3C328DEB4D90AEBDCDFE088FCFB18D988793E5AA218A889C9F6DEB9E8F3DE490AAA6FCACD38277ACC6E44FC1DA96980D8B77D9B6ED6846CC53755A883C
11/04 15:18:37 [1488] <mfn_DoGetIndexFile200>Content Lenght => 1370
11/04 15:18:37 [1488] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
11/04 15:18:37 [1488] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D4E82BAF0A64767F0097304B7AEB5A83" ServerID="01A9BC730A64767F01F00B6AD4CE7963" GroupID="EC69EC780A64767F01AAB84EB04906CA" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "04/11/2009 14:21:54"> <Profile Checksum="1424AE3835834A80C7B74EF4112FE545" SerialNumber="EC69-11/04/2009 13:12:53 228" LastModifiedTime="04/11/2009  14:21:54"/> <ConfigFile Checksum="CE9F9B8576EE68E0F4F00323843CFE98" LastModifiedTime="04/11/2009  14:21:53"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="04/11/2009  14:21:54"/> <SylinkFile Checksum="4EA56C7C6206E2D821C9EDACF06A2B76" LastModifiedTime="04/11/2009  14:21:54"/> <LSProfile Checksum="D697C59CFDFC7032EB576D472F74E131" SerialNumber ="EC69-11/04/2009 13:12:53 228" LastModifiedTime ="04/11/2009  14:21:54"/>
 <LiveUpdate>
  <File Checksum="8E3D563688D7F8ED0C8D53B24380B3B8" DeltaFlag="1" FullSize="60480689" LastModifiedTime="1257305697297" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="91103022"/>
   <File Checksum="47E7C25FD9B88BC3E1D1505AC5784A8A" DeltaFlag="1" FullSize="60671877" LastModifiedTime="1257305543985" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="91103022"/>
   <File Checksum="F1F97A7EBEB0CE4B8DAB27936B1B8755" DeltaFlag="1" FullSize="1269871" LastModifiedTime="1256335147920" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="91023001"/>
   <File Checksum="174DC6D6D8E6A2BF73E647694DC6C79E" DeltaFlag="1" FullSize="1253637" LastModifiedTime="1256335105982" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="91023001"/>
   <File Checksum="D851C80CA6B39C046CE5F6DB6EC2377A" DeltaFlag="1" FullSize="650307" LastModifiedTime="1208775294536" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="C45F954B7A7590C1AC26CC45DB3EE0C9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222725798073" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="3CBBE65E8302713E3346101001413A97" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223501951390" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="DAF1925B9FBB2A042F776EFC917309C9" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223501964577" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="8FE4B509581ED9F5A2E19DCD8F4F938E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223501979155" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
   <File Checksum="2755ECC72B5690380E75DA62DC4FD562" DeltaFlag="1" FullSize="6477" LastModifiedTime="1256940166549" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91030032"/>
   <File Checksum="4FC0DBE2DBB55C70B86BE997FF2A4E3B" DeltaFlag="1" FullSize="76802" LastModifiedTime="1257275185059" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="91103016"/>
   <File Checksum="567B62FDFC6E14EAA954DF49FDFB5A9E" DeltaFlag="1" FullSize="539811" LastModifiedTime="1257275197077" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="91103016"/>
   <File Checksum="1E1315B9A6636EB8042EA8AD7D41C84E" DeltaFlag="1" FullSize="539838" LastModifiedTime="1257275216331" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="91103016"/>
   <File Checksum="26C96FDE936430CB236C2F3D01B73D11" DeltaFlag="1" FullSize="76782" LastModifiedTime="1257275232100" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="91103016"/>
 </LiveUpdate>
</GroupIndex>
11/04 15:18:37 [1488] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
11/04 15:18:37 [1488] <GetIndexFileRequest:>COMPLETED
11/04 15:18:37 [1488] <IndexHeartbeatProc>GetIndexFile handling status: 0
11/04 15:18:37 [1488] <IndexHeartbeatProc>Switch Server flag=0
11/04 15:18:37 [1488] HEARTBEAT: Check Point 5.1
11/04 15:18:37 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:38 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:91103022
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:38 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:91023001
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:38 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:38 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:39 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:39 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:91103016
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/04 15:18:39 [1488] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:91103016
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/04 15:18:39 [1488] <PostEvent>going to post event=EVENT_SERVER_ONLINE
11/04 15:18:39 [1488] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
11/04 15:18:39 [1488] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
11/04 15:18:39 [1488] HEARTBEAT: Check Point 6
11/04 15:18:39 [1488] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
11/04 15:18:43 [1488] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
11/04 15:18:43 [1488] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
11/04 15:18:43 [1488] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
11/04 15:18:43 [1488] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
11/04 15:18:43 [1488] ReasonDescForFailure*** = Host Integrity check is disabled.
11/04 15:18:43 [1488] ReasonDescForFailure*** = Host Integrity check is disabled.
11/04 15:18:43 [1488] *** = <SSAInfo NameSpace="rpc" AgentID="3E215E810A64767F0169C39840910835" ComputerID="8E7FBB080A64767F0169C3989311E9E8" HardwareKey="1B583AE7AE149930232BBCB738264F6C" GroupID="EC69EC780A64767F01AAB84EB04906CA">
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="MHG.GR" LogonUser="APOKOTOSP" HostDomain="MHG.GR" HostName="STN-4564" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 4 Stepping 3" ProcessorClock="3192" ProcessorNum="2"/>
<Memory Size="526454784"/>
<Disk Letter="C:\" Size="39991275520"/>
<BIOS Version="DELL   - 7"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="EC69-11/04/2009 13:12:53 228"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.118.63"/><DNS Address="10.100.118.64"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.150.96.167" Mac="00-12-3f-bf-14-33" Gateway="10.150.96.251" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

