Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Some q's about KWR logging

Messages: 2

Karma: 0
Send a private message to this user
1. Is it enough to analyse info in connection.log for per-user (per-host/IP) traffic measurement? In "[Bytes]" section "outgoing/income/total"?
2. Is this logging correct? Sometimes the logged bytes are VERY differs of my provider's logging. For example:
[18/Feb/2004 12:41:14] [ID] 6 [Rule] Firewall Traffic [Service] POP3 [Connection] TCP alion-at-home:2439 -> [Duration] 26 sec [Bytes] 1115/6900/8015 [Packets] 25/25/50
[18/Feb/2004 12:41:20] [ID] 8 [Rule] Firewall Traffic [Service] POP3 [Connection] TCP alion-at-home:2441 -> [Duration] 22 sec [Bytes] 850/2761/3611 [Packets] 19/18/37
[18/Feb/2004 12:41:26] [ID] 7 [Rule] Firewall Traffic [Service] POP3 [Connection] TCP alion-at-home:2440 -> [Duration] 38 sec [Bytes] 278/571/849 [Packets] 6/10/16
[18/Feb/2004 12:42:10] [ID] 5 [Rule] Firewall Traffic [Service] POP3 [Connection] TCP alion-at-home:2438 -> [Duration] 82 sec [Bytes] 5875/100886/106761 [Packets] 134/159/293

and the same session logged by provider:
S-1077097190543 2004-02-18 12:39:50.543 2004-02-18 12:42:50.543 107019 4459 180

Just four connections - and amazing difference (dial-up connection). There is the same picture on ADSL connection.

3. For full traffic logging (bytes - not sites) - what log settings should i use?

I'm very interested to understand the KWR logging technique - 'cause i'm wrote some Excel VBA-macro to analyse logs - but i see strange data...

Thank you.

PS now i'm using KWR 519 trial on single WinXP - it seems that 515 on W2K gate was more correct in logging - or is it just a seems?

[Updated on: Wed, 18 February 2004 23:07]

Previous Topic: Kerio Winroute Firewall have limit for packets 8150 kb. =>
Next Topic: per user internet usage report
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Nov 20 16:41:09 CET 2017

Total time taken to generate the page: 0.00356 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.