syslog demon doesn't resolve IPs to names

hello!

I have cisco ISR 871 and kiwi syslog server.

in messages I got:

04-17-2009 15:30:35 Local7.Info 10.0.0.1 722665: 755180: Apr 17 14:30:34.479 PCTime: %URLF-6-SITE_ALLOWED: Client 10.0.0.39:2848 accessed server 80.239.156.195:80

my DNS configuration in kiwi server:

DNSResolveFromIP=1
DNSStripDomainName=0
DNSResolveMessageText=0
DNSResolveMessageTextOption=0
DNSQueryTimeout=8
DNSResolveMsgStripDomTxtChk=0
DNSResolveMsgStripDomTxtMatchChk=0
DNSResolveMsgStripDomTxtMatchTxt=<NONE>
DNSHostTagPrefix= (
DNSHostTagSuffix=)
DNSThreadCount=2
DNSSetupUseInternalNetBIOS=1
DNSSetupUseInternalDNS=1
DNSSetupPriInternalDNS=10.0.0.2
DNSSetupAltInternalDNS=<NONE>
DNSSetupUseExternalNetBIOS=1
DNSSetupUseExternalDNS=1
DNSSetupPriExternalDNS=194.204.159.1
DNSSetupAltExternalDNS=<NONE>
DNSSetupInternalIPAddrRange=10.x.x.x|192.168.x.x|169.254.x.x|172.16.x.x|172.17.x.x|172.18.x.x|172.19.x.x|172.20.x.x|172.21.x.x|172.22.x.x|172.23.x.x|172.24.x.x|172.25.x.x|172.26.x.x|172.27.x.x|172.28.x.x|172.29.x.x|172.30.x.x|172.31.x.x|x.x.x.x
DNSCacheExpireTime=1440
DNSCachePreLookup=1
DNSCacheLoadHosts=0
DNSCacheHostsFile=<NONE>

Find more posts tagged with

resolve_ip

syslog_daemon

Accepted answers

All comments

Jaybed

Maybe the device isn't in your LAN dns table. What happens when you do a local dns lookup for that ip address? Does it resolve to the hostname?

Jay

heretic

sending device is CISCO router with 10.0.0.1

syslog is installed on win2003 server with 10.0.0.2

so what about dns table? what hostname should resolve what? win2003 server should resolve router hostname?