LogAnalysis
[logs] Novell eDirectory events Apr 16 2008 01:45AM
Anusuya K (anusuya_k yahoo com)
Hi,
We are using Novell eDirectory event services API to capture the events generated by eDirectory. Novell eDirectory generates a set of events for each operation performed. For eg. A Modify Entry operation would generate a Modify entry event and multiple Add/Modify Attribute value events based on how many attributes are changed. Similarly An Add Entry operation results in an add entry event and multiple add attribute value events.

I would like to know if it is possible to identify all these related messages so that we can collate all data related to a single operation. There is a field by name event order that we see in these events. If it means the sequence of events generated for a single operation, it still does not look good enough to help us in identifying all th related messages together.

Did any one try analyzing Novell eDirectory events for the above? To me it looks like even Novell Audit is treating all the related events independently without relating them together.

Thanks
Anusuya

________________________________________________________________________
____________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ<html><head><s
tyle type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><FONT face="arial, helvetica, sans-serif" size=2>Hi,</FONT></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><FONT face="arial, helvetica, sans-serif"><FONT size=2>   We are using Novell eDirectory event services API to capture the events generated by eDirectory. <FONT color=#0000ff>Novell eDirectory generates a set of events for each operation performed. For eg. A Modify Entry operation would generate a Modify entry event and multiple Add/Modify Attribute value events based on how many attributes are changed. Similarly An Add Entry operation results in an add entry event and multiple add attribute value events. </FONT></FONT></FONT></DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2></FONT> </DIV>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2>I would like to know if it is possible to identify all these related messages so that we can collate all data related to a single operation. There is a field by name event order that we see in these events. If it means the sequence of events generated for a single operation, it still does not look good enough to help us in identifying all th related messages together. </FONT></DIV>
<P><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2></FONT> </P>
<P><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2>Did any one try analyzing Novell eDirectory events for the above? To me it looks like even Novell Audit is treating all the related events independently without relating them together.</FONT></P>
<P><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2></FONT> </P>
<P><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2>Thanks</FONT></P>
<P><FONT face="arial, helvetica, sans-serif" color=#0000ff size=2>Anusuya</FONT></P>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: times new roman, new york, times, serif"><BR></DIV></div><br>

between 0000-00-00 and 9999-99-99
<hr size=1>Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. <a href="http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_y
lt=Ahu06i62sR8HDtDypao8Wcj9tAcJ "> Try it now.</a></body></html>____________________________________________
___
LogAnalysis mailing list
LogAnalysis (at) loganalysis (dot) org [email concealed]
http://www.loganalysis.org/mailman/listinfo/loganalysis

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus