Ngutil-20170425 at 144110 11 4

4/25/2017 14:15:58.
733 I General ConnectNamedPipe() got m

essage from client
4/25/2017 14:15:58.733 D General SendRLGMsg id<32769> don
e
4/25/2017 14:15:58.733 D General CallbackPollLogging proc
essed msg<1> status<0>
4/25/2017 14:16:00.823 I General ConnectNamedPipe() got m
essage from client
4/25/2017 14:16:00.823 D General SendRLGMsg id<32769> don
e
4/25/2017 14:16:00.823 D General CallbackPollLogging proc
essed msg<1> status<0>
4/25/2017 14:16:26.369 I Vpn Outgoing call initiated
by user
4/25/2017 14:16:26.369 D Vpn VPN create tunnel 137.71
.223.69
4/25/2017 14:16:26.369 I Vpn Set VPN state from Idle
to Accept, reason 00000000
4/25/2017 14:16:26.369 D General ESPCrypto()
4/25/2017 14:16:26.369 I Tunnel Set tunnel state from Id
le to Initialized
4/25/2017 14:16:26.369 I Tunnel Set tunnel state from In
itialized to Accept
4/25/2017 14:16:26.369 I Tunnel Processing the VPN state
transition, from Idle to Accept, reason 0x00000000
4/25/2017 14:16:26.369 I Tunnel Set tunnel state from Ac
cept to RasNegotiate
4/25/2017 14:16:26.369 I Tunnel Begin RAS negotiation
4/25/2017 14:16:26.872 I Tunnel Receive RasIpcCmd Hello,
server adsjswssl1.analog.com
4/25/2017 14:16:26.872 D Tunnel Use existing user cache
entry for S-1-5-21-8915387-325452579-1788637320-114116
4/25/2017 14:16:26.872 D Http The HTTP proxy client wi
ll not be used.
4/25/2017 14:16:26.872 I Tunnel Machine identifier is "S
-1-5-21-3454780394-547201992-2945354962"
4/25/2017 14:16:26.872 I Tunnel Machine identifier for t
his tunnel instance is "S-1-5-21-3454780394-547201992-2945354962"
4/25/2017 14:16:26.872 I Tunnel (Existing) Tunnel identi
fier for the server is "{4FC7CA48-9682-4184-AFCF-EB97D9FABBFD}" (read status is
0, format status is 0)
4/25/2017 14:16:26.872 I Tunnel End RAS negotiation
4/25/2017 14:16:26.872 I Tunnel Set tunnel state from Ra
sNegotiate to Connecting
4/25/2017 14:16:26.872 I Tunnel Establishing tunnel conn
ection to 137.71.223.69:443
4/25/2017 14:16:26.872 I Tunnel Interface 192.168.1.100,
'Marvell AVASTAR Wireless-AC Network Controller', speed 39000000
4/25/2017 14:16:26.872 I Tunnel Interface 192.168.1.100
selected for destination 137.71.223.69, source 0.0.0.0
4/25/2017 14:16:26.872 I Vpn Set VPN state from Accep
t to Connecting, reason 00000000
transition, from Accept to Connecting, reason 0x00000000
4/25/2017 14:16:27.265 I Vpn Set VPN state from Conne
cting to Connected, reason 00000000
4/25/2017 14:16:27.265 I Tunnel Tunnel connection 192.16
8.1.100:52675->137.71.223.69:443 completed, status 0x00000000
4/25/2017 14:16:27.265 D Tunnel Send connection status m
essage to VPN monitor, msg 0x00008004, wparam 0x00000000, lparam 0x00000000
transition, from Connecting to Connected, reason 0x00000000
4/25/2017 14:16:27.265 I Tunnel Set tunnel state from Co
nnecting to ProxyNegotiate
4/25/2017 14:16:27.265 I Tunnel Begin proxy negotiation
4/25/2017 14:16:27.265 I Tunnel End proxy negotiation
4/25/2017 14:16:27.265 I Tunnel Set tunnel state from Pr
oxyNegotiate to SslNegotiate
4/25/2017 14:16:27.265 I Tunnel Begin SSL negotiation
4/25/2017 14:16:27.265 I Tunnel Ssl supported algorithm
0: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
1: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
2: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
3: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
4: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
5: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
6: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
7: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
8: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
9: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
10: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
11: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
12: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
13: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
14: TLS_DHE_RSA_WITH_AES_256_CBC_SHA
15: TLS_DHE_RSA_WITH_AES_128_CBC_SHA
16: TLS_RSA_WITH_AES_256_GCM_SHA384
17: TLS_RSA_WITH_AES_128_GCM_SHA256
18: TLS_RSA_WITH_AES_256_CBC_SHA256
19: TLS_RSA_WITH_AES_128_CBC_SHA256
20: TLS_RSA_WITH_AES_256_CBC_SHA
21: TLS_RSA_WITH_AES_128_CBC_SHA
22: TLS_RSA_WITH_3DES_EDE_CBC_SHA
23: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
24: TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
25: TLS_DHE_DSS_WITH_AES_256_CBC_SHA
26: TLS_DHE_DSS_WITH_AES_128_CBC_SHA
27: TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
28: TLS_RSA_WITH_RC4_128_SHA
29: TLS_RSA_WITH_RC4_128_MD5
30: TLS_RSA_WITH_NULL_SHA256
31: TLS_RSA_WITH_NULL_SHA
32: TLS_PSK_WITH_AES_256_GCM_SHA384
33: TLS_PSK_WITH_AES_128_GCM_SHA256
34: TLS_PSK_WITH_AES_256_CBC_SHA384
35: TLS_PSK_WITH_AES_128_CBC_SHA256
36: TLS_PSK_WITH_NULL_SHA384
37: TLS_PSK_WITH_NULL_SHA256
4/25/2017 14:16:27.281 D General SslNegotiateBegin, using
NG-SIG size<188> hSize<184>
4/25/2017 14:16:27.281 D General _findClientHelloCompress
ionList buflen<193>
4/25/2017 14:16:27.281 D General SslNegotiateBegin, cmpOf
fset<106>
4/25/2017 14:16:27.281 D General SslNegotiateBegin, NG-SI
G update cmp_lis_len<1> cmp_end<107> size<189> hSize<185>
4/25/2017 14:16:27.579 I Tunnel SSL negotiation, receive
d 62 bytes
4/25/2017 14:16:27.579 D General ProcessSslNegotiateRecei
ve Processed: 62 used: 62 avail: 62
d 4919 bytes
d 9 bytes
4/25/2017 14:16:27.784 I Tunnel SSL negotiation, send 34
2 bytes
d 191 bytes
d 6 bytes
d 69 bytes
4/25/2017 14:16:28.004 I Tunnel Security package: Schann
el, Schannel Security Package
4/25/2017 14:16:28.004 I Tunnel SSL connection info: pro
tocol SP_PROT_TLS1_2_CLIENT, cipher TLS_RSA_WITH_AES_128_CBC_SHA (128 bit), hash
SHA1 (160 bit)
4/25/2017 14:16:28.004 D General KeyExchange[RSA] CertTyp
e[RSA] KTye[0]
4/25/2017 14:16:28.004 I Tunnel SSL key info: signature
algorithm RSA, encryption algorithm AES, key length 128
4/25/2017 14:16:28.004 I Tunnel Ssl stream sizes: Header
21, Trailer 36, MaxMsg 16384, Buffers 4, BlockSize 16
4/25/2017 14:16:28.004 I Tunnel End SSL negotiation
4/25/2017 14:16:28.004 I Tunnel Set tunnel state from Ss
lNegotiate to TunnelNegotiate
4/25/2017 14:16:28.004 I Tunnel Begin tunnel negotiation
4/25/2017 14:16:28.004 D General SetESPEnabled enableEsp<
1>
4/25/2017 14:16:28.004 D General SetCMPEnabled enableCmp<
1>
4/25/2017 14:16:28.019 I Tunnel Start the protocol engin
e.
4/25/2017 14:16:28.019 I Tunnel Set protocol state from
ProtoInitialize to ProtoVersionNegotiate
4/25/2017 14:16:28.019 D Tunnel Sent: ProtocolVersionMes
sage, Length: 24, Version: 1, Flags: 0
0000: 10 0a 00 18 00 01 00 01-00 00 00 00 00 05 00 08 ................
0010: 65 6e 2d 55 53 00 00 00 en-US...
4/25/2017 14:16:28.224 I Tunnel Protocol message Protoco
lVersionAckMessage received, size 8, Allow
4/25/2017 14:16:28.224 D Tunnel Received: ProtocolVersio
nAckMessage, Length: 8, Version: 1, Flags: 0
0000: 10 0b 00 08 40 03 34 8b ....@.4.
ProtoVersionNegotiate to ProtoAuthenticate
4/25/2017 14:16:28.224 D Tunnel Sent: KeepAliveMessage,
Length: 1509, Version: 1, Flags: 0
0000: 10 1c 05 e5 ee ee ee ee-ee ee ee ee ee ee ee ee ................
0010: ee ee ee ee ee ee ee ee-ee ee ee ee ee ee ee ee ................
00a0: ee ee ee ee ee ee ee ee-ee ee ee ee ee ee ee ee ................
4/25/2017 14:16:28.224 D Tunnel Sent: TeamIdMessage, Len
gth: 24, Version: 1, Flags: 0
0000: 10 10 00 18 00 10 00 10-30 51 c4 dc 74 32 e1 67 ........0Q..t2.g
0010: 58 73 9e 38 f8 ed b3 57 Xs.8...W
4/25/2017 14:16:28.459 I Tunnel Protocol message Autenti
cationAckMessage received, size 24, Allow
4/25/2017 14:16:28.459 D Tunnel Received: AutenticationA
ckMessage, Length: 24, Version: 1, Flags: 0
0000: 10 13 00 18 00 10 00 10-30 51 c4 dc 74 32 e1 67 ........0Q..t2.g
0010: 58 73 9e 38 f8 ed b3 57 Xs.8...W
4/25/2017 14:16:28.459 D General Capex LaunchMode: CT
ProtoAuthenticate to ProtoCapabilitiesExchange
4/25/2017 14:16:28.459 D Tunnel Sent: CapabilitiesExchan
geMessage, Length: 180, Version: 1, Flags: 0
0000: 10 14 00 b4 00 09 00 00-00 01 00 00 00 01 00 04 ................
0010: 01 00 00 00 00 07 00 00-00 01 00 04 01 00 00 00 ................
0020: 00 02 01 00 00 28 00 2c-4d 69 63 72 6f 73 6f 66 .....(.,Microsof
0030: 74 20 57 69 6e 64 6f 77-73 20 31 30 2c 20 78 36 t Windows 10, x6
0040: 34 2c 20 50 72 6f 66 65-73 73 69 6f 6e 61 6c 20 4, Professional
0050: 00 00 00 00 00 03 01 00-00 18 00 1c 31 30 2e 30 ............10.0
0060: 2e 31 34 33 39 33 20 20-42 75 69 6c 64 20 31 34 .14393 Build 14
0070: 33 39 33 20 00 00 00 00-00 04 00 00 00 01 00 04 393 ............
0080: 01 00 00 00 00 05 00 00-00 01 00 04 01 00 00 00 ................
0090: 00 06 00 00 00 01 00 04-00 00 00 00 00 08 00 00 ................
00a0: 00 01 00 04 01 00 00 00-00 0b 00 00 00 02 00 04 ................
4/25/2017 14:16:28.806 I Tunnel Protocol message Capabil
itiesExchangeMessage received, size 68, Allow
4/25/2017 14:16:28.806 D Tunnel Received: CapabilitiesEx
changeMessage, Length: 68, Version: 1, Flags: 0
0000: 10 14 00 44 00 05 00 00-00 01 00 00 00 01 00 04 ...D............
0010: 01 00 00 00 00 05 00 00-00 01 00 04 01 00 00 00 ................
0020: 00 0b 00 00 00 02 00 04-00 03 00 00 00 08 00 00 ................
0030: 00 04 00 04 00 00 02 00-00 09 00 00 00 01 00 04 ................
0040: 00 00 00 00 ....
4/25/2017 14:16:28.806 D General capex-def-attrType<1>
4/25/2017 14:16:28.806 D General EspFlg[768 - 1]
4/25/2017 14:16:28.806 D General Ztype<8> strat<1> thresh
old<512>
4/25/2017 14:16:28.806 I General Using LZ4 = 1 Compressio
n
4/25/2017 14:16:28.806 D General capex-def-attrType<9>
4/25/2017 14:16:28.806 D General capex-entries<5> esp_ena
bled<1> cmp_enabled<1> do_esp<1> do_cmp<1> threshold<512>
4/25/2017 14:16:28.806 I General Compression: ENABLED
ProtoCapabilitiesExchange to ProtoClientVersionNegotiate
4/25/2017 14:16:28.806 D Tunnel Sent: ClientVersionMessa
ge, Length: 12, Version: 1, Flags: 0
0000: 10 15 00 0c 00 0b 00 28-00 00 01 6b .......(...k
4/25/2017 14:16:29.120 I Tunnel Protocol message ClientV
ersionAckMessage received, size 4, Allow
4/25/2017 14:16:29.120 D Tunnel Received: ClientVersionA
ckMessage, Length: 4, Version: 1, Flags: 0
0000: 10 16 00 04 ....
ProtoClientVersionNegotiate to ProtoESPConfigure
4/25/2017 14:16:29.120 I Tunnel Protocol message ESPConf
igMessage received, size 96, Allow
4/25/2017 14:16:29.120 D Tunnel Received: ESPConfigMessa
ge, Length: 96, Version: 1, Flags: 0
0000: 10 1f 00 60 00 18 28 0a-00 08 28 0a 11 94 02 01 ...`..(...(.....
0010: 02 01 00 00 00 48 00 48-45 3b f1 de ba 16 fb ff .....H.HE;......
0020: 4f 2c bc 02 f7 84 2a 9a-7d b5 d5 99 d1 b1 03 d0 O,....*.}.......
0030: 10 f8 fb 46 5b 95 61 07-c7 d6 76 31 93 6b 1f a8 ...F[.a...v1.k..
0040: 70 1c c4 a1 d4 d0 5f c0-7e 09 38 3c 03 71 24 b7 p....._.~.8<.q$.
