Re: Server Usage Reports - Resolving IP Addresses

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello Jeff,

I'm sorry for the delay response. I was on vacation for period of time and
come back today.

Based on my research, the windows 2000 PTR may be created for manually
before. If you like you can try to delete this record and see whether it
can be created automatic.

To modify DNS dynamic update behavior, use any of the following methods:

1. Click Start, click Control Panel, click Network and Internet
Connections, and then click Network Connections.

2. Right-click the network connection that you want to configure, and then
click Properties.

3. On the General tab (for a local area connection), or the Networking tab
(for all other connections), click Internet Protocol (TCP/IP), and then
click Properties.

4. Click Advanced, and then click the DNS tab.

a. To use a DNS dynamic update to register the IP addresses of this
connection and the primary domain name of the computer, select the Register
this connection's addresses in DNS check box. By default, this check box is
not selected. The primary domain name of the computer is the primary DNS
suffix appended to the computer name. To view this domain name and DNS
suffix together as the full computer name, click Start, click Control
Panel, click Performance and Maintenance, click System, and then click the
Computer Name tab.

b. To use a DNS dynamic update to register the IP addresses and the
connection-specific domain name of this connection, select the Use this
connection's DNS suffix in DNS registration check box. By default, this
check box is not selected. The connection-specific domain name of this
connection is the DNS suffix for this connection appended to the computer
name.
Thank you and have a nice day,

