Services Logging not behaving
Nov 04 05 12:04 pm
Hi all,
Congrats on Wingate 6.1 + KAV 2.0 all smooth.
As one would do I decided to have a snoop into the folder and was surprised to see my logging directory of about half a gigabyte!
All logging which can be disabled is, the DWORD value for each service is'0' yet for example the WWW proxy has a log file:
Just noticed, if I toggle logging the file is released, I can delete and no more files are created.
Because of the size of the files and the history therein, for example the WWW proxy log is nearly five months of logging under Wingate V6.0.4.
So some registry entries are being ignored in a minor way, however as my server is a rather humble machine [Win2k Pro / Cel 2ghz] I always turn off all logging.
Interesting, however at present I have a client's Win XP machine on a test bench and for new installations a 'default' Wingate registry is applied after install.
Now this registry has 'all logging off' and this machine shows only the KAV and System log's as I would expect so that area works well for me to 'streamline' install on new machines, so Wingate adheres to the registry entries.
Just can't figure out why if I imported a registry or similar that my own server is logging as it is, anyway just about to toggle all the log entries and put them in a temp area!
Congrats on Wingate 6.1 + KAV 2.0 all smooth.
As one would do I decided to have a snoop into the folder and was surprised to see my logging directory of about half a gigabyte!
All logging which can be disabled is, the DWORD value for each service is'0' yet for example the WWW proxy has a log file:
Just noticed, if I toggle logging the file is released, I can delete and no more files are created.
Because of the size of the files and the history therein, for example the WWW proxy log is nearly five months of logging under Wingate V6.0.4.
So some registry entries are being ignored in a minor way, however as my server is a rather humble machine [Win2k Pro / Cel 2ghz] I always turn off all logging.
Interesting, however at present I have a client's Win XP machine on a test bench and for new installations a 'default' Wingate registry is applied after install.
Now this registry has 'all logging off' and this machine shows only the KAV and System log's as I would expect so that area works well for me to 'streamline' install on new machines, so Wingate adheres to the registry entries.
Just can't figure out why if I imported a registry or similar that my own server is logging as it is, anyway just about to toggle all the log entries and put them in a temp area!
Nov 04 05 3:26 pm
Has this machine ever had WinGate 4 on it?
Can't think why it would be able to log in 6.0.4 with logging disabled (we would have heard about it before now!!!! :))
We used to have a debug logging facility with Home licenses, which overrode the service logging, but even then, it would log to a single central file, instead of individual files per service.
Adrien
Can't think why it would be able to log in 6.0.4 with logging disabled (we would have heard about it before now!!!! :))
We used to have a debug logging facility with Home licenses, which overrode the service logging, but even then, it would log to a single central file, instead of individual files per service.
Adrien
Nov 08 05 1:44 pm
Hi Adrien,
No V4 on this machine.
Notice the Remote Control Service is still logging in V6.1:
Think what I might do is to deactivate all licences, remove the registry and start again :-( as it is unique to this machine methinks!
Exported registry branch:
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service]
"Description"="Remote Control Service"
"Startup"=dword:00000002
"UUID"=""
"LoggingEnabled"=dword:00000000
"LogOptions"=dword:000000db
"ServiceType"="CRemoteControlService"
"PortNumber"=dword:00000328
"TimeOutSessions"=dword:00000000
"SessionTimeout"=dword:0000003c
"NonProxyRequestAction"=dword:00000000
"NonProxyRequestHost"=""
"NonProxyRequestPort"=dword:00000000
"LimitSessions"=dword:00000000
"SessionLimit"=dword:00000005
"ConnectMethod"=dword:00000000
"ProxyServer"=""
"ProxyPort"=dword:ffffd699
"SOCKS4Password"=""
"BypassProxyOnLocal"=dword:00000000
"DripFeedPluginsAfter"=dword:000000c8
"DripFeedPlugins"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\AccessRights]
"RightType"=dword:00000000
"IncludeDefaultRights"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\AccessRights\Recipient0]
"UserName"="Administrator"
"Description"="Restricted by security level"
"SpecifyUser"=dword:00000001
"SpecifyLocation"=dword:00000000
"SpecifyTime"=dword:00000000
"SpecifyBan"=dword:00000000
"SpecifyRequest"=dword:00000000
"MinimumSecurityLevel"=dword:00000002
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\BanFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\ExcludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\IncludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\RequestFilter]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\TimeFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\AccessRights\Recipient1]
"UserName"="SYSADMIN"
"Description"="Restricted by security level"
"SpecifyUser"=dword:00000001
"SpecifyLocation"=dword:00000000
"SpecifyTime"=dword:00000000
"SpecifyBan"=dword:00000000
"SpecifyRequest"=dword:00000000
"MinimumSecurityLevel"=dword:00000002
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\BanFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\ExcludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\IncludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\RequestFilter]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\TimeFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\BindingPolicy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\BindingPolicy\{00-{0cf08bc7-01b9-4e06-b46c-9088a08e12c3}-00-C0A80001-0000}]
"Enabled"=dword:00000001
"AdapterSpecification"=dword:00000000
"AdapterUUID"="{0cf08bc7-01b9-4e06-b46c-9088a08e12c3}"
"AddressSpecification"=dword:00000000
"Address"=dword:c0a80001
"Port"=dword:00000000
"Service"="Remote Control Service"
"SSLCertificate"=""
"UseSSL"=dword:00000000
"EnableTLS"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\BindingPolicy\{03--00-7F000001-0000}]
"Enabled"=dword:00000001
"AdapterSpecification"=dword:00000003
"AdapterUUID"=""
"AddressSpecification"=dword:00000000
"Address"=dword:7f000001
"Port"=dword:00000000
"Service"="Remote Control Service"
"SSLCertificate"=""
"UseSSL"=dword:00000000
"EnableTLS"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\EditRights]
"RightType"=dword:00000002
"IncludeDefaultRights"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\Gateways]
"Schema"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\Gateways\Policy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\Intercepts]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\StartStopRights]
"RightType"=dword:00000001
"IncludeDefaultRights"=dword:00000001
Snippet of log:
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve user database
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve service configurations
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve service configurations
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve Assumptions
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve system policies
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve cache settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Get scheduler settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve activity information
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Get history database settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve dialer settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
No V4 on this machine.
