ISA MMC, Monitoring Configuration, properties of each service log. "ISA Format" logs in local time. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the books! ----- Original Message ----- From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, September 30, 2002 2:02 PM Subject: [isalist] Re: 14123 - Failed to create IP Packet filter http://www.ISAserver.org I know ISA logs things in GMT -- but what I didn't know is that it's configurable! How can you change that to local time (some registry entry)? A.- -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, September 30, 2002 12:22 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: 14123 - Failed to create IP Packet filter http://www.ISAserver.org 14189 - this is a result of some change occurring in the ISA TCP/IP stack routing table. If you're running RRAS VPN on this server, disable this alert; it's just noise at this point. 14123 - check your ISA IP..log for the event in this time slot (remember that ISA logs in GMT by default) Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/pages/author_index.asp?aut=3 http://isatools.org Read the books! ----- Original Message ----- From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, September 30, 2002 8:50 AM Subject: [isalist] 14123 - Failed to create IP Packet filter http://www.ISAserver.org ISA was working fine -- and now suddenly every 7 minutes or so the ISA Server Control service adds the following two entries to the Windows Application Log. Haven't really changed the LAT or routing table. What can it be? Information - Event ID 14189 - ISA Server detected that a change was made in the local address table (LAT) Error - Event ID: 14123 - Failed to create the Internet Protocol (IP) packet filter. For more information see ISA Server help. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: alopezdeayala@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')