t-discussion@pmacct.net
Cc: Steven Sheehy; Mark Ponthier
Subject: Re: [pmacct-discussion] Outputting DNS equivalent of src_host and
dst_host IP addresses?
Hi Hiep,
Unfortunately this is not possible today nor in the roadmap. The easiest
thing that comes to mind is a two-steps kind of export: you
DNS lookups will effectively rate limit flow export, though, even if you're
hitting a cache. Do it after the fact in your presentation layer with a
cache, don't do it at the collection level, because you'll also have to
store it. I dunno what your flow volume is, but this is generally a bad
idea.
