Logging SERVFAIL Errors

Barry Finkel b19141 at anl.gov
Fri Oct 8 16:39:11 UTC 2010


Am Fri,  8 Oct 2010 09:09:16 -0500 (CDT)
schrieb b19141 at anl.gov (Barry Finkel):

>> On BIND 9.7.1-P2 I have in named.conf:
>> 
>>      channel query-errors-log {
>>              file "/var/log/named.query-errors.log" versions 3 size
>> 200k; print-category yes;
>>              print-severity yes;
>>              print-time yes;
>>              severity info;
>>      };
>> 
>>      category query-errors { query-errors-log; };  // no
>> default_syslog
>> 
>> Is this correct for logging queries that produce SERVFAIL?
>> 
>> I ran this query on the DNS server:
>> 
>> dns# dig klyuniv.ernet.in @t1dns2.anl.gov
>> 
>> ; <<>> DiG 9.7.1-P2 <<>> klyuniv.ernet.in @t1dns2.anl.gov
>> ;; global options: +cmd
>> ;; Got answer:
>> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 7278
>> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
>> 
>> ;; QUESTION SECTION:
>> ;klyuniv.ernet.in.              IN      A
>> 
>> ;; Query time: 1860 msec
>> ;; SERVER: 130.202.101.37#53(130.202.101.37)
>> ;; WHEN: Fri Oct  8 09:06:04 2010
>> ;; MSG SIZE  rcvd: 34
>> 
>> dns# 
>> 
>> and there is nothing logged in
>> 
>>      /var/log/named.query-errors.log
>> 
>> Am I doing something wrong?  Thanks.


and Torsten <toto at the-damian.de> replied:
>You have to set a debug level of at least 1 to capture SERVFAIL errors
>in your logfile.

I did

     ./rndc trace

and re-issued my query.  There was nothing in the

     /var/log/named.query-errors.log

log.  I then did another "trace" command to increase the debug level to
2, and a subsequent query command put nothing in the log.
----------------------------------------------------------------------
Barry S. Finkel
Computing and Information Systems Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
Building 240, Room 5.B.8             Internet: BSFinkel at anl.gov
Argonne, IL   60439-4828             IBMMAIL:  I1004994




More information about the bind-users mailing list