On Wednesday, March 01, 2006 8:24 AM [EDT],
Aengus <[EMAIL PROTECTED]> wrote:
> On Tuesday, February 28, 2006 4:44 PM [EDT],
> Aengus <[EMAIL PROTECTED]> wrote:
>
>> The Error file says "In Domain Report, turning off empty pie chart",
>> so it looks as though Analog won't expand Unresolved domain names.
>
> I was able to expand the unresolved names in the Domain Report, but
> only to 2 levels, much the same as the Organization Report.
>
> DOMCHARTEXPAND 172
> DOMCHARTEXPAND "[unresolved numerical addresses]"
Okay, try this:
HOSTALIAS REGEXP:172\.26\.(\d{1,3})\.(\d{1,3})$ $1.net
This will give you an Organization Report that contains a list
<3rdOctet>.net "organizations",
eg if you have 22 hits from 172.26.147.12, and 36 hits from 172.26.147.108,
then 147.net will be listed with 58 requests.
If you need to identify indivdual hosts as well, use $2.$1.net instead.
You have to use a known TLD as the suffix, unless you want to update Analogs
.dom files
Aengus
+------------------------------------------------------------------------
| TO UNSUBSCRIBE from this list:
| http://lists.meer.net/mailman/listinfo/analog-help
|
| Analog Documentation: http://analog.cx/docs/Readme.html
| List archives: http://www.analog.cx/docs/mailing.html#listarchives
| Usenet version: news://news.gmane.org/gmane.comp.web.analog.general
+------------------------------------------------------------------------
