Welcome to ISAserver.org

FTP traffic missing in logs

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> FTP traffic missing in logs

Page: [1]

Message

<< Older Topic Newer Topic >>

FTP traffic missing in logs - 20.May2002 8:30:00 AM

Zoroto

Posts: 15
Joined: 22.Apr.2002
Status: offline

Hi to All,
I start making some specific statistic according to ISA logs, but I can not find in log files any record related to FTP access and FTP traffic.
I checked all checkboxes for the Packet Filters Log, ISA Server Firewall service Log, ISA Server Web Proxy Service Log, but nowhere I can find any record.(WEBD20020515.log, FWSD20020515.log, IPPD20020515.log).

Maybe there is missing also some traffic records but for now I mentioned only this.
Can some one help me with this problem.
10x in advice.

Post #: 1

Featured Links*

RE: FTP traffic missing in logs - 20.May2002 8:32:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Z,

the information is in there is any of the ISA Server services processed the request.

HTH,
Tom

(in reply to Zoroto)

Post #: 2

RE: FTP traffic missing in logs - 20.May2002 10:42:00 AM

Zoroto

Posts: 15
Joined: 22.Apr.2002
Status: offline

Hi Tom,

How can I know that some of the ISA Server services processed the request, and in which log I can find information.

In IPPD-log i could find only blocked broadcast messages from my ip(10.0.0.26) no other info.
In WEBD-log there is no record on port 21, there are 80,53,110,5190 and some other custom but 21 not !
It is the same in FWSD-log.
In Application Filters FTP Access Filter is enabled.
In Protocol rules there is rule: Allow-All IP Traffic- Any Request-Always
In IP Packet Filters there is no filter including FTP protocol.
Maybe I am missing something but what ?

Regards,
Zoroto

(in reply to Zoroto)

Post #: 3

RE: FTP traffic missing in logs - 20.May2002 3:44:00 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Zoroto,

What FTP client application are you using?

What ISA Server client type are you using?

Are you running RRAS NAT or ICS on the ISA Server?

Thanks!

Tom

(in reply to Zoroto)

Post #: 4

RE: FTP traffic missing in logs - 21.May2002 1:10:00 PM

Zoroto

Posts: 15
Joined: 22.Apr.2002
Status: offline

Hi Tom,

I use ftp client of Windows Commander 4.51., it is intergrated in it.The connection settings are HostName, User Name, Password, and Use Firewall (proxy server) is not checked. On the ISA Server there are RRAS NAT configuration.

1.When I am SecureNAT Client (I confugure my gateway to be IP of the ISA Server).
The records in the Firewall log for the connected host on the 21 port are with values for bytesent and byterecvd equal to zero, or values no bigger than 200bytes, I supose that this is directory listing info.
Even if I transfer file with size 212KB no record is added.

2.When I am using Microsoft Firewall Client Version 3.0, which is comming with the installation of the ISA, in the log files are recorded info the same as p.1, and also files with bigger size(for example 170KB-300KB), but when I transfer files with smaller size(17KB) they are not recorded.

Thnaks for your answer.
Zoroto

(in reply to Zoroto)

Post #: 5