1/30/2014 2:54:26 PM [1620,9] #############################################################
1/30/2014 2:54:26 PM [1620,9] Request processing started
1/30/2014 2:54:26 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/StartPage.aspx
1/30/2014 2:54:26 PM [1620,9] RawUrl: /owa/default.aspx
1/30/2014 2:54:26 PM [1620,9] Query String parameters:
1/30/2014 2:54:26 PM [1620,9] Cookies
1/30/2014 2:54:26 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:26 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:26 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:26 PM [1620,9] Form: 
1/30/2014 2:54:26 PM [1620,9] OWA Session details
1/30/2014 2:54:26 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:26 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:26 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:26 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:26 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:26 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:26 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:26 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:26 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:26 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:26 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:26 PM [1620,9] [EVContext::Initialise] Loading EVContext
1/30/2014 2:54:26 PM [1620,9] [Resources::LoadLanguageFile] Trying to opening language file: D:\Program Files\Microsoft\Exchange server\ClientAccess\owa\EnterpriseVault\v10.0.4.1189\Languages\en-us.lan
1/30/2014 2:54:26 PM [1620,9] [Resources::LoadLanguageFile] Language file not found
1/30/2014 2:54:26 PM [1620,9] [Resources::LoadLanguageFile] Trying to opening language file: D:\Program Files\Microsoft\Exchange server\ClientAccess\owa\EnterpriseVault\v10.0.4.1189\Languages\en.lan
1/30/2014 2:54:26 PM [1620,9] [Resources::LoadLanguageFile] Loaded language: en
1/30/2014 2:54:26 PM [1620,9] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
1/30/2014 2:54:26 PM [1620,9] [EVContext::LoadHiddenSettings] Loading hidden settings
1/30/2014 2:54:26 PM [1620,9] [EVContext::LoadHiddenSettings] Getting hidden message entry id using SMTP address: test1@Qtit.com
1/30/2014 2:54:26 PM [1620,9] [WebDAVHelpers::GetEVHiddenMessageId] Mailbox Url: https://localhost/exchange/test1@Qtit.com
1/30/2014 2:54:26 PM [1620,9] [WebDAVRequest::Send] Request url: https://localhost/exchange/test1@Qtit.com
1/30/2014 2:54:26 PM [1620,9] [WebDAVRequest::Send] Request method: PROPFIND
1/30/2014 2:54:26 PM [1620,9] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
1/30/2014 2:54:26 PM [1620,9] [WebDAVRequest::Send] Adding FBA cookies
1/30/2014 2:54:26 PM [1620,9] [WebDAVRequest::Send] Adding Depth header: 0
1/30/2014 2:54:26 PM [1620,9] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><u:inbox xmlns:u="urn:schemas:httpmail:" /></d:prop></d:propfind>
1/30/2014 2:54:27 PM [1620,9] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: The remote server returned an error: (503) Server Unavailable.
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
1/30/2014 2:54:27 PM [1620,9] [EVContext::LoadHiddenSettings] Exception loading hidden settings: 
1/30/2014 2:54:27 PM [1620,9] [EVContext::LoadHiddenSettings]     System.NullReferenceException: Object reference not set to an instance of an object.
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVHelpers.GetEVHiddenMessageId(Log oLog, EVContext oEVContext)
   at Symantec.EnterpriseVault.Owa.Core.EVContext.LoadHiddenSettings(Log oLog, Boolean brefresh)
1/30/2014 2:54:27 PM [1620,9] [EVContext::LoadHiddenSettings] Using default settings
1/30/2014 2:54:27 PM [1620,9] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
1/30/2014 2:54:27 PM [1620,9] [EVContext::LogHiddenSettings] Mailbox Settings loaded at: Monday, January 01, 0001, 12:00:00 AM
1/30/2014 2:54:27 PM [1620,9] [EVContext::LogHiddenSettings]     Enabled for archiving: Never Enabled
1/30/2014 2:54:27 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:27 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:27 PM [1620,9] [EVContext::IsValidBrowser] Checking browser...
1/30/2014 2:54:27 PM [1620,9] [EVContext::IsValidBrowser] User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:27 PM [1620,9] [EVContext::IsValidBrowser] Using premium client - browser valid
1/30/2014 2:54:27 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:27 PM [1620,9] [RequestProcessor::ProcessRequest] Setting response filter: Premium.WunderBar
1/30/2014 2:54:27 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:27 PM [1620,9] Request processing finished
1/30/2014 2:54:27 PM [1620,9] #############################################################
1/30/2014 2:54:27 PM [1620,9] Request processing started
1/30/2014 2:54:27 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/StartPage.aspx
1/30/2014 2:54:27 PM [1620,9] RawUrl: /owa/default.aspx
1/30/2014 2:54:27 PM [1620,9] Query String parameters:
1/30/2014 2:54:27 PM [1620,9] Cookies
1/30/2014 2:54:27 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:27 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:27 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:27 PM [1620,9] Form: 
1/30/2014 2:54:27 PM [1620,9] OWA Session details
1/30/2014 2:54:27 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:27 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:27 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:27 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:27 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:27 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:27 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:27 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:27 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:27 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:27 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:27 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:27 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:27 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:27 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:27 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:27 PM [1620,9] Request processing finished
1/30/2014 2:54:27 PM [1620,9] #############################################################
1/30/2014 2:54:27 PM [1620,9] Response filter started
1/30/2014 2:54:27 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/StartPage.aspx
1/30/2014 2:54:27 PM [1620,9] RawUrl: /owa/default.aspx
1/30/2014 2:54:27 PM [1620,9] Query String parameters:
1/30/2014 2:54:27 PM [1620,9] Form: 
1/30/2014 2:54:27 PM [1620,9] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:54:27 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:27 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:27 PM [1620,9] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.WunderBar
1/30/2014 2:54:27 PM [1620,9] Response filter finished
1/30/2014 2:54:27 PM [1620,8] #############################################################
1/30/2014 2:54:27 PM [1620,8] Request processing started
1/30/2014 2:54:27 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:27 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:27 PM [1620,8] Query String parameters:
1/30/2014 2:54:27 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:54:27 PM [1620,8]     l: en-US
1/30/2014 2:54:27 PM [1620,8] Cookies
1/30/2014 2:54:27 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:27 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:27 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:27 PM [1620,8] Form: 
1/30/2014 2:54:27 PM [1620,8] OWA Session details
1/30/2014 2:54:27 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:27 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:27 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:27 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:27 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:27 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:27 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:27 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:27 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:27 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:27 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:27 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:27 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:27 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:27 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:27 PM [1620,8] Request processing finished
1/30/2014 2:54:27 PM [1620,8] #############################################################
1/30/2014 2:54:27 PM [1620,8] Request processing started
1/30/2014 2:54:27 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:27 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:27 PM [1620,8] Query String parameters:
1/30/2014 2:54:27 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:54:27 PM [1620,8]     l: en-US
1/30/2014 2:54:27 PM [1620,8] Cookies
1/30/2014 2:54:27 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:27 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:27 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:27 PM [1620,8] Form: 
1/30/2014 2:54:27 PM [1620,8] OWA Session details
1/30/2014 2:54:27 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:27 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:27 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:27 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:27 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:27 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:27 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:27 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:27 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:27 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:27 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:27 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:27 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:27 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:27 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:27 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:27 PM [1620,8] Request processing finished
1/30/2014 2:54:27 PM [1620,7] #############################################################
1/30/2014 2:54:27 PM [1620,7] Request processing started
1/30/2014 2:54:27 PM [1620,7] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
1/30/2014 2:54:27 PM [1620,7] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&a=
1/30/2014 2:54:27 PM [1620,7] Query String parameters:
1/30/2014 2:54:27 PM [1620,7]     ae: Folder
1/30/2014 2:54:27 PM [1620,7]     t: IPF.Note
1/30/2014 2:54:27 PM [1620,7]     a: 
1/30/2014 2:54:27 PM [1620,7] Cookies
1/30/2014 2:54:27 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:27 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:27 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:27 PM [1620,7] Form: 
1/30/2014 2:54:27 PM [1620,7] OWA Session details
1/30/2014 2:54:27 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:27 PM [1620,7]     Authentication type: Basic
1/30/2014 2:54:27 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 2:54:27 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 2:54:27 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 2:54:27 PM [1620,7]     Host: 192.168.177.2
1/30/2014 2:54:27 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:27 PM [1620,7] Explicit Logon: False
1/30/2014 2:54:27 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 2:54:27 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:27 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:27 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:27 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:27 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:27 PM [1620,7] [RequestProcessor::ProcessRequest] Setting response filter: Premium.Folder
1/30/2014 2:54:27 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:27 PM [1620,7] Request processing finished
1/30/2014 2:54:28 PM [1620,7] #############################################################
1/30/2014 2:54:28 PM [1620,7] Request processing started
1/30/2014 2:54:28 PM [1620,7] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
1/30/2014 2:54:28 PM [1620,7] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&a=
1/30/2014 2:54:28 PM [1620,7] Query String parameters:
1/30/2014 2:54:28 PM [1620,7]     ae: Folder
1/30/2014 2:54:28 PM [1620,7]     t: IPF.Note
1/30/2014 2:54:28 PM [1620,7]     a: 
1/30/2014 2:54:28 PM [1620,7] Cookies
1/30/2014 2:54:28 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:28 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:28 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:28 PM [1620,7] Form: 
1/30/2014 2:54:28 PM [1620,7] OWA Session details
1/30/2014 2:54:28 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:28 PM [1620,7]     Authentication type: Basic
1/30/2014 2:54:28 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 2:54:28 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 2:54:28 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 2:54:28 PM [1620,7]     Host: 192.168.177.2
1/30/2014 2:54:28 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:28 PM [1620,7] Explicit Logon: False
1/30/2014 2:54:28 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 2:54:28 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:28 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:28 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:28 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:28 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:28 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:28 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:28 PM [1620,7] Request processing finished
1/30/2014 2:54:28 PM [1620,7] #############################################################
1/30/2014 2:54:28 PM [1620,7] Response filter started
1/30/2014 2:54:28 PM [1620,7] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a=
1/30/2014 2:54:28 PM [1620,7] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&a=
1/30/2014 2:54:28 PM [1620,7] Query String parameters:
1/30/2014 2:54:28 PM [1620,7]     ae: Folder
1/30/2014 2:54:28 PM [1620,7]     t: IPF.Note
1/30/2014 2:54:28 PM [1620,7]     a: 
1/30/2014 2:54:28 PM [1620,7] Form: 
1/30/2014 2:54:28 PM [1620,7] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:54:28 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:28 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:28 PM [1620,7] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.Folder
1/30/2014 2:54:28 PM [1620,7] Response filter finished
1/30/2014 2:54:28 PM [1620,9] #############################################################
1/30/2014 2:54:28 PM [1620,9] Request processing started
1/30/2014 2:54:28 PM [1620,9] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:28 PM [1620,9] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:28 PM [1620,9] Query String parameters:
1/30/2014 2:54:28 PM [1620,9]     v: 8.3.83.4
1/30/2014 2:54:28 PM [1620,9]     l: en-US
1/30/2014 2:54:28 PM [1620,9] Cookies
1/30/2014 2:54:28 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:28 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:28 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:28 PM [1620,9] Form: 
1/30/2014 2:54:28 PM [1620,9] OWA Session details
1/30/2014 2:54:28 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:28 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:28 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:28 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:28 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:28 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:28 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:28 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:28 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:28 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:28 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:28 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:28 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:28 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:28 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:28 PM [1620,9] Request processing finished
1/30/2014 2:54:28 PM [1620,9] #############################################################
1/30/2014 2:54:28 PM [1620,9] Request processing started
1/30/2014 2:54:28 PM [1620,9] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:28 PM [1620,9] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:28 PM [1620,9] Query String parameters:
1/30/2014 2:54:28 PM [1620,9]     v: 8.3.83.4
1/30/2014 2:54:28 PM [1620,9]     l: en-US
1/30/2014 2:54:28 PM [1620,9] Cookies
1/30/2014 2:54:28 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:28 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:28 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:28 PM [1620,9] Form: 
1/30/2014 2:54:28 PM [1620,9] OWA Session details
1/30/2014 2:54:28 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:28 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:28 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:28 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:28 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:28 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:28 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:28 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:28 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:28 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:28 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:28 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:28 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:28 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:28 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:28 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:28 PM [1620,9] Request processing finished
1/30/2014 2:54:29 PM [1620,1] #############################################################
1/30/2014 2:54:29 PM [1620,1] Request processing started
1/30/2014 2:54:29 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzdIAAAB
1/30/2014 2:54:29 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzdIAAAB
1/30/2014 2:54:29 PM [1620,1] Query String parameters:
1/30/2014 2:54:29 PM [1620,1]     oeh: 1
1/30/2014 2:54:29 PM [1620,1]     ns: Tree
1/30/2014 2:54:29 PM [1620,1]     ev: Expand
1/30/2014 2:54:29 PM [1620,1]     canary: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:29 PM [1620,1]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzdIAAAB
1/30/2014 2:54:29 PM [1620,1] Cookies
1/30/2014 2:54:29 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:29 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:29 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:29 PM [1620,1] Form: 
1/30/2014 2:54:29 PM [1620,1] OWA Session details
1/30/2014 2:54:29 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:29 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:29 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:29 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:29 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:29 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:29 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:29 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:29 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:29 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:29 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:29 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:29 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:29 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:29 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:29 PM [1620,1] Request processing finished
1/30/2014 2:54:29 PM [1620,1] #############################################################
1/30/2014 2:54:29 PM [1620,1] Request processing started
1/30/2014 2:54:29 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzdIAAAB
1/30/2014 2:54:29 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzdIAAAB
1/30/2014 2:54:29 PM [1620,1] Query String parameters:
1/30/2014 2:54:29 PM [1620,1]     oeh: 1
1/30/2014 2:54:29 PM [1620,1]     ns: Tree
1/30/2014 2:54:29 PM [1620,1]     ev: Expand
1/30/2014 2:54:29 PM [1620,1]     canary: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:29 PM [1620,1]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzdIAAAB
1/30/2014 2:54:29 PM [1620,1] Cookies
1/30/2014 2:54:29 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:29 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:29 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:29 PM [1620,1] Form: 
1/30/2014 2:54:29 PM [1620,1] OWA Session details
1/30/2014 2:54:29 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:29 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:29 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:29 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:29 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:29 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:29 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:29 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:29 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:29 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:29 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:29 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:29 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:29 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:29 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:29 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:29 PM [1620,1] Request processing finished
1/30/2014 2:54:31 PM [1620,9] #############################################################
1/30/2014 2:54:31 PM [1620,9] Request processing started
1/30/2014 2:54:31 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] Query String parameters:
1/30/2014 2:54:31 PM [1620,9]     ae: Folder
1/30/2014 2:54:31 PM [1620,9]     t: IPF.Note
1/30/2014 2:54:31 PM [1620,9]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] Cookies
1/30/2014 2:54:31 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:31 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:31 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:31 PM [1620,9] Form: 
1/30/2014 2:54:31 PM [1620,9] OWA Session details
1/30/2014 2:54:31 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:31 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:31 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:31 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:31 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:31 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:31 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:31 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:31 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:31 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:31 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:31 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:31 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:31 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:31 PM [1620,9] [RequestProcessor::ProcessRequest] Setting response filter: Premium.Folder
