LKBEN11014: Analog report shows "unresolved numerical addresses" in listing domains section


This article has not been checked!

LKB | Created: 02/04/2020 | Version: 0 | Language: EN | Rating: 0 | Outdated: False | Marked for deletion: False

Author: Wim Peeters - Keskon GmbH & Co. KG


Symptom

Unresolved numerical addresses in the report means that you do not have dns information

Cause

Wrong configuration in /etc/analog.cfg

Solution

In the log files of your webserver you will find the ip addresses of the clients who accessed your server. The ip address is a numerical information. To find the dns domain, the country, the dns top level domain or the clients name, you need to resolve this information to a FQDN (fully qualified domain name)

Analog can do this for you. This means analog reads the log file of the web server, resolves the ip address, and than generates statistical information about it. This is relatively slow. (because it takes a while to resolve all those names)

When you have the "unresolved numerical addresses" in the report, you just need to add two lines to your /etc/analog.cfg file.

dns WRITE

dnsFILE analog-dns-cache

When you run analog now, the report will contain the accesses of the top level domains. 

About the Author

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux in different European countries and different European languages. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform where he is one of the most important contributors and the main developer.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!