System Admin

View Event Logs without EventLog class?

15-Apr-06 5:38

I never met that kind of virus. But in my opinion, i think it has because virus is the software that cause operating system run incorrectly and disturb or annoyes to computer user.

If you met this kind of virus, i think you should use your keyboard shortcut to access an anti-virus software and scan your system.

AhClem14-Apr-06 2:53

AhClem

14-Apr-06 2:53

Hi,
Are there any ways to get Event Log information from a remote box other than with the EventLog class?

EventLog dumps the entire collection of log entries, for the specified log, as soon as it's opened. There is no way to throttle it, Read Next, or filter on anything besides "Source". The buffer size appears to be set at 40,000 and I don't see any way to change that (not that I'd want to). Everything was going great until I tried to get a a rather large log.

And of course, the solution has to be entirely from the client side and I have no control over the size of the remote server logs.

Any suggestions would be appreciated.

Will

Dave Kreskowiak14-Apr-06 4:50

14-Apr-06 4:50

Without using the EventLog class??? You'd have to come up with your own implementation of the class, P/Invoking all the Windows API calls and structures involved. You might be able to use the existing EventLog classes and just override or add new methods to read the events one at a time or implement an asynchronous version of the log download.

You can find more about the Event Log API here[^]. If you look in the Contents in the left pane, you'll see Windows Event Log. Dont bother looking at it yet, it's the API used in Vista. It doesn't exist in lower versions of Windows, at least not yet...

Dave Kreskowiak
Microsoft MVP - Visual Basic

-- modified at 10:53 Friday 14th April, 2006

AhClem14-Apr-06 5:07

AhClem

14-Apr-06 5:07

Thanks,

I was just looking at ".NET Framework Solutions: In Search of the Lost Win32 API" over at Amazon. I haven't played with Win32 since the Windows 95 days so it's a little daunting for what should have been the simple part of the app.

As far as extending the EventLog class. I don't see anything exposed as "protected" that could help me.

Oh well!

Will

Dave Kreskowiak14-Apr-06 6:48

14-Apr-06 6:48

AhClem wrote:
As far as extending the EventLog class. I don't see anything exposed as "protected" that could help me.

Huh??? No, you create your own EventLog class! EIther by inheriting from the original EventLog class or by creating one from scratch. Then you can add your own methods to open the remote machine's event log and download each event, one at a time, from each log.

Dave Kreskowiak
Microsoft MVP - Visual Basic

AhClem14-Apr-06 7:14

AhClem

14-Apr-06 7:14

I understand.

My point was that: in addition to the exposed (public) fields/properties, there are NO unexposed (protected) fields/properties in the FCL's EventLog class that would be nice to get at. So, there is no point in inheriting from it. There is nothing it would provide as a base class to make it any less useless to me.

Will

Dave Kreskowiak14-Apr-06 7:54

IP address of networked computers

14-Apr-06 7:54

Ahh! I see what you were gettin' at!

Dave Kreskowiak
Microsoft MVP - Visual Basic

KellyR13-Apr-06 3:47

KellyR

13-Apr-06 3:47

Hi, my question is simple: is there a dos command or winxp program that can be used to check the IP addresses of networked computers remotely? Basically my problem is, I have an ethernet cable connected from my computer to a piece of hardware that has an IP address. I can only check what that IP address is from my computer, not from that hardware. How can I do this?

Thanks!

Kelly Ryan

David Crow13-Apr-06 4:07

13-Apr-06 4:07

If this piece of hardware sits in between your computer and another, use tracert to the other computer. The IP address of each hop along the way should be displayed.

"Let us be thankful for the fools. But for them the rest of us could not succeed." - Mark Twain

"There is no death, only a change of worlds." - Native American Proverb

KellyR13-Apr-06 4:12

KellyR

13-Apr-06 4:12

Unfortunately the hardware and my computer are the only two nodes in the network, I just have an ethernet cable hooked directly to it, and there's no other way I can do it, it's a piece of military hardware and this is how it's set up. Basically the problem is that I have to connect to it using telnet or something similar in order to get some files off of it and I don't know what the IP address is.

Kelly Ryan

David Crow13-Apr-06 4:16

13-Apr-06 4:16

I'm no network engineer by any means so my suggestion is a most inefficient one. How about looping through all the IP addresses (256⁴) until you find the one that responds?

"Let us be thankful for the fools. But for them the rest of us could not succeed." - Mark Twain

"There is no death, only a change of worlds." - Native American Proverb

KellyR13-Apr-06 4:23

KellyR

13-Apr-06 4:23

Guess that's what I'm going to end up having to do, I feel like there should be an easier way though. Oh well, thanks.

Kelly Ryan

Dave Kreskowiak13-Apr-06 4:30

13-Apr-06 4:30

There is nothign that will tell you want the IP address is. There's no way to communicate with something that you don't already have the address for. You'll have to get the documentation on the device or someone will have to tell you what it is.