11/04 15:18:43 [1488] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 420
11/04 15:18:43 [1488] <mfn_PostAgentInfo>Free memory difference: 121221120, Threshold: 37408350
11/04 15:18:43 [1488] <mfn_PostAgentInfo>Free disk space difference: 55951360, Threshold: 4903531305
11/04 15:18:43 [1488] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
11/04 15:18:47 [1488] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
11/04 15:18:47 [1488] <mfn_PostAgentInfo><?xml version='1.0' encoding='UTF-8' ?>
<SESAgentOpState AgentID="3E215E810A64767F0169C39840910835" Timestamp="1257340719944"><TechID Name="AVMan"><Data><![CDATA[<avstate version="1.0"><PatternFileRevision>22</PatternFileRevision><UsingPattern>3065366</UsingPattern><PatternFileSequence>102099</PatternFileSequence><PatternFileDate>270A03000000</PatternFileDate><TimeOfLastScan>270A040D0F3A</TimeOfLastScan><EraserEngineVer>7143426:131076</EraserEngineVer><Moniker Id="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Version="1.5.0" Seq="80929016" Owner="SyKnAppS"  /><Moniker Id="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Version="MicroDefsB.CurDefs" Seq="91103016" Owner="SyKnAppS"  /><Moniker Id="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Version="MicroDefsB.CurDefs" Seq="91103016" Owner="SyKnAppS"  /><Moniker Id="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Version="6.1.0" Seq="80820001" Owner="COH"  /><Moniker Id="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Version="6.1.0" Seq="80820001" Owner="COH"  /></avstate>]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAI
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="MHG.GR" LogonUser="APOKOTOSP" HostDomain="MHG.GR" HostName="STN-4564" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 4 Stepping 3" ProcessorClock="3192" ProcessorNum="2"/>
<Memory Size="526454784"/>
<Disk Letter="C:\" Size="39991275520"/>
<BIOS Version="DELL   - 7"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="EC69-11/04/2009 13:12:53 228"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.118.63"/><DNS Address="10.100.118.64"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.150.96.167" Mac="00-12-3f-bf-14-33" Gateway="10.150.96.251" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>
]]></Data></TechID><TechID Name="SEP"><Data><![CDATA[<SSAInfo NameSpace="rpc" AgentID="3E215E810A64767F0169C39840910835" ComputerID="8E7FBB080A64767F0169C3989311E9E8" HardwareKey="1B583AE7AE149930232BBCB738264F6C" GroupID="EC69EC780A64767F01AAB84EB04906CA">
<SSAHostInfo>
<Memory Free="128167936"/>
</SSAHostInfo>
</SSAInfo>
]]></Data></TechID></SESAgentOpState>
11/04 15:18:48 [1488] ************CSN=75769
11/04 15:18:48 [1488] <mfn_MakePostUrl:>Request is: action=192&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&as=75769&cn=[hex]53544E2D34353634&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/04 15:18:48 [1488] <mfn_PostAgentInfo>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:18:48 [1488] <mfn_PostAgentInfo>POST the total size=1300
11/04 15:18:48 [1488] <mfn_PostAgentInfo>Done with return code = 200
11/04 15:18:48 [1488] <IndexHeartbeatProc>===UPLOAD STAGE===
11/04 15:18:48 [1488] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
11/04 15:18:48 [1488] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
11/04 15:18:48 [1488] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
11/04 15:18:48 [1488] <PrepareEventLog>initialized technology extension processing ok
11/04 15:18:48 [1488] <CalcEventLogIndex>Need to send Event Log Type(0) from id 144 to 144
11/04 15:18:48 [1488] <PrepareEventLog>Allow total logs to send=2
11/04 15:18:48 [1488] <PrepareEventLog>nSecurityRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nSecurityRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nSystemRecordsTotal=1
11/04 15:18:48 [1488] <PrepareEventLog>nSystemRecordsToSend=50
11/04 15:18:48 [1488] <PrepareEventLog>nTrafficRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nTrafficRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nRawRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nRawRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nProcessRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nProcessRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nLANSensorRecordsTotal=0
11/04 15:18:48 [1488] <PrepareEventLog>nLANSensorRecordsToSend=0
11/04 15:18:48 [1488] <PrepareEventLog>nTechExtensionRecordsTotal=1
11/04 15:18:48 [1488] <PrepareEventLog>nTechExtensionRecordsToSend=50
11/04 15:18:48 [1488] <MakeSystemLog>The size of SYSTEM event logs is 892.
11/04 15:18:48 [1488] <SyLink>The size of SYSTEM event logs is 892.
11/04 15:18:48 [1488] <MakeSecurityLog>Attached total 0 bytes SECURITY event logs.
11/04 15:18:48 [1488] <MakeTrafficLog>Attached total 0 bytes TRAFFIC event logs.
11/04 15:18:48 [1488] <MakeRawTrafficLog>Attached total 0 bytes RAW TRAFFIC event logs.
11/04 15:18:48 [1488] <MakeProcessLog>Attached total 0 bytes process event logs.
11/04 15:18:48 [1488] <MakeTechExtensionLog> Attached total 872 bytes to Tech Extension event log section.
11/04 15:18:48 [1488] <SyLink> Attached total 872 bytes to Tech Extension event log section.
11/04 15:18:48 [1488] <IndexHeartbeatProc>===COMPRESS EVENT LOG STAGE===
11/04 15:18:48 [1488] <IndexHeartbeatProc>===SEND EVENT LOG STAGE===
11/04 15:18:48 [1488] ************CSN=75770
11/04 15:18:48 [1488] <mfn_MakePostUrl:>Request is: action=195&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&groupid=64C633930A64767F004D350075E95D2E&as=75770&cn=[hex]53544E2D34353634&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/04 15:18:48 [1488] <SendEventLogToServer>http://10.100.118.127:80/secars/secars.dll?h=366A5AD4A9B6D043D6DE5EA50CD9DD1A8DA224ADF7586D2528D31078ADB4AC63EE6AC3F7623F9A55D3C868FCAF61F9912080F56946DDEC9B159F2A91260D42FD1A5B2B9C23BF407C8BE190C78549C790BF0AC2A176DE4C76BB7C2705D05B9F7F900DAA41BAB17C1997F2CE25D05C91F231FEB0BE380C45D45167C100D0B5305D90D10CE6E54D440A2029AFB55B4B81C9B83581A490CB8AC23001098E07A85803AAFCD9E37786475A19110F9DCEC37E5EFC47A02E4EAC2689E4EEA0029A6CB4F0BAC67038F7A55CF51CE408BA68AA69FD311235136875EDABEFBA2CB02DBB83970DBB7D8D05DE6BE1F303FCE90AB77BD02A30D2681509A8E680F2E769812FBBCB6F087CB12789598292D53DBCA1111491D8DB9D7E908E385C4E61AF42F9FFB29D9CBBBA67A5198AB9E18F0331054FBF6D337893709CDFB5BC066368485A64E41D67140E88BA2018CD6EBCC6B042629B37
11/04 15:18:48 [1488] <SendEventLogToServer>eventlog-->SMS, size=843
11/04 15:18:48 [1488] <SendEventLogToServer>uploads the eventlog to server, size=843
11/04 15:18:48 [1488] <SendEventLogToServer>Query return code = 200
11/04 15:18:48 [1488] <SendEventLogToServer>EventLog-->SEM DONE!
11/04 15:18:48 [1488] <PostEvent>going to post event=EVENT_SERVER_EVENT_LOG_SENT
11/04 15:18:48 [1488] <PostEvent>done post event=EVENT_SERVER_EVENT_LOG_SENT, return=0
11/04 15:18:48 [1488] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
11/04 15:18:48 [1488] <IndexHeartbeatProc>Enter Push Session
11/04 15:18:48 [1488] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
11/04 15:18:48 [1488] <MaintainPushConnection:>Push Connecton!
11/04 15:18:49 [1488] ************CSN=75771
11/04 15:18:49 [1488] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=3E215E810A64767F0169C39840910835&chk=25F24456DE327AD6477D32521E1CBD1D&ck=C66E650975BE62ACBE38FB164B0AE2D9&uchk=1584AC433B95FE71AA3CC1C5754CA841&uck=18842C080ED7BA61FF098A3728C00662&groupid=64C633930A64767F004D350075E95D2E&mode=0&as=75771
11/04 15:18:49 [1488] <MaintainPushConnection:>http://10.100.118.127:80/secars/secars.dll?h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
11/04 15:19:25 [1424] <CSyLink::mfn_DownloadNow()>
11/04 15:19:25 [1424] </CSyLink::mfn_DownloadNow()>








It seems that is trying to download from 10.100.118.127 but that is not the correct ip of the server i want and it was set to the gup of the group

Hi,

can you check if the registry key

Cannot paste that and i don't see attach of the file.....Can u set the time that a client checks for updates?

Now i don't get any SescLU but i see many SRTSP event id 2003 in system event viewer.Maybe that helps

Yes i check the registry and it is set to 1 to my GUP

I am able to access the links which i pasted (i had hyper linked to that url) and i am able to download also... 

I have download the sylink i use it but i cannot paste the results here    : (

What s the problem you are facing while trying to copy? 

 Troubleshooting the Group Update Provider (GUP) in Symantec Endpoint Protection

Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart 

Now i don't get any errors or warning in gup but when i run sylink i get the ip of my sepm and not of my gup.And i can see that error  EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content.Moniker:{DB206823-FFD2-440a-9B89-CCFD45F3F1CD -}.I suppose this is a problem.So what do you suggest?

Are you able to telnet to GUP PC in 2967 (this is the default port of GUP but it is configurable) port?

Yes i can ping and telnet!!!!I don't know what else to try....

Try by repairing your SEP in that gup pc.. 

I have uninstalled and installed it again.Now i try to make another group and another gup just to see what will happens.What are these SRTSP information

Symantec Antivirus minifilter successfully loaded.?

