Security Basics mailing list archives

Re: Alert script for multiple connections from a source


From: krymson () gmail com
Date: Thu, 27 Oct 2011 18:01:51 GMT

You probably need to provide more detail on a question like this.

- What are you wanting to discover with this check?

- Is the web server IIS or Apache or something else?

- Is something like PowerShell or Perl installed on the box?

- Do you have log management tools available that can pull in and analyze web log files?


It is not uncommon at all to have multiple connections to a web server from a single source. In fact, if your web page 
have 2 images on it, that will generate at least 3 connections per visitor (1 main GET, 1 GET per image...).



<- snip ->
Hi,

I would like to watch a web server internally and get an alert
especially with an email if a source gets more than 1 connection to
the web server . Web server is a windows server box. How can ido
that? a releated script?

Regards

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: