My experience with DHCP is that a machine that is consistently on (i.e. daily) will keep the same IP address.  Unless you are constantly trading out machines or have groups of users who don't boot up their machines for many days at a time, most of the machines will probably keep the same IP for quite a while.  When I was attending RPI, my laptop got the same IP every time I used it in my dorm room.  It didn't matter that I was often taking it to class and getting a variety of different IP addresses on different subnets.
So anyways, look through your DHCP log and see if the same host isn't grabbing the same IP most of the time.  If so, then you can make a dns cache file for analog with that info.
 
Bryan Barnett
-----Original Message-----
From: Bruno Adamo [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 05, 2003 2:53 AM
To: [EMAIL PROTECTED]
Subject: [analog-help] analog on an intranet with dhcp

Hi everybody
I am currently trying to exploit our IIS server logs to get manageable usage reports of the company intranet : analog looks like just the right tool to do this!
but the catch is, I have been asked to identify each user by his computer host name. I thus have to use some kinf of DNS lookup to convert the IP address contained in the log files into a host name. Unfortunately, we are using DHCP assigned IPs, so the relationship between an IP and a host name is kind of time-dependent. I have access to a log file which traces the IP changes of every connected host, it looks like :
 
<hostname>;<IP>;04/02/02  19:29:36
<hostname>;<IP>;04/02/02  19:30:48
<hostname>;<IP>;04/03/02  11:28:59
etc...
 
I was wondering if there was a way to use this as a kind of dns cache file, maybe by converting the date/time into a timestamp?
anyway, I need to resolve the IPs in my IIS log to the host that was using it at that time, so I would really apreciate it if someone could tell me wether I have any chance of success using this DHCP log with analog, or if I should try to find another piece of software which would make my life easier :-)
thanks a lot for any suggestions
 
kindly
Bruno

Reply via email to