Logging SERVFAIL Errors

Mark Andrews marka at isc.org
Sat Oct 9 00:27:38 UTC 2010


In message <20101008163912.378754DA85 at britaine.cis.anl.gov>, Barry Finkel write
s:
> Am Fri,  8 Oct 2010 09:09:16 -0500 (CDT)
> schrieb b19141 at anl.gov (Barry Finkel):
> 
> >> On BIND 9.7.1-P2 I have in named.conf:
> >> 
> >>      channel query-errors-log {
> >>              file "/var/log/named.query-errors.log" versions 3 size
> >> 200k; print-category yes;
> >>              print-severity yes;
> >>              print-time yes;
> >>              severity info;
> >>      };
> >> 
> >>      category query-errors { query-errors-log; };  // no
> >> default_syslog
> >> 
> >> Is this correct for logging queries that produce SERVFAIL?
> >> 
> >> I ran this query on the DNS server:
> >> 
> >> dns# dig klyuniv.ernet.in @t1dns2.anl.gov
> >> 
> >> ; <<>> DiG 9.7.1-P2 <<>> klyuniv.ernet.in @t1dns2.anl.gov
> >> ;; global options: +cmd
> >> ;; Got answer:
> >> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 7278
> >> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> >> 
> >> ;; QUESTION SECTION:
> >> ;klyuniv.ernet.in.              IN      A
> >> 
> >> ;; Query time: 1860 msec
> >> ;; SERVER: 130.202.101.37#53(130.202.101.37)
> >> ;; WHEN: Fri Oct  8 09:06:04 2010
> >> ;; MSG SIZE  rcvd: 34
> >> 
> >> dns# 
> >> 
> >> and there is nothing logged in
> >> 
> >>      /var/log/named.query-errors.log
> >> 
> >> Am I doing something wrong?  Thanks.
> 
> 
> and Torsten <toto at the-damian.de> replied:
> >You have to set a debug level of at least 1 to capture SERVFAIL errors
> >in your logfile.
> 
> I did
> 
>      ./rndc trace
> 
> and re-issued my query.  There was nothing in the
> 
>      /var/log/named.query-errors.log
> 
> log.  I then did another "trace" command to increase the debug level to
> 2, and a subsequent query command put nothing in the log.

Because your logging clause says to filter at "info".

> ----------------------------------------------------------------------
> Barry S. Finkel
> Computing and Information Systems Division
> Argonne National Laboratory          Phone:    +1 (630) 252-7277
> 9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
> Building 240, Room 5.B.8             Internet: BSFinkel at anl.gov
> Argonne, IL   60439-4828             IBMMAIL:  I1004994
> 
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list