I don't know enough about Analog, itself, to answer your question, but the Analog Helper Applications page might help, particularly the part about DNS lookups; it's at "http://www.analog.cx/helpers/#dns";. Because these helper applications have only one task, they are often faster than Analog and some of them offer more options than Analog. If you decide to use on of these apps for DNS lookups, remember to redefine Analog's level of DNS activity to READ.
HTH,
-- Duke
Ken Schweigert wrote:
Running Analog 5.32 on RedHat-9 and have noticed that a lot of my reports are never finishing. The reports run from a nightly cron script so I end up with a new instance of Analog every night.
My intuition told me to look for DNS issues so I tailed the dnscache.txt file and saw that IP stopped resolving at a certain point and just filled the cachefile with asterisks.
[EMAIL PROTECTED] analog-5.32]# tail -f /etc/analog/dnscache.txt 17688690 209.110.233.45 dsc05-mnx-mn-3-45.rasserver.net 17688690 24.54.214.254 pa-dllsbrg2a-254.chvlva.adelphia.net 17688690 24.220.0.48 cache-sio.midco.net 17688690 172.157.128.48 AC9D8030.ipt.aol.com 17688690 65.35.161.238 6535161hfc238.tampabay.rr.com 17688690 205.188.208.139 cache-dg07.proxy.aol.com 17688690 205.188.208.7 cache-da03.proxy.aol.com 17688690 205.188.208.171 cache-dh07.proxy.aol.com 17688690 205.188.208.37 cache-db01.proxy.aol.com 17688690 68.56.219.162 pcp867494pcs.siestk01.fl.comcast.net 17688690 216.195.131.27 d-216-195-131-27.metrocast.net 17688690 24.233.153.177 user-0cej6dh.cable.mindspring.com 17688690 216.163.254.5 * 17688690 205.188.208.42 * 17688690 66.82.48.1 * 17688690 64.251.131.102 * 17688690 68.5.37.13 * 17688690 64.12.96.74 * 17688690 151.204.78.127 * 17688690 65.168.155.37 * 17688690 67.165.73.197 * 17688690 152.163.252.135 *
I did a reverse lookup of the first unresolved domain and got: [EMAIL PROTECTED] analog-5.32]# host 216.163.254.5 ;; connection timed out; no servers could be reached [EMAIL PROTECTED] analog-5.32]#
Later inspection of that IP showed that was in a "lookup loop." However, any IP after this first one resolved: [EMAIL PROTECTED] analog]# host 205.188.208.42 42.208.188.205.in-addr.arpa domain name pointer cache-db06.proxy.aol.com. [EMAIL PROTECTED] analog]#
Setting "DEBUG ON" shows the same behaviour:
[EMAIL PROTECTED] analog]# /usr/local/bin/analog +g/etc/analog/analog.cfg.pirates /usr/local/bin/analog: analog version 5.32/Unix F: Closing configuration file /etc/analog/analog.cfg.pirates F: Opening /usr/local/bin/lang/uk.lng as language file F: Closing language file /usr/local/bin/lang/uk.lng F: Opening /usr/local/bin/lang/ukdom.tab as domains file F: Closing domains file /usr/local/bin/lang/ukdom.tab F: Opening /usr/local/bin/lang/ukdesc.txt as report descriptions file F: Closing report descriptions file /usr/local/bin/lang/ukdesc.txt F: Opening /etc/analog/dnscache.txt as DNS input file F: Closing DNS input file /etc/analog/dnscache.txt F: Creating /usr/local/bin/dnslock.txt as DNS lock file F: Opening /etc/analog/dnscache.txt as DNS output file F: Opening /var/log/httpd/piratescove/access_log as logfile F: Detect that it's in NCSA combined format D: Looking up 205.242.228.75: D: resolved to ns10.statefarm.com D: Looking up 63.159.196.37: D: resolved to 0-1pool196-37.nas27.somerville1.ma.us.da.qwest.net <...snipped...> D: Looking up 68.160.5.109: D: resolved to pool-68-160-5-109.bos.east.verizon.net D: Looking up 66.196.90.28: D: resolved to lj1012.inktomisearch.com D: Looking up 4.46.248.152: D: resolved to atlnga1-ar4-4-46-248-152.atlnga1.dsl-verizon.net D: Looking up 164.145.1.175: D: can't resolve D: Looking up 67.0.119.215: D: can't resolve D: Looking up 68.19.8.212: D: can't resolve D: Looking up 81.101.24.86: D: can't resolve D: Looking up 24.118.171.47: D: can't resolve D: Looking up 68.110.29.20: D: can't resolve [EMAIL PROTECTED] ken]$ host 164.145.1.175 ;; connection timed out; no servers could be reached [EMAIL PROTECTED] ken]$ [EMAIL PROTECTED] ken]$ host 67.0.119.215 215.119.0.67.in-addr.arpa domain name pointer 0-1pool119-215.nas8.tucson1.az.us.da.qwest.net. [EMAIL PROTECTED] ken]$ [EMAIL PROTECTED] ken]$ host 68.19.8.212 212.8.19.68.in-addr.arpa domain name pointer adsl-19-8-212.asm.bellsouth.net. [EMAIL PROTECTED] ken]$
It appears as if Analog stops doing lookups if it runs into a DNS that isn't properly configured or returns an invalid response.
Has anyone else seen this?
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
