2 Replies Latest reply on Jun 16, 2009 8:29 AM by lchance

    NetFlow packets and DNS problem

    lchance

      I have a unique problem where a mail server's (SMTP) traffic shows a different DNS name however we no longer have that DNS entry in our DNS-server.

      For example (using bogus names/IP):

      For what should be MAILSERVER_1 at IP address 98.100.100.1 will show up in NetFlow views as an older and no longer used name of MAILSERVER_2 at that same IP of 98.100.100.1.

      Do NetFlow packets even care about DNS or could it get DNS resolution some other way? Could the router have that older name/IP cached?

      Thanks for any help or ideas about this.