Local Whois doesn't work in ACID.

["Juan M. Rivera" <jrivera () aupr edu>]

We have snort running on a RedHat 9.0 server on the inside of our firewall
and we are monitoring our inside traffic.

When we have an alert, we go straight to the ip address. If the ip address
is external, we can use whois on the acid page and it works fine. But if the
ip address is an internal one -when we try to use the Local Whois function
on the ACID page, it doesn’t work.

We have an internal DNS, WINS server, and DHCP Server.

Maybe we need to setup the whois in RH 9.0?

Thank to any lights shed.

Juan M. Rivera Rivera
IT Director
American University of P.R.