11/05 16:50:50 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:50:50 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:51:52 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:51:52 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:51:57 [2156] <MaintainPushConnection:>SMS return=200
11/05 16:51:57 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 16:51:57 [2156] <MaintainPushConnection:>RECEIVE STAGE COMPLETED
11/05 16:51:57 [2156] <MaintainPushConnection:>COMPLETED
11/05 16:51:57 [2156] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
11/05 16:51:57 [2156] HEARTBEAT: Check Point 8
11/05 16:51:57 [2156] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/05 16:51:57 [2156] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/05 16:51:57 [2156] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 16:51:57 ======
11/05 16:51:57 [2156] <IndexHeartbeatProc>Set Heartbeat Result= 2
11/05 16:51:57 [2156] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
11/05 16:51:57 [2156] Use new configuration
11/05 16:51:57 [2156] HEARTBEAT: Check Point Complete
11/05 16:51:57 [2156] <IndexHeartbeatProc>Done, Heartbeat=5seconds
11/05 16:51:57 [2156] </CSyLink::IndexHeartbeatProc()>
11/05 16:51:57 [2156] <CheckHeartbeatTimer>====== Heartbeat loop stops at 16:51:57 ======
11/05 16:52:03 [2156] <CheckHeartbeatTimer>====== Heartbeat loop starts at 16:52:03 ======
11/05 16:52:04 [2156] <GetOnlineNicInfo>:Netport Count=1
11/05 16:52:04 [2156] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs>
11/05 16:52:04 [2156] <CalcAgentHashKey>:CH=64C633930A64767F004D350075E95D2E1KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 16:52:04 [2156] <CalcAgentHashKey>:CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 16:52:04 [2156] <CalcAgentHashKey>:C=64C633930A64767F004D350075E95D2E1KIF-1611.
11/05 16:52:04 [2156] <CalcAgentHashKey>:CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 16:52:04 [2156] <CalcAgentHashKey>:UCH=64C633930A64767F004D350075E95D2E0..KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 16:52:04 [2156] <CalcAgentHashKey>:UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 16:52:04 [2156] <CalcAgentHashKey>:UC=64C633930A64767F004D350075E95D2E0..KIF-1611.
11/05 16:52:04 [2156] <CalcAgentHashKey>:UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 16:52:04 [2156] <DoHeartbeat>HardwareID=A51E8197E55EBF502DE5B23BDA8B9936
11/05 16:52:04 [2156] <DoHeartbeat>CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 16:52:04 [2156] <DoHeartbeat>CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 16:52:04 [2156] <DoHeartbeat>UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 16:52:04 [2156] <DoHeartbeat>UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 16:52:04 [2156] <DoHeartbeat> Set heartbeat event
11/05 16:52:04 [2156] Use new configuration
11/05 16:52:04 [2156] <CSyLink::IndexHeartbeatProc()>
11/05 16:52:04 [2156] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02437BF0
11/05 16:52:04 [2156] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 16:52:04 ======
11/05 16:52:04 [2156] HEARTBEAT: Check Point 1
11/05 16:52:04 [2156] Get First Server!
11/05 16:52:04 [2156] HEARTBEAT: Check Point 2
11/05 16:52:04 [2156] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/05 16:52:04 [2156] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/05 16:52:04 [2156] HEARTBEAT: Check Point 3
11/05 16:52:04 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
11/05 16:52:04 [2156] HEARTBEAT: Check Point 4
11/05 16:52:04 [2156] <IndexHeartbeatProc>===Get Index STAGE===
11/05 16:52:04 [2156] ************CSN=39
11/05 16:52:04 [2156] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&hid=A51E8197E55EBF502DE5B23BDA8B9936&groupid=64C633930A64767F004D350075E95D2E&mode=0&hbt=300&as=39&cn=[hex]4B49462D31363131&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/05 16:52:04 [2156] <GetIndexFileRequest:>http://10.100.118.127:80/secars/secars.dll?h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
11/05 16:52:04 [2156] <GetIndexFileRequest:>SMS return=200
11/05 16:52:04 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 16:52:04 [2156] <FindHeader>Sem-HashKey:=>C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 16:52:04 [2156] <FindHeader>Sem-LANSensor:=>0
11/05 16:52:04 [2156] <FindHeader>Sem-Signatue:=>09FC93442323FFC631FF8334F529D3EDAAFDFBA5CFF6DE460A1CA82F660C2537AD41BF2024349C269DA738CD19287D6C0AF9DBF778B2FE410FC4E51A242090B3F3812B3D495FE86442FF0F1E7C335C0836A044D831810BBE1327D689DFD877DB328B0A1B373E3AB3D1EBE103883C5649978137019F273806E86A4A5EE93FDDC3
11/05 16:52:04 [2156] <mfn_DoGetIndexFile200>Content Lenght => 1358
11/05 16:52:04 [2156] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
11/05 16:52:04 [2156] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D4E82BAF0A64767F0097304B7AEB5A83" ServerID="01A9BC730A64767F01F00B6AD4CE7963" GroupID="386A562C0A64767F01833C9C4F43542E" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "05/11/2009 16:17:12"> <Profile Checksum="FBBBDA646D32BB6527411E90D4901739" SerialNumber="386A-11/05/2009 12:16:21 483" LastModifiedTime="05/11/2009  16:17:12"/> <ConfigFile Checksum="CE9F9B8576EE68E0F4F00323843CFE98" LastModifiedTime="05/11/2009  16:17:12"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="05/11/2009  16:17:12"/> <SylinkFile Checksum="4EA56C7C6206E2D821C9EDACF06A2B76" LastModifiedTime="05/11/2009  16:17:12"/> <LSProfile Checksum="07A9A56D5EAE11FAF0158F3D181A6C99" SerialNumber ="386A-11/05/2009 12:16:21 483" LastModifiedTime ="05/11/2009  16:17:12"/>
 <LiveUpdate>
  <File Checksum="37585C2207004DCE9F75D2B9A48F59F9" DeltaFlag="1" FullSize="60724433" LastModifiedTime="1257416974792" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="91104051"/>
   <File Checksum="5DD8D298AE3EF8A28E031025B50FBEF6" DeltaFlag="1" FullSize="60915621" LastModifiedTime="1257416866626" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="91104051"/>
   <File Checksum="F1F97A7EBEB0CE4B8DAB27936B1B8755" DeltaFlag="1" FullSize="1269871" LastModifiedTime="1256335147920" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="91023001"/>
   <File Checksum="174DC6D6D8E6A2BF73E647694DC6C79E" DeltaFlag="1" FullSize="1253637" LastModifiedTime="1256335105982" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="91023001"/>
   <File Checksum="D851C80CA6B39C046CE5F6DB6EC2377A" DeltaFlag="1" FullSize="650307" LastModifiedTime="1208775294536" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="C45F954B7A7590C1AC26CC45DB3EE0C9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222725798073" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="3CBBE65E8302713E3346101001413A97" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223501951390" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="DAF1925B9FBB2A042F776EFC917309C9" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223501964577" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="8FE4B509581ED9F5A2E19DCD8F4F938E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223501979155" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
   <File Checksum="3BF457477B2BDA7811CBE8F92F0A5901" DeltaFlag="1" FullSize="76793" LastModifiedTime="1257354347421" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="91104020"/>
   <File Checksum="5B82E41315C9CC29AC75E2BDA7865F9B" DeltaFlag="1" FullSize="546561" LastModifiedTime="1257354357390" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="91104020"/>
   <File Checksum="1305E25C5081ADE47E08CEF93ED42B00" DeltaFlag="1" FullSize="546590" LastModifiedTime="1257354373937" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="91104020"/>
   <File Checksum="44E69A531A540AA5EEFE7290E639C140" DeltaFlag="1" FullSize="76787" LastModifiedTime="1257354386374" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="91104020"/>
   <File Checksum="DD9AD99EB58A4FB0D9C2F60622C27897" DeltaFlag="1" FullSize="6482" LastModifiedTime="1257386533860" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91104048"/>
 </LiveUpdate>
</GroupIndex>
11/05 16:52:04 [2156] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
11/05 16:52:04 [2156] <GetIndexFileRequest:>COMPLETED
11/05 16:52:04 [2156] <IndexHeartbeatProc>GetIndexFile handling status: 0
11/05 16:52:04 [2156] <IndexHeartbeatProc>Switch Server flag=0
11/05 16:52:04 [2156] HEARTBEAT: Check Point 5.1
11/05 16:52:04 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:52:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:91104051
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:52:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:91023001
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:52:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:52:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:91104020
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:52:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:91104020
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:52:06 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:52:06 [2156] <PostEvent>going to post event=EVENT_SERVER_ONLINE
11/05 16:52:06 [2156] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
11/05 16:52:06 [2156] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
11/05 16:52:06 [2156] HEARTBEAT: Check Point 6
11/05 16:52:06 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
11/05 16:52:06 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
11/05 16:52:06 [2156] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
11/05 16:52:06 [2156] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
11/05 16:52:06 [2156] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
11/05 16:52:06 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 16:52:06 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 16:52:06 [2156] *** = <SSAInfo NameSpace="rpc" AgentID="3733D5FA0A64767F01E090EE945E0F03" ComputerID="21784BFC0A64767F01E090EE74F0DDC8" HardwareKey="A51E8197E55EBF502DE5B23BDA8B9936" GroupID="386A562C0A64767F01833C9C4F43542E">
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="." LogonUser="." HostDomain="." HostName="KIF-1611" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2394" ProcessorNum="1"/>
<Memory Size="534753280"/>
<Disk Letter="C:\" Size="41101688832"/>
<BIOS Version="DELL   - 8"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="386A-11/05/2009 12:16:21 483"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.114.28"/><DNS Address="10.100.118.63"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

