<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Or if you are ready to take some pain, then take the mirror from the network side, parse the packets and you can achieve whaterver you want to do, build beautiful graphs, have reports and what not.<div class="">This will also help in reducing the load on your DNS node by disabling the logging completely and you can achieve high QPS.</div><div class=""><br class=""></div><div class="">One such tool which can do all for you is dnsmonster - <a href="https://github.com/mosajjal/dnsmonster" class="">https://github.com/mosajjal/dnsmonster</a> . Just send mirror traffic to this and it will do everything for you.</div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Gaurav Kansal</div><div class=""><br class=""></div><div class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 25-Apr-2022, at 22:15, <a href="mailto:m3047@m3047.net" class="">m3047@m3047.net</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">More specificity would help. OTOH you mentioned the word "compile"...<br class=""><br class="">On Mon, 25 Apr 2022, King, Harold Clyde (Hal) via bind-users wrote:<br class=""><blockquote type="cite" class="">I asked this last week, but I didn't an answer. Who can I tell if a DