Text 20792, 49 rader
Skriven 2006-09-09 22:57:00 av ED VANCE (1:123/140)
     Kommentar till en text av JEFF GUERDAT
Ärende: Re: W2K Newbie locking sy
=================================
JG>>  JG> This is similar to *nix systems where system logs are kept in a
JG>>  JG> consolidated location.  Unfortunately, they're in a binary format so
JG>>  JG> you  need the event viewer to make any sense of them.
JG>>
JG>> Like *NIX, it too should be a flat text file IMO. And there's no info in t
JG>> logs. Is it only written in safe mode?

JG>Each format has it's own strength - and weakness.  Binary files are less
JG>prone to malicious editing but are harder to utilize without a reader.
JG>Text files are easily modified to hide hacking efforts but can be
JG>scripted to provide ease of monitoring.  There simply is no "right" way.

JG>I do, however, prefer flat text files.

JG>The system logs should be written to at any time.  The only log that
JG>doesn't do that by default is the security log - that has to be
JG>specifically enabled to see anything.  Are you not seeing anything at
JG>all or just when trying to locate your problem?  If the latter, that
JG>could be explained by the application not erroring at the system level.
JG>  You don't need to be in Safe Mode to use the Event Viewer - perhaps
JG>that's when it's blank.  Try it when normally booted.  I may have
JG>phrased my response poorly.

JG>> I spent so long dis'n' MS, and this is just another attempt to isolate use
JG>> from what's under the hood.

JG>Yeah, but...  You could say the same thing about the Mac but, since it's
JG>based on BSD Unix, there may well be text log files available - if you
JG>know how to access them.  There are reasons to hide things under the
JG>hood since most users wouldn't know what to do with them.  Us technical
JG>types see that as a hindrance but that never stopped us, did it?  ;)

Jeff,

Thanks for answering James question about Event Viewer can be accessed
without being in Safe Mode, as I found out by following your
instructions.

I've found out that XP has lots of hidden files and directories on its'
C: drive.

Like you I like to know what is under the hood also, altho I still am
not anywhere like an expert as I feel some of those here are.
That's why I enjoy this and other Echos on FIDO.


 * SLMR 2.1a #T348 * WinError:001 Windows loaded. System in danger.
--- Platinum Xpress/Win/WINServer v3.0pr5
 * Origin: Try Our Web Based QWK: DOCSPLACE.ORG (1:123/140)