DNS resolution

BASE-user
dkim777
2007-11-07
2013-06-03
  • dkim777

    dkim777 - 2007-11-07

    When BASE displays ip and its DNS name.
    where does it resolve ip address in Alert? 
    does Snort resolve it and stores in MYSQL?
    or do they get resolved as it gets displayed in BASE?

    If it's BASE, then is it on the Snort server by Apache or client machine?
    Thanks.

     
    • Juergen Leising

      Juergen Leising - 2007-11-07

      Hello,

      it is BASE that tries to resolve the ip address. And php code is generally executed on the web server (apache)
      (as opposed to JavaScript).

      Cf. baseGetHostByAddr() in includes/base_net.inc.php.

      Bye, bye,

      Juergen

       

Log in to post a comment.