[phpLogCon] IP's in log files

[Rainer Gerhards]

Hi,

I think it would be a good addition to phpLogCon to be able to resolve
IP addresses in log files to DNS names. As of now, we can already
identify/guess what an IP address is. We currently use that to generate
a link to the knowledge base which then has additional information.

However, I think the probably most useful information (and useful even
within private address space) is the name that has been assigned to this
host.

So I propose we add the optional (!) capability to resolve IP addresses.
I suggest we add them, in curly braces, to after the IP address. The
knowledge base link should still exists, as it provides valuable
additional information.

This may look like this here:

172.19.0.1{system.example.net}

Note that a log may already contain something like this:

172.19.0.1[server.example.com]

Where the machine identifies itself. I suggest we make it configurable
if the phpLogCon-resolved name will be added in such cases. I see value
in it, because the phpLogCon-resolved name is consistent. I would, for
example, expect things like this:

172.19.0.1{system.example.net}[server.example.com]

I would appreciate if we could add this functionality relatively soon,
at least if there is no objection.

Rainer