I just wanna ask if there's a way to resolve show ip accounting results into FQDN automatically? Convert those IP addresses to domain names?
Because we want to capture internet users who are accessing restricted sites so we can limit their access.
Do you guys have any other way of detecting this one?
I don't have anything that will take ip accounting and turn into FQDN and haven't heard of anyone doing that, mainly, because there are other ways to do it.
One good way is if you can find a way to span the port going to the router or another place to intercept the traffic, you can utilize NTOP http://www.ntop.org to turn the IP's into FQDN automagically.