11/05 16:52:06 [2156] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 325
11/05 16:52:06 [2156] <mfn_PostAgentInfo>Free memory difference: 6369280, Threshold: 22101810
11/05 16:52:06 [2156] <mfn_PostAgentInfo>Free disk space difference: 2863104, Threshold: 5129170320
11/05 16:52:06 [2156] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
11/05 16:52:06 [2156] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
11/05 16:52:06 [2156] <IndexHeartbeatProc>===UPLOAD STAGE===
11/05 16:52:06 [2156] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
11/05 16:52:06 [2156] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
11/05 16:52:06 [2156] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
11/05 16:52:06 [2156] <PrepareEventLog>initialized technology extension processing ok
11/05 16:52:06 [2156] <PrepareEventLog>Allow total logs to send=0
11/05 16:52:06 [2156] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
11/05 16:52:06 [2156] <IndexHeartbeatProc>Enter Push Session
11/05 16:52:06 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
11/05 16:52:06 [2156] <MaintainPushConnection:>Push Connecton!
11/05 16:52:06 [2156] ************CSN=40
11/05 16:52:06 [2156] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&groupid=64C633930A64767F004D350075E95D2E&mode=0&as=40
11/05 16:52:06 [2156] <MaintainPushConnection:>http://10.100.118.127:80/secars/secars.dll?h=25592C4AF3BE5F6B28A00E02013D72FCA05358A0EC2BAAE1C286385B22CB645F3B0B51BC6D2803895CF59752C4B7795B5BCFCD2A33C9F08FB22C92AACDBE230A481B5730B62E998428E4F42E37253912A3F91F174D28B19B8CE5556DE80C74CC3C438FB3DF16163DB59425989B1B35383827D97EB17D7324BB137B19915C6B41448E74C4D5BA43C0E4ABD883A17AE1503315BB9E68A0944A8C41A8DB27F18C29D1A9F544656FB1E905453CC4289B08709B09514D54E8F55B7875E03C90BAC322F85EF7A1493BC66EBA856D9603C184B4311235136875EDABEFBA2CB02DBB83970DBB7D8D05DE6BE1F303FCE90AB77BD05EE4458B81601054C8008E2E105BA4994ECFC72667BCDA479A9CED669A70EB0A
11/05 16:52:55 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:52:55 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:53:57 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:53:57 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:54:59 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:54:59 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:56:01 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:56:01 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:57:03 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:57:03 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:57:27 [2156] <MaintainPushConnection:>SMS return=200
11/05 16:57:27 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 16:57:27 [2156] <MaintainPushConnection:>RECEIVE STAGE COMPLETED
11/05 16:57:27 [2156] <MaintainPushConnection:>COMPLETED
11/05 16:57:27 [2156] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
11/05 16:57:27 [2156] HEARTBEAT: Check Point 8
11/05 16:57:27 [2156] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/05 16:57:27 [2156] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/05 16:57:27 [2156] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 16:57:27 ======
11/05 16:57:27 [2156] <IndexHeartbeatProc>Set Heartbeat Result= 2
11/05 16:57:27 [2156] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
11/05 16:57:27 [2156] Use new configuration
11/05 16:57:27 [2156] HEARTBEAT: Check Point Complete
11/05 16:57:27 [2156] <IndexHeartbeatProc>Done, Heartbeat=5seconds
11/05 16:57:27 [2156] </CSyLink::IndexHeartbeatProc()>
11/05 16:57:27 [2156] <CheckHeartbeatTimer>====== Heartbeat loop stops at 16:57:27 ======
11/05 16:57:33 [2156] <CheckHeartbeatTimer>====== Heartbeat loop starts at 16:57:33 ======
11/05 16:57:34 [2156] <GetOnlineNicInfo>:Netport Count=1
11/05 16:57:34 [2156] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs>
11/05 16:57:34 [2156] <CalcAgentHashKey>:CH=64C633930A64767F004D350075E95D2E1KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 16:57:34 [2156] <CalcAgentHashKey>:CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 16:57:34 [2156] <CalcAgentHashKey>:C=64C633930A64767F004D350075E95D2E1KIF-1611.
11/05 16:57:34 [2156] <CalcAgentHashKey>:CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 16:57:34 [2156] <CalcAgentHashKey>:UCH=64C633930A64767F004D350075E95D2E0..KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 16:57:34 [2156] <CalcAgentHashKey>:UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 16:57:34 [2156] <CalcAgentHashKey>:UC=64C633930A64767F004D350075E95D2E0..KIF-1611.
11/05 16:57:34 [2156] <CalcAgentHashKey>:UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 16:57:34 [2156] <DoHeartbeat>HardwareID=A51E8197E55EBF502DE5B23BDA8B9936
11/05 16:57:34 [2156] <DoHeartbeat>CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 16:57:34 [2156] <DoHeartbeat>CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 16:57:34 [2156] <DoHeartbeat>UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 16:57:34 [2156] <DoHeartbeat>UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 16:57:34 [2156] <DoHeartbeat> Set heartbeat event
11/05 16:57:34 [2156] Use new configuration
11/05 16:57:34 [2156] <CSyLink::IndexHeartbeatProc()>
11/05 16:57:34 [2156] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02437BF0
11/05 16:57:34 [2156] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 16:57:34 ======
11/05 16:57:34 [2156] HEARTBEAT: Check Point 1
11/05 16:57:34 [2156] Get First Server!
11/05 16:57:34 [2156] HEARTBEAT: Check Point 2
11/05 16:57:34 [2156] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/05 16:57:34 [2156] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/05 16:57:34 [2156] HEARTBEAT: Check Point 3
11/05 16:57:34 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
11/05 16:57:34 [2156] HEARTBEAT: Check Point 4
11/05 16:57:34 [2156] <IndexHeartbeatProc>===Get Index STAGE===
11/05 16:57:34 [2156] ************CSN=41
11/05 16:57:34 [2156] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&hid=A51E8197E55EBF502DE5B23BDA8B9936&groupid=64C633930A64767F004D350075E95D2E&mode=0&hbt=300&as=41&cn=[hex]4B49462D31363131&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/05 16:57:34 [2156] <GetIndexFileRequest:>http://10.100.118.127:80/secars/secars.dll?h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
11/05 16:57:34 [2156] <GetIndexFileRequest:>SMS return=200
11/05 16:57:34 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 16:57:34 [2156] <FindHeader>Sem-HashKey:=>C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 16:57:34 [2156] <FindHeader>Sem-LANSensor:=>0
11/05 16:57:34 [2156] <FindHeader>Sem-Signatue:=>09FC93442323FFC631FF8334F529D3EDAAFDFBA5CFF6DE460A1CA82F660C2537AD41BF2024349C269DA738CD19287D6C0AF9DBF778B2FE410FC4E51A242090B3F3812B3D495FE86442FF0F1E7C335C0836A044D831810BBE1327D689DFD877DB328B0A1B373E3AB3D1EBE103883C5649978137019F273806E86A4A5EE93FDDC3
11/05 16:57:34 [2156] <mfn_DoGetIndexFile200>Content Lenght => 1358
11/05 16:57:34 [2156] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
11/05 16:57:34 [2156] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D4E82BAF0A64767F0097304B7AEB5A83" ServerID="01A9BC730A64767F01F00B6AD4CE7963" GroupID="386A562C0A64767F01833C9C4F43542E" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "05/11/2009 16:17:12"> <Profile Checksum="FBBBDA646D32BB6527411E90D4901739" SerialNumber="386A-11/05/2009 12:16:21 483" LastModifiedTime="05/11/2009  16:17:12"/> <ConfigFile Checksum="CE9F9B8576EE68E0F4F00323843CFE98" LastModifiedTime="05/11/2009  16:17:12"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="05/11/2009  16:17:12"/> <SylinkFile Checksum="4EA56C7C6206E2D821C9EDACF06A2B76" LastModifiedTime="05/11/2009  16:17:12"/> <LSProfile Checksum="07A9A56D5EAE11FAF0158F3D181A6C99" SerialNumber ="386A-11/05/2009 12:16:21 483" LastModifiedTime ="05/11/2009  16:17:12"/>
 <LiveUpdate>
  <File Checksum="37585C2207004DCE9F75D2B9A48F59F9" DeltaFlag="1" FullSize="60724433" LastModifiedTime="1257416974792" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="91104051"/>
   <File Checksum="5DD8D298AE3EF8A28E031025B50FBEF6" DeltaFlag="1" FullSize="60915621" LastModifiedTime="1257416866626" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="91104051"/>
   <File Checksum="F1F97A7EBEB0CE4B8DAB27936B1B8755" DeltaFlag="1" FullSize="1269871" LastModifiedTime="1256335147920" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="91023001"/>
   <File Checksum="174DC6D6D8E6A2BF73E647694DC6C79E" DeltaFlag="1" FullSize="1253637" LastModifiedTime="1256335105982" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="91023001"/>
   <File Checksum="D851C80CA6B39C046CE5F6DB6EC2377A" DeltaFlag="1" FullSize="650307" LastModifiedTime="1208775294536" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="C45F954B7A7590C1AC26CC45DB3EE0C9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222725798073" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="3CBBE65E8302713E3346101001413A97" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223501951390" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="DAF1925B9FBB2A042F776EFC917309C9" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223501964577" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="8FE4B509581ED9F5A2E19DCD8F4F938E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223501979155" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
   <File Checksum="3BF457477B2BDA7811CBE8F92F0A5901" DeltaFlag="1" FullSize="76793" LastModifiedTime="1257354347421" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="91104020"/>
   <File Checksum="5B82E41315C9CC29AC75E2BDA7865F9B" DeltaFlag="1" FullSize="546561" LastModifiedTime="1257354357390" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="91104020"/>
   <File Checksum="1305E25C5081ADE47E08CEF93ED42B00" DeltaFlag="1" FullSize="546590" LastModifiedTime="1257354373937" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="91104020"/>
   <File Checksum="44E69A531A540AA5EEFE7290E639C140" DeltaFlag="1" FullSize="76787" LastModifiedTime="1257354386374" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="91104020"/>
   <File Checksum="DD9AD99EB58A4FB0D9C2F60622C27897" DeltaFlag="1" FullSize="6482" LastModifiedTime="1257386533860" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91104048"/>
 </LiveUpdate>
</GroupIndex>
11/05 16:57:34 [2156] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
11/05 16:57:34 [2156] <GetIndexFileRequest:>COMPLETED
11/05 16:57:34 [2156] <IndexHeartbeatProc>GetIndexFile handling status: 0
11/05 16:57:34 [2156] <IndexHeartbeatProc>Switch Server flag=0
11/05 16:57:34 [2156] HEARTBEAT: Check Point 5.1
11/05 16:57:34 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:57:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:91104051
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:57:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:91023001
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:57:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:57:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:91104020
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 16:57:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:91104020
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 16:57:35 [2156] <PostEvent>going to post event=EVENT_SERVER_ONLINE
11/05 16:57:35 [2156] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
11/05 16:57:35 [2156] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
11/05 16:57:35 [2156] HEARTBEAT: Check Point 6
11/05 16:57:35 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
11/05 16:57:36 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
11/05 16:57:36 [2156] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
11/05 16:57:36 [2156] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
11/05 16:57:36 [2156] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
11/05 16:57:36 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 16:57:36 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 16:57:36 [2156] *** = <SSAInfo NameSpace="rpc" AgentID="3733D5FA0A64767F01E090EE945E0F03" ComputerID="21784BFC0A64767F01E090EE74F0DDC8" HardwareKey="A51E8197E55EBF502DE5B23BDA8B9936" GroupID="386A562C0A64767F01833C9C4F43542E">
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="." LogonUser="." HostDomain="." HostName="KIF-1611" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2394" ProcessorNum="1"/>
<Memory Size="534753280"/>
<Disk Letter="C:\" Size="41101688832"/>
<BIOS Version="DELL   - 8"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="386A-11/05/2009 12:16:21 483"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.114.28"/><DNS Address="10.100.118.63"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

