Linux iad1-shared-b7-18 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64
Apache
: 67.205.6.31 | : 216.73.216.171
Cant Read [ /etc/named.conf ]
8.2.29
fernandoquevedo
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
README
+ Create Folder
+ Create File
/
usr /
share /
doc /
analog /
how-to /
iis /
[ HOME SHELL ]
Name
Size
Permission
Action
CGLLogo_sm.gif
3.95
KB
-rw-r--r--
IISConfig.gif
8.91
KB
-rw-r--r--
IISConfig1.gif
8.21
KB
-rw-r--r--
IISConfig2.gif
9.65
KB
-rw-r--r--
IISConfig2a.gif
9.72
KB
-rw-r--r--
IISConfig3.gif
9.69
KB
-rw-r--r--
IISConfig4.gif
6.68
KB
-rw-r--r--
IISConfig5.gif
9.67
KB
-rw-r--r--
IISSetup.gif
23.39
KB
-rw-r--r--
index.html
14.07
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : index.html
<html> <head> <meta http-equiv="Content-Language" content="en-us"> <meta name="GENERATOR" content="Microsoft FrontPage 5.0"> <meta name="ProgId" content="FrontPage.Editor.Document"> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> <link rel="stylesheet" type="text/css" href="../anlghow.css"> <title>HOW-To Configure IIS for use with Analog</title> </head> <body> <h1 align="center" style="text-align: center">HOW-TO<br> Configure Internet Information Services for use with <a HREF="http://www.analog.cx/">Analog</a></h1> <p align="center" style="text-align: center">Copyright © 2002 by <a href="http://www.ChristopherLewis.com">Christopher G. Lewis</a><br> <font size="2">Rights are given by the copyright holder to reproduce, distribute, modify, and create derivative works of this document as long as the above original copyright is not removed.</font> <br> <FONT SIZE="2"><i>Originally written 2002-04-29. Last update 2002-05-17.</i></FONT></p> <h2>Purpose</h2> <p>Analog is claimed as the most popular web logfile analyzer in the world. (<a href="http://www.analog.cx/survey.html">Details</a>). While originally written for unix systems, Analog has supported Win32 since version 1.9beta4 (Mar-1996) and has had native Win32 support since 2.0 (Feb-1997). Configuring IIS correctly greatly simplifies the use of Analog, and will allow for much better reporting.</p> <h2>System</h2> <p>This example was developed and tested using a default install of Windows 2000 server running IIS 5.0 with SP2 and all current security patches installed. It should be applicable to Windows NT 4.0 with IIS 4.0, and also the new Windows .NET servers which are currently in beta.</p> <p>This sample assumes that Windows 2000 Server or Advanced Server is installed on the machine without IIS.</p> <h2>Installing Internet Information Services</h2> <p>The basic method for installing IIS is to use the Add/Remove Programs control panel application, and to select Add/Remove Windows Components. Select the Internet Information Services (IIS) checkbox, and click the Details button. Check the appropriate check boxes for your installation needs.</p> <div align="center"> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111"> <tr> <td width="50%" align="center"> <img border="0" src="IISSetup.gif" alt="IIS Configuration" width="693" height="557"></td> </tr> </table> </div> <h2>Configuring Internet Information Services</h2> <p>There are some simple steps to configure IIS to ensure that Analog functions properly. I'll also include some of my suggestions for log file directories which simplifies the use of IIS, and moves the log files off of the system drive.</p> <h3>Default Configuration</h3> <blockquote> <p>The default IIS configuration looks like this:</p> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="100%" id="AutoNumber1"> <tr> <td width="100%"> <p align="center"> <img border="0" src="IISConfig1.gif" width="802" height="245"></td> </tr> </table> <p>Your first step is to configure the web server logs to gather all the information that Analog will need.</p> </blockquote> <h4>Configuring the entire server to support Analog</h4> <blockquote> <p>Right click on the server (in this case NTLewis11) and select Properties to bring up the server Properties page.</p> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="100%" id="AutoNumber2"> <tr> <td width="100%"> <p align="center"> <img border="0" src="IISConfig2.gif" width="463" height="452"></td> </tr> </table> <p>Click the Edit button in the Master Properties frame.