Salaam!
First, I thought MetaPad was on site at http://www.muslimamerica.net/aj/mpad20.zip ~ but it wasn't. It is now.
I've also uploaded 164,592 resolved IP addresses in Analog format, zipped into 2.36 Mb (the file, dns.txt, is 8.88 Mb). Analog and QuickDNS open it in under a second, MetaPad takes about five seconds. The time stamps are all within the last two days. There are no unresolved IP addresses in the file.
Aengus wrote:
> hajj abujamal wrote: >> I'd sure like to see a "No NetBIOS name lookup" option >> for Analog, though. That's what slows down Analog.
> Analog doesn't have OS specific DNS lookup code - that's > one of the reasons why DNS helper apps are recommended. > Analog isn't doing the NetBIOS lookups, Windows is.
Windows is a blemish on an otherwise stupendous work of art. Analog is so blazingly fast, it's a crying shame to mar its performance with Windows' defaults.
> By the way, you might want to check out RDNSLogs as well as, or > instead of, QDNS. QDNS is "quirky" - it doesn't seem to work in > exactly the same way for everybody.
ROFL! Tell me about it!
But is this a bug, or a feature?
QuickDNS encountered a canonical name with an illegal character at line 131075 of my DNS cache file, and failed to load the rest of 137,746 entries. In the first Log file, it queued 6825 "new" IP addresses, and in the second, 9775. When I stopped QDNS and replaced the illegal character (the number of entries loaded pointed to the vicinity of the line), QDNS loaded all 137746 entries and queued 6650 and 9659 actually "new" IP addresses. Had I not stopped it, it would have written a corrupted cache file, throwing out 6,671 IP addresses already resolved.
This was the second canonical name QDNS found with corrupted characters at the end of a long url; QDNS also detected a third corrupted url, containing a space near the beginning of an average-length url, and did the same thing ~ failed to load the rest of the cache file. What I don't know is whether the long urls with the illegal characters at the end were from the DNS server or whether they were simply too long for QDNS. The one with the space near the beginning definitely came from the DNS server, I've seen it before; but the curious characters at the end are new.
> JDResolve is a tool that does a lot of the "fake hostname" stuff that > you are doing, but unfortunately it's not built for Windows - it's > been a few years since I (unsuccessfully) tried to get it running > under Windows, but you might have more luck.
I'm happy with QDNS, now that I know what to watch. I back up my DNS cache before I use it, then check its results with Analog and with a second QDNS run on the new cache file. When there's a fix to the illegal character problem, I'll give the new version a try.
What I've decided to do is find the IP addresses of DNS servers on other continents and give those to QDNS, to see whether I can resolve some of those. When I went through the unresolveds by hand the other day, I found a lot of addresses that may have canonical names listed in Paraguay, more in Amsterdam, more in Australia. I think it's a matter of finding the right DNS server for those locations, and QDNS can do thirty thousand lookups fast enough to suit me.
But I know there are at least three Class A networks registered in Amsterdam that are completely hidden ~ no canonical names for more than their routers and principal offices, nearly the entire network is "Unresolved IP address," apparently deliberately so. It's not possible to locate any of them nearer than "Eastern hemisphere" (maybe) ~ although there are some smaller networks that can be located, for example, the UAE has a considerably smaller block of an otherwise obscured Class A network out of Amsterdam. So does the Vatican.
But I do know that doing an IP lookup in France can yield quite different results than looking up the same IP in America. PCHelp's Network Tracer does WhoIs lookups at different agencies until it finds a record ~ so far, it's only failed to locate WhoIs servers for Palestine and the Vatican.
Then I have that list of IP addresses from which the IDA Code Red Worm came a couple of years ago ~ about 750,000 addresses for QDNS to chew over for a while. That'll be fun to watch, since QDNS can pick out the IP address heuristically from the log file. Between TDIMon's packet listings and DUNMonitor's graph, it's pretty easy to see what QDNS is doing ~ it's so fast it doesn't even show up in TCPView, I'd never seen upload speeds like this on my twisted copper.
When I've resolved all I can by using other DNS servers (when I can get the IP addresses of those other servers), then I'll probably spend a little time identifying the networks where I see a lot of IP addresses in the logs, and assign them a pseudo-canonical name so Analog can list them in at least the correct domain.
Eventually, I may even be able to resolve IP addresses from Palestine ~ the TLD is .ps, but I haven't seen a canonical name from there yet. The Vatican was in my logs yesterday ... reading http://www.muslimamerica.net/mp/siyasa.htm ... Father Stefano Pasquini found me in a Google search. "michael.vatican.va" ~ sounds ominous, what?
> Aengus
was-salaam, abujamal -- astaghfirullahal-ladhee laa ilaha illa howal-hayyul-qayyoom wa 'atoobu 'ilaihi
Rejoice, muslims, in martyrdom without fighting, a Mercy for us. Be like the better son of Adam.
+------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
