In <009c01c0971a$cef0b800$3201a8c0@raven>, "Morgan Norell" <[EMAIL PROTECTED]> writes:
> In some of my old logfiles I have resolved ip adresses but when I updated
> analog the ip numers doesen't resolv anymore, witch make Domain Report and
>Organisation Report usless.
I find it more efficient to reverse-resolve the files in a separate first step
and archive the resolved files:
- the run time of analog is significantly shorter
- reverse resolution changes over times, like address ranges get reallocated,
or providers change their names, so doing reverse resolution on old log
files may show incorrect results
- if the same log files are analyzed by another tool as well or manually
reviewed for specific items, doing reverse resolution once is definitely more
resource friendly
--
Klaus Johannes Rusch
[EMAIL PROTECTED]
http://www.atmedia.net/KlausRusch/
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
