The query interface for Microsoft’s ISA server can be tedious to use. This script, CreateDestinationAndTimeFilter.vbs, creates a filter to be used by ISA server to capture all traffic to an IP during an interval of time. It was tested only with ISA 2004 Standalone Cached mode. You can run it interactively or from command line, example:
CreateDestinationAndTimeFilter /start:”6/7/2010 7:00:00 AM” /end:”6/7/2010 5:30:00 PM” /IP:192.168.100.6
The script will create and XML file which you can load and run.