If anyone is interested I have a script that will read the previous days web log and parse out a given IP address ( you supply when prompted), name the file ( also thru prompt) and save it as a csv file to a unc network location that you can code into the script. It is just a simple way to extract a users previous days browsing if you have a need to track a users actions. It only writes 5 fields to the csv, could write more if needed. Developed because of need when a supervisor wants to see where a users may have spent their time. Could be scheduled if the IP and filename were also scripted into code.
That's a cool script. I wouldn't mind taking a copy at 'weinstein_josh@Hotmail.com'.
On the subject of scripts, have you used the BlockAttacker.vbs script on Jim Harrison's www.toolzz.com site? It is supposed to create a deny packet filter with the IP Address grabbed from an Intrusion detected alert. I am trying to use it and am getting ISA errors that it can't logon to run the script as either the domain administrator or local administrator. Any ideas?
I will send you the script and it should also be able to work using the username instead of the ip, depending on your authentication that you are using. No I have looked at that but have not tried it yet. I would post the script here as it is small, did not know it that was appropriate.
Hello, As luck would have it, I just fixed my own problem yesterday. First off, the .vbs script should be run under the local system account. Next, you have 2 choices: 1) place double quotes around the folder path to the script in the intrusion detected alert or 2)place the .vbs script should be in a folder path that doesn't have any spaces.
Posts: 7
Joined: 10.Nov.2001
From: Hilo, Hawaii
Status: offline
Can you please send me a copy of that script : fhicks@co.hawaii.hi.us. Thank you very much
quote:Originally posted by learning: If anyone is interested I have a script that will read the previous days web log and parse out a given IP address ( you supply when prompted), name the file ( also thru prompt) and save it as a csv file to a unc network location that you can code into the script. It is just a simple way to extract a users previous days browsing if you have a need to track a users actions. It only writes 5 fields to the csv, could write more if needed. Developed because of need when a supervisor wants to see where a users may have spent their time. Could be scheduled if the IP and filename were also scripted into code.
I will get it to you first thing Monday when I get to work if that is ok.I would like to know if it would be appropriate to just plain post the code here? I have also updated another version that will hold an array of ip's and randomly email 3 out of a selection each day as a csv for audit. This is just simple vbscript and cdonts. Can easily convert to cdosys if required. You must have admin perms or run it from the server as a schedule it you want. The reason I developed this is to please some management for random checking of web usage. It is for standard destination of log files and standard log format. It could easily be converted for other directories and extended format. I would also like to have some feedback by anyone that has used the script. I have no comercial ambitions just an admin with a poor mans log parser for a small company.
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Printable Version
All Forums >> [ISA Server 2000 Misc.] >> ISA Server Programming >> have a simple script to read ISA log 
have a simple script to read ISA log - 
RE: have a simple script to read ISA log - ![[Big Grin]](/image/smiles/biggrin.gif)
New Messages
No New Messages
Hot Topic w/ New Messages
Hot Topic w/o New Messages
Locked w/ New Messages
Locked w/o New Messages
Post New Thread