Welcome to ISAserver.org

Analyzing log files

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Analyzing log files

Page: [1]

Message

<< Older Topic Newer Topic >>

Analyzing log files - 3.May2007 11:06:28 AM

amandevi

Posts: 1
Joined: 3.May2007
Status: offline

We host several different websites and all of them sit behind the firewall. Because of this we need to analyze the ISA log files in order to get a sense of who is using our website and where the traffic is coming from. Has anyone had to do this? I want to be able to analyze mulitple log files at once (6 month intervals). Any suggestions on software to use. I have tried a few that I have found searching around the web but have not actually had any success in producing a report. I am starting to think that our log files are somehow being collected incorrectly. Here is a piece of one log file which I am trying to analyze. Thanks ahead of time for any help on this.

Software: Microsoft Internet Security and Acceleration Server 2004
#Version: 2.0
#Date: 2007-04-27 00:00:00
#Fields: c-ip cs-username c-agent date time s-computername cs-referred r-host r-ip r-port time-taken cs-bytes sc-bytes cs-protocol s-operation cs-uri s-object-source sc-status rule FilterInfo cs-Network sc-Network error-info action
141.150.44.108 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MSN 9.0; MSNbVZ02; MSNmen-us; MSNcOTH; MPLUS) 2007-04-27 00:00:00 TORCHEMADA - www.edc.uri.edu 131.128.90.11 80 1 458 188 http GET http://131.128.90.11/restoration/html/gallery/images/birds/nnyctico.jpg Inet 304 www.edc.uri.edu - External - 0x180 Allowed
141.150.44.108 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MSN 9.0; MSNbVZ02; MSNmen-us; MSNcOTH; MPLUS) 2007-04-27 00:00:00 TORCHEMADA - www.edc.uri.edu 131.128.90.11 80 1 457 187 http GET http://131.128.90.11/restoration/html/gallery/images/birds/bbernicl.jpg Inet 304 www.edc.uri.edu - External - 0x180 Allowed