Event Viewer and IPs

From: Doug Granger (granger_at_rouge.phys.lsu.edu)
Date: 05/09/05 

Date: Mon, 9 May 2005 11:21:15 -0500

Is there any way to get the event viewer's security log to log IPs instead
of the netbios name? I find that logging the netbios name is pretty
useless since that can be changed at anytime and really has no meaning. I
would much rather like to know what ip the attempts are coming from.

Thanks
Doug

Relevant Pages

  • Re: Internal Machine making many attempts to connect to Internet on 137
    ... to that IP via netbios to get it's machine name. ... IIS logging it may ... > conduit permit icmp host server.ip.address.here any information-reply ...
    (Incidents)
  • Help!!! Audit Failure - Event ID 560
    ... Once the security log is full, ... user (domain user) are not able to login. ... keeps on logging this event. ...
    (microsoft.public.windowsxp.security_admin)
  • SV: Trace of 139 attack?
    ... If this box of yours is a web server to the world, ... use it as file server with NetBIOS shares 'n stuff. ... your machine so that it'll shut down if the security log fills up ... You should also apply timed account lockouts if more than 5 (3 ...
    (Focus-Microsoft)
  • Security Event Log Performance for File and Folder Auditing
    ... To minimize impact of the logging, ... Setting the Security log to be 4 GB in size ... Dedicating a 5 GB Raid-10 volume for the logging partition ... improve auditing and security event logging? ...
    (microsoft.public.security)
  • Re: SBS2003 - intermittent connectivity / authentication problems
    ... logging off and back on always fixes it for a time. ... > I've recently implemented a new server running SBS2003 and I must say it's ... > Outlook 2003 produces the occasional message saying "connection to the ... > The only thing I've noticed is in the security log on the server, ...
    (microsoft.public.windows.server.sbs)
Quantcast