0050: ee 31 ed fc 2f d5 bf 82-25 4e a3 69 b6 bf 72 33 .1../....N.i..r3
4/25/2017 14:16:29.120 D General ESPConfig_SetESPConfig
cmpThreshold : 512
rcvSpi : 0x18280a
sndSpi : 0x8280a
port : 4500
mode : 2
calg : 1
malg : 2
keyLen : 72
key : 0x70d6c0
doEsp : 1
doCmp : 1
doKPrb : 0
4/25/2017 14:16:29.120 D General DoESPConfigure status: 0
4/25/2017 14:16:29.120 D General Set ESP state from EspId
le to EspIdle
4/25/2017 14:16:29.120 D General Init len<16> alg<1> klen
<72>
4/25/2017 14:16:29.120 D General Init_mac alg<SHA1>
4/25/2017 14:16:29.120 D General Init<1> ms<20> ivs<16> b
s<16> GCM<0>
4/25/2017 14:16:29.120 I General CreateEspUdpSocket WSAc
192.168.1.100:63361 --> 137.71.223.69:4500
4/25/2017 14:16:29.120 D General Start --> 137.71.223.69:
4500 uStatus: 0 rStatus: 0 iStatus: 0
4/25/2017 14:16:29.120 D General CalcMTU in-mtu: 1500 mtu
: 1500 - 1404
4/25/2017 14:16:29.120 D General Set ESP state from EspId
le to EspInitialized
4/25/2017 14:16:29.120 D General Start index: 9 mtu: 1404
mtuo: 1500 status: 0
4/25/2017 14:16:29.120 D General Set ESP state from EspIn
itialized to EspMtuValidate
4/25/2017 14:16:29.120 D General Write sent: 0 status: 0x
3e5
4/25/2017 14:16:29.120 D General ProbeMtu status: 0
4/25/2017 14:16:29.120 D General Sent-Error status: 0x6f8
4/25/2017 14:16:29.120 D General Connection retries: 0
4/25/2017 14:16:29.120 I General HandleError state: EspMt
uValidate status: 0x6f8 omtu: 1500
4/25/2017 14:16:29.120 D General EspWriteTry mtu: 1404 le
n: 1400
4/25/2017 14:16:29.120 D General ValidateMtu status: 0
4/25/2017 14:16:29.120 D General Start status: 0 state: E
spMtuValidate
4/25/2017 14:16:29.120 D General ESPNegotiateBegin status
: 0
4/25/2017 14:16:29.120 D General EspWriteTry WSASend fail
ed 0x2738
: 1492 - 1388
n: 1384
ed 0x2738
: 1484 - 1388
n: 1384
ed 0x2738
: 1476 - 1372
n: 1368
4/25/2017 14:16:29.120 I General EspWriteTry bSent 1420
4/25/2017 14:16:29.120 I General HandleError esp-try m_om
tu: 1476 status: 0
4/25/2017 14:16:29.434 D General MtuCheckTimer Re-probing
-mtu tOut: 300
4/25/2017 14:16:29.434 D General ProcessControlMsg ctrl-m
sg len: 1372
4/25/2017 14:16:29.434 I General ProcessControlMsg ctrl-e
cho-rsp mtu: 1372 len: 1372
4/25/2017 14:16:29.434 I General Tunnel-SetMtu mtu: 1504-
>mtu: 1372
4/25/2017 14:16:29.434 I General SetMTU mtu: 1372
4/25/2017 14:16:29.434 D General MtuProbeComplete nPR: 0
status: 0 state: EspMtuValidate
4/25/2017 14:16:29.434 D General ProcessControlMsg status
: 0
4/25/2017 14:16:29.434 D General Write sent: 1420 status:
0
sg len: 1372
>mtu: 1372
: 0
4/25/2017 14:16:29.749 D General MtuCheckTimer Re-probing
-mtu tOut: 300
0
sg len: 1372
>mtu: 1372
4/25/2017 14:16:30.047 D General Set ESP state from EspMt
uValidate to EspRun
4/25/2017 14:16:30.047 D General MtuProbeComplete created
snd-wrt-list count : 32
scount : 32
wcount : 32
doCmp : 1
: 0
4/25/2017 14:16:30.047 D General ESPContinue espStatus: 0
4/25/2017 14:16:30.047 I General ESP: ENABLED
ProtoESPConfigure to ProtoClientConfigure
4/25/2017 14:16:30.063 D General MtuCheckTimer invalid st
ate: EspRun
4/25/2017 14:16:30.362 I Tunnel Protocol message AlertMe
ssage received, size 92, Allow
4/25/2017 14:16:30.362 D Tunnel Received: AlertMessage,
Length: 92, Version: 1, Flags: 0
0000: 10 04 00 5c 00 00 00 03-00 15 03 00 00 49 00 4c ...\.........I.L
0010: 54 68 65 73 65 20 6c 6f-63 61 6c 20 61 64 64 72 These local addr
0020: 65 73 73 65 73 20 6d 61-79 20 63 6f 6e 66 6c 69 esses may confli
0030: 63 74 20 77 69 74 68 20-74 68 65 20 72 65 6d 6f ct with the remo
0040: 74 65 20 6e 65 74 77 6f-72 6b 3a 20 31 33 37 2e te network: 137.
0050: 37 31 2e 32 32 33 2e 36-39 00 00 00 71.223.69...
4/25/2017 14:16:30.362 W Tunnel ALERT(3): These local ad
dresses may conflict with the remote network: 137.71.223.69
4/25/2017 14:16:30.661 I Tunnel Protocol message ClientC
onfigurationMessage received, size 4512, Extended, Allow
4/25/2017 14:16:30.661 D Tunnel Received: ClientConfigur
ationMessage, Length: 4512, Version: 1, Flags: 1
0000: 11 18 11 a0 01 01 24 94-00 00 18 f8 00 05 01 03 ......$.........
0010: 02 03 02 20 00 7c 00 07-00 00 38 40 0a 52 df 28 ... .|....8@.R.(
0020: 0a 52 34 6e 0a 40 33 6e-0a 40 35 6e 0a 52 34 6e .R4n.@3n.@5n.R4n
0030: 0a 40 35 6e 89 47 df 45-c0 a8 01 01 c0 a8 01 64 .@5n.G.E.......d
0040: 00 0d 00 10 61 64 2e 61-6e 61 6c 6f 67 2e 63 6f ....ad.analog.co
0050: 6d 00 00 00 00 0a 00 0c-61 6e 61 6c 6f 67 2e 63 m.......analog.c
0060: 6f 6d 00 00 00 19 00 1c-53 55 42 4e 45 54 3d 31 om......SUBNET=1
0070: 30 2e 30 2e 30 2e 30 2c-32 35 35 2e 30 2e 30 2e 0.0.0.0,255.0.0.
0080: 30 00 00 00 00 20 00 24-53 55 42 4e 45 54 3d 31 0.... .$SUBNET=1
0090: 39 30 2e 39 2e 32 30 30-2e 30 2c 32 35 35 2e 32 90.9.200.0,255.2
00a0: 35 35 2e 32 35 32 2e 30-00 00 00 00 00 22 00 24 55.252.0.....".$
4/25/2017 14:16:30.661 D Tunnel Extended message reassem
bly: ID 9364, Fragment 1, FragmentSize 4500, Offset 0, TotalSize 6392, Complete
0
4/25/2017 14:16:30.661 I Tunnel Protocol message ClientC
onfigurationMessage received, size 1904, Extended, Allow
4/25/2017 14:16:30.661 D Tunnel Received: ClientConfigur
ationMessage, Length: 1904, Version: 1, Flags: 1
0000: 11 18 07 70 01 00 24 94-00 00 11 94 45 58 43 4c ...p..$.....EXCL
0010: 55 44 45 5f 48 4f 53 54-4e 41 4d 45 3d 73 68 6f UDE_HOSTNAME=sho
0020: 70 70 69 6e 67 63 61 72-74 2e 61 6e 61 6c 6f 67 ppingcart.analog
0030: 2e 63 6f 6d 00 00 00 00-00 22 00 24 45 58 43 4c .com.....".$EXCL
0040: 55 44 45 5f 48 4f 53 54-4e 41 4d 45 3d 76 69 64 UDE_HOSTNAME=vid
0050: 65 6f 73 2e 61 6e 61 6c-6f 67 2e 63 6f 6d 00 00 eos.analog.com..
0060: 00 23 00 24 45 58 43 4c-55 44 45 5f 48 4f 53 54 .#.$EXCLUDE_HOST
0070: 4e 41 4d 45 3d 77 65 62-74 69 65 72 2e 61 6e 61 NAME=webtier.ana
0080: 6c 6f 67 2e 63 6f 6d 00-00 20 00 24 45 58 43 4c log.com.. .$EXCL
0090: 55 44 45 5f 48 4f 53 54-4e 41 4d 45 3d 77 69 6b UDE_HOSTNAME=wik
00a0: 69 2e 61 6e 61 6c 6f 67-2e 63 6f 6d 00 00 00 00 i.analog.com....
4/25/2017 14:16:30.661 D Tunnel Extended message reassem
bly: ID 9364, Fragment 2, FragmentSize 1892, Offset 4500, TotalSize 6392, Comple
te 1
4/25/2017 14:16:30.661 I Tunnel ClientConfig: IP: 10.82.
223.40, Mode: SplitTunnel, Flags: 0x0005, InactivityTimout: 14400 secs
4/25/2017 14:16:30.661 I Tunnel ClientConfig: DnsServer
0: 10.82.52.110
1: 10.64.51.110
2: 10.64.53.110
4/25/2017 14:16:30.661 I Tunnel ClientConfig: WinsServer
0: 10.82.52.110
4/25/2017 14:16:30.661 I Tunnel ClientConfig: WinsServer
1: 10.64.53.110
4/25/2017 14:16:30.661 I Tunnel ClientConfig: ExcludeIp
0: 10.82.223.40
1: 137.71.223.69
2: 192.168.1.1
3: 192.168.1.100
4/25/2017 14:16:30.661 I Tunnel ClientConfig: DomainSuff
ix 0: ad.analog.com
4/25/2017 14:16:30.661 I Tunnel ClientConfig: DomainSuff
ix 1: analog.com
4/25/2017 14:16:30.661 I Tunnel ClientConfig: RoutingRul
e 0: SUBNET=10.0.0.0,255.0.0.0
e 1: SUBNET=190.9.200.0,255.255.252.0
e 2: SUBNET=192.168.117.0,255.255.255.0
e 3: SUBNET=192.168.16.0,255.255.255.0
e 4: SUBNET=192.168.66.0,255.255.255.0
e 5: HOSTNAME=*.sciencedirect.com
e 6: HOSTNAME=136.146.210.101
e 7: HOSTNAME=136.146.210.102
e 8: HOSTNAME=136.146.210.78
e 9: HOSTNAME=137.71.25.137
e 10: HOSTNAME=137.71.25.170
e 11: HOSTNAME=137.71.25.172
e 12: HOSTNAME=166.78.207.49
e 13: HOSTNAME=203.117.88.72
e 14: HOSTNAME=203.117.88.73
e 15: HOSTNAME=204.11.56.48
e 16: HOSTNAME=23.7.134.153
e 17: HOSTNAME=34.193.73.68
e 18: HOSTNAME=52.18.56.238
e 19: HOSTNAME=52.196.227.247
e 20: HOSTNAME=52.201.40.188
e 21: HOSTNAME=52.204.37.87
e 22: HOSTNAME=52.30.19.98
e 23: HOSTNAME=52.45.212.14
e 24: HOSTNAME=52.52.37.62
e 25: HOSTNAME=52.6.76.195
e 26: HOSTNAME=52.69.78.66
e 27: HOSTNAME=52.73.93.111
e 28: HOSTNAME=52.86.49.207
e 29: HOSTNAME=54.173.5.197
e 30: HOSTNAME=67.231.154.66
e 31: HOSTNAME=69.63.129.138
e 32: HOSTNAME=96.43.144.26
e 33: HOSTNAME=96.43.150.107
e 34: HOSTNAME=96.43.150.235
e 35: SUBNET=136.146.0.0,255.254.0.0
e 36: SUBNET=140.234.252.0,255.255.255.0
e 37: SUBNET=140.234.254.0,255.255.255.0
e 38: SUBNET=140.98.193.112,255.255.255.255
e 39: SUBNET=150.175.58.10,255.255.255.255
e 40: SUBNET=173.254.190.152,255.255.255.255
e 41: SUBNET=182.50.76.0,255.255.252.0
e 42: SUBNET=184.86.121.28,255.255.255.255
e 43: SUBNET=185.79.140.0,255.255.252.0
e 44: SUBNET=193.130.39.185,255.255.255.255
e 45: SUBNET=193.130.39.186,255.255.255.255
e 46: SUBNET=202.129.242.0,255.255.254.0
e 47: SUBNET=204.14.232.0,255.255.248.0
e 48: SUBNET=207.251.96.80,255.255.255.255
e 49: SUBNET=208.99.166.251,255.255.255.255
e 50: SUBNET=216.52.36.0,255.255.255.0
e 51: SUBNET=52.16.160.11,255.255.255.255
e 52: SUBNET=62.50.9.128,255.255.255.192
e 53: SUBNET=65.125.54.250,255.255.255.255
e 54: SUBNET=65.125.54.80,255.255.255.255
e 55: SUBNET=65.38.165.21,255.255.255.255
e 56: SUBNET=85.222.128.0,255.255.224.0
e 57: SUBNET=96.43.144.0,255.255.240.0
e 58: SUBNET=96.43.144.27,255.255.255.255
e 59: SUBNET=96.43.145.27,255.255.255.255
e 60: SUBNET=96.43.146.124,255.255.255.255
e 61: SUBNET=96.43.146.251,255.255.255.255
e 62: SUBNET=96.43.148.27,255.255.255.255
e 63: SUBNET=96.43.149.27,255.255.255.255
e 64: SUBNET=96.43.150.124,255.255.255.255
e 65: EXCLUDE_HOSTNAME=*.ap1.connect.analog.com
e 66: EXCLUDE_HOSTNAME=*.ap2.connect.analog.com
e 67: EXCLUDE_HOSTNAME=*.connect.analog.com
e 68: EXCLUDE_HOSTNAME=*.eu1.connect.analog.com
e 69: EXCLUDE_HOSTNAME=*.eu2.connect.analog.com
e 70: EXCLUDE_HOSTNAME=*.us1.connect.analog.com
e 71: EXCLUDE_HOSTNAME=*.us2.connect.analog.com
e 72: EXCLUDE_RANGE=137.71.115.101,137.71.115.107
e 73: EXCLUDE_RANGE=137.71.144.101,137.71.144.107
e 74: EXCLUDE_RANGE=137.71.246.101,137.71.246.107
e 75: EXCLUDE_HOSTNAME=137.71.25.119
e 76: EXCLUDE_RANGE=137.71.25.186,137.71.25.188
e 77: EXCLUDE_RANGE=137.71.25.30,137.71.25.36
e 78: EXCLUDE_HOSTNAME=ad6676eval.analog.com
e 79: EXCLUDE_HOSTNAME=adgtav.analog.com
e 80: EXCLUDE_HOSTNAME=adgtlyncext.analog.com
e 81: EXCLUDE_HOSTNAME=adgtsip.analog.com
e 82: EXCLUDE_HOSTNAME=adgtwacext.analog.com
e 83: EXCLUDE_HOSTNAME=adgtwc.analog.com
e 84: EXCLUDE_HOSTNAME=analog.crm.dynamics.com
e 85: EXCLUDE_HOSTNAME=benefits.analog.com
e 86: EXCLUDE_HOSTNAME=designtools.analog.com
e 87: EXCLUDE_HOSTNAME=dialin.analog.com
e 88: EXCLUDE_HOSTNAME=distributor.analog.com
e 89: EXCLUDE_HOSTNAME=ebiz.sso.analog.com
e 90: EXCLUDE_HOSTNAME=employee.analog.com
e 91: EXCLUDE_HOSTNAME=ez-stage.analog.com
e 92: EXCLUDE_HOSTNAME=ez.analog.com
e 93: EXCLUDE_HOSTNAME=fastlink.analog.com
e 94: EXCLUDE_HOSTNAME=form.analog.com
e 95: EXCLUDE_HOSTNAME=forms.analog.com
e 96: EXCLUDE_HOSTNAME=labs.analog.com
e 97: EXCLUDE_HOSTNAME=limkav.analog.com
e 98: EXCLUDE_HOSTNAME=limklyncext.analog.com
e 99: EXCLUDE_HOSTNAME=limksip.analog.com
e 100: EXCLUDE_HOSTNAME=limkwacext.analog.com
e 101: EXCLUDE_HOSTNAME=limkwc.analog.com
e 102: EXCLUDE_HOSTNAME=lyncdiscover.analog.com
e 103: EXCLUDE_HOSTNAME=meet.analog.com
e 104: EXCLUDE_HOSTNAME=my.analog.com
e 105: EXCLUDE_HOSTNAME=nwdav.analog.com
e 106: EXCLUDE_HOSTNAME=nwdlyncext.analog.com
e 107: EXCLUDE_HOSTNAME=nwdsip.analog.com
e 108: EXCLUDE_HOSTNAME=nwdwacext.analog.com
e 109: EXCLUDE_HOSTNAME=nwdwc.analog.com
e 110: EXCLUDE_HOSTNAME=quality.analog.com
e 111: EXCLUDE_HOSTNAME=registration.analog.com
e 112: EXCLUDE_HOSTNAME=sdk.analog.com
e 113: EXCLUDE_HOSTNAME=secureit.analog.com
e 114: EXCLUDE_HOSTNAME=shoppingcart.analog.com
e 115: EXCLUDE_HOSTNAME=videos.analog.com
e 116: EXCLUDE_HOSTNAME=webtier.analog.com
e 117: EXCLUDE_HOSTNAME=wiki.analog.com
e 118: EXCLUDE_HOSTNAME=wilmav.analog.com
e 119: EXCLUDE_HOSTNAME=wilmlyncext.analog.com
e 120: EXCLUDE_HOSTNAME=wilmsip.analog.com
e 121: EXCLUDE_HOSTNAME=wilmwacext.analog.com
e 122: EXCLUDE_HOSTNAME=wilmwc.analog.com
e 123: EXCLUDE_HOSTNAME=www.analog.com
4/25/2017 14:16:30.661 I General ClientConfig: NcrPrefAll
ow 0
4/25/2017 14:16:30.661 I Tunnel ClientConfig: AddressPoo
l STATIC,0,AV1396025365605IBS,TRUSTED
4/25/2017 14:16:30.661 I General ClientConfig: ShowAssist
0
4/25/2017 14:16:30.661 I General ClientConfig: DisableDDN
S 0
4/25/2017 14:16:30.661 D General ClientConfig: Extensions
: status 0
{}
4/25/2017 14:16:30.661 D General ClientConfig: SSL_MTU: 1
346
4/25/2017 14:16:30.661 D General ClientConfig: Creating L
ocal-Excludes info iffCount<1>
4/25/2017 14:16:30.661 D General ClientConfig: Local-Excl
udes Processing iff<192.168.1.0/255.255.255.0>
udes adding ex-local-iff rule first/last<192.168.1.100/192.168.1.100>
udes gwIp-first/last<192.168.1.1/192.168.1.1>
4/25/2017 14:16:30.661 D General ClientConfig: Creating l
ocal-net[0] status<0x0>
4/25/2017 14:16:30.661 D General ClientConfig: Resolving
Conflict lexcount<2> count<73>
4/25/2017 14:16:30.661 D General ClientConfig: checking l
ocal-iff rule first/last<192.168.1.1/192.168.1.1>
4/25/2017 14:16:30.661 D General ClientConfig: checking l
ocal-iff rule first/last<192.168.1.100/192.168.1.100>
4/25/2017 14:16:30.661 D General ClientConfig: Local Matc
h count<0> inc<73>
4/25/2017 14:16:30.661 D General ClientConfig: Adding loc
al excludes first/last<192.168.1.1/192.168.1.1>
4/25/2017 14:16:30.661 D General ClientConfig: Adding loc
al excludes first/last<192.168.1.100/192.168.1.100>
4/25/2017 14:16:30.661 D General GetWindowsDomainList: ex
cluding comp-domain<ad.analog.com>
ProtoClientConfigure to ProtoEstablished
4/25/2017 14:16:30.661 I Tunnel End tunnel negotiation
4/25/2017 14:16:30.661 D General ClientSettings
RunProgram : NULL
RunParameters : NULL
RunDirectory : NULL
ShowAssist : 0
EspEnabled : 1
CmpEnabled : 1
status : 0
4/25/2017 14:16:30.661 I Tunnel Set tunnel state from Tu
nnelNegotiate to EpcNegotiate
4/25/2017 14:16:30.661 I Tunnel Begin EPC negotiation
4/25/2017 14:16:30.661 I Tunnel End EPC negotiation
4/25/2017 14:16:30.661 I Tunnel Set prerequisite RAS con
nection to ""
4/25/2017 14:16:30.661 D General Read WININET Internet co
nnection settings for "<null>"
4/25/2017 14:16:30.661 D General InternetSettings: Connec
tion: <null>
4/25/2017 14:16:30.661 D General InternetSettings: ListSi
ze: 32
4/25/2017 14:16:30.661 D General InternetSettings: Option
Count: 5
Error: 0
[0]: INTERNET_PER_CONN_FLAGS: PROXY_TYPE_DIRECT
[1]: INTERNET_PER_CONN_PROXY_SERVER, <null>
[2]: INTERNET_PER_CONN_PROXY_BYPASS, <null>
[3]: INTERNET_PER_CONN_AUTOCONFIG_URL, <null>
[4]: INTERNET_PER_CONN_AUTOCONFIG_LAST_DETECT_URL, <null>
4/25/2017 14:16:30.661 I Tunnel Clear http proxy for 'De
ll VPN Connection'
4/25/2017 14:16:30.661 I Tunnel Set tunnel state from Ep
cNegotiate to PPPNegotiate
4/25/2017 14:16:30.661 I Tunnel Begin PPP negotiation
4/25/2017 14:16:30.661 D General EvpnMtu: 1346 Mtu: 1372
4/25/2017 14:16:30.661 I General Using Mtu: 1372
4/25/2017 14:16:30.661 D Ppp PPP processing state tra
nsition from eDead to eEstablish.
