How do I get the ip address of a computer involved in a logon/logoff event?

From: Alex Contis (alex.contis@ldc.lu.se)
Date: 02/12/03 

From: "Alex Contis" <alex.contis@ldc.lu.se>
Date: Wed, 12 Feb 2003 11:57:47 +0100

Hi

I wonder if it's possible to get the ip address of a computer involved in a
logon/logoff event. Usually you get the NetBios name in the security log.

Thanks in advance
Alex Contis

Relevant Pages

  • SV: Trace of 139 attack?
    ... If this box of yours is a web server to the world, ... use it as file server with NetBIOS shares 'n stuff. ... your machine so that it'll shut down if the security log fills up ... You should also apply timed account lockouts if more than 5 (3 ...
    (Focus-Microsoft)
  • Event Viewer and IPs
    ... Is there any way to get the event viewer's security log to log IPs instead ... I find that logging the netbios name is pretty ...
    (microsoft.public.windowsxp.security_admin)