Re: Citrix

["Yvan L" <laverdiy () sympatico ca>]

Hi,

Citrix maintains a small access database on each server in the farm. This 
database is located (default location) at "%ProgramFiles%\Citrix\Citrix 
Resource Manager\LocalDB\RMLocalDatabase.mdb". It contains all the info you 
need and much more. Make sure you do not lock the file when attempting to 
read it. This info can be fetched with a script through an odbc connector 
and dumped into a remote database. Otherwise, Citrix wipes the data 
periodically... Then, you can historically extract whatever info you need. 
There is also a funtionnality in Citrix that automatically moves all the 
info to an Oracle or SQLServer instance but I haven't played with it so far.

I hope this helps,

Yvan

----- Original Message ----- 
From: "Jerry Shenk" <jshenk () decommunications com>
To: <bob.debolt () starblanket ca>; <pen-test () securityfocus com>
Sent: Thursday, November 25, 2004 6:04 PM
Subject: RE: Citrix


> It's a NT server.  I think "netstat -an" should give you what you're
> looking for.  It won't match up users and Ips but it'll get you started.
>
> -----Original Message-----
> From: Bob DeBolt [mailto:bob.debolt () starblanket ca]
> Sent: Tuesday, November 23, 2004 12:00 PM
> To: pen-test () securityfocus com
> Subject: Citrix
>
>
> Greets
>
> I have a need to link internet traffic to specific users,
> all of whom are using the Citrix client encryption. Is there
> a tool available to access the Citrix servers table or whatever
> is used to allow Citrix to maintain it's list of active connections.
>
>
> Bob D