Salaam!

Dimitri Maziuk wrote:

> Michael Kellogg wrote:
>> I have no desire to look up the thousands of IPs every day,
>> just 100.  I guess I'll keep doing what I've always done.

> They don't look up thousands of IPs every day.

   Just for my own curiosity, since I've been applauding QuickDNS:

15:46:00 begin reading 932,119 cached DNS entries in 44.6 Mb DNS cache file, 699,970 of which are unresolved;

15:46:10 finish reading DNS cache; begin reading 10 Mb of log files containing 53,177 unique IP addresses, and checking them against the DNS cache

15:46:26 begin resolving 12,126 new IP addresses using 45 kbits/second dialup, sending out 25-second bursts of DNS requests

16:03:28 resolution complete; begin writing new DNS cache file of 944,244 IP addresses

16:03:46 complete writing new DNS 45.2 Mb cache file

Time elapsed:  17:46

I seriously doubt whether it could be done very much faster, unless the weather had been better for my dialup connection or someone was using a high-speed connection.

HOWEVER, I have found that QuickDNS can find IP addresses in just about any file. I've run it on my firewall logs, and on at least one other type of file containing some IP addresses (I've forgotten which it was ~ eMail files?), and it identifies the ###.###.###.### formatted IP address and runs with it.

   SO one possible solution for Michael Kellogg would be to:

1. Run Analog once using a configuration file to produce a restricted report showing the desired visiting hosts, with "DNS Read" set, and as little else as is possible to configure;

2. Run QuickDNS on that report, writing a new DNS cache file adding only those host addresses reported by Analog;

3. Run Analog again using a configuration file to produce the final desired report, again with "DNS Read" set.

   Should be faster than doing it by hand.

> Dima

was-salaam,
abujamal

+------------------------------------------------------------------------
|  TO UNSUBSCRIBE from this list:
|    http://lists.meer.net/mailman/listinfo/analog-help
|
|  Analog Documentation: http://analog.cx/docs/Readme.html
|  List archives:  http://www.analog.cx/docs/mailing.html#listarchives
|  Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------

Reply via email to