Or, you could, like the other poster said, ping every IP address until you find the one that responds. This could a VERY VERY VERY LONG time. But, you can narrow this down by trying only the private address ranges to start with. Which are:

192.168.0.0 - 192.168.255.255   (about 65,534 addresses)
 172.16.0.0 - 172.31.255.255    (about 1.04 million addresses)
   10.0.0.0 - 10.255.255.255    (about 16.7 million addresses)

Dave Kreskowiak
Microsoft MVP - Visual Basic

Chris Meech13-Apr-06 6:50

Chris Meech

13-Apr-06 6:50

For the network of two computers, your's and the military hardware, how are the IP addresses assigned? For instance, if your IP is DHCP assigned, then it's likely that the other hardware has a similarly assigned IP. On the other hand if your IP is static, someone must have assigned it to your PC and again it's likely that the other hardware has been assigned in a similar fashion. I'm not answering your question, but maybe it will give you an idea of other things to look at for your solution.

Chris Meech

I am Canadian. [heard in a local bar]

When I want privacy, I'll close the bathroom door. [Stan Shannon]

GOOD DAY FOR: Moonlighting, as porn star Savanna Samson has launched her own wine label. Her Sogno Uno, an Italian red, received an "outstanding" 90 to 91 score from influential wine critic Robert Parker. "I wanted to do something my parents could be proud of," she said. (Reuters in CNNMoney.com)

Mekong River13-Apr-06 17:37

13-Apr-06 17:37

I have read many answer that post to your question. But it seem that it does not relate to your question.

KellyR wrote:
is there a dos command or winxp program that can be used to check the IP addresses of networked computers remotely?

If it is in the same LAN, and you also know the computer name, then try to use the PING command to ping directly to that computer.

KellyR wrote:
Basically my problem is, I have an ethernet cable connected from my computer to a piece of hardware that has an IP address. I can only check what that IP address is from my computer, not from that hardware. How can I do this?

If you do not know about its name try to use IP SCANNER.[^]

Norton Firewall problem

Ted Ferenc13-Apr-06 3:18

13-Apr-06 3:18

I.m trying to get Norton Firewall 9.1.0.33 to see two PCs on a LAN on a friends PC. I did have it working last year, but it has now 'stopped' working, obviously my fault!

The problem is that if I set up the Trusted Zone, both PCs see each other, if I then reboot then the PCs can't see each other. If I change the Trusted Zone, and then put it back to what it was it works. Surfing the Net I can't find any sensible reasons/fixes for
this, so any suggestions?

Some detail on what I have done in detail

Set Trusted Zone range to 192.168.0.0 to 192.168.255.255
PCs see each other
Change Trusted Zone to 192.168.100.100 to 192.168.255.255
PCs can't see each other, as expected.
Set Trusted Zone range to 192.168.0.0 to 192.168.255.255
PCs see each other
Reboot, PCs can't see each other.

The best solution I have seem it to get rid of Norton, but that would be too easy!

My current best guess is an auto update has changed something, or my friend has screwed it up, but that is probably beyond his skill level.

"Normal is getting dressed in clothes that you buy for work and driving through traffic in a car that you are still paying for - in order to get to the job you need to pay for the clothes and the car, and the house you leave vacant all day so you can afford to live in it." - Ellen Goodman

David Crow13-Apr-06 4:10

13-Apr-06 4:10

Ted Ferenc wrote:
...any suggestions?

Have you tried here?

"Let us be thankful for the fools. But for them the rest of us could not succeed." - Mark Twain

"There is no death, only a change of worlds." - Native American Proverb

Ted Ferenc13-Apr-06 5:50

13-Apr-06 5:50

Thanks but I thought Norton == Symantec?

David Crow13-Apr-06 6:12

13-Apr-06 6:12

Ted Ferenc wrote:
Thanks but I thought Norton == Symantec?

You are right. I'm not sure how I got that link from Symantec's site. Try here instead.

"Let us be thankful for the fools. But for them the rest of us could not succeed." - Mark Twain

"There is no death, only a change of worlds." - Native American Proverb

Ted Ferenc13-Apr-06 6:25

13-Apr-06 6:25

DavidCrow wrote:
I'm not sure how I got that link

Add more water!

Thanks, support was going to be my last resort, that is a good link, I was hoping some one here has seen this before.

Mekong River13-Apr-06 17:30

13-Apr-06 17:30

Ted Ferenc wrote:
Set Trusted Zone range to 192.168.0.0 to 192.168.255.255

PCs see each other

Change Trusted Zone to 192.168.100.100 to 192.168.255.255

PCs can't see each other, as expected.

Set Trusted Zone range to 192.168.0.0 to 192.168.255.255

PCs see each other

Reboot, PCs can't see each other.

In my opinion, don't set an IP address to a difference network id. Try to set 192.168.100.100 and another one is 192.168.100.125. Then reboot your computer. Try to test it whether it see each other or not.

Ted Ferenc13-Apr-06 21:27

13-Apr-06 21:27

Thanks, I tried setting the specific IP addresses of each of the computers as well as an all encompassing range, that failed as well.

Mekong River13-Apr-06 23:08

13-Apr-06 23:08

Ok, in my opinion, you should consult with your norton firewall documentation. I could remeber that when windows xp sp 2 first release, it also introduce about new security feature which hide your PC on the network to prevent from a hacker. It also provide a documentation to configure sp2.

Ted Ferenc14-Apr-06 5:41