Logging no such name
chris.p.buxton at gmail.com
Tue Nov 20 18:10:13 UTC 2012
On Nov 19, 2012, at 3:32 AM, Artemis Braja wrote:
> I've been using BIND 9.8 for some time but I can't find a way to log "no such name" or "noanswer" responses with bind logging clause.
> Actually I'm able to log by setting the debug level to 3, but yet it's too hard to parse it, especially when you try to push these logs to a DB.
> Is there any possibility to log only these type of response without going to such a high debug level.
To log the responses that named sends in response to queries, you are best off using a packet sniffer of some kind. There are even commercial offerings available from multiple vendors that will capture, collect, and analyze this data for you.
More information about the bind-users