Security Basics mailing list archives

RE: ISA Server Log Analysis


From: "Stuart" <secmail () patchsupplier dyndns org>
Date: Tue, 9 Dec 2003 00:22:08 -0000

www.isaserver.org

They have all the best stuff for ISA there. It's worth browsing the
forums too. Lots to learn.

HTH

Stu

-----Original Message-----
From: Apostolos Boutos [mailto:Apostolos.Boutos () gr ey com] 
Sent: 08 December 2003 09:59
To: security-basics () securityfocus com
Subject: ISA Server Log Analysis






I would like some suggestions on any tools used to analyse logs of ISA
Server - the packet logs (IPPxxx). I already use some log analysis and
monitoring tools as far as users web usage is concerned. I am interested
in analysing the hits on the ISA Server from external sources and
getting some statistics and an overview.

I thank you all in advance,

A.B.


----------------------------------------------------------
The information contained in this communication is intended solely for
the use of the individual or entity to whom it is addressed and others
authorized to receive it.   It may contain confidential or legally
privileged information.   If you are not the intended recipient you are
hereby notified that any disclosure, copying, distribution or taking any
action in reliance on the contents of this information is strictly
prohibited and may be unlawful. If you have received this communication
in error, please notify us immediately by responding to this email and
then delete it from your system. Ernst & Young is neither liable for the
proper and complete transmission of the information contained in this
communication nor for any delay in its receipt.

Note: If you have received a delivery failure report, it may be due to
the change in the Ernst & Young e-mail domain from "eyi.com" to
"ey.com". Could you please make the necessary amendment, if required,
and resend the message.


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----





---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: