Aengus
thanks for the suggestion. It certainly speeds
things up a lot on Windows 2000.
My preference would still be to have HOSTALIAS or similar
run before the DNS lookup in analog, but I appreciate that it is a design
issue.
The question being "Where do you put the complexity, more
config parameters for ANALOG or preprocessing?".
Still with QDNS the run times have come down to about 15
minutes from 2-3 hours so Thank You once again.
b.t.w am I right in thinking that if I could get jdresolve
to work on Windows NT/2000 it tries to sites like ripe.net to resolve those
addresses that analog or qdns can not?
Regards Jamie
> <[EMAIL PROTECTED]> wrote:
>
> > But it still takes 3 - 4
> > hours to process a log file because the wait for unresolvable
> > addresses. The ones that resolve are not too much of a problem. If
> > I have DNS NONE or rerun then it takes less than 5 minutes to do
> > the analysis.
>
> Go to www.analogx.com (no relation to analog.cx) and download QDNS. It's a
> threaded DNS resolver that by default runs 100 DNS queries at once.
> Install
> it, and run it from a DOS prompt by typing the following command line:
>
> QDNS /L <logfile name> /D <dnscache file name> /Y <IP number of your DNS
> server>
>
> It will go through your log file, resolving all the addresses to a cache
> file in a few minutes. Then change your ANALOG.CFG to use DNS READ instead
> of DNS write, and all your HOST aliases will work the way you want them
> to,
> you won't have to wait 3 hours to do DNS resolution, and nobody has
> changed
> a line of Analog code.
>
> If your logfiles are large enough that QDNS stalls while waiting for 100
> unresolvable addresses, just up the number of threads it uses, by adding
> /T 250 to it's command line (though your DNS server might not be happy
> if you set it too high).
>
>
> Aengus
>
>
+------------------------------------------------------------------------
| This is the analog-help mailing list. To unsubscribe from this
| mailing list, go to
| http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
| List archives are available at
| http://www.mail-archive.com/[email protected]/
| http://lists.isite.net/listgate/analog-help/archives/
+------------------------------------------------------------------------
