"Ballard,Lowell" wrote:
> Certain things listed below I know are hack attempts (e.g., /cgi-bin/phf ).
> Is it possible for Analog to report to me the IP/DNS entry for this person?
Sure, you can setup a config file (say hack.conf) with lines like
FILEINCLUDE /cgi-bin/phf
FILEINCLUDE /_vti_bin/shtml.exe/_vti_rpc
...
Then run it and look at the host report. You can do these one at a time to get
the host->request correlation. Analog doesn't provide this kind of two-variable
cross-reporting, however. See FAQ item B18 (or B19 depending on your version of
Analog)
HTH,
Jeremy Wadsack
Wadsack-Allen Digital Group
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
