« Previous Next »

• 06-23-2009, 11:56 PM

  gwl7810 Joined on 06-24-2009, 2:43 AM Posts 3	which log should i concern about Reply Contact which log should i conern about? can someone tell me? thx in advance .

• 06-24-2009, 10:15 AM

  In reply to

  qbernard Joined on 03-25-2003, 10:12 PM Malaysia Posts 3,229	Re: which log should i concern about Reply Contact depend on what info you like to get.. then you will focus on those types of log. Say - system events - then events log. if you say urlscan, then urlscan log. Cheers, Bernard Cheah

• 06-24-2009, 9:38 PM

  In reply to

  gwl7810 Joined on 06-24-2009, 2:43 AM Posts 3	Re: which log should i concern about Reply Contact sorry ,I wanna focus on iis log and find out evidence indicate threat of scan and invade ,

• 06-25-2009, 12:03 AM

  In reply to

  steve schofield Joined on 06-10-2002, 8:54 PM MI Posts 3,964	Re: which log should i concern about Reply Contact %windir%\system32\logfiles\w3svcXXX on IIS 6 C:\Inetpub\Logs\Logfiles\w3svcXXX on IIS 7 These are the default paths. Also look at c:\windows\system32\logfiles\httperr for 503 and 400 type hits. Steve Schofield Windows Server MVP - IIS http://weblogs.asp.net/steveschofield http://www.IISLogs.com Log archival solution Install, Configure, Forget

• 06-25-2009, 3:37 AM

  In reply to

  gwl7810 Joined on 06-24-2009, 2:43 AM Posts 3	Re: which log should i concern about Reply Contact I have gathered logs from  several web site and stored it at sql server,now i wanna use a sql script find out useful information,but i don't know ,which log should i focus on? any response will be appreciated

• 06-30-2009, 4:46 AM

  In reply to

  qbernard Joined on 03-25-2003, 10:12 PM Malaysia Posts 3,229	Re: which log should i concern about Reply Contact There're lot of scripts sample online... or you can get the book here http://msmvps.com/blogs/bernard/archive/2005/06/26/55964.aspx Unfortunately, the IIS sample chapter link is broken, I have yet to find a place to host it again. Cheers, Bernard Cheah