Notice the Remote Control Service is still logging in V6.1:
Think what I might do is to deactivate all licences, remove the registry and start again :-( as it is unique to this machine methinks!
Exported registry branch:
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service]
"Description"="Remote Control Service"
"Startup"=dword:00000002
"UUID"=""
"LoggingEnabled"=dword:00000000
"LogOptions"=dword:000000db
"ServiceType"="CRemoteControlService"
"PortNumber"=dword:00000328
"TimeOutSessions"=dword:00000000
"SessionTimeout"=dword:0000003c
"NonProxyRequestAction"=dword:00000000
"NonProxyRequestHost"=""
"NonProxyRequestPort"=dword:00000000
"LimitSessions"=dword:00000000
"SessionLimit"=dword:00000005
"ConnectMethod"=dword:00000000
"ProxyServer"=""
"ProxyPort"=dword:ffffd699
"SOCKS4Password"=""
"BypassProxyOnLocal"=dword:00000000
"DripFeedPluginsAfter"=dword:000000c8
"DripFeedPlugins"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\AccessRights]
"RightType"=dword:00000000
"IncludeDefaultRights"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\AccessRights\Recipient0]
"UserName"="Administrator"
"Description"="Restricted by security level"
"SpecifyUser"=dword:00000001
"SpecifyLocation"=dword:00000000
"SpecifyTime"=dword:00000000
"SpecifyBan"=dword:00000000
"SpecifyRequest"=dword:00000000
"MinimumSecurityLevel"=dword:00000002
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\BanFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\ExcludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\IncludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\RequestFilter]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient0\TimeFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\AccessRights\Recipient1]
"UserName"="SYSADMIN"
"Description"="Restricted by security level"
"SpecifyUser"=dword:00000001
"SpecifyLocation"=dword:00000000
"SpecifyTime"=dword:00000000
"SpecifyBan"=dword:00000000
"SpecifyRequest"=dword:00000000
"MinimumSecurityLevel"=dword:00000002
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\BanFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\ExcludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\IncludedLocations]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\RequestFilter]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\AccessRights\Recipient1\TimeFilter]
"Name"=""
"Description"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\BindingPolicy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\BindingPolicy\{00-{0cf08bc7-01b9-4e06-b46c-9088a08e12c3}-00-C0A80001-0000}]
"Enabled"=dword:00000001
"AdapterSpecification"=dword:00000000
"AdapterUUID"="{0cf08bc7-01b9-4e06-b46c-9088a08e12c3}"
"AddressSpecification"=dword:00000000
"Address"=dword:c0a80001
"Port"=dword:00000000
"Service"="Remote Control Service"
"SSLCertificate"=""
"UseSSL"=dword:00000000
"EnableTLS"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control
Service\BindingPolicy\{03--00-7F000001-0000}]
"Enabled"=dword:00000001
"AdapterSpecification"=dword:00000003
"AdapterUUID"=""
"AddressSpecification"=dword:00000000
"Address"=dword:7f000001
"Port"=dword:00000000
"Service"="Remote Control Service"
"SSLCertificate"=""
"UseSSL"=dword:00000000
"EnableTLS"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\EditRights]
"RightType"=dword:00000002
"IncludeDefaultRights"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\Gateways]
"Schema"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\Gateways\Policy]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\Intercepts]
[HKEY_LOCAL_MACHINE\SOFTWARE\Qbik Software\WinGate\Services\Remote Control Service\StartStopRights]
"RightType"=dword:00000001
"IncludeDefaultRights"=dword:00000001
Snippet of log:
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve user database
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve service configurations
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve service configurations
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve Assumptions
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve system policies
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve cache settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Get scheduler settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve activity information
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Get history database settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve dialer settings
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration
11/08/05 11:02:01 127.0.0.1 ********* 0000000003 Requested: WinGate Login: Retrieve WinGate Enhanced Network Support Driver Configuration