Cant resolve dns names

Across hundreds of flow exporting routers and switches, Flow Analytics™ delivers on:
Top conversations, top applications, top source and destination hosts by bytes, top source and destination hosts by flows, total number of unique hosts, the total number of unique applications, internal threats and several other informative statistics

The NBA portion of Flow Analytics™ delivers on:
Which assets are under attack? What threats are being missed? Users which may not be following corporate policy. Helpful information to determine if the business is in compliance with regulations. Fast searching through massive amounts of data. Monitoring to ensure that the existing infrastructure investments are adequate. Details so that you can target areas to improve the security posture.

Moderators: scottr, Moderator Team

Cant resolve dns names

Postby glenna » Wed Feb 02, 2011 5:58 am

Hi,

I have some problem here regarding DNS names wont resolve. Some hosts do resolve from the DNS but some dont, and all of the hosts use the same DNS server(s). Dont find any error messages anywhere either so cant really progress atm.

Anyone have any clue on what to do?

Best regards,
Glenn
glenna
 
Posts: 5
Joined: Mon Jan 31, 2011 8:14 am

Re: Cant resolve dns names

Postby dalet0 » Wed Feb 02, 2011 7:45 am

Hi Glenn,

I would try increasing the "DNS Timeout" value under Admin->Settings->System Preferences.

What version of scrutinizer are you running?

Danny
dalet0
 
Posts: 41
Joined: Mon May 17, 2010 10:52 am
Location: Biddeford, ME

Re: Cant resolve dns names

Postby glenna » Thu Feb 03, 2011 2:33 am

Hi Danny,

I'm using Scrutinizer 8.5 now, was told to upgrade cause of some problems solved in that version with DNS.

I increased the timeout to an extensive 60sec now, i know it's probably overkill but i just want to be sure now that it aint that option.

So if the timeout wont fix my problem what could cause it then?

Best regards,

Glenn
glenna
 
Posts: 5
Joined: Mon Jan 31, 2011 8:14 am

Re: Cant resolve dns names

Postby mkrygeri » Thu Feb 03, 2011 8:32 am

Hi Glenna,
Occasionally, we see a problem with DNS due to a problem with the registry. Please try the following and see if this resolves your issue.
1. Create a file in the \scrutinizer\html directory called dns.conf.
2. Open this file with a text editor like Notepad.
3. Create a list of DNS servers in the file in the format below.
nameserver 192.168.1.1
nameserver 166.186.184.2
nameserver 224.39.1.171

Once this file has been created, try again. Let us know if this solved youe issue.

Mike K
mkrygeri
 
Posts: 87
Joined: Tue Aug 02, 2005 8:47 am

Re: Cant resolve dns names

Postby glenna » Thu Feb 03, 2011 9:30 am

Hi Mike,

Tried that also, but no progress yet :(

It is so wierd cause from the machine itself it do not have any problem resolving the dns names, so probably something within the program. The option to see dns names aint criticall but would be easier when solving network issues to right away have the hostname instead of looking it up manually.

Best regards,
Glenn
glenna
 
Posts: 5
Joined: Mon Jan 31, 2011 8:14 am

Re: Cant resolve dns names

Postby jghidoni » Thu Feb 03, 2011 11:49 am

Hi Glenn,

Can you do a test for us and try placing a copy of your dns.conf file in the following 2 directories, then let us know if the dns resolve works?

[homedir]\scrutinizer\cgi-bin
[homedir]\scrutinizer\bin

Thank you,
Joanne
User avatar
jghidoni
Site Admin
 
Posts: 147
Joined: Tue Nov 29, 2005 11:36 am

Re: Cant resolve dns names

Postby glenna » Fri Feb 04, 2011 2:27 am

Hi Joanne,

Even that did not solve the problem it seems :/

Now i started to resolve the dns names manually from the Admin -> Definitions -> Host names option.
Most top host names are usually the same but o course the procedure is kinda time consuming.

But putting the dns.conf file in those 3 directorys did not work, atleast not for me.

Best regards,
Glenn
glenna
 
Posts: 5
Joined: Mon Jan 31, 2011 8:14 am

Re: Cant resolve dns names

Postby tomp » Fri Feb 04, 2011 2:33 pm

Hi Glenn,

Do you have time to chat? Please email me at tomp@plixer.com. I'd like to set up a GoToMeeting and take a look around.

- Tom
User avatar
tomp
Site Admin
 
Posts: 289
Joined: Wed Jul 27, 2005 9:53 am
Location: Sunny Sanford Maine

Re: Cant resolve dns names

Postby glenna » Wed Feb 09, 2011 2:17 am

Hi Tom,

That with putting the dns.conf into the previous mentioned directorys seems to helped, almost fully!
Rest of it i can manually do, cause there are some specific things happening on the net here.

But now i have some more "problems" but that maybe i can take on mail with you, so ill go ahead and send you an emal.

Thanks to you all with helping with the dns problem!

Best regards,
Glenn
glenna
 
Posts: 5
Joined: Mon Jan 31, 2011 8:14 am

Re: Cant resolve dns names

Postby jscheller » Wed Oct 19, 2011 7:20 pm

Just downloaded a trial and am also having trouble resolving IPs to DNS. Nslookup works properly from the host and responds quickly. I have increased the DNS timeout to 30 seconds and added the dns.conf file to the directories referenced earlier in the post but no luck. Any ideas?
jscheller
 
Posts: 2
Joined: Wed Oct 19, 2011 6:39 pm

Re: Cant resolve dns names

Postby pauld » Thu Oct 20, 2011 6:48 am

Hello jscheller,

We've made some improvements to DNS for v8.6.2; can you verify that you're v8.6.2?

Are you doing the nslookup from the Scrutinizer server?

You shouldn't need to use the dns.conf file unless you're trying to query from multiple DNS servers which typically means the DNS server is not properly configured to relay DNS requests to the proper servers.

If you're running v8.6.2 and doing a nslookup from the Scrutinizer server works, I would recommend contacting our pre-sales support at 207-324-8805 so we can investigate this further.

Thanks,
Paul
User avatar
pauld
 
Posts: 156
Joined: Mon Jan 04, 2010 10:05 am
Location: Sanford, Maine

Re: Cant resolve dns names

Postby jscheller » Thu Oct 20, 2011 12:52 pm

I am running 8.6.2. Guess I will call.
jscheller
 
Posts: 2
Joined: Wed Oct 19, 2011 6:39 pm


Return to Flow Analytics

Who is online

Users browsing this forum: No registered users and 0 guests

Who is online

In total there are 0 users online :: 0 registered, 0 hidden and 0 guests (based on users active over the past 5 minutes)
Most users ever online was 60 on Thu Jun 25, 2009 9:07 am

Users browsing this forum: No registered users and 0 guests