<div dir="ltr"><div>
I can't seem to get any debug information out of BIND for troubleshooting a dnstap problem I am having.<br></div><div><br></div><div>I have a CentOS 8.3.2011 VM with the COPR packages installed. <br></div><div><br></div><div>My /etc/opt/isc/scls/isc-bind/named.conf :<br></div><div>options {<br> directory "/var/opt/isc/scls/isc-bind/named/data";<br> listen-on { any; };<br> listen-on-v6 { any; };<br> dnssec-validation auto;<br> dnstap {all;};<br>// dnstap-output unix "/var/opt/isc/scls/isc-bind/run/named/dnstap.sock";<br> dnstap-output unix "/var/opt/isc/scls/isc-bind/log/named/dnstap.sock";<br> dnstap-identity "<a href="http://dnstap01.ldschurch.org">dnstap01.ldschurch.org</a>";<br> dnstap-version "bind-9.16.12";<br>};<br><br>logging { <br></div><div>[SNIP]<br></div><div> channel dnstap_log {<br> file "/var/opt/isc/scls/isc-bind/log/named/dnstap" versions 3 size 20m;<br> print-time yes;<br> print-category yes;<br> print-severity yes;<br> severity debug 10;<br> };</div><div>[SNIP]<br></div><div> category dnstap { dnstap_log; default_debug; };</div><div>};</div><div><br></div><div>On startup, the /var/opt/isc/scls/isc-bind/log/named/dnstap file is created, but no information is logged:<br></div><div><br></div><div> 4 -rw-r--r--. 1 named named system_u:object_r:named_log_t:s0 54 Mar 1 16:23 dnstap</div><div><br></div><div>This is despite /var/log/messages having the following line:</div><div><br></div><div> opening dnstap destination '/var/opt/isc/scls/isc-bind/log/named/dnstap.sock'</div><div><br></div><div>Which I would have expected to see logged in
/var/opt/isc/scls/isc-bind/log/named/dnstap
. On shutdown, this single entry is logged in
/var/opt/isc/scls/isc-bind/log/named/dnstap:</div><div><br></div><div>01-Mar-2021 16:23:31.597 dnstap: info: closing dnstap</div><div><br></div><div>There is nothing relevant in /var/log/audit/audit.log, so I don't think it is SELinux related, especially since there is successful log entry on shutdown.</div><div><br></div><div>I have tried changing the severity level from "info", to "debug 1", to "debug 3", and then to "debug 10", but I can't seem to get any more information out other than the single message about "closing dnstap".</div><div><br></div><div>Any idea what I am doing wrong?<br></div><div><br></div></div>