Where does ntopng get hostnames from?
-
In looking at the :3000/lua/hosts_stats.lua?mode=local page (hosts, filtered by local only) I'm seeing a bunch of entries in the 'Name' column that don't correspond to the actual entries for those IP addresses. I'm seeing text that doesn't appear in the /etc/hosts or the DNS.
I can run nslookup on the pfsense machine and it does not return the name ntopng is showing. I can also look up the IP via 'genent hosts x.x.x.x' and it likewise does not bring up the Name showing in ntopng.
I'm running ntopng Community Edition v.3.2.180119 on a 2.4.3-DEVELOPMENT amd64 pfSense install.
I've got pfsense set up for DHCP and DNS service to the local network. Just about everything has a static lease. They're all showing up reliably and consistently using name lookups from other hosts on the local network. So the DHCP/DNS parts of the pfsense seem to be configured properly/effectively.
Where else might ntopng be looking for this Name info? And how can I either stop it from doing that, and using either /etc/hosts or the local DNS server? Is there some database of the hostnames it's keeping? Can I purge that list and have it re-do it's lookups?