Differences

This shows you the differences between two versions of the page.

--- admin:domainsandip [2024/05/23 14:05] – [What is a Domain?] veera
+++ admin:domainsandip [2024/05/23 14:58] (current) – [How Trisul Netflow Analyzer show DNS names] veera
@@ Line 82: / Line 82: @@
   - However only the most recent name is assigned to the IP Address
 Hence if you queried for gmail.com , only the most recently seen IP is used to perform the actual query.
+===== Solutions =====
+There are few options to query based on domain name.
+<note>Querying by domain  only works if Trisul Netflow Analyzer is able to resolve the IP into a domain name.
+</note>
-By using reverse DNS lookup continuously we might be able to provide a way to collect all IP Addresses used by a domain
+==== Option 1:  Use the Trisul Network Analytics Packet Mode license ====
+Trisul NSM - the packet mode version of Trisul is able to listen to actual packets and extract full information about domain names from the HTTP-Header and SNI in SSL/TLS.
+==== Option 2:  Search for the domain name  ====
+Put the domain name instead of the IP Address in the queries. This will use the latest IP -> Domain mapping for the query.
+==== Option 3:  Use the Super Search Hosts app  ====
+Login as Admin > Web Admin > Manage > Apps.
+Then install the "Super Search Hosts" app. This allows you to enter a domain name, then it presents all IP dddreses associate with the domain.
+Hope this helps clarify the questions about the ability to query by names and URL.