Kevin Kosar wrote:
>
>Aengus Lawlor wrote:
>
>> www.analog.cx/docs/dns.html
>>
>> DNSFILE dnsfile.txt
>> DNS WRITE
>>
>> DNS lookups can be quite slow. (Turn on DEBUG D to watch it happen). 
>> If you have very large log files, try a utility like QuickDNS from
>> www.analogx.com (no relation).
>
>I've got Analog running, though it is taking quite a while to resolve all these
>addresses. I did download QuickDNS and attempted to use.
>
>While I understand that I am to change the command in Analog to: DNS READ
>
>My eyes just glazed over when I read:
>
>"This causes Analog to only read DNS entries, not add any or attempt to resolve
>any that it doesn't know.  Also, remember that you need to run QuickDNS BEFORE 
>you run Analog, so I would recommend putting it on the line before Analog in 
>whatever script or batch file you execute."

I'm not sure what's unclear about that (unless you've just been 
reviewing some products for your website :-). But let's go over some 
basic concepts:

1) DNS information is stored in a file, so that Analog doesn't have to 
  redo slow DNS lookups each time it runs.
2) Analog does DNS lookups one at a time, and they take however long it 
  takes your DNS server to respond.
3) QuickDNS takes just as long as Analog to do a single DNS lookup, but 
  QuickDNS can do multiple lookups at once (default=20) , so it finishes 
  a lot faster.
4) Once QuickDNS resolves all the IP addresses in your logfiles, and 
  saves the results in a DNS file, Analog can just read the answers, 
  instead of doing any DNSlookups itself. Analog can't take advantage of 
  QuickDNS's hard work unless you run QuickDNS before you run Analog.

If you run QuickDNS on it's own, it tells you it's options. I use the 
following command:

QDNS /D DNS.DNS /L logfile.log

to create a DNS file, then add the following commands to ANALOG.CFG
DNS READ
DNSFILE DNS.DNS

(I don't use the /G command to make QuickDNS lookup my .CFG file, 
because it doesn't always get what I want, especially if I use 
wildcards, or multiple logfiles).

>Concretely, what steps am I to take to use QuickDNS?

I can't honestly answer this question, because I don't understand what 
you could still need to know after spending 10 minutes experimenting 
with the sample logfile.log, QuickDNS and Analog. 

Aengus
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------

Reply via email to