Privacy Policy

Guest
  • Guest
  • Guest Topic Starter
2001-12-28T09:00:33Z
Date parsed: 12/28/2001 9:00:33 AM
Date: Fri, 28 Dec 2001 16:00:33 -0600

Am trying SL4NT 2.1 to capture syslog events from Cisco boxes. IP addresses
are not being resolved to their DNS entries - the line shows "???" instead
of the name. The router has domain-name set and name-server has our local
DNS listed first. Test messages from my PC do have its hostname fully
resolved. Boxes are all in the same subnet.

Any ideas?

Thanks in advance,
Stephen Voss



Guest
  • Guest
  • Guest Topic Starter
2001-12-28T23:31:41Z
Date parsed: 12/28/2001 11:31:41 PM
Date: Fri, 28 Dec 2001 23:31:41 +0100

Hi Stephen,

on the computer running SL4NT, execute the command "ping -a
<ip-address-of-router>.

Is the ip-address of the router resolved to its hostname?
I guess not and I suspect that there is no PTR record for the router in the
reverse-lookup zone on your DNS server.

Franz


"Stephen J. Voss" <stephen.voss@texanamhmr.com> wrote in message
news:X83hLs#jBHA.2732@is1.netal.com...
> Am trying SL4NT 2.1 to capture syslog events from Cisco boxes. IP
addresses
> are not being resolved to their DNS entries - the line shows "???" instead
> of the name. The router has domain-name set and name-server has our local
> DNS listed first. Test messages from my PC do have its hostname fully
> resolved. Boxes are all in the same subnet.
>
> Any ideas?
>
> Thanks in advance,
> Stephen Voss
>
>
>


Guest
  • Guest
  • Guest Topic Starter
2002-01-03T03:36:05Z
Date parsed: 1/3/2002 3:36:05 AM
Date: Thu, 3 Jan 2002 10:36:05 -0600

Franz,

Thanks much. That's exactly what was missing. By default, wonderful
Windows 2000 Server doesn't create a reverse-lookup zone. But after
creating one, and populating with the router information, the logs now
resolve names.

FYI - for some reason, Cisco routers don't seem to send to Win2K the
necessary information to automatically populate the reverse-lookup tables.
PCs however do send the info if the host name and domain are filled out in
Network Properties for TCP/IP under DNS.

"Franz Krainer" <franzk@netal.com> wrote in message
news:YL1qZ9#jBHA.1636@is1.netal.com...
> Hi Stephen,
>
> on the computer running SL4NT, execute the command "ping -a
> <ip-address-of-router>.
>
> Is the ip-address of the router resolved to its hostname?
> I guess not and I suspect that there is no PTR record for the router in
the
> reverse-lookup zone on your DNS server.
>
> Franz
>
>
> "Stephen J. Voss" <stephen.voss@texanamhmr.com> wrote in message
> news:X83hLs#jBHA.2732@is1.netal.com...
> > Am trying SL4NT 2.1 to capture syslog events from Cisco boxes. IP
> addresses
> > are not being resolved to their DNS entries - the line shows "???"
instead
> > of the name. The router has domain-name set and name-server has our
local
> > DNS listed first. Test messages from my PC do have its hostname fully
> > resolved. Boxes are all in the same subnet.
> >
> > Any ideas?
> >
> > Thanks in advance,
> > Stephen Voss
> >
> >
> >
>
>


Similar Topics