4/25/2017 14:16:30.661 I Vpn Signal the user that the
call has completed
4/25/2017 14:16:30.676 D General eServer PPP Message rece
ived LCP
4/25/2017 14:16:30.676 D General LCP code - eConfigur
eRequest
4/25/2017 14:16:30.676 D General LCP length - 17
4/25/2017 14:16:30.676 D General LCP id - 0
4/25/2017 14:16:30.676 D General LCP option type - MR
U
4/25/2017 14:16:30.676 D General LCP option length
- 4
4/25/2017 14:16:30.676 D General LCP option data -
5E0
4/25/2017 14:16:30.676 D General LCP option type - MA
GIC_NUMBER
- 6
1520A32
4/25/2017 14:16:30.676 D General LCP option type - CA
LLBACK
- 3
6
4/25/2017 14:16:30.676 D Ppp PPP Processing server es
tablish state message eConfigureRequest.
4/25/2017 14:16:30.676 D General eServer PPP Message sent
LCP
eReject
4/25/2017 14:16:30.676 D General LCP id - 0
4/25/2017 14:16:30.676 D General LCP option type - MA
GIC_NUMBER
- 6
1520A32
4/25/2017 14:16:30.676 D General LCP option type - CA
LLBACK
- 3
6
ived LCP
eRequest
4/25/2017 14:16:30.676 D General LCP id - 1
U
- 4
5E0
LCP
eNak
4/25/2017 14:16:30.676 D General LCP id - 1
U
- 4
55C
ived LCP
eRequest
4/25/2017 14:16:30.676 D General LCP id - 2
U
- 4
55C
LCP
eAck
4/25/2017 14:16:30.676 D General LCP id - 2
U
- 4
55C
LCP
eRequest
4/25/2017 14:16:30.676 D General LCP id - 2
4/25/2017 14:16:30.676 D General LCP option type - AU
TH
- 4
C023
U
- 4
55C
ived LCP
eAck
4/25/2017 14:16:30.676 D General LCP id - 2
4/25/2017 14:16:30.676 D General LCP option type - AU
TH
- 4
C023
U
- 4
55C
tablish state message eConfigureAck.
nsition from eEstablish to eAuth.
ived LCP
4/25/2017 14:16:30.676 D General LCP code - eIdentifi
cation
4/25/2017 14:16:30.676 D General LCP id - 3
4/25/2017 14:16:30.676 D Ppp PPP Processing server au
thentication state message eIdentification.
ived LCP
cation
4/25/2017 14:16:30.676 D General LCP id - 4
ived LCP
cation
4/25/2017 14:16:30.676 D General LCP id - 5
ived PAP
4/25/2017 14:16:30.676 D General PAP code - eConfigur
eRequest
4/25/2017 14:16:30.676 D General PAP length - 6
4/25/2017 14:16:30.676 D General PAP id - 2
4/25/2017 14:16:30.676 D General PAP Peer ID -
thentication state message eConfigureRequest.
nsition from eAuth to eNCP.
PAP
4/25/2017 14:16:30.676 D General PAP code - eConfigur
eAck
4/25/2017 14:16:30.676 D General PAP length - 5
4/25/2017 14:16:30.676 D General PAP id - 2
4/25/2017 14:16:30.676 D General PAP Message - No Mes
sage
IPCP
4/25/2017 14:16:30.676 D General IPCP code - eConfigu
reRequest
4/25/2017 14:16:30.676 D General IPCP length - 10
4/25/2017 14:16:30.676 D General IPCP id - 0
4/25/2017 14:16:30.676 D General IPCP option type - I
P_ADDRESS
4/25/2017 14:16:30.676 D General IPCP option length
- 6
4/25/2017 14:16:30.676 D General IPCP option data -
A52DF28
ived CCP
4/25/2017 14:16:30.676 D General CCP code - eConfigur
eRequest
4/25/2017 14:16:30.676 D General CCP length - 10
4/25/2017 14:16:30.676 D General CCP id - 6
4/25/2017 14:16:30.676 D General CCP option type - 12
2.2
4/25/2017 14:16:30.676 D General CCP option length
- 6
4/25/2017 14:16:30.676 D General CCP option data -
1000001
4/25/2017 14:16:30.676 D Ppp PPP processing server NC
P state message eConfigureRequest for protocol CCP.
CCP
4/25/2017 14:16:30.676 D General CCP code - eConfigur
eReject
4/25/2017 14:16:30.676 D General CCP id - 6
4/25/2017 14:16:30.676 D General CCP option type - 12
2.2
4/25/2017 14:16:30.676 D General CCP option length
- 6
4/25/2017 14:16:30.676 D General CCP option data -
1000001
ived IPCP
reRequest
4/25/2017 14:16:30.676 D General IPCP id - 7
P_ADDRESS
- 6
0
4/25/2017 14:16:30.676 D General IPCP option type - P
RIMARY_DNS_SERVER
- 6
0
RIMARY_NBNS_SERVER
- 6
0
4/25/2017 14:16:30.676 D General IPCP option type - S
ECONDARY_DNS_SERVER
- 6
0
ECONDARY_NBNS_SERVER
- 6
0
P state message eConfigureRequest for protocol IPCP.
IPCP
reNak
4/25/2017 14:16:30.676 D General IPCP id - 7
P_ADDRESS
- 6
A52DF28
RIMARY_DNS_SERVER
- 6
A52346E
RIMARY_NBNS_SERVER
- 6
A52346E
ECONDARY_DNS_SERVER
- 6
A40336E
- 6
A40356E
ived IPCP
reAck
4/25/2017 14:16:30.676 D General IPCP id - 0
P_ADDRESS
- 6
A52DF28
P state message eConfigureAck for protocol IPCP.
ived CCP
4/25/2017 14:16:30.676 D General CCP code - eTerminat
eRequest
4/25/2017 14:16:30.676 D General CCP id - 8
P state message eTerminateRequest for protocol CCP.
CCP
4/25/2017 14:16:30.676 D General CCP code - eTerminat
eAck
4/25/2017 14:16:30.676 D General CCP id - 8
ived IPCP
reRequest
4/25/2017 14:16:30.676 D General IPCP id - 9
P_ADDRESS
- 6
A52DF28
RIMARY_DNS_SERVER
- 6
A52346E
RIMARY_NBNS_SERVER
- 6
A52346E
ECONDARY_DNS_SERVER
- 6
A40336E
- 6
A40356E
P state message eConfigureRequest for protocol IPCP.
nsition from eNCP to eOpen.
IPCP
reAck
4/25/2017 14:16:30.676 D General IPCP id - 9
P_ADDRESS
- 6
A52DF28
RIMARY_DNS_SERVER
- 6
A52346E
RIMARY_NBNS_SERVER
- 6
A52346E
ECONDARY_DNS_SERVER
- 6
A40336E
- 6
A40356E
4/25/2017 14:16:30.676 I Tunnel Setting the IP exclusion
list
4/25/2017 14:16:30.676 I Tunnel End PPP negotiation
4/25/2017 14:16:30.676 I Tunnel Set tunnel state from PP
PNegotiate to Run
4/25/2017 14:16:30.676 D General RasIpcCmd IpcIdleTimeOut
timeout<14400000>
4/25/2017 14:16:30.676 D General RasIpcCmd IpcIdleTimeOut
status<0x0>
4/25/2017 14:16:30.676 I Tunnel RAS pipe closed
4/25/2017 14:16:30.676 D General DoDNSSettings:dnsSuffixC
ount<2>
4/25/2017 14:16:30.676 D General DoDNSSettings:No Srch-DN
SClient policy searchList<> status<0>
4/25/2017 14:16:30.676 D General DoDNSSettings:No Dmn-DNS
Client policy domain<ad.analog.com> status<0>
4/25/2017 14:16:30.676 D General DoDNSSettings adding vpn
Suf<ad.analog.com>
4/25/2017 14:16:30.676 D General DoDNSSettings adding vpn
Suf<analog.com>
4/25/2017 14:16:30.676 D General DoDNSSettings:safeSearch
List<> status<0x2>
4/25/2017 14:16:30.676 D General DoDNSSettings:savedFSDns
<1> sbackup<0> status<0>
4/25/2017 14:16:30.676 D General DoDNSSettings adding dom
ain<ad.analog.com>
4/25/2017 14:16:30.676 D General DoDNSSettings:safeDomain
<> status<0x2>
4/25/2017 14:16:30.676 D General DoDNSSettings:savedFSDns
<1> status<0>
4/25/2017 14:16:30.676 D General DoDNSSettings suff[0]<ad
.analog.com>
4/25/2017 14:16:30.676 D General DoDNSSettings suff[1]<an
alog.com>
4/25/2017 14:16:30.676 D General DoDNSSettings suff[2]<ad
.analog.com>
4/25/2017 14:16:30.676 D General DoDNSSettings currSuf<ad
.analog.com> append<1>
4/25/2017 14:16:30.676 D General DoDNSSettings currSuf<an
alog.com> append<1>
4/25/2017 14:16:30.676 D General DoDNSSettings currSuf<ad
.analog.com> append<0>
4/25/2017 14:16:30.676 D General DoDNSSettings key<Tcpip\
Parameters> suffList<ad.analog.com,analog.com,> ufsuffList<ad.analog.com,analog.
com,ad.analog.com,> status<0>
4/25/2017 14:16:30.676 D General DoDNSSettings newDomain<
Tcpip\Parameters><Domain><ad.analog.com> status<0>
4/25/2017 14:16:30.676 I Tunnel Protocol negotiation com
plete.
4/25/2017 14:16:30.676 D Tunnel Sent: ClientConfiguratio
nAckMessage, Length: 4, Version: 1, Flags: 0
0000: 10 19 00 04 ....
4/25/2017 14:16:30.676 I Vpn Add device \DEVICE\TCPIP
_{b73fd6ff-3fb5-4589-a307-4533e0e4b032}, IP 10.82.223.40
cted to Run, reason 00000000
transition, from Connected to Run, reason 0x00000000
4/25/2017 14:16:30.676 D Tunnel Start keep-alive timer,
interval 10 seconds.
