Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 475
  • Last Modified:

ISA SQL logging SourceIP

Hi,
I'm logging to a SQL database in ISA.
Only the IP's in the column are showing up as ints i.e. 'SourceIP' = 3232238700
and 'DestinationIP' = 1113983331.
Should it now be something like 192.168.20.xxx or something similar.
Where did I go wrong, I also see that the script coming with ISA to create the DB creates the column as bigint ' [SourceIP] bigint,'
How can I correct this ?
0
wilcosw
Asked:
wilcosw
  • 2
  • 2
1 Solution
 
Keith AlabasterEnterprise ArchitectCommented:
Are you trying to interrogate the database directly or viewing through the ISA screen in monitoring - logging and monitoring - reports
0
 
wilcoswAuthor Commented:
This is directly from the DB.
0
 
Keith AlabasterEnterprise ArchitectCommented:
Thought so - there is nothing to fix - that is the way ISA stores its information. The translation is performed by the realtime log monitor, the historic logging view and the reporting module.
0
 
wilcoswAuthor Commented:
Apparently the IP gets stored as its Integer value, in other words the IP
10.254.52.5 = 10*2^24 + 254*2^16 + 52*2^8 + 5 = 184431621 (This is what gets stored in the DB)

I found this arcticle at Microsoft:
http://support.microsoft.com/kb/891223 that explains how to convert it back.

Can I now create a trigger that will automatically change the value to readable IP's, or will it cause porblems with ISA ?


0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now