<[EMAIL PROTECTED]> wrote:
> But it still takes 3 - 4
> hours to process a log file because the wait for unresolvable
> addresses. The ones that resolve are not too much of a problem. If
> I have DNS NONE or rerun then it takes less than 5 minutes to do
> the analysis.
Go to www.analogx.com (no relation to analog.cx) and download QDNS. It's a
threaded DNS resolver that by default runs 100 DNS queries at once. Install
it, and run it from a DOS prompt by typing the following command line:
QDNS /L <logfile name> /D <dnscache file name> /Y <IP number of your DNS
server>
It will go through your log file, resolving all the addresses to a cache
file in a few minutes. Then change your ANALOG.CFG to use DNS READ instead
of DNS write, and all your HOST aliases will work the way you want them to,
you won't have to wait 3 hours to do DNS resolution, and nobody has changed
a line of Analog code.
If your logfiles are large enough that QDNS stalls while waiting for 100
unresolvable addresses, just up the number of threads it uses, by adding
/T 250 to it's command line (though your DNS server might not be happy
if you set it too high).
Aengus
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
+------------------------------------------------------------------------
