Re: Where did the connections come from?

Another question just came up on my mind...

We run an IIS server on a separate machine. It hosts many web applications
that connect to the SQL database which runs on another machine. In this
case, I think only knowing the IP address of the failed login wouldn't help
much because it's all the IIS's IP. Does SQL 2005 also log which web
application causes the login failure?

Thanks,

Bing

"Sue Hoegemeier" wrote:

You'll need to use a network sniffer - the IP address of the failed
login isn't logged in SQL Server 2000, just SQL Server 2005.

-Sue

On Wed, 11 Apr 2007 11:04:01 -0700, bing
<bing@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Thanks much for the reply. Good to know. But why I don't see any connecting
IP or hostname? In EM, under Management->SQL Server Logs, when I click a log
entry, here is all the information I can see.

SQL Server Error Log message
Source: logon
Date: 2007-04-11 09:49:40.22
Message: Login failed for user '(null)'. Reason: Not associated with a
trusted SQL server connection.

I'm not clear if SQL 2000 has any log level settings anywhere.

Bing

"Russell Fields" wrote:

The login failure entries should have the IP address of the machine from
which the login was attempted. Look up that IP address on your domain and
see whose machine it is.

From the command prompt, this may help:
nbtstat -a the.ip.addr.ess

RLF
"bing" <bing@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:72B6EC6E-DFBE-4A5D-ADA4-480FCCC95B05@xxxxxxxxxxxxxxxx
Hi,

We use SQL 2000 on Windows 2003. In Enterprise Manager, when I looked
through the SQL server logs, I found a lot login failures. But how can I
know where those login failure connections came from?

Thanks much in advance for any insight.

Bing







.

Relevant Pages

  • Re: SQL User SID format?
    ... When you move databases to another server, you can remap users to logins ... capability to remap a user to a login with new ALTER USER syntax - I ... The new ALTER USER syntax works for remapping both SQL and Windows ... this means you already have access to a SID from the syslogins catalog; ...
    (microsoft.public.sqlserver.security)
  • Re: SQL Server on XP Home Network
    ... The sa account is the system administrator "God" account witihin SQL ... This account is a SQL-Server login. ... You might be able to use Enterprise Manager to go in and create a new SQL ... Select the "SQL Server Authentication" ...
    (microsoft.public.sqlserver.setup)
  • Re: SQL Server 2000 Replication Agents Credentials
    ... the snapshot agent IS using sql login to connect to the ... The pull distribution agent IS using sql ... Do you know where SQL Server 2000 saves the sql ...
    (microsoft.public.sqlserver.replication)
  • Re: Can you update/process AS2005 cube with AMO and SQL authentica
    ... We have cases where the AS server and the Data Source server reside on 2 ... The data source is properly secured using SQL Server ... login and no serious client will accept the login with no password. ...
    (microsoft.public.sqlserver.olap)
  • RE: Fulltext failure on a 2 node cluster
    ... Server full-text search resource online: "SQL Cluster Resource 'Full Text' ...
    (microsoft.public.sqlserver.clustering)