1/30/2014 2:54:31 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:31 PM [1620,9] Request processing finished
1/30/2014 2:54:31 PM [1620,9] #############################################################
1/30/2014 2:54:31 PM [1620,9] Request processing started
1/30/2014 2:54:31 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] Query String parameters:
1/30/2014 2:54:31 PM [1620,9]     ae: Folder
1/30/2014 2:54:31 PM [1620,9]     t: IPF.Note
1/30/2014 2:54:31 PM [1620,9]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] Cookies
1/30/2014 2:54:31 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:31 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:31 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:31 PM [1620,9] Form: 
1/30/2014 2:54:31 PM [1620,9] OWA Session details
1/30/2014 2:54:31 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:31 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:31 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:31 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:31 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:31 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:31 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:31 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:31 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:31 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:31 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:31 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:31 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:31 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:31 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:31 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:31 PM [1620,9] Request processing finished
1/30/2014 2:54:31 PM [1620,9] #############################################################
1/30/2014 2:54:31 PM [1620,9] Response filter started
1/30/2014 2:54:31 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] Query String parameters:
1/30/2014 2:54:31 PM [1620,9]     ae: Folder
1/30/2014 2:54:31 PM [1620,9]     t: IPF.Note
1/30/2014 2:54:31 PM [1620,9]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:31 PM [1620,9] Form: 
1/30/2014 2:54:31 PM [1620,9] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:54:31 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:31 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:31 PM [1620,9] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.Folder
1/30/2014 2:54:31 PM [1620,9] Response filter finished
1/30/2014 2:54:31 PM [1620,8] #############################################################
1/30/2014 2:54:31 PM [1620,8] Request processing started
1/30/2014 2:54:31 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:31 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:31 PM [1620,8] Query String parameters:
1/30/2014 2:54:31 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:54:31 PM [1620,8]     l: en-US
1/30/2014 2:54:31 PM [1620,8] Cookies
1/30/2014 2:54:31 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:31 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:31 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:31 PM [1620,8] Form: 
1/30/2014 2:54:31 PM [1620,8] OWA Session details
1/30/2014 2:54:31 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:31 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:31 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:31 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:31 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:31 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:31 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:31 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:31 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:31 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:31 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:31 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:31 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:31 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:31 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:31 PM [1620,8] Request processing finished
1/30/2014 2:54:31 PM [1620,8] #############################################################
1/30/2014 2:54:31 PM [1620,8] Request processing started
1/30/2014 2:54:31 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:31 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:31 PM [1620,8] Query String parameters:
1/30/2014 2:54:31 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:54:31 PM [1620,8]     l: en-US
1/30/2014 2:54:31 PM [1620,8] Cookies
1/30/2014 2:54:31 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:31 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:31 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:31 PM [1620,8] Form: 
1/30/2014 2:54:31 PM [1620,8] OWA Session details
1/30/2014 2:54:31 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:31 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:31 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:31 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:31 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:31 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:31 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:31 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:31 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:31 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:31 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:31 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:31 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:31 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:31 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:31 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:31 PM [1620,8] Request processing finished
1/30/2014 2:54:32 PM [1620,1] #############################################################
1/30/2014 2:54:32 PM [1620,1] Request processing started
1/30/2014 2:54:32 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:32 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:32 PM [1620,1] Query String parameters:
1/30/2014 2:54:32 PM [1620,1]     oeh: 1
1/30/2014 2:54:32 PM [1620,1]     ns: Tree
1/30/2014 2:54:32 PM [1620,1]     ev: Expand
1/30/2014 2:54:32 PM [1620,1]     canary: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:32 PM [1620,1]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:32 PM [1620,1] Cookies
1/30/2014 2:54:32 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:32 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:32 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:32 PM [1620,1] Form: 
1/30/2014 2:54:32 PM [1620,1] OWA Session details
1/30/2014 2:54:32 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:32 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:32 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:32 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:32 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:32 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:32 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:32 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:32 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:32 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:32 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:32 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:32 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:32 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:32 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:32 PM [1620,1] Request processing finished
1/30/2014 2:54:32 PM [1620,1] #############################################################
1/30/2014 2:54:32 PM [1620,1] Request processing started
1/30/2014 2:54:32 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:32 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Tree&ev=Expand&canary=2d282b7f911a4dcaadd801ebae4d8ebf&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:32 PM [1620,1] Query String parameters:
1/30/2014 2:54:32 PM [1620,1]     oeh: 1
1/30/2014 2:54:32 PM [1620,1]     ns: Tree
1/30/2014 2:54:32 PM [1620,1]     ev: Expand
1/30/2014 2:54:32 PM [1620,1]     canary: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:32 PM [1620,1]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAB
1/30/2014 2:54:32 PM [1620,1] Cookies
1/30/2014 2:54:32 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:32 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:32 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:32 PM [1620,1] Form: 
1/30/2014 2:54:32 PM [1620,1] OWA Session details
1/30/2014 2:54:32 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:32 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:32 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:32 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:32 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:32 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:32 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:32 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:32 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:32 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:32 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:32 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:32 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:32 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:32 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:32 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:32 PM [1620,1] Request processing finished
1/30/2014 2:54:32 PM [1620,9] #############################################################
1/30/2014 2:54:32 PM [1620,9] Request processing started
1/30/2014 2:54:32 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:32 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:32 PM [1620,9] Query String parameters:
1/30/2014 2:54:32 PM [1620,9]     ae: Item
1/30/2014 2:54:32 PM [1620,9]     a: Preview
1/30/2014 2:54:32 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:32 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:32 PM [1620,9] Cookies
1/30/2014 2:54:32 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:32 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:32 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:32 PM [1620,9] Form: 
1/30/2014 2:54:32 PM [1620,9] OWA Session details
1/30/2014 2:54:32 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:32 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:32 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:32 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:32 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:32 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:32 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:32 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:32 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:32 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:32 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:32 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:32 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:32 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:32 PM [1620,9] [RequestProcessor::ProcessItem] started
1/30/2014 2:54:32 PM [1620,9] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 2:54:32 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 2:54:32 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
1/30/2014 2:54:32 PM [1620,9] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 2:54:32 PM [1620,9] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:54:36 PM [1620,9] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 2:54:52 PM [1620,9] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAA=
1/30/2014 2:54:52 PM [1620,9] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAA=
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAA=
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXiqQW
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Size: 9353
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAA=
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Archive Id: 153C974D7AEF6BF46A1B1B18D28F0A8D61110000ev.Qtit.com
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Saveset Id: 201401291001789~200902011004390000~Z~814CC0A7B64436C35D24F881425B6141
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Original Content Class: urn:content-classes:message
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Original Size: 25471
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:23:09 PM
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:23:27 PM
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/RE%3A cleanwipeutility v tools.EML
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 2:54:52 PM [1620,9] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 2:54:52 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
1/30/2014 2:54:52 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Finished
1/30/2014 2:54:52 PM [1620,9] [RequestProcessor::ProcessItem] Finished
1/30/2014 2:54:52 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:52 PM [1620,9] Request processing finished
1/30/2014 2:54:53 PM [1620,9] #############################################################
1/30/2014 2:54:53 PM [1620,9] Request processing started
1/30/2014 2:54:53 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:53 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:53 PM [1620,9] Query String parameters:
1/30/2014 2:54:53 PM [1620,9]     ae: Item
1/30/2014 2:54:53 PM [1620,9]     a: Preview
1/30/2014 2:54:53 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:53 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:53 PM [1620,9] Cookies
1/30/2014 2:54:53 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:53 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:53 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:53 PM [1620,9] Form: 
1/30/2014 2:54:53 PM [1620,9] OWA Session details
1/30/2014 2:54:53 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:53 PM [1620,9]     Authentication type: Basic
1/30/2014 2:54:53 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:54:53 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:54:53 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:54:53 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:54:53 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:53 PM [1620,9] Explicit Logon: False
1/30/2014 2:54:53 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:54:53 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:53 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:53 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:53 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:53 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:53 PM [1620,9] Request processing finished
1/30/2014 2:54:53 PM [1620,9] #############################################################
1/30/2014 2:54:53 PM [1620,9] Response filter started
1/30/2014 2:54:53 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:53 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:53 PM [1620,9] Query String parameters:
1/30/2014 2:54:53 PM [1620,9]     ae: Item
1/30/2014 2:54:53 PM [1620,9]     a: Preview
1/30/2014 2:54:53 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:53 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzd2AAAT2MZs7PZMRKJUbNUT1IqvBQhXiqIRAAAJ
1/30/2014 2:54:53 PM [1620,9] Form: 
1/30/2014 2:54:53 PM [1620,9] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:54:53 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,9] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
1/30/2014 2:54:53 PM [1620,9] Response filter finished
1/30/2014 2:54:53 PM [1620,7] #############################################################
1/30/2014 2:54:53 PM [1620,7] Request processing started
1/30/2014 2:54:53 PM [1620,7] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] Query String parameters:
1/30/2014 2:54:53 PM [1620,7]     ae: Folder
1/30/2014 2:54:53 PM [1620,7]     t: IPF.Note
1/30/2014 2:54:53 PM [1620,7]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] Cookies
1/30/2014 2:54:53 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:53 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:53 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:53 PM [1620,7] Form: 
1/30/2014 2:54:53 PM [1620,7] OWA Session details
1/30/2014 2:54:53 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:53 PM [1620,7]     Authentication type: Basic
1/30/2014 2:54:53 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 2:54:53 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 2:54:53 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 2:54:53 PM [1620,7]     Host: 192.168.177.2
1/30/2014 2:54:53 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:53 PM [1620,7] Explicit Logon: False
1/30/2014 2:54:53 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 2:54:53 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:53 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:53 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:53 PM [1620,7] [RequestProcessor::ProcessRequest] Setting response filter: Premium.Folder
1/30/2014 2:54:53 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:53 PM [1620,7] Request processing finished
1/30/2014 2:54:53 PM [1620,7] #############################################################
1/30/2014 2:54:53 PM [1620,7] Request processing started
1/30/2014 2:54:53 PM [1620,7] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] Query String parameters:
1/30/2014 2:54:53 PM [1620,7]     ae: Folder
1/30/2014 2:54:53 PM [1620,7]     t: IPF.Note
1/30/2014 2:54:53 PM [1620,7]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] Cookies
1/30/2014 2:54:53 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:53 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:53 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:53 PM [1620,7] Form: 
1/30/2014 2:54:53 PM [1620,7] OWA Session details
1/30/2014 2:54:53 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:53 PM [1620,7]     Authentication type: Basic
1/30/2014 2:54:53 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 2:54:53 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 2:54:53 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 2:54:53 PM [1620,7]     Host: 192.168.177.2
1/30/2014 2:54:53 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:53 PM [1620,7] Explicit Logon: False
1/30/2014 2:54:53 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 2:54:53 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:53 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:53 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:53 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:53 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:53 PM [1620,7] Request processing finished
1/30/2014 2:54:53 PM [1620,7] #############################################################
1/30/2014 2:54:53 PM [1620,7] Response filter started
1/30/2014 2:54:53 PM [1620,7] Url: https://192.168.177.2/OWA/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] RawUrl: /owa/default.aspx?ae=Folder&t=IPF.Note&id=LgAAAACG835Cj%2fgLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] Query String parameters:
1/30/2014 2:54:53 PM [1620,7]     ae: Folder
1/30/2014 2:54:53 PM [1620,7]     t: IPF.Note
1/30/2014 2:54:53 PM [1620,7]     id: LgAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAB
1/30/2014 2:54:53 PM [1620,7] Form: 
1/30/2014 2:54:53 PM [1620,7] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:54:53 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,7] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.Folder
1/30/2014 2:54:53 PM [1620,7] Response filter finished
1/30/2014 2:54:53 PM [1620,1] #############################################################
1/30/2014 2:54:53 PM [1620,1] Request processing started
1/30/2014 2:54:53 PM [1620,1] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:53 PM [1620,1] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:53 PM [1620,1] Query String parameters:
1/30/2014 2:54:53 PM [1620,1]     v: 8.3.83.4
1/30/2014 2:54:53 PM [1620,1]     l: en-US
1/30/2014 2:54:53 PM [1620,1] Cookies
1/30/2014 2:54:53 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:53 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:53 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:53 PM [1620,1] Form: 
1/30/2014 2:54:53 PM [1620,1] OWA Session details
1/30/2014 2:54:53 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:53 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:53 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:53 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:53 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:53 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:53 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:53 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:53 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:53 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:53 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:53 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:53 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:53 PM [1620,1] Request processing finished
1/30/2014 2:54:53 PM [1620,1] #############################################################
1/30/2014 2:54:53 PM [1620,1] Request processing started
1/30/2014 2:54:53 PM [1620,1] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:53 PM [1620,1] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:53 PM [1620,1] Query String parameters:
1/30/2014 2:54:53 PM [1620,1]     v: 8.3.83.4
1/30/2014 2:54:53 PM [1620,1]     l: en-US
1/30/2014 2:54:53 PM [1620,1] Cookies
1/30/2014 2:54:53 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:53 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:53 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:53 PM [1620,1] Form: 
1/30/2014 2:54:53 PM [1620,1] OWA Session details
1/30/2014 2:54:53 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:53 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:53 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:53 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:53 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:53 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:53 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:53 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:53 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:53 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:53 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:53 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:53 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:53 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:53 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:53 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:53 PM [1620,1] Request processing finished
1/30/2014 2:54:54 PM [1620,1] #############################################################
1/30/2014 2:54:54 PM [1620,1] Request processing started
1/30/2014 2:54:54 PM [1620,1] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] Query String parameters:
1/30/2014 2:54:54 PM [1620,1]     ae: Item
1/30/2014 2:54:54 PM [1620,1]     a: Preview
1/30/2014 2:54:54 PM [1620,1]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:54 PM [1620,1]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] Cookies
1/30/2014 2:54:54 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:54 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:54 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:54 PM [1620,1] Form: 
1/30/2014 2:54:54 PM [1620,1] OWA Session details
1/30/2014 2:54:54 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:54 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:54 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:54 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:54 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:54 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:54 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:54 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:54 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:54 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:54 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:54 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:54 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessItem] started
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
1/30/2014 2:54:54 PM [1620,1] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 2:54:54 PM [1620,1] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:54:54 PM [1620,1] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 2:54:54 PM [1620,1] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 2:54:54 PM [1620,1] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9S
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Size: 3593
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Saveset Id: 201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Original Size: 8253
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:38 PM
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/FW%3A Web Custom Control.EML
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 2:54:54 PM [1620,1] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] Finished
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::ProcessItem] Finished
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:54 PM [1620,1] Request processing finished
1/30/2014 2:54:54 PM [1620,1] #############################################################
1/30/2014 2:54:54 PM [1620,1] Request processing started
1/30/2014 2:54:54 PM [1620,1] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] Query String parameters:
1/30/2014 2:54:54 PM [1620,1]     ae: Item
1/30/2014 2:54:54 PM [1620,1]     a: Preview
1/30/2014 2:54:54 PM [1620,1]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:54 PM [1620,1]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] Cookies
1/30/2014 2:54:54 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:54 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:54 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:54 PM [1620,1] Form: 
1/30/2014 2:54:54 PM [1620,1] OWA Session details
1/30/2014 2:54:54 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:54 PM [1620,1]     Authentication type: Basic
1/30/2014 2:54:54 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 2:54:54 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 2:54:54 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 2:54:54 PM [1620,1]     Host: 192.168.177.2
1/30/2014 2:54:54 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:54 PM [1620,1] Explicit Logon: False
1/30/2014 2:54:54 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 2:54:54 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:54 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:54 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:54 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:54 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:54 PM [1620,1] Request processing finished
1/30/2014 2:54:54 PM [1620,1] #############################################################
1/30/2014 2:54:54 PM [1620,1] Response filter started
1/30/2014 2:54:54 PM [1620,1] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] Query String parameters:
1/30/2014 2:54:54 PM [1620,1]     ae: Item
1/30/2014 2:54:54 PM [1620,1]     a: Preview
1/30/2014 2:54:54 PM [1620,1]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:54:54 PM [1620,1]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 2:54:54 PM [1620,1] Form: 
1/30/2014 2:54:54 PM [1620,1] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:54:54 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:54 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:54 PM [1620,1] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
1/30/2014 2:54:54 PM [1620,1] Response filter finished
1/30/2014 2:54:54 PM [1620,8] #############################################################
1/30/2014 2:54:54 PM [1620,8] Request processing started
1/30/2014 2:54:54 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:54 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:54 PM [1620,8] Query String parameters:
1/30/2014 2:54:54 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:54:54 PM [1620,8]     l: en-US
1/30/2014 2:54:54 PM [1620,8] Cookies
1/30/2014 2:54:54 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:54 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:54 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:54 PM [1620,8] Form: 
1/30/2014 2:54:54 PM [1620,8] OWA Session details
1/30/2014 2:54:54 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:54 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:54 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:54 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:54 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:54 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:54 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:54 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:54 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:54 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:54 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:54 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:54 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:54 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:54 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:54 PM [1620,8] Request processing finished
1/30/2014 2:54:54 PM [1620,8] #############################################################
1/30/2014 2:54:54 PM [1620,8] Request processing started
1/30/2014 2:54:54 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:54 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:54:54 PM [1620,8] Query String parameters:
1/30/2014 2:54:54 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:54:54 PM [1620,8]     l: en-US
1/30/2014 2:54:54 PM [1620,8] Cookies
1/30/2014 2:54:54 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:54 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:54 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:54 PM [1620,8] Form: 
1/30/2014 2:54:54 PM [1620,8] OWA Session details
1/30/2014 2:54:54 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:54 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:54 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:54 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:54 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:54 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:54 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:54 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:54 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:54 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:54 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:54 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:54 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:54 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:54 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:54 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:54 PM [1620,8] Request processing finished
1/30/2014 2:54:59 PM [1620,8] #############################################################
1/30/2014 2:54:59 PM [1620,8] Request processing started
1/30/2014 2:54:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:54:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:54:59 PM [1620,8] Query String parameters:
1/30/2014 2:54:59 PM [1620,8]     oeh: 1
1/30/2014 2:54:59 PM [1620,8]     ns: Notify
1/30/2014 2:54:59 PM [1620,8]     ev: Poll
1/30/2014 2:54:59 PM [1620,8] Cookies
1/30/2014 2:54:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:59 PM [1620,8] Form: 
1/30/2014 2:54:59 PM [1620,8] OWA Session details
1/30/2014 2:54:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:59 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:59 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:59 PM [1620,8] Request processing finished
1/30/2014 2:54:59 PM [1620,8] #############################################################
1/30/2014 2:54:59 PM [1620,8] Request processing started
1/30/2014 2:54:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:54:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:54:59 PM [1620,8] Query String parameters:
1/30/2014 2:54:59 PM [1620,8]     oeh: 1
1/30/2014 2:54:59 PM [1620,8]     ns: Notify
1/30/2014 2:54:59 PM [1620,8]     ev: Poll
1/30/2014 2:54:59 PM [1620,8] Cookies
1/30/2014 2:54:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:54:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:54:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:54:59 PM [1620,8] Form: 
1/30/2014 2:54:59 PM [1620,8] OWA Session details
1/30/2014 2:54:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:54:59 PM [1620,8]     Authentication type: Basic
1/30/2014 2:54:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:54:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:54:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:54:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:54:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:54:59 PM [1620,8] Explicit Logon: False
1/30/2014 2:54:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:54:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:54:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:54:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:54:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:54:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:54:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:54:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:54:59 PM [1620,8] Request processing finished
1/30/2014 2:55:03 PM [1620,9] #############################################################
1/30/2014 2:55:03 PM [1620,9] Request processing started
1/30/2014 2:55:03 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] Query String parameters:
1/30/2014 2:55:03 PM [1620,9]     ae: Item
1/30/2014 2:55:03 PM [1620,9]     a: Preview
1/30/2014 2:55:03 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:03 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] Cookies
1/30/2014 2:55:03 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:03 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:03 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:03 PM [1620,9] Form: 
1/30/2014 2:55:03 PM [1620,9] OWA Session details
1/30/2014 2:55:03 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:03 PM [1620,9]     Authentication type: Basic
1/30/2014 2:55:03 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:55:03 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:55:03 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:55:03 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:55:03 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:03 PM [1620,9] Explicit Logon: False
1/30/2014 2:55:03 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:55:03 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:03 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:03 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:03 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessItem] started
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
1/30/2014 2:55:03 PM [1620,9] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 2:55:03 PM [1620,9] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:03 PM [1620,9] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 2:55:03 PM [1620,9] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:03 PM [1620,9] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9e
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Size: 1674
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Saveset Id: 201401291002239~200609100634470000~Z~9002A1C826985F23A6DC3D3AA05467A1
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Original Size: 137837
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:39 PM
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/The Sample .NET Code %3CSend E-Mail%3E.EML
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 2:55:03 PM [1620,9] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Finished
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::ProcessItem] Finished
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:03 PM [1620,9] Request processing finished
1/30/2014 2:55:03 PM [1620,9] #############################################################
1/30/2014 2:55:03 PM [1620,9] Request processing started
1/30/2014 2:55:03 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] Query String parameters:
1/30/2014 2:55:03 PM [1620,9]     ae: Item
1/30/2014 2:55:03 PM [1620,9]     a: Preview
1/30/2014 2:55:03 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:03 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] Cookies
1/30/2014 2:55:03 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:03 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:03 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:03 PM [1620,9] Form: 
1/30/2014 2:55:03 PM [1620,9] OWA Session details
1/30/2014 2:55:03 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:03 PM [1620,9]     Authentication type: Basic
1/30/2014 2:55:03 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:55:03 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:55:03 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:55:03 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:55:03 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:03 PM [1620,9] Explicit Logon: False
1/30/2014 2:55:03 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:55:03 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:03 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:03 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:03 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:55:03 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:03 PM [1620,9] Request processing finished
1/30/2014 2:55:03 PM [1620,9] #############################################################
1/30/2014 2:55:03 PM [1620,9] Response filter started
1/30/2014 2:55:03 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] Query String parameters:
1/30/2014 2:55:03 PM [1620,9]     ae: Item
1/30/2014 2:55:03 PM [1620,9]     a: Preview
1/30/2014 2:55:03 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:03 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:03 PM [1620,9] Form: 
1/30/2014 2:55:03 PM [1620,9] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:55:03 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:03 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:03 PM [1620,9] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
1/30/2014 2:55:03 PM [1620,9] Response filter finished
1/30/2014 2:55:03 PM [1620,7] #############################################################
1/30/2014 2:55:03 PM [1620,7] Request processing started
1/30/2014 2:55:03 PM [1620,7] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:03 PM [1620,7] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:03 PM [1620,7] Query String parameters:
1/30/2014 2:55:03 PM [1620,7]     v: 8.3.83.4
1/30/2014 2:55:03 PM [1620,7]     l: en-US
1/30/2014 2:55:03 PM [1620,7] Cookies
1/30/2014 2:55:03 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:03 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:03 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:03 PM [1620,7] Form: 
1/30/2014 2:55:03 PM [1620,7] OWA Session details
1/30/2014 2:55:03 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:03 PM [1620,7]     Authentication type: Basic
1/30/2014 2:55:03 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 2:55:03 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 2:55:03 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 2:55:03 PM [1620,7]     Host: 192.168.177.2
1/30/2014 2:55:03 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:03 PM [1620,7] Explicit Logon: False
1/30/2014 2:55:03 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 2:55:03 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:03 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:03 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:03 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:03 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:03 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:03 PM [1620,7] Request processing finished
1/30/2014 2:55:03 PM [1620,7] #############################################################
1/30/2014 2:55:03 PM [1620,7] Request processing started
1/30/2014 2:55:03 PM [1620,7] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:03 PM [1620,7] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:03 PM [1620,7] Query String parameters:
1/30/2014 2:55:03 PM [1620,7]     v: 8.3.83.4
1/30/2014 2:55:03 PM [1620,7]     l: en-US
1/30/2014 2:55:03 PM [1620,7] Cookies
1/30/2014 2:55:03 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:03 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:03 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:03 PM [1620,7] Form: 
1/30/2014 2:55:03 PM [1620,7] OWA Session details
1/30/2014 2:55:03 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:03 PM [1620,7]     Authentication type: Basic
1/30/2014 2:55:03 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 2:55:03 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 2:55:03 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 2:55:03 PM [1620,7]     Host: 192.168.177.2
1/30/2014 2:55:03 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:03 PM [1620,7] Explicit Logon: False
1/30/2014 2:55:03 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 2:55:03 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:03 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:03 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:03 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:03 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:03 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:55:03 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:03 PM [1620,7] Request processing finished
1/30/2014 2:55:05 PM [1620,8] #############################################################
1/30/2014 2:55:05 PM [1620,8] Request processing started
1/30/2014 2:55:05 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:05 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:05 PM [1620,8] Query String parameters:
1/30/2014 2:55:05 PM [1620,8]     ae: Item
1/30/2014 2:55:05 PM [1620,8]     a: Open
1/30/2014 2:55:05 PM [1620,8]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:05 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:05 PM [1620,8] Cookies
1/30/2014 2:55:05 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:05 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:05 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:05 PM [1620,8] Form: 
1/30/2014 2:55:05 PM [1620,8] OWA Session details
1/30/2014 2:55:05 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:05 PM [1620,8]     Authentication type: Basic
1/30/2014 2:55:05 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:55:05 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:55:05 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:55:05 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:55:05 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:05 PM [1620,8] Explicit Logon: False
1/30/2014 2:55:05 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:55:05 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:05 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:05 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:05 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:05 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:05 PM [1620,8] [RequestProcessor::ProcessItem] started
1/30/2014 2:55:05 PM [1620,8] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 2:55:05 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 2:55:05 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Opening archived item
1/30/2014 2:55:05 PM [1620,8] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 2:55:05 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:05 PM [1620,8] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 2:55:05 PM [1620,8] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:05 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9e
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Size: 1674
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Saveset Id: 201401291002239~200609100634470000~Z~9002A1C826985F23A6DC3D3AA05467A1
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Original Size: 137837
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:39 PM
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/The Sample .NET Code %3CSend E-Mail%3E.EML
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 2:55:05 PM [1620,8] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 2:55:05 PM [1620,8] [Id::OwaId] Returning cached OwaId: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:05 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:05 PM [1620,8] [MailboxFolder::LoadProperties] Folder name: Deleted Items
1/30/2014 2:55:05 PM [1620,8] [MailboxFolder::LoadProperties] Folder path: /Deleted Items
1/30/2014 2:55:05 PM [1620,8] [MailboxFolder::LoadProperties] Non-Deletable: False
1/30/2014 2:55:05 PM [1620,8] [WebDAVRequest::Send] Request url: https://localhost/exchange/test1@Qtit.com/Deleted Items/13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com!201401291002239.200609100634470000.Z.9002A1C826985F23A6DC3D3AA05467A1.EML
1/30/2014 2:55:05 PM [1620,8] [WebDAVRequest::Send] Request method: PROPFIND
1/30/2014 2:55:05 PM [1620,8] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
1/30/2014 2:55:05 PM [1620,8] [WebDAVRequest::Send] Adding FBA cookies
1/30/2014 2:55:05 PM [1620,8] [WebDAVRequest::Send] Adding Depth header: 0
1/30/2014 2:55:05 PM [1620,8] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><mapi:x0FFF0102 xmlns:mapi="http://schemas.microsoft.com/mapi/proptag/" /><exch:outlookmessageclass xmlns:exch="http://schemas.microsoft.com/exchange/" /></d:prop></d:propfind>
1/30/2014 2:55:06 PM [1620,8] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: The remote server returned an error: (503) Server Unavailable.
