[Declude.JunkMail] Counting Instances

2006-06-01 Thread Dan
I'm looking at spam like this (this is but a small piece) and wondering if there is a way to count the number of instances of a particular entry, the number of times a word or other feature appears in the body or other part of a message:="float:right" c /spaneaspan style="float:right" a /spanr Hspan style="float:right" l /spanomspan style="float:right" u /spane Ospan stylePerhaps something I missed, a new use of a old system or whole new system, something like:	body   0   contains   ='float	CountInstances	countfilter		d:\IMail\Declude\Count.txt	40		0	0Where 40 instances of a single entry or 40 different entries in the same file, triggers the test.  Thoughts/Reactions?Thanks,Dan

Re: [Declude.JunkMail] vary large large files

2006-06-01 Thread Darrell \([EMAIL PROTECTED])
Roger, 

Are you getting a lot of mail inbound (Dictionary attack, etc)?  What is 
being shown in the logs?  Can you post a snippet?  Is anything else out of 
the norm(CPU, etc)?  To generate 750MB logs on log level low something has 
to be going on.. 


Darrell
---
fpReview - The easy way to review false positives for Declude...
http://www.invariantsystems.com 

Schmeits, Roger writes: 


We are getting very large dec.log logfiles on the spooler dir. In
the neighborhood of 750 meg. Anybody seen this? 

  

The debug mode is not on and log level is set to low. 

  

LOGFILE   e:\imail\spool\dec.log 

LOGLEVEL   LOW 

  

#PID / PID DEBUG 

  

#EVENTLOG ON 

#LOG_OK NONE 

  


##
Roger Schmeits
Sr. Network Engineer 

101 South 42nd St. 


Omaha, NE 68131
http://www.clarksoncollege.edu
(402) 552-2542 Office
(800) 647-5500 Toll Free
## 

  

Disclaimer: 

  


The information contained in this e-mail is privileged and confidential
and is intended only for the use of the addressee(s) indicated above.
Use or disclosure of information e-mailed in error is respectfully
prohibited. If you have received this e-mail in error, please contact
the sender and immediately delete the original message. 

  


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] vary large large files

2006-06-01 Thread Schmeits, Roger








We are getting very large dec.log logfiles on the
spooler dir. In the neighborhood of 750 meg. Anybody seen this?



The debug mode is not on and log level is set to low.



LOGFILE  e:\imail\spool\dec.log

LOGLEVEL LOW



#PID / PID DEBUG



#EVENTLOG ON

#LOG_OK NONE



##
Roger Schmeits
Sr. Network Engineer

101 South 42nd St.

Omaha, NE 68131
http://www.clarksoncollege.edu
(402) 552-2542 Office
(800) 647-5500 Toll Free
##







Disclaimer:







The information contained in this e-mail is privileged and
confidential and is intended only for the use of the addressee(s) indicated
above. Use or disclosure of information e-mailed in error is respectfully
prohibited. If you have received this e-mail in error, please contact the
sender and immediately delete the original message.










RE: [Declude.JunkMail] vary large large files

2006-06-01 Thread Schmeits, Roger
We found it. There were some wrong paths in the global.cfg for some
filters. It keet writing errors out to the decxxx.log file continuously
hence the large log files.

Thanks to David B. we came to a quick resolution.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, June 01, 2006 8:47 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] vary large large files

Roger, 

Are you getting a lot of mail inbound (Dictionary attack, etc)?  What is

being shown in the logs?  Can you post a snippet?  Is anything else out
of 
the norm(CPU, etc)?  To generate 750MB logs on log level low something
has 
to be going on.. 

Darrell
 ---
fpReview - The easy way to review false positives for Declude...
http://www.invariantsystems.com 

Schmeits, Roger writes: 

 We are getting very large dec.log logfiles on the spooler dir. In
 the neighborhood of 750 meg. Anybody seen this? 
 
   
 
 The debug mode is not on and log level is set to low. 
 
   
 
 LOGFILE   e:\imail\spool\dec.log 
 
 LOGLEVEL   LOW 
 
   
 
 #PID / PID DEBUG 
 
   
 
 #EVENTLOG ON 
 
 #LOG_OK NONE 
 
   
 
 ##
 Roger Schmeits
 Sr. Network Engineer 
 
 101 South 42nd St. 
 
 Omaha, NE 68131
 http://www.clarksoncollege.edu
 (402) 552-2542 Office
 (800) 647-5500 Toll Free
 ## 
 
   
 
 Disclaimer: 
 
   
 
 The information contained in this e-mail is privileged and
confidential
 and is intended only for the use of the addressee(s) indicated above.
 Use or disclosure of information e-mailed in error is respectfully
 prohibited. If you have received this e-mail in error, please contact
 the sender and immediately delete the original message. 
 
