Security Basics mailing list archives

Fwd: Print Server Log Analyzer


From: "Kurt Buff" <kurt.buff () gmail com>
Date: Tue, 19 Dec 2006 15:20:12 -0800

Sorry, meant to also send this to the list...

Kurt

---------- Forwarded message ----------
From: Kurt Buff <kurt.buff () gmail com>
Date: Dec 19, 2006 3:19 PM
Subject: Re: Print Server Log Analyzer
To: "AdamCivic () gmail com" <AdamCivic () gmail com>


If this is a longer-term or ong-going project, rather than a one-shot
deal, then I'd suggest using either the Snare Client
(http://intersectalliance.com - Free/OSS) or NTSyslog (sourceforge.net
- Free/OSS) as free daemons that will forward your event logs to a
syslog server. For the syslog server, I recommend the Kiwisoft syslog
server (Free version available, but I recommend the full version for
about US$100.00). Then you can use all sorts of tools to parse the
output, and not just for printjob auditing.

Kurt

On 18 Dec 2006 14:15:09 -0000, AdamCivic () gmail com <AdamCivic () gmail com> wrote:
Good Afternoon,

A long time fan of this list. First question.

I have a windows 2003 sp1 printer server. I want to audit printing events, get a persons logon id, amount of pages 
printed etc.

The events are currently being audited in the system portion of the event log. Which is fine and dandy, but my manager 
wants a pretty report not event logs. I tried to google the solution, but there are tons of print monitoring software 
out there, that is not what I need.


Does anyone know of any software or script where I decrypt the print log into a nice excel spreadsheet where I can manipulate 
the data and hand it off to my manager. I just need software to &quot;decrypt&quot; the logs. I do not want to install 
some 3rd party monitoring software, which most of them include their own services, etc. (especially if it is already being 
logged by window)



Much thanks guys in advance,
Adam

ps- sorry if this is the wrong place to post. But auditing is security. :)


---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------




Current thread: