Zenarmor reports Src Hostname switching from ip address to hostname.localdomain

[Meg]

Hello: I recently started having an issuer where on the two wired hosts on my lan have their Src Hostname switching from ip address to hostname.localdomain in reports and live sessions. If I reset the reporting database they start reporting again with their static ip addresses again but after a wile revert to reporting as hostname.localdomain again. This only happens on the two wired hosts and none on wifi. This is recent since the upgrade to Opnsense 25.1.2. I have never noticed this behavior before. Can anybody give me an explanation for this and a possible fix?

[sy]

Hi,

Are the other hostnames accurate? Zenarmor is also capable of utilizing OPNsense alias definitions. You can either add these two hosts with the proper DNS names in Firewall - Aliases or disable the DNS Enrichment feature of Zenarmor in Settings - Privacy - Enable DNS Enrichment.

[Meg]

All the other host names on wifi show only ip address which I want. It was only the wired machines that were showing the hostname.localdomain randomly on and off. I switched off dns enrichment in zenarmor as  you sugessted and they just show ip addresses. Thanks for the reply.