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
1/30/2014 2:55:06 PM [1620,8] [EVServerRequest::CreateRequest] Sending request to: /restoreo2k.asp?vaultid=13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com&savesetid=201401291002239~200609100634470000~Z~9002A1C826985F23A6DC3D3AA05467A1&mbx=test1@Qtit.com&server=EX-SRV&restorelocation=3&foldername=Deleted Items
1/30/2014 2:55:06 PM [1620,8] [RestoreRequest::Send] Exception sending request to restore item: System.UriFormatException: Invalid URI: The format of the URI could not be determined.
   at System.Uri.CreateThis(String uri, Boolean dontEscape, UriKind uriKind)
   at System.Net.WebRequest.Create(String requestUriString)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.EVServerRequest.CreateRequest(String sUrl)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.RestoreRequest.Send()
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::RestoreAndActOnItem] Item not restored
1/30/2014 2:55:06 PM [1620,8] [Id::OwaId] Returning cached OwaId: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::RestoreAndActOnMailboxItem] Original Msg Class: IPM.Note
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::RestoreAndActOnMailboxItem] Redirecting client to: /owa/?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:06 PM [1620,8] Request processing finished
1/30/2014 2:55:06 PM [1620,8] #############################################################
1/30/2014 2:55:06 PM [1620,8] Request processing started
1/30/2014 2:55:06 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI:+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] Query String parameters:
1/30/2014 2:55:06 PM [1620,8]     ae: Item
1/30/2014 2:55:06 PM [1620,8]     a: Open
1/30/2014 2:55:06 PM [1620,8]     t: ipm.note.enterprisevault.shortcut
1/30/2014 2:55:06 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:06 PM [1620,8]     EVItemUnavailable: 1
1/30/2014 2:55:06 PM [1620,8]     EVReason: Invalid URI: The format of the URI could not be determined.
1/30/2014 2:55:06 PM [1620,8] Cookies
1/30/2014 2:55:06 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:06 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:06 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:06 PM [1620,8] Form: 
1/30/2014 2:55:06 PM [1620,8] OWA Session details
1/30/2014 2:55:06 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:06 PM [1620,8]     Authentication type: Basic
1/30/2014 2:55:06 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:55:06 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:55:06 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:06 PM [1620,8] Explicit Logon: False
1/30/2014 2:55:06 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:55:06 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:06 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessItem] started
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Opening shortcut due to unavailable item
1/30/2014 2:55:06 PM [1620,8] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 2:55:06 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:06 PM [1620,8] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 2:55:06 PM [1620,8] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:06 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9e
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Size: 1674
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Saveset Id: 201401291002239~200609100634470000~Z~9002A1C826985F23A6DC3D3AA05467A1
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Original Size: 137837
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:39 PM
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/The Sample .NET Code %3CSend E-Mail%3E.EML
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 2:55:06 PM [1620,8] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItemUnavailable
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Finished
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::ProcessItem] Finished
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:06 PM [1620,8] Request processing finished
1/30/2014 2:55:06 PM [1620,8] #############################################################
1/30/2014 2:55:06 PM [1620,8] Request processing started
1/30/2014 2:55:06 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI:+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] Query String parameters:
1/30/2014 2:55:06 PM [1620,8]     ae: Item
1/30/2014 2:55:06 PM [1620,8]     a: Open
1/30/2014 2:55:06 PM [1620,8]     t: ipm.note.enterprisevault.shortcut
1/30/2014 2:55:06 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:06 PM [1620,8]     EVItemUnavailable: 1
1/30/2014 2:55:06 PM [1620,8]     EVReason: Invalid URI: The format of the URI could not be determined.
1/30/2014 2:55:06 PM [1620,8] Cookies
1/30/2014 2:55:06 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:06 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:06 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:06 PM [1620,8] Form: 
1/30/2014 2:55:06 PM [1620,8] OWA Session details
1/30/2014 2:55:06 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:06 PM [1620,8]     Authentication type: Basic
1/30/2014 2:55:06 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:55:06 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:55:06 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:06 PM [1620,8] Explicit Logon: False
1/30/2014 2:55:06 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:55:06 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:06 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:06 PM [1620,8] Request processing finished
1/30/2014 2:55:06 PM [1620,8] #############################################################
1/30/2014 2:55:06 PM [1620,8] Response filter started
1/30/2014 2:55:06 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI:+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 2:55:06 PM [1620,8] Query String parameters:
1/30/2014 2:55:06 PM [1620,8]     ae: Item
1/30/2014 2:55:06 PM [1620,8]     a: Open
1/30/2014 2:55:06 PM [1620,8]     t: ipm.note.enterprisevault.shortcut
1/30/2014 2:55:06 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:06 PM [1620,8]     EVItemUnavailable: 1
1/30/2014 2:55:06 PM [1620,8]     EVReason: Invalid URI: The format of the URI could not be determined.
1/30/2014 2:55:06 PM [1620,8] Form: 
1/30/2014 2:55:06 PM [1620,8] EV Extensions Resource version: v10.0.4.1189
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:06 PM [1620,8] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItemUnavailable
1/30/2014 2:55:06 PM [1620,8] Response filter finished
1/30/2014 2:55:06 PM [1620,8] #############################################################
1/30/2014 2:55:06 PM [1620,8] Request processing started
1/30/2014 2:55:06 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:06 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:06 PM [1620,8] Query String parameters:
1/30/2014 2:55:06 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:55:06 PM [1620,8]     l: en-US
1/30/2014 2:55:06 PM [1620,8] Cookies
1/30/2014 2:55:06 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:06 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:06 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:06 PM [1620,8] Form: 
1/30/2014 2:55:06 PM [1620,8] OWA Session details
1/30/2014 2:55:06 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:06 PM [1620,8]     Authentication type: Basic
1/30/2014 2:55:06 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:55:06 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:55:06 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:06 PM [1620,8] Explicit Logon: False
1/30/2014 2:55:06 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:55:06 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:06 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:06 PM [1620,8] Request processing finished
1/30/2014 2:55:06 PM [1620,8] #############################################################
1/30/2014 2:55:06 PM [1620,8] Request processing started
1/30/2014 2:55:06 PM [1620,8] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:06 PM [1620,8] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 2:55:06 PM [1620,8] Query String parameters:
1/30/2014 2:55:06 PM [1620,8]     v: 8.3.83.4
1/30/2014 2:55:06 PM [1620,8]     l: en-US
1/30/2014 2:55:06 PM [1620,8] Cookies
1/30/2014 2:55:06 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:06 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:06 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:06 PM [1620,8] Form: 
1/30/2014 2:55:06 PM [1620,8] OWA Session details
1/30/2014 2:55:06 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:06 PM [1620,8]     Authentication type: Basic
1/30/2014 2:55:06 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:55:06 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:55:06 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:55:06 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:06 PM [1620,8] Explicit Logon: False
1/30/2014 2:55:06 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:55:06 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:06 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:06 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:55:06 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:06 PM [1620,8] Request processing finished
1/30/2014 2:55:09 PM [1620,8] #############################################################
1/30/2014 2:55:09 PM [1620,8] Request processing started
1/30/2014 2:55:09 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVAction=Preview
1/30/2014 2:55:09 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ&EVAction=Preview
1/30/2014 2:55:09 PM [1620,8] Query String parameters:
1/30/2014 2:55:09 PM [1620,8]     ae: Item
1/30/2014 2:55:09 PM [1620,8]     a: Open
1/30/2014 2:55:09 PM [1620,8]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:09 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAAJ
1/30/2014 2:55:09 PM [1620,8]     EVAction: Preview
1/30/2014 2:55:09 PM [1620,8] Cookies
1/30/2014 2:55:09 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:55:09 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:55:09 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:55:09 PM [1620,8] Form: 
1/30/2014 2:55:09 PM [1620,8] OWA Session details
1/30/2014 2:55:09 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:55:09 PM [1620,8]     Authentication type: Basic
1/30/2014 2:55:09 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:55:09 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:55:09 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:55:09 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:55:09 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:55:09 PM [1620,8] Explicit Logon: False
1/30/2014 2:55:09 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:55:09 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:55:09 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:55:09 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:55:09 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:55:09 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:55:09 PM [1620,8] [RequestProcessor::ProcessItem] started
1/30/2014 2:55:09 PM [1620,8] [RequestProcessor::ProcessEVItemAction] started
1/30/2014 2:55:09 PM [1620,8] [RequestProcessor::ProcessEVItemAction] Opening EV preview of archived item
1/30/2014 2:55:09 PM [1620,8] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 2:55:09 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:09 PM [1620,8] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 2:55:09 PM [1620,8] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:09 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1HAAA=
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9e
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Size: 1674
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Saveset Id: 201401291002239~200609100634470000~Z~9002A1C826985F23A6DC3D3AA05467A1
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Original Size: 137837
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:39 PM
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/The Sample .NET Code %3CSend E-Mail%3E.EML
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 2:55:09 PM [1620,8] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 2:55:09 PM [1620,8] [RequestProcessor::ProcessEVItemAction] Redirecting client to: /Viewmessage.asp?vaultid=13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com&savesetid=201401291002239~200609100634470000~Z~9002A1C826985F23A6DC3D3AA05467A1&OWA2007=1&OWA2007Url=https%3a%2f%2f192.168.177.2%2fowa%2f
1/30/2014 2:55:09 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:55:09 PM [1620,8] Request processing finished
1/30/2014 2:56:59 PM [1620,8] #############################################################
1/30/2014 2:56:59 PM [1620,8] Request processing started
1/30/2014 2:56:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:56:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:56:59 PM [1620,8] Query String parameters:
1/30/2014 2:56:59 PM [1620,8]     oeh: 1
1/30/2014 2:56:59 PM [1620,8]     ns: Notify
1/30/2014 2:56:59 PM [1620,8]     ev: Poll
1/30/2014 2:56:59 PM [1620,8] Cookies
1/30/2014 2:56:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:56:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:56:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:56:59 PM [1620,8] Form: 
1/30/2014 2:56:59 PM [1620,8] OWA Session details
1/30/2014 2:56:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:56:59 PM [1620,8]     Authentication type: Basic
1/30/2014 2:56:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:56:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:56:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:56:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:56:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:56:59 PM [1620,8] Explicit Logon: False
1/30/2014 2:56:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:56:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:56:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:56:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:56:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:56:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:56:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:56:59 PM [1620,8] Request processing finished
1/30/2014 2:56:59 PM [1620,8] #############################################################
1/30/2014 2:56:59 PM [1620,8] Request processing started
1/30/2014 2:56:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:56:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:56:59 PM [1620,8] Query String parameters:
1/30/2014 2:56:59 PM [1620,8]     oeh: 1
1/30/2014 2:56:59 PM [1620,8]     ns: Notify
1/30/2014 2:56:59 PM [1620,8]     ev: Poll
1/30/2014 2:56:59 PM [1620,8] Cookies
1/30/2014 2:56:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:56:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:56:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:56:59 PM [1620,8] Form: 
1/30/2014 2:56:59 PM [1620,8] OWA Session details
1/30/2014 2:56:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:56:59 PM [1620,8]     Authentication type: Basic
1/30/2014 2:56:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 2:56:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 2:56:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 2:56:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 2:56:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:56:59 PM [1620,8] Explicit Logon: False
1/30/2014 2:56:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 2:56:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:56:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:56:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:56:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:56:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:56:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:56:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:56:59 PM [1620,8] Request processing finished
1/30/2014 2:58:59 PM [1620,9] #############################################################
1/30/2014 2:58:59 PM [1620,9] Request processing started
1/30/2014 2:58:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:58:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:58:59 PM [1620,9] Query String parameters:
1/30/2014 2:58:59 PM [1620,9]     oeh: 1
1/30/2014 2:58:59 PM [1620,9]     ns: Notify
1/30/2014 2:58:59 PM [1620,9]     ev: Poll
1/30/2014 2:58:59 PM [1620,9] Cookies
1/30/2014 2:58:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:58:59 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:58:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:58:59 PM [1620,9] Form: 
1/30/2014 2:58:59 PM [1620,9] OWA Session details
1/30/2014 2:58:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:58:59 PM [1620,9]     Authentication type: Basic
1/30/2014 2:58:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:58:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:58:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:58:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:58:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:58:59 PM [1620,9] Explicit Logon: False
1/30/2014 2:58:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:58:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:58:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:58:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:58:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:58:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:58:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:58:59 PM [1620,9] Request processing finished
1/30/2014 2:58:59 PM [1620,9] #############################################################
1/30/2014 2:58:59 PM [1620,9] Request processing started
1/30/2014 2:58:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:58:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 2:58:59 PM [1620,9] Query String parameters:
1/30/2014 2:58:59 PM [1620,9]     oeh: 1
1/30/2014 2:58:59 PM [1620,9]     ns: Notify
1/30/2014 2:58:59 PM [1620,9]     ev: Poll
1/30/2014 2:58:59 PM [1620,9] Cookies
1/30/2014 2:58:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 2:58:59 PM [1620,9]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 2:58:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 2:58:59 PM [1620,9] Form: 
1/30/2014 2:58:59 PM [1620,9] OWA Session details
1/30/2014 2:58:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 2:58:59 PM [1620,9]     Authentication type: Basic
1/30/2014 2:58:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 2:58:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 2:58:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 2:58:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 2:58:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 2:58:59 PM [1620,9] Explicit Logon: False
1/30/2014 2:58:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 2:58:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 2:58:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 2:58:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 2:58:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 2:58:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 2:58:59 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 2:58:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 2:58:59 PM [1620,9] Request processing finished
1/30/2014 3:00:59 PM [1620,1] #############################################################
1/30/2014 3:00:59 PM [1620,1] Request processing started
1/30/2014 3:00:59 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:00:59 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:00:59 PM [1620,1] Query String parameters:
1/30/2014 3:00:59 PM [1620,1]     oeh: 1
1/30/2014 3:00:59 PM [1620,1]     ns: Notify
1/30/2014 3:00:59 PM [1620,1]     ev: Poll
1/30/2014 3:00:59 PM [1620,1] Cookies
1/30/2014 3:00:59 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:00:59 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:00:59 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:00:59 PM [1620,1] Form: 
1/30/2014 3:00:59 PM [1620,1] OWA Session details
1/30/2014 3:00:59 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:00:59 PM [1620,1]     Authentication type: Basic
