Page 3 of 4
Re: Display FQDNs on mouse over
Posted: Mon Jan 27, 2014 1:56 pm
by snapon_admin
Any updates?
Re: Display FQDNs on mouse over
Posted: Mon Jan 27, 2014 5:40 pm
by lmiltchev
I sent you a PM.
Re: Display FQDNs on mouse over
Posted: Tue Jan 28, 2014 10:53 am
by snapon_admin
I saw that, thanks. Forwarded that response on to my Unix admin. Staying warm up there?

Re: Display FQDNs on mouse over
Posted: Tue Jan 28, 2014 11:03 am
by lmiltchev
Staying warm up there?

It's a great weather - no flies, to mosquitoes!

God, I love Minnesota!
Let us know what your Unix admin had to say.
Re: Display FQDNs on mouse over
Posted: Tue Jan 28, 2014 5:03 pm
by snapon_admin
Sent you a PM with his reply.
Re: Display FQDNs on mouse over
Posted: Wed Jan 29, 2014 11:13 am
by sreinhardt
Great, Jake\Lmiltchev are taking a look!
Re: Display FQDNs on mouse over
Posted: Mon Feb 03, 2014 11:23 am
by snapon_admin
Any updates on this?
Re: Display FQDNs on mouse over
Posted: Mon Feb 03, 2014 12:55 pm
by jomann
So from what I can tell, this is a DNS issue and not a bug. I've done some testing here and our boxes here and I haven't been able to make this happen in our internal network and all the defined DNS works for our workstations and outside sources that the netflow data records. So when you go to google, you can find google's IP address and hover over it and it shows up with the google server's hostname. This makes me think that the DNS is not set up in a way that the PHP gethostbyaddr function (
http://us3.php.net/gethostbyaddr) can look up the hostname based on the IP address alone (doing the actual reverse dns lookup) for whatever reason. Unfortunately this function that gets the hostname wasn't created by us and not a part of network analyzer code and since it's a standard function that comes with PHP we can't do much about the actual functionality. I'm told it works the same as the C gethostbyaddr but I am not 100% sure on that. I'm sorry that we couldn't be more help with this issue!
Re: Display FQDNs on mouse over
Posted: Mon Feb 03, 2014 1:14 pm
by lmiltchev
@ snapon_admin
Let us know if jomann's post answered your question.
Re: Display FQDNs on mouse over
Posted: Tue Feb 11, 2014 11:52 am
by snapon_admin
sorry it took me so long to respond to this. We were checking everything on our end and found no issues with DNS or anything that would be causing the issue from there. I decided on a whim to move the entries for the DNS servers that the non-working IPs were using to the top of the list in the resolv.conf file and that fixed the issue. I'm guessing that since NNA was able to resolve hostnames on some of the hosts using the first couple of entries in the conf that it just stopped looking at the other entries or something. Not sure if that's intended behavior or not, but either way the issue is resolved now. Thanks for your help!