too much activity
phn at icke-reklam.ipsec.nu
phn at icke-reklam.ipsec.nu
Tue Aug 10 15:24:00 UTC 2004
Mark Andrews <Mark_Andrews at isc.org> wrote:
>> Markus Plannerer <mp at no.erpa.spam.de> wrote:
>> > Hello,
>>
>> > we have updated from BIND8 to BIND9 and in the new
>> > named.conf logging is enabled by:
>> > logging {
>> > channel query_logging {
>> > file "/var/log/named_querylog"
>> > versions 3 size 100M;
>> > print-time yes; // timestamp log entries
>> > };
>> > category queries {
>> > query_logging;
>> > };
>> > category lame-servers { null; };
>> > };
>>
>> > Now there is every second a entry in the log like:
>> > Aug 09 20:05:17.017 client 127.0.0.1#32844: query:
>> > 130.15.227.212.in-addr.arpa IN PTR
>> > Aug 09 20:05:18.028 client 127.0.0.1#32844: query:
>> > 130.15.227.212.in-addr.arpa IN PTR
>> > Aug 09 20:05:19.027 client 127.0.0.1#32844: query:
>> > 130.15.227.212.in-addr.arpa IN PTR
>> > Aug 09 20:05:20.038 client 127.0.0.1#32844: query:
>> > 130.15.227.212.in-addr.arpa IN PTR
>> > and so on and so ...
>>
>>
>> > Can anybody give me a hint?
>>
>> You have querylogging turned on. The reason is that whenever you mention
>> "query-loggin" in the logging section it's assumed to be tunred on.
>>
>> The straightforward mechanism ought to be an new options-statement "query-log
>> {on | off}"
>> ( isc are you listening ?)
> Have you looked at 9.3.0?
>
> 1537. [func] New option "querylog". If set specify whether query
> logging is to be enabled or disabled at startup.
No. Thank You for the rapid deployment. Warp speed indeed :-)
--
Peter Håkanson
IPSec Sverige ( At Gothenburg Riverside )
Sorry about my e-mail address, but i'm trying to keep spam out,
remove "icke-reklam" if you feel for mailing me. Thanx.
More information about the bind-users
mailing list