Iasparse Examples

Article
10/08/2009

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

IASParse Examples

Example 1: IAS Format

The following command starts IASparse and parses the iaslog.log file. It then records the authentication and accounting information that it receives in a log file in IAS format.

iasparse –f:iaslog.log

The line logged into the file: 172.31.230.187,rajeshp,02/09/2000,23:18:00,IAS,RA
JESHP2,6,2,7,1,5,11,61,5,64,1,65,1,31,172.31.225.108,66,172.31.225.108,4108,172.
31.230.187,4116,9,4128,rajeshp3,4147,311,4148,MSRASV5.00,4129,RAJESHP2\rajeshp,4136,1,4142,0

 NAS_IP_Address      :    172.31.230.187
 User_Name           :     rajeshp
 Record_Date         :     02/09/2000
 Record_Time         :     23:18:00
 Service_Name        :     IAS
 Computer_Name       :     RAJESHP2
 Service-Type        :     Framed
 Framed-Protocol     :     PPP
 NAS-Port            :     11
 NAS-Port-Type       :     Virtual
 Tunnel-Type         :     PPTP
 Tunnel-Medium-Type  :     IP
 Calling-Station-Id  :     172.31.225.108
 Tunnel-Client-Endpt :     172.31.225.108
 Client-IP-Address   :     172.31.230.187
 Client-Vendor       :    VENDOR
 Client-Friendly-Name:     rajeshp3
 MS-RAS-Vendor       :    Microsoft
 MS-RAS-Version      :     MSRASV5.00
 SAM-Account-Name    :     RAJESHP2\rajeshp
 Packet-Type         :     Access-Request
 Reason-Code         :    The operation completed successfully.

The line logged into the file: 172.31.230.187,rajeshp,02/09/2000,23:18:00,IAS,RA JESHP2,4130,RAJESHP2\rajeshp,4129,RAJESHP2\rajeshp,4128,rajeshp3,4116,9,4108,172.31.230.187,4136,3,4142,16

 NAS_IP_Address          :      172.31.230.187
 User_Name               :      rajeshp
 Record_Date             :      02/09/2000
 Record_Time             :      23:18:00
 Service_Name            :      IAS
 Computer_Name           :      RAJESHP2
 Fully-Qualifed-User-Name:      RAJESHP2\rajeshp
 SAM-Account-Name        :      RAJESHP2\rajeshp
 Client-Friendly-Name    :      rajeshp3
 Client-Vendor           :      VENDOR
 Client-IP-Address       :      172.31.230.187
 Packet-Type             :      Access-Reject
 Reason-Code             :      Authentication failure: unknown user name or bad password

Example 2: ODBC-Compatible Format

The following command starts IASparse and parses the iaslog.log file. It then records the authentication and accounting information that it receives in a log file in ODBC-compatible format.

IASParse

The line logged into the file: "RAJESHP3","IAS",05/17/1999,15:31:11,4,"rajeshp" ,,"172.31.225.108",,"20.20.20.3",,"172.31.230.187",11,9,"172.31.230.187","rajes p3",4294967295,5,,1,2,,,0,"311 1 172.31.230.187 05/17/1999 17:13:09 3",,1200,,, ,0,318,370,"14",1,0,13,13,,"37","0x00000001",,1,1,"172.31.225.108",,,,,,,,"MSRASV5.00",311,,,,

 Computer_Name           :      "RAJESHP3"
 Service_Name            :      "IAS"
 Record_Date             :      05/17/1999
 Record_Time             :      15:31:11
 Packet-Type             :      Accounting-Request
 User-Name               :      "rajeshp"
 Fully-Qualifed-User-Name:
 Called-Station-Id       :
 Calling-Station-Id      :      "172.31.225.108"
 Callback-Number         :
 Framed-IP-Address       :      "20.20.20.3"
 NAS-Identifier       :
 NAS-IP-Address          :      "172.31.230.187"
 NAS-Port                :      11
 Client-Vendor           :      VENDOR
 Client-IP-Address       :      "172.31.230.187"
 Client-Friendly-Name    :      "rajeshp3"
 Port-Limit              :      4294967295
 NAS-Port-Type           :      Virtual
 Connect-Info            :
 Framed-Protocol         :      PPP
 Service-Type            :      Framed
 Authentication-Type     :      Unknown
 NP-Policy-Name          :
 Reason-Code             :      The operation completed successfully.
 Class                   :      "311 1 172.31.230.187 05/17/1999 17:13:09 3"
 Session-Timeout         :
 Idle-Timeout            :      1200
 Termination-Action      :
 EAP-Friendly-Name       :
 Acct-Status-Type        :      Start
 Acct-Delay-Time         :      0
 Acct-Input-Octets       :      318
 Acct-Output-Octets      :      370
 Acct-Session-Id         :      "14"
 Acct-Authentic          :      Radius
 Acct-Session-Time       :      0
 Acct-Input-Packets      :      13
 Acct-Output-Packets     :      13
 Acct-Terminate-Cause    :      Unknown
 Acct-Multi-Ssn-Id       :      "37"
 Acct-Link-Count         :      "0x00000001"
 Acct-Interim-Interval   :
 Tunnel-Type             :      PPTP
 Tunnel-Medium-Type      :      IP
 Tunnel-Client-Endpt     :      "172.31.225.108"
 Tunnel-Server-Endpt     :
 Acct-Tunnel-Conn        :
 Tunnel-Pvt-Group-ID     :
 Tunnel-Assignment-ID    :
 Tunnel-Preference       :
 MS-Acct-Auth-Type       :
 MS-Acct-EAP-Type        :
 MS-RAS-Version          :      "MSRASV5.00"
 MS-RAS-Vendor           :      Microsoft
 MS-CHAP-Error           :
 MS-CHAP-Domain          :
 MS-MPPE-Encryption-Types:
 MS-MPPE-Encryption-Policy:

Example 3: Displaying the description associated with attributes in the log file.

The following command displays the description associated with attributes in the log file.

-v

For example, for this attribute:


Client-Vendor       : VENDOR

it shows this description:


Manufacturer of RADIUS proxy or NAS. (IAS only)

Partager via

Iasparse Examples