queries to DNS server

John Wobus jw354 at cornell.edu
Fri Sep 28 16:16:38 UTC 2007

Another method, that easily gets you a quick sample of your clients is 
tcpdump (or snoop).  Collect X number of packets (e.g. 10,000) and see 
calling you.

Depending upon how you plan to use the data, e.g., if you were just 
looking for a quick
percentage showing what fraction of the queries are coming from off 
campus, this can
be adequate for some purposes.


On Sep 28, 2007, at 11:08 AM, Koehler, Charles wrote:

> Kevin,
> It is and I will.
> Thank you,
> cwk
> -----Original Message-----
> From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
> Behalf Of Kevin Darcy
> Sent: Thursday, September 27, 2007 3:49 PM
> To: bind-users at isc.org
> Subject: Re: queries to DNS server
> Koehler, Charles wrote:
>> I am looking to turn recursion off and allow access to our internal
>> customers. Because we have a large, unknown, number of
>> students/staff/faculty that use ISPs and still have our servers set in
>> them statically I need to determine how many there are.
>> Is there a way to do this with BIND?
> Is your question "how do I tell who is querying my nameserver"? If so,
> the answer is to turn on query logging. See the "Logging" section of 
> the
> documentation for how to configure that within named.conf.
> - Kevin

More information about the bind-users mailing list