Detailed Log Analysis based on rndc stats!!

Peter Andreev andreev.peter at gmail.com
Mon Jan 30 10:50:40 UTC 2012


Sorry, Shiva I have confused you. Mark is absolutely right and I was wrong.
Another way is to capture responses with tcpdump or dnscap.

2012/1/30 Mark Andrews <marka at isc.org>

>
> In message <
> CANBtT6nxWb4fQYGev4X8_JL+m5hO7WfeniRxzg3PGVC-kZcJmg at mail.gmail.com>
> , Shiva Raman writes:
> > Hi Peter
> >
> > Thanks a lot for your reply. I had enabled query-errors with debug level
> 2
> > in my bind logging, now i am able to log all SERVFAIL related error logs
> in
> > query-errors.log. But i am unable to log the NXDOMAIN error logs .
>
> NXDOMAIN is not a error.  It is a *normal* response code in a well
> running system.  Asking to log NXDOMAIN is like asking to log every
> positive answer.
>
> >    Referring to Bind documentation, i enabled delegation-only
> option(which
> > Logs queries that have returned NXDOMAIN as the result of a
> delegation-only
> > zone or a delegation-only statement in a hint or stub zone declaration) ,
> > but this also not logging the NXDOMAIN errors. Kindly guide me whether
> any
> > additional parameters to be enabled in query-errors to log NXDOMAIN also.
>
> delegation-only does *not* log normal NXDOMAIN responses.  It logs
> answers that are *forced* to NXDOMAIN.
>
> > Regards
> >
> > Shiva Raman
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org
>



-- 
--
AP
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20120130/45aeb18b/attachment.html>


More information about the bind-users mailing list