1/30/2014 3:00:59 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:00:59 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:00:59 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:00:59 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:00:59 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:00:59 PM [1620,1] Explicit Logon: False
1/30/2014 3:00:59 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:00:59 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:00:59 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:00:59 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:00:59 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:00:59 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:00:59 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:00:59 PM [1620,1] Request processing finished
1/30/2014 3:00:59 PM [1620,1] #############################################################
1/30/2014 3:00:59 PM [1620,1] Request processing started
1/30/2014 3:00:59 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:00:59 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:00:59 PM [1620,1] Query String parameters:
1/30/2014 3:00:59 PM [1620,1]     oeh: 1
1/30/2014 3:00:59 PM [1620,1]     ns: Notify
1/30/2014 3:00:59 PM [1620,1]     ev: Poll
1/30/2014 3:00:59 PM [1620,1] Cookies
1/30/2014 3:00:59 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:00:59 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:00:59 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:00:59 PM [1620,1] Form: 
1/30/2014 3:00:59 PM [1620,1] OWA Session details
1/30/2014 3:00:59 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:00:59 PM [1620,1]     Authentication type: Basic
1/30/2014 3:00:59 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:00:59 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:00:59 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:00:59 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:00:59 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:00:59 PM [1620,1] Explicit Logon: False
1/30/2014 3:00:59 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:00:59 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:00:59 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:00:59 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:00:59 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:00:59 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:00:59 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:00:59 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:00:59 PM [1620,1] Request processing finished
1/30/2014 3:02:59 PM [1620,8] #############################################################
1/30/2014 3:02:59 PM [1620,8] Request processing started
1/30/2014 3:02:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:02:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:02:59 PM [1620,8] Query String parameters:
1/30/2014 3:02:59 PM [1620,8]     oeh: 1
1/30/2014 3:02:59 PM [1620,8]     ns: Notify
1/30/2014 3:02:59 PM [1620,8]     ev: Poll
1/30/2014 3:02:59 PM [1620,8] Cookies
1/30/2014 3:02:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:02:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:02:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:02:59 PM [1620,8] Form: 
1/30/2014 3:02:59 PM [1620,8] OWA Session details
1/30/2014 3:02:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:02:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:02:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:02:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:02:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:02:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:02:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:02:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:02:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:02:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:02:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:02:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:02:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:02:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:02:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:02:59 PM [1620,8] Request processing finished
1/30/2014 3:02:59 PM [1620,8] #############################################################
1/30/2014 3:02:59 PM [1620,8] Request processing started
1/30/2014 3:02:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:02:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:02:59 PM [1620,8] Query String parameters:
1/30/2014 3:02:59 PM [1620,8]     oeh: 1
1/30/2014 3:02:59 PM [1620,8]     ns: Notify
1/30/2014 3:02:59 PM [1620,8]     ev: Poll
1/30/2014 3:02:59 PM [1620,8] Cookies
1/30/2014 3:02:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:02:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:02:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:02:59 PM [1620,8] Form: 
1/30/2014 3:02:59 PM [1620,8] OWA Session details
1/30/2014 3:02:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:02:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:02:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:02:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:02:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:02:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:02:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:02:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:02:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:02:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:02:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:02:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:02:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:02:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:02:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:02:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:02:59 PM [1620,8] Request processing finished
1/30/2014 3:04:59 PM [1620,7] #############################################################
1/30/2014 3:04:59 PM [1620,7] Request processing started
1/30/2014 3:04:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:04:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:04:59 PM [1620,7] Query String parameters:
1/30/2014 3:04:59 PM [1620,7]     oeh: 1
1/30/2014 3:04:59 PM [1620,7]     ns: Notify
1/30/2014 3:04:59 PM [1620,7]     ev: Poll
1/30/2014 3:04:59 PM [1620,7] Cookies
1/30/2014 3:04:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:04:59 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:04:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:04:59 PM [1620,7] Form: 
1/30/2014 3:04:59 PM [1620,7] OWA Session details
1/30/2014 3:04:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:04:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:04:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:04:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:04:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:04:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:04:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:04:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:04:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:04:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:04:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:04:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:04:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:04:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:04:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:04:59 PM [1620,7] Request processing finished
1/30/2014 3:04:59 PM [1620,7] #############################################################
1/30/2014 3:04:59 PM [1620,7] Request processing started
1/30/2014 3:04:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:04:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:04:59 PM [1620,7] Query String parameters:
1/30/2014 3:04:59 PM [1620,7]     oeh: 1
1/30/2014 3:04:59 PM [1620,7]     ns: Notify
1/30/2014 3:04:59 PM [1620,7]     ev: Poll
1/30/2014 3:04:59 PM [1620,7] Cookies
1/30/2014 3:04:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:04:59 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:04:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:04:59 PM [1620,7] Form: 
1/30/2014 3:04:59 PM [1620,7] OWA Session details
1/30/2014 3:04:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:04:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:04:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:04:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:04:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:04:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:04:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:04:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:04:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:04:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:04:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:04:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:04:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:04:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:04:59 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:04:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:04:59 PM [1620,7] Request processing finished
1/30/2014 3:06:59 PM [1620,7] #############################################################
1/30/2014 3:06:59 PM [1620,7] Request processing started
1/30/2014 3:06:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:06:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:06:59 PM [1620,7] Query String parameters:
1/30/2014 3:06:59 PM [1620,7]     oeh: 1
1/30/2014 3:06:59 PM [1620,7]     ns: Notify
1/30/2014 3:06:59 PM [1620,7]     ev: Poll
1/30/2014 3:06:59 PM [1620,7] Cookies
1/30/2014 3:06:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:06:59 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:06:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:06:59 PM [1620,7] Form: 
1/30/2014 3:06:59 PM [1620,7] OWA Session details
1/30/2014 3:06:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:06:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:06:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:06:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:06:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:06:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:06:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:06:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:06:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:06:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:06:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:06:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:06:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:06:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:06:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:06:59 PM [1620,7] Request processing finished
1/30/2014 3:06:59 PM [1620,7] #############################################################
1/30/2014 3:06:59 PM [1620,7] Request processing started
1/30/2014 3:06:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:06:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:06:59 PM [1620,7] Query String parameters:
1/30/2014 3:06:59 PM [1620,7]     oeh: 1
1/30/2014 3:06:59 PM [1620,7]     ns: Notify
1/30/2014 3:06:59 PM [1620,7]     ev: Poll
1/30/2014 3:06:59 PM [1620,7] Cookies
1/30/2014 3:06:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:06:59 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:06:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:06:59 PM [1620,7] Form: 
1/30/2014 3:06:59 PM [1620,7] OWA Session details
1/30/2014 3:06:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:06:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:06:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:06:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:06:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:06:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:06:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:06:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:06:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:06:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:06:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:06:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:06:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:06:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:06:59 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:06:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:06:59 PM [1620,7] Request processing finished
1/30/2014 3:08:59 PM [1620,8] #############################################################
1/30/2014 3:08:59 PM [1620,8] Request processing started
1/30/2014 3:08:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:08:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:08:59 PM [1620,8] Query String parameters:
1/30/2014 3:08:59 PM [1620,8]     oeh: 1
1/30/2014 3:08:59 PM [1620,8]     ns: Notify
1/30/2014 3:08:59 PM [1620,8]     ev: Poll
1/30/2014 3:08:59 PM [1620,8] Cookies
1/30/2014 3:08:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:08:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:08:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:08:59 PM [1620,8] Form: 
1/30/2014 3:08:59 PM [1620,8] OWA Session details
1/30/2014 3:08:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:08:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:08:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:08:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:08:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:08:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:08:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:08:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:08:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:08:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:08:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:08:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:08:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:08:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:08:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:08:59 PM [1620,8] Request processing finished
1/30/2014 3:08:59 PM [1620,8] #############################################################
1/30/2014 3:08:59 PM [1620,8] Request processing started
1/30/2014 3:08:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:08:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:08:59 PM [1620,8] Query String parameters:
1/30/2014 3:08:59 PM [1620,8]     oeh: 1
1/30/2014 3:08:59 PM [1620,8]     ns: Notify
1/30/2014 3:08:59 PM [1620,8]     ev: Poll
1/30/2014 3:08:59 PM [1620,8] Cookies
1/30/2014 3:08:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:08:59 PM [1620,8]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:08:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:08:59 PM [1620,8] Form: 
1/30/2014 3:08:59 PM [1620,8] OWA Session details
1/30/2014 3:08:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:08:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:08:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:08:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:08:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:08:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:08:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:08:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:08:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:08:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:08:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:08:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:08:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:08:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:08:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:08:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:08:59 PM [1620,8] Request processing finished
1/30/2014 3:10:59 PM [1620,7] #############################################################
1/30/2014 3:10:59 PM [1620,7] Request processing started
1/30/2014 3:10:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:10:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:10:59 PM [1620,7] Query String parameters:
1/30/2014 3:10:59 PM [1620,7]     oeh: 1
1/30/2014 3:10:59 PM [1620,7]     ns: Notify
1/30/2014 3:10:59 PM [1620,7]     ev: Poll
1/30/2014 3:10:59 PM [1620,7] Cookies
1/30/2014 3:10:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:10:59 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:10:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:10:59 PM [1620,7] Form: 
1/30/2014 3:10:59 PM [1620,7] OWA Session details
1/30/2014 3:10:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:10:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:10:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:10:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:10:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:10:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:10:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:10:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:10:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:10:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:10:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:10:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:10:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:10:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:10:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:10:59 PM [1620,7] Request processing finished
1/30/2014 3:10:59 PM [1620,7] #############################################################
1/30/2014 3:10:59 PM [1620,7] Request processing started
1/30/2014 3:10:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:10:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:10:59 PM [1620,7] Query String parameters:
1/30/2014 3:10:59 PM [1620,7]     oeh: 1
1/30/2014 3:10:59 PM [1620,7]     ns: Notify
1/30/2014 3:10:59 PM [1620,7]     ev: Poll
1/30/2014 3:10:59 PM [1620,7] Cookies
1/30/2014 3:10:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:10:59 PM [1620,7]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:10:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:10:59 PM [1620,7] Form: 
1/30/2014 3:10:59 PM [1620,7] OWA Session details
1/30/2014 3:10:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:10:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:10:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:10:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:10:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:10:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:10:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:10:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:10:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:10:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:10:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:10:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:10:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:10:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:10:59 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:10:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:10:59 PM [1620,7] Request processing finished
1/30/2014 3:12:59 PM [1620,1] #############################################################
1/30/2014 3:12:59 PM [1620,1] Request processing started
1/30/2014 3:12:59 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:12:59 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:12:59 PM [1620,1] Query String parameters:
1/30/2014 3:12:59 PM [1620,1]     oeh: 1
1/30/2014 3:12:59 PM [1620,1]     ns: Notify
1/30/2014 3:12:59 PM [1620,1]     ev: Poll
1/30/2014 3:12:59 PM [1620,1] Cookies
1/30/2014 3:12:59 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:12:59 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:12:59 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:12:59 PM [1620,1] Form: 
1/30/2014 3:12:59 PM [1620,1] OWA Session details
1/30/2014 3:12:59 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:12:59 PM [1620,1]     Authentication type: Basic
1/30/2014 3:12:59 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:12:59 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:12:59 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:12:59 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:12:59 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:12:59 PM [1620,1] Explicit Logon: False
