1. uberAgent Support
  2. Community
  3. General Discussion
New post
0

Blank NetTargetRemoteName

Avatar
Ayuba Gajere

Hi uberAgent Community,

We have been looking at some of the network metrics lately for some Split to Full Tunnel VPN changes and noticed there are almost half the records with a blank NetTargetRemoteName. The NetTargetRemoteAddress is present but to generate a list of known NetTargetRemoteAddress and NetTargetRemoteName to compare would still show some unknowns as well as generate overhead on time/effort.
Network Metrics • uberAgent documentation

Is there a reason these NetTargetRemoteName are blank? Access, Security related? or missing or misconfigured config file?

Thanks!

Date Votes

1 comment

  • 0
    Avatar
    Dominik Britz

    Hi Ayuba,

    NetTargetRemoteAddress contains the IP address of a target and NetTargetRemoteName contains the DNS name of a target.

    If a process makes a request to an IP directly instead of using DNS, NetTargetRemoteName will be empty. uberAgent makes a DNS reverse lookup when an IP is contacted to fill NetTargetRemoteName, but if there is no DNS information available the field stays empty.

     

    Best regards

    Dominik

     

Please sign in to leave a comment.