Using the Host log
Host log overview
Logs keep information records of selected events occurred in, or detected by Kerio Control. For more information about configuring and using logs, see article Configuring and using logs in Kerio Control.
This log gives you information on who, when and which address and machine accesses the Kerio Control network.
Reading the Host log
An example of user registration
[02/Mar/2014 13:36:49] [IPv4Version 4 of the Internet Protocol.] 192.168.40.131 [MAC]
00-10-18-a1-c1-de (Apple) - Host registered
[02/Mar/2014 13:37:56] [IPv4] 192.168.40.131 [MAC]
00-10-18-a1-c1-de (Apple) [User] jsmith@company.com - User logged in
[02/Mar/2014 16:48:52] [IPv4] 192.168.40.131 [MAC]
00-10-18-a1-c1-de (Apple) - User jsmith@company.com logged out
[02/Mar/2014 16:48:52] [IPv4] 192.168.40.131 [MAC]
00-10-18-a1-c1-de (Apple) - Host removed
[02/Mar/2014 13:36:49]— date and time when the action was happen[IPv4] 192.168.40.131— IPv4 address of the client host[MAC] 00-10-18-a1-c1-de (Apple)— MAC address of the host. If the MAC addressMedia Access Control Address - A unique identifier that specifies a device in a network. is not displayed, Kerio Control is not able to see the MAC address of the host.jsmith@company.com—username authenticated through the firewall
An example of IP address leased from DHCP
[04/Mar/2014 12:07:28] [IPv4] 10.10.30.81 [MAC]
00-0c-29-1d-cc-bd (Apple) [Hostname] jsmith-cp - IP addressAn identifier assigned to devices connected to a TCP/IP network. leased from
DHCPDynamic Host Configuration Protocol - A protocol that automatically gives IP addresses and additional configuration to hosts in a network.
[04/Mar/2014 12:07:28]— date and time when the action was happen[IPv4] 10.10.30.81— IPv4 address of the client host[MAC] 00-0c-29-1d-cc-bd (Apple)— MAC address of the host. If the MAC address is not displayed, Kerio Control is not able to see the MAC address of the host.[Hostname] jsmith-cp— computer hostname
An example of registering and removing an IPv6 address
IPv6Version 6 of the Internet Protocol. addresses are changed in time by the operating system of the host. See below an example of registering and removing such an IPv6 address on Kerio Control:
[04/Mar/2014 16:05:28] [IPv4] 10.10.30.81 [IPv6]
2001:718:1803:3513:b4c6:82b3:e0f5:309e [MAC] 00-0c-29-1d-cc-bd (Apple) [Hostname]
jsmith-cp - IPv6 address 2001:718:1803:3513:b4c6:82b3:e0f5:309e
registered
[04/Mar/2014 16:23:25] [IPv4] 10.10.30.81 [MAC]
00-0c-29-1d-cc-bd (Apple) [Hostname] jsmith-cp - IPv6
address 2001:718:1803:3513:b4c6:82b3:e0f5:309e removed
[04/Mar/2014 16:05:28]— date and time when the action was happen[IPv4] 10.10.30.81— IPv4 address of the client host[IPv6] 2001:718:1803:3513:b4c6:82b3:e0f5:309e— IPv4 address of the client host[MAC] 00-0c-29-1d-cc-bd (Apple)— MAC address of the host. If the MAC address is not displayed, Kerio Control is not able to see the MAC address of the host.[Hostname] jsmith-cp— computer hostname