Interpretting the logs

Support section for FREESCO v0.4.x

Interpretting the logs

Postby bec » Tue Mar 30, 2010 6:22 am

Hi,

My logs have lots of these entries:
Mar 30 09:35:14 - dnsmasq[14408]: query gringotts.inet from 192.168.101.101
Mar 30 09:35:14 - dnsmasq[14408]: cached gringotts.inet is <NXDOMAIN>-IPv4
Mar 30 09:35:16 - dnsmasq[14408]: query gringotts.inet from 192.168.101.101
Mar 30 09:35:16 - dnsmasq[14408]: cached gringotts.inet is <NXDOMAIN>-IPv4
Mar 30 09:35:19 - dnsmasq[14408]: query gringotts.inet from 192.168.101.101
Mar 30 09:35:19 - dnsmasq[14408]: cached gringotts.inet is <NXDOMAIN>-IPv4

They seem to be pairs. The machine Gringotts is off-site so isn't initiating the query. There are hundreds of these in the log.

I'm just curious.

Thanks

Brian
User avatar
bec
Member
 
Posts: 68
Joined: Sat Jun 29, 2002 8:37 am
Location: Melbourne, Australia

Re: Interpretting the logs

Postby gRenbaJ » Tue Mar 30, 2010 8:49 am

It would appear that the device at 192.168.101.101
is asking what gringotts.inet address is. (I am assuming
that gringotts is a device that WAS on your subnet at some
time previous, though you have indicated that that is no longer
the case)

It is hard to say what the reason for the query is without knowing
more about those devices (ie- what OS they were running, file transfers
between devices, etc. Any sort of interaction)
User avatar
gRenbaJ
Newbie
 
Posts: 4
Joined: Mon Apr 28, 2008 10:02 pm

Re: Interpretting the logs

Postby Lightning » Wed Mar 31, 2010 7:46 pm

It sounds to me like what was already stated and it is just a DNS query for the IP address of that name From a machine on your network at 192.168.101.101 and the name is cached as probably a DHCP lease for that IP address.
If you are afraid that you might make a mistake. The chances are high that you will never learn anything.
User avatar
Lightning
FREESCO GOD !!
 
Posts: 12080
Joined: Wed Nov 14, 2001 6:50 am
Location: Oregon, USA

Re: Interpretting the logs

Postby bec » Mon Apr 05, 2010 3:10 am

Thanks,

The requesting PC is a Windows Vista PC & Gringotts is removed from the network at present.

I'll have to check when I get home. but suspect that the requesting PC has a mapped printer from Gringotts and it is searching for it. I'm surprised that it is searching so frequently.

Thanks

Brian
User avatar
bec
Member
 
Posts: 68
Joined: Sat Jun 29, 2002 8:37 am
Location: Melbourne, Australia


Return to FREESCO Support for v0.4.x

Who is online

Users browsing this forum: No registered users and 1 guest

cron