t: Re: [pmacct-discussion] Outputting DNS equivalent of src_host and
dst_host IP addresses?
Hi Hiep,
Unfortunately this is not possible today nor in the roadmap. The easiest
thing that comes to mind is a two-steps kind of export: you export from
pmacct into a script, running local, that enriche
; Bill Nash
> Sent: Monday, December 5, 2016 3:27 PM
> To: pmacct-discussion@pmacct.net
> Cc: Steven Sheehy; Mark Ponthier
> Subject: Re: [pmacct-discussion] Outputting DNS equivalent of src_host and
> dst_host IP addresses?
>
> DNS lookups will effectively rate limit f
, 2016 3:27 PM
To: pmacct-discussion@pmacct.net
Cc: Steven Sheehy; Mark Ponthier
Subject: Re: [pmacct-discussion] Outputting DNS equivalent of src_host and
dst_host IP addresses?
DNS lookups will effectively rate limit flow export, though, even if you're
hitting a cache. Do it after the fact i
DNS lookups will effectively rate limit flow export, though, even if you're
hitting a cache. Do it after the fact in your presentation layer with a
cache, don't do it at the collection level, because you'll also have to
store it. I dunno what your flow volume is, but this is generally a bad
idea. Y
When aggregating on src_host and dst_host, the outputs are IP addresses. Is it
possible to also get DNS equivalent? Can pmacct perform a reverse DNS lookup
and output it along with the IP addresses?
If not, is there a workaround involving the 'networks_file' option where both
IP address and
