Hi BC,
Thanks for all the information :) You just gave us ideas (and data) to really increase ossec support to multiple devices/log formats. Hopefully more people will follow your lead and give us more ideas and sample logs... Just some questions about ISA server (since I want to pre-configure it at the windows agent): -The logs are stored at C:\Program Files\Microsoft ISA Server\ISAlogs , right? -The ones you provided are firewall logs? Do you have the web or packet filter ones? (don't know why they differentiate firewall and packet filter). -Are these logs space or tab separated? Can it be specified in the configuration? -Can you take a few screenshots of the config? I would like to add it to the manual later... Thanks, -- Daniel B. Cid dcid ( at ) ossec.net On 11/14/06, Black CryptoKnight <[EMAIL PROTECTED]> wrote:
It would be great for OSSEC to have support for analysing Microsoft ISA Server log files. I posted information about the ISA Server log files and a sample on the wiki at http://www.ossec.net/wiki/index.php/MS_ISASERVER Visit Jamaica's Tech Portal http://www.techjamaica.com ________________________________ Want to start your own business? Learn how on Yahoo! Small Business.