4/25/2017 14:16:30.692 I Vpn Set Netbios broadcast fi
ltering: 1
4/25/2017 14:16:30.692 D General DeleteSystemRoutes: dele
ted<0> vip<10.82.223.40>
4/25/2017 14:16:30.692 D General SysRoutes-net: <10.0.0.0
/255.0.0.0>
4/25/2017 14:16:30.723 D General idx<37> metric<0> s[0]
4/25/2017 14:16:30.723 D Tunnel Loading the protocol gen
erated redirection rules
4/25/2017 14:16:30.723 I Vpn Add IP redirection rule,
Exclude (137.71.25.119, 137.71.25.119)
Exclude (192.168.1.1, 192.168.1.1)
Exclude (192.168.1.100, 192.168.1.100)
Include (10.64.51.110, 10.64.51.110)
Include (10.64.53.110, 10.64.53.110)
Include (10.82.52.110, 10.82.52.110)
Include (23.7.134.153, 23.7.134.153)
Include (34.193.73.68, 34.193.73.68)
Include (52.6.76.195, 52.6.76.195)
Include (52.16.160.11, 52.16.160.11)
Include (52.18.56.238, 52.18.56.238)
Include (52.30.19.98, 52.30.19.98)
Include (52.45.212.14, 52.45.212.14)
Include (52.52.37.62, 52.52.37.62)
Include (52.69.78.66, 52.69.78.66)
Include (52.73.93.111, 52.73.93.111)
Include (52.86.49.207, 52.86.49.207)
Include (52.196.227.247, 52.196.227.247)
Include (52.201.40.188, 52.201.40.188)
Include (52.204.37.87, 52.204.37.87)
Include (54.173.5.197, 54.173.5.197)
Include (65.38.165.21, 65.38.165.21)
Include (65.125.54.80, 65.125.54.80)
Include (65.125.54.250, 65.125.54.250)
Include (67.231.154.66, 67.231.154.66)
Include (69.63.129.138, 69.63.129.138)
Include (96.43.144.26, 96.43.144.26)
Include (96.43.144.27, 96.43.144.27)
Include (96.43.145.27, 96.43.145.27)
Include (96.43.146.124, 96.43.146.124)
Include (96.43.146.251, 96.43.146.251)
Include (96.43.148.27, 96.43.148.27)
Include (96.43.149.27, 96.43.149.27)
Include (96.43.150.107, 96.43.150.107)
Include (96.43.150.124, 96.43.150.124)
Include (96.43.150.235, 96.43.150.235)
Include (136.146.210.78, 136.146.210.78)
Include (136.146.210.101, 136.146.210.101)
Include (136.146.210.102, 136.146.210.102)
Include (137.71.25.137, 137.71.25.137)
Include (137.71.25.170, 137.71.25.170)
Include (137.71.25.172, 137.71.25.172)
Include (140.98.193.112, 140.98.193.112)
Include (150.175.58.10, 150.175.58.10)
Include (166.78.207.49, 166.78.207.49)
Include (173.254.190.152, 173.254.190.152)
Include (184.86.121.28, 184.86.121.28)
Include (193.130.39.185, 193.130.39.185)
Include (193.130.39.186, 193.130.39.186)
Include (203.117.88.72, 203.117.88.72)
Include (203.117.88.73, 203.117.88.73)
Include (204.11.56.48, 204.11.56.48)
Include (207.251.96.80, 207.251.96.80)
Include (208.99.166.251, 208.99.166.251)
Exclude (137.71.25.186, 137.71.25.188)
Exclude (137.71.25.30, 137.71.25.36)
Exclude (137.71.115.101, 137.71.115.107)
Exclude (137.71.144.101, 137.71.144.107)
Exclude (137.71.246.101, 137.71.246.107)
Include (62.50.9.128, 62.50.9.191)
Include (140.234.252.0, 140.234.252.255)
Include (140.234.254.0, 140.234.254.255)
Include (192.168.16.0, 192.168.16.255)
Include (192.168.66.0, 192.168.66.255)
Include (192.168.117.0, 192.168.117.255)
Include (216.52.36.0, 216.52.36.255)
Include (202.129.242.0, 202.129.243.255)
Include (182.50.76.0, 182.50.79.255)
Include (185.79.140.0, 185.79.143.255)
Include (190.9.200.0, 190.9.203.255)
Include (204.14.232.0, 204.14.239.255)
Include (96.43.144.0, 96.43.159.255)
Include (85.222.128.0, 85.222.159.255)
Include (136.146.0.0, 136.147.255.255)
Include (10.0.0.0, 10.255.255.255)
4/25/2017 14:16:30.723 I Vpn Add host redirection rul
e, Exclude: *.ap1.connect.analog.com
e, Exclude: *.ap2.connect.analog.com
e, Exclude: *.eu1.connect.analog.com
e, Exclude: *.eu2.connect.analog.com
e, Exclude: *.us1.connect.analog.com
e, Exclude: *.us2.connect.analog.com
e, Exclude: analog.crm.dynamics.com
e, Exclude: ebiz.sso.analog.com
e, Exclude: *.connect.analog.com
e, Exclude: ad6676eval.analog.com
e, Exclude: adgtav.analog.com
e, Exclude: adgtlyncext.analog.com
e, Exclude: adgtsip.analog.com
e, Exclude: adgtwacext.analog.com
e, Exclude: adgtwc.analog.com
e, Exclude: adsjswssl1.analog.com
e, Exclude: benefits.analog.com
e, Exclude: designtools.analog.com
e, Exclude: dialin.analog.com
e, Exclude: distributor.analog.com
e, Exclude: employee.analog.com
e, Exclude: ez.analog.com
e, Exclude: ez-stage.analog.com
e, Exclude: fastlink.analog.com
e, Exclude: form.analog.com
e, Exclude: forms.analog.com
e, Exclude: labs.analog.com
e, Exclude: limkav.analog.com
e, Exclude: limklyncext.analog.com
e, Exclude: limksip.analog.com
e, Exclude: limkwacext.analog.com
e, Exclude: limkwc.analog.com
e, Exclude: lyncdiscover.analog.com
e, Exclude: meet.analog.com
e, Exclude: my.analog.com
e, Exclude: nwdav.analog.com
e, Exclude: nwdlyncext.analog.com
e, Exclude: nwdsip.analog.com
e, Exclude: nwdwacext.analog.com
e, Exclude: nwdwc.analog.com
e, Exclude: quality.analog.com
e, Exclude: registration.analog.com
e, Exclude: sdk.analog.com
e, Exclude: secureit.analog.com
e, Exclude: shoppingcart.analog.com
e, Exclude: videos.analog.com
e, Exclude: webtier.analog.com
e, Exclude: wiki.analog.com
e, Exclude: wilmav.analog.com
e, Exclude: wilmlyncext.analog.com
e, Exclude: wilmsip.analog.com
e, Exclude: wilmwacext.analog.com
e, Exclude: wilmwc.analog.com
e, Exclude: www.analog.com
e, Include: *.sciencedirect.com
4/25/2017 14:16:30.723 I Vpn Add domain redirection r
ule, Include: ad.analog.com
4/25/2017 14:16:30.723 I Vpn Add domain redirection r
ule, Include: analog.com
4/25/2017 14:16:30.723 I Vpn Create IP filter rules,
75 read, 75 added
4/25/2017 14:16:30.723 I Vpn Create host filter rules
, 55 read, 55 added
4/25/2017 14:16:30.723 I Vpn Create domain filter rul
es, 2 read, 2 added
4/25/2017 14:16:30.723 D General SetRedirectionRules - ip
c<75>
4/25/2017 14:16:30.723 I Vpn Add 10.64.51.110 for VIP
10.82.223.40 to IP redirection table
4/25/2017 14:16:30.723 I Vpn Add 10.64.51.110 for VIP
10.82.223.40 to system route table
4/25/2017 14:16:30.723 I Vpn Add 10.64.51.110 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[3][10.64.51.110
-10.64.51.110]
4/25/2017 14:16:30.723 I Vpn Add 10.64.53.110 for VIP
4/25/2017 14:16:30.723 I Vpn Add 10.64.53.110 for VIP
4/25/2017 14:16:30.723 I Vpn Add 10.64.53.110 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[5][10.64.53.110
-10.64.53.110]
4/25/2017 14:16:30.723 I Vpn Add 10.82.52.110 for VIP
4/25/2017 14:16:30.723 I Vpn Add 10.82.52.110 for VIP
4/25/2017 14:16:30.723 I Vpn Add 10.82.52.110 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[7][10.82.52.110
-10.82.52.110]
4/25/2017 14:16:30.723 I Vpn Add 23.7.134.153 for VIP
4/25/2017 14:16:30.723 I Vpn Add 23.7.134.153 for VIP
4/25/2017 14:16:30.723 I Vpn Add 23.7.134.153 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[9][23.7.134.153
-23.7.134.153]
4/25/2017 14:16:30.723 I Vpn Add 34.193.73.68 for VIP
4/25/2017 14:16:30.723 I Vpn Add 34.193.73.68 for VIP
4/25/2017 14:16:30.723 I Vpn Add 34.193.73.68 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[11][34.193.73.6
8-34.193.73.68]
4/25/2017 14:16:30.723 I Vpn Add 52.6.76.195 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.6.76.195 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.6.76.195 to IP ad
dress table
4/25/2017 14:16:30.723 D General S1-Route[13][52.6.76.195
-52.6.76.195]
4/25/2017 14:16:30.723 I Vpn Add 52.16.160.11 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.16.160.11 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.16.160.11 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[15][52.16.160.1
1-52.16.160.11]
4/25/2017 14:16:30.723 I Vpn Add 52.18.56.238 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.18.56.238 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.18.56.238 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[17][52.18.56.23
8-52.18.56.238]
4/25/2017 14:16:30.723 I Vpn Add 52.30.19.98 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.30.19.98 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.30.19.98 to IP ad
dress table
4/25/2017 14:16:30.723 D General S1-Route[19][52.30.19.98
-52.30.19.98]
4/25/2017 14:16:30.723 I Vpn Add 52.45.212.14 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.45.212.14 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.45.212.14 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[21][52.45.212.1
4-52.45.212.14]
4/25/2017 14:16:30.723 I Vpn Add 52.52.37.62 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.52.37.62 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.52.37.62 to IP ad
dress table
4/25/2017 14:16:30.723 D General S1-Route[23][52.52.37.62
-52.52.37.62]
4/25/2017 14:16:30.723 I Vpn Add 52.69.78.66 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.69.78.66 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.69.78.66 to IP ad
dress table
4/25/2017 14:16:30.723 D General S1-Route[25][52.69.78.66
-52.69.78.66]
4/25/2017 14:16:30.723 I Vpn Add 52.73.93.111 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.73.93.111 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.73.93.111 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[27][52.73.93.11
1-52.73.93.111]
4/25/2017 14:16:30.723 I Vpn Add 52.86.49.207 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.86.49.207 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.86.49.207 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[29][52.86.49.20
7-52.86.49.207]
4/25/2017 14:16:30.723 I Vpn Add 52.196.227.247 for V
IP 10.82.223.40 to IP redirection table
4/25/2017 14:16:30.723 I Vpn Add 52.196.227.247 for V
IP 10.82.223.40 to system route table
4/25/2017 14:16:30.723 I Vpn Add 52.196.227.247 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[31][52.196.227.
247-52.196.227.247]
4/25/2017 14:16:30.723 I Vpn Add 52.201.40.188 for VI
P 10.82.223.40 to IP redirection table
4/25/2017 14:16:30.723 I Vpn Add 52.201.40.188 for VI
P 10.82.223.40 to system route table
4/25/2017 14:16:30.723 I Vpn Add 52.201.40.188 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[33][52.201.40.1
88-52.201.40.188]
4/25/2017 14:16:30.723 I Vpn Add 52.204.37.87 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.204.37.87 for VIP
4/25/2017 14:16:30.723 I Vpn Add 52.204.37.87 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[35][52.204.37.8
7-52.204.37.87]
4/25/2017 14:16:30.723 I Vpn Add 54.173.5.197 for VIP
4/25/2017 14:16:30.723 I Vpn Add 54.173.5.197 for VIP
4/25/2017 14:16:30.723 I Vpn Add 54.173.5.197 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[37][54.173.5.19
7-54.173.5.197]
4/25/2017 14:16:30.723 I Vpn Add 65.38.165.21 for VIP
4/25/2017 14:16:30.723 I Vpn Add 65.38.165.21 for VIP
4/25/2017 14:16:30.723 I Vpn Add 65.38.165.21 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[39][65.38.165.2
1-65.38.165.21]
4/25/2017 14:16:30.723 I Vpn Add 65.125.54.80 for VIP
4/25/2017 14:16:30.723 I Vpn Add 65.125.54.80 for VIP
4/25/2017 14:16:30.723 I Vpn Add 65.125.54.80 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[41][65.125.54.8
0-65.125.54.80]
4/25/2017 14:16:30.723 I Vpn Add 65.125.54.250 for VI
4/25/2017 14:16:30.723 I Vpn Add 65.125.54.250 for VI
4/25/2017 14:16:30.723 I Vpn Add 65.125.54.250 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[43][65.125.54.2
50-65.125.54.250]
4/25/2017 14:16:30.723 I Vpn Add 67.231.154.66 for VI
4/25/2017 14:16:30.723 I Vpn Add 67.231.154.66 for VI
4/25/2017 14:16:30.723 I Vpn Add 67.231.154.66 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[45][67.231.154.
66-67.231.154.66]
4/25/2017 14:16:30.723 I Vpn Add 69.63.129.138 for VI
4/25/2017 14:16:30.723 I Vpn Add 69.63.129.138 for VI
4/25/2017 14:16:30.723 I Vpn Add 69.63.129.138 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[47][69.63.129.1
38-69.63.129.138]
4/25/2017 14:16:30.723 I Vpn Add 96.43.144.26 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.144.26 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.144.26 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[49][96.43.144.2
6-96.43.144.26]
4/25/2017 14:16:30.723 I Vpn Add 96.43.144.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.144.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.144.27 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[51][96.43.144.2
7-96.43.144.27]
4/25/2017 14:16:30.723 I Vpn Add 96.43.145.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.145.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.145.27 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[53][96.43.145.2
7-96.43.145.27]
4/25/2017 14:16:30.723 I Vpn Add 96.43.146.124 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.146.124 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.146.124 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[55][96.43.146.1
24-96.43.146.124]
4/25/2017 14:16:30.723 I Vpn Add 96.43.146.251 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.146.251 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.146.251 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[57][96.43.146.2
51-96.43.146.251]
4/25/2017 14:16:30.723 I Vpn Add 96.43.148.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.148.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.148.27 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[59][96.43.148.2
7-96.43.148.27]
4/25/2017 14:16:30.723 I Vpn Add 96.43.149.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.149.27 for VIP
4/25/2017 14:16:30.723 I Vpn Add 96.43.149.27 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[61][96.43.149.2
7-96.43.149.27]
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.107 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.107 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.107 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[63][96.43.150.1
07-96.43.150.107]
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.124 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.124 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.124 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[65][96.43.150.1
24-96.43.150.124]
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.235 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.235 for VI
4/25/2017 14:16:30.723 I Vpn Add 96.43.150.235 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[67][96.43.150.2
35-96.43.150.235]
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.78 for V
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.78 for V
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.78 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[69][136.146.210
.78-136.146.210.78]
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.101 for
VIP 10.82.223.40 to IP redirection table
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.101 for
VIP 10.82.223.40 to system route table
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.101 to I
P address table
4/25/2017 14:16:30.723 D General S1-Route[71][136.146.210
.101-136.146.210.101]
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.102 for
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.102 for
4/25/2017 14:16:30.723 I Vpn Add 136.146.210.102 to I
P address table
4/25/2017 14:16:30.723 D General S1-Route[73][136.146.210
.102-136.146.210.102]
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.137 for VI
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.137 for VI
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.137 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[75][137.71.25.1
37-137.71.25.137]
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.170 for VI
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.170 for VI
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.170 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[77][137.71.25.1
70-137.71.25.170]
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.172 for VI
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.172 for VI
4/25/2017 14:16:30.723 I Vpn Add 137.71.25.172 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[79][137.71.25.1
72-137.71.25.172]
4/25/2017 14:16:30.723 I Vpn Add 140.98.193.112 for V
4/25/2017 14:16:30.723 I Vpn Add 140.98.193.112 for V
4/25/2017 14:16:30.723 I Vpn Add 140.98.193.112 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[81][140.98.193.
112-140.98.193.112]
4/25/2017 14:16:30.723 I Vpn Add 150.175.58.10 for VI
4/25/2017 14:16:30.723 I Vpn Add 150.175.58.10 for VI
4/25/2017 14:16:30.723 I Vpn Add 150.175.58.10 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[83][150.175.58.
10-150.175.58.10]
4/25/2017 14:16:30.723 I Vpn Add 166.78.207.49 for VI
4/25/2017 14:16:30.723 I Vpn Add 166.78.207.49 for VI
4/25/2017 14:16:30.723 I Vpn Add 166.78.207.49 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[85][166.78.207.
49-166.78.207.49]
4/25/2017 14:16:30.723 I Vpn Add 173.254.190.152 for
4/25/2017 14:16:30.723 I Vpn Add 173.254.190.152 for
4/25/2017 14:16:30.723 I Vpn Add 173.254.190.152 to I
P address table
4/25/2017 14:16:30.723 D General S1-Route[87][173.254.190
.152-173.254.190.152]
4/25/2017 14:16:30.723 I Vpn Add 184.86.121.28 for VI
4/25/2017 14:16:30.723 I Vpn Add 184.86.121.28 for VI
4/25/2017 14:16:30.723 I Vpn Add 184.86.121.28 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[89][184.86.121.
