• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

More weird entries in the ISA firewall log

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> More weird entries in the ISA firewall log Page: [1]
Login
Message << Older Topic   Newer Topic >>
More weird entries in the ISA firewall log - 19.Mar.2006 4:26:49 PM   
Arch Willingham

 

Posts: 70
Joined: 15.Oct.2001
From: Chattanooga, TN 37404
Status: offline

As y'all may be able to tell, I am trying to clear up some of my ISA Confg stuff.
In addition to the other questions I have asked this morning, I have noticed tons of entries like below in eth ISA 2004 (SP2) Server's firewall log. The IP Address you see it coming from is the IP address of the internal NIC on the ISA server.
Why is it doing that and/or what to the entries mean?
Thanks,
Arch
ISACOMP 2006-03-19 00:00:01 TCP 192.168.0.7:4011 192.168.0.7:80 192.168.0.7 Local Host Local Host Establish 0x0 - HTTP N 0 0 0 0 - - - - - - - - 2 5454 - - -
ISACOMP 2006-03-19 00:00:02 TCP 192.168.0.7:4010 192.168.0.7:80 192.168.0.7 Local Host Local Host Terminate 0x80074e20 - HTTP N 0 0 0 0 - - - - - - - - 2 5453 - - -
ISACOMP 2006-03-19 00:00:02 TCP 192.168.0.7:4012 192.168.0.7:80 192.168.0.7 Local Host Local Host Establish 0x0 - HTTP N 0 0 0 0 - - - - - - - - 2 5455 - - -
ISACOMP 2006-03-19 00:00:02 TCP 192.168.0.7:4011 192.168.0.7:80 192.168.0.7 Local Host Local Host Terminate 0x80074e20 - HTTP N 0 0 0 0 - - - - - - - - 2 5454 - - -
ISACOMP 2006-03-19 00:00:02 TCP 192.168.0.7:4013 192.168.0.7:80 192.168.0.7 Local Host Local Host Establish 0x0 - HTTP N 0 0 0 0 - - - - - - - - 2 5456 - - -
ISACOMP 2006-03-19 00:00:03 TCP 192.168.0.7:4012 192.168.0.7:80 192.168.0.7 Local Host Local Host Terminate 0x80074e20 - HTTP N 0 0 0 0 - - - - - - - - 2 5455 - - -
ISACOMP 2006-03-19 00:00:03 TCP 192.168.0.7:4014 192.168.0.7:80 192.168.0.7 Local Host Local Host Establish 0x0 - HTTP N 0 0 0 0 - - - - - - - - 2 5457 - - -
ISACOMP 2006-03-19 00:00:03 TCP 192.168.0.7:4013 192.168.0.7:80 192.168.0.7 Local Host Local Host Terminate 0x80074e20 - HTTP N 0 0 0 0 - - - - - - - - 2 5456 - - -
Post #: 1
RE: More weird entries in the ISA firewall log - 19.Mar.2006 4:34:45 PM   
LLigetfa

 

Posts: 2187
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
If you posed the entries to include the column headers and put it inside code tags, it would be easier to read.  The code tags are inserted the <% option above the edit window.

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to Arch Willingham)
Post #: 2
RE: More weird entries in the ISA firewall log - 19.Mar.2006 4:40:42 PM   
Arch Willingham

 

Posts: 70
Joined: 15.Oct.2001
From: Chattanooga, TN 37404
Status: offline
oops:

#Software: Microsoft Internet Security and Acceleration Server 2004 
#Version: 2.0
#Date: 2006-03-19 00:00:01
#Fields: computer date time IP protocol source destination original client IP source network destination network action status rule application protocol bidirectional bytes sent bytes sent intermediate bytes received bytes received intermediate connection time connection time intermediate source proxy destination proxy source name destination name username agent session ID connection ID interface IP header protocol payload
 
          
		  
          

< Message edited by Arch Willingham -- 19.Mar.2006 5:32:05 PM >

(in reply to LLigetfa)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> More weird entries in the ISA firewall log Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts