DNS on Log Messsages?

["Mike Koponick" <mike () redhawk info>]

Hello,

I was wondering if there was a way to resolve IP addresses into names from
the SNORT.LOG file. That is, this is the log that SNORT outputs now:

01/13-18:39:12.868701 [**] [1:384:4] ICMP PING [**] [Classification: Misc
activity] [Priority: 3] {ICMP} 192.168.11.21 -> 192.168.11.2

I would like log to look something like:

01/13-18:39:12.868701 [**] [1:384:4] ICMP PING [**] [Classification: Misc
activity] [Priority: 3] {ICMP} 192.168.11.21 (MYPC.MYDOMAIN.COM)->
192.168.11.2 (THEREPC.MYDOMAIN.COM)

Thanks in advance!

Mike



-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users