Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Tons of anonymous entries in my logs?

Status
Not open for further replies.

WilliamUT

IS-IT--Management
Oct 8, 2002
182
0
0
US
I am getting tons of anonymous entries in my logs and am wondering why? I will get 3 of them in a row followed by the login name of the person doing it. They look like this :

10.162.21.112, anonymous, -, -, 9/28/2004, 0:00:01, -, -, -, -, -, 0, -, -, -, -, -, -, -, -, -, -, -, -, -
10.162.21.112, anonymous, -, -, 9/28/2004, 0:00:01, -, -, -, -, -, 0, -, -, -, -, -, -, -, -, -, -, -, -, -
10.162.21.112, DHMC\DR, -, -, 9/28/2004, 0:00:01, -, -, -, search.domainsponsor.com, 64.235.246.141, 80, -, -, -, -, -, -, -, -, -, -, -, -, -


Is this normal behavior? It just seems to make our logs HUGE and wastes tons of space in my database. Also I am getting alot of blank entried with no data in them. Any hints why this would be happening? Thanks
 
Well, it's annoying but it's normal.
Let's see validation mechanism:

1- anonymous and return code 407 is registered by ISA because no credentials are send at all by the client

2 - A second anoymous and 407 is registered because only the first part of the handshake is completed

3 - If the client has sent correct credentials Isa resgistres user name and a normal return code (200, 302..)

Each new session new entries...
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top