win2k Webserver

  • Thread starter Thread starter Miha Pihler
  • Start date Start date
M

Miha Pihler

Hi David,

IIS logs are not written on the fly, but more of a when service has time.
This was users have priority over system writing logs. If a server fails
(e.g. freezes) or is restarted it can happen that log is not written down
but stay in computer memory which is usually flushed when you restart it...

I hope your Win2K server is firewall protected and you are allowing only
required services to reach your server ...
 
Hi not been using the webserver for long after 1 day of running it I have
already hit a problem.

Im running win2k SP4
Amd 1300Ghz processor
768 megs of ram
IIS services running ftp & Http server

I've setup the machine so whatever happens it logs it.. I was getting a lot
of hits then all of a sudden nothing for 2 hours then that machine Errored
with -
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e
(0xc0000005, 0x8046b70a, 0x00000001, 0x345be888). Microsoft Windows 2000
[v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini080303-01.dmp.
I rebooted the machine & checking the logs my http log is totally blank
except for the first entry that it has just started... no other entries.. It
hasnt created a new log checked that..

Question is - Is the HTTP log should it be blank if the machine crashes or
am I right to think that someone has gained access to the machine & blanked
it???

Many thanks,

David Shorthouse
 
Hi Mike,

The machine Im running it on is win2k pro.

I had opened the log file earlier & there were details in there but after
the reboot all that information wasnt there.
I have checked my firewall logs & have had a hammering with TCP
non-syn/non-ack packet on invalid connection.
I had about 400 of these before my machine blue screened..nothing else that
would represent a connection to the machine..?
ohh I tell a lie someone has been scanning all the ports on my machine. I
didnt notice that before.

Many thanks for your very quick reply.

David Shorthouse

Miha Pihler said:
Hi David,

IIS logs are not written on the fly, but more of a when service has time.
This was users have priority over system writing logs. If a server fails
(e.g. freezes) or is restarted it can happen that log is not written down
but stay in computer memory which is usually flushed when you restart it...

I hope your Win2K server is firewall protected and you are allowing only
required services to reach your server ...

--
Mike
MCSA 2K, MCSE 2K, MCT, ...

David Shorthouse said:
Hi not been using the webserver for long after 1 day of running it I have
already hit a problem.

Im running win2k SP4
Amd 1300Ghz processor
768 megs of ram
IIS services running ftp & Http server

I've setup the machine so whatever happens it logs it.. I was getting a lot
of hits then all of a sudden nothing for 2 hours then that machine Errored
with -
The computer has rebooted from a bugcheck. The bugcheck was: 0x0000001e
(0xc0000005, 0x8046b70a, 0x00000001, 0x345be888). Microsoft Windows 2000
[v15.2195]. A dump was saved in: C:\WINNT\Minidump\Mini080303-01.dmp.
I rebooted the machine & checking the logs my http log is totally blank
except for the first entry that it has just started... no other
Click to expand...
entries..
It
hasnt created a new log checked that..

Question is - Is the HTTP log should it be blank if the machine crashes or
am I right to think that someone has gained access to the machine & blanked
it???

Many thanks,

David Shorthouse
Click to expand...
Click to expand...
 
Back
Top