Logging SERVFAIL Errors
Mark Andrews
marka at isc.org
Sat Oct 9 00:27:38 UTC 2010
In message <20101008163912.378754DA85 at britaine.cis.anl.gov>, Barry Finkel write
s:
> Am Fri, 8 Oct 2010 09:09:16 -0500 (CDT)
> schrieb b19141 at anl.gov (Barry Finkel):
>
> >> On BIND 9.7.1-P2 I have in named.conf:
> >>
> >> channel query-errors-log {
> >> file "/var/log/named.query-errors.log" versions 3 size
> >> 200k; print-category yes;
> >> print-severity yes;
> >> print-time yes;
> >> severity info;
> >> };
> >>
> >> category query-errors { query-errors-log; }; // no
> >> default_syslog
> >>
> >> Is this correct for logging queries that produce SERVFAIL?
> >>
> >> I ran this query on the DNS server:
> >>
> >> dns# dig klyuniv.ernet.in @t1dns2.anl.gov
> >>
> >> ; <<>> DiG 9.7.1-P2 <<>> klyuniv.ernet.in @t1dns2.anl.gov
> >> ;; global options: +cmd
> >> ;; Got answer:
> >> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 7278
> >> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> >>
> >> ;; QUESTION SECTION:
> >> ;klyuniv.ernet.in. IN A
> >>
> >> ;; Query time: 1860 msec
> >> ;; SERVER: 130.202.101.37#53(130.202.101.37)
> >> ;; WHEN: Fri Oct 8 09:06:04 2010
> >> ;; MSG SIZE rcvd: 34
> >>
> >> dns#
> >>
> >> and there is nothing logged in
> >>
> >> /var/log/named.query-errors.log
> >>
> >> Am I doing something wrong? Thanks.
>
>
> and Torsten <toto at the-damian.de> replied:
> >You have to set a debug level of at least 1 to capture SERVFAIL errors
> >in your logfile.
>
> I did
>
> ./rndc trace
>
> and re-issued my query. There was nothing in the
>
> /var/log/named.query-errors.log
>
> log. I then did another "trace" command to increase the debug level to
> 2, and a subsequent query command put nothing in the log.
Because your logging clause says to filter at "info".
> ----------------------------------------------------------------------
> Barry S. Finkel
> Computing and Information Systems Division
> Argonne National Laboratory Phone: +1 (630) 252-7277
> 9700 South Cass Avenue Facsimile:+1 (630) 252-4601
> Building 240, Room 5.B.8 Internet: BSFinkel at anl.gov
> Argonne, IL 60439-4828 IBMMAIL: I1004994
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list