Hi, The times as logged are in GMT time. So for the pacific coast we have -8 from GMT or UNC time. I think that a good site for those who would like to know is http://greenwichmeantime.com from this site you'll be able to determine what your Zulu time settings should be. For example : convlog -ie Logfile.log -t ncsa:-0800 is for the pacific time zone. The convlog also has the following syntax available: Usage: convlog [options] LogFile Options: -i<i|n|e> = input logfile type i - MS Internet Standard Log File n - NCSA Common Log File format e - W3C Extended Log File Format -t <ncsa[:GMTOffset] | none> default i -o <output directory> default = curren -x save non-www entries to a .dmp logf -d = convert IP addresses to DNS -l<0|1|2> = Date locale format for MS 0 - MM/DD/YY (default e.g. US) 1 - YY/MM/DD (e.g. Japan) 2 - DD.MM.YY (e.g. Germany) Examples: convlog -ii in*.log -d -t ncsa:+0800 convlog -in ncsa*.log -d convlog -ii jra*.log -t none Joseph -----Original Message----- From: Tom Webb [mailto:twebb@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, April 03, 2002 11:20 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA LOGS again! http://www.ISAserver.org Interesting. I've noticed a time discrepancy too. Anyone know why that is? -----Original Message----- From: Rafael Rodrigues [mailto:lrafael@xxxxxxxxxxxxx] Sent: Wednesday, April 03, 2002 1:06 PM To: [ISAserver.org Discussion List] Subject: [isalist] ISA LOGS again! http://www.ISAserver.org Hi everybody. I'm trying to find who insite my network use a free mail (like hotmail) to send a mail to mee. If this guy use a machine inside my ISA Server, I think have the internal IP trying to connect hotmail. I have the day and the time, and if I find at my isa logs what IP enter at hotmail.com at this day and time... I find the man. It's correct? But I'm trying to find the log from today in c:\program files\microsoft isa server\isalogs and I just find the last 8 logs. Where's all logs? Why the log from today have incorrect time? Now it's 16:05 and I have connections at 20:30 (for example). ISA Server record the time from local machime? Thanks... Rafael Rodrigues. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: twebb@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')