28-184.86.121.28]
4/25/2017 14:16:30.723 I Vpn Add 193.130.39.185 for V
4/25/2017 14:16:30.723 I Vpn Add 193.130.39.185 for V
4/25/2017 14:16:30.723 I Vpn Add 193.130.39.185 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[91][193.130.39.
185-193.130.39.185]
4/25/2017 14:16:30.723 I Vpn Add 193.130.39.186 for V
4/25/2017 14:16:30.723 I Vpn Add 193.130.39.186 for V
4/25/2017 14:16:30.723 I Vpn Add 193.130.39.186 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[93][193.130.39.
186-193.130.39.186]
4/25/2017 14:16:30.723 I Vpn Add 203.117.88.72 for VI
4/25/2017 14:16:30.723 I Vpn Add 203.117.88.72 for VI
4/25/2017 14:16:30.723 I Vpn Add 203.117.88.72 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[95][203.117.88.
72-203.117.88.72]
4/25/2017 14:16:30.723 I Vpn Add 203.117.88.73 for VI
4/25/2017 14:16:30.723 I Vpn Add 203.117.88.73 for VI
4/25/2017 14:16:30.723 I Vpn Add 203.117.88.73 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[97][203.117.88.
73-203.117.88.73]
4/25/2017 14:16:30.723 I Vpn Add 204.11.56.48 for VIP
4/25/2017 14:16:30.723 I Vpn Add 204.11.56.48 for VIP
4/25/2017 14:16:30.723 I Vpn Add 204.11.56.48 to IP a
ddress table
4/25/2017 14:16:30.723 D General S1-Route[99][204.11.56.4
8-204.11.56.48]
4/25/2017 14:16:30.723 I Vpn Add 207.251.96.80 for VI
4/25/2017 14:16:30.723 I Vpn Add 207.251.96.80 for VI
4/25/2017 14:16:30.723 I Vpn Add 207.251.96.80 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[101][207.251.96
.80-207.251.96.80]
4/25/2017 14:16:30.723 I Vpn Add 208.99.166.251 for V
4/25/2017 14:16:30.723 I Vpn Add 208.99.166.251 for V
4/25/2017 14:16:30.723 I Vpn Add 208.99.166.251 to IP
address table
4/25/2017 14:16:30.723 D General S1-Route[103][208.99.166
.251-208.99.166.251]
4/25/2017 14:16:30.723 D General NGWFP:DatagramProvider 0
0000000
4/25/2017 14:16:30.723 D General NGWFP:addDatagramCallout
00000000
4/25/2017 14:16:30.723 D General NGWFP:DatagramDataNotify
4/25/2017 14:16:30.723 D General NGWFP:addDatagramFilter
00000000
4/25/2017 14:16:30.723 I General NgWfpFilterEnable comple
ted, status 0x00000000
4/25/2017 14:16:30.723 D Vpn Dns query for _ldap._tcp
.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com to 192.168.1.1, matches VPN
10.82.223.40 name only, Discard
4/25/2017 14:16:30.723 I Vpn Add 192.168.1.1 to IP ad
dress table
4/25/2017 14:16:30.723 D Vpn Dns query for wpad.ad.an
alog.com to 10.82.52.110, matches VPN 10.82.223.40 name and server, Allow
10.82.223.40 name and server, Allow
alog.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
4/25/2017 14:16:30.739 D Vpn Dns query for wpad.analo
g.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
4/25/2017 14:16:30.739 D Vpn Dns query for win10.ipv6
.microsoft.com to 10.82.52.110, matches VPN 10.82.223.40 server only, Allow
4/25/2017 14:16:30.739 I Vpn Add 224.0.0.252 to IP ad
dress table
.microsoft.com to 192.168.1.1, matches no VPN, Allow
4/25/2017 14:16:30.770 D Vpn Dns query for isatap.ad.
analog.com to 10.82.52.110, matches VPN 10.82.223.40 name and server, Allow
analog.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
4/25/2017 14:16:30.770 D Vpn Dns query for isatap.ana
log.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
4/25/2017 14:16:30.770 D Vpn Wins query for ISATAP to
192.168.1.255, matches no VPN, Allow
4/25/2017 14:16:30.770 I Vpn Add 192.168.1.255 to IP
address table
4/25/2017 14:16:30.802 D TcpIp Udp 10.82.223.40:68->255
.255.255.255:67, Size 308
4/25/2017 14:16:30.802 I Tunnel Sent DHCP ACK, domain su
ffix ad.analog.com
4/25/2017 14:16:30.802 D TcpIp Ip 224.0.0.22->24.0.0.0,
Size 48, Protocol 2, Fragment N
0
4/25/2017 14:16:30.802 D General SendPacket ipLen: 48 fra
g: 0 status: 0
4/25/2017 14:16:30.802 D TcpIp Udp 10.82.223.40:56280->
10.82.52.110:53, Size 44
4/25/2017 14:16:30.802 I Tunnel Dns request to 219.216.0
.53 for wpad.ad.analog.com, Type 1
0
g: 0 status: 0
4/25/2017 14:16:30.802 D TcpIp Udp 10.82.223.40:57802->
10.82.52.110:53, Size 87
.53 for _ldap._tcp.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com, Type 33
0
4/25/2017 14:16:30.802 D General SendPacket ipLen: 107 fr
ag: 0 status: 0
4/25/2017 14:16:30.802 D TcpIp Udp 10.82.223.40:63805->
10.82.52.110:53, Size 50
4/25/2017 14:16:30.802 I Tunnel Dns request to 249.61.0.
53 for win10.ipv6.microsoft.com, Type 1
0
g: 0 status: 0
4/25/2017 14:16:30.802 D TcpIp Udp 10.82.223.40:51720->
10.82.52.110:53, Size 46
4/25/2017 14:16:30.802 I Tunnel Dns request to 202.8.0.5
3 for isatap.ad.analog.com, Type 1
0
g: 0 status: 0
4/25/2017 14:16:30.912 D TcpIp Ip 224.0.0.22->24.0.0.0,
0
g: 0 status: 0
4/25/2017 14:16:31.069 D General ReceivedPacket isZ: 0 cL
en[132]->dLen[132] len: 132
4/25/2017 14:16:31.069 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:56280, Size 112
en[164]->dLen[164] len: 164
4/25/2017 14:16:31.069 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:57802, Size 144
4/25/2017 14:16:31.069 I Tunnel Dns response for _ldap._
tcp.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com, answers 1, NS 0, additio
nal 1
4/25/2017 14:16:31.069 D General [3]DnsResponse unknw ana
me<_ldap._tcp.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com> qtype<33> qcla
ss<1> qlen<29> match<1>
4/25/2017 14:16:31.069 I Tunnel Dns additional 0: adsjdc
1.ad.analog.com->10.82.52.110
en[166]->dLen[166] len: 166
4/25/2017 14:16:31.069 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:63805, Size 146
4/25/2017 14:16:31.069 I Tunnel Dns response for win10.i
pv6.microsoft.com, answers 3, NS 0, additional 0
me<win10.ipv6.microsoft.com> qtype<5> qclass<1> qlen<45> match<0>
me<onpremwindows.ipv6.microsoft.com.akadns.net> qtype<5> qclass<1> qlen<11> matc
h<0>
4/25/2017 14:16:31.069 I Tunnel Dns answer 2: onpremch.i
pv6.microsoft.com.akadns.net->157.56.144.215
4/25/2017 14:16:31.069 D General [3]DNSResponse spoofing
flags<8081> wFlags<8381>
en[134]->dLen[134] len: 134
4/25/2017 14:16:31.069 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:51720, Size 114
4/25/2017 14:16:31.069 D Vpn Dns query for adsjdc1.ad
.analog.com to 10.82.52.110, matches VPN 10.82.223.40 name and server, Allow
4/25/2017 14:16:31.069 D TcpIp Udp 10.82.223.40:50390->
10.82.52.110:53, Size 47
.53 for adsjdc1.ad.analog.com, Type 1
0
g: 0 status: 0
g.com to 10.82.52.110, matches VPN 10.82.223.40 name and server, Allow
4/25/2017 14:16:31.085 D TcpIp Udp 10.82.223.40:60543->
10.82.52.110:53, Size 41
.53 for wpad.analog.com, Type 1
4/25/2017 14:16:31.085 D Vpn Dns query for adsjdc1.ad
.analog.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
0
g: 0 status: 0
log.com to 10.82.52.110, matches VPN 10.82.223.40 name and server, Allow
4/25/2017 14:16:31.085 D TcpIp Udp 10.82.223.40:63715->
10.82.52.110:53, Size 43
.53 for isatap.analog.com, Type 1
0
g: 0 status: 0
.microsoft.com to 10.82.52.110, matches VPN 10.82.223.40 server only, Allow
4/25/2017 14:16:31.085 D TcpIp Udp 10.82.223.40:55562->
10.82.52.110:53, Size 50
53 for win10.ipv6.microsoft.com, Type 1
0
g: 0 status: 0
.microsoft.com to 192.168.1.1, matches no VPN, Allow
4/25/2017 14:16:31.273 D Vpn Dns query for adsjswssl1
.analog.com to 10.82.52.110, matches VPN 10.82.223.40 server only, Discard
4/25/2017 14:16:31.273 D Vpn Dns query for adsjswssl1
.analog.com to 192.168.1.1, matches no VPN, Allow
en[83]->dLen[83] len: 83
4/25/2017 14:16:31.273 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:50390, Size 63
4/25/2017 14:16:31.273 I Tunnel Dns response for adsjdc1
.ad.analog.com, answers 1, NS 0, additional 0
4/25/2017 14:16:31.273 I Tunnel Dns answer 0: adsjdc1.ad
.analog.com->10.82.52.110
en[123]->dLen[123] len: 123
4/25/2017 14:16:31.273 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:60543, Size 103
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.223.40:54237->
10.82.52.110:389, Size 223
0
ag: 0 status: 0
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.223.40:54238->
10.82.52.110:389, Size 223
0
ag: 0 status: 0
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.223.40:54239->
10.82.52.110:389, Size 222
0
ag: 0 status: 0
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.223.40:54240->
10.82.52.110:389, Size 223
0
ag: 0 status: 0
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.223.40:54241->
10.82.52.110:389, Size 223
0
ag: 0 status: 0
en[125]->dLen[125] len: 125
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:63715, Size 105
en[166]->dLen[166] len: 166
4/25/2017 14:16:31.289 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:55562, Size 146
4/25/2017 14:16:31.289 I Tunnel Dns response for win10.i
pv6.microsoft.com, answers 3, NS 0, additional 0
me<win10.ipv6.microsoft.com> qtype<5> qclass<1> qlen<45> match<0>
me<onpremwindows.ipv6.microsoft.com.akadns.net> qtype<5> qclass<1> qlen<11> matc
h<0>
4/25/2017 14:16:31.289 I Tunnel Dns answer 2: onpremch.i
pv6.microsoft.com.akadns.net->157.56.144.215
4/25/2017 14:16:31.478 I Vpn Add 137.71.223.69 to IP
address table
en[232]->dLen[232] len: 232
4/25/2017 14:16:31.493 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:54237, Size 212
en[232]->dLen[232] len: 232
4/25/2017 14:16:31.493 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:54238, Size 212
en[232]->dLen[232] len: 232
4/25/2017 14:16:31.493 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:54239, Size 212
en[232]->dLen[232] len: 232
4/25/2017 14:16:31.493 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:54240, Size 212
en[232]->dLen[232] len: 232
4/25/2017 14:16:31.493 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:54241, Size 212
4/25/2017 14:16:31.510 D TcpIp Udp 10.82.223.40:123->10
.82.52.110:123, Size 128
0
ag: 0 status: 0
4/25/2017 14:16:31.632 D TcpIp Tcp 10.82.223.40:52678->
10.82.52.110:389, Size 0, Flags ...S., Seq 4159780880-4159780880, Ack 0
0
g: 0 status: 0
4/25/2017 14:16:31.632 D TcpIp Tcp 10.82.223.40:52679->
0
g: 0 status: 0
en[148]->dLen[148] len: 148
4/25/2017 14:16:31.895 D TcpIp Udp 10.82.52.110:123->10
.82.223.40:123, Size 128
en[52]->dLen[52] len: 52
4/25/2017 14:16:31.895 D TcpIp Tcp 10.82.52.110:389->10
.82.223.40:52678, Size 0, Flags A..S., Seq 3212713705-3212713705, Ack 4159780881
4/25/2017 14:16:31.895 D TcpIp Tcp 10.82.223.40:52678->
10.82.52.110:389, Size 0, Flags A...., Seq 4159780881-4159780881, Ack 3212713706
en[52]->dLen[52] len: 52
4/25/2017 14:16:31.895 D TcpIp Tcp 10.82.52.110:445->10
4/25/2017 14:16:31.895 D General Write sent: 92 status: 0
g: 0 status: 0
4/25/2017 14:16:31.895 D TcpIp Tcp 10.82.223.40:52679->
g: 0 status: 0
4/25/2017 14:16:31.895 D TcpIp Tcp 10.82.223.40:52679->
10.82.52.110:445, Size 159, Flags AP..., Seq 2035402517-2035402676, Ack 23243150
00
0
ag: 0 status: 0
4/25/2017 14:16:31.895 D TcpIp Tcp 10.82.223.40:52678->
706
4/25/2017 14:16:31.895 D General SendIp-z ipLen: 1372 sLe
n: 1353
0
4/25/2017 14:16:31.911 D General SendPacket ipLen: 1372 f
rag: 0 status: 0
4/25/2017 14:16:31.911 D TcpIp Tcp 10.82.223.40:52678->
06
0
ag: 0 status: 0
en[292]->dLen[292] len: 292
4/25/2017 14:16:32.296 D TcpIp Tcp 10.82.52.110:445->10
.82.223.40:52679, Size 252, Flags AP..., Seq 2324315000-2324315252, Ack 20354026
76
4/25/2017 14:16:32.312 D TcpIp Tcp 10.82.223.40:52679->
52
0
ag: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:16:32.318 D TcpIp Tcp 10.82.52.110:389->10
.82.223.40:52678, Size 0, Flags A...., Seq 3212713706-3212713706, Ack 4159782213
en[292]->dLen[292] len: 292
4/25/2017 14:16:32.619 D TcpIp Tcp 10.82.52.110:445->10
54
4/25/2017 14:16:32.619 D TcpIp Tcp 10.82.223.40:52679->
504
n: 1322
0
rag: 0 status: 0
4/25/2017 14:16:32.619 D TcpIp Tcp 10.82.223.40:52679->
504
4/25/2017 14:16:32.619 D General Compressor_Compress: fai
led cl<0> dl<1372>
0
rag: 0 status: 0
4/25/2017 14:16:32.619 D TcpIp Tcp 10.82.223.40:52679->
04
led cl<0> dl<546>
0
ag: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:16:32.934 D TcpIp Tcp 10.82.52.110:445->10
en[300]->dLen[300] len: 300
4/25/2017 14:16:32.935 D TcpIp Tcp 10.82.52.110:445->10
24
4/25/2017 14:16:32.936 D TcpIp Tcp 10.82.223.40:52679->
64
0
ag: 0 status: 0
4/25/2017 14:16:32.957 D TcpIp Tcp 10.82.223.40:52678->
06
0
ag: 0 status: 0
en[124]->dLen[124] len: 124
4/25/2017 14:16:33.235 D TcpIp Tcp 10.82.52.110:445->10
6
4/25/2017 14:16:33.235 D TcpIp Tcp 10.82.223.40:52679->
48
0
ag: 0 status: 0
en[250]->dLen[250] len: 250
4/25/2017 14:16:33.239 D TcpIp Tcp 10.82.52.110:389->10
04
4/25/2017 14:16:33.241 D TcpIp Tcp 10.82.223.40:52678->
6
0
g: 0 status: 0
4/25/2017 14:16:33.241 D TcpIp Tcp 10.82.223.40:52678->
10.82.52.110:389, Size 0, Flags A...F, Seq 4159782647-4159782647, Ack 3212713916
g: 0 status: 0
4/25/2017 14:16:33.326 I Vpn Add 209.112.113.33 to IP
address table
en[180]->dLen[180] len: 180
4/25/2017 14:16:33.444 D TcpIp Tcp 10.82.52.110:445->10
14
4/25/2017 14:16:33.444 D TcpIp Tcp 10.82.223.40:52679->
88
0
ag: 0 status: 0
4/25/2017 14:16:33.444 D TcpIp Tcp 10.82.223.40:52679->
88
0
ag: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:16:33.449 D TcpIp Tcp 10.82.52.110:389->10
.82.223.40:52678, Size 0, Flags A.R.., Seq 3212713916-3212713916, Ack 4159782647
4/25/2017 14:16:33.605 D Vpn Dns query for client.wns
.windows.com to 10.82.52.110, matches VPN 10.82.223.40 server only, Allow
4/25/2017 14:16:33.605 D TcpIp Udp 10.82.223.40:64024->
10.82.52.110:53, Size 48
4/25/2017 14:16:33.605 D Vpn Dns query for client.wns
.windows.com to 192.168.1.1, matches no VPN, Allow
53 for client.wns.windows.com, Type 1
0
g: 0 status: 0
en[308]->dLen[308] len: 308
4/25/2017 14:16:33.647 D TcpIp Tcp 10.82.52.110:445->10
38
en[438]->dLen[438] len: 438
4/25/2017 14:16:33.649 D TcpIp Tcp 10.82.52.110:445->10
66
4/25/2017 14:16:33.649 D TcpIp Tcp 10.82.223.40:52679->
g: 0 status: 0
4/25/2017 14:16:33.711 D TcpIp Udp 10.82.223.40:52402->
10.82.52.110:53, Size 44
0
g: 0 status: 0
en[195]->dLen[195] len: 195
4/25/2017 14:16:33.850 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:64024, Size 175
4/25/2017 14:16:33.850 I Tunnel Dns response for client.
