topic Traffice Log Source user and Destination user in General Topics

Traffice Log Source user and Destination user

drischar — Fri, 23 Feb 2018 20:58:04 GMT

What would be happening that would cause a source user name to be different than the destination user in the traffic logs?

Re: Traffice Log Source user and Destination user

jvalentine — Fri, 23 Feb 2018 21:17:37 GMT

In the situation where "Alice" pings "Bob". Alice is the source user, Bob is the destination user.

Re: Traffice Log Source user and Destination user

OtakarKlier — Fri, 23 Feb 2018 21:20:26 GMT

Hello,

So it would be different depening on what the user-id agents saw as the last logon to the destination IP.

For example, user A access a server. In the logs it could show userA for the source IP but the last person to logon to that destination IP was AdministratorY. So it would look like Source User = UserA and destination User =AdministratorY.

Hope that makes sense.