Privacy Policy

Guest
  • Guest
  • Guest Topic Starter
2001-12-28T09:00:33Z
Date parsed: 12/28/2001 9:00:33 AM

Date: Fri, 28 Dec 2001 16:00:33 -0600

Am trying SL4NT 2.1 to capture syslog events from Cisco boxes. IP addresses

are not being resolved to their DNS entries - the line shows "???" instead

of the name. The router has domain-name set and name-server has our local

DNS listed first. Test messages from my PC do have its hostname fully

resolved. Boxes are all in the same subnet.

Any ideas?

Thanks in advance,

Stephen Voss

Guest
  • Guest
  • Guest Topic Starter
2001-12-28T23:31:41Z
Date parsed: 12/28/2001 11:31:41 PM

Date: Fri, 28 Dec 2001 23:31:41 +0100

Hi Stephen,

on the computer running SL4NT, execute the command "ping -a

<ip-address-of-router>.

Is the ip-address of the router resolved to its hostname?

I guess not and I suspect that there is no PTR record for the router in the

reverse-lookup zone on your DNS server.

Franz

"Stephen J. Voss" <stephen.voss@texanamhmr.com> wrote in message

news:X83hLs#jBHA.2732@is1.netal.com...

> Am trying SL4NT 2.1 to capture syslog events from Cisco boxes. IP

addresses

> are not being resolved to their DNS entries - the line shows "???" instead

> of the name. The router has domain-name set and name-server has our local

> DNS listed first. Test messages from my PC do have its hostname fully

> resolved. Boxes are all in the same subnet.

>

> Any ideas?

>

> Thanks in advance,

> Stephen Voss

>

>

>

Guest
  • Guest
  • Guest Topic Starter
2002-01-03T03:36:05Z
Date parsed: 1/3/2002 3:36:05 AM

Date: Thu, 3 Jan 2002 10:36:05 -0600

Franz,

Thanks much. That's exactly what was missing. By default, wonderful

Windows 2000 Server doesn't create a reverse-lookup zone. But after

creating one, and populating with the router information, the logs now

resolve names.

FYI - for some reason, Cisco routers don't seem to send to Win2K the

necessary information to automatically populate the reverse-lookup tables.

PCs however do send the info if the host name and domain are filled out in

Network Properties for TCP/IP under DNS.

"Franz Krainer" <franzk@netal.com> wrote in message

news:YL1qZ9#jBHA.1636@is1.netal.com...

> Hi Stephen,

>

> on the computer running SL4NT, execute the command "ping -a

> <ip-address-of-router>.

>

> Is the ip-address of the router resolved to its hostname?

> I guess not and I suspect that there is no PTR record for the router in

the

> reverse-lookup zone on your DNS server.

>

> Franz

>

>

> "Stephen J. Voss" <stephen.voss@texanamhmr.com> wrote in message

> news:X83hLs#jBHA.2732@is1.netal.com...

> > Am trying SL4NT 2.1 to capture syslog events from Cisco boxes. IP

> addresses

> > are not being resolved to their DNS entries - the line shows "???"

instead

> > of the name. The router has domain-name set and name-server has our

local

> > DNS listed first. Test messages from my PC do have its hostname fully

> > resolved. Boxes are all in the same subnet.

> >

> > Any ideas?

> >

> > Thanks in advance,

> > Stephen Voss

> >

> >

> >

>

>

Similar Topics