Sample Log File - Microsoft Proxy Log File Format

This article applies to:

• Firewall Suite

Question:

Information:

172.29.10.1, James, -, Y, 2/4/96, 8:22:56, SERVERNAME, PROXYNAME, -, www.atw.fullfeed.com, -, 80, 5277, 4792, 890, http, TCP, GET, http://www.atw.fullfeed.com/, TEXT/HTML, Inet, 200, -
172.29.10.1, James, -, Y, 2/4/96, 8:22:58, SERVERNAME, PROXYNAME, -, www.atw.fullfeed.com, -, 80, 401, 5501, 1104, http, TCP, GET, http://www.atw.fullfeed.com/atw/gfx/yrfflogo.gif, IMAGE/GIF, VCache, 304, -
172.29.10.1, James, -, Y, 2/4/96, 8:22:59, SERVERNAME, PROXYNAME, -, www.atw.fullfeed.com, -, 80, 471, 3280, 1104, http, TCP, GET, http://www.atw.fullfeed.com/atw/gfx/ispcdeco.gif, IMAGE/GIF, VCache, 304, -
172.29.10.1, James, -, Y, 2/4/96, 8:22:59, SERVERNAME, PROXYNAME, -, www.atw.fullfeed.com, -, 80, 231, 638, 1094, http, TCP, GET, http://www.atw.fullfeed.com/atw/gfx/www.gif, IMAGE/GIF, VCache, 304, -
172.29.10.1, James, -, Y, 2/4/96, 8:22:59, SERVERNAME, PROXYNAME, -, www.atw.fullfeed.com, -, 80, 371, 4745, 1112, http, TCP, GET, http://www.atw.fullfeed.com/atw/gfx/intouch-icon.gif, IMAGE/GIF, VCache, 304, -

Description of Fields:

• Field 1: User Address
  
• Field 2: Authenticated User
  
• Field 3: Client Agent
  
• Field 4: * Authorization Status
  
• Field 5: Date
  
• Field 6: Time
  
• Field 7: * Server Name
  
• Field 8: * Proxy Name
  
• Field 9: Referring Server Name
  
• Field 10: Destination Name
  
• Field 11: * Destination IP
  
• Field 12: Destination Port
  
• Field 13: * Processing Time
  
• Field 14: * Bytes Sent
  
• Field 15: * Bytes Received
  
• Field 16: Protocol Name
  
• Field 17: * Transport
  
• Field 18: * Operation
  
• Field 19: Target Resource
  
• Field 20: * Object MIME
  
• Field 21: Source (internet or cache)
  
• Field 22: Result Code (0=No information available 5=Rejected 200=successful for web proxy 304= successful for winsock proxy)
  
• Field 23: 0
  
  

Notes:

• Objects marked with an asterisk (*) are present only in a log configured for "verbose" logging mode.
  
• Firewall Suite is not able to analyze the W3C format of Microsoft ISA log files. The server should be configured to log in the ISA format. The Firewall Configuration Guide provides further details about how to configure the server for ISA logging. Obtain this document from the following page: https://support.trustwave.com/Firewall-Suite/Documentation.asp
  
• This information is based on documents obtained from Microsoft Corporation.  

This article was previously published as:

NETIQKB2427