Chip Special: Netware

home *** CD-ROM | disk | FTP | other *** search

/ Chip Special: Netware / Chip-Special_1996-08_NetWare_cd2.bin / content / support / lansoft / 1 / asci.exe / CHAP5.ASC < prev next >

Wrap

Text File | 1992-07-28 | 21.0 KB | 302 lines

LANProtect Report Information LANProtect reports three general types of information about its activities and infected files. First, the Monitor screen gives you up-to- the-second information about LANProtect■s activities. The Monitor option is conveniently placed on the LANProtect Options menu so that you can quickly access the status of LANProtect activities. Second, the Log File tracks all program activity on the network over a range of dates. It gives the raw data of LANProtect■s activities and findings so you can track exactly what occurred on the system and when it occurred. Third, LANProtect formats the raw data from the Log File into usable information for reports. The reports include a virus summary report, a file server scan report, a periodic report, and others. The report formats are helpful in organizing and managing the information LANProtect provides.Monitor The Monitor screen gives a snapshot view of LANProtect activities. You can quickly view the current status of the LANProtect scans using the Monitor option. The Monitor screen provides information on the following: ■ CPU Utilization ■ Log File Report Dates ■ Prescheduled Server Scan ■ Real Time File Scan ■ Virus information CPU Utilization Utilization of the file server■s Central Processing Unit ( CPU) appears as a percentage. The number displayed reflects all activity on the CPU. If the file server becomes very slow, check the CPU utilization. A very high percentage of CPU utilization is an indication of high server activity. Log File Report Dates The current date and time appears in the following format: Day, Month, Time, and Year. The next line displays the amount of time the current version of LANProtect has been running. The log file reporting date displays the next date that a report will be generated from the log file with a countdown timer that displays the number of days, hours, minutes, and seconds until the report is generated. Prescheduled Server Scan Information The Prescheduled Server scan field displays the scan time for the next Prescheduled Server scan. The countdown timer on the next line displays the number of days, hours, minutes, and seconds until the next Prescheduled Server scan. Real Time File Scan Information The monitor screen displays the direction of I/O scanning set up in the Real Time File scan configuration, the total time the Real Time File scan has been running in days, hours, minutes, and seconds, the number of files scanned from the moment the Real Time File scan was turned on, the number of infected files found from the time the Real Time File scan was turned on, and the Real Time File scan configurations for the action to be taken when a virus is found. The last file scanned by the Real Time File scan displays the user and file scanned last. The user is acknowledged by the Novell NetWare username and the file is categorized as being read to or written from the server at the time it was scanned. Virus Information The Virus Information section displays information about the last virus found, including the common virus name, the action taken when the virus was found, and the complete network path and filename of the infected file. To access the Monitor screen: 1. Select Monitor on the LANProtect Options menu press <F8> from most LANProtect screens. 2. Press <Esc> to close the Monitor screen. Log File LANProtect documents all operations it performs and lists its findings in a circular log file. The log file is used primarily as a diagnostic tool that collects LANProtect■s activities and findings. After the specified number of days have passed, the earliest entry in the log file is replaced with the current day■s entry. The following table lists items tracked in the log file. Item Description User ID Tracks the user ID (continuous scan only) for any infected file. Workstation ID Tracks the user workstation address (network interface card address) for any infected file. This enables you to track a virus by workstation for users logging in as guest or other non-specific login names. Net ID Tracks the network name and ID for any infected file. Net ID assists in locating the source of a virus infection that may have been received through network services such as a WAN or enterprise-wide network. File name Locates the infected file on the network. The location process also finds the new name of any files renamed by LANProtect. Virus Type Determines which virus has infected the file. Date and Time Determines the exact time the infected file was discovered. Area Scanned Tells which files or areas were scanned and the results of the scan with the action taken on virus detection. Scan End Displays the reason why the scan ended such as scan completion or a user breaking the scan. To configure the Log File: 1. Select Reports | Log File Configuration. The following screen appears: 2. Enter the number of days to display in the log file and press <Enter>. The number must be between one and ninety. The log file is circular and when the number of days entered in the field is reached, the earliest date is replaced with data from the current date. 3. Highlight the ■Generate Report After Scan■ field and press <Enter>. The ■Generate Report After Scan■ list box displays four options. The following table lists the options and their descriptions. 4. Highlight your selection and press <Enter>. Continue with Step 4 to save the report file, with Step 5 to print the report, or with both steps to save and print the report. 5. Highlight ■Save Report in File,■ enter the file name for the report, and press <Enter>. The name of the file appears in the ■Save Report in File■ field. When the report is generated, the file is saved in the LANProtect directory. 6. Highlight ■Send Report to Print Queue■ and enter the queue the report will go to. If you do not remember the queue name, press <Enter> to display a list of the print queues. Highlight the desired queue and press <Enter>. Note: The queue name is limited to 24 characters. The queue name will appear in the ■Send Report to Print Queue■ field. 7. Press <Esc> to exit. Viewing the Log File Once you have configured the log file, you can view LANProtect events in the log file and create customized reports in another application. To view the log file: 1. Select Reports | View Log File. 2. Highlight Screen and press <Enter>. The log file will appear on the screen. 