Network Management

Reply
Occasional Contributor II
Posts: 13
Registered: ‎11-24-2011

Reverse DNS lookups from Airwave 8.x

Hi,

 

Recently we noticed a lot of reverse DNS lookup from Airwave to our DNS server. Can anyone guide me on why airwave send reverse DNS lookups and how to stop it or reduce it.

 

Thank you

Shabeer

 

LOGS from the Server:

 

 

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.283 client 172.22.24.110#1250 (145.37.27.10.in-addr.arpa): view Internal: query: 145.37.27.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.284 client 172.22.24.110#40925 (77.249.25.10.in-addr.arpa): view Internal: query: 77.249.25.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.285 client 172.22.24.110#36410 (18.239.25.10.in-addr.arpa): view Internal: query: 18.239.25.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.286 client 172.22.24.110#56738 (239.100.25.10.in-addr.arpa): view Internal: query: 239.100.25.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.325 client 172.22.24.110#11341 (15.180.27.10.in-addr.arpa): view Internal: query: 15.180.27.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.326 client 172.22.24.110#39617 (146.253.22.172.in-addr.arpa): view Internal: query: 146.253.22.172.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.366 client 172.22.24.110#22476 (215.36.27.10.in-addr.arpa): view Internal: query: 215.36.27.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.407 client 172.22.24.110#23715 (37.82.25.10.in-addr.arpa): view Internal: query: 37.82.25.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.408 client 172.22.24.110#3724 (220.166.27.10.in-addr.arpa): view Internal: query: 220.166.27.10.in-addr.arpa IN PTR + (155.69.5.7)

Aug 13 16:07:32 dnstni2 named[12898]: 13-Aug-2015 16:07:32.408 client 172.22.24.110#37956 (53.95.27.10.in-addr.arpa): view Internal: query: 53.95.27.10.in-addr.arpa IN PTR + (155.69.5.7)

 

Guru Elite
Posts: 7,828
Registered: ‎09-08-2010

Re: Reverse DNS lookups from Airwave 8.x

AirWave does lookups to display the DNS names of clients.


Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Moderator
Posts: 1,216
Registered: ‎10-16-2008

Re: Reverse DNS lookups from Airwave 8.x

This is controlled on AMP Setup -> General tab -> Display box -> 'Look up device and wireless user hostnames' setting.  By default, this setting is enabled, but you can disable if you do not want dns correlation.

Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Search Airheads
Showing results for 
Search instead for 
Did you mean: