Just like modifying the trigger for calls to include an abuse account
Date sent: Thu, 12 Nov 1998 01:07:06 -0800
From: "Dale E. Reed Jr." <daler@iea-software.com>
Organization: IEA Software, Inc.
To: emerald@iea-software.com
Subject: Re: Script
Send reply to: emerald@iea-software.com
> Alan D. Criado wrote:
> >
> > Does anyone have a script that can show who was logged on to a particular
> > IP Address within a range of time?
> >
> > One of my customers thought it would be nice to send out tons of spams and
> > I need to find out who it was. The time and date stamp on his spam
> > messages narrow it down as well as the IP address it said it came from.
> >
> > If anyone has a script that can pull this information, please let me know.
>
> I use this one:
>
> DECLARE @timeon smalldatetime, @timeon smalldatetime, @userip char(16)
>
> Select @timeon = "11/9/96 16:00"
> Select @timeoff = "11/9/96 22:00"
> Select @userip = "204.227.164.2"
>
> Select UserName, Start=DateAdd(Second,
> (0-AcctSessionTime-AcctDelayTime), CallDate), Mins=(AcctSessionTime/60),
> Stop=DateAdd(Second, (0-AcctDelayTime), CallDate),
> Server=SubString(Server, 1, 15), Port=Str(NASPort,4), IP=FramedAddress
>
> from calls, servers
> where DateAdd(Second, (0-AcctSessionTime-AcctDelayTime), CallDate) >=
> @timeon
> and DateAdd(Second, (0-AcctDelayTime), CallDate) <= @timeoff
> and AcctStatusType = 2
> and calls.NASIdentifier=servers.ipaddress
> and FramedAddress = @userip
> Order By Start
>
> GO
>
>
> --
> Dale E. Reed Jr. (daler@iea-software.com)
> _________________________________________________________________
> IEA Software, Inc. | RadiusNT, Emerald, and NT FAQs
> Internet Solutions for Today | http://www.iea-software.com
>
> For more information about this list, including removal,
> please see http://www.iea-software.com/maillist.html
Jason Robertson Computer Pages/Better.Net
Technical Support Team 253 Sheppard Ave. West
support@better.net Toronto, Canada M2N 1N2
http://www.better.net Ph: +1 416 225 3030
Fax: +1 416 225 6737