   
 
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server

2006-06-01 Thread Goran Jovanovic








Hi Robert,



All very good questions.



The client is paying for piece work as
opposed to an hourly rate so monitoring time spent against time billed is not a
concern.



Mostly they want to know if the developers
are using the environment that has been provided to them. 2 SQL servers, 2 web
servers, 2 application servers. Comments like did they just upload the new
stuff the day before the deliverable date? Are they using the environment that
was provided for 5 minutes a day or hours per day?



I am thinking of it as more of a validation
of the whole support environment for the developers rather than did they update/fix
that web page.



Monitoring the host machines via SNMP
might be an idea. Any simple (but good) tool leap to mind?



Thanks





Goran
 Jovanovic

Omega Network Solutions











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Robert E. Spivack
Sent: Wednesday, May 31, 2006 7:01
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Lets start at the high-level:



What question are you trying to
answer?



e.g:



 Are the developers
spending enough time doing the work they should be doing?



Are the developers doing
things they should not be doing?



Are the developers competent
and performing their job properly?



Are the developers hours
spent working matching their timesheets/project sheets?



Etc.





There are different solutions
depending upon your objectives.





Note: Personally, for outsourcing I
pay based on a project or deliverable so tracking time/usage is of no interest
to me. I pay for a certain result and dont care if it takes an
hour or a week to do it. Also, I audit the quality of the finished
product/code/service, I dont care about the tools/methods used to reach
that goal.



In your case:



Since you have a virtual server
environment, you can also audit at the host level. E.g. you can run SNMP
tools and measure traffic (bps and total bytes in/out) on the virtual network
ports of the virtual machine to see the activity level. You can see the
protocol (http, http, netbios, smb, etc.) to see what type of activity is
flowing through the machine. If you run the tool in a virtual machine on
the same physical host, it can use packet capture to fully analyze the traffic
and not just SNMP/WMI. 



You might consider re-writing your
outsourcing contract. You really shouldnt have to police the
project/micromanage it. Afterall, management of outsourcing is the hidden
cost that can eat you alive and remove any cost benefits so why allow yourself
to fall into that black hole?











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Wednesday, May 31, 2006 1:09
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





It is a dev/staging server running in a
virtual server environment so I have to be a bit careful what I turn on or
dont.



I tried the auditing a file. Wow talk
about generating Security Event Log records. I turned auditing on for two files
bginfo.exe and its corresponding config.bgi file. Then I ran it to generate the
background on file server. That simple little thing created 15 log entries.



If we turn this on we are going to need
something to parse the security log file as I can see that it is going to
produce a HUGE amount traffic in there.





Goran
 Jovanovic

Omega Network Solutions

















From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Shaun Mickey
Sent: Wednesday, May 31, 2006 3:34
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





You could also enable auditing in Windows to examine
file level access, just r-click on any file/folder and select properties, click
on the security tab then click advanced then click on the auditing tab. 



WARNING: auditing a lot of high-use files could
strain the server



That being said, your on a dev server so it should be
alright, though I would keep the number of files youre auditing to a
minimum or as small a group as possible





Thanks,



Shaun



---
Shaun Mickey
270net Technologies
Phone: 301.663.6000 x28
Fax: 301.663.4410
www.270net.com

Internet/Technology Solutions for
Business and Government
---











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Darin Cox
Sent: Wednesday, May 31, 2006 3:16
PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server







Source code activity would be best
analyzed with Visual SourceSafe or another code control system. For
watching use of the sites for testing, etc. just enable logging for the virtual
webs and run reports on the web traffic.






Darin.

















- Original Message - 



From: Goran 

Re: [Declude.JunkMail] Counting Instances

2006-06-01 Thread Don Brown
We're also looking for a solution to killing that kind of Spam.


