<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Sprechblasentext Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.SprechblasentextZchn
{mso-style-name:"Sprechblasentext Zchn";
mso-style-priority:99;
mso-style-link:Sprechblasentext;
font-family:"Tahoma","sans-serif";}
p.BalloonText, li.BalloonText, div.BalloonText
{mso-style-name:"Balloon Text";
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Segoe UI","sans-serif";}
span.E-MailFormatvorlage21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.E-MailFormatvorlage22
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage23
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage27
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hello Jim,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Yes´ve tried it and there is only one line with the date / time and version number of the service.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I’m only wondering why the file date differs from reboot times of my laptop.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Arno Seidel<o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Jim Harle [mailto:vpn@technicolor.com]
<br>
<b>Gesendet:</b> Montag, 10. Februar 2014 20:41<br>
<b>An:</b> Arno Seidel<br>
<b>Cc:</b> vpn-help@lists.shrew.net<br>
<b>Betreff:</b> RE: Filechange<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">FWIW it appears that, by default, those debug files are only touched when the services start up, not when tunnel sessions are established. Have you tried opening the files to view the entries in
them? Are you concerned that the Shrew client is trying to do something nefarious?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> vpn-help [<a href="mailto:vpn-help-bounces@lists.shrew.net">mailto:vpn-help-bounces@lists.shrew.net</a>]
<b>On Behalf Of </b>Arno Seidel<br>
<b>Sent:</b> Monday, February 10, 2014 3:36 AM<br>
<b>To:</b> Hunter, Mathew<br>
<b>Cc:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<b>Subject:</b> Re: [vpn-help] Filechange<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Hi there,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">this would explain the filechange every day or every reboot of the computer.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">But this would not explain how I can find the debug-files with a date which lies before some reboots of the computer.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Regards <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Arno Seidel<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Hunter, Mathew [<a href="mailto:Mathew.Hunter@perkinswill.com">mailto:Mathew.Hunter@perkinswill.com</a>]
<br>
<b>Gesendet:</b> Freitag, 7. Februar 2014 18:40<br>
<b>An:</b> Jim Harle; Arno Seidel<br>
<b>Cc:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<b>Betreff:</b> RE: Filechange<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I just restarted my services and the date changed for the following files:<br>
iked.log<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Ipsec.log<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">The only other file in there is debug.txt so if you have others you may want to verify they are meant to be there, otherwise they look pretty innocuous.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">My guess is you rebooted your computer which caused the logs to get updated with the service start.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-right:36.0pt;text-autospace:none"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF">Mathew Hunter
</span></b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF">CCNA, MCITP-ET<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:gray">IT Infrastructure Site Lead<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:36.0pt;text-autospace:none"><b><span lang="ES" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D">t</span></b><span lang="ES" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D">
604.484.1030 <b>m</b> 604.218.0695<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D">Perkins+Will</span></b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Jim Harle [<a href="mailto:vpn@technicolor.com">mailto:vpn@technicolor.com</a>]
<br>
<b>Sent:</b> Friday, February 07, 2014 9:33 AM<br>
<b>To:</b> Arno Seidel<br>
<b>Cc:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>; Hunter, Mathew<br>
<b>Subject:</b> RE: Filechange<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Additionally, those output files have date/time stamps for the entries in them. Those files definitely get touched when the two services Matthew pointed out start; not sure what they are doing when
“idle.”<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> vpn-help [<a href="mailto:vpn-help-bounces@lists.shrew.net">mailto:vpn-help-bounces@lists.shrew.net</a>]
<b>On Behalf Of </b>Hunter, Mathew<br>
<b>Sent:</b> Friday, February 07, 2014 9:24 AM<br>
<b>To:</b> Arno Seidel; <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<b>Subject:</b> Re: [vpn-help] Filechange<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">There are 2 services ShrewSoft IKE Daemon and ShrewSoft IPSEC Daemon (they start automatically on computer startup).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I’d almost guarantee that those are generating the debug output in your folder.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal" style="margin-right:36.0pt;text-autospace:none"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF">Mathew Hunter
</span></b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#00B1DF">CCNA, MCITP-ET<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:gray">IT Infrastructure Site Lead<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-right:36.0pt;text-autospace:none"><b><span lang="ES" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D">t</span></b><span lang="ES" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D">
604.484.1030 <b>m</b> 604.218.0695<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D">Perkins+Will</span></b><span lang="EN-US" style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#6D6D6D"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> vpn-help [<a href="mailto:vpn-help-bounces@lists.shrew.net">mailto:vpn-help-bounces@lists.shrew.net</a>]
<b>On Behalf Of </b>Arno Seidel<br>
<b>Sent:</b> Friday, February 07, 2014 8:49 AM<br>
<b>To:</b> <a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<b>Subject:</b> [vpn-help] Filechange<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">Dear list,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">hope to get an answer.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I´ve installed the shrew soft vpn-client on my laptop (OS Windows 7 64 bit) some months ago.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Today I searched for files which where changed on a specific date.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">And I found three files in the C:\Programms\ShrewSoft\VPN Client\debug folder which<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Where changed on 2014/01/27 10:53 … and I know that on this day in this hour I was sitting<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">In my office and using Word and Excel and not doing anything with the vpn-client on my laptop.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Then the files changed their dates to: 2014/02/07 13:53<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Without using the VPN-client.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I´ve no idea why the files changed their change-date.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Do you have a explanation for that?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">There was no reboot / power off / suspend
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt">Arno Seidel<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt">IT-Manager<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt">Online Research Manager<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt"><br>
</span><span style="font-size:10.0pt">INFO GmbH<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Markt- und Meinungsforschung<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt">Ein Unternehmen der INFO Research Group<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><br>
Schönholzer Straße 1A, D-13187 Berlin<br>
Tel. </span><span lang="EN-US" style="font-size:10.0pt">+49-30-490 01 - 305<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt">Fax +49-30-490 01 - 499<br>
Mobil:+49-173-605 90 69<br>
</span><span style="font-size:10.0pt"><a href="mailto:a.seidel@infogmbh.de"><span lang="EN-US">a.seidel@infogmbh.de</span></a></span><span lang="EN-US" style="font-size:10.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><a href="http://www.infogmbh.de/">http://www.infogmbh.de</a><br>
Sitz: Berlin, AG Charlottenburg HRB 36905<br>
USt.-IdNr. DE137224457<br>
Geschäftsführer: Dr. Holger Liljeberg<br>
Mitgliedschaften:<br>
Arbeitskreis Deutscher Markt- und Sozialforschungsinstitute ADM e.V.<br>
Berufsverband Deutscher Markt- und Sozialforscher BVM e.V.</span><o:p></o:p></p>
<p class="MsoNormal">ESOMAR<i><o:p></o:p></i></p>
<p class="MsoNormal"><i><o:p> </o:p></i></p>
<p class="MsoNormal"><i>Bitte prüfen Sie der Umwelt zuliebe, ob der Ausdruck dieser eMail erforderlich ist.</i><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>