Solved: IP Accounting

jpl861 · ‎05-03-2007

Hi Guys,

I just wanna ask if there's a way to resolve show ip accounting results into FQDN automatically? Convert those IP addresses to domain names?

Because we want to capture internet users who are accessing restricted sites so we can limit their access.

Do you guys have any other way of detecting this one?

Thanks,

John

avmabe · ‎05-03-2007

I don't have anything that will take ip accounting and turn into FQDN and haven't heard of anyone doing that, mainly, because there are other ways to do it.

One good way is if you can find a way to span the port going to the router or another place to intercept the traffic, you can utilize NTOP http://www.ntop.org to turn the IP's into FQDN automagically.

View solution in original post

avmabe · ‎05-03-2007

I don't have anything that will take ip accounting and turn into FQDN and haven't heard of anyone doing that, mainly, because there are other ways to do it.

One good way is if you can find a way to span the port going to the router or another place to intercept the traffic, you can utilize NTOP http://www.ntop.org to turn the IP's into FQDN automagically.

jpl861 · ‎05-04-2007

Great! I will just use that one. I've been using that utility for Netflow traffic. This time, I'll try to use SPAN. Thanks.