DNSLookup is a utility to speed up the process of DNS lookups with Analog. It can be 50 times faster, or more, than Analog at doing DNS lookups. It requires OpenTransport, Analog already does as well as is possible under MacTCP.
Analog is fast, really fast, until you turn on the NUMLOOKUP option. DNSLookup is a tool to speed that up. Using DNSLookup I was able to process a 23.6Meg log file in 18 minutes (DNSLookup and Analog) as compared to a time of about 15 hours using Analog alone. With NUMLOOKUP off, Analog takes less than a minute.
DNSLookup will also process the log file into a GZip compressed version (WebSTAR.log.gz). Analog versions starting with 2.0a can read the compressed file so you could delete the original log file to save disk space and reconfigure Analog to read the .gz file. The compressed log file also has the DNS names subsituted for the IP addresses so you can turn NUMLOOKUP OFF in Analog if you have it read the compressed log file.
There is no configuration file. It reads a log file named 'WebSTAR.log', updates the Analog DNS translation cache named 'dnscache', and writes a compressed copy of the log file with DNS names replacing IP addresses named 'WebSTAR.log.gz'. All of these files must be in the same folder as the program and must have those exact names. DNSLookup currently expires failed lookups after six weeks and successful lookups after 18 weeks.
There are two ways to use DNSLookup. In either case you should put it in the same folder with Analog and run it before running Analog. You can either configure Analog to use 'WebSTAR.log' and do DNS looksups and to have an expire time of more than 18 weeks. Change analog.cfg to have the following settings:
LOGFILE WebStar.log
NUMLOOKUP ON
DNSFRESHHOURS 3030
or you can configure Analog to use 'WebSTAR.log.gz' and not do DNS lookups:
LOGFILE WebStar.log.gz
NUMLOOKUP OFF
To exit DNSLookup while it is running type 'q' or quit from the file menu. All lookups completed so far will be saved automaticaly. DNSLookup will automaticaly exit when it is completed, unless there were errors.
