Resolve domains in log files?

 
Post new topic   Reply to topic    Aprelium Forum Index -> General Questions
View previous topic :: View next topic  
Author Message
bean
-


Joined: 10 Feb 2005
Posts: 20

PostPosted: Thu Jul 27, 2006 10:15 am    Post subject: Resolve domains in log files? Reply with quote

Is it possible to log the visitors domain names instead of their IPs to access.log?
Back to top View user's profile Send private message
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Thu Jul 27, 2006 10:21 am    Post subject: Reply with quote

Impossible, as not all visitors are domain names. You can do a reverse dns check on the IP to see if it resolves to a domain name though.
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
bean
-


Joined: 10 Feb 2005
Posts: 20

PostPosted: Thu Jul 27, 2006 10:34 am    Post subject: Reply with quote

No its not impossible - just a question of Aprelium have a way to do it now or it has to be compiled into the code first.
Back to top View user's profile Send private message
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Thu Jul 27, 2006 11:17 am    Post subject: Reply with quote

bean wrote:
No its not impossible - just a question of Aprelium have a way to do it now or it has to be compiled into the code first.


How can you assign a domain name to someone who has a regular internet connection and doesn't run any websites?
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
olly86
-


Joined: 25 Apr 2003
Posts: 993
Location: Wiltshire, UK

PostPosted: Thu Jul 27, 2006 2:12 pm    Post subject: Reply with quote

No it's not impossible. You can do a "reverse DNS" lookup on the IP address, for instance mine is similar to this:
cpc2-swin5-0-0-cust000.brhm.cable.ntl.com
_________________
Olly
Back to top View user's profile Send private message
Anonymoose
-


Joined: 09 Sep 2003
Posts: 2192

PostPosted: Thu Jul 27, 2006 3:57 pm    Post subject: Reply with quote

It's time consuming and not all IP's have a valid reverse DNS configured. Would be a performance hit. Best left to log file analyser utilities...
_________________

"Invent an idiot proof webserver and they'll invent a better idiot..."
Back to top View user's profile Send private message
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Thu Jul 27, 2006 3:57 pm    Post subject: Reply with quote

olly86 wrote:
No it's not impossible. You can do a "reverse DNS" lookup on the IP address, for instance mine is similar to this:
cpc2-swin5-0-0-cust000.brhm.cable.ntl.com


I know thats possible, but who would want to know the reverse DNS for every record in their log?
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
olly86
-


Joined: 25 Apr 2003
Posts: 993
Location: Wiltshire, UK

PostPosted: Thu Jul 27, 2006 4:16 pm    Post subject: Reply with quote

I know it's not always possible and very time consuming, however I was correcting the wrong info stating it was impossible. What might have been better to state is that it's unpractical.
_________________
Olly
Back to top View user's profile Send private message
TRUSTAbyss
-


Joined: 29 Oct 2003
Posts: 3752
Location: USA, GA

PostPosted: Thu Jul 27, 2006 4:28 pm    Post subject: Reply with quote

You should use a Web Log Analyzer to do a reverse DNS lookup. You will be
able to see their IP's as domains if you do that.

Here's a few log Analyzers that may be able to do this.

Funnel Web Analyzer
http://www.quest.com/funnel_web_analyzer/index.asp

Weblog Expert
http://www.weblogexpert.com


Last edited by TRUSTAbyss on Thu Jul 27, 2006 4:31 pm; edited 1 time in total
Back to top View user's profile Send private message Visit poster's website
AbyssUnderground
-


Joined: 31 Dec 2004
Posts: 3855

PostPosted: Thu Jul 27, 2006 4:30 pm    Post subject: Reply with quote

olly86 wrote:
I know it's not always possible and very time consuming, however I was correcting the wrong info stating it was impossible. What might have been better to state is that it's unpractical.


I meant it would be impossible to implement it into Abyss because it didnt always work, but I didn't state that.

Quote:
You should use a Web Log Analyzer to do a reverse DNS lookup. You will be able to see their IP's as domains if you do that.


You can also use tracert at the cmd prompt to do it. Although as stated, no all IP's have a reverse DNS.
_________________
Andy (AbyssUnderground) (previously The Inquisitor)
www.abyssunderground.co.uk
Back to top View user's profile Send private message Visit poster's website
aprelium
-


Joined: 22 Mar 2002
Posts: 6800

PostPosted: Thu Jul 27, 2006 4:32 pm    Post subject: Re: Resolve domains in log files? Reply with quote

bean wrote:
Is it possible to log the visitors domain names instead of their IPs to access.log?


You can post process the log file using a tool which will replace IPs with their domain names (if possible).
_________________
Support Team
Aprelium - http://www.aprelium.com
Back to top View user's profile Send private message Send e-mail
bean
-


Joined: 10 Feb 2005
Posts: 20

PostPosted: Tue Aug 01, 2006 8:34 am    Post subject: Re: Resolve domains in log files? Reply with quote

aprelium wrote:
You can post process the log file using a tool which will replace IPs with their domain names (if possible).


We already have a payed weblog analyzer but it doesn't do reverse DNS of the log file. We use to run Apache which have reverse DNS. My boss wanted to see which countries people where coming from. So that's why I asked.
Back to top View user's profile Send private message
aprelium
-


Joined: 22 Mar 2002
Posts: 6800

PostPosted: Tue Aug 01, 2006 1:50 pm    Post subject: Re: Resolve domains in log files? Reply with quote

bean,

Even on Apache, reverse DNS lookups are not recommended because they are a performance hog: http://httpd.apache.org/docs/1.3/mod/core.html#hostnamelookups reads:

Quote:
The default for this directive was previously on in versions of Apache prior to 1.3. It was changed to off in order to save the network traffic for those sites that don't truly need the reverse lookups done. It is also better for the end users because they don't have to suffer the extra latency that a lookup entails. Heavily loaded sites should leave this directive off, since DNS lookups can take considerable amounts of time. The utility logresolve, provided in the /support directory, can be used to look up host names from logged IP addresses offline.

_________________
Support Team
Aprelium - http://www.aprelium.com
Back to top View user's profile Send private message Send e-mail
pkSML
-


Joined: 29 May 2006
Posts: 952
Location: Michigan, USA

PostPosted: Tue Aug 01, 2006 10:12 pm    Post subject: Reply with quote

You might find this URL helpful: http://www.gvisit.com/. There are other websites that offer this same type of service.
_________________
Stephen
Need a LitlURL?


http://CodeBin.yi.org
Back to top View user's profile Send private message Visit poster's website
bean
-


Joined: 10 Feb 2005
Posts: 20

PostPosted: Sat Aug 05, 2006 8:50 pm    Post subject: Reply with quote

pkSML wrote:
You might find this URL helpful: http://www.gvisit.com/. There are other websites that offer this same type of service.


Thanks! I will use that.
Back to top View user's profile Send private message
pkSML
-


Joined: 29 May 2006
Posts: 952
Location: Michigan, USA

PostPosted: Sun Aug 06, 2006 1:28 pm    Post subject: Reply with quote

I found the website I was originally looking for. It's ClustrMaps. It works a lot like Gvisit.
_________________
Stephen
Need a LitlURL?


http://CodeBin.yi.org
Back to top View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Aprelium Forum Index -> General Questions All times are GMT + 1 Hour
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB phpBB Group