On Friday, January 07, 2005 8:52 AM [GMT], [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>> I am running IIS on windows 2000 Server and the latest Service Packs. >> All extended properties are checked for logging. >> For some reason ALL hosts are unresolved as shown below... ...... >> >> >> Listing domains, sorted by the amount of traffic. >> >> reqs %bytes domain >> 231182 100% [unresolved numerical addresses] >> >> >> The actual log files have the resolved host names. A sample of the >> files is shown here... >> >> #Software: Microsoft Internet Information Services 5.0 >> #Version: 1.0 >> #Date: 2005-01-07 04:59:59 >> #Fields: date time c-ip cs-username s-sitename s-computername s-ip >> s-port cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status >> sc-bytes cs-bytes time-taken cs-version cs-host cs(User-Agent) >> cs(Cookie) cs(Referer) >> 2005-01-07 04:59:59 209.237.238.172 .... >> 2005-01-07 05:00:10 66.249.71.74 .... >> 2005-01-07 05:00:10 68.142.250.138 .... >> 2005-01-07 05:00:10 66.249.71.74 .... 209.237.238.172, 66.249.71.74, 68.142.250.138, 66.249.71.74 are the hostnames (c-ip) in your logfile - they aren't resolved. Analog doesn't do DNS resolution by default. Note that, because of the difficulty of doing DNS resolution on a cross platform basis, Analog isn't terribly efficient about doing DNS resolution. Given the number of unresolved addresses you indicate, Analog could take many hours to do a first report with DNS resolution on. You might want to check out some of the DNS resolution tools listed on the Helpers page. Aengus +------------------------------------------------------------------------ | TO UNSUBSCRIBE from this list: | http://lists.meer.net/mailman/listinfo/analog-help | | Usenet version: news://news.gmane.org/gmane.comp.web.analog.general | List archives: http://www.analog.cx/docs/mailing.html#listarchives +------------------------------------------------------------------------