11/05 16:57:36 [2156] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 330
11/05 16:57:36 [2156] <mfn_PostAgentInfo>Free memory difference: 8679424, Threshold: 22101810
11/05 16:57:36 [2156] <mfn_PostAgentInfo>Free disk space difference: 1798144, Threshold: 5129170320
11/05 16:57:36 [2156] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
11/05 16:57:36 [2156] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
11/05 16:57:36 [2156] <IndexHeartbeatProc>===UPLOAD STAGE===
11/05 16:57:36 [2156] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
11/05 16:57:36 [2156] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
11/05 16:57:36 [2156] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
11/05 16:57:36 [2156] <PrepareEventLog>initialized technology extension processing ok
11/05 16:57:36 [2156] <PrepareEventLog>Allow total logs to send=0
11/05 16:57:36 [2156] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
11/05 16:57:36 [2156] <IndexHeartbeatProc>Enter Push Session
11/05 16:57:36 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
11/05 16:57:36 [2156] <MaintainPushConnection:>Push Connecton!
11/05 16:57:36 [2156] ************CSN=42
11/05 16:57:36 [2156] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&groupid=64C633930A64767F004D350075E95D2E&mode=0&as=42
11/05 16:57:36 [2156] <MaintainPushConnection:>http://10.100.118.127:80/secars/secars.dll?h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
11/05 16:58:06 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:58:06 [2152] </CSyLink::mfn_DownloadNow()>
11/05 16:59:08 [2152] <CSyLink::mfn_DownloadNow()>
11/05 16:59:08 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:00:10 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:00:10 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:01:14 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:01:14 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:02:16 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:02:16 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:02:57 [2156] <MaintainPushConnection:>SMS return=200
11/05 17:02:57 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 17:02:57 [2156] <MaintainPushConnection:>RECEIVE STAGE COMPLETED
11/05 17:02:57 [2156] <MaintainPushConnection:>COMPLETED
11/05 17:02:57 [2156] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
11/05 17:02:57 [2156] HEARTBEAT: Check Point 8
11/05 17:02:57 [2156] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/05 17:02:57 [2156] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/05 17:02:57 [2156] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 17:02:57 ======
11/05 17:02:57 [2156] <IndexHeartbeatProc>Set Heartbeat Result= 2
11/05 17:02:57 [2156] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
11/05 17:02:57 [2156] Use new configuration
11/05 17:02:57 [2156] HEARTBEAT: Check Point Complete
11/05 17:02:57 [2156] <IndexHeartbeatProc>Done, Heartbeat=5seconds
11/05 17:02:57 [2156] </CSyLink::IndexHeartbeatProc()>
11/05 17:02:57 [2156] <CheckHeartbeatTimer>====== Heartbeat loop stops at 17:02:57 ======
11/05 17:03:03 [2156] <CheckHeartbeatTimer>====== Heartbeat loop starts at 17:03:03 ======
11/05 17:03:04 [2156] <GetOnlineNicInfo>:Netport Count=1
11/05 17:03:04 [2156] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs>
11/05 17:03:04 [2156] <CalcAgentHashKey>:CH=64C633930A64767F004D350075E95D2E1KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 17:03:04 [2156] <CalcAgentHashKey>:CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 17:03:04 [2156] <CalcAgentHashKey>:C=64C633930A64767F004D350075E95D2E1KIF-1611.
11/05 17:03:04 [2156] <CalcAgentHashKey>:CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 17:03:04 [2156] <CalcAgentHashKey>:UCH=64C633930A64767F004D350075E95D2E0..KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 17:03:04 [2156] <CalcAgentHashKey>:UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 17:03:04 [2156] <CalcAgentHashKey>:UC=64C633930A64767F004D350075E95D2E0..KIF-1611.
11/05 17:03:04 [2156] <CalcAgentHashKey>:UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 17:03:04 [2156] <DoHeartbeat>HardwareID=A51E8197E55EBF502DE5B23BDA8B9936
11/05 17:03:04 [2156] <DoHeartbeat>CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 17:03:04 [2156] <DoHeartbeat>CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 17:03:04 [2156] <DoHeartbeat>UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 17:03:04 [2156] <DoHeartbeat>UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 17:03:04 [2156] <DoHeartbeat> Set heartbeat event
11/05 17:03:04 [2156] Use new configuration
11/05 17:03:04 [2156] <CSyLink::IndexHeartbeatProc()>
11/05 17:03:04 [2156] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02437BF0
11/05 17:03:04 [2156] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 17:03:04 ======
11/05 17:03:04 [2156] HEARTBEAT: Check Point 1
11/05 17:03:04 [2156] Get First Server!
11/05 17:03:04 [2156] HEARTBEAT: Check Point 2
11/05 17:03:04 [2156] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/05 17:03:04 [2156] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/05 17:03:04 [2156] HEARTBEAT: Check Point 3
11/05 17:03:04 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
11/05 17:03:04 [2156] HEARTBEAT: Check Point 4
11/05 17:03:04 [2156] <IndexHeartbeatProc>===Get Index STAGE===
11/05 17:03:04 [2156] ************CSN=43
11/05 17:03:04 [2156] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&hid=A51E8197E55EBF502DE5B23BDA8B9936&groupid=64C633930A64767F004D350075E95D2E&mode=0&hbt=300&as=43&cn=[hex]4B49462D31363131&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/05 17:03:04 [2156] <GetIndexFileRequest:>http://10.100.118.127:80/secars/secars.dll?h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
11/05 17:03:04 [2156] <GetIndexFileRequest:>SMS return=200
11/05 17:03:04 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 17:03:04 [2156] <FindHeader>Sem-HashKey:=>C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 17:03:04 [2156] <FindHeader>Sem-LANSensor:=>0
11/05 17:03:04 [2156] <FindHeader>Sem-Signatue:=>09FC93442323FFC631FF8334F529D3EDAAFDFBA5CFF6DE460A1CA82F660C2537AD41BF2024349C269DA738CD19287D6C0AF9DBF778B2FE410FC4E51A242090B3F3812B3D495FE86442FF0F1E7C335C0836A044D831810BBE1327D689DFD877DB328B0A1B373E3AB3D1EBE103883C5649978137019F273806E86A4A5EE93FDDC3
11/05 17:03:04 [2156] <mfn_DoGetIndexFile200>Content Lenght => 1358
11/05 17:03:04 [2156] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
11/05 17:03:04 [2156] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D4E82BAF0A64767F0097304B7AEB5A83" ServerID="01A9BC730A64767F01F00B6AD4CE7963" GroupID="386A562C0A64767F01833C9C4F43542E" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "05/11/2009 16:17:12"> <Profile Checksum="FBBBDA646D32BB6527411E90D4901739" SerialNumber="386A-11/05/2009 12:16:21 483" LastModifiedTime="05/11/2009  16:17:12"/> <ConfigFile Checksum="CE9F9B8576EE68E0F4F00323843CFE98" LastModifiedTime="05/11/2009  16:17:12"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="05/11/2009  16:17:12"/> <SylinkFile Checksum="4EA56C7C6206E2D821C9EDACF06A2B76" LastModifiedTime="05/11/2009  16:17:12"/> <LSProfile Checksum="07A9A56D5EAE11FAF0158F3D181A6C99" SerialNumber ="386A-11/05/2009 12:16:21 483" LastModifiedTime ="05/11/2009  16:17:12"/>
 <LiveUpdate>
  <File Checksum="37585C2207004DCE9F75D2B9A48F59F9" DeltaFlag="1" FullSize="60724433" LastModifiedTime="1257416974792" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="91104051"/>
   <File Checksum="5DD8D298AE3EF8A28E031025B50FBEF6" DeltaFlag="1" FullSize="60915621" LastModifiedTime="1257416866626" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="91104051"/>
   <File Checksum="F1F97A7EBEB0CE4B8DAB27936B1B8755" DeltaFlag="1" FullSize="1269871" LastModifiedTime="1256335147920" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="91023001"/>
   <File Checksum="174DC6D6D8E6A2BF73E647694DC6C79E" DeltaFlag="1" FullSize="1253637" LastModifiedTime="1256335105982" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="91023001"/>
   <File Checksum="D851C80CA6B39C046CE5F6DB6EC2377A" DeltaFlag="1" FullSize="650307" LastModifiedTime="1208775294536" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="C45F954B7A7590C1AC26CC45DB3EE0C9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222725798073" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="3CBBE65E8302713E3346101001413A97" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223501951390" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="DAF1925B9FBB2A042F776EFC917309C9" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223501964577" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="8FE4B509581ED9F5A2E19DCD8F4F938E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223501979155" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
   <File Checksum="3BF457477B2BDA7811CBE8F92F0A5901" DeltaFlag="1" FullSize="76793" LastModifiedTime="1257354347421" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="91104020"/>
   <File Checksum="5B82E41315C9CC29AC75E2BDA7865F9B" DeltaFlag="1" FullSize="546561" LastModifiedTime="1257354357390" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="91104020"/>
   <File Checksum="1305E25C5081ADE47E08CEF93ED42B00" DeltaFlag="1" FullSize="546590" LastModifiedTime="1257354373937" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="91104020"/>
   <File Checksum="44E69A531A540AA5EEFE7290E639C140" DeltaFlag="1" FullSize="76787" LastModifiedTime="1257354386374" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="91104020"/>
   <File Checksum="DD9AD99EB58A4FB0D9C2F60622C27897" DeltaFlag="1" FullSize="6482" LastModifiedTime="1257386533860" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91104048"/>
 </LiveUpdate>
</GroupIndex>
11/05 17:03:04 [2156] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
11/05 17:03:04 [2156] <GetIndexFileRequest:>COMPLETED
11/05 17:03:04 [2156] <IndexHeartbeatProc>GetIndexFile handling status: 0
11/05 17:03:04 [2156] <IndexHeartbeatProc>Switch Server flag=0
11/05 17:03:04 [2156] HEARTBEAT: Check Point 5.1
11/05 17:03:04 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:03:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:91104051
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:03:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:91023001
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:03:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:03:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:91104020
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:03:05 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:91104020
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:05 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:05 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:03:06 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:03:06 [2156] <PostEvent>going to post event=EVENT_SERVER_ONLINE
11/05 17:03:06 [2156] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
11/05 17:03:06 [2156] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
11/05 17:03:06 [2156] HEARTBEAT: Check Point 6
11/05 17:03:06 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
11/05 17:03:06 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
11/05 17:03:06 [2156] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
11/05 17:03:06 [2156] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
11/05 17:03:06 [2156] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
11/05 17:03:06 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 17:03:06 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 17:03:06 [2156] *** = <SSAInfo NameSpace="rpc" AgentID="3733D5FA0A64767F01E090EE945E0F03" ComputerID="21784BFC0A64767F01E090EE74F0DDC8" HardwareKey="A51E8197E55EBF502DE5B23BDA8B9936" GroupID="386A562C0A64767F01833C9C4F43542E">
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="." LogonUser="." HostDomain="." HostName="KIF-1611" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2394" ProcessorNum="1"/>
<Memory Size="534753280"/>
<Disk Letter="C:\" Size="41101688832"/>
<BIOS Version="DELL   - 8"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="386A-11/05/2009 12:16:21 483"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.114.28"/><DNS Address="10.100.118.63"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

