[isalist] R: Re: about filter log query on ISA 2004

  • From: "Luigi - Malmostoso" <luigi@xxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 27 Mar 2006 07:06:37 +0200

http://www.ISAserver.org
-------------------------------------------------------

Hi jim,
Ok. I want know the total (in bytes) of my traffic (in+out).
(I have a tri-homed configuration - In dmz I have published webs server).

luigi
 

-----Messaggio originale-----
Da: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] Per
conto di Jim Harrison
Inviato: lunedì 27 marzo 2006 6.45
A: isalist@xxxxxxxxxxxxx
Oggetto: [isalist] Re: about filter log query on ISA 2004

http://www.ISAserver.org
-------------------------------------------------------
  
Those two points are not related..
What sort of traffic are you trying to evaluate?

You should be aware that the log filter was not intended fo deep traffic
analysis.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Luigi - Malmostoso
Sent: Sunday, March 26, 2006 8:37 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: about filter log query on ISA 2004

http://www.ISAserver.org
-------------------------------------------------------
  
Hi Jim,

if I not specify that filter, then the total "bytes sent" + "Bytes received"
are not equal, but very much than!
Why?

________________________________________
Da: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] Per
conto di Jim Harrison
Inviato: venerdì 24 marzo 2006 21.52
A: isalist@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
Oggetto: [isalist] Re: about filter log query on ISA 2004

"action - not equal - connection status" == ignore the action field.
It's the same as if you had not specified "action" at all.

________________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of luigi - malmostoso
Sent: Fri 3/24/2006 8:37 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] about filter log query on ISA 2004
http://www.ISAserver.org
-------------------------------------------------------
 
Hi,
What means (in simple words, please; my english is very elementary) the
filter "action --  not equal -- connection status"?
The Results with or without it are very different!

Thank you,
luigi

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/ ;
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: