which names are found

[phn at icke-reklam.ipsec.nu]

Bonno Bloksma <bbloksma at xs4all.nl> wrote:
> Hi,

> I'm running bind 9.1.3-4 on a RedHat 7.2 machine on my internal network. All
> machines in my net use this dns server to find all ip numbers. I now want to
> know which client requests which names to be found. I've looked at the man
> pages of named, named.conf and rndc and it's probably in there. It's
> probably in that huge section about the logging syntax but I don't
> understand how I can use it. The DNS-HOWTO does not cover this topic so I'm
> asking here.

> All I want is a file in which is recorded which client requested which name
> to be resolved. Something like:
> 3-jun-02 20:55    172.17.1.3    www.linux.org
> 3-jun-02 20:56    172.17.1.3    www.novell.com
> etc.

> How do I do this?

rndc querylog

And in syslog facility used for daemon you will se :

Jun  3 22:34:17 ture named[111]: client 127.0.0.1#2172: query: . IN NS

> --

> Groetjes,

> Bonno Bloksma





-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.