ask about bind9 logging function: How can I log the service port number (eg. 53, 443, 853) in my log of `queries` category

Petr Špaček pspacek at isc.org
Tue Nov 26 13:36:43 UTC 2024


On 26. 11. 24 10:08, n/a via bind-users wrote:
> I am a new user in bind9.
> 
> I have setup my DNS server with port 53, port 443 (DoH), and port 853 
> (DoT). And now, in my logging file of `queries` category, one query 
> example shows as below:
> 
> 26-Nov-2024 03:55:41.524 queries: info: client @0x7f21ba9b3000 
> 111.11.11.109#61713 (ust.hk <http://ust.hk/>): query:ust.hk <http:// 
> ust.hk/>IN A +E(0)TK (111.111.111.999)
> 
> For the|queries|​ log like this, how can I print the service port number 
> used by the client? For example, for this|queries|​ log, what I want to 
> get is with the service port number as below:
> 26-Nov-2024 03:55:41.524 queries: info: client @0x7f21ba9b3000 
> 111.11.11.109#61713 (ust.hk <http://ust.hk/>): query:ust.hk <http:// 
> ust.hk/>IN A +E(0)TK (111.111.111.999#443)
> 26-Nov-2024 03:55:41.524 queries: info: client @0x7f21ba9b3000 
> 111.11.11.109#61713 (ust.hk <http://ust.hk/>): query:ust.hk <http:// 
> ust.hk/>IN A +E(0)TK (111.111.111.999#853)
> 26-Nov-2024 03:55:41.524 queries: info: client @0x7f21ba9b3000 
> 111.11.11.109#61713 (ust.hk <http://ust.hk/>): query:ust.hk <http:// 
> ust.hk/>IN A +E(0)K (111.111.111.999#53)
> 
> How should I set up the logging config options to log the service port 
> number?
> 
> I have searched for this question on Google, and asked ChatGPT, but I 
> only got answers to use other tools, like tcpdump. Is it possible to 
> just config bind9 named.conf.* for this?

Currently this is not possible, but I guess it is a legit feature request.

Please log it formally at
https://gitlab.isc.org/isc-projects/bind9/-/issues/new?issuable_template=Feature_Request

and we will have to find out if this is an 'incompatible' change or not. 
I don't know how many people rely on precise query log format, and if we 
decide that it is an incompatible change we will have to put this into 
9.21 branch only.

-- 
Petr Špaček
Internet Systems Consortium


More information about the bind-users mailing list