<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV>Hi,</DIV>
<DIV> </DIV>
<DIV>Actually i am looking for open source software which can be installed on redhat linux BIND server to geneerate report from the DNS logs.</DIV>
<DIV> </DIV>
<DIV>Regards</DIV>
<DIV>Papdheen M<BR><BR>--- On <B>Sun, 20/3/11, Warren Kumari <I><warren@kumari.net></I></B> wrote:<BR></DIV>
<BLOCKQUOTE style="BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: 5px"><BR>From: Warren Kumari <warren@kumari.net><BR>Subject: Re: Need help on DNS reporter<BR>To: "babu dheen" <babudheen@yahoo.co.in><BR>Cc: "terry" <terry@list.dnsbed.com>, bind-users@lists.isc.org<BR>Date: Sunday, 20 March, 2011, 8:10 PM<BR><BR>
<DIV class=plainMail>Enable query logging, then:<BR><BR>cat queries.log | grep 'query: example.com' | awk '{print $6}' | sed 's/#.*//' | sort -n | uniq -c | sort -rn | head -100 | more<BR><BR><BR>or something similar? <BR><BR>W<BR><BR>On Mar 20, 2011, at 10:09 AM, babu dheen wrote:<BR><BR>> Hi,<BR>> <BR>> I am getting below status on this command.. Only internal DNS servers are allowed to query our gateway DNS server as client.<BR>> <BR>> number of zones: 12<BR>> debug level: 0<BR>> xfers running: 0<BR>> xfers deferred: 0<BR>> soa queries in progress: 0<BR>> query logging is ON<BR>> recursive clients: 1/1000<BR>> tcp clients: 0/100<BR>> server is up and running<BR>> <BR>> <BR>> --- On Sun, 20/3/11, terry <<A href="http://in.mc1373.mail.yahoo.com/mc/compose?to=terry@list.dnsbed.com" ymailto="mailto:terry@list.dnsbed.com">terry@list.dnsbed.com</A>> wrote:<BR>> <BR>> From: terry <<A
href="http://in.mc1373.mail.yahoo.com/mc/compose?to=terry@list.dnsbed.com" ymailto="mailto:terry@list.dnsbed.com">terry@list.dnsbed.com</A>><BR>> Subject: Re: Need help on DNS reporter<BR>> To: "babu dheen" <<A href="http://in.mc1373.mail.yahoo.com/mc/compose?to=babudheen@yahoo.co.in" ymailto="mailto:babudheen@yahoo.co.in">babudheen@yahoo.co.in</A>><BR>> Cc: <A href="http://in.mc1373.mail.yahoo.com/mc/compose?to=bind-users@lists.isc.org" ymailto="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</A><BR>> Date: Sunday, 20 March, 2011, 12:42 PM<BR>> <BR>> How will "rndc status" take something good for you?<BR>> <BR>> <BR>> <BR>> 2011/3/20 babu dheen <<A href="http://in.mc1373.mail.yahoo.com/mc/compose?to=babudheen@yahoo.co.in" ymailto="mailto:babudheen@yahoo.co.in">babudheen@yahoo.co.in</A>><BR>> Hi,<BR>> <BR>> Can anyone let me know is there any open source software available to generate
report for DNS service based on DNS BIND query logs.<BR>> <BR>> We have BIND DNS running RHEL 5.0. Would like to generate report based on its logs so that we can identify list of clients quering external domains and its query count.<BR>> <BR>> Many clients in our company infected with malware which thus send unnecessary query to remote external domain (non available domain). So if we have any software which can generate the report from DNS BIND logs, will be very helpful.<BR>> <BR>> <BR>> Regards<BR>> Babu<BR>> <BR>> <BR>> _______________________________________________<BR>> bind-users mailing list<BR>> <A href="http://in.mc1373.mail.yahoo.com/mc/compose?to=bind-users@lists.isc.org" ymailto="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</A><BR>> <A href="https://lists.isc.org/mailman/listinfo/bind-users"
target=_blank>https://lists.isc.org/mailman/listinfo/bind-users</A><BR>> <BR>> <BR>> <BR>> -- <BR>> www.DNSbed.com<BR>> <BR>> _______________________________________________<BR>> bind-users mailing list<BR>> <A href="http://in.mc1373.mail.yahoo.com/mc/compose?to=bind-users@lists.isc.org" ymailto="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</A><BR>> <A href="https://lists.isc.org/mailman/listinfo/bind-users" target=_blank>https://lists.isc.org/mailman/listinfo/bind-users</A><BR><BR></DIV></BLOCKQUOTE></td></tr></table><br>