Thursday, June 1, 2006, 5:33:53 AM, Dan [EMAIL PROTECTED] wrote:
D I'm looking at spam like this (this is but a small piece) and
D wondering if there is a way to count the number of instances of a
D particular entry, the number of times a word or other feature
D appears in the body or other part of a message:


D =float

:right c /spaneaspan style


D =float

:right a /spanr Hspan style


D =float

:right l /spanomspan style


D =float

:right u /spane Ospan style


D Perhaps something I missed, a new use of a old system or whole new system, 
something like:

D body   0   contains   ='float

D CountInstances  countfilterd:\IMail\Declude\Count.txt   400 0

D Where 40 instances of a single entry or 40 different entries in
D the same file, triggers the test.  Thoughts/Reactions?

D Thanks,
D Dan





D  



Don Brown - Dallas, Texas USA Internet Concepts, Inc.
[EMAIL PROTECTED]   http://www.inetconcepts.net
(972) 788-2364Fax: (972) 788-5049


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server

2006-06-01 Thread Robert E. Spivack








MRTG is free but a pain to setup and
reporting is limited. Some swear by Cacti, but setup is also complex.



A reasonable cost effective tool is
Paessler. Windows-specific, but well implemented and supported. http://www.paessler.com/



It has a packet capture mode (aka sniffer)
which will do a lot more than just snmp counting and exports reports to pdf











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Thursday, June 01, 2006
10:04 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Hi Robert,



All very good questions.



The client is paying for piece work as
opposed to an hourly rate so monitoring time spent against time billed is not a
concern.



Mostly they want to know if the developers
are using the environment that has been provided to them. 2 SQL servers, 2 web
servers, 2 application servers. Comments like did they just upload the new
stuff the day before the deliverable date? Are they using the environment that
was provided for 5 minutes a day or hours per day?



I am thinking of it as more of a
validation of the whole support environment for the developers rather than did
they update/fix that web page.



Monitoring the host machines via SNMP
might be an idea. Any simple (but good) tool leap to mind?



Thanks





Goran
 Jovanovic

Omega Network Solutions











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Robert E. Spivack
Sent: Wednesday, May 31, 2006 7:01
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Lets start at the high-level:



What question are you trying to
answer?



e.g:



 Are the developers
spending enough time doing the work they should be doing?



Are the developers doing
things they should not be doing?



Are the developers competent
and performing their job properly?



Are the developers hours spent
working matching their timesheets/project sheets?



Etc.





There are different solutions
depending upon your objectives.





Note: Personally, for outsourcing I
pay based on a project or deliverable so tracking time/usage is of no interest
to me. I pay for a certain result and dont care if it takes an
hour or a week to do it. Also, I audit the quality of the finished
product/code/service, I dont care about the tools/methods used to reach
that goal.



In your case:



Since you have a virtual server environment,
you can also audit at the host level. E.g. you can run SNMP tools and
measure traffic (bps and total bytes in/out) on the virtual network ports of
the virtual machine to see the activity level. You can see the protocol (http,
http, netbios, smb, etc.) to see what type of activity is flowing through the
machine. If you run the tool in a virtual machine on the same physical
host, it can use packet capture to fully analyze the traffic and not just
SNMP/WMI. 



You might consider re-writing your
outsourcing contract. You really shouldnt have to police the
project/micromanage it. Afterall, management of outsourcing is the hidden
cost that can eat you alive and remove any cost benefits so why allow yourself
to fall into that black hole?











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Wednesday, May 31, 2006 1:09
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





It is a dev/staging server running in a
virtual server environment so I have to be a bit careful what I turn on or
dont.



I tried the auditing a file. Wow talk
about generating Security Event Log records. I turned auditing on for two files
bginfo.exe and its corresponding config.bgi file. Then I ran it to generate the
background on file server. That simple little thing created 15 log entries.



If we turn this on we are going to need
something to parse the security log file as I can see that it is going to
produce a HUGE amount traffic in there.





Goran
 Jovanovic

Omega Network Solutions

















From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Shaun Mickey
Sent: Wednesday, May 31, 2006 3:34
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





You could also enable auditing in Windows to examine
file level access, just r-click on any file/folder and select properties, click
on the security tab then click advanced then click on the auditing tab. 



WARNING: auditing a lot of high-use files could
strain the server



That being said, your on a dev server so it should be
alright, though I would keep the number of files youre auditing to a
minimum or as small a group as possible





Thanks,



Shaun



---
Shaun Mickey
270net Technologies
Phone: 301.663.6000 x28
Fax: 301.663.4410
www.270net.com

Internet/Technology Solutions for
Business and Government

RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server

2006-06-01 Thread Dave Marchette








Ill second the recommendation for
Paesslers PRTG product.



