checking logs (was: Re: Securing Corporate Web Based Email

From: Meritt James (meritt_james_at_bah.com)
Date: 01/30/04

  • Next message: sil: "Re: Securing Corporate Web Based Email"
    Date: Fri, 30 Jan 2004 09:26:45 -0500
    To: sil <jesus@resurrected.us>
    
    

    Wish folks would. Some of the first shell scripting I wrote years ago
    (back issue Sys Admin magazine for some) pre-perl snagged a days worth
    of logs from multiple logs on multiple machines, time-sequenced the
    mess, then mailed them off-system. Astounding things appear in the
    logs...

    Jim

    sil wrote:

    > the sake of understanding what is going on within their networks. For
    > instance, on my PERSONAL sites, I always have had the habits of tail
    > -f'ing various logs to see in real time what is happening in order to make
    > my sites/networks more effective for the end user and for myself.
    >
    > One can understand the actions of users based on repetitiveness at times,
    > and configure things from there, as well as get an understanding if
    > someone is trying to `beat the system' if you will, and address things
    > from there on.

    -- 
    James W. Meritt CISSP, CISA
    Booz | Allen | Hamilton
    phone: (410) 684-6566
    ---------------------------------------------------------------------------
    Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any 
    course! All of our class sizes are guaranteed to be 10 students or less. 
    We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, 
    and many other technical hands on courses. 
    Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off 
    any course!  
    ----------------------------------------------------------------------------
    

  • Next message: sil: "Re: Securing Corporate Web Based Email"

    Relevant Pages

    • Re: IIS 5 and Logs
      ... The logs don't write in real time. ... LogFileManager - The only IIS Logfile Management Tool ... > When I try to open log and go to eof I see logged ...
      (microsoft.public.inetserver.iis)
    • RE: MsiInstaller throws error 25001!
      ... Installed a utility called filemon that display system activity in real time. ... Statrted clietn.msi and recorded the logs as follows. ...
      (microsoft.public.sms.admin)
    • Re: ACPI problems [was: Long boot delay "Mounting Root Filesystem"]
      ... can you add your reports there. ... that when you have logs from lots of computers you can tell which one it ... Dave Abrahams ...
      (Ubuntu)
    • Re: Event Viewer Suggestions
      ... Allow multiple logs to be viewed side-by-side and synchronized by ... so that one could see both Application and System logs simultaneously. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: generate output from the logs
      ... We have multiple logs with thousands of lines similar to below. ... more relevant sample input (e.g. with Size= inside and outside of the ranges you ... The From is EnvFrom and EnvT. ...
      (comp.unix.shell)