Henk Schrik <[EMAIL PROTECTED]> wrote:

You really should keep correspondence on the list, unless explicitly
asked to take it off list. There are always other people who are
knowledgeable about any given area, and in this case I've used QuickDNS,
but I don't pay much attention to DNS issues in general, so I'm not the
best person to help in this instance. I'm sending this reply to the
list, rather than directly to you.

> Well it ook me a little time to reproduce my problem to you.
> But here it is, forgive me the 3 attachments, but the 3 files
> represent 3 ways of getting to a translated ip -> domainname file.
>
> The first, called DNSCACHE.TXT is the file that emerged, used,
> and succesfully used, also reading afterwards, when executing
> analog from dos-prompt. It did take about 20 minutes though.

17036043 66.28.250.176 *
17036043 212.19.205.136 alfredo.wise-guys.nl
17036043 216.200.130.203 *
17036043 216.239.46.204 crawl8.googlebot.com

The first field here is a timestamp, telling Analog when the lookup was
performed, so that it can check it for "freshness" after DNSGOODHOURS or
DNSBADHOURS. The second field is the IP address, which is what Analog
looks for as it reads each line from the log.

> The second, called DNSDNS.TXT is the file that resulted from
> using lookupIP (less then a minute). When using this file thereafter
> by analog,
> the results from analog dont show domainnames, but the original
> ip-numbers.

1022157314 66.28.250.176 *
1022157334 alfredo.wise-guys.nl alfredo.wise-guys.nl
1022157338 216.200.130.203 *
1022157299 crawl8.googlebot.com crawl8.googlebot.com

According to the LookupIP website, it's designed to replace IP numbers
in files with names. In other words, it modifies the logfile, and puts
the IP names into the logfile. It also creates it's own cache file, but
it looks like it's not the same format as Analogs DNS cache file.
(Firstly, the timestamp is two orders of magnitude larger than the one
that Analog uses - I assume that this means that Analog will consider
these lookups unreliable. Secondly, the IP addresses for successful
lookups aren't listed here, so Analog has no way of comparing the IP
addresses in the log files with the names recorded in this lookup file).

> The third, called DNSOUT.IP is the file that resulted from
> using quickdns/qdns (about a minute). Also here, when using this file
> within analog
> the results show ip-numbers, no domainnames.... etc.

21498495 212.19.205.136 alfredo.wise-guys.nl
21498478 216.239.46.204 crawl8.googlebot.com

In this case, the time stamp is way out as well. I just checked on my
machine, and QuickDNS created virtually the same timestamp as Analog did
(they ran a few minutes apart, and produced timestamps of 17036103 and
17037607). It also looks like QuickDNS on your machine didn't store
unresolved addresses (the /S option when you run it).

I don't know why you are getting odd timestamps with QuickDNS, and I've
never used lookupIP, so I can't offer much advice there. I would
recommend that you debug using a short log file of 3 or 4 lines, though.
It should make it easier to spot any obvious issues.

Aengus

+------------------------------------------------------------------------
|  This is the analog-help mailing list. To unsubscribe from this
|  mailing list, go to
|    http://lists.isite.net/listgate/analog-help/unsubscribe.html
|
|  List archives are available at
|    http://www.mail-archive.com/analog-help@lists.isite.net/
|    http://lists.isite.net/listgate/analog-help/archives/
|    http://www.tallylist.com/archives/index.cfm/mlist.7
+------------------------------------------------------------------------

Reply via email to