• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Excessively large packet filter log files

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> General >> Excessively large packet filter log files Page: [1]
Login
Message << Older Topic   Newer Topic >>
Excessively large packet filter log files - 6.Dec.2001 5:00:00 PM   
abeeber

 

Posts: 31
Joined: 24.Oct.2001
From: Norwell, MA, USA
Status: offline
Hi Tom,
Is it normal to have the packet filter log file reach over 300MB per day?


Is there anything I can do to reduce that other than turning it off.

Andrew

Post #: 1
RE: Excessively large packet filter log files - 7.Dec.2001 1:27:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Andrew,

On a busy network 300MB might be too little or too much You should go through some of them and make sure the entries are legit: port scanning, fraggle attacks, and the usual script kiddie stuff.

One thing that can really pack a packet filter log is a poorly configured DNS configuration, and putting a DHCP server on the ISA Server itself (and in some instances, the DHCP requests from a VPN server).

Make sure you have compression enabled on the log files. I believe this is the default, but check it out just in case.

HTH,
Tom

------------------
http://www.isaserver.org/shinder/


Get It Here!


(in reply to abeeber)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> General >> Excessively large packet filter log files Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts