Super-Networking Blog

What do you do if you want to look for combinations of word strings in Gigabytes of IIS log files but don’t want to spend any money?

You download a program called Strings.

This is a SysInternals program now owned by Microsoft that will search through text files for word strings and kick them out to you.

So I will go through an example of how you can use it and you can modify it from there.

So copy all of the IIS log files to a location, for example c:\logs

Then open up a command prompt, go to the directory where you have the strings program.

Type the command: strings.exe -s c:\logs | findstr “Your Search Text”

This will dump all the lines it finds with that search text to your command prompt window. Now take it further.

Type the command: strings.exe -s c:\logs | findstr “Your Search Text” > c:\output\log.txt

That will dump the found lines to a new text file. Either you can use that text file for whatever you want or parse it down further with the following.

Type the command: strings.exe -s c:\output | findstr “Your Search Text 2″

That will allow you to search through huge directories of IIS logs for combinations of things. If you do the same search often try dumping it into a batch file.

Thanks Goes to Steve For the Idea to Look Into Strings

Do you want your workstations to connect to PPTP VPNs through a Cisco Pix firewall without having to setup a static NAT for each one.

Are you getting the following error in your syslogs when you try:

“regular translation creation failed for protocol 47″

All you should have to do is add a new fixup protocol entry.

“fixup protocol pptp 1723″

Now assuming that you have a PAT for all traffic from inside to outside you PPTP connections should work.

There are other factors that could cause this to fail, make sure that you are on at least version 6.3 of the Pix software.

If you still have problems check your syslogs.

First thing you are going to need is the Windows 2003 Resource Kit Tools

You then are going to want to find two programs, instsrv.exe and srvany.exe, I would recommend making a new folder on the root of your drive and pulling over a copy of those two files. So say a folder called myservice you really could name is anything you want.

Next what you need to do is register a service to run srvany.exe with the name of your choosing. Open a command prompt and go into the folder myservice.

Command would be:

instsrv.exe “My Service” c:\myservice\srvany.exe

-Switch “My Service” with name you want the service to have.

Next you need to tell srvany.exe what program you want it to run as a service.

Go into the registry using regedit find this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\My Service

-Add a new sub-key call Parameters under My Service

-In the Parameters key create a new string value named Application

-Set the value of it to the full path of the executable file location. Be sure you use “” around the path.

That should be it, you might have to reboot otherwise go into services.msc and start your service. You should be good to go.