FIELD: information technology.
SUBSTANCE: invention relates to DNS name resolution of Internet network. Method obtains a source and an Internet traffic recipient by processing DNS logs and includes a step of filtering logs on which DNS logs are filtered, which can not reflect the actual path of access by the user, a segmentation step of a log, on which, based on the source IP address, the difference between the time stamps and the central domain, sequentially segmenting the DNS logs obtained after the log filtering step to obtain segmented access paths and a step of summing data on which summarize all segmented access paths.
EFFECT: wider range of tools.
9 cl, 4 dwg
