At 16:53 23-5-2002 +0100, Aengus wrote: >According to the LookupIP website, it's designed to replace IP numbers >in files with names. In other words, it modifies the logfile, and puts >the IP names into the logfile. It also creates it's own cache file, but >it looks like it's not the same format as Analogs DNS cache file. >(Firstly, the timestamp is two orders of magnitude larger than the one >that Analog uses - I assume that this means that Analog will consider >these lookups unreliable. Secondly, the IP addresses for successful >lookups aren't listed here, so Analog has no way of comparing the IP >addresses in the log files with the names recorded in this lookup file). Now I understand this part, so the dns.txt from lookupIP is a kind of 'intermediate' file, because of the strange 'stamp' not suitable as a dnsfile within analog, but as i learned now, saving the 'changed' logfile will do, and give the results with domainnames. Just this, would this also go with .zip files ?
> > The third, called DNSOUT.IP is the file that resulted from > > using quickdns/qdns (about a minute). Also here, when using this file > > within analog > > the results show ip-numbers, no domainnames.... etc. > >21498495 212.19.205.136 alfredo.wise-guys.nl >21498478 216.239.46.204 crawl8.googlebot.com > >In this case, the time stamp is way out as well. I just checked on my >machine, and QuickDNS created virtually the same timestamp as Analog did >(they ran a few minutes apart, and produced timestamps of 17036103 and >17037607). It also looks like QuickDNS on your machine didn't store >unresolved addresses (the /S option when you run it). > >I don't know why you are getting odd timestamps with QuickDNS, and I've >never used lookupIP, so I can't offer much advice there. Fortunately these time stamps turned out right now, and following your suggestion to use the /D and /L parameter (and /Y ) QDNS /D C:\Analog\qdns.txt /L C:\logfiles\access.log /Y 12.34.56.78 instead of the /G parameter (cant get this working), results are now satisfactory. Thanks for thinking with me and suggesting.... Henk Schrik tel. (31)(0)6 53612294 e-mail: [EMAIL PROTECTED] website: http://henk.schrik.nl +------------------------------------------------------------------------ | This is the analog-help mailing list. To unsubscribe from this | mailing list, go to | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | List archives are available at | http://www.mail-archive.com/[email protected]/ | http://lists.isite.net/listgate/analog-help/archives/ | http://www.tallylist.com/archives/index.cfm/mlist.7 +------------------------------------------------------------------------
