How can I tell if a quiry is answered or denied

[King, Harold Clyde (Hal)]

I'm trying to find bad actors stretching out my load on my main DNS server I can't tell from the query log if a host is denied an answer, or given an answer. Also, can I get the answer in my logs? I got one great answer today, maybe I'm pushing my luck, but I do feel lucky.


--

Hal King  - hck at utk.edu
Systems Administrator
Office of Information Technology
Shared Services

The University of Tennessee
103c5 Kingston Pike Building
2309 Kingston Pk. Knoxville, TN 37996
Phone: 974-1599
[cid:fe5c07f5-ef0a-4dd8-a8d0-f22481933b6b]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220420/f8c07b91/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-yh04s42o.png
Type: image/png
Size: 6389 bytes
Desc: Outlook-yh04s42o.png
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20220420/f8c07b91/attachment.png>