Re: IIS LOGS

From: Keith W. McCammon (km@km.com)
Date: 02/19/03 

From: "Keith W. McCammon" <km@km.com>
Date: Wed, 19 Feb 2003 14:39:43 -0500

> D'oh! Sorry, guess I should have stated a little more in my first post. I
> have seen those, but I was looking for something that focuses in on the
> lines of an attack more then what page was visited how many times, etc,
> etc....
> Maybe something that will search your logs for certain hack attempts and
> that info might be kept in a database. Is there such a thing?
> All I can find is analyzers that do hit counts and junk like that.

If that's what's you're looking for, you want an IDS, not a logfile
analyzer. Have a look at Snort. It's free, has a ton of very good
signatures, and is updated daily. It doesn't get much better than that!