Re: Clarification of BytesSent vs BytesSentDelta in ISA 2004 Firewall log

From: Michelle (michellem_at_orionsoftware.com)
Date: 03/16/05 

Date: Wed, 16 Mar 2005 11:12:52 +0200

Hi Pesach,

Would it be possible to please post the SQL query you used to get the
information.

Thanks
Michelle

"Pesach Shelnitz [MSFT]" <pesachs@online.microsoft.com> wrote in message
news:Oxib4JWKFHA.2800@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> In ISA Server Management, I can get matching results between the Bytes
> Received and Bytes Sent columns in the log query results for a 24 h
> midnight-to-midnight period for a specific client IP and the Bytes In and
> Bytes Out columns for the same IP in a daily report for the same date (24
> h
> period). For simplicity, I choose a client IP with relatively little
> traffic
> so that I wouldn't need to add up a lot of numbers to achieve the match.
> For
> large amounts of data, you'll need programmatic methods to do this.
>
> For MSDE logs, you can use the OSQL utility and run SQL queries to extract
> and total specific columns.
>
> Remember that the data in the logs is per connection, and the life of each
> connection can extend beyond the boundaries of the time period for a log
> query or a summary report.
>
> Pesach Shelnitz [MSFT]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> OR if you wish to include a script sample in your post please add "Use of
> included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm .
> Please do not send e-mail directly to this alias. This alias is for
> newsgroup purposes only.
>
>
> "Michelle" <michellem@orionsoftware.com> wrote in message
> news:ehoNvUJJFHA.1176@TK2MSFTNGP15.phx.gbl...
>> Thanks Pesachs,
>> I'm am still having difficulty with the columns mentioned previously.
>>
>> Using the data from the MSDE database, how would I calculate the actual
>> Bytes sent and received through the firewall for a given period?
>>
>> I am try to compare the 'Traffic by Time of Day' summary report generated
>> from ISA with the information in the database and can't get the two to
>> agree.
>>
>> Thanks in advance,
>> Michelle
>>
>>
>> "Pesach Shelnitz [MSFT]" <pesachs@online.microsoft.com> wrote in message
>> news:%238PJOpbHFHA.560@TK2MSFTNGP12.phx.gbl...
>> > Bytes Sent is the total number of bytes sent from the client to the
>> > destination host during the current connection.
>> >
>> > Bytes Sent Delta is the number of bytes sent from the client to the
>> > destination host since the previous log entry for the current
> connection.
>> >
>> > Bytes Received is the total number of bytes sent from the remote
> computer
>> > and received by the client during the current connection.
>> >
>> > Bytes Received Delta is the number of bytes sent from the remote
> computer
>> > and received by the client since the previous log entry for the current
>> > connection.
>> >
>> >
>> > Pesach S [MSFT]
>> >
>> > --
>> > This posting is provided "AS IS" with no warranties, and confers no
>> > rights.
>> > OR if you wish to include a script sample in your post please add "Use
> of
>> > included script samples are subject to the terms specified at
>> > http://www.microsoft.com/info/cpyright.htm .
>> > Please do not send e-mail directly to this alias. This alias is for
>> > newsgroup purposes only.
>> >
>> > "michelle" <michellem@orionsoftware.com> wrote in message
>> > news:OUpgfBxGFHA.3108@tk2msftngp13.phx.gbl...
>> >> Hi,
>> >>
>> >> I'm looking to better understand the difference between the fields,
>> >> BytesSent and BytesSentDelta in the Firewall Service log of ISA 2004.
>> >>
>> >> Currently I am trying to pull stats from the MSDE database with
>> >> regards
>> >> to
>> >> bytes sent and received from various IP addresses through out the
>> >> network,
>> >> but my stats seem to be out. I have been using the bytesSent ans
>> > BytesRecvd
>> >> fields in my calculations.
>> >>
>> >> What I am asking is, should I rather be using the bytessentDelta and
>> >> bytesRecvdDelta fields to calculate the actual traffic from the
>> >> various
>> >> IP's?
>> >>
>> >> Thanks
>> >> Michelle
>> >>
>> >>
>> >
>> >
>>
>>
>
>

Relevant Pages

  • Re: ASP - FROM statement slows down connection to database
    ... Open your database in Access, switch to the Queries tab, create a new query ... in Design View without choosing a table, swtich to SQL View, paste the sql ... connection string rather than using an ... recordset open statements. ...
    (microsoft.public.inetserver.asp.db)
  • Re: Update checking
    ... My thought was to use a simple query with a "username" param ... concurrency exceptions happen if the data you queried has ... > was and basically let the user work in a similar offline mode. ... Where does connection pooling come ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: MS Access looks for .mdb rather than Progress schema
    ... # Same query previously worked in Progress 8.x using SQL89. ... This entry allows you to keep your existing code written with the ODBC ... BTW, if you put all of the connect information into the connect string, ... I also tried putting the whole thing in the connection string: ...
    (microsoft.public.access.modulesdaovba)
  • Re: Clarification of BytesSent vs BytesSentDelta in ISA 2004 Firewall log
    ... performed in ISA Server Management as described in the topic "To filter the ... After clicking "Edit filter," I defined the following ... a client IP address that appeared in the report. ... clicked "Start Query" and waited for the results to appear. ...
    (microsoft.public.isaserver)
  • Re: OpenDataSource & stored procedure
    ... recognises the ODBC escape syntax. ... You shouldn't need the connection parameter since Word gets it from the ... return multiple result sets - enough to confuse software such as MS Query ... >>> The call works in MSQuery but won't return the data to Word. ...
    (microsoft.public.word.mailmerge.fields)