Query logging issue?

Jeffrey Reasoner jeff.reasoner at mail.hccanet.org
Wed Jul 5 14:29:17 UTC 2006


Are you sure your server has actually heard any other queries?

With querylog turned on and the following in named.conf:

channel bind-queries {
                file "/var/log/queries.log" versions 10 size 4m;
                severity info;
                };

I see everything in my logs:
<snip>
client 10.21.1.3#3785: query: _ldap._tcp.gc._msdcs.xxx.org IN SOA +
client 10.27.0.251#47299: query: 210.213.109.229.pldt.net IN A +
client 10.21.200.10#3284: query: 255.255.255.255.in-addr.arpa IN PTR +
client 10.21.200.10#3283: query: 0.0.0.0.in-addr.arpa IN PTR +
client 10.27.0.251#47299: query: 39.222.10.219.sbl-xbl.spamhaus.org IN
TXT +
client 10.27.0.251#47299: query: 39.222.10.219.sbl-xbl.spamhaus.org IN A
+
<\snip>

On Wed, 2006-07-05 at 08:47, Ronni Jensen wrote:
> Hi,
> 
> I am wondering why only A record queries are logged.. like this:
> 
> Jul 05 14:28:54.186 queries: client xxx.xxx.150.12#1041: query:
> eur.a1.yimg.com IN A
> Jul 05 14:28:56.672 queries: client xxx.xxx.150.12#1041: query:
> ntp1.pipex.net IN A
> Jul 05 14:29:43.951 queries: client xxx.xxx.150.12#1041: query:
> avupdate-mcafee.vircom.com IN A
> Jul 05 14:29:51.935 queries: client xxx.xxx.150.12#1041: query:
> asupdate.vircom.com IN A
> 
> Why doesn't also MX, CNAME, PTR etc appear in the log?
> 
> 
> logging {
>         channel query_logging {
>                 file "/var/log/named/queries.log" versions 3 size 100M;
>                 print-time yes;
>         };
> 
> 
> With kind regards,
> Ronni
> 
> 
#####################################################################################

This email has been scanned by MailMarshal, an email content filter. 

#####################################################################################



More information about the bind-users mailing list