queries to DNS server
John Wobus
jw354 at cornell.edu
Fri Sep 28 16:16:38 UTC 2007
Another method, that easily gets you a quick sample of your clients is
using
tcpdump (or snoop). Collect X number of packets (e.g. 10,000) and see
who's
calling you.
Depending upon how you plan to use the data, e.g., if you were just
looking for a quick
percentage showing what fraction of the queries are coming from off
campus, this can
be adequate for some purposes.
John
On Sep 28, 2007, at 11:08 AM, Koehler, Charles wrote:
> Kevin,
>
> It is and I will.
>
> Thank you,
> cwk
>
> -----Original Message-----
> From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On
> Behalf Of Kevin Darcy
> Sent: Thursday, September 27, 2007 3:49 PM
> To: bind-users at isc.org
> Subject: Re: queries to DNS server
>
> Koehler, Charles wrote:
>> I am looking to turn recursion off and allow access to our internal
>> customers. Because we have a large, unknown, number of
>> students/staff/faculty that use ISPs and still have our servers set in
>> them statically I need to determine how many there are.
>>
>> Is there a way to do this with BIND?
>>
> Is your question "how do I tell who is querying my nameserver"? If so,
> the answer is to turn on query logging. See the "Logging" section of
> the
>
> documentation for how to configure that within named.conf.
>
> - Kevin
>
>
>
>
>
More information about the bind-users
mailing list