11/05 17:03:06 [2156] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 330
11/05 17:03:06 [2156] <mfn_PostAgentInfo>Free memory difference: 6791168, Threshold: 22101810
11/05 17:03:06 [2156] <mfn_PostAgentInfo>Free disk space difference: 1798144, Threshold: 5129170320
11/05 17:03:06 [2156] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
11/05 17:03:06 [2156] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
11/05 17:03:06 [2156] <IndexHeartbeatProc>===UPLOAD STAGE===
11/05 17:03:06 [2156] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
11/05 17:03:06 [2156] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
11/05 17:03:06 [2156] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
11/05 17:03:06 [2156] <PrepareEventLog>initialized technology extension processing ok
11/05 17:03:06 [2156] <PrepareEventLog>Allow total logs to send=0
11/05 17:03:06 [2156] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
11/05 17:03:06 [2156] <IndexHeartbeatProc>Enter Push Session
11/05 17:03:06 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
11/05 17:03:06 [2156] <MaintainPushConnection:>Push Connecton!
11/05 17:03:06 [2156] ************CSN=44
11/05 17:03:06 [2156] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&groupid=64C633930A64767F004D350075E95D2E&mode=0&as=44
11/05 17:03:06 [2156] <MaintainPushConnection:>http://10.100.118.127:80/secars/secars.dll?h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
11/05 17:03:18 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:03:18 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:04:21 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:04:21 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:05:23 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:05:23 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:06:25 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:06:25 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:07:27 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:07:27 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:08:27 [2156] <MaintainPushConnection:>SMS return=200
11/05 17:08:27 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 17:08:27 [2156] <MaintainPushConnection:>RECEIVE STAGE COMPLETED
11/05 17:08:27 [2156] <MaintainPushConnection:>COMPLETED
11/05 17:08:27 [2156] <ScheduleNextUpdate>Manually assigned heartbeat=5 seconds
11/05 17:08:27 [2156] HEARTBEAT: Check Point 8
11/05 17:08:27 [2156] <PostEvent>going to post event=EVENT_SERVER_DISCONNECTED
11/05 17:08:27 [2156] <PostEvent>done post event=EVENT_SERVER_DISCONNECTED, return=0
11/05 17:08:27 [2156] <IndexHeartbeatProc>====== IndexHeartbeat Procedure stops at 17:08:27 ======
11/05 17:08:27 [2156] <IndexHeartbeatProc>Set Heartbeat Result= 2
11/05 17:08:27 [2156] <IndexHeartbeatProc>Sylink Comm.Flags: 'Connection Failed' = 0, 'Using Backup Sylink' = 0, 'Using Location Config' = 0
11/05 17:08:27 [2156] Use new configuration
11/05 17:08:27 [2156] HEARTBEAT: Check Point Complete
11/05 17:08:27 [2156] <IndexHeartbeatProc>Done, Heartbeat=5seconds
11/05 17:08:27 [2156] </CSyLink::IndexHeartbeatProc()>
11/05 17:08:27 [2156] <CheckHeartbeatTimer>====== Heartbeat loop stops at 17:08:27 ======
11/05 17:08:29 [2152] <CSyLink::mfn_DownloadNow()>
11/05 17:08:29 [2152] </CSyLink::mfn_DownloadNow()>
11/05 17:08:33 [2156] <CheckHeartbeatTimer>====== Heartbeat loop starts at 17:08:33 ======
11/05 17:08:34 [2156] <GetOnlineNicInfo>:Netport Count=1
11/05 17:08:34 [2156] <GetOnlineNicInfo>:NicInfo<SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs>
11/05 17:08:34 [2156] <CalcAgentHashKey>:CH=64C633930A64767F004D350075E95D2E1KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 17:08:34 [2156] <CalcAgentHashKey>:CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 17:08:34 [2156] <CalcAgentHashKey>:C=64C633930A64767F004D350075E95D2E1KIF-1611.
11/05 17:08:34 [2156] <CalcAgentHashKey>:CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 17:08:34 [2156] <CalcAgentHashKey>:UCH=64C633930A64767F004D350075E95D2E0..KIF-1611.A51E8197E55EBF502DE5B23BDA8B9936
11/05 17:08:34 [2156] <CalcAgentHashKey>:UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 17:08:34 [2156] <CalcAgentHashKey>:UC=64C633930A64767F004D350075E95D2E0..KIF-1611.
11/05 17:08:34 [2156] <CalcAgentHashKey>:UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 17:08:34 [2156] <DoHeartbeat>HardwareID=A51E8197E55EBF502DE5B23BDA8B9936
11/05 17:08:34 [2156] <DoHeartbeat>CHKey=C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 17:08:34 [2156] <DoHeartbeat>CKey=B2C2A81A7BAC9072E460F003C936EC7F
11/05 17:08:34 [2156] <DoHeartbeat>UCHKey=22A3F20F3E1E21D4C8A733BA52F988E6
11/05 17:08:34 [2156] <DoHeartbeat>UCKey=72183D9023F1D352DB0073A553DEBAED
11/05 17:08:34 [2156] <DoHeartbeat> Set heartbeat event
11/05 17:08:34 [2156] Use new configuration
11/05 17:08:34 [2156] <CSyLink::IndexHeartbeatProc()>
11/05 17:08:34 [2156] <IndexHeartbeatProc> Got ConfigObject to proceed the operation.. pSylinkConfig: 02437BF0
11/05 17:08:34 [2156] <IndexHeartbeatProc>====== Reg Heartbeat loop starts at 17:08:34 ======
11/05 17:08:34 [2156] HEARTBEAT: Check Point 1
11/05 17:08:34 [2156] Get First Server!
11/05 17:08:34 [2156] HEARTBEAT: Check Point 2
11/05 17:08:34 [2156] <PostEvent>going to post event=EVENT_SERVER_CONNECTING
11/05 17:08:34 [2156] <PostEvent>done post event=EVENT_SERVER_CONNECTING, return=0
11/05 17:08:34 [2156] HEARTBEAT: Check Point 3
11/05 17:08:34 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session to 30000
11/05 17:08:34 [2156] HEARTBEAT: Check Point 4
11/05 17:08:34 [2156] <IndexHeartbeatProc>===Get Index STAGE===
11/05 17:08:34 [2156] ************CSN=45
11/05 17:08:34 [2156] <mfn_MakeGetIndexUrl:>Request is: action=12&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&hid=A51E8197E55EBF502DE5B23BDA8B9936&groupid=64C633930A64767F004D350075E95D2E&mode=0&hbt=300&as=45&cn=[hex]4B49462D31363131&lun=[hex]41504F4B4F544F5350&udn=[hex]4D48472E4752
11/05 17:08:34 [2156] <GetIndexFileRequest:>http://10.100.118.127:80/secars/secars.dll?h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
11/05 17:08:34 [2156] <GetIndexFileRequest:>SMS return=200
11/05 17:08:34 [2156] <ParseHTTPStatusCode:>200=>200 OK
11/05 17:08:34 [2156] <FindHeader>Sem-HashKey:=>C7186EE9F34DF0F058FDDDAAF6BCE8C2
11/05 17:08:34 [2156] <FindHeader>Sem-LANSensor:=>0
11/05 17:08:34 [2156] <FindHeader>Sem-Signatue:=>09FC93442323FFC631FF8334F529D3EDAAFDFBA5CFF6DE460A1CA82F660C2537AD41BF2024349C269DA738CD19287D6C0AF9DBF778B2FE410FC4E51A242090B3F3812B3D495FE86442FF0F1E7C335C0836A044D831810BBE1327D689DFD877DB328B0A1B373E3AB3D1EBE103883C5649978137019F273806E86A4A5EE93FDDC3
11/05 17:08:34 [2156] <mfn_DoGetIndexFile200>Content Lenght => 1358
11/05 17:08:34 [2156] SignIf::VerifySignature(data, dataLen, sig, sigLen) => Verification Successful..
11/05 17:08:34 [2156] <mfn_DoGetIndexFile200>Index File: <?xml version="1.0" encoding="UTF-8" ?><GroupIndex SiteID="D4E82BAF0A64767F0097304B7AEB5A83" ServerID="01A9BC730A64767F01F00B6AD4CE7963" GroupID="386A562C0A64767F01833C9C4F43542E" GroupCheckSum="842CEA790A323210858413531" LastModifiedTime = "05/11/2009 16:17:12"> <Profile Checksum="FBBBDA646D32BB6527411E90D4901739" SerialNumber="386A-11/05/2009 12:16:21 483" LastModifiedTime="05/11/2009  16:17:12"/> <ConfigFile Checksum="CE9F9B8576EE68E0F4F00323843CFE98" LastModifiedTime="05/11/2009  16:17:12"/> <IDSFile Checksum="703A0AE1B8EC84B36CDBAECB7E800283" LastModifiedTime="05/11/2009  16:17:12"/> <SylinkFile Checksum="4EA56C7C6206E2D821C9EDACF06A2B76" LastModifiedTime="05/11/2009  16:17:12"/> <LSProfile Checksum="07A9A56D5EAE11FAF0158F3D181A6C99" SerialNumber ="386A-11/05/2009 12:16:21 483" LastModifiedTime ="05/11/2009  16:17:12"/>
 <LiveUpdate>
  <File Checksum="37585C2207004DCE9F75D2B9A48F59F9" DeltaFlag="1" FullSize="60724433" LastModifiedTime="1257416974792" Moniker="{C60DC234-65F9-4674-94AE-62158EFCA433}" Seq="91104051"/>
   <File Checksum="5DD8D298AE3EF8A28E031025B50FBEF6" DeltaFlag="1" FullSize="60915621" LastModifiedTime="1257416866626" Moniker="{1CD85198-26C6-4bac-8C72-5D34B025DE35}" Seq="91104051"/>
   <File Checksum="F1F97A7EBEB0CE4B8DAB27936B1B8755" DeltaFlag="1" FullSize="1269871" LastModifiedTime="1256335147920" Moniker="{42B17E5E-4E9D-4157-88CB-966FB4985928}" Seq="91023001"/>
   <File Checksum="174DC6D6D8E6A2BF73E647694DC6C79E" DeltaFlag="1" FullSize="1253637" LastModifiedTime="1256335105982" Moniker="{D3769926-05B7-4ad1-9DCF-23051EEE78E3}" Seq="91023001"/>
   <File Checksum="D851C80CA6B39C046CE5F6DB6EC2377A" DeltaFlag="1" FullSize="650307" LastModifiedTime="1208775294536" Moniker="{ECCC5006-EF61-4c99-829A-417B6C6AD963}" Seq="2008021700"/>
   <File Checksum="C45F954B7A7590C1AC26CC45DB3EE0C9" DeltaFlag="1" FullSize="669829" LastModifiedTime="1222725798073" Moniker="{C25CEA47-63E5-447b-8D95-C79CAE13FF79}" Seq="80929016"/>
   <File Checksum="3CBBE65E8302713E3346101001413A97" DeltaFlag="1" FullSize="88188" LastModifiedTime="1223501951390" Moniker="{EA960B33-2196-4d53-8AC4-D5043A5B6F9B}" Seq="80820001"/>
   <File Checksum="DAF1925B9FBB2A042F776EFC917309C9" DeltaFlag="1" FullSize="1662247" LastModifiedTime="1223501964577" Moniker="{DB206823-FFD2-440a-9B89-CCFD45F3F1CD}" Seq="80820001"/>
   <File Checksum="8FE4B509581ED9F5A2E19DCD8F4F938E" DeltaFlag="1" FullSize="1419193" LastModifiedTime="1223501979155" Moniker="{C13726A9-8DF7-4583-9B39-105B7EBD55E2}" Seq="80820001"/>
   <File Checksum="3BF457477B2BDA7811CBE8F92F0A5901" DeltaFlag="1" FullSize="76793" LastModifiedTime="1257354347421" Moniker="{CC40C428-1830-44ef-B8B2-920A0B761793}" Seq="91104020"/>
   <File Checksum="5B82E41315C9CC29AC75E2BDA7865F9B" DeltaFlag="1" FullSize="546561" LastModifiedTime="1257354357390" Moniker="{812CD25E-1049-4086-9DDD-A4FAE649FBDF}" Seq="91104020"/>
   <File Checksum="1305E25C5081ADE47E08CEF93ED42B00" DeltaFlag="1" FullSize="546590" LastModifiedTime="1257354373937" Moniker="{E1A6B4FF-6873-4200-B6F6-04C13BF38CF3}" Seq="91104020"/>
   <File Checksum="44E69A531A540AA5EEFE7290E639C140" DeltaFlag="1" FullSize="76787" LastModifiedTime="1257354386374" Moniker="{E5A3EBEE-D580-421e-86DF-54C0B3739522}" Seq="91104020"/>
   <File Checksum="DD9AD99EB58A4FB0D9C2F60622C27897" DeltaFlag="1" FullSize="6482" LastModifiedTime="1257386533860" Moniker="{4F889C4A-784D-40de-8539-6A29BAA43139}" Seq="91104048"/>
 </LiveUpdate>
</GroupIndex>
11/05 17:08:34 [2156] <GetIndexFileRequest:>RECEIVE STAGE COMPLETED
11/05 17:08:34 [2156] <GetIndexFileRequest:>COMPLETED
11/05 17:08:34 [2156] <IndexHeartbeatProc>GetIndexFile handling status: 0
11/05 17:08:34 [2156] <IndexHeartbeatProc>Switch Server flag=0
11/05 17:08:34 [2156] HEARTBEAT: Check Point 5.1
11/05 17:08:34 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:08:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {1CD85198-26C6-4bac-8C72-5D34B025DE35} Seq:91104051
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:08:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {42B17E5E-4E9D-4157-88CB-966FB4985928} Seq:91023001
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:08:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {DB206823-FFD2-440a-9B89-CCFD45F3F1CD} Seq:80820001
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:08:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {CC40C428-1830-44ef-B8B2-920A0B761793} Seq:91104020
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=1
11/05 17:08:35 [2156] <mfn_LiveUpdate> EVENT_LU_REQUIRE_STATUS returned ERROR_SYSTEM_UNKNOWN - Ignore LU content. Moniker: {E1A6B4FF-6873-4200-B6F6-04C13BF38CF3} Seq:91104020
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:35 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:35 [2156] <PostEvent>going to post event=EVENT_LU_REQUIRE_STATUS
11/05 17:08:36 [2156] <PostEvent>done post event=EVENT_LU_REQUIRE_STATUS, return=20
11/05 17:08:36 [2156] <PostEvent>going to post event=EVENT_SERVER_ONLINE
11/05 17:08:36 [2156] <PostEvent>done post event=EVENT_SERVER_ONLINE, return=0
11/05 17:08:36 [2156] <ScheduleNextUpdate>Reset Heartbeat factor index, hearbeat=300 seconds
11/05 17:08:36 [2156] HEARTBEAT: Check Point 6
11/05 17:08:36 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: AVMan
11/05 17:08:36 [2156] <mfn_PostAgentInfo>===REQUESTING PLUG-IN OP-STATE: LUMan
11/05 17:08:36 [2156] <mfn_PostAgentInfo>===REQUESTING CMC OP-STATE ===
11/05 17:08:36 [2156] <PostEvent>going to post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE
11/05 17:08:36 [2156] <PostEvent>done post event=EVENT_SERVER_REQUIRES_CLIENT_SESTATE, return=0
11/05 17:08:36 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 17:08:36 [2156] ReasonDescForFailure*** = Host Integrity check is disabled.
11/05 17:08:36 [2156] *** = <SSAInfo NameSpace="rpc" AgentID="3733D5FA0A64767F01E090EE945E0F03" ComputerID="21784BFC0A64767F01E090EE74F0DDC8" HardwareKey="A51E8197E55EBF502DE5B23BDA8B9936" GroupID="386A562C0A64767F01833C9C4F43542E">
<AgentHIInfo Status="3" ReasonCode="0" ReasonDescForFailure="Host Integrity check is disabled."/>
<SSAHostInfo>
<NetworkIdentity UserDomain="." LogonUser="." HostDomain="." HostName="KIF-1611" HostDesc=""/>
<SSAProduct Version="11.0.2000.1567"/>
<SSAOS Version="5.1.2600" Desc="Windows XP Professional " Type="17105154" ServicePack="Service Pack 2" Language="9"/>
<Processor ProcessorType="x86 Family 15 Model 2 Stepping 9" ProcessorClock="2394" ProcessorNum="1"/>
<Memory Size="534753280"/>
<Disk Letter="C:\" Size="41101688832"/>
<BIOS Version="DELL   - 8"/>
<TpmDevice Id="0"/>
<SSAProfile Version="5.0.0" SerialNumber="386A-11/05/2009 12:16:21 483"/>
<SSAIDS Version="" SerialNumber=""/>
<Deuce Signature="91023001"/>
<SSAUTC Bias="-120"/>
<DNSs><DNS Address="10.100.114.28"/><DNS Address="10.100.118.63"/></DNSs>
<WINSs><WINS Address="10.100.118.141"/><WINS Address="10.100.118.142"/></WINSs>
<DHCPServer Address="10.100.118.146"/><SSANICs><SSANIC Ip="10.100.114.31" Mac="00-0b-db-8b-94-43" Gateway="10.100.114.2" SubnetMask="0.0.0.0"/></SSANICs><Firewall OnOff="1" Installed="1"/>
</SSAHostInfo>
<RebootRequired Status="0"></RebootRequired>
<InstalledFeatures><Feature Id ="256"/></InstalledFeatures>
</SSAInfo>

