Ok, I actually knew that ...
How would I go about scripting it? The fundamentals I know I'll have to get are:
- Parse the log file, grabbing the destination IP from each line (DST=xxx.xxx.xxx.xxx), which happens to be the 9th space-separated field.
- Remove the 'DST=' part from the parsed field.
- dig the IP for it's hostname
- Reinsert the hostname into the log.
What utilities should I concentrate on to make this happen?