Instant Messaging
Protocol Log
Instant Messaging servers log inbound (client to server) Instant
Messaging protocol messages to the IIS logs. By default, IIS saves
these files to the server's %SystemRoot%\System32\LogFiles
directory.
Here is an excerpt from a typical
protocol log.
#Software: Microsoft Internet Information Services 5.0
#Version: 1.0
#Date: 1999-05-03 00:00:58
#Fields: time c-ip cs-method cs-uri-stem sc-status
...
15:12:27 192.168.114.201 SUBSCRIBE /aliases/salman 200
15:12:27 192.168.114.201 PROPPATCH /aliases/kim 401
15:12:27 192.168.114.201 PROPFIND /aliases/salman 200
15:12:27 192.168.114.201 PROPPATCH /aliases/kim 200
15:12:27 172.30.230.13 NOTIFY /aliases/eric 200
15:12:27 172.30.230.13 NOTIFY /aliases/david 200
15:12:56 192.168.114.49 PROPFIND /aliases/martha 200
15:13:02 192.168.105.7 PROPPATCH /aliases/david 200
15:13:02 192.168.105.7 PROPPATCH /aliases/david 401
15:13:02 192.168.105.7 PROPPATCH /aliases/david 200
15:13:02 192.168.114.201 UNSUBSCRIBE /aliases/kim 200
Each log entry in this example provides the following
information:
The time a particular request, such as a change in presence
information (busy, away, and so on), was made.
The Instant Messaging client or server IP address.
The protocol command, or method, sent by the client or
server.
The user's URL, which is related to the Instant Messaging
address.
The status code for the request; for example, code 200
indicates the request was accepted by the server and code 401
indicates the request was denied.
IIS allows you to customize the logs to
record specific types of information about user activity.
For more information, refer to the IIS 5.0 documentation.