11/05 17:08:36 [2156] <mfn_PostAgentInfo>Volatile op-state damper: 0, Interval passed: 330
11/05 17:08:36 [2156] <mfn_PostAgentInfo>Free memory difference: 9297920, Threshold: 22101810
11/05 17:08:36 [2156] <mfn_PostAgentInfo>Free disk space difference: 1798144, Threshold: 5129170320
11/05 17:08:36 [2156] <PostEvent>going to post event=EVENT_SYLINK_QUERY_COMMANDSTATUS
11/05 17:08:36 [2156] <PostEvent>done post event=EVENT_SYLINK_QUERY_COMMANDSTATUS, return=0
11/05 17:08:36 [2156] <IndexHeartbeatProc>===UPLOAD STAGE===
11/05 17:08:36 [2156] <PostEvent>going to post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG
11/05 17:08:36 [2156] <PostEvent>done post event=EVENT_SERVER_READY_TO_UPLOAD_EVENT_LOG, return=0
11/05 17:08:36 [2156] <IndexHeartbeatProc>===PREPARE EVENT LOG STAGE===
11/05 17:08:36 [2156] <PrepareEventLog>initialized technology extension processing ok
11/05 17:08:36 [2156] <PrepareEventLog>Allow total logs to send=0
11/05 17:08:36 [2156] <IndexHeartbeatProc>Communication Mode=0(Push Mode)
11/05 17:08:36 [2156] <IndexHeartbeatProc>Enter Push Session
11/05 17:08:36 [2156] <IndexHeartbeatProc>Setting the session timeout on Profile Session (for MaintainPushConnection) to 320000
11/05 17:08:36 [2156] <MaintainPushConnection:>Push Connecton!
11/05 17:08:36 [2156] ************CSN=46
11/05 17:08:36 [2156] <mfn_MakeGetPushUrl:>Request is: action=128&hostid=3733D5FA0A64767F01E090EE945E0F03&chk=C7186EE9F34DF0F058FDDDAAF6BCE8C2&ck=B2C2A81A7BAC9072E460F003C936EC7F&uchk=22A3F20F3E1E21D4C8A733BA52F988E6&uck=72183D9023F1D352DB0073A553DEBAED&groupid=64C633930A64767F004D350075E95D2E&mode=0&as=46
11/05 17:08:36 [2156] <MaintainPushConnection:>http://10.100.118.127:80/secars/secars.dll?h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
 

