I turned on system logging. Here's part of a session log. Two things were going on: Entourage was accessing the exchange server, and there was a web page request using Mozilla. Both requests completed eventually, though this is not the complete session.
--Steve Sep 6 09:26:29 : Authoxy has started successfully Sep 6 09:27:27 : Ready to NTLM! Sep 6 09:27:27 : Entering Step 1 Sep 6 09:27:27 : Content Length of request: 0 Sep 6 09:27:27 : Waiting for Step 2 Sep 6 09:27:27 : Entering Step 2 Sep 6 09:28:41 : Ready to NTLM! Sep 6 09:28:41 : Entering Step 1 Sep 6 09:28:41 : Content Length of request: 0 Sep 6 09:28:41 : Waiting for Step 2 Sep 6 09:28:41 : Entering Step 2 Sep 6 09:28:41 : Ready to NTLM! Sep 6 09:28:41 : Entering Step 1 Sep 6 09:28:41 : Waiting for Step 2 Sep 6 09:28:41 : Entering Step 2 Sep 6 09:28:41 : Ready to NTLM! Sep 6 09:28:41 : Entering Step 1 Sep 6 09:28:41 : Waiting for Step 2 Sep 6 09:28:41 : Entering Step 2 Sep 6 09:28:48 : Ready to NTLM! Sep 6 09:28:48 : Entering Step 1 Sep 6 09:28:48 : Waiting for Step 2 Sep 6 09:28:48 : Entering Step 2 Sep 6 09:29:27 : Step 2 is complete Sep 6 09:29:27 : Entering Step 3 Sep 6 09:29:27 : Created Type 1 string of 64 characters Sep 6 09:29:27 : Pausing in Step 3 Sep 6 09:29:27 : Entering Step 4 Sep 6 09:29:27 : Content-Length: 0 Sep 6 09:29:27 : NTLM: Target length is 4 Sep 6 09:29:27 : NTLM: Target length 2 is 4 Sep 6 09:29:27 : NTLM: Target offset is 56 Sep 6 09:29:27 : NTLM Flag: Negotiate OEM Sep 6 09:29:27 : NTLM Flag: Request Target Sep 6 09:29:27 : NTLM Flag: Negotiate NTLM Sep 6 09:29:27 : NTLM Flag: Target Type Domain Sep 6 09:29:27 : NTLM Flag: Negotiate Target Info Sep 6 09:29:27 : NTLM Flag: UNKNOWN5 Sep 6 09:29:27 : NTLM: Target is: MBBC Sep 6 09:29:27 : NTLM: Target length is 98 Sep 6 09:29:27 : NTLM: Target length 2 is 98 Sep 6 09:29:27 : NTLM: Target offset is 60 Sep 6 09:29:27 : NTLM: TargetInfo is: ^B^^H^M^B^B^C^^A^^H^I^N^E^T^^D^^P^m^b^b^c^.^e^d^u^^C^^Z^i^n^e^t^.^m^b^b^c^.^ e^d^u^^E^^P^m^b^b^c^.^e^d^u^^^^^ Sep 6 09:29:27 : The nonce is: (I_^T^GÃ[Å. Sep 6 09:29:27 : Finished Step 4 Sep 6 09:29:27 : Entering Step 5 Sep 6 09:29:27 : Got Type 3 msg of 176 characters. Sep 6 09:29:27 : Finished NTLM! Sep 6 09:29:27 : SEARCH http://mail.mbbc.edu/exchange/sstratford/ HTTP/1.1 Sep 6 09:30:41 : Step 2 is complete Sep 6 09:30:41 : Entering Step 3 Sep 6 09:30:41 : Created Type 1 string of 64 characters Sep 