 











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Robert E. Spivack
Sent: Thursday, June 01, 2006 1:16
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





MRTG is free but a pain to setup and
reporting is limited. Some swear by Cacti, but setup is also complex.



A reasonable cost effective tool is
Paessler. Windows-specific, but well implemented and supported. http://www.paessler.com/



It has a packet capture mode (aka
sniffer) which will do a lot more than just snmp counting and
exports reports to pdf











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Thursday, June 01, 2006
10:04 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Hi Robert,



All very good questions.



The client is paying for piece work as
opposed to an hourly rate so monitoring time spent against time billed is not a
concern.



Mostly they want to know if the developers
are using the environment that has been provided to them. 2 SQL servers, 2 web
servers, 2 application servers. Comments like did they just upload the new
stuff the day before the deliverable date? Are they using the environment that
was provided for 5 minutes a day or hours per day?



I am thinking of it as more of a
validation of the whole support environment for the developers rather than did
they update/fix that web page.



Monitoring the host machines via SNMP
might be an idea. Any simple (but good) tool leap to mind?



Thanks





Goran
 Jovanovic

Omega Network Solutions











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Robert E. Spivack
Sent: Wednesday, May 31, 2006 7:01
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Lets start at the high-level:



What question are you trying to
answer?



e.g:



 Are the developers
spending enough time doing the work they should be doing?



Are the developers doing
things they should not be doing?



Are the developers competent
and performing their job properly?



Are the developers hours
spent working matching their timesheets/project sheets?



Etc.





There are different solutions
depending upon your objectives.





Note: Personally, for outsourcing I
pay based on a project or deliverable so tracking time/usage is of no interest
to me. I pay for a certain result and dont care if it takes an
hour or a week to do it. Also, I audit the quality of the finished
product/code/service, I dont care about the tools/methods used to reach
that goal.



In your case:



Since you have a virtual server
environment, you can also audit at the host level. E.g. you can run SNMP
tools and measure traffic (bps and total bytes in/out) on the virtual network
ports of the virtual machine to see the activity level. You can see the
protocol (http, http, netbios, smb, etc.) to see what type of activity is
flowing through the machine. If you run the tool in a virtual machine on
the same physical host, it can use packet capture to fully analyze the traffic
and not just SNMP/WMI. 



You might consider re-writing your
outsourcing contract. You really shouldnt have to police the
project/micromanage it. Afterall, management of outsourcing is the hidden
cost that can eat you alive and remove any cost benefits so why allow yourself
to fall into that black hole?











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Wednesday, May 31, 2006 1:09
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





It is a dev/staging server running in a
virtual server environment so I have to be a bit careful what I turn on or
dont.



I tried the auditing a file. Wow talk
about generating Security Event Log records. I turned auditing on for two files
bginfo.exe and its corresponding config.bgi file. Then I ran it to generate the
background on file server. That simple little thing created 15 log entries.



If we turn this on we are going to need
something to parse the security log file as I can see that it is going to produce
a HUGE amount traffic in there.





Goran
 Jovanovic

Omega Network Solutions

















From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Shaun Mickey
Sent: Wednesday, May 31, 2006 3:34
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





You could also enable auditing in Windows to examine
file level access, just r-click on any file/folder and select properties, click
on the security tab then click advanced then click on the auditing tab. 



WARNING: auditing a lot of high-use files could
strain the server



That being said, your on a dev server so it should be
alright, though I would keep the number 

RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server

2006-06-01 Thread Jay Sudowski - Handy Networks LLC










We use PRTG here and it works
quite well.













From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Dave Marchette
Sent: Thursday, June 01, 2006 4:25
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Ill second the recommendation for
Paesslers PRTG product.



 











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Robert E. Spivack
Sent: Thursday, June 01, 2006 1:16
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





MRTG is free but a pain to setup and
reporting is limited. Some swear by Cacti, but setup is also complex.



A reasonable cost effective tool is
Paessler. Windows-specific, but well implemented and supported. http://www.paessler.com/



It has a packet capture mode (aka
sniffer) which will do a lot more than just snmp counting and
exports reports to pdf











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Thursday, June 01, 2006
10:04 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Hi Robert,



All very good questions.



The client is paying for piece work as
opposed to an hourly rate so monitoring time spent against time billed is not a
concern.



Mostly they want to know if the developers
are using the environment that has been provided to them. 2 SQL servers, 2 web
servers, 2 application servers. Comments like did they just upload the new
stuff the day before the deliverable date? Are they using the environment that
was provided for 5 minutes a day or hours per day?



