[Dshield] Parsing IIS Logs Themselves?

Johannes B. Ullrich jullrich at euclidian.com
Sat Aug 11 02:32:17 GMT 2001

> Is there a way to process the IIS logs directly?  I see log submitting
> options for a lot of formats, but none of them seem to work with the
> current IIS logs.  Since those are the machines being effected, wouldn't
> it be smart to accept those logs directly?

See http://www.dshield.org/codered.html

jullrich at sans.org                    Join http://www.DShield.org
                                     Distributed Intrusion Detection System

More information about the list mailing list