I run analog for a site. This site has 4 logs (for 4 months). If the log files are 1 GB each uncompressed, any DNS resolution will take up 40 mins or more for each log. So, what I was thinking was: If I only want to display the top 10 organizations, why on earth I will do a dns resolution for all the entries in the log files..
But, as you all said, there is no way to do this... Let me think of something better.
Maybe optimizing the file reading... instead of reading all the lines again, just read from the last point... I don't know, I'm just dreaming out loud....
I will be playing with this.... Keep you in touch.
Normal DNS helpers
From: Klaus Johannes Rusch <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [analog-help] Helper dev app question... Date: Sat, 23 Aug 2003 17:44:08 +0000
Agustin Chernitsky wrote:
> I want to write a perl script for DNS resolutions (and make it public in the
> site). I want this app to process computer output before it goes into
> ReportMagic.
>
> My question is, how can I do this? If I specify to analog not to resolve
> DNS, I get no IPs listed in the Organization section (I get unresolved
> numerical addresses), which is correct. But my idea was to resolve all IPs
> listed in that section, and on many others.
>
> I think this approach will be the fastest, since you can specify how many
> results you want to be included in the report and the DNS resolver will only
> process those lines.
>
> Is there a way to force analog to include the IPs in the organization report
> (or any other that requieres DNS resolution)?
You could rewrite the addresses, for example
HOSTALIAS REGEXP:^(\d+)\.(\d+)\.(\d+)\.(\d+)$ $4.$3.$2.$1.in-addr.arpa
The idea of postprocessing output is certainly interesting, although results
could be misleading if you only resolve the top n addresses. Resolving all
addresses prior to running analog is probably the preferred choice for most
analog users.
-- Klaus Johannes Rusch [EMAIL PROTECTED] http://www.atmedia.net/KlausRusch/
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
