RE: Packet log for all clients
- From: "cismic" <cismic@xxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 22 Dec 2003 02:08:57 -0800
Hi Ram,
I like setting up the logs to log the maximum type of data. The web
proxy log has a different format then the packet and firewall logs.
In my back to back system. When I add the data to the sql database I
identify what machine the logs are coming from.
I'm not a big fan of logging directly to the sql database. I like
moving my logs to a secure "undisclosed location" and then process those
into sql. I remove all trailing chars. I'm not sure what is happening
to your logs with the varchar. Have you done an sql length of the
database field in question against the actual data?
And, yes if your site is busy it can occupy the logs very quickly.
Joseph
-----Original Message-----
From: Ramakrishna Y [mailto:ram@xxxxxxxxxxxx]
Sent: Sunday, December 21, 2003 10:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Packet log for all clients
http://www.ISAserver.org
Hi,
Will ISA log all the packets into log files for all types of
clients(WebProxy, SNAT, Firwall Client)? I could see different formats
for each of them. WebProxy client logs are fine. I want all those
details which are there in WebProxy clients for the other type of
connections also so that I can give a detailed reporting of the sites
visited also..Will this be possible with ISA Server?
Also I need a clarification. I've configured ISA reporting to ODBC (SQL
Server). While testing for 10 mts, the database has gone to 50MB. When I
check the database, all the values are filled with trailing spaces as if
the datatype is CHAR type. But the datatype defined was VARCHAR only.
Why all the trailing spaces are going to database? If I've a field of
length 128, and the value is only 50 characters, I could see remaining
78 characters as spaces. Any idea how its happenning.? Iam running an
evaluation of ISA Server.
Regards
Ram
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
