Logging no such name

Chris Buxton chris.p.buxton at gmail.com
Tue Nov 20 18:10:13 UTC 2012

On Nov 19, 2012, at 3:32 AM, Artemis Braja wrote:
> Hello,
> I've been using BIND 9.8 for some time but I can't find a way to log "no such name" or "noanswer" responses with bind logging clause.
> Actually I'm able to log by setting the debug level to 3, but yet it's too hard to parse it, especially when you try to push these logs to a DB.
> Is there any possibility to log only these type of response without going to such a high debug level.

To log the responses that named sends in response to queries, you are best off using a packet sniffer of some kind. There are even commercial offerings available from multiple vendors that will capture, collect, and analyze this data for you.

Chris Buxton
BlueCat Networks

More information about the bind-users mailing list