Hope the steps help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Jeff Gardner" <user@xxxxxxxxxxxx>
| References: <uDMPlSsTHHA.4028@xxxxxxxxxxxxxxxxxxxx>
<#3$DdhzTHHA.2356@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Server Usage Reports - Resolving IP Addresses
| Date: Fri, 16 Feb 2007 21:40:53 -0600
| Lines: 166
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| Message-ID: <ueInsVkUHHA.4252@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: adsl-68-254-160-26.dsl.milwwi.ameritech.net
68.254.160.26
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:17735
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I entered ptr records for all of the hosts, which now appear in the
reports.
| The only machine that already had a ptr record was a windows 2000 machine
-
| all the rest are XP Pro boxes. It appears to have been an automatic
entry
| as I did not create the record and there are no other persons with their
| hands in this. Any explanation as to why a ptr record was created for
the
| 2k box and not the others?
|
| --
|
| Regards,
|
| Jeff Gardner
|
| "Terence Liu [MSFT]" <v-terliu@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:%233$DdhzTHHA.2356@xxxxxxxxxxxxxxxxxxxxxxxxx
| > Hello Jeff,
| >
| > Thanks for posting here.
| >
| > I understand that in the Server Usage Report, you want to resolve IP
| > addresses to computer names. If I have misunderstood the problem, please
| > don't hesitate to let me know.
| >
| > First, I want to explain How the Server Usage Report work:
| >
| > The Weblogging service receives IP address of the source and destination
| > from ISA/RAS of every Internet connection. It saves the IP addresses and
| > time stamp in the WebEvt.log file in "%windows%\temp". When the
scheduled
| > report time (by default it's 4:30 AM every day) comes, a reverse DNS
look
| > up is done to the source IP address to find the name of the machine. A
| > entry contains the source IP, destination IP, source machine name (if
| > available through reverse DNS look-up) and time of the connection will
be
| > added to the MSDE database, then the webevt.log is deleted. If the
reverse
| > DNS look up is successful, the machine name will show in the usage
report,
| > otherwise the IP address will show. The IP address is always in the
| > database.
| >
| > You may check if there are PTR records for those IP addresses in the
| > reverse lookup zone. To do so:
| >
| > 1. Click Start, click Run, type "dnsmgmt.msc" and click OK.
| >
| > 2. Expand your server\Reverse Lookup Zones\<your local subnet>.Subnet.
| >
| > If the IP address list in the Reverse Lookup Zones, the IP address will
be
| > resolved to computer name, and it will be listed as computer name
instead
| > of IP address in the Server Usage Report. If there is no IP address
list
| > in
| > the Reverse Lookup Zones, it can not be resolved to computer name, so it
| > will appear as IP only.
| >
| > Pointer (PTR) - For mapping a reverse DNS domain name based on the IP
| > address of a computer that points to the forward DNS domain name of that
| > computer.
| >
| > PTR records are used to support the reverse lookup process, based on
zones
| > created and rooted in the in-addr.arpa domain. These records are used to
| > locate a computer by its IP address and resolve this information to the
| > DNS
| > domain name for that computer.
| >
| > So I suggest you to add PTR records for the unresolved the IP address
| >
| > PTR Records can be added to a zone in several ways:
| >
| > 1. You can manually create a PTR RR for a static TCP/IP client computer
| > using the DNS, either as a separate procedure or as part of the
procedure
| > for creating an A RR.
| >
| > 2. Computers use the DHCP Client service to dynamically register and
| > update their PTR RR in DNS when an IP configuration change occurs.
| >
| > 3. All other DHCP-enabled client computers can have their PTR RRs
| > registered and updated by the DHCP server if they obtain their IP lease
| > from a qualified server. The Windows 2000 and Windows Server 2003 DHCP
| > Server service provides this capability.
| >
| > The pointer (PTR) resource record is used only in reverse lookup zones
to
| > support reverse lookup.
| >
| > Note: the report may include some network equipment IP address, you no
| > need
| > to add PTR records for them
| >
| > Hope info above helps.
| >
| > Please feel free to let me know if you have any questions or if you need
| > further assistance.
| >
| > Have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
| > the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| > doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| > --------------------
| > | From: "Jeff Gardner" <user@xxxxxxxxxxxx>
| > | Subject: Server Usage Reports - Resolving IP Addresses
| > | Date: Mon, 12 Feb 2007 10:41:38 -0600
| > | Lines: 14
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| > | X-RFC2646: Format=Flowed; Original
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| > | Message-ID: <uDMPlSsTHHA.4028@xxxxxxxxxxxxxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: adsl-68-254-160-26.dsl.milwwi.ameritech.net
| > 68.254.160.26
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:16486
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Greetings:
| > |
| > | When the bi-weekly server usage report is generated, some hosts
are
| > | resolved to hostname while others are IP addresses. Is there any way
to
| > get
| > | these IP addresses resolved? DHCP clients with server as primary/only
| > DNS
| > | on SBS 2k3 Premium R2. Thanks in advance.
| > |
| > | --
| > |
| > | Regards,
| > |
| > | Jeff Gardner
| > |
| > |
| > |
| >
|
|
|

.

Relevant Pages

  • Re: Need help with reverse DNS
    ... Some times an ISP will let you control the PTR records if you have a block ... > Subject: RE: Need help with reverse DNS ... > that my server is not being used by me or anyone else for mass ...
    (RedHat)
  • DNS Activity - Strange or Not?
    ... PTR ns.nj.exodus.net. ... dns lookups either). ... thought someone might be trying to relay mail through my mail server, ... my 512k connection has gone down to averaging less than 1k/sec ...
    (comp.os.linux.security)
  • Re: Reverse lookup question
    ... One entry is usually the FQDN and then I ... Why am I getting these additional, wrong PTR records ... these PTRs a Primary DNS suffix can fix these. ...
    (microsoft.public.windows.server.dns)
  • Re: Cannot find domain controller
    ... AD DNS progressive.local ... Not a reverse lookup registration issue apparently. ... PTR registrations is wrong. ... why you use PTR records, you'll see you can live without them. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cannot find domain controller
    ... AD DNS progressive.local ... Not a reverse lookup registration issue apparently. ... PTR registrations is wrong. ... why you use PTR records, you'll see you can live without them. ...
    (microsoft.public.windows.server.active_directory)