wns.windows.com, answers 5, NS 0, additional 0
me<client.wns.windows.com> qtype<5> qclass<1> qlen<35> match<0>
me<wns.notify.windows.com.akadns.net> qtype<5> qclass<1> qlen<12> match<0>
me<americas2.notify.windows.com.akadns.net> qtype<5> qclass<1> qlen<6> match<0>
me<bn2.wns.notify.windows.com.akadns.net> qtype<5> qclass<1> qlen<10> match<0>
4/25/2017 14:16:33.850 I Tunnel Dns answer 4: bn2wns1.wn
s.windows.com->131.253.34.230
4/25/2017 14:16:33.851 I Vpn Add 111.221.29.66 to IP
address table
en[132]->dLen[132] len: 132
4/25/2017 14:16:34.058 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:52402, Size 112
4/25/2017 14:16:34.059 D TcpIp Udp 10.82.223.40:64559->
10.82.52.110:53, Size 41
53 for wpad.analog.com, Type 1
0
g: 0 status: 0
4/25/2017 14:16:34.095 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
4/25/2017 14:16:34.095 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
4/25/2017 14:16:34.096 D TcpIp Udp 10.82.223.40:64560->
10.82.52.110:389, Size 223
0
ag: 0 status: 0
4/25/2017 14:16:34.123 D TcpIp Udp 10.82.223.40:65134->
10.82.52.110:53, Size 44
0
g: 0 status: 0
4/25/2017 14:16:34.123 D TcpIp Ip 224.0.0.22->24.0.0.0,
0
g: 0 status: 0
4/25/2017 14:16:34.125 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
4/25/2017 14:16:34.129 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
en[123]->dLen[123] len: 123
4/25/2017 14:16:34.366 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:64559, Size 103
en[232]->dLen[232] len: 232
4/25/2017 14:16:34.366 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:64560, Size 212
en[132]->dLen[132] len: 132
4/25/2017 14:16:34.366 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:65134, Size 112
4/25/2017 14:16:34.368 D TcpIp Udp 10.82.223.40:52915->
10.82.52.110:53, Size 41
.53 for wpad.analog.com, Type 1
0
g: 0 status: 0
4/25/2017 14:16:34.428 D TcpIp Ip 224.0.0.22->24.0.0.0,
0
g: 0 status: 0
4/25/2017 14:16:34.460 D Vpn Dns query for HK2SCH1300
20851.wns.windows.com to 10.82.52.110, matches VPN 10.82.223.40 server only, All
ow
4/25/2017 14:16:34.460 D TcpIp Udp 10.82.223.40:53367->
10.82.52.110:53, Size 57
.53 for HK2SCH130020851.wns.windows.com, Type 1
0
g: 0 status: 0
20851.wns.windows.com to 192.168.1.1, matches no VPN, Allow
21661.wns.windows.com to 10.82.52.110, matches VPN 10.82.223.40 server only, All
ow
4/25/2017 14:16:34.476 D TcpIp Udp 10.82.223.40:50873->
10.82.52.110:53, Size 57
.53 for HK2SCH130021661.wns.windows.com, Type 1
0
g: 0 status: 0
21661.wns.windows.com to 192.168.1.1, matches no VPN, Allow
en[123]->dLen[123] len: 123
4/25/2017 14:16:34.575 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:52915, Size 103
en[93]->dLen[93] len: 93
4/25/2017 14:16:34.672 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:53367, Size 73
4/25/2017 14:16:34.672 I Tunnel Dns response for HK2SCH1
30020851.wns.windows.com, answers 1, NS 0, additional 0
4/25/2017 14:16:34.672 I Tunnel Dns answer 0: HK2SCH1300
20851.wns.windows.com->111.221.29.85
en[93]->dLen[93] len: 93
4/25/2017 14:16:34.693 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:50873, Size 73
4/25/2017 14:16:34.693 I Tunnel Dns response for HK2SCH1
30021661.wns.windows.com, answers 1, NS 0, additional 0
4/25/2017 14:16:34.693 I Tunnel Dns answer 0: HK2SCH1300
21661.wns.windows.com->111.221.29.141
4/25/2017 14:16:34.694 I Vpn Add 111.221.29.141 to IP
address table
4/25/2017 14:16:34.978 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
4/25/2017 14:16:34.979 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
4/25/2017 14:16:35.421 D TcpIp Ip 224.0.0.22->24.0.0.0,
g: 0 status: 0
4/25/2017 14:16:35.936 D TcpIp Udp 10.82.223.40:123->10
.82.52.110:123, Size 128
0
ag: 0 status: 0
en[148]->dLen[148] len: 148
4/25/2017 14:16:36.210 D TcpIp Udp 10.82.52.110:123->10
.82.223.40:123, Size 128
4/25/2017 14:16:42.479 D Vpn Dns query for tace.utm.a
nalog.com to 10.82.52.110, matches VPN 10.82.223.40 name and server, Allow
4/25/2017 14:16:42.479 D TcpIp Udp 10.82.223.40:49664->
10.82.52.110:53, Size 45
3 for tace.utm.analog.com, Type 1
0
g: 0 status: 0
4/25/2017 14:16:42.479 D Vpn Dns query for tace.utm.a
nalog.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
en[81]->dLen[81] len: 81
4/25/2017 14:16:42.760 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:49664, Size 61
4/25/2017 14:16:42.760 I Tunnel Dns response for tace.ut
m.analog.com, answers 1, NS 0, additional 0
4/25/2017 14:16:42.760 I Tunnel Dns answer 0: tace.utm.a
nalog.com->10.64.53.245
4/25/2017 14:16:42.760 I Vpn Add 10.64.53.245 for VIP
4/25/2017 14:16:42.760 I Vpn Add 10.64.53.245 for VIP
4/25/2017 14:16:42.760 I Vpn Add 10.64.53.245 to IP a
ddress table
4/25/2017 14:16:42.760 D TcpIp Udp 10.82.223.40:60764->
10.64.53.245:444, Size 28
0
g: 0 status: 0
en[29]->dLen[29] len: 29
4/25/2017 14:16:43.058 D TcpIp Udp 10.64.53.245:444->10
.82.223.40:60764, Size 9
4/25/2017 14:16:43.058 D TcpIp Udp 10.82.223.40:60764->
10.64.53.245:444, Size 28
0
g: 0 status: 0
4/25/2017 14:16:48.713 D TcpIp Tcp 10.82.223.40:52679->
4
0
ag: 0 status: 0
en[112]->dLen[112] len: 112
4/25/2017 14:16:49.121 D TcpIp Tcp 10.82.52.110:445->10
8
4/25/2017 14:16:49.121 D TcpIp Tcp 10.82.223.40:52679->
6
0
ag: 0 status: 0
en[112]->dLen[112] len: 112
4/25/2017 14:16:49.419 D TcpIp Tcp 10.82.52.110:445->10
0
4/25/2017 14:16:49.419 D TcpIp Tcp 10.82.223.40:52679->
10.82.52.110:445, Size 0, Flags A.R.., Seq 2035406710-2035406710, Ack 2324316798
g: 0 status: 0
4/25/2017 14:16:50.713 I Tunnel Send keep-alive message
4/25/2017 14:16:57.106 D TcpIp Udp 10.82.223.40:59451->
10.64.53.245:444, Size 28
0
g: 0 status: 0
sg len: 12
4/25/2017 14:16:59.266 D General ProcessControlMsg ctrl-e
cho-req
0
: 0
4/25/2017 14:24:57.518 D TcpIp Udp 10.82.223.40:50865->
10.64.53.245:444, Size 28
0
g: 0 status: 0
4/25/2017 14:24:59.138 D Vpn Dns query for k4.nstld.c
om to 192.168.1.1, matches no VPN, Allow
4/25/2017 14:24:59.149 D Vpn Dns query for a4.nstld.c
4/25/2017 14:24:59.152 I Vpn Add 69.36.145.33 to IP a
ddress table
sg len: 12
cho-req
0
: 0
4/25/2017 14:30:35.210 D TcpIp Tcp 10.82.223.40:52684->
0
g: 0 status: 0
4/25/2017 14:30:37.602 D TcpIp Udp 10.82.223.40:61761->
10.82.52.110:389, Size 266
0
ag: 0 status: 0
sg len: 12
cho-req
0
: 0
en[232]->dLen[232] len: 232
4/25/2017 14:30:37.965 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:61761, Size 212
10.82.223.40 name and server, Allow
4/25/2017 14:30:38.064 D TcpIp Udp 10.82.223.40:58958->
10.82.52.110:53, Size 87
53 for _ldap._tcp.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com, Type 33
0
ag: 0 status: 0
4/25/2017 14:30:38.129 D Vpn Dns query for cdn.conten
t.prod.cms.msn.com to 10.82.52.110, matches VPN 10.82.223.40 server only, Allow
4/25/2017 14:30:38.129 D TcpIp Udp 10.82.223.40:54886->
10.82.52.110:53, Size 54
4/25/2017 14:30:38.129 D Vpn Dns query for cdn.onenot
e.net to 10.82.52.110, matches VPN 10.82.223.40 server only, Allow
.53 for cdn.content.prod.cms.msn.com, Type 1
0
g: 0 status: 0
4/25/2017 14:30:38.129 D TcpIp Udp 10.82.223.40:51633->
10.82.52.110:53, Size 41
.53 for cdn.onenote.net, Type 1
0
g: 0 status: 0
4/25/2017 14:30:38.129 D Vpn Dns query for cdn.onenot
e.net to 192.168.1.1, matches no VPN, Allow
4/25/2017 14:30:38.129 D Vpn Dns query for cdn.conten
t.prod.cms.msn.com to 192.168.1.1, matches no VPN, Allow
4/25/2017 14:30:38.230 D TcpIp Tcp 10.82.223.40:52684->
0
g: 0 status: 0
en[164]->dLen[164] len: 164
4/25/2017 14:30:38.261 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:58958, Size 144
tcp.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com, answers 1, NS 0, additio
nal 1
me<_ldap._tcp.AMER_US_CA-San_Jose._sites.dc._msdcs.ad.analog.com> qtype<33> qcla
ss<1> qlen<29> match<1>
1.ad.analog.com->10.82.52.110
4/25/2017 14:30:38.261 D TcpIp Udp 10.82.223.40:64644->
10.82.52.110:389, Size 223
0
ag: 0 status: 0
en[178]->dLen[178] len: 178
4/25/2017 14:30:38.370 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:54886, Size 158
4/25/2017 14:30:38.370 I Tunnel Dns response for cdn.con
tent.prod.cms.msn.com, answers 3, NS 0, additional 0
me<cdn.content.prod.cms.msn.com> qtype<5> qclass<1> qlen<42> match<0>
me<cdn.content.prod.cms.msn.com.edgekey.net> qtype<5> qclass<1> qlen<22> match<0
>
4/25/2017 14:30:38.370 I Tunnel Dns answer 2: e10663.g.a
kamaiedge.net->23.205.71.141
en[151]->dLen[151] len: 151
4/25/2017 14:30:38.370 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:51633, Size 131
4/25/2017 14:30:38.370 I Tunnel Dns response for cdn.one
note.net, answers 3, NS 0, additional 0
me<cdn.onenote.net> qtype<5> qclass<1> qlen<26> match<0>
me<cdn.onenote.net.edgekey.net> qtype<5> qclass<1> qlen<24> match<0>
4/25/2017 14:30:38.370 I Tunnel Dns answer 2: e1553.dspg
.akamaiedge.net->23.205.71.45
4/25/2017 14:30:38.370 I Vpn Add 23.41.234.136 to IP
address table
4/25/2017 14:30:38.370 I Vpn Add 104.101.54.71 to IP
address table
en[52]->dLen[52] len: 52
4/25/2017 14:30:38.433 D TcpIp Tcp 10.82.52.110:135->10
4/25/2017 14:30:38.433 D TcpIp Tcp 10.82.223.40:52684->
g: 0 status: 0
4/25/2017 14:30:38.433 D TcpIp Tcp 10.82.223.40:52684->
0
ag: 0 status: 0
en[232]->dLen[232] len: 232
4/25/2017 14:30:38.480 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:64644, Size 212
sg len: 12
cho-req
0
: 0
4/25/2017 14:30:38.593 D TcpIp Udp 10.82.223.40:123->10
.82.52.110:123, Size 128
0
ag: 0 status: 0
4/25/2017 14:30:38.656 D TcpIp Tcp 10.82.223.40:52684->
0
ag: 0 status: 0
en[148]->dLen[148] len: 148
4/25/2017 14:30:38.656 D TcpIp Tcp 10.82.52.110:135->10
3
4/25/2017 14:30:38.656 D TcpIp Tcp 10.82.223.40:52684->
0
ag: 0 status: 0
4/25/2017 14:30:38.867 D TcpIp Tcp 10.82.223.40:52684->
0
ag: 0 status: 0
sg len: 12
cho-req
0
: 0
en[148]->dLen[148] len: 148
4/25/2017 14:30:38.881 D TcpIp Udp 10.82.52.110:123->10
.82.223.40:123, Size 128
en[52]->dLen[52] len: 52
4/25/2017 14:30:38.881 D TcpIp Tcp 10.82.52.110:135->10
en[212]->dLen[212] len: 212
4/25/2017 14:30:38.881 D TcpIp Tcp 10.82.52.110:135->10
1
4/25/2017 14:30:38.883 D TcpIp Tcp 10.82.223.40:52687->
0
g: 0 status: 0
4/25/2017 14:30:38.909 D TcpIp Tcp 10.82.223.40:52684->
g: 0 status: 0
en[52]->dLen[52] len: 52
4/25/2017 14:30:39.222 D TcpIp Tcp 10.82.52.110:135->10
sg len: 12
cho-req
0
: 0
en[52]->dLen[52] len: 52
4/25/2017 14:30:39.222 D TcpIp Tcp 10.82.52.110:49155->
10.82.223.40:52687, Size 0, Flags A..S., Seq 1225836979-1225836979, Ack 81378644
2
4/25/2017 14:30:39.222 D TcpIp Tcp 10.82.223.40:52687->
g: 0 status: 0
4/25/2017 14:30:39.222 D TcpIp Tcp 10.82.223.40:52688->
0
g: 0 status: 0
sg len: 12
cho-req
0
: 0
en[52]->dLen[52] len: 52
4/25/2017 14:30:39.541 D TcpIp Tcp 10.82.52.110:88->10.
