The Packet Log Tab - Internet Security Systems RealSecure User Manual

Appendix B: Configuration Tabs

The Packet Log Tab

Introduction
Packet logs or
evidence logs?
Reading packet logs Packet logs are stored in the Desktop Protector installation directory. If you installed
Packet Log settings This table describes the settings on the Packet Log tab:
72
The Packet Log tab allows you to configure the RealSecure Desktop Protector packet
logging features. When packet logging is enabled, Desktop Protector records all the
network traffic that passes through your system.
Because they contain a record of all network traffic, packet logs can grow very large and
occupy a lot of disk space. If you do not need to record every packet, evidence logging
may be a better choice. See "Collecting Evidence Files" on page 52.
Desktop Protector in the default location, you can find the packet log files at C:/Program
. Use a trace file decoding application such as Network Monitor to
Files/ISS/BlackICE
view the information in these files.
If you upgraded to 3.5 from a previous version of BlackICE, your evidence log files
Note:
are still stored in C:\Program Files\Network ICE\BlackICE .
Packet log files are encoded as trace files. You must have decoding application. See the
Windows NT or Windows 2000 documentation for more information.
This setting... Has this effect...
Logging Enabled When selected, Desktop Protector captures packet logs.
Packet logging is disabled by default.
File Prefix Specifies the prefix for the packet log file names. Desktop
Protector automatically places an incremental counter in the
filename. For example, if you enter
be ABC0001.enc
prefix is
Maximum Size Specifies the maximum size, in kilobytes, for each log file.
(kilobytes) The default value is 2048 kilobytes.
Maximum Specifies the maximum number of log files to generate. The
Number of Files default value for the maximum number of files to log is 10.
Table 21: Packet Log tab settings
For more information about setting your packet logging preferences, see "Collecting
Packet Logs" on page 54.
, ABC0002.enc
.
log
, the file names will
ABC
, etc. The default file