|
Uptime=Item.SystemUptime Next WScript.Echo Param1 WScript.Echo Param2 WScript.Echo Uptime & " seconds" WScript.Echo "LocalHost" Another problem I had was getting detailed or custom web statistics through either SNMP or WMI. To solve that , I used Microsoft’s LogParser tool to run custom queries from a simple batch file: @for /f "tokens=1,2,3,4* delims=/ " %%i in (’date /t’) do @set year=%%l&& @set month=%%j&& @set day=%%k @set logfile=c:\windows\system32\LogFiles\%1\ex%YEAR:~2,2%%month%Úy%.log @If Exist %logfile% ( @logparser "SELECT COUNT(*) FROM %logfile% WHERE (sc-status>= 400AND sc-status<500) AND TO_TIMESTAMP(date, time) > SUB(SYSTEM_TIMESTAMP(), TO_TIMESTAMP(’5’,’m’))" -q @logparser "SELECT COUNT(*) FROM %logfile% WHERE (sc-status>= 500AND sc-status<600) AND TO_TIMESTAMP(date, time) > SUB(SYSTEM_TIMESTAMP(), TO_TIMESTAMP(’5’,’m’))" -q ) ELSE ( @Echo %logfile% @Echo 0 ) @Echo Unknown @Echo %1
因为微软的日志记录工具也非常强大,和MRTG的计数器配合使用,在加上免费的入侵检测系统Snort,效果会更好。
六,最后
在你自定义的完你的计数器完成之后,通过图行化的状况就可以轻易的找出入侵者。
下面,我们来测试一下,在命令提示符下输入:
C:\ProgramFiles\MRTG>perl mrtg mrtg.cfg
如果一些正常的话,就会在在你的MRTG站点就有了一些配置文件。如果安装失败,你可以回顾一下你安装的步骤,是否有错误,并参考MRTG 的参考手册。
上一页 [1] [2] [3] [4] 下一页 |