Editing Tornedo.tetrain.com Upgrade Plan (section)

=== 11.1 Phase 2, point 6 — access-log readiness check (methodology) ===

Re-ran the dirsrv access-log "who's actually still connecting" analysis, this time scoped specifically at <code><nowiki>tornedo.tetrain.com</nowiki></code> and cross-checked against <code><nowiki>ipa.tetrain.com</nowiki></code>, so a host that has fully cut over shows up as absent-from-tornedo/present-on-ipa rather than a false negative.

* <code><nowiki>tornedo.tetrain.com</nowiki></code>: 4 rotated logs + current, covering <code><nowiki>2026-07-22 18:29</nowiki></code> → <code><nowiki>2026-07-24 06:56</nowiki></code> (~36.5h retention).
* <code><nowiki>ipa.tetrain.com</nowiki></code> (instance still named <code><nowiki>slapd-TORNEDO-TETRAIN-COM</nowiki></code>, inherited from the replica build): 1 rotated log + current, covering <code><nowiki>2026-07-23 14:22</nowiki></code> → <code><nowiki>2026-07-24 07:00</nowiki></code> (~16.6h retention).
* Extracted last-seen timestamp + connection count per source IP from both (<code><nowiki>grep "connection from"</nowiki></code>, field <code><nowiki>$8</nowiki></code> = IP), resolved fresh DNS for all 50 hosts in <code><nowiki>reports/ipa_hosts_final_2026-07-24.csv</nowiki></code>, and cross-referenced.
* For the 9 hosts with no forward DNS record (<code><nowiki>app.brijraj.in</nowiki></code>, <code><nowiki>app.brijraj.in-new</nowiki></code>, <code><nowiki>cloud-storage.triburg.co.in</nowiki></code>, <code><nowiki>dr-mobilepedia.tetrain.com</nowiki></code>, <code><nowiki>li1732-118</nowiki></code>/<code><nowiki>li1994-156 .members.linode.com</nowiki></code>, <code><nowiki>mail.curiocrafts.com</nowiki></code>, <code><nowiki>mobilepedia-sites.tetrain.com</nowiki></code>, <code><nowiki>tetra-demo.tetrain.com</nowiki></code>), ran reverse-DNS on unmatched tornedo-log IPs instead, which identified several of them directly connecting under a different IP than the CSV has on file.