this is from one of my clients

After changing GUP  whether your clients getting update? 

still from Sepm......

Whether C:\Program Files\Symantec\Symantec Endpoint Protection\SharedUpdates is getting created in new gup and it is downloading the updates to this folder? 

Yes it is created normally and it has updates and GUP.DAT but i don't know why any client in the sylink has the ip of sepm and not the gup.Is there a line i should see to confirm that they download from gup?

What is the updation date of your clients?
Your network team will be able to monitor the traffic from the sepm server and hey can tell you from were it is downloading the updates? 

Whether all your clients having a green dot in the yellow shield? 

yes all of them and in client logs i can see that they start using GUP at the right ip...

Whether all the GUPs in your setup having the problem or only for one particular group?
What is the version of SEP you are using in server and clients? 

It is only one gup for one group.11.0.2 is my server and my clients...

The version 11.0.2 having some known issues related to GUP
Pls upgrade to RU 5
 

Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x
Configuring the Group Update Provider (GUP) in Symantec Endpoint Protection 11.0 RU5 
Migrating to Symantec Endpoint Protection 11.0 RU5

You have to migrate your SEPM and all clients to RU5 for getting the benefit. 

Is there a guide for the migration?AravindKM thank you for your time.....

You can use the "Migrating to Symantec Endpoint Protection 11.0 RU5"  doc which is present in my earlier post for migration..
or 
Do you need clarification on anything particular?