Microsoft KB Archive/891223

= How to convert an IP address from the firewall log into a dotted IP address in Internet Security and Acceleration Server 2004 =

Article ID: 891223

Article Last Modified on 8/15/2006

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition

-



INTRODUCTION
This article discusses how to convert an IP address from the Microsoft Internet Security and Acceleration (ISA) Server 2004 firewall log into a dotted IP address by using SQL Query Analyzer to query the firewall log database.



MORE INFORMATION
To convert an IP address from an ISA Server 2004 firewall log into a dotted IP address, use the following SQL statement in SQL Query Analyzer: SELECT

CAST(SourceIP / 256 / 256 / 256 % 256 AS VARCHAR) + '.' +

CAST(SourceIP / 256 / 256 % 256 AS VARCHAR) + '.' +

CAST(SourceIP / 256 % 256 AS VARCHAR) + '.' +

CAST(SourceIP % 256 AS VARCHAR)

AS [Nice Source Ip], FirewallLog.*

From FirewallLog The SourceIP field of the FirewallLog table is defined using the BigInt data type. For example, if the value of the SourceIP field is 172.16.1.1, the table will store the data value as 2886729985.

Note FirewallLog is the table name for the Firewall log, and WebProxyLog is the table name for the Web Proxy log.

Keywords: kbdatabase kbhowto KB891223

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.