Interpreting bind logging queries

Mark Andrews marka at isc.org
Thu Jun 21 03:14:29 UTC 2012


In message <CAB1R3sgve8d9nevNHNtY_2tj7Od1L9sTFC-V5BS5rv6aE9aLWQ at mail.gmail.com>
, Alex writes:
> Hi,
> 
> I have a bind-9.8.3 fc16 system and would like to know more about how
> logging works. How can I determine whether the results were from the
> local cache or it was actually necessary to query a remote server to
> return a response?
> 
> Given a query log entry such as:
> 
> 20-Jun-2012 13:23:50.023 queries: client 127.0.0.1#47286: query:
> factoryfitpartscorp.info IN A + (127.0.0.1)
> 
> How can I determine if this request was made to the server for this
> domain or if it had previously been queried and is retrieving it from
> a cache?

You can't.  The log entry doesn't record that.
 
> Can you point me to where I can find information about interpreting query log
> s?

The Adminstrators Reference Manual (ARM) full describes these log messages.
 
> Thanks,
> Alex
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
>  from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list