1/30/2014 3:12:59 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:12:59 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:12:59 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:12:59 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:12:59 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:12:59 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:12:59 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:12:59 PM [1620,1] Request processing finished
1/30/2014 3:12:59 PM [1620,1] #############################################################
1/30/2014 3:12:59 PM [1620,1] Request processing started
1/30/2014 3:12:59 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:12:59 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:12:59 PM [1620,1] Query String parameters:
1/30/2014 3:12:59 PM [1620,1]     oeh: 1
1/30/2014 3:12:59 PM [1620,1]     ns: Notify
1/30/2014 3:12:59 PM [1620,1]     ev: Poll
1/30/2014 3:12:59 PM [1620,1] Cookies
1/30/2014 3:12:59 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:12:59 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:12:59 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:12:59 PM [1620,1] Form: 
1/30/2014 3:12:59 PM [1620,1] OWA Session details
1/30/2014 3:12:59 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:12:59 PM [1620,1]     Authentication type: Basic
1/30/2014 3:12:59 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:12:59 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:12:59 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:12:59 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:12:59 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:12:59 PM [1620,1] Explicit Logon: False
1/30/2014 3:12:59 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:12:59 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:12:59 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:12:59 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:12:59 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:12:59 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:12:59 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:12:59 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:12:59 PM [1620,1] Request processing finished
1/30/2014 3:13:27 PM [1620,1] #############################################################
1/30/2014 3:13:27 PM [1620,1] Request processing started
1/30/2014 3:13:27 PM [1620,1] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] Query String parameters:
1/30/2014 3:13:27 PM [1620,1]     ae: Item
1/30/2014 3:13:27 PM [1620,1]     a: Preview
1/30/2014 3:13:27 PM [1620,1]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:27 PM [1620,1]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] Cookies
1/30/2014 3:13:27 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:13:27 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:13:27 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:27 PM [1620,1] Form: 
1/30/2014 3:13:27 PM [1620,1] OWA Session details
1/30/2014 3:13:27 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:27 PM [1620,1]     Authentication type: Basic
1/30/2014 3:13:27 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:13:27 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:13:27 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:13:27 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:13:27 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:27 PM [1620,1] Explicit Logon: False
1/30/2014 3:13:27 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:13:27 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:27 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessItem] started
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] Previewing EV item
1/30/2014 3:13:27 PM [1620,1] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 3:13:27 PM [1620,1] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:27 PM [1620,1] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 3:13:27 PM [1620,1] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:27 PM [1620,1] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9S
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Size: 3593
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Saveset Id: 201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Original Size: 8253
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:38 PM
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/FW%3A Web Custom Control.EML
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 3:13:27 PM [1620,1] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItem
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessOWAItemAction] Finished
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::ProcessItem] Finished
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:27 PM [1620,1] Request processing finished
1/30/2014 3:13:27 PM [1620,1] #############################################################
1/30/2014 3:13:27 PM [1620,1] Request processing started
1/30/2014 3:13:27 PM [1620,1] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] Query String parameters:
1/30/2014 3:13:27 PM [1620,1]     ae: Item
1/30/2014 3:13:27 PM [1620,1]     a: Preview
1/30/2014 3:13:27 PM [1620,1]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:27 PM [1620,1]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] Cookies
1/30/2014 3:13:27 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d
1/30/2014 3:13:27 PM [1620,1]     cadata: "0+77ZhyBheBsoM6JQAYSyv+HY0LOOaXpwkAiV5fktRY5gW1zK"
1/30/2014 3:13:27 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:27 PM [1620,1] Form: 
1/30/2014 3:13:27 PM [1620,1] OWA Session details
1/30/2014 3:13:27 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:27 PM [1620,1]     Authentication type: Basic
1/30/2014 3:13:27 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:13:27 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:13:27 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:13:27 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:13:27 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:27 PM [1620,1] Explicit Logon: False
1/30/2014 3:13:27 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:13:27 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:27 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:27 PM [1620,1] Request processing finished
1/30/2014 3:13:27 PM [1620,1] #############################################################
1/30/2014 3:13:27 PM [1620,1] Response filter started
1/30/2014 3:13:27 PM [1620,1] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] RawUrl: /owa/default.aspx?ae=Item&a=Preview&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] Query String parameters:
1/30/2014 3:13:27 PM [1620,1]     ae: Item
1/30/2014 3:13:27 PM [1620,1]     a: Preview
1/30/2014 3:13:27 PM [1620,1]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:27 PM [1620,1]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:27 PM [1620,1] Form: 
1/30/2014 3:13:27 PM [1620,1] EV Extensions Resource version: v10.0.4.1189
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:27 PM [1620,1] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItem
1/30/2014 3:13:27 PM [1620,1] Response filter finished
1/30/2014 3:13:27 PM [1620,1] #############################################################
1/30/2014 3:13:27 PM [1620,1] Request processing started
1/30/2014 3:13:27 PM [1620,1] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:27 PM [1620,1] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:27 PM [1620,1] Query String parameters:
1/30/2014 3:13:27 PM [1620,1]     v: 8.3.83.4
1/30/2014 3:13:27 PM [1620,1]     l: en-US
1/30/2014 3:13:27 PM [1620,1] Cookies
1/30/2014 3:13:27 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:27 PM [1620,1]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:27 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:27 PM [1620,1] Form: 
1/30/2014 3:13:27 PM [1620,1] OWA Session details
1/30/2014 3:13:27 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:27 PM [1620,1]     Authentication type: Basic
1/30/2014 3:13:27 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:13:27 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:13:27 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:13:27 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:13:27 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:27 PM [1620,1] Explicit Logon: False
1/30/2014 3:13:27 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:13:27 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:27 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:27 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:27 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:27 PM [1620,1] Request processing finished
1/30/2014 3:13:28 PM [1620,1] #############################################################
1/30/2014 3:13:28 PM [1620,1] Request processing started
1/30/2014 3:13:28 PM [1620,1] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:28 PM [1620,1] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:28 PM [1620,1] Query String parameters:
1/30/2014 3:13:28 PM [1620,1]     v: 8.3.83.4
1/30/2014 3:13:28 PM [1620,1]     l: en-US
1/30/2014 3:13:28 PM [1620,1] Cookies
1/30/2014 3:13:28 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:28 PM [1620,1]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:28 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:28 PM [1620,1] Form: 
1/30/2014 3:13:28 PM [1620,1] OWA Session details
1/30/2014 3:13:28 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:28 PM [1620,1]     Authentication type: Basic
1/30/2014 3:13:28 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:13:28 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:13:28 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:13:28 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:13:28 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:28 PM [1620,1] Explicit Logon: False
1/30/2014 3:13:28 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:13:28 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:28 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:28 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:28 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:13:28 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:28 PM [1620,1] Request processing finished
1/30/2014 3:13:28 PM [1620,9] #############################################################
1/30/2014 3:13:28 PM [1620,9] Request processing started
1/30/2014 3:13:28 PM [1620,9] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,9] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,9] Query String parameters:
1/30/2014 3:13:28 PM [1620,9]     ae: Item
1/30/2014 3:13:28 PM [1620,9]     a: Open
1/30/2014 3:13:28 PM [1620,9]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:28 PM [1620,9]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,9] Cookies
1/30/2014 3:13:28 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:28 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:28 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:28 PM [1620,9] Form: 
1/30/2014 3:13:28 PM [1620,9] OWA Session details
1/30/2014 3:13:28 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:28 PM [1620,9]     Authentication type: Basic
1/30/2014 3:13:28 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:13:28 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:13:28 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:13:28 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:13:28 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:28 PM [1620,9] Explicit Logon: False
1/30/2014 3:13:28 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:13:28 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:28 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::ProcessItem] started
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::ProcessOWAItemAction] Opening archived item
1/30/2014 3:13:28 PM [1620,9] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 3:13:28 PM [1620,9] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:28 PM [1620,9] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 3:13:28 PM [1620,9] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:28 PM [1620,9] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9S
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Size: 3593
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Saveset Id: 201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Original Size: 8253
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:38 PM
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/FW%3A Web Custom Control.EML
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 3:13:28 PM [1620,9] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 3:13:28 PM [1620,9] [Id::OwaId] Returning cached OwaId: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Request url: https://localhost/exchange/test1@Qtit.com/Deleted Items/13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com!201401291002238.200609121530370000.Z.9002985A501B6732C1C5EBE4FF61EA51.EML
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Request method: PROPFIND
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Adding FBA cookies
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Adding Depth header: 0
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><mapi:x0FFF0102 xmlns:mapi="http://schemas.microsoft.com/mapi/proptag/" /><exch:outlookmessageclass xmlns:exch="http://schemas.microsoft.com/exchange/" /></d:prop></d:propfind>
1/30/2014 3:13:28 PM [1620,9] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: The remote server returned an error: (503) Server Unavailable.
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
1/30/2014 3:13:28 PM [1620,9] [EVServerRequest::CreateRequest] Sending request to: /restoreo2k.asp?vaultid=13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com&savesetid=201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51&mbx=test1@Qtit.com&server=EX-SRV&restorelocation=3&foldername=Deleted Items
1/30/2014 3:13:28 PM [1620,9] [RestoreRequest::Send] Exception sending request to restore item: System.UriFormatException: Invalid URI: The format of the URI could not be determined.
   at System.Uri.CreateThis(String uri, Boolean dontEscape, UriKind uriKind)
   at System.Net.WebRequest.Create(String requestUriString)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.EVServerRequest.CreateRequest(String sUrl)
   at Symantec.EnterpriseVault.Owa.EVServerRequests.RestoreRequest.Send()
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::RestoreAndActOnItem] Item not restored
1/30/2014 3:13:28 PM [1620,9] [Id::OwaId] Returning cached OwaId: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::RestoreAndActOnMailboxItem] Original Msg Class: IPM.Note
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor::RestoreAndActOnMailboxItem] Redirecting client to: /owa/?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:28 PM [1620,9] Request processing finished
1/30/2014 3:13:28 PM [1620,8] #############################################################
1/30/2014 3:13:28 PM [1620,8] Request processing started
1/30/2014 3:13:28 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI:+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,8] Query String parameters:
1/30/2014 3:13:28 PM [1620,8]     ae: Item
1/30/2014 3:13:28 PM [1620,8]     a: Open
1/30/2014 3:13:28 PM [1620,8]     t: ipm.note.enterprisevault.shortcut
1/30/2014 3:13:28 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,8]     EVItemUnavailable: 1
1/30/2014 3:13:28 PM [1620,8]     EVReason: Invalid URI: The format of the URI could not be determined.
1/30/2014 3:13:28 PM [1620,8] Cookies
1/30/2014 3:13:28 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:28 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:28 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:28 PM [1620,8] Form: 
1/30/2014 3:13:28 PM [1620,8] OWA Session details
1/30/2014 3:13:28 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:28 PM [1620,8]     Authentication type: Basic
1/30/2014 3:13:28 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:13:28 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:13:28 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:13:28 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:13:28 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:28 PM [1620,8] Explicit Logon: False
1/30/2014 3:13:28 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:13:28 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:28 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessItem] started
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessItem] Processing EV item
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] started
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Opening shortcut due to unavailable item
1/30/2014 3:13:28 PM [1620,8] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 3:13:28 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:28 PM [1620,8] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 3:13:28 PM [1620,8] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:28 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9S
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Size: 3593
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Saveset Id: 201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Original Size: 8253
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:38 PM
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/FW%3A Web Custom Control.EML
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 3:13:28 PM [1620,8] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Setting response filter: Premium.ArchivedItemUnavailable
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessOWAItemAction] Finished
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::ProcessItem] Finished
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:28 PM [1620,8] Request processing finished
1/30/2014 3:13:28 PM [1620,8] #############################################################
1/30/2014 3:13:28 PM [1620,8] Request processing started
1/30/2014 3:13:28 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI:+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,8] Query String parameters:
1/30/2014 3:13:28 PM [1620,8]     ae: Item
1/30/2014 3:13:28 PM [1620,8]     a: Open
1/30/2014 3:13:28 PM [1620,8]     t: ipm.note.enterprisevault.shortcut
1/30/2014 3:13:28 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,8]     EVItemUnavailable: 1
1/30/2014 3:13:28 PM [1620,8]     EVReason: Invalid URI: The format of the URI could not be determined.
1/30/2014 3:13:28 PM [1620,8] Cookies
1/30/2014 3:13:28 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:28 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:28 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:28 PM [1620,8] Form: 
1/30/2014 3:13:28 PM [1620,8] OWA Session details
1/30/2014 3:13:28 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:28 PM [1620,8]     Authentication type: Basic
1/30/2014 3:13:28 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:13:28 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:13:28 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:13:28 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:13:28 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:28 PM [1620,8] Explicit Logon: False
1/30/2014 3:13:28 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:13:28 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:28 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:13:28 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:28 PM [1620,8] Request processing finished
1/30/2014 3:13:28 PM [1620,8] #############################################################
1/30/2014 3:13:28 PM [1620,8] Response filter started
1/30/2014 3:13:28 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI:+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=ipm.note.enterprisevault.shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVItemUnavailable=1&EVReason=Invalid+URI%3a+The+format+of+the+URI+could+not+be+determined.
1/30/2014 3:13:28 PM [1620,8] Query String parameters:
1/30/2014 3:13:28 PM [1620,8]     ae: Item
1/30/2014 3:13:28 PM [1620,8]     a: Open
1/30/2014 3:13:28 PM [1620,8]     t: ipm.note.enterprisevault.shortcut
1/30/2014 3:13:28 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:28 PM [1620,8]     EVItemUnavailable: 1
1/30/2014 3:13:28 PM [1620,8]     EVReason: Invalid URI: The format of the URI could not be determined.