3. Scroll through the report by pressing <PgUp>, <PgDn>, <Home>, or <End>. The format of each entry is: Date, Time, Event, and a brief description. For example: To save the log file to a file: 1. Select Reports | View Log File. 2. Highlight File and press <Enter>. A text box appears so you can enter the report■s file name. 3. Enter the file name for the report and press <Enter>. The report is generated. The report is simple ASCII text that consists of all information in the log file. 4. Press <Enter> to return to the Reports menu.Reports The Reports menu lists several different types of reports. You are given the option to send output data to a print queue, to a text file, to both a file and a queue, or to the console screen. When you view reports on the screen, press <PgUp>, <PgDn>, <Home>, or <End> to scroll through the report. Some of the reports require you to accept the default date range or enter a date range of your choice. However, the starting date of the report cannot be earlier than the date of the first logged event in the Log File. The program will issue an error message if you choose a date earlier than the first logged event. File Server Scan Reports There are two different file server scan reports: Last File Server Scan and File Server Scan Report for the Period. Each of these reports lists only the events that have occurred during the Manual Server and Prescheduled Server scans. Real Time File scan events are not included in these reports. These reports list when a server scan started, when a virus was found, what action was taken on an infected file, the total number of files scanned, and how and when a server scan ended. Last File Server Scan Report The Last File Server Scan report shows the events that occurred during the last Manual Server or Prescheduled Server scan. This can be helpful when you run a Prescheduled Server scan during the night. To generate the Last File Server Scan report: 1. Select Reports | File Server Scan Reports | Last File Server Scan Report. The Report Destination list box appears. The following chart describes the output options. 2. Select an output option and enter the filename and/or print queue for the report, if applicable to your choice. The report is generated and displayed on the screen or stored in the appropriate file or queue. 3. Press <Esc> to cancel the report or exit from the screen display of the report and return to the previous menu. File Server Scan Report for the Period The File Server Report for the Period shows events that occurred during Manual Server and Prescheduled Server scans based on a date range. The list identifies what happened during scans for a specified period of time. To generate the File Server Scan Report: 1. Select Reports | File Server Scan Reports | File Server Scan Report for the Period. The dates displayed are the beginning and ending dates of events maintained in the log file. The information in the file server report is based on these dates. 2. Press <F10> to accept the default date range. or 2. Type dates of your choice and press <Enter> to accept each date. A dialog box appears asking for confirmation to proceed with the report. 3. Highlight Yes or No and press <Enter>. If you select No, you return to the ■File Server Scan Report■ menu. If you select Yes, the Report Destination list box appears. The following chart describes the output options. 4. Select an output option or press <Esc> to cancel the report and return to the previous menu. If you select an option, the report is generated and you can view it on the screen or you are returned to the previous menu, depending on your selection. LANProtect Event Report This periodic report provides a formatted list of all LANProtect events. All of the items in the Log File are events. The Event report shows the dates and times of events, the types of operations, and a description of the events that occurred within a specified time range. To generate the LANProtect Event Report: 1. Select Reports | LANProtect Event Report. The dates displayed are the beginning and ending dates of the scans for which information in the report is based. 2. Press <F10> to accept the default date range. or 2. Type the dates of your choice and press <Enter> after each entry. A dialog box appears asking for confirmation to proceed with the report. 3. Highlight either Yes or No and press <Enter>. If you select No, you return to the Reports menu. If you select Yes, the Report Destination list box appears. The following chart describes the output options. 4. Select an output option or press <Esc> to cancel the report and return to the previous menu. The report is generated and you return to the LANProtect Event Report menu. Virus Summary Report The Virus Summary Report displays virus-related events that have occurred and the results involved. This report can be sorted by: ■ Date ■ Virus name ■ Account name ■ File name To generate sorted reports dealing with viruses: 1. Select Reports | Virus Summary Report. The dates displayed are the beginning and ending dates of the time period the report information was gathered. 2. Press <F10> to accept the default date range. or 2. Type the dates of your choice and press <Enter> after each entry. A dialog box appears asking for confirmation to proceed with the report. 3. Highlight either Yes or No and press <Enter>. Selecting No returns you to the Reports menu. Selecting Yes displays, ■Sort By ?■ The following chart describes the sorting options.name(s) in which the virus(s) were found. 4. Select a sort option. The Report Destination list box appears. The following chart describes the output options. 5. Select an output option. When you press <Esc> to cancel the report, you return to the Sort By list box. Otherwise, the report is generated and you are returned to the Reports menu. LPLOG.RPT The LPLOG.RPT is a report that includes the outcomes of both LPScan and MacScan. It is stored in LPLOG, a subdirectory of the LANProtect directory. Each time one of the workstation scans are run, reports on the scan(s) append to the reports that are already listed in the log file from previous scans. It is important to maintain the LPLOG.RPT file by deleting reports that are no longer needed. The reports can also be formatted and printed from other applications. To view LPLOG.RPT from DOS: 1. Go to or map a drive to the LANPROTECT\LPLOG directory. For example: P:\LPROTECT\LPLOG> 2. Type LPLOG.RPT at the prompt. For example: P:\LPROTECT\LPLOG>LPLOG.RPT The LANProtect log report appears on the screen. This is an example of how the MacScan Report appears on the screen in DOS. This is an example of how the LPScan report appears on the screen in DOS.