June 2005 - Posts
I blogged about Log Parser book few months ago. Yet, I forgot to tell you guys where you can download the sample chapters. I have a chance to work on the IIS chapters in this project. Here's the two chapters you can get it for free.
Chapter 2 - Monitoring IIS
http://www.iis-resources.com/downloads/LPChap2.zipChapter 5 - Managing Snort Alerts
http://www.logparser.com/311_LogParser_05.pdfAnd of course, get a copy from Amazon
http://www.amazon.com/exec/obidos/ASIN/1932266526/larkware-20/104-0831330-3461537If you need help with log parser, visit this forum.
This month, the IIS team will presents the IIS Debugging Series.
Just read this post from the port80 team. Ton of great tools for analyze HTTP traffics and help you troubleshoot HTTP connection issues, while wfetch from Microsoft still my preferred tool when it comes for troubleshooting HTTP connections.
Another busy month :( Microsoft security bulletins from June is out! Here's the summary from Jerry's blog. With 3 critical, 4 important, 3 moderate severity rating + 3 (1 in important) re-released bulletins. Bulletins that are related to IIS, we have:
Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179)
http://www.microsoft.com/technet/security/Bulletin/ms05-029.mspx
ASP.NET Path Validation Vulnerability (887219)
http://www.microsoft.com/technet/security/Bulletin/ms05-004.mspx
Finally, IIS Control Panel v1.0 by IIS MVP - Jake Garder is out!!! Download it here, for support forum discussions where Jake always hang out (I'm there as well), visit IIS-Resources.com
Well, with official released of WSUS, the traditional Windows Update will be upgrade to version 6 which support patches for Office application, SQL server, etc. So how do you get it? Easy, just visit this link, follow the instructions and voila!!!
No... no.. no...... not the normal guy! I'm referring to the following. Let's see!
1) The Cable Guy
2) Hey, Scripting Guy!
3) The TechNet Guy
4) Scripting Eye for the GUI Guy
Who else ?
Updated 13th June:
5) Virtual PC Guy
898708 FIX: IIS 6.0 may send an "HTTP 100 Continue" response in the middle of the response stream when you send a POST request
A new security book that you don't want to miss! Actually, I got the book delivered to me about two weeks ago, however I only manage to glance through it till yesterday. With thousand over pages all focusing on Windows Server 2003 security and detailed explaination with real life example/scenario setup, + together with many security experts reviewing the book (I helped as well), you should get a copy asap. The author - Roberta Bragg has done an excellent job again, Bravo!!
I got the chance to work on IIS Insider this month :) Got more questions and not cover by IIS Insider, try 'contact me' and I will try my best to answer your questions.
Another W2k3 SP1 addin for IIS 6, Ken summarizes it with diagram illustration in this article.
From Jerry's blog... WSUS is released...
detail: Now Live! + Useful docs
IIS Architecture Overview (Level 200)
Before administrators and developers attempt to debug IIS it is essential that they thoroughly understand the IIS architecture. This webcast is an overview of the architecture that serves as a base on which the rest of the week's webcasts are built. We will also describe IIS and COM+ integration in legacy versions of IIS and how IIS 6.0 architecture is different.
Overview of Debugging Tools (Level 200)
Debug Diagnostics Toolkit 2.0 with its easy-to-use interface will be the primary tool used to debug IIS application problems at Microsoft. This webcast outlines the key features of this new toolkit and compares it to the Windows debugging toolkit.
Understanding and Diagnosing Crashes in IIS (Level 300)
How do you define a crash? If you're not sure, this webcast is for you. We'll discuss the basic definition of a crash and cover major details such as the differences between native and managed code access violations. Learn how to attack crashes with the right tools and fix them the first time.
The Ins and Outs of Hangs in IIS (Level 300)
Most administrators and perhaps even some developers would agree that they spend a lot of time troubleshooting situations in which IIS hangs. In this webcast we will define what a hang is in the context of IIS and discuss some of the most common reasons that IIS processes hang. You'll also learn how to use the appropriate tools to reduce the time to resolution.
The Inside Scoop on Diagnosing Memory Leaks in IIS (Level 300)
This webcast explains how memory is leaked in the scope of an application and how memory becomes fragmented. We'll show you how to use the Debug Diagnostics Toolkit Memory Leak Analyzer to troubleshoot memory leaks successfully.