</p> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="100%" id="AutoNumber3"> <tr> <td width="100%"> <p align="center"> <img border="0" src="IISConfig3.gif" width="461" height="454"></p> <h5>Changes to make to this screen:</h5> <blockquote> <p>Make sure that you change the Active log Format to "W3C Extended Log File Format"</p> </blockquote> </td> </tr> </table> <p>Click the Properties button in the Enable Logging frame.</p> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="100%" id="AutoNumber4"> <tr> <td width="100%"> <p align="center"> <img border="0" src="IISConfig4.gif" width="404" height="384"></p> <h5>Changes to make to this screen:</h5> <blockquote> <p>Make sure that the New Log Time Period is set to your desired rotation period. A typical setting would be for Daily rotation, although I imagine in a very high volume site, you might want to select hourly.</p> <p>You can check the "Use local time for file naming and rollover" checkbox. This means that your log file rotation will occur at midnight local time rather than midnight GMT. Note that IIS will still log web hits using GMT time no matter what this check box is set to. To compensate for GMT time formatting, you will need a LOGTIMEOFFSET command before your LOGFILE command. Since this offset is independent of day light savings, you will need to change this twice a year in order to produce the correct times through Analog.</p> <p>Change the Log File directory to something a little easier to find. On my default system installation (C: for System, D: for first CD-ROM, E: for first data disk), I always put my log files into E:\LogFiles, and then compress this folder using NTFS compression, since the log files compress relatively well. </p> </blockquote> </td> </tr> </table> <p>Click on the Extended Properties tab.</p> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="100%" id="AutoNumber5"> <tr> <td width="100%"> <p align="center"> <img border="0" src="IISConfig5.gif" width="407" height="384"></p> <h5>Changes to make to this screen:</h5> <blockquote> <p>Make sure that both the Date and Time check boxes are checked. To simplify my installations, I check every Extended Property checkbox. There are some specific items that could probably not be included (such as Server Port for a port 80 only server), but additional items typically don't add much to the file size of the log files.</p> <p>In a typical server installation, do not check the Process Accounting checkbox. At this time, I do not believe Analog will process those lines.</p> <p>Make sure that the following are checked:</p> <ul> <li>Date</li> <li>Time </li> <li>Client IP Address</li> <li>User Name</li> <li>Server Name</li> <li>Server IP Address</li> <li>Method</li> <li>URI Stem</li> <li>URI Query</li> <li>Protocol Status</li> <li>Bytes Sent</li> <li>Bytes Received</li> <li>Time Taken</li> <li>User Agent</li> <li>Referrer</li> <li>Cookie</li> </ul> <p>Note: By using W3C Extended format, your Analog.CFG file will not need a LOGFORMAT line</p> </blockquote> </td> </tr> </table> </blockquote> <h4>Configuring a single web site to support Analog</h4> <blockquote> <p>Configuring a single IIS web site to support Analog is similar to configuring the entire server. Right click on the web site you'd like to configure, and select Properties to bring up the web site Properties page.</p> <table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" bordercolor="#111111" width="100%" id="AutoNumber6"> <tr> <td width="100%"> <p align="center"> <img border="0" src="IISConfig2a.gif" width="461" height="453"></td> </tr> </table> <p>Follow the above steps to configure the Active log format and the extended properties for your log files.</p> </blockquote> <h2>Analog Configuration File for IIS</h2> <p>The basic analog.cfg file that I use has some slight changes to it to accommodate IIS. I've added a set of LOGTIMEOFFSET commands to deal with IIS's GMT logging (which need to be changed in October and April), and DNS commands for host resolution. I've also eliminated some specific files and directories for Exchange's Web Access and Front Page. Lines that I've added are in <font color="#FF0000">Red</font>.