May I make a suggestion to do with the DNS lookup. When I do IP address to
name matching via the DNS the processing of the log file takes about 10-100
times longer. Most of the time I do not care about the specific host but
which domain it has come from and given that ISPs hands out the same IP
address to multiple users over a day the host name is fairly meaningless.
Also I am getting an awful lot of "can't resolve" IP addresses from some
ISPs - such as tesco.net.
To speed this up for most people could we have either a new config
entry:
ISPADDRESSRANGE m.m.m.m n.n.n.n isp-name
i.e.
ISPADDRESSRANGE 192.107.11.0 192.107.13.255 cctal.net
ISPADDRESSRANGE 192.113.112.0 192.113.1119.255 bt.com
Then rather than do a DNS lookup it could generate for 192.107.12.8 an
address of 192.107.12.8-cctal.net.
This would reduce the size of the DNS file and speed up lookups.
Another solution would be to somehow use a regular expression into the DNS
file such as :-
HOSTALIAS REGEXP:^(62[\.]172[\.]2[0-3][\.].*)$ $1.tesco.net
Which would save having a new config entry which needed to be added to every
config file.
I already use the HOSTALIAS a lot for all those ISPs which I can't resolve
the IP address of...
Unfortunately the DNS lookup is performed before the HOSTALIASing takes
place.
As a lot of the addresses from ISPs are not resolved I have been using
www.ripe.net to see who the address range belongs to, so this modification
would actually help reduce the number of "unknown" IP addresses and speed up
the process.
I have downloaded the code but at the moment it looks beyond me to make such
a change (and keep retro fitting it) as I have not done much programming for
the last 10 years !
Which would seem the best (most acceptable) way forward to those who know
the product better.
Regards Jamie
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