1/30/2014 3:13:28 PM [1620,8] Form: 
1/30/2014 3:13:28 PM [1620,8] EV Extensions Resource version: v10.0.4.1189
1/30/2014 3:13:28 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,8] Response filter invoked: Symantec.EnterpriseVault.Owa.ResponseFilters.Premium.ArchivedItemUnavailable
1/30/2014 3:13:28 PM [1620,8] Response filter finished
1/30/2014 3:13:28 PM [1620,7] #############################################################
1/30/2014 3:13:28 PM [1620,7] Request processing started
1/30/2014 3:13:28 PM [1620,7] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:28 PM [1620,7] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:28 PM [1620,7] Query String parameters:
1/30/2014 3:13:28 PM [1620,7]     v: 8.3.83.4
1/30/2014 3:13:28 PM [1620,7]     l: en-US
1/30/2014 3:13:28 PM [1620,7] Cookies
1/30/2014 3:13:28 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:28 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:28 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:28 PM [1620,7] Form: 
1/30/2014 3:13:28 PM [1620,7] OWA Session details
1/30/2014 3:13:28 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:28 PM [1620,7]     Authentication type: Basic
1/30/2014 3:13:28 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:13:28 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:13:28 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:13:28 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:13:28 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:28 PM [1620,7] Explicit Logon: False
1/30/2014 3:13:28 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:13:28 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:28 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:28 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:28 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:28 PM [1620,7] Request processing finished
1/30/2014 3:13:28 PM [1620,7] #############################################################
1/30/2014 3:13:28 PM [1620,7] Request processing started
1/30/2014 3:13:28 PM [1620,7] Url: https://192.168.177.2/owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:28 PM [1620,7] RawUrl: /owa/forms/premium/clientstrings.aspx?v=8.3.83.4&l=en-US
1/30/2014 3:13:28 PM [1620,7] Query String parameters:
1/30/2014 3:13:28 PM [1620,7]     v: 8.3.83.4
1/30/2014 3:13:28 PM [1620,7]     l: en-US
1/30/2014 3:13:28 PM [1620,7] Cookies
1/30/2014 3:13:28 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:28 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:28 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:28 PM [1620,7] Form: 
1/30/2014 3:13:28 PM [1620,7] OWA Session details
1/30/2014 3:13:28 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:28 PM [1620,7]     Authentication type: Basic
1/30/2014 3:13:28 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:13:28 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:13:28 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:13:28 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:13:28 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:28 PM [1620,7] Explicit Logon: False
1/30/2014 3:13:28 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:13:28 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:28 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:28 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:28 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:28 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:28 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:13:28 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:28 PM [1620,7] Request processing finished
1/30/2014 3:13:30 PM [1620,8] #############################################################
1/30/2014 3:13:30 PM [1620,8] Request processing started
1/30/2014 3:13:30 PM [1620,8] Url: https://192.168.177.2/OWA/forms/premium/ReadMessage.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVAction=Preview
1/30/2014 3:13:30 PM [1620,8] RawUrl: /owa/default.aspx?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACG835Cj%2fgLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ&EVAction=Preview
1/30/2014 3:13:30 PM [1620,8] Query String parameters:
1/30/2014 3:13:30 PM [1620,8]     ae: Item
1/30/2014 3:13:30 PM [1620,8]     a: Open
1/30/2014 3:13:30 PM [1620,8]     t: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:30 PM [1620,8]     id: RgAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAAJ
1/30/2014 3:13:30 PM [1620,8]     EVAction: Preview
1/30/2014 3:13:30 PM [1620,8] Cookies
1/30/2014 3:13:30 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:13:30 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:13:30 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:13:30 PM [1620,8] Form: 
1/30/2014 3:13:30 PM [1620,8] OWA Session details
1/30/2014 3:13:30 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:13:30 PM [1620,8]     Authentication type: Basic
1/30/2014 3:13:30 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:13:30 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:13:30 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:13:30 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:13:30 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:13:30 PM [1620,8] Explicit Logon: False
1/30/2014 3:13:30 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:13:30 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:13:30 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:13:30 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:13:30 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:13:30 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:13:30 PM [1620,8] [RequestProcessor::ProcessItem] started
1/30/2014 3:13:30 PM [1620,8] [RequestProcessor::ProcessEVItemAction] started
1/30/2014 3:13:30 PM [1620,8] [RequestProcessor::ProcessEVItemAction] Opening EV preview of archived item
1/30/2014 3:13:30 PM [1620,8] [Id::EwsId] Converting OwaId to EwsId
1/30/2014 3:13:30 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:30 PM [1620,8] [ConvertId::DoConvertId] Converting ID using web services
1/30/2014 3:13:30 PM [1620,8] [Id::EwsId] Converted OwaId to Mailbox EwsId: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:30 PM [1620,8] [MailboxBase::MailboxBase] Connecting to Exchange Web Services using: https://localhost/ews/exchange.asmx
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties] Loading properties for: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties] Loaded item properties: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQBGAAAAAACG835Cj/gLSbIY4q1lrCP0BwAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAAT2MZs7PZMRKJUbNUT1IqvBQhXir1DAAA=
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Change Key: CQAAABYAAAAT2MZs7PZMRKJUbNUT1IqvBQhXir9S
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Message Class: IPM.Note.EnterpriseVault.Shortcut
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Size: 3593
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Parent Folder Id: AAMkADQ4MDY0MTNiLTg1NTgtNGNkNy1hZWMyLTc0MDI3MWFmMDg0OQAuAAAAAACG835Cj/gLSbIY4q1lrCP0AQAT2MZs7PZMRKJUbNUT1IqvBQhXhzemAAA=
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Archive Id: 13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Saveset Id: 201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Original Message Class: IPM.Note
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Original Content Class: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Original Size: 8253
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   View Item Ref Count: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Content Class: urn:kvsplc-com:cc:vault:shortcut
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Archived Date: 1/29/2014 3:30:38 PM
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Cancelled Date: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Restored Date: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Post Processed Date: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Last modified time: 1/29/2014 3:30:41 PM
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   PR_URL_NAME: /archiveUSERFROM2010/Inbox/amostafa/FW%3A Web Custom Control.EML
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   PR_ICON_INDEX: 
1/30/2014 3:13:30 PM [1620,8] [MailboxItem::LoadProperties]   Original Icon Index: 
1/30/2014 3:13:30 PM [1620,8] [RequestProcessor::ProcessEVItemAction] Redirecting client to: /Viewmessage.asp?vaultid=13642A6E88F711443A5CE75BCF23263181110000ev.Qtit.com&savesetid=201401291002238~200609121530370000~Z~9002985A501B6732C1C5EBE4FF61EA51&OWA2007=1&OWA2007Url=https%3a%2f%2f192.168.177.2%2fowa%2f
1/30/2014 3:13:30 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:13:30 PM [1620,8] Request processing finished
1/30/2014 3:14:59 PM [1620,8] #############################################################
1/30/2014 3:14:59 PM [1620,8] Request processing started
1/30/2014 3:14:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:14:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:14:59 PM [1620,8] Query String parameters:
1/30/2014 3:14:59 PM [1620,8]     oeh: 1
1/30/2014 3:14:59 PM [1620,8]     ns: Notify
1/30/2014 3:14:59 PM [1620,8]     ev: Poll
1/30/2014 3:14:59 PM [1620,8] Cookies
1/30/2014 3:14:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:14:59 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:14:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:14:59 PM [1620,8] Form: 
1/30/2014 3:14:59 PM [1620,8] OWA Session details
1/30/2014 3:14:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:14:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:14:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:14:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:14:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:14:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:14:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:14:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:14:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:14:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:14:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:14:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:14:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:14:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:14:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:14:59 PM [1620,8] Request processing finished
1/30/2014 3:14:59 PM [1620,8] #############################################################
1/30/2014 3:14:59 PM [1620,8] Request processing started
1/30/2014 3:14:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:14:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:14:59 PM [1620,8] Query String parameters:
1/30/2014 3:14:59 PM [1620,8]     oeh: 1
1/30/2014 3:14:59 PM [1620,8]     ns: Notify
1/30/2014 3:14:59 PM [1620,8]     ev: Poll
1/30/2014 3:14:59 PM [1620,8] Cookies
1/30/2014 3:14:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:14:59 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:14:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:14:59 PM [1620,8] Form: 
1/30/2014 3:14:59 PM [1620,8] OWA Session details
1/30/2014 3:14:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:14:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:14:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:14:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:14:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:14:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:14:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:14:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:14:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:14:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:14:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:14:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:14:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:14:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:14:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:14:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:14:59 PM [1620,8] Request processing finished
1/30/2014 3:16:59 PM [1620,7] #############################################################
1/30/2014 3:16:59 PM [1620,7] Request processing started
1/30/2014 3:16:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:16:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:16:59 PM [1620,7] Query String parameters:
1/30/2014 3:16:59 PM [1620,7]     oeh: 1
1/30/2014 3:16:59 PM [1620,7]     ns: Notify
1/30/2014 3:16:59 PM [1620,7]     ev: Poll
1/30/2014 3:16:59 PM [1620,7] Cookies
1/30/2014 3:16:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:16:59 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:16:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:16:59 PM [1620,7] Form: 
1/30/2014 3:16:59 PM [1620,7] OWA Session details
1/30/2014 3:16:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:16:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:16:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:16:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:16:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:16:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:16:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:16:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:16:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:16:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:16:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:16:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:16:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:16:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:16:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:16:59 PM [1620,7] Request processing finished
1/30/2014 3:16:59 PM [1620,7] #############################################################
1/30/2014 3:16:59 PM [1620,7] Request processing started
1/30/2014 3:16:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:16:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:16:59 PM [1620,7] Query String parameters:
1/30/2014 3:16:59 PM [1620,7]     oeh: 1
1/30/2014 3:16:59 PM [1620,7]     ns: Notify
1/30/2014 3:16:59 PM [1620,7]     ev: Poll
1/30/2014 3:16:59 PM [1620,7] Cookies
1/30/2014 3:16:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:16:59 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:16:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:16:59 PM [1620,7] Form: 
1/30/2014 3:16:59 PM [1620,7] OWA Session details
1/30/2014 3:16:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:16:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:16:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:16:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:16:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:16:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:16:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:16:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:16:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:16:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:16:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:16:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:16:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:16:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:16:59 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:16:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:16:59 PM [1620,7] Request processing finished
1/30/2014 3:18:59 PM [1620,9] #############################################################
1/30/2014 3:18:59 PM [1620,9] Request processing started
1/30/2014 3:18:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:18:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:18:59 PM [1620,9] Query String parameters:
1/30/2014 3:18:59 PM [1620,9]     oeh: 1
1/30/2014 3:18:59 PM [1620,9]     ns: Notify
1/30/2014 3:18:59 PM [1620,9]     ev: Poll
1/30/2014 3:18:59 PM [1620,9] Cookies
1/30/2014 3:18:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:18:59 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:18:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:18:59 PM [1620,9] Form: 
1/30/2014 3:18:59 PM [1620,9] OWA Session details
1/30/2014 3:18:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:18:59 PM [1620,9]     Authentication type: Basic
1/30/2014 3:18:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:18:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:18:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:18:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:18:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:18:59 PM [1620,9] Explicit Logon: False
1/30/2014 3:18:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:18:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:18:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:18:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:18:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:18:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:18:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:18:59 PM [1620,9] Request processing finished
1/30/2014 3:18:59 PM [1620,9] #############################################################
1/30/2014 3:18:59 PM [1620,9] Request processing started
1/30/2014 3:18:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:18:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:18:59 PM [1620,9] Query String parameters:
1/30/2014 3:18:59 PM [1620,9]     oeh: 1
1/30/2014 3:18:59 PM [1620,9]     ns: Notify
1/30/2014 3:18:59 PM [1620,9]     ev: Poll
1/30/2014 3:18:59 PM [1620,9] Cookies
1/30/2014 3:18:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:18:59 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:18:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:18:59 PM [1620,9] Form: 
1/30/2014 3:18:59 PM [1620,9] OWA Session details
1/30/2014 3:18:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:18:59 PM [1620,9]     Authentication type: Basic
1/30/2014 3:18:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:18:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:18:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:18:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:18:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:18:59 PM [1620,9] Explicit Logon: False
1/30/2014 3:18:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:18:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:18:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:18:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:18:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:18:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:18:59 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:18:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:18:59 PM [1620,9] Request processing finished
1/30/2014 3:20:59 PM [1620,7] #############################################################
1/30/2014 3:20:59 PM [1620,7] Request processing started
1/30/2014 3:20:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:20:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:20:59 PM [1620,7] Query String parameters:
1/30/2014 3:20:59 PM [1620,7]     oeh: 1
1/30/2014 3:20:59 PM [1620,7]     ns: Notify
1/30/2014 3:20:59 PM [1620,7]     ev: Poll
1/30/2014 3:20:59 PM [1620,7] Cookies
1/30/2014 3:20:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:20:59 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:20:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:20:59 PM [1620,7] Form: 
1/30/2014 3:20:59 PM [1620,7] OWA Session details
1/30/2014 3:20:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:20:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:20:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:20:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:20:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:20:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:20:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:20:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:20:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:20:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:20:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:20:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:20:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:20:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:20:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:20:59 PM [1620,7] Request processing finished
1/30/2014 3:20:59 PM [1620,7] #############################################################
1/30/2014 3:20:59 PM [1620,7] Request processing started
1/30/2014 3:20:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:20:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:20:59 PM [1620,7] Query String parameters:
1/30/2014 3:20:59 PM [1620,7]     oeh: 1
1/30/2014 3:20:59 PM [1620,7]     ns: Notify
1/30/2014 3:20:59 PM [1620,7]     ev: Poll
1/30/2014 3:20:59 PM [1620,7] Cookies
1/30/2014 3:20:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:20:59 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:20:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:20:59 PM [1620,7] Form: 
1/30/2014 3:20:59 PM [1620,7] OWA Session details
1/30/2014 3:20:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:20:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:20:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:20:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:20:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:20:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:20:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:20:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:20:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:20:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:20:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:20:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:20:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:20:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:20:59 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:20:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:20:59 PM [1620,7] Request processing finished
