Logging and Event Alerts

Events that could affect your system may be monitored, and, if they occur,
alerts can be generated. The items listed below are events that will
generate alerts:

Rejected Packets: Watches external adapter for dropped IP packets. Protocol
Violations: Watches for packets that do not follow the allowed protocol
structure. Disk Full: Watches for failures caused by a full disk.

When any of the events above occur, an alert is sent to the system log in
the NT Event Viewer, or can be configured to e-mail a pre-defined person.

When the system logs information concerning Access Control, it does so to a
log file stored in the %systemroot%/system32/msplogs/ directory. The log
file itself is named Pfyymmdd.log (Where yy=Current year / mm= Current Month
/ dd= Current day).

The Packet log records information related to the following areas:

Service Information (Time of Service, Date and Time)

Remote Information (The Source IP Address of a possible Intruder, along with
port and protocol used)

Local Information (Destination IP Address and port)

Filter Information (Action taken and what interface (network adapter) issued
the action)

Packet Information (Raw IP Header in Hex and Raw IP Packet in Hex)

Since we get a lot of donated Step x Step, White Papers and Faq's please let us know if they contain errors by emailing us here.
 

Search or Choose a Link from the top of this page.

Enter your search terms Submit search form   Web CpuCare.net

Search or Choose a Link from the top of this page.

Webmasters, please don't throw away your old whitepapers or Faq's or let them fade away, we would be more than happy to host them here on our site, even if they are antiquated and outdated!