Hi
I use Sentinel to monitor windows plateform, and client use remote
desktop to login to windows XP/2003...and I make a report to point out
initiorUserName/SourceIP/SourceHostname/ObserverIP/ObserverHostName,
almost record are OK...But I find some records that point SourceHostName
is "Negotiate", and SourceIP is "0.0.0.0"...I check windows event viewer
form this Server directily. I find the log record Sourc IP is real
client IP... not 0.0.0.0.
Who could tell me why the client change to 0.0.0.0 and hostname
change to "Negotiate".


thanks!!

wyldkao


--
wyldkao
------------------------------------------------------------------------
wyldkao's Profile: http://forums.novell.com/member.php?userid=1823
View this thread: http://forums.novell.com/showthread.php?t=457937