Welcome to ISAserver.org

Top application user, cannot find its ip in the logs

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Top application user, cannot find its ip in the logs

Page: [1]

Message

<< Older Topic Newer Topic >>

Top application user, cannot find its ip in the logs - 28.Mar.2006 10:56:01 PM

trudesea

Posts: 18
Joined: 7.Mar.2003
Status: offline

Hi all,

I have a top application user who has used over 6GB of bandwidth in the last month.
The user is listed by ip in the report, but when I try to filter the logs to show this ip
it returns no results. I need to know what the user is doing.

I know who owns the ip, and it is one of our business partners and it is an external address. There is no reason whatsoever that they should be receiving this much data.

I've tried every "filter by" and even put the ip and resolved hostname in "client username".....nothing.

I want to see every entry, no matter what field this ip is in. Im using msde logging.

Any ideas are appreciated.

Thanks,
Tim

Post #: 1

Featured Links*

RE: Top application user, cannot find its ip in the logs - 7.Apr.2006 3:13:27 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tim,

What exactly are you looking for? Its unclear from your description.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to trudesea)