1/30/2014 3:22:59 PM [1620,1] #############################################################
1/30/2014 3:22:59 PM [1620,1] Request processing started
1/30/2014 3:22:59 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:22:59 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:22:59 PM [1620,1] Query String parameters:
1/30/2014 3:22:59 PM [1620,1]     oeh: 1
1/30/2014 3:22:59 PM [1620,1]     ns: Notify
1/30/2014 3:22:59 PM [1620,1]     ev: Poll
1/30/2014 3:22:59 PM [1620,1] Cookies
1/30/2014 3:22:59 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:22:59 PM [1620,1]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:22:59 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:22:59 PM [1620,1] Form: 
1/30/2014 3:22:59 PM [1620,1] OWA Session details
1/30/2014 3:22:59 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:22:59 PM [1620,1]     Authentication type: Basic
1/30/2014 3:22:59 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:22:59 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:22:59 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:22:59 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:22:59 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:22:59 PM [1620,1] Explicit Logon: False
1/30/2014 3:22:59 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:22:59 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:22:59 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:22:59 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:22:59 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:22:59 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:22:59 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:22:59 PM [1620,1] Request processing finished
1/30/2014 3:22:59 PM [1620,1] #############################################################
1/30/2014 3:22:59 PM [1620,1] Request processing started
1/30/2014 3:22:59 PM [1620,1] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:22:59 PM [1620,1] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:22:59 PM [1620,1] Query String parameters:
1/30/2014 3:22:59 PM [1620,1]     oeh: 1
1/30/2014 3:22:59 PM [1620,1]     ns: Notify
1/30/2014 3:22:59 PM [1620,1]     ev: Poll
1/30/2014 3:22:59 PM [1620,1] Cookies
1/30/2014 3:22:59 PM [1620,1]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:22:59 PM [1620,1]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:22:59 PM [1620,1]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:22:59 PM [1620,1] Form: 
1/30/2014 3:22:59 PM [1620,1] OWA Session details
1/30/2014 3:22:59 PM [1620,1]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:22:59 PM [1620,1]     Authentication type: Basic
1/30/2014 3:22:59 PM [1620,1]     Authenticated user: QTIT\test1
1/30/2014 3:22:59 PM [1620,1]     Client IP Address: 192.168.177.49
1/30/2014 3:22:59 PM [1620,1]     Server IP Address: 192.168.177.2
1/30/2014 3:22:59 PM [1620,1]     Host: 192.168.177.2
1/30/2014 3:22:59 PM [1620,1] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:22:59 PM [1620,1] Explicit Logon: False
1/30/2014 3:22:59 PM [1620,1] Explicit Logon Address: OWA
1/30/2014 3:22:59 PM [1620,1] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:22:59 PM [1620,1] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:22:59 PM [1620,1] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:22:59 PM [1620,1] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:22:59 PM [1620,1] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:22:59 PM [1620,1] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:22:59 PM [1620,1] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:22:59 PM [1620,1] Request processing finished
1/30/2014 3:24:59 PM [1620,9] #############################################################
1/30/2014 3:24:59 PM [1620,9] Request processing started
1/30/2014 3:24:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:24:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:24:59 PM [1620,9] Query String parameters:
1/30/2014 3:24:59 PM [1620,9]     oeh: 1
1/30/2014 3:24:59 PM [1620,9]     ns: Notify
1/30/2014 3:24:59 PM [1620,9]     ev: Poll
1/30/2014 3:24:59 PM [1620,9] Cookies
1/30/2014 3:24:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:24:59 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:24:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:24:59 PM [1620,9] Form: 
1/30/2014 3:24:59 PM [1620,9] OWA Session details
1/30/2014 3:24:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:24:59 PM [1620,9]     Authentication type: Basic
1/30/2014 3:24:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:24:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:24:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:24:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:24:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:24:59 PM [1620,9] Explicit Logon: False
1/30/2014 3:24:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:24:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:24:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:24:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:24:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:24:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:24:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:24:59 PM [1620,9] Request processing finished
1/30/2014 3:24:59 PM [1620,9] #############################################################
1/30/2014 3:24:59 PM [1620,9] Request processing started
1/30/2014 3:24:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:24:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:24:59 PM [1620,9] Query String parameters:
1/30/2014 3:24:59 PM [1620,9]     oeh: 1
1/30/2014 3:24:59 PM [1620,9]     ns: Notify
1/30/2014 3:24:59 PM [1620,9]     ev: Poll
1/30/2014 3:24:59 PM [1620,9] Cookies
1/30/2014 3:24:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:24:59 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:24:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:24:59 PM [1620,9] Form: 
1/30/2014 3:24:59 PM [1620,9] OWA Session details
1/30/2014 3:24:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:24:59 PM [1620,9]     Authentication type: Basic
1/30/2014 3:24:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:24:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:24:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:24:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:24:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:24:59 PM [1620,9] Explicit Logon: False
1/30/2014 3:24:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:24:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:24:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:24:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:24:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:24:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:24:59 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:24:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:24:59 PM [1620,9] Request processing finished
1/30/2014 3:26:59 PM [1620,8] #############################################################
1/30/2014 3:26:59 PM [1620,8] Request processing started
1/30/2014 3:26:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:26:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:26:59 PM [1620,8] Query String parameters:
1/30/2014 3:26:59 PM [1620,8]     oeh: 1
1/30/2014 3:26:59 PM [1620,8]     ns: Notify
1/30/2014 3:26:59 PM [1620,8]     ev: Poll
1/30/2014 3:26:59 PM [1620,8] Cookies
1/30/2014 3:26:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:26:59 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:26:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:26:59 PM [1620,8] Form: 
1/30/2014 3:26:59 PM [1620,8] OWA Session details
1/30/2014 3:26:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:26:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:26:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:26:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:26:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:26:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:26:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:26:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:26:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:26:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:26:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:26:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:26:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:26:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:26:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:26:59 PM [1620,8] Request processing finished
1/30/2014 3:26:59 PM [1620,8] #############################################################
1/30/2014 3:26:59 PM [1620,8] Request processing started
1/30/2014 3:26:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:26:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:26:59 PM [1620,8] Query String parameters:
1/30/2014 3:26:59 PM [1620,8]     oeh: 1
1/30/2014 3:26:59 PM [1620,8]     ns: Notify
1/30/2014 3:26:59 PM [1620,8]     ev: Poll
1/30/2014 3:26:59 PM [1620,8] Cookies
1/30/2014 3:26:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:26:59 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:26:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:26:59 PM [1620,8] Form: 
1/30/2014 3:26:59 PM [1620,8] OWA Session details
1/30/2014 3:26:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:26:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:26:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:26:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:26:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:26:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:26:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:26:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:26:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:26:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:26:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:26:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:26:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:26:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:26:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:26:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:26:59 PM [1620,8] Request processing finished
1/30/2014 3:28:59 PM [1620,8] #############################################################
1/30/2014 3:28:59 PM [1620,8] Request processing started
1/30/2014 3:28:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:28:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:28:59 PM [1620,8] Query String parameters:
1/30/2014 3:28:59 PM [1620,8]     oeh: 1
1/30/2014 3:28:59 PM [1620,8]     ns: Notify
1/30/2014 3:28:59 PM [1620,8]     ev: Poll
1/30/2014 3:28:59 PM [1620,8] Cookies
1/30/2014 3:28:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:28:59 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:28:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:28:59 PM [1620,8] Form: 
1/30/2014 3:28:59 PM [1620,8] OWA Session details
1/30/2014 3:28:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:28:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:28:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:28:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:28:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:28:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:28:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:28:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:28:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:28:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:28:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:28:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:28:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:28:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:28:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:28:59 PM [1620,8] Request processing finished
1/30/2014 3:28:59 PM [1620,8] #############################################################
1/30/2014 3:28:59 PM [1620,8] Request processing started
1/30/2014 3:28:59 PM [1620,8] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:28:59 PM [1620,8] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:28:59 PM [1620,8] Query String parameters:
1/30/2014 3:28:59 PM [1620,8]     oeh: 1
1/30/2014 3:28:59 PM [1620,8]     ns: Notify
1/30/2014 3:28:59 PM [1620,8]     ev: Poll
1/30/2014 3:28:59 PM [1620,8] Cookies
1/30/2014 3:28:59 PM [1620,8]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:28:59 PM [1620,8]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:28:59 PM [1620,8]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:28:59 PM [1620,8] Form: 
1/30/2014 3:28:59 PM [1620,8] OWA Session details
1/30/2014 3:28:59 PM [1620,8]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:28:59 PM [1620,8]     Authentication type: Basic
1/30/2014 3:28:59 PM [1620,8]     Authenticated user: QTIT\test1
1/30/2014 3:28:59 PM [1620,8]     Client IP Address: 192.168.177.49
1/30/2014 3:28:59 PM [1620,8]     Server IP Address: 192.168.177.2
1/30/2014 3:28:59 PM [1620,8]     Host: 192.168.177.2
1/30/2014 3:28:59 PM [1620,8] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:28:59 PM [1620,8] Explicit Logon: False
1/30/2014 3:28:59 PM [1620,8] Explicit Logon Address: OWA
1/30/2014 3:28:59 PM [1620,8] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:28:59 PM [1620,8] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:28:59 PM [1620,8] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:28:59 PM [1620,8] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:28:59 PM [1620,8] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:28:59 PM [1620,8] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:28:59 PM [1620,8] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:28:59 PM [1620,8] Request processing finished
1/30/2014 3:30:59 PM [1620,7] #############################################################
1/30/2014 3:30:59 PM [1620,7] Request processing started
1/30/2014 3:30:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:30:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:30:59 PM [1620,7] Query String parameters:
1/30/2014 3:30:59 PM [1620,7]     oeh: 1
1/30/2014 3:30:59 PM [1620,7]     ns: Notify
1/30/2014 3:30:59 PM [1620,7]     ev: Poll
1/30/2014 3:30:59 PM [1620,7] Cookies
1/30/2014 3:30:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:30:59 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:30:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:30:59 PM [1620,7] Form: 
1/30/2014 3:30:59 PM [1620,7] OWA Session details
1/30/2014 3:30:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:30:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:30:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:30:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:30:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:30:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:30:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:30:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:30:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:30:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:30:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:30:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:30:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:30:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:30:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:30:59 PM [1620,7] Request processing finished
1/30/2014 3:30:59 PM [1620,7] #############################################################
1/30/2014 3:30:59 PM [1620,7] Request processing started
1/30/2014 3:30:59 PM [1620,7] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:30:59 PM [1620,7] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:30:59 PM [1620,7] Query String parameters:
1/30/2014 3:30:59 PM [1620,7]     oeh: 1
1/30/2014 3:30:59 PM [1620,7]     ns: Notify
1/30/2014 3:30:59 PM [1620,7]     ev: Poll
1/30/2014 3:30:59 PM [1620,7] Cookies
1/30/2014 3:30:59 PM [1620,7]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:30:59 PM [1620,7]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:30:59 PM [1620,7]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:30:59 PM [1620,7] Form: 
1/30/2014 3:30:59 PM [1620,7] OWA Session details
1/30/2014 3:30:59 PM [1620,7]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:30:59 PM [1620,7]     Authentication type: Basic
1/30/2014 3:30:59 PM [1620,7]     Authenticated user: QTIT\test1
1/30/2014 3:30:59 PM [1620,7]     Client IP Address: 192.168.177.49
1/30/2014 3:30:59 PM [1620,7]     Server IP Address: 192.168.177.2
1/30/2014 3:30:59 PM [1620,7]     Host: 192.168.177.2
1/30/2014 3:30:59 PM [1620,7] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:30:59 PM [1620,7] Explicit Logon: False
1/30/2014 3:30:59 PM [1620,7] Explicit Logon Address: OWA
1/30/2014 3:30:59 PM [1620,7] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:30:59 PM [1620,7] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:30:59 PM [1620,7] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:30:59 PM [1620,7] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:30:59 PM [1620,7] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:30:59 PM [1620,7] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:30:59 PM [1620,7] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:30:59 PM [1620,7] Request processing finished
1/30/2014 3:32:59 PM [1620,9] #############################################################
1/30/2014 3:32:59 PM [1620,9] Request processing started
1/30/2014 3:32:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:32:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:32:59 PM [1620,9] Query String parameters:
1/30/2014 3:32:59 PM [1620,9]     oeh: 1
1/30/2014 3:32:59 PM [1620,9]     ns: Notify
1/30/2014 3:32:59 PM [1620,9]     ev: Poll
1/30/2014 3:32:59 PM [1620,9] Cookies
1/30/2014 3:32:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:32:59 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:32:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:32:59 PM [1620,9] Form: 
1/30/2014 3:32:59 PM [1620,9] OWA Session details
1/30/2014 3:32:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:32:59 PM [1620,9]     Authentication type: Basic
1/30/2014 3:32:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:32:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:32:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:32:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:32:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:32:59 PM [1620,9] Explicit Logon: False
1/30/2014 3:32:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:32:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:32:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:32:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:32:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:32:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:32:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:32:59 PM [1620,9] Request processing finished
1/30/2014 3:32:59 PM [1620,9] #############################################################
1/30/2014 3:32:59 PM [1620,9] Request processing started
1/30/2014 3:32:59 PM [1620,9] Url: https://192.168.177.2/owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:32:59 PM [1620,9] RawUrl: /owa/ev.owa?oeh=1&ns=Notify&ev=Poll
1/30/2014 3:32:59 PM [1620,9] Query String parameters:
1/30/2014 3:32:59 PM [1620,9]     oeh: 1
1/30/2014 3:32:59 PM [1620,9]     ns: Notify
1/30/2014 3:32:59 PM [1620,9]     ev: Poll
1/30/2014 3:32:59 PM [1620,9] Cookies
1/30/2014 3:32:59 PM [1620,9]     sessionid: e9912bc2-5d1c-437a-b2f8-916ffb12990d:000
1/30/2014 3:32:59 PM [1620,9]     cadata: "2PL//3iDKaThBwqmQR3Je78Cv+p9Hx6d9gew3x4SVvLIzPv5j"
1/30/2014 3:32:59 PM [1620,9]     UserContext: 2d282b7f911a4dcaadd801ebae4d8ebf
1/30/2014 3:32:59 PM [1620,9] Form: 
1/30/2014 3:32:59 PM [1620,9] OWA Session details
1/30/2014 3:32:59 PM [1620,9]     User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
1/30/2014 3:32:59 PM [1620,9]     Authentication type: Basic
1/30/2014 3:32:59 PM [1620,9]     Authenticated user: QTIT\test1
1/30/2014 3:32:59 PM [1620,9]     Client IP Address: 192.168.177.49
1/30/2014 3:32:59 PM [1620,9]     Server IP Address: 192.168.177.2
1/30/2014 3:32:59 PM [1620,9]     Host: 192.168.177.2
1/30/2014 3:32:59 PM [1620,9] Primary SMTP Address: test1@Qtit.com
1/30/2014 3:32:59 PM [1620,9] Explicit Logon: False
1/30/2014 3:32:59 PM [1620,9] Explicit Logon Address: OWA
1/30/2014 3:32:59 PM [1620,9] EV Extensions DLL version: 10.0.4.0
1/30/2014 3:32:59 PM [1620,9] [RequestProcessor::StartImpersonation] Impersonating logged on user
1/30/2014 3:32:59 PM [1620,9] [EVContext::Initialise] EVContext intialised at 1/30/2014 2:54:27 PM
1/30/2014 3:32:59 PM [1620,9] [EVContext::Initialise] Hidden settings loaded at 1/1/0001 12:00:00 AM
1/30/2014 3:32:59 PM [1620,9] [EVContext::IsValidBrowser] Returning: True
1/30/2014 3:32:59 PM [1620,9] [RequestProcessor::PostProcessRequest] Checking for reply/forward to EV item
1/30/2014 3:32:59 PM [1620,9] [RequestProcessor:StopImpersonation] Stopped impersonation
1/30/2014 3:32:59 PM [1620,9] Request processing finished