Auditing Options

From: Russell Lavoie (rlavoie_at_ncsoft.com)
Date: 10/12/05

  • Next message: Sean Warnock: "RE: Authentication History Windows" 
    Date: Wed, 12 Oct 2005 14:34:50 -0500
To: <focus-ms@securityfocus.com>

    Hi List!!

    I have been looking at a centralized logging mechanism with I have found
    (SnareServer). But this system does not audit the IPC$ or other type
    shares.

    I am wondering if there is any way to audit the IPC$ share as well as IP
    addresses that the connections are coming from. It seems Windows is
    limited in this respect...

    Does anyone have any suggestions on (free hopefully) software or
    utilities that will audit connections and log their IPs in the event
    viewer or something of that type? Open source, licensed software, it
    really doesn't matter I just need this functionality.

    Thanks!

    Russ

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Sean Warnock: "RE: Authentication History Windows"