It doesn't and won't work that way. It's possible for multiple IP addresses to map to the same host name and you can add HOSTINCLUDE/HOSTEXCLUDE and HOSTALIAS commands match hostnames as well. In both cases, Analog needs to know the hostname of all IP's in the log file to make sure it's properly applying the rules.
If you use DNS WRITE, Analog will create a cache file of all the lookups it has successfully identified and not look those up the next time it runs. There are also a host of helper applications that can do asynchronous, multithreaded lookups much faster than Analog. See http://analog.cx/docs/helpers/#dns. -- Jeremy Wadsack Seven Simple Machines -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Kellogg Sent: Tuesday, January 10, 2006 7:37 AM To: [email protected] Subject: [analog-help] DNS lookups for only hosts listed in Host Report Hi, I just tried turning on DNS lookups and was surprised to see that it was looking up ?all? IP addresses. Is there a command that will make it only look up the 100 IP addresses that show up in the Host & Organization Reports instead of the 200,000 that visit my site daily? Thanks, and thanks to Stephen for the great log analyzer. __________________________________________ Yahoo! DSL - Something to write home about. Just $16.99/mo. or less. dsl.yahoo.com +----------------------------------------------------------------------- - | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +----------------------------------------------------------------------- - +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Analog Documentation: http://analog.cx/docs/Readme.html | List archives: http://www.analog.cx/docs/mailing.html#listarchives | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general +------------------------------------------------------------------------
