Re: user name from security logs

[Kevin <securityfocus () kevin 3drealms com>]

Hello Peter,

Yes, through the use of a SYSLOG server and SNARE.

SNARE is a free open source utility that sends Windows Events to a
syslog server.  It is configurable so that it can send much greater
detail than what is usually reported in the Event Logs.  Not only can
it tell you who logs in, but it can also tell you what programs are run.

SNARE:
http://www.intersectalliance.com/projects/Snare/


I also use Kiwi Syslog Daemon which is a freeware syslog server.
http://www.kiwisyslog.com/?source=overture






-----------------------------------------------
Tuesday, May 24, 2005, 12:04:12 PM, you wrote:
-----------------------------------------------

PR> Hi, all

PR> Is there any way or any tools that we can find out
PR> which user logon or
PR> logoff from the network at specifc time through
PR> Windows 2000
PR> security logs instead of going through each security
PR> log?

PR> Thanks in advance,

PR> Peter

PR> __________________________________________________
PR> Do You Yahoo!?
PR> Tired of spam?  Yahoo! Mail has the best spam protection around 
PR> http://mail.yahoo.com