I'm not certain I understand your question. However, I personally have never seen host names in the "Last Contacted Peers" (LCP) table. Even if 1.1.1.1 resolves to www.gary.net and is displayed in other reports as www.gary.net, it always shows up as 1.1.1.1 in the LCP table. For me this has always been the case - as far as I recall. Someone recently posted a similar question / statement, claiming his LCP WAS showing hostnames until an ntop upgrade, and he tweaks the name res options (-n 2 I think) and it started displaying names again. Perhaps google for ntop and Last Contacted Peers and see what you find, this thread was in the last 4 - 8 weeks IIRC.
As for the resolution process in general; ntop "sniffs" packets as well as performs name/IP lookups. It's typically pretty good at resolving things. Also, from my experience multicast IP's are nearly impossible to resolve to a host / unicast IP address. Some are well known / reserved, but 224.0.0.52 appears to not be. I'm thinking I didn't answer your question, but hopefully at least pointed you in the right direction. G -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of casey rhoads Sent: Thursday, June 30, 2011 1:30 PM To: [email protected] Subject: [Ntop] Last Contacted Peers I have installed NTOP 4.0.3 on arch linux it shows all last contacted peers that are outside of the network as multicast dns such as 224.0.0.52 i need to change this to the actual name of the website. How would i go about getting these to resolve to websites. Thank you in advance Casey _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
