<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Segoe UI","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
p.Sprechblasentext, li.Sprechblasentext, div.Sprechblasentext
{mso-style-name:Sprechblasentext;
mso-style-link:"Sprechblasentext Zchn";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.SprechblasentextZchn
{mso-style-name:"Sprechblasentext Zchn";
mso-style-priority:99;
mso-style-link:Sprechblasentext;
font-family:"Tahoma","sans-serif";}
span.EmailStyle26
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:70.85pt 70.85pt 56.7pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>FWIW it appears that, by default, those debug files are only touched when the services start up, not when tunnel sessions are established. Have you tried opening the files to view the entries in them? Are you concerned that the Shrew client is trying to do something nefarious?<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> vpn-help [mailto:vpn-help-bounces@lists.shrew.net] <b>On Behalf Of </b>Arno Seidel<br><b>Sent:</b> Monday, February 10, 2014 3:36 AM<br><b>To:</b> Hunter, Mathew<br><b>Cc:</b> vpn-help@lists.shrew.net<br><b>Subject:</b> Re: [vpn-help] Filechange<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=DE style='color:#1F497D'>Hi there,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>this would explain the filechange every day or every reboot of the computer.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>But this would not explain how I can find the debug-files with a date which lies before some reboots of the computer.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Regards <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Arno Seidel<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span lang=DE style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Von:</span></b><span lang=DE style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Hunter, Mathew [<a href="mailto:Mathew.Hunter@perkinswill.com">mailto:Mathew.Hunter@perkinswill.com</a>] <br><b>Gesendet:</b> Freitag, 7. Februar 2014 18:40<br><b>An:</b> Jim Harle; Arno Seidel<br><b>Cc:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br><b>Betreff:</b> RE: Filechange<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I just restarted my services and the date changed for the following files:<br>iked.log<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Ipsec.log<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>The only other file in there is debug.txt so if you have others you may want to verify they are meant to be there, otherwise they look pretty innocuous.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>My guess is you rebooted your computer which caused the logs to get updated with the service start.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-right:.5in;text-autospace:none'><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF'>Mathew Hunter </span></b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF'>CCNA, MCITP-ET<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:gray'>IT Infrastructure Site Lead<o:p></o:p></span></p><p class=MsoNormal style='margin-right:.5in;text-autospace:none'><b><span lang=ES style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'>t</span></b><span lang=ES style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'> 604.484.1030 <b>m</b> 604.218.0695<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'>Perkins+Will</span></b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Jim Harle [<a href="mailto:vpn@technicolor.com">mailto:vpn@technicolor.com</a>] <br><b>Sent:</b> Friday, February 07, 2014 9:33 AM<br><b>To:</b> Arno Seidel<br><b>Cc:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>; Hunter, Mathew<br><b>Subject:</b> RE: Filechange<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Additionally, those output files have date/time stamps for the entries in them. Those files definitely get touched when the two services Matthew pointed out start; not sure what they are doing when “idle.”<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> vpn-help [<a href="mailto:vpn-help-bounces@lists.shrew.net">mailto:vpn-help-bounces@lists.shrew.net</a>] <b>On Behalf Of </b>Hunter, Mathew<br><b>Sent:</b> Friday, February 07, 2014 9:24 AM<br><b>To:</b> Arno Seidel; <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br><b>Subject:</b> Re: [vpn-help] Filechange<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>There are 2 services ShrewSoft IKE Daemon and ShrewSoft IPSEC Daemon (they start automatically on computer startup).<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I’d almost guarantee that those are generating the debug output in your folder.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal style='margin-right:.5in;text-autospace:none'><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF'>Mathew Hunter </span></b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF'>CCNA, MCITP-ET<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:gray'>IT Infrastructure Site Lead<o:p></o:p></span></p><p class=MsoNormal style='margin-right:.5in;text-autospace:none'><b><span lang=ES style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'>t</span></b><span lang=ES style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'> 604.484.1030 <b>m</b> 604.218.0695<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'>Perkins+Will</span></b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D'><o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> vpn-help [<a href="mailto:vpn-help-bounces@lists.shrew.net">mailto:vpn-help-bounces@lists.shrew.net</a>] <b>On Behalf Of </b>Arno Seidel<br><b>Sent:</b> Friday, February 07, 2014 8:49 AM<br><b>To:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br><b>Subject:</b> [vpn-help] Filechange<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=DE>Dear list,<o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p><p class=MsoNormal>hope to get an answer.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I´ve installed the shrew soft vpn-client on my laptop (OS Windows 7 64 bit) some months ago.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Today I searched for files which where changed on a specific date. <o:p></o:p></p><p class=MsoNormal>And I found three files in the C:\Programms\ShrewSoft\VPN Client\debug folder which<o:p></o:p></p><p class=MsoNormal>Where changed on 2014/01/27 10:53 … and I know that on this day in this hour I was sitting<o:p></o:p></p><p class=MsoNormal>In my office and using Word and Excel and not doing anything with the vpn-client on my laptop.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Then the files changed their dates to: 2014/02/07 13:53<o:p></o:p></p><p class=MsoNormal>Without using the VPN-client.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I´ve no idea why the files changed their change-date.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Do you have a explanation for that?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>There was no reboot / power off / suspend <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:10.0pt'>Arno Seidel<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt'>IT-Manager<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt'>Online Research Manager<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt'><br></span><span lang=DE style='font-size:10.0pt'>INFO GmbH<o:p></o:p></span></p><p class=MsoNormal><span lang=DE style='font-size:10.0pt'>Markt- und Meinungsforschung<o:p></o:p></span></p><p class=MsoNormal><span lang=DE style='font-size:10.0pt'>Ein Unternehmen der INFO Research Group<o:p></o:p></span></p><p class=MsoNormal><span lang=DE style='font-size:10.0pt'><br>Schönholzer Straße 1A, D-13187 Berlin<br>Tel. </span><span style='font-size:10.0pt'>+49-30-490 01 - 305<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:10.0pt'>Fax +49-30-490 01 - 499<br>Mobil:+49-173-605 90 69<br></span><span lang=DE style='font-size:10.0pt'><a href="mailto:a.seidel@infogmbh.de"><span lang=EN-US>a.seidel@infogmbh.de</span></a></span><span style='font-size:10.0pt'><o:p></o:p></span></p><p class=MsoNormal><span lang=DE style='font-size:10.0pt'><a href="http://www.infogmbh.de/">http://www.infogmbh.de</a><br>Sitz: Berlin, AG Charlottenburg HRB 36905<br>USt.-IdNr. DE137224457<br>Geschäftsführer: Dr. Holger Liljeberg<br>Mitgliedschaften:<br>Arbeitskreis Deutscher Markt- und Sozialforschungsinstitute ADM e.V.<br>Berufsverband Deutscher Markt- und Sozialforscher BVM e.V.</span><span lang=DE><o:p></o:p></span></p><p class=MsoNormal><span lang=DE>ESOMAR<i><o:p></o:p></i></span></p><p class=MsoNormal><i><span lang=DE><o:p> </o:p></span></i></p><p class=MsoNormal><i><span lang=DE>Bitte prüfen Sie der Umwelt zuliebe, ob der Ausdruck dieser eMail erforderlich ist.</span></i><span lang=DE><o:p></o:p></span></p><p class=MsoNormal><span lang=DE><o:p> </o:p></span></p></div></body></html>