I am thinking of it as more of a
validation of the whole support environment for the developers rather than did
they update/fix that web page.



Monitoring the host machines via SNMP
might be an idea. Any simple (but good) tool leap to mind?



Thanks





Goran
 Jovanovic

Omega Network Solutions











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Robert E. Spivack
Sent: Wednesday, May 31, 2006 7:01
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





Lets start at the high-level:



What question are you trying to
answer?



e.g:



 Are the developers
spending enough time doing the work they should be doing?



Are the developers doing
things they should not be doing?



Are the developers competent
and performing their job properly?



Are the developers hours
spent working matching their timesheets/project sheets?



Etc.





There are different solutions
depending upon your objectives.





Note: Personally, for outsourcing I pay
based on a project or deliverable so tracking time/usage is of no interest to
me. I pay for a certain result and dont care if it takes an hour
or a week to do it. Also, I audit the quality of the finished
product/code/service, I dont care about the tools/methods used to reach
that goal.



In your case:



Since you have a virtual server
environment, you can also audit at the host level. E.g. you can run SNMP
tools and measure traffic (bps and total bytes in/out) on the virtual network
ports of the virtual machine to see the activity level. You can see the
protocol (http, http, netbios, smb, etc.) to see what type of activity is
flowing through the machine. If you run the tool in a virtual machine on
the same physical host, it can use packet capture to fully analyze the traffic
and not just SNMP/WMI. 



You might consider re-writing your
outsourcing contract. You really shouldnt have to police the
project/micromanage it. Afterall, management of outsourcing is the hidden
cost that can eat you alive and remove any cost benefits so why allow yourself
to fall into that black hole?











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Wednesday, May 31, 2006 1:09
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





It is a dev/staging server running in a
virtual server environment so I have to be a bit careful what I turn on or
dont.



I tried the auditing a file. Wow talk
about generating Security Event Log records. I turned auditing on for two files
bginfo.exe and its corresponding config.bgi file. Then I ran it to generate the
background on file server. That simple little thing created 15 log entries.



If we turn this on we are going to need
something to parse the security log file as I can see that it is going to
produce a HUGE amount traffic in there.





Goran
 Jovanovic

Omega Network Solutions

















From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Shaun Mickey
Sent: Wednesday, May 31, 2006 3:34
PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
OT: Monitoring/Auditing a Windows Server





You could also enable auditing in Windows to examine
file level access, just r-click on 

RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server

2006-06-01 Thread Kevin
/Auditing a Windows
Server

You could also enable auditing in Windows to examine
file level access, just r-click on any file/folder and select properties,
click on the security tab then click advanced then click on the auditing
tab. 

WARNING: auditing a lot of high-use files could strain the server

That being said, your on a dev server so it should be alright, though I
would keep the number of files you?re auditing to a minimum or as small a
group as possible

Thanks,
Shaun


---
Shaun Mickey 
270net Technologies
Phone: 301.663.6000 x28
Fax: 301.663.4410

www.270net.com

Internet/Technology Solutions for
Business and Government
---


From:
[EMAIL PROTECTED]
[
mailto:[EMAIL PROTECTED]] On Behalf Of Darin
Cox
Sent: Wednesday, May 31, 2006 3:16 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] OT: Monitoring/Auditing a Windows
Server

Source code activity would be best analyzed with
Visual SourceSafe or another code control system. For watching use
of the sites for testing, etc. just enable logging for the virtual webs
and run reports on the web traffic.

Darin.


- Original Message - 
From: Goran
Jovanovic 
To:

Declude.JunkMail@declude.com 
Sent: Wednesday, May 31, 2006 2:35 PM
Subject: [Declude.JunkMail] OT: Monitoring/Auditing a Windows
Server

Hi All,

This is definitely an off topic
question. 

I have a client that wants to monitor
what their outsourced developers are doing. The development is taking
place in IIS, .Net Application Server and SQL 2000. They want to know
generally speaking what they are doing. Are the development servers being
used/tested? Would not have to report on what exactly is being changed
etc but some sort of activity report.

Does anyone know of anything that can
report on this type of activity.

Thanks

Goran Jovanovic
Omega Network Solutions

__ NOD32 1.1573 (20060601) Information __
This message was checked by NOD32 antivirus system.
http://www.eset.com



[Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread Kevin


A little off topic but I remember
seeing a post in the past on a great ping program on the list but forgot
the name. It'll ping a range of ips and report with it either live or
not. 
Any feedback greatly apprecicated.