82.223.40:52688, Size 0, Flags A..S., Seq 2901096283-2901096283, Ack 1680324807
4/25/2017 14:30:39.541 D TcpIp Tcp 10.82.223.40:52688->
g: 0 status: 0
4/25/2017 14:30:39.541 D TcpIp Tcp 10.82.223.40:52688->
4
0
ag: 0 status: 0
sg len: 12
cho-req
0
: 0
en[306]->dLen[306] len: 306
4/25/2017 14:30:40.104 D TcpIp Tcp 10.82.52.110:88->10.
82.223.40:52688, Size 266, Flags AP..., Seq 2901096284-2901096550, Ack 168032504
8
4/25/2017 14:30:40.104 D TcpIp Tcp 10.82.223.40:52688->
g: 0 status: 0
4/25/2017 14:30:40.105 D TcpIp Tcp 10.82.223.40:52689->
0
g: 0 status: 0
sg len: 12
cho-req
0
: 0
sg len: 12
cho-req
0
: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:40.468 D TcpIp Tcp 10.82.52.110:88->10.
82.223.40:52688, Size 0, Flags A...., Seq 2901096550-2901096550, Ack 1680325049
en[40]->dLen[40] len: 40
4/25/2017 14:30:40.468 D TcpIp Tcp 10.82.52.110:88->10.
82.223.40:52688, Size 0, Flags A.R.., Seq 2901096550-2901096550, Ack 1680325049
en[52]->dLen[52] len: 52
4/25/2017 14:30:40.468 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:40.468 D TcpIp Tcp 10.82.223.40:52689->
g: 0 status: 0
4/25/2017 14:30:40.468 D TcpIp Tcp 10.82.223.40:52689->
5
0
ag: 0 status: 0
4/25/2017 14:30:40.637 D TcpIp Tcp 10.82.223.40:52690->
0
g: 0 status: 0
sg len: 12
cho-req
0
: 0
4/25/2017 14:30:41.022 D TcpIp Udp 10.82.223.40:61465->
10.82.52.110:53, Size 52
53 for HELPDESK-T01.ad.analog.com, Type 6
0
g: 0 status: 0
sg len: 12
cho-req
0
: 0
4/25/2017 14:30:41.084 D General ReceivedPacket isZ: 128
cLen[1334]->dLen[1372] len: 1372
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.52.110:88->10.
88
en[1064]->dLen[1064] len: 1064
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.52.110:88->10.
88
en[52]->dLen[52] len: 52
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.52.110:389->10
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.223.40:52689->
g: 0 status: 0
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.223.40:52689->
g: 0 status: 0
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.223.40:52690->
g: 0 status: 0
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
4/25/2017 14:30:41.084 D TcpIp Tcp 10.82.223.40:52691->
0
g: 0 status: 0
4/25/2017 14:30:41.300 D TcpIp Udp 10.82.223.40:50865->
10.64.53.245:444, Size 28
0
g: 0 status: 0
sg len: 12
cho-req
0
: 0
en[143]->dLen[143] len: 143
4/25/2017 14:30:41.369 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:61465, Size 123
4/25/2017 14:30:41.369 I Tunnel Dns response for HELPDES
K-T01.ad.analog.com, answers 0, NS 1, additional 1
1.ad.analog.com->10.82.52.110
en[40]->dLen[40] len: 40
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.52.110:88->10.
en[40]->dLen[40] len: 40
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.52.110:88->10.
cLen[617]->dLen[1372] len: 1372
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.52.110:389->10
3
cLen[825]->dLen[1325] len: 1325
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.52.110:389->10
3
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.223.40:52690->
en[52]->dLen[52] len: 52
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.52.110:88->10.
g: 0 status: 0
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.223.40:52691->
g: 0 status: 0
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.223.40:52691->
14
n: 1359
0
rag: 0 status: 0
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.223.40:52691->
14
n: 1132
0
rag: 0 status: 0
4/25/2017 14:30:41.369 D TcpIp Tcp 10.82.223.40:52692->
0
g: 0 status: 0
4/25/2017 14:30:41.369 D TcpIp Udp 10.82.223.40:54571->
10.82.52.110:53, Size 117
0
ag: 0 status: 0
en[29]->dLen[29] len: 29
4/25/2017 14:30:41.738 D TcpIp Udp 10.64.53.245:444->10
.82.223.40:50865, Size 9
4/25/2017 14:30:41.738 D TcpIp Udp 10.82.223.40:50865->
10.64.53.245:444, Size 28
0
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.52.110:88->10.
en[52]->dLen[52] len: 52
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52692->
en[137]->dLen[137] len: 137
4/25/2017 14:30:41.769 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:54571, Size 117
4/25/2017 14:30:41.769 I Tunnel Dns response for ad.anal
og.com, answers 1, NS 3, additional 0
me<HELPDESK-T01.ad.analog.com> qtype<5> qclass<254> qlen<0> match<1>
cLen[1351]->dLen[1372] len: 1372
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.52.110:88->10.
23
g: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52692->
25
n: 1359
0
rag: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52692->
5
en[1372]->dLen[1372] len: 1372
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.52.110:88->10.
23
0
ag: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52691->
en[101]->dLen[101] len: 101
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.52.110:88->10.
g: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52691->
g: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52687->
980
n: 1310
0
rag: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52687->
980
led cl<0> dl<1372>
0
rag: 0 status: 0
4/25/2017 14:30:41.769 D TcpIp Tcp 10.82.223.40:52687->
80
0
ag: 0 status: 0
4/25/2017 14:30:41.784 D TcpIp Udp 10.82.223.40:50145->
10.82.52.110:53, Size 51
.53 for 40.223.82.10.in-addr.arpa, Type 6
0
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:88->10.
cLen[1351]->dLen[1372] len: 1372
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:88->10.
57
en[323]->dLen[323] len: 323
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:88->10.
7
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.223.40:52692->
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:88->10.
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:88->10.
en[29]->dLen[29] len: 29
4/25/2017 14:30:42.353 D TcpIp Udp 10.64.53.245:444->10
.82.223.40:50865, Size 9
g: 0 status: 0
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.223.40:52692->
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:49155->
4
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.52.110:49155->
6
g: 0 status: 0
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.223.40:52690->
n: 1344
0
rag: 0 status: 0
4/25/2017 14:30:42.353 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
4/25/2017 14:30:42.353 D TcpIp Udp 10.82.223.40:50146->
10.64.53.245:444, Size 28
0
g: 0 status: 0
en[324]->dLen[324] len: 324
4/25/2017 14:30:42.384 D TcpIp Tcp 10.82.52.110:49155->
396
4/25/2017 14:30:42.384 D TcpIp Tcp 10.82.223.40:52687->
64
0
ag: 0 status: 0
en[155]->dLen[155] len: 155
4/25/2017 14:30:42.406 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:50145, Size 135
4/25/2017 14:30:42.406 I Tunnel Dns response for 40.223.
82.10.in-addr.arpa, answers 0, NS 1, additional 1
1.ad.analog.com->10.82.52.110
4/25/2017 14:30:42.421 D TcpIp Udp 10.82.223.40:64855->
10.82.52.110:53, Size 130
0
ag: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.669 D TcpIp Tcp 10.82.52.110:88->10.
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.706 D TcpIp Tcp 10.82.52.110:88->10.
en[40]->dLen[40] len: 40
4/25/2017 14:30:42.738 D TcpIp Tcp 10.82.52.110:389->10
en[250]->dLen[250] len: 250
4/25/2017 14:30:42.769 D TcpIp Tcp 10.82.52.110:389->10
en[145]->dLen[145] len: 145
4/25/2017 14:30:42.769 D TcpIp Tcp 10.82.52.110:49155->
616
en[150]->dLen[150] len: 150
4/25/2017 14:30:42.769 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:64855, Size 130
4/25/2017 14:30:42.769 I Tunnel Dns response for 10.in-a
ddr.arpa, answers 1, NS 2, additional 0
me<40.223.82.10.in-addr.arpa> qtype<5> qclass<254> qlen<0> match<0>
flags<a8> wFlags<3a8>
4/25/2017 14:30:42.769 D TcpIp Tcp 10.82.223.40:52687->
69
0
ag: 0 status: 0
4/25/2017 14:30:42.769 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
4/25/2017 14:30:43.540 D TcpIp Tcp 10.82.223.40:52687->
69
0
ag: 0 status: 0
en[207]->dLen[207] len: 207
4/25/2017 14:30:43.555 D TcpIp Tcp 10.82.52.110:389->10
4/25/2017 14:30:43.555 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
en[244]->dLen[244] len: 244
4/25/2017 14:30:43.640 D TcpIp Tcp 10.82.52.110:49155->
884
4/25/2017 14:30:43.640 D TcpIp Tcp 10.82.223.40:52687->
73
0
ag: 0 status: 0
4/25/2017 14:30:43.925 D TcpIp Udp 10.82.223.40:55881->
10.82.52.110:53, Size 39
53 for ad.analog.com, Type 6
0
g: 0 status: 0
en[52]->dLen[52] len: 52
4/25/2017 14:30:44.109 D TcpIp Tcp 10.82.52.110:49155->
4
en[491]->dLen[491] len: 491
4/25/2017 14:30:44.109 D TcpIp Tcp 10.82.52.110:389->10
.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com to 10.82.52.110, matche
s VPN 10.82.223.40 name and server, Allow
4/25/2017 14:30:44.109 D TcpIp Udp 10.82.223.40:63298->
10.82.52.110:53, Size 92
53 for _ldap._tcp.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com, Type
33
0
ag: 0 status: 0
.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com to 192.168.1.1, matches
VPN 10.82.223.40 name only, Discard
4/25/2017 14:30:44.172 D TcpIp Tcp 10.82.223.40:52690->
g: 0 status: 0
en[452]->dLen[452] len: 452
4/25/2017 14:30:44.172 D TcpIp Tcp 10.82.52.110:49155->
136
4/25/2017 14:30:44.172 D TcpIp Tcp 10.82.223.40:52687->
85
0
ag: 0 status: 0
en[130]->dLen[130] len: 130
4/25/2017 14:30:44.225 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:55881, Size 110
4/25/2017 14:30:44.225 I Tunnel Dns response for ad.anal
og.com, answers 1, NS 0, additional 1
me<ad.analog.com> qtype<6> qclass<1> qlen<43> match<1>
1.ad.analog.com->10.82.52.110
.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com to 10.64.51.110, matche
s VPN 10.82.223.40 name and server, Allow
4/25/2017 14:30:44.525 D TcpIp Udp 10.82.223.40:63298->
10.64.51.110:53, Size 92
53 for _ldap._tcp.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com, Type
33
0
ag: 0 status: 0
en[169]->dLen[169] len: 169
4/25/2017 14:30:44.525 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:63298, Size 149
tcp.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com, answers 1, NS 0, ad
ditional 1
me<_ldap._tcp.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com> qtype<33>
qclass<1> qlen<29> match<1>
1.ad.analog.com->10.82.52.110
4/25/2017 14:30:44.525 D TcpIp Udp 10.82.223.40:51001->
10.82.52.110:389, Size 201
0
ag: 0 status: 0
en[356]->dLen[356] len: 356
4/25/2017 14:30:44.541 D TcpIp Tcp 10.82.52.110:49155->
388
4/25/2017 14:30:44.541 D TcpIp Tcp 10.82.223.40:52687->
01
0
ag: 0 status: 0
4/25/2017 14:30:44.904 D General Purging inactive flow[65
]:
4/25/2017 14:30:44.904 D General IPFlow :
protocol :6
source :10.82.223.40:52679
dest :10.82.52.110:445
lastActivity :1493100992
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
consecutiveCmpPkts :0
consecutiveUnCmpPkts :0
samplingIntervalUseCnt :0
4/25/2017 14:30:44.904 D General Purging inactive flow[16
6]:
4/25/2017 14:30:44.904 D General IPFlow :
protocol :6
source :10.82.223.40:52678
dest :10.82.52.110:389
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
en[240]->dLen[240] len: 240
4/25/2017 14:30:44.941 D TcpIp Udp 10.82.52.110:389->10
.82.223.40:51001, Size 220
en[372]->dLen[372] len: 372
4/25/2017 14:30:44.973 D TcpIp Tcp 10.82.52.110:49155->
640
4/25/2017 14:30:44.973 D TcpIp Tcp 10.82.223.40:52687->
33
0
ag: 0 status: 0
en[169]->dLen[169] len: 169
4/25/2017 14:30:45.005 D TcpIp Udp 10.64.51.110:53->10.
82.223.40:63298, Size 149
tcp.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com, answers 1, NS 0, ad
ditional 1
me<_ldap._tcp.AMER_US_CA-San_Jose._sites.DomainDnsZones.ad.analog.com> qtype<33>
qclass<1> qlen<29> match<1>
1.ad.analog.com->10.82.52.110
4/25/2017 14:30:45.041 D TcpIp Tcp 10.82.223.40:52693->
0
g: 0 status: 0
en[180]->dLen[180] len: 180
4/25/2017 14:30:45.643 D TcpIp Tcp 10.82.52.110:49155->
780
en[52]->dLen[52] len: 52
4/25/2017 14:30:45.643 D TcpIp Tcp 10.82.52.110:389->10
4/25/2017 14:30:45.643 D TcpIp Tcp 10.82.223.40:52693->
g: 0 status: 0
4/25/2017 14:30:45.643 D TcpIp Tcp 10.82.223.40:52693->
g: 0 status: 0
4/25/2017 14:30:45.643 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
4/25/2017 14:30:45.705 D TcpIp Tcp 10.82.223.40:52687->
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:45.943 D TcpIp Tcp 10.82.52.110:389->10
en[40]->dLen[40] len: 40
4/25/2017 14:30:45.959 D TcpIp Tcp 10.82.52.110:389->10
en[129]->dLen[129] len: 129
4/25/2017 14:30:45.959 D TcpIp Tcp 10.82.52.110:389->10
4/25/2017 14:30:45.959 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
en[219]->dLen[219] len: 219
4/25/2017 14:30:46.260 D TcpIp Tcp 10.82.52.110:389->10
4/25/2017 14:30:46.260 D TcpIp Tcp 10.82.223.40:52690->
0
ag: 0 status: 0
4/25/2017 14:30:46.260 D TcpIp Tcp 10.82.223.40:52690->
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:46.560 D TcpIp Tcp 10.82.52.110:389->10
4/25/2017 14:30:49.148 D TcpIp Tcp 10.82.223.40:52694->
0
g: 0 status: 0
en[52]->dLen[52] len: 52
4/25/2017 14:30:49.461 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:49.461 D TcpIp Tcp 10.82.223.40:52694->
g: 0 status: 0
4/25/2017 14:30:49.461 D TcpIp Tcp 10.82.223.40:52694->
0
ag: 0 status: 0
en[276]->dLen[276] len: 276
4/25/2017 14:30:50.101 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:50.101 D TcpIp Tcp 10.82.223.40:52694->
g: 0 status: 0
4/25/2017 14:30:50.132 D TcpIp Tcp 10.82.223.40:52695->
0
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:50.664 D TcpIp Tcp 10.82.52.110:88->10.
en[40]->dLen[40] len: 40
4/25/2017 14:30:50.695 D TcpIp Tcp 10.82.52.110:88->10.
en[52]->dLen[52] len: 52
4/25/2017 14:30:50.742 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:50.742 D TcpIp Tcp 10.82.223.40:52695->
g: 0 status: 0
4/25/2017 14:30:50.742 D TcpIp Tcp 10.82.223.40:52695->
7
0
ag: 0 status: 0
4/25/2017 14:30:51.211 D TcpIp Tcp 10.82.223.40:52684->
g: 0 status: 0
cLen[1334]->dLen[1372] len: 1372
4/25/2017 14:30:51.242 D TcpIp Tcp 10.82.52.110:88->10.
06
en[1064]->dLen[1064] len: 1064
4/25/2017 14:30:51.242 D TcpIp Tcp 10.82.52.110:88->10.