6 09:30:41 : Pausing in Step 3 Sep 6 09:30:41 : Entering Step 4 Sep 6 09:30:41 : Content-Length: 0 Sep 6 09:30:41 : NTLM: Target length is 4 Sep 6 09:30:41 : NTLM: Target length 2 is 4 Sep 6 09:30:41 : NTLM: Target offset is 56 Sep 6 09:30:41 : NTLM Flag: Negotiate OEM Sep 6 09:30:41 : NTLM Flag: Request Target Sep 6 09:30:41 : NTLM Flag: Negotiate NTLM Sep 6 09:30:41 : NTLM Flag: Target Type Domain Sep 6 09:30:41 : NTLM Flag: Negotiate Target Info Sep 6 09:30:41 : NTLM Flag: UNKNOWN5 Sep 6 09:30:41 : NTLM: Target is: MBBC Sep 6 09:30:41 : NTLM: Target length is 98 Sep 6 09:30:41 : NTLM: Target length 2 is 98 Sep 6 09:30:41 : NTLM: Target offset is 60 Sep 6 09:30:41 : NTLM: TargetInfo is: ^B^^H^M^B^B^C^^A^^H^I^N^E^T^^D^^P^m^b^b^c^.^e^d^u^^C^^Z^i^n^e^t^.^m^b^b^c^.^ e^d^u^^E^^P^m^b^b^c^.^e^d^u^^^^^ Sep 6 09:30:41 : The nonce is: ~c1ÅâË^\S. Sep 6 09:30:41 : Finished Step 4 Sep 6 09:30:41 : Entering Step 5 Sep 6 09:30:41 : Got Type 3 msg of 176 characters. Sep 6 09:30:41 : Finished NTLM! Sep 6 09:30:41 : Step 2 is complete Sep 6 09:30:41 : Step 2 is complete Sep 6 09:30:41 : Entering Step 3 Sep 6 09:30:41 : Created Type 1 string of 64 characters Sep 6 09:30:41 : Entering Step 3 Sep 6 09:30:41 : Created Type 1 string of 64 characters Sep 6 09:30:41 : Pausing in Step 3 Sep 6 09:30:41 : Pausing in Step 3 Sep 6 09:30:41 : Entering Step 4 Sep 6 09:30:41 : Entering Step 4 Sep 6 09:30:41 : Content-Length: 0 Sep 6 09:30:41 : NTLM: Target length is 4 Sep 6 09:30:41 : NTLM: Target length 2 is 4 Sep 6 09:30:41 : NTLM: Target offset is 56 Sep 6 09:30:41 : NTLM Flag: Negotiate OEM Sep 6 09:30:41 : NTLM Flag: Request Target Sep 6 09:30:41 : NTLM Flag: Negotiate NTLM Sep 6 09:30:41 : NTLM Flag: Target Type Domain Sep 6 09:30:41 : NTLM Flag: Negotiate Target Info Sep 6 09:30:41 : NTLM Flag: UNKNOWN5 Sep 6 09:30:41 : NTLM: Target is: MBBC Sep 6 09:30:41 : NTLM: Target length is 98 Sep 6 09:30:41 : NTLM: Target length 2 is 98 Sep 6 09:30:41 : NTLM: Target offset is 60 Sep 6 09:30:41 : NTLM: TargetInfo is: ^B^^H^M^B^B^C^^A^^H^I^N^E^T^^D^^P^m^b^b^c^.^e^d^u^^C^^Z^i^n^e^t^.^m^b^b^c^.^ e^d^u^^E^^P^m^b^b^c^.