</p> <blockquote> <pre># Configuration file for analog 5.1 # See http://www.analog.cx/ # # Here are a couple of configuration commands to get you started. Add any more # you like from the Readme. # # Lines starting with # are comments. # # There is a much more extensive configuration file in examples/big.cfg # # If you need a LOGFORMAT command (most people don't -- try it without first!), # it must go here, above the LOGFILE commands. #LOGFILE logfile.log <font color="#FF0000">#CST (Winter) #LOGTIMEOFFSET -360 #CDT (Summer) LOGTIMEOFFSET -300</font> <font color="#FF0000">LOGFILE E:\LogFiles\W3SVC1\ex*.log </font> HOSTNAME "ChristopherLewis.com" HOSTURL http://www.ChristopherLewis.com/ BROWOUTPUTALIAS IWENG AOL SUBBROW */* SUBTYPE *.gz,*.Z LANGUAGE US-ENGLISH # OSCHARTEXPAND Windows # Add whichever of these types of pages you have on your server, or others. # PAGEINCLUDE *.shtml # PAGEINCLUDE *.asp # PAGEINCLUDE *.jsp # PAGEINCLUDE *.cfm # PAGEINCLUDE *.pl # PAGEINCLUDE *.php SEARCHENGINE http://*altavista.*/* q SEARCHENGINE http://*yahoo.*/* p SEARCHENGINE http://*google.*/* q SEARCHENGINE http://*lycos.*/* query SEARCHENGINE http://*aol.*/* query SEARCHENGINE http://*excite.*/* search SEARCHENGINE http://*go2net.*/* general SEARCHENGINE http://*metacrawler.*/* general SEARCHENGINE http://*msn.*/* MT SEARCHENGINE http://*hotbot.com/* MT SEARCHENGINE http://*netscape.*/* search SEARCHENGINE http://*looksmart.*/* key SEARCHENGINE http://*infoseek.*/* qt SEARCHENGINE http://*webcrawler.*/* search,searchText SEARCHENGINE http://*goto.*/* Keywords SEARCHENGINE http://*snap.*/* keyword SEARCHENGINE http://*dogpile.*/* q SEARCHENGINE http://*askjeeves.*/* ask SEARCHENGINE http://*ask.*/* ask SEARCHENGINE http://*aj.*/* ask SEARCHENGINE http://*directhit.*/* qry SEARCHENGINE http://*alltheweb.*/* query SEARCHENGINE http://*northernlight.*/* qr SEARCHENGINE http://*nlsearch.*/* qr SEARCHENGINE http://*dmoz.*/* search SEARCHENGINE http://*newhoo.*/* search SEARCHENGINE http://*netfind.*/* query,search,s SEARCHENGINE http://*/netfind* query SEARCHENGINE http://*/pursuit query ROBOTINCLUDE REGEXPI:robot ROBOTINCLUDE REGEXPI:spider ROBOTINCLUDE REGEXPI:crawler ROBOTINCLUDE Googlebot* ROBOTINCLUDE Infoseek* ROBOTINCLUDE Scooter* ROBOTINCLUDE Slurp* ROBOTINCLUDE Ultraseek* TYPEALIAS .html ".html [Hypertext Markup Language]" TYPEALIAS .htm ".htm [Hypertext Markup Language]" TYPEALIAS .shtml ".shtml [Server-parsed HTML]" TYPEALIAS .ps ".ps [PostScript]" TYPEALIAS .gz ".gz [Gzip compressed files]" TYPEALIAS .tar.gz ".tar.gz [Compressed archives]" TYPEALIAS .jpg ".jpg [JPEG graphics]" TYPEALIAS .jpeg ".jpeg [JPEG graphics]" TYPEALIAS .gif ".gif [GIF graphics]" TYPEALIAS .png ".png [PNG graphics]" TYPEALIAS .txt ".txt [Plain text]" TYPEALIAS .cgi ".cgi [CGI scripts]" TYPEALIAS .pl ".pl [Perl scripts]" TYPEALIAS .css ".css [Cascading Style Sheets]" TYPEALIAS .class ".class [Java class files]" TYPEALIAS .pdf ".pdf [Adobe Portable Document Format]" TYPEALIAS .zip ".zip [Zip archives]" TYPEALIAS .hqx ".hqx [Macintosh BinHex files]" TYPEALIAS .exe ".exe [Executables]" TYPEALIAS .wav ".wav [WAV sound files]" TYPEALIAS .avi ".avi [AVI movies]" TYPEALIAS .arc ".arc [Compressed archives]" TYPEALIAS .mid ".mid [MIDI sound files]" TYPEALIAS .mp3 ".mp3 [MP3 sound files]" TYPEALIAS .doc ".doc [Microsoft Word document]" TYPEALIAS .rtf ".rtf [Rich Text Format]" TYPEALIAS .mov ".mov [Quick Time movie]" TYPEALIAS .mpg ".mpg [MPEG movie]" TYPEALIAS .mpeg ".mpeg [MPEG movie]" TYPEALIAS .asp ".asp [Active Server Pages]" TYPEALIAS .jsp ".jsp [Java Server Pages]" TYPEALIAS .cfm ".cfm [Cold Fusion]" TYPEALIAS .php ".php [PHP]" TYPEALIAS .js ".js [JavaScript code]" <font color="#FF0000">#DNS Stuff DNSFILE dnscache DNS WRITE</font> <font color="#FF0000">#Exclude Exchange FILEEXCLUDE /Exchange FILEEXCLUDE /Exchange/* #Exclude Front Page stuff FILEEXCLUDE /_vti_bin/* FILEEXCLUDE /_derived/* FILEEXCLUDE /_themes/* FILEEXCLUDE /_vti_inf.html #minimum Requests for Daily reports... These are overridded by Analog_Run.vbs for Monthly REQFLOOR 1r ORGFLOOR 1r REFFLOOR 1r REFSITEFLOOR 1r HOSTFLOOR 1r</font> </pre> </blockquote> <h2>Conclusion</h2> <p>Hopefully, this will help you out with configuring IIS for use with Analog. For a VBScript that performs Daily, Weekly, and Monthly reporting, please see my web site at <a href="HTTP://www.ChristopherLewis.com">HTTP://www.ChristopherLewis.com</a>.</p> <hr> <p> <script language="javascript"> <!-- var contact = "Christopher G. Lewis" var email = "Chris" var emailHost = "christopherlewis.com" document.write("<a href=" + "mail" + "to:" + email + "@" + emailHost+ ">" + contact + "</a>") //--> </script> </p> <p><a href="HTTP://www.ChristopherLewis.com"> <img border="0" src="CGLLogo_sm.gif" width="362" height="76"></a></p> <p><a href="../index.html">Back to index of How-To's</a></p> </body> </html>
Close