06
4/25/2017 14:30:51.242 D TcpIp Tcp 10.82.223.40:52695->
g: 0 status: 0
4/25/2017 14:30:51.242 D TcpIp Tcp 10.82.223.40:52695->
g: 0 status: 0
4/25/2017 14:30:51.242 D TcpIp Tcp 10.82.223.40:52696->
0
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:51.570 D TcpIp Tcp 10.82.52.110:135->10
en[40]->dLen[40] len: 40
4/25/2017 14:30:51.570 D TcpIp Tcp 10.82.52.110:135->10
.82.223.40:52684, Size 0, Flags A...F, Seq 1897387747-1897387747, Ack 639893832
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.223.40:52684->
en[40]->dLen[40] len: 40
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.52.110:88->10.
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.52.110:88->10.
en[52]->dLen[52] len: 52
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.223.40:52696->
g: 0 status: 0
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.223.40:52696->
05
n: 1359
0
rag: 0 status: 0
4/25/2017 14:30:51.586 D TcpIp Tcp 10.82.223.40:52696->
5
led cl<0> dl<973>
0
ag: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:51.883 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:52.602 D TcpIp Tcp 10.82.223.40:52696->
5
led cl<0> dl<973>
0
ag: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:53.040 D TcpIp Tcp 10.82.52.110:88->10.
cLen[1360]->dLen[1372] len: 1372
4/25/2017 14:30:53.040 D TcpIp Tcp 10.82.52.110:88->10.
17
en[1323]->dLen[1323] len: 1323
4/25/2017 14:30:53.086 D TcpIp Tcp 10.82.52.110:88->10.
17
4/25/2017 14:30:53.086 D TcpIp Tcp 10.82.223.40:52696->
g: 0 status: 0
4/25/2017 14:30:53.086 D TcpIp Tcp 10.82.223.40:52696->
g: 0 status: 0
en[40]->dLen[40] len: 40
4/25/2017 14:30:53.415 D TcpIp Tcp 10.82.52.110:88->10.
en[40]->dLen[40] len: 40
4/25/2017 14:30:53.415 D TcpIp Tcp 10.82.52.110:88->10.
4/25/2017 14:30:57.371 D TcpIp Udp 10.82.223.40:62536->
10.64.53.245:444, Size 28
0
g: 0 status: 0
sg len: 12
cho-req
0
: 0
4/25/2017 14:31:12.351 D TcpIp Udp 10.82.223.40:62537->
10.64.53.245:444, Size 28
0
g: 0 status: 0
4/25/2017 14:31:48.594 D TcpIp Tcp 10.82.223.40:52687->
g: 0 status: 0
4/25/2017 14:31:56.778 D TcpIp Tcp 10.82.223.40:52687->
g: 0 status: 0
4/25/2017 14:31:56.809 D TcpIp Udp 10.82.223.40:49665->
10.64.53.245:444, Size 28
0
g: 0 status: 0
4/25/2017 14:31:58.498 D Vpn Dns query for cm2012ibcm
4/25/2017 14:31:58.498 D TcpIp Udp 10.82.223.40:60424->
10.82.52.110:53, Size 47
3 for cm2012ibcm.analog.com, Type 1
0
g: 0 status: 0
.analog.com to 192.168.1.1, matches VPN 10.82.223.40 name only, Discard
4/25/2017 14:31:58.748 D TcpIp Tcp 10.82.223.40:52687->
g: 0 status: 0
4/25/2017 14:31:58.905 D TcpIp Udp 10.82.223.40:60424->
10.64.51.110:53, Size 47
0
g: 0 status: 0
4/25/2017 14:31:59.906 D TcpIp Udp 10.82.223.40:60424->
10.82.52.110:53, Size 47
0
g: 0 status: 0
en[129]->dLen[129] len: 129
4/25/2017 14:32:00.281 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:60424, Size 109
en[40]->dLen[40] len: 40
4/25/2017 14:32:00.281 D TcpIp Tcp 10.82.52.110:49155->
1
4/25/2017 14:32:00.281 D TcpIp Tcp 10.82.223.40:52687->
en[129]->dLen[129] len: 129
4/25/2017 14:32:00.281 D TcpIp Udp 10.64.51.110:53->10.
82.223.40:60424, Size 109
g: 0 status: 0
4/25/2017 14:32:00.281 D Vpn Dns query for h4.nstld.c
sg len: 12
cho-req
0
: 0
en[40]->dLen[40] len: 40
4/25/2017 14:32:01.186 D TcpIp Tcp 10.82.52.110:49155->
1
4/25/2017 14:32:01.186 D TcpIp Tcp 10.82.223.40:52687->
g: 0 status: 0
sg len: 12
cho-req
0
: 0
en[129]->dLen[129] len: 129
4/25/2017 14:32:01.984 D TcpIp Udp 10.82.52.110:53->10.
82.223.40:60424, Size 109
sg len: 12
cho-req
0
: 0
4/25/2017 14:32:02.030 D Vpn Dns query for g4.nstld.c
sg len: 12
cho-req
0
: 0
sg len: 12
cho-req
0
: 0
sg len: 12
cho-req
0
: 0
sg len: 12
cho-req
0
: 0
4/25/2017 14:32:05.922 I Vpn Add 209.112.114.33 to IP
address table
4/25/2017 14:32:11.813 D TcpIp Udp 10.82.223.40:63294->
10.64.53.245:444, Size 28
0
g: 0 status: 0
4/25/2017 14:32:26.815 D TcpIp Udp 10.82.223.40:63295->
10.64.53.245:444, Size 28
0
g: 0 status: 0
4/25/2017 14:32:27.710 I Vpn Error(c000020d): TunnelH
eaderReceiveComplete failed, The transport connection has been reset.
4/25/2017 14:32:27.710 I Vpn Set VPN state from Run t
o Disconnected, reason c000020d
4/25/2017 14:32:27.710 D Vpn Disconnect event signale
d, type Abort
transition, from Run to Disconnected, reason 0xc000020d
4/25/2017 14:32:27.710 D Tunnel Stop keep-alive timer
essage to VPN monitor, msg 0x00008001, wparam 0x00004102, lparam 0x0000012c
4/25/2017 14:32:27.710 I Tunnel Set tunnel state from Ru
n to Disconnected
4/25/2017 14:32:27.710 D General Stop state: EspRun
4/25/2017 14:32:27.710 D General Set ESP state from EspRu
n to EspClosed
4/25/2017 14:32:27.710 D General Stop usoc 0x60c
4/25/2017 14:32:27.710 D General Reset in<1> gcm<0>
4/25/2017 14:32:27.710 I General Stop sndCount: 32 wrtCou
nt: 32 minSend: 29 minWrt: 30
4/25/2017 14:32:27.710 I Tunnel Start tunnel resumption,
attempt 1, delay 1000 ms, time remaining 30000 ms
4/25/2017 14:32:27.710 D General Receive-Error status: 0x
3e3
4/25/2017 14:32:27.710 I General HandleError state: EspCl
osed status: 0x3e3 omtu: 1476
4/25/2017 14:32:27.710 D General Stop state: EspClosed
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
3e3
4/25/2017 14:40:48.734 I Tunnel Set tunnel state from Di
sconnected to Connecting
4/25/2017 14:40:48.734 I Tunnel Establishing tunnel conn
ection to 137.71.223.69:443
4/25/2017 14:40:48.734 I Vpn Set VPN state from Disco
nnected to Connecting, reason 00000000
4/25/2017 14:40:48.734 I Vpn Error(c00000be): Connect
failed, The network path cannot be located.
cting to Disconnected, reason c00000be
transition, from Disconnected to Connecting, reason 0x00000000
transition, from Connecting to Disconnected, reason 0xc00000be
4/25/2017 14:40:48.734 I Tunnel Error(c00000be): QueueIo
RasClose failed, The network path cannot be located.
4/25/2017 14:40:48.734 I Tunnel Tunnel connection 0.0.0.
0:0->137.71.223.69:443 completed, status 0xc00000be
4/25/2017 14:40:48.734 D Tunnel IoConnect completed, sta
tus 0xc00000be
4/25/2017 14:40:48.734 I Tunnel Error(c00000be): QueueIo
RasClose failed, The network path cannot be located.
4/25/2017 14:40:48.734 I Tunnel Set tunnel state from Co
nnecting to Closed
4/25/2017 14:40:48.734 I Tunnel Tunnel closed
essage to VPN monitor, msg 0x00008001, wparam 0x00008002, lparam 0x0000012f
essage to VPN monitor, msg 0x00008002, wparam 0x00000000, lparam 0x00000000
4/25/2017 14:40:48.915 D General UndoDNSSettings:dnsSuffi
xCount<2> savedFSDns<1>
4/25/2017 14:40:48.915 D General UndoDNSSettings:searchLi
st<> status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:removed
search-bkup status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:domain<a
d.analog.com> status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:removed
domain-bkup status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:No Srch-
DNSClient policy searchList<> status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:No Dmn-D
NSClient policy domain<ad.analog.com> status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:restored
<Tcpip\Parameters><SearchList><> status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:restored
<Tcpip\Parameters><Domain><ad.analog.com> status<0>
4/25/2017 14:40:48.915 D General UndoDNSSettings:removedF
SDns srchlist<0> status<0>
4/25/2017 14:40:48.931 D General NGWFP:DatagramDataNotify
4/25/2017 14:40:48.931 D General NGWFP:deleteFilter 00000
000
4/25/2017 14:40:48.931 I General NgWfpFilterEnable comple
ted, status 0x00000000
4/25/2017 14:40:48.947 I Vpn Delete 10.64.51.110 for
VIP 10.82.223.40 from IP redirection table
4/25/2017 14:40:48.947 I Vpn Delete 166.78.207.49 for
4/25/2017 14:40:48.947 I Vpn Delete 52.18.56.238 for
4/25/2017 14:40:48.947 I Vpn Delete 140.98.193.112 fo
r VIP 10.82.223.40 from IP redirection table
4/25/2017 14:40:48.947 I Vpn Delete 10.82.52.110 for
4/25/2017 14:40:48.947 I Vpn Delete 52.16.160.11 for
4/25/2017 14:40:48.947 I Vpn Delete 96.43.150.235 for
4/25/2017 14:40:48.947 I Vpn Delete 34.193.73.68 for
4/25/2017 14:40:48.947 I Vpn Delete 52.86.49.207 for
4/25/2017 14:40:48.947 I Vpn Delete 193.130.39.186 fo
4/25/2017 14:40:48.947 I Vpn Delete 207.251.96.80 for
4/25/2017 14:40:48.947 I Vpn Delete 65.125.54.250 for
4/25/2017 14:40:48.947 I Vpn Delete 69.63.129.138 for
4/25/2017 14:40:48.947 I Vpn Delete 52.30.19.98 for V
IP 10.82.223.40 from IP redirection table
4/25/2017 14:40:48.947 I Vpn Delete 96.43.144.27 for
4/25/2017 14:40:48.947 I Vpn Delete 52.45.212.14 for
4/25/2017 14:40:48.947 I Vpn Delete 173.254.190.152 f
or VIP 10.82.223.40 from IP redirection table
4/25/2017 14:40:48.947 I Vpn Delete 96.43.146.124 for
4/25/2017 14:40:48.947 I Vpn Delete 10.64.53.245 for
4/25/2017 14:40:48.947 I Vpn Delete 137.71.25.170 for
4/25/2017 14:40:48.947 I Vpn Delete 10.64.53.110 for
4/25/2017 14:40:48.947 I Vpn Delete 150.175.58.10 for
4/25/2017 14:40:48.947 I Vpn Delete 52.69.78.66 for V
4/25/2017 14:40:48.947 I Vpn Delete 137.71.25.172 for
4/25/2017 14:40:48.947 I Vpn Delete 203.117.88.72 for
4/25/2017 14:40:48.947 I Vpn Delete 54.173.5.197 for
4/25/2017 14:40:48.947 I Vpn Delete 204.11.56.48 for
4/25/2017 14:40:48.947 I Vpn Delete 65.38.165.21 for
4/25/2017 14:40:48.947 I Vpn Delete 52.201.40.188 for
4/25/2017 14:40:48.947 I Vpn Delete 136.146.210.102 f
4/25/2017 14:40:48.947 I Vpn Delete 52.204.37.87 for
4/25/2017 14:40:48.947 I Vpn Delete 23.7.134.153 for
4/25/2017 14:40:48.947 I Vpn Delete 65.125.54.80 for
4/25/2017 14:40:48.947 I Vpn Delete 96.43.149.27 for
4/25/2017 14:40:48.947 I Vpn Delete 52.73.93.111 for
4/25/2017 14:40:48.947 I Vpn Delete 193.130.39.185 fo
4/25/2017 14:40:48.947 I Vpn Delete 52.52.37.62 for V
4/25/2017 14:40:48.947 I Vpn Delete 184.86.121.28 for
4/25/2017 14:40:48.947 I Vpn Delete 136.146.210.78 fo
4/25/2017 14:40:48.947 I Vpn Delete 96.43.144.26 for
4/25/2017 14:40:48.947 I Vpn Delete 52.196.227.247 fo
4/25/2017 14:40:48.947 I Vpn Delete 208.99.166.251 fo
4/25/2017 14:40:48.947 I Vpn Delete 137.71.25.137 for
4/25/2017 14:40:48.947 I Vpn Delete 67.231.154.66 for
4/25/2017 14:40:48.947 I Vpn Delete 96.43.150.107 for
4/25/2017 14:40:48.947 I Vpn Delete 96.43.145.27 for
4/25/2017 14:40:48.947 I Vpn Delete 52.6.76.195 for V
4/25/2017 14:40:48.947 I Vpn Delete 96.43.148.27 for
4/25/2017 14:40:48.947 I Vpn Delete 203.117.88.73 for
4/25/2017 14:40:48.947 I Vpn Delete 136.146.210.101 f
4/25/2017 14:40:48.947 I Vpn Delete 96.43.150.124 for
4/25/2017 14:40:48.947 I Vpn Delete 96.43.146.251 for
4/25/2017 14:40:48.994 D Vpn VPN cleanup
4/25/2017 14:40:48.994 D Vpn Flush NDIS send queue, 1
packets pending
4/25/2017 14:40:48.994 I Vpn Signal the user that the
tunnel has closed
4/25/2017 14:40:48.994 I Vpn Outgoing call closed by
user
4/25/2017 14:40:48.994 D Tunnel IoClose completed, statu
s 0x5023
4/25/2017 14:40:48.994 D Vpn PacketPool: allocated 67
39, freed 6739
4/25/2017 14:40:49.009 I General Compressor Details:
CompressedPackets :8
CompressedPostBytes :10538
CompressedPreBytes :10743
UnCompressedBytes :159
DecompressedPackets :7
DecompressedPostBytes :9557
DecompressedPreBytes :8172
4/25/2017 14:40:49.009 D General IPFlowHashTable_Clear de
lete-entry[0] count<0>
4/25/2017 14:40:49.009 D General IPFlow :
protocol :6
source :10.82.223.40:52692
dest :10.82.52.110:88
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
4/25/2017 14:40:49.009 D General IPFlow :
protocol :6
source :10.82.223.40:52687
dest :10.82.52.110:49155
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
4/25/2017 14:40:49.009 D General IPFlow :
protocol :6
source :10.82.223.40:52690
dest :10.82.52.110:389
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
4/25/2017 14:40:49.009 D General IPFlow :
protocol :6
source :10.82.223.40:52691
dest :10.82.52.110:88
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
4/25/2017 14:40:49.009 D General IPFlow :
protocol :6
source :10.82.223.40:52696
dest :10.82.52.110:88
cmpState :
cmpEnabled :1
samplingPktCount :0
samplingInterval :4
4/25/2017 14:40:49.009 D General ~ESPCrypto
4/25/2017 14:40:49.009 D General Reset in<0> gcm<0>
4/25/2017 14:40:49.009 I Vpn Delete device \DEVICE\TC
PIP_{b73fd6ff-3fb5-4589-a307-4533e0e4b032}, IP 10.82.223.40

Ngutil-20170425 at 144110 11 4

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Ngutil-20170425 at 144110 11 4

Transféré par

Droits d'auteur :

Formats disponibles

4/25/2017 14:15:58.

733 I General ConnectNamedPipe() got m

Vous aimerez peut-être aussi