^e^d^u^^^^^ Sep 6 09:30:41 : The nonce is: -ÃBÃ[ÂÃâ. Sep 6 09:30:41 : Finished Step 4 Sep 6 09:30:41 : Content-Length: 0 Sep 6 09:30:41 : NTLM: Target length is 4 Sep 6 09:30:41 : NTLM: Target length 2 is 4 Sep 6 09:30:41 : NTLM: Target offset is 56 Sep 6 09:30:41 : NTLM Flag: Negotiate OEM Sep 6 09:30:41 : NTLM Flag: Request Target Sep 6 09:30:41 : NTLM Flag: Negotiate NTLM Sep 6 09:30:41 : NTLM Flag: Target Type Domain Sep 6 09:30:41 : NTLM Flag: Negotiate Target Info Sep 6 09:30:41 : NTLM Flag: UNKNOWN5 Sep 6 09:30:41 : NTLM: Target is: MBBC Sep 6 09:30:41 : NTLM: Target length is 98 Sep 6 09:30:41 : NTLM: Target length 2 is 98 Sep 6 09:30:41 : NTLM: Target offset is 60 Sep 6 09:30:41 : NTLM: TargetInfo is: ^B^^H^M^B^B^C^^A^^H^I^N^E^T^^D^^P^m^b^b^c^.^e^d^u^^C^^Z^i^n^e^t^.^m^b^b^c^.^ e^d^u^^E^^P^m^b^b^c^.^e^d^u^^^^^ Sep 6 09:30:41 : The nonce is: f/^]CÃrÃÃ. Sep 6 09:30:41 : Finished Step 4 Sep 6 09:30:41 : Entering Step 5 Sep 6 09:30:41 : Got Type 3 msg of 176 characters. Sep 6 09:30:41 : Finished NTLM! Sep 6 09:30:41 : Entering Step 5 Sep 6 09:30:41 : Got Type 3 msg of 176 characters. Sep 6 09:30:41 : Finished NTLM! Sep 6 09:30:41 : Client closed connection, killing session processes. Sep 6 09:30:41 : Client closed connection, killing session processes. Sep 6 09:30:42 : SEARCH http://mail.mbbc.edu/exchange/sstratford/Contacts/ HTTP/1.1 Sep 6 09:30:48 : Step 2 is complete Sep 6 09:30:48 : Entering Step 3 Sep 6 09:30:48 : Created Type 1 string of 64 characters Sep 6 09:30:48 : Pausing in Step 3 Sep 6 09:30:48 : Entering Step 4 Sep 6 09:30:48 : Content-Length: 0 Sep 6 09:30:48 : NTLM: Target length is 4 Sep 6 09:30:48 : NTLM: Target length 2 is 4 Sep 6 09:30:48 : NTLM: Target offset is 56 Sep 6 09:30:48 : NTLM Flag: Negotiate OEM Sep 6 09:30:48 : NTLM Flag: Request Target Sep 6 09:30:48 : NTLM Flag: Negotiate NTLM Sep 6 09:30:48 : NTLM Flag: Target Type Domain Sep 6 09:30:48 : NTLM Flag: Negotiate Target Info Sep 6 09:30:48 : NTLM Flag: UNKNOWN5 Sep 6 09:30:48 : NTLM: Target is: MBBC Sep 6 09:30:48 : NTLM: Target length is 98 Sep 6 09:30:48 : NTLM: Target length 2 is 98 Sep 6 09:30:48 : NTLM: Target offset is 60 Sep 6 09:30:48 : NTLM: TargetInfo is: ^B^^H^M^B^B^C^^A^^H^I^N^E^T^^D^^P^m^b^b^c^.^e^d^u^^C^^Z^i^n^e^t^.^m^b^b^c^.^ e^d^u^^E^^P^m^b^b^c^.^e^d^u^^^^^ Sep 6 09:30:48 : The nonce is: KËËÃÃyzÃ. Sep 6 09:30:48 : Finished Step 4 Sep 6 09:30:48 : Entering Step 5 Sep 6 09:30:48 : Got Type 3 msg of 176 characters. Sep 6 09:30:48 : Finished NTLM! Sep 6 09:30:49 : Ready to NTLM! Sep 6 09:30:49 : Entering Step 1 Sep 6 09:30:49 : Waiting for Step 2 Sep 6 09:30:49 : Entering Step 2 Sep 6 09:30:51 : Server closed connection, killing session processes.
