Detailed logging of dynamic updates

Treptow, Craig Treptow.Craig at principal.com
Wed Jan 17 22:25:29 UTC 2001


Thanks for the input on that specific message, but my question was more general.  I was wondering if there was a way to see something like:

;BIND LOG V8
[DYNAMIC_UPDATE] id 53197 from [162.131.2.17].59119 at 979769886 (named pid 8000):
zone:   origin tst.principal.com class IN serial 97201910
update: {add} CIA8.tst.principal.com. 3600 IN SRV 0 0 9018  mvsf.tst.principal.com.

That I can log more permanently, so when there is a problem, I can look at the history and see that an update request was made at such and such time, to delete such and such a record.

Right now these get lost when the changes are merged back into the zone files.

> -----Original Message-----
> From: Mark.Andrews at nominum.com [mailto:Mark.Andrews at nominum.com]
> Sent: Wednesday, January 17, 2001 4:16 PM
> To: Treptow, Craig
> Cc: 'peter at icke-reklam.ipsec.nu';
> comp-protocols-dns-bind at moderators.isc.org
> Subject: Re: Detailed logging of dynamic updates 
> 
> 
> 
> > 
> > 
> > 
> > > -----Original Message-----
> > > From: peter at icke-reklam.ipsec.nu.invalid
> > > [mailto:peter at icke-reklam.ipsec.nu.invalid]
> > > Sent: Wednesday, January 17, 2001 10:12 AM
> > > To: comp-protocols-dns-bind at moderators.isc.org
> > > Subject: Re: Detailed logging of dynamic updates
> > > 
> > > 
> > > 
> > > Treptow, Craig <Treptow.Craig at principal.com> wrote:
> > > 
> > > > Hi.  We are running 8.2.2-p5 on AIX.  We do dynamic updates 
> > > that are aut=
> > > omated by sending the update command as a message via MQ 
> > > Series.  Occasion=
> > > ally there are problems with the update where it appears some 
> > > of the updat=
> > > es worked, while others seem to have failed.  This just 
> > > happened again las=
> > > t night, but the last thing in the log mentioned below was 
> > > logged last yea=
> > > r.  I have this in my logging statement:
> > > 
> > > Is it IBM's version of bind ?  (they made a number of changes 
> > > which makes
> > > it off-track with official bind)
> > 
> > Nope.  It's straight off of ISC's site.
> > > 
> > > 
> > > > channel update_file {
> > > > file "/usr/local/named/logs/named.update" versions 5 size 1M;
> > > > print-time yes;
> > > > print-category no;
> > > > print-severity yes;
> > > > };
> > > 
> > > > category update { update_file; };
> > > 
> > > > With this, the log only has things such as:
> > > 
> > > > 20-Dec-2000 14:07:11.667 error: error processing update 
> > > packet (YXRRSET)=
> > >  id 35498 from [162.131.2.17].62831
> 
> 	A pre-requisite was not met.  This is not really a error.
> 	The client ask the server to only perform the change if
> 	a condition was met.  It wasn't.
> 
> 
> > > 
> > > > By the time we hear of the problem, any evidence, or clue I 
> > > might have g=
> > > otten from the .ixfr or .log files for the zone is lost, 
> > > because the chang=
> > > es logged in those files have been merged with the zone file.
> 
> 	There is nothing to log becaue no change was made.
> 
> > > 
> > > > Is there any way to get BIND to log more detail regarding 
> > > the update req=
> > > uests it receives, or the updates it has done?  The 
> > > information stored in =
> > > the .log and .ixfr files would be great to have on a more 
> > > permanent basis.=
> > >   I've searched through the archives, but couldn't find 
> > > anything regarding=
> > >  this kind of detailed logging.=20=20
> > > 
> > > > Any help is appreciated.
> > > 
> > > > Thanks!
> > > 
> > > > Craig Treptow
> > > > Principal Financial Group
> > > > I/S Network Administration
> > > > (515) 247-6207
> > > 
> > > 
> > > 
> > > 
> > > 
> > > --=20
> > > Peter H=E5kanson               Phone     +46707328101       
> > > Fax +463122319=
> > > 0
> > > IPSec sverige                Email      peter at ipsec.nu=20=20
> > > "Safe by design"             Address    Bror Nilssons gata 16 
> > >  Lundbystran=
> > > d
> > >                                         S-417 55  Gothenburg  
> > >  Sweden=20=20=
> > > =20=20=20=20=20=20=20
> > > 
> > > 
> > 
> > 
> --
> Mark Andrews, Nominum Inc.
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: 
> Mark.Andrews at nominum.com
> 



More information about the bind-users mailing list