pcadvisoruk
asked on
IIS Logs what do they mean
What does the below mean does any one know where to find a website that explains this log to me? the numbers i mean?
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 21, 147, 383, 200, 0, OPTIONS, /, -,
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 162, 4205, 404, 0, PROPFIND, /c$, -,
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 10, 162, 4205, 404, 0, PROPFIND, /c$, -,
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 10, 162, 4205, 404, 0, PROPFIND, /c$, -,
I do know that this is some scriptkiddie attempt at accessing my server via Vun's but i'm patched. i can see that some are 404 errors so i take it that means page can not be found/displayed but the rest of the numbers i can't get my head round or find any information on. I'm using this type of logging because the times need to accurate instead of the one hour in front that IIS normally does
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 21, 147, 383, 200, 0, OPTIONS, /, -,
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 162, 4205, 404, 0, PROPFIND, /c$, -,
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 10, 162, 4205, 404, 0, PROPFIND, /c$, -,
IP, -, 14/06/2004, 21:49:20, W3SVC1, ServerName, Private IP web server, 10, 162, 4205, 404, 0, PROPFIND, /c$, -,
I do know that this is some scriptkiddie attempt at accessing my server via Vun's but i'm patched. i can see that some are 404 errors so i take it that means page can not be found/displayed but the rest of the numbers i can't get my head round or find any information on. I'm using this type of logging because the times need to accurate instead of the one hour in front that IIS normally does
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
cheers,
looks like my IIS logs were messed up they won't logging all the information properly, strange but now it's working fine. Not a hacker i Hope that has changed the logs for me :(
Cheers for your help
looks like my IIS logs were messed up they won't logging all the information properly, strange but now it's working fine. Not a hacker i Hope that has changed the logs for me :(
Cheers for your help
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/iissdk/iis/iis_log_file_formats.asp
http://www.iisfaq.com/default.aspx?view=P141
You may also want to look into software that will turn your data into a nice report:
http://www.loganalyzer.net/
http://www.mach5.com/products/analyzer/index.php?campaign=google&sub=iis