Re: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread R. Lee Heath




Reply to: Kevin
   Re: [Declude.JunkMail] Windows Gui Ping on Thursday 2:22:21 PM

www.tools4ever.com FreePing does this free.

--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com


- Copy of Original Message(s): -







A little off topic but I remember seeing a post in the past on a great ping program on the list but forgot the name. It'll ping a range of ips and report with it either live or not.
Any feedback greatly apprecicated.







---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread Ncl Admin
One that I used to use was in Men  Mice Tools and the entire thing is very
useful.  Still use it at home a lot when I am doing certain things.

Jay


At 02:22 PM 6/1/2006 -0700, you wrote: 

A little off topic but I remember seeing a post in the past on a great ping
program on the list but forgot the name. It'll ping a range of ips and
report with it either live or not. 
Any feedback greatly apprecicated.  



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread William Stillwell
Angry IP Scanner

http://www.angryziber.com/ipscan/





From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Thursday, June 01, 2006 5:22 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Windows Gui Ping

A little off topic but I remember seeing a post in the past on a great ping
program on the list but forgot the name. It'll ping a range of ips and
report with it either live or not. 
Any feedback greatly apprecicated.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread Goran Jovanovic
I use this. Does not need an install, runs from the EXE file. Very nice
and easy

Goran Jovanovic
Omega Network Solutions

 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of William Stillwell
 Sent: Thursday, June 01, 2006 5:45 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Windows Gui Ping
 
 Angry IP Scanner
 
 http://www.angryziber.com/ipscan/
 
 
 
 
 
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kevin
 Sent: Thursday, June 01, 2006 5:22 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Windows Gui Ping
 
 A little off topic but I remember seeing a post in the past on a great
 ping
 program on the list but forgot the name. It'll ping a range of ips and
 report with it either live or not.
 Any feedback greatly apprecicated.
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread Dale McDiarmid


Prestwood Ping Server is my choice. Can email/page notification. $30
US.
D.

At 02:49 PM 6/1/2006, you wrote:
I use this. Does not need an
install, runs from the EXE file. Very nice
and easy
Goran Jovanovic
Omega Network Solutions

 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-
 [EMAIL PROTECTED]] On Behalf Of William Stillwell
 Sent: Thursday, June 01, 2006 5:45 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Windows Gui Ping
 
 Angry IP Scanner
 


http://www.angryziber.com/ipscan/
 
 
 
 
 
 From: [EMAIL PROTECTED]

[
mailto:[EMAIL PROTECTED]] On Behalf Of Kevin
 Sent: Thursday, June 01, 2006 5:22 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Windows Gui Ping
 
 A little off topic but I remember seeing a post in the past on a
great
 ping
 program on the list but forgot the name. It'll ping a range of ips
and
 report with it either live or not.
 Any feedback greatly apprecicated.
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.
To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail. The archives
can be found
 at

http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found
at

http://www.mail-archive.com.



RE: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread Kevin

Yes! That is the one. Thank you and others who replied.

At 02:44 PM 6/1/2006, you wrote:

Angry IP Scanner

http://www.angryziber.com/ipscan/





From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Sent: Thursday, June 01, 2006 5:22 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Windows Gui Ping

A little off topic but I remember seeing a post in the past on a great ping
program on the list but forgot the name. It'll ping a range of ips and
report with it either live or not.
Any feedback greatly apprecicated.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


__ NOD32 1.1574 (20060601) Information __

This message was checked by NOD32 antivirus system.
http://www.eset.com


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Windows Gui Ping

2006-06-01 Thread William Stillwell

+ Source Code Available
+ Free
+ You can write customized Plugins (Like Shares.Dll, Show all Windows
Shares)






-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Thursday, June 01, 2006 5:50 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Windows Gui Ping

I use this. Does not need an install, runs from the EXE file. Very nice
and easy

Goran Jovanovic
Omega Network Solutions

 

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of William Stillwell
 Sent: Thursday, June 01, 2006 5:45 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Windows Gui Ping
 
 Angry IP Scanner
 
 http://www.angryziber.com/ipscan/
 
 
 
 
 
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kevin
 Sent: Thursday, June 01, 2006 5:22 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Windows Gui Ping
 
 A little off topic but I remember seeing a post in the past on a great
 ping
 program on the list but forgot the name. It'll ping a range of ips and
 report with it either live or not.
 Any feedback greatly apprecicated.
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.