In BIND 8.2 running on Solaris 8, how to start logging

[Samad Agha]

Mike, Barry, & Baird,
Thank you so much for your quick replies. I'll try your recommendations
first thing Monday morning and see what happens.

Again, thank you and have a nice weekend.

Regards,
Samad


On Fri, Jun 27, 2014 at 2:12 PM, Baird, Josh <jbaird at follett.com> wrote:

> Enable query logging or run tcpdump on port 53.  A quick Google search
> should explain exactly how to do either of these very easily.
>
> Josh
>
> -----Original Message-----
> From: bind-users-bounces at lists.isc.org [mailto:
> bind-users-bounces at lists.isc.org] On Behalf Of Barry S. Finkel
> Sent: Friday, June 27, 2014 5:02 PM
> To: bind-users at lists.isc.org
> Subject: Re: In BIND 8.2 running on Solaris 8, how to start logging
>
> On 6/27/2014, Samad Agha <samad.agha2007 at gmail.com> wrote:
> > Hi All,
> > I have two Solaris 8 servers running BIND 8.2. I'd like to retire them
> > both and transfer everything to a couple of RHEL 7 boxes. The City (I
> > work for a mid-size California city) has outsourced different aspects
> > of our DNS that I even lost track and have no idea what these two DNS
> > servers serve. I'd like to start logging all queries on these two
> > boxes to know who queries them. How do I start a comprehensive logging
> > to capture all transactions going through these two servers?
> >
> > Please advise; please be thorough and don't assume anything. Many
> > thanks in advance.
> > Regards,
> > Samad
>
> I may be missing something here.  The servers are running BIND.
> What zones do the servers serve?  They serve the zones listed in the BIND
> configuration file(s), and they may be recursive servers for your clients.
>  Look at the config files to see what zones are mastered or slaved on the
> servers.
>
> --Barry Finkel
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140627/4658f808/attachment.html>