RE: Logging Inbound Web Requests OT: U.S. Dept of Justice (DOJ) v. Google

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 16 Mar 2006 09:46:48 -0600

Hi Greg,
I don't think they're looking to nab someone, they looking for usage
patterns to gather stats so that they can present something compelling
for a budget request.

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: Crockett, Gregory [mailto:Gregory.Crockett@xxxxxxxxx] 
> Sent: Thursday, March 16, 2006 9:35 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Logging Inbound Web Requests OT: U.S. 
> Dept of Justice (DOJ) v. Google
> 
> http://www.ISAserver.org
> 
> Speaking of web logs.
> 
> What can DOJ get from Google?  Correct me if I am wrong:  The 
> logs will
> reveal an IP address of the requester, browser type, query, 
> and a bunch
> of other info that will not identify the requester.  Does DOJ believe
> the IP address will lead them to a user name or resident?  Once they
> have the files (IP address), must they not knock on the doors of the
> ISPs to assist in identifying the holder of the IP address at the time
> of the query?  My ISP 
> 
> On the other hand, are they looking at how well web filters 
> are working?
> I heard this on NPR this AM.  How will this help unless they know the
> requester was a minor?  It all seems to be one big circle.
> 
> I was just wondering.
> 
> TIA
> 
> greg
>   
> 
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> Sent: Wednesday, March 15, 2006 1:51 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Logging Inbound Web Requests
> 
> http://www.ISAserver.org
> 
> Don't expect IIS logging from your proxy. 
> They 're very different animals with completely different focus.
> Each one logs according to its own needs.
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Alexandre Gauthier [mailto:gauthiera@xxxxxxxxxxxxxxxxx] 
> Sent: Wednesday, March 15, 2006 11:43
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Logging Inbound Web Requests
> 
> http://www.ISAserver.org
> 
> 
> I would very much appreciate if someone could enlighten me on this as
> well, I wonder how you can achieve the same logging detail with a
> reverse proxy as you would get with the server directly facing the
> internet...
> 
>  
> 
> ________________________________
> 
> From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
> Sent: Wednesday, March 15, 2006 12:27 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Logging Inbound Web Requests
> 
>  
> 
> http://www.ISAserver.org
> 
> Hello,
> 
>  
> 
> I use ISA Server 2004 to publish several web sites from our 
> IntraNet.  I
> collect logging information however the ISA Web Proxy Log has several
> fields that differ from a Web Server Log (as would be expected). There
> are also some important fields missing such as the referrer. 
> My question
> is as follows. Can a filter be created that will create a 
> logfile in the
> "Standard" W3C Extended Log Format?  Has anyone already done this. 
> 
>  
> 
> Thanks
> 
> 
> Bill
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> gauthiera@xxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> gregory.crockett@xxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: