locked
HP Data Vault X501 WHS - IIS 6 Filling C Drive With Large Log Files RRS feed

  • Question

  • I have a HP StorageWorks Data Vault X501 WHS with remote access enables and configured. IIS 6 is leaving a large (250MB) log file every day in location C:\WINDOWS\system32\LogFiles\W3SVC1

    This is filling up the C: partition and causing problems, does anyone know how I can stop IIS6 from doing this?
    Thursday, December 31, 2009 8:10 PM

All replies

  • Technically you could turn off logging, but before doing so I would really recommend looking into one of those log files to see what exactly is filling them up. It's very possible that your server is being probed for vulnerabilities.
    I'm not on the WHS team, I just post a lot. :)
    Thursday, December 31, 2009 11:32 PM
    Moderator
  • Thanks for your reply Ken.

    Would you mind advising how to switch off logging or pointing me to somewhere I could find out?

    With regards to analysing the log files to determine whether the server is being probed I wouldn't know how to start, but in case someone is reading this post who can interpret these files the logs are filled with lines like this:

    2009-12-01 14:59:38 W3SVC1 192.168.0.2 GET /PushClient/SOL9000/connection - 80 - 192.168.0.3 - 200 0 0
    2009-12-01 14:59:38 W3SVC1 192.168.0.2 GET /PushClient/SOL9000/connection - 80 - 192.168.0.3 - 200 0 0
    2009-12-01 14:59:38 W3SVC1 192.168.0.2 GET /PushClient/SOL9000/connection - 80 - 192.168.0.3 - 200 0 0

    It looks to me as if the server (192.168.0.2) is relying web traffic to one of my clients (SOL9000 - 192.168.0.3) and the server is logging this.
    Saturday, January 2, 2010 8:07 AM