Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: [ISSForum] Site Protector tools |
|---|---|
| Date: | Fri, 15 Oct 2004 14:09:44 +0100 |
Jose,
The only thing stored in the database is the audit trail, but not actual
sessions. You might be able to query the audit trail like this:
SELECT
ADT.AuditTrailID, ADT.AuditTime, ADT.Username, ADC.EventDesc,
ADI.ParamName, ADI.ParamValue
from AuditTrail as ADT
JOIN AuditInfo as ADI
on ADT.AuditTrailID = ADI.AuditTrailID
JOIN AuditEventCMD as ADC
on ADT.AuditEventCMDID = ADC.AuditEventCMDID
-- AuditEventCMDID 5 = console login, 6 = console logout
WHERE ADT.AuditEventCMDID IN (5, 6)
Cheers,
Robert
-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net]
Sent: 23 September 2004 14:51
To: issforum@iss.net
Subject: [ISSForum] Site Protector tools
Does anyone have a website that provide useful tools to query
information from the Site Protector DB. I'm looking for a tool that
will provide the list of userids currently logged on and using Site
Protector console.
thanks in advanced!!
Jose Morales
mailto:mavenusa@yahoo.com
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: [ISSForum] The policy file is newer than issues.csv, Duncanson, Robert |
|---|---|
| Next by Date: | [ISSForum] Server sensor and exchange 5.5 server, Muraca, Peppino |
| Previous by Thread: | [ISSForum] Server sensor and web servers, Muraca, Peppino |
| Next by Thread: | [ISSForum] RSKill for Multiple Monitoring segments on Proventia "A", Mustapha Huneyd |
| Indexes: | [Date] [Thread] [Top] [All Lists] |