Re: IIS Logs have internal IP when publishing via ISA
- From: "cismic" <cismic@xxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 25 Nov 2002 09:44:29 -0800
I have scripts that pull information from IIS, ISA(Web proxy logs,Packet
Filter logs, and Firewall logs), EventLog via dumpel command then
import, SMTP logs and put all of that information into tables that
I manipulate with stored procedures to produce graphs and analysis data.
I've been working on the entire process for about a year and that
includes an ISAPI DLL to be used as a helper with getting data into the
logs while retaining IP address. (THIS HAS BEEN A BIG LEARNING PROCESS
FOR ME, hence the year plus working on this stuff). When you server
publish you retain the ip address of the caller when it gets to your IIS
machine but you loose the ability to cache certain values in ISA. When
you web publish you loose the IP Address of the caller but loose the
ability and some of the caching functions of ISA.
It was because of this that I started working on my own process to merge
the information into tables for analysis.
I think that Jim Harrison has some of the import scripts, tables and
stored procedures that I've created on his site.
My site http://www.stat-sphere.com has been going through changes
through out the year. The code for the entire site
Will be available once it gets toughly tested.
Joseph
-----Original Message-----
From: Reed, Russ [mailto:Russ.Reed@xxxxxxxxxxxx]
Sent: Monday, November 25, 2002 5:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: IIS Logs have internal IP when publishing via ISA
http://www.ISAserver.org
Does anyone know of software that will do this automatically?
Thanks
Russ
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Friday, November 22, 2002 6:51 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: IIS Logs have internal IP when publishing
via ISA
http://www.ISAserver.org
Match the entries in the IIS logs with the corresponding ones
(filter by time) in the ISA server WEB logs.
You'll get oodles and gobs of information between them.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: Wayne Small <mailto:wayne@xxxxxxxxxxxxxx>
To: [ISAserver.org Discussion List]
<mailto:isalist@xxxxxxxxxxxxx>
Sent: Friday, November 22, 2002 12:35 PM
Subject: [isalist] IIS Logs have internal IP when
publishing via ISA
http://www.ISAserver.org
I have a server with ISA and IIS on it - two network
cards, one internal one external IP. If I publish the web site using
web publishing rules and I look at my IIS logs, I only ever see the ISA
servers internal IP address as the source address (fair enough). How
can I determine what public IP addresses visitors to my test website are
using to access my web site?
Regards,
Wayne Small [SBS-MVP]
MCSE+I MCSE 2000
Technical Director - Correct Solutions Pty Ltd
For all the answers on Small Business Server 2000 -
check out www.sbsfaq.com <http://www.sbsfaq.com/>
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site:
http://www.msexchange.org/
Windows Security Resource Site:
http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org
Discussion List as: jim@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: russ.reed@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows
Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
