Hi people! Just wanted to tell you that preprocessing was indeed the way to go : I've eventually come up with a solution in VBScript, putting the DHCP log in a MSJet database, and launching queries based on IP and date/time to retrieve the host name for each line of the IIS log. I used vbs code from Christopher G. Lewis - HTTP://www.ChristopherLewis.com - to a great extent to help me get started, though I had to custom tailor the DHCP resolution part. Unfortunately, my vbs code is slow as hell, I'll be work on that today (if anyone has any suggestion, they are of course always welcome!)
I know it's been a week since I last posted, but I just wanted to thank Adrian and Jeremy for their precious advice. If anyone wants to know more about this I'll be glad to share. Bruno ----- Original Message ----- From: "Dolling, Adrian CAWS:EX" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 05, 2003 6:43 PM Subject: RE: [analog-help] analog on an intranet with dhcp > Hi Bruno, > > For the future, can you configure the webserver to resolve the IP to the > hostname at the time it writes the entry to the log? If your server is near > peak load, this may be expensive. I am not sure IIS can be configured this > way. > > For historical logs, analog cannot deal with the time varying association - > so you must preprocess, as Jeremy points out. > > Adrian > > Adrian Dolling, Systems Consultant > Public Library Services Branch > Ministry of Community, Aboriginal and Women's Services > PO Box 9490 Stn Prov Govt (mailing address) > Victoria BC V8W 9N7 > > 800 Johnson St, Victoria, BC (street address) > > mailto:[EMAIL PROTECTED] (New EMail December 2002) > www.mcaws.gov.bc.ca/LGD/public_libraries/ > Tel 250-387-4043 or 1-800-663-7051 > FAX 250-953-3225 > > > -----Original Message----- > From: Jeremy Wadsack [mailto:[EMAIL PROTECTED] > Sent: June 5, 2003 9:34 AM > To: [EMAIL PROTECTED] > Subject: Re: [analog-help] analog on an intranet with dhcp > > > > Bruno Adamo ([EMAIL PROTECTED]; Thursday, June 05, 2003 12:52 AM): > > > Hi everybody > > I am currently trying to exploit our IIS server logs to get manageable > > usage reports of the company intranet : analog looks like just the > > right tool to do this! but the catch is, I have been asked to identify > > each user by his computer host name. I thus have to use some kinf of > > DNS lookup to convert the IP address contained in the log files into a > > host name. Unfortunately, we are using DHCP assigned IPs, so the > > relationship between an IP and a host name is kind of time-dependent. > > I have access to a log file which traces the IP changes of every > > connected host, it looks like : > > > <hostname>;<IP>;04/02/02 19:29:36 > > <hostname>;<IP>;04/02/02 19:30:48 > > <hostname>;<IP>;04/03/02 11:28:59 > > etc... > > > I was wondering if there was a way to use this as a kind of dns cache > > file, maybe by converting the date/time into a timestamp? anyway, I > > need to resolve the IPs in my IIS log to the host that was using it at > > that time, so I would really apreciate it if someone could tell me > > wether I have any chance of success using this DHCP log with analog, > > or if I should try to find another piece of software which would make > > my life easier :-) thanks a lot for any suggestions > > Well, I think the best bet is just to pre-process and rewrite your log files > using the hostnames in place of the IP addresses. That way they are stored > permanently in the data. Doing the lookup and rewrite could be very simple > with a script (perl, vbscript, ...). > > > -- > > Jeremy Wadsack > Wadsack-Allen Digital Group > > +----------------------------------------------------------------------- > +- > | TO UNSUBSCRIBE from this list: > | http://lists.isite.net/listgate/analog-help/unsubscribe.html > | > | Digest version: http://lists.isite.net/listgate/analog-help-digest/ > | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general > | List archives: http://www.analog.cx/docs/mailing.html#listarchives > +----------------------------------------------------------------------- > +- > +------------------------------------------------------------------------ > | TO UNSUBSCRIBE from this list: > | http://lists.isite.net/listgate/analog-help/unsubscribe.html > | > | Digest version: http://lists.isite.net/listgate/analog-help-digest/ > | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general > | List archives: http://www.analog.cx/docs/mailing.html#listarchives > +------------------------------------------------------------------------ +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.isite.net/listgate/analog-help/unsubscribe.html | | Digest version: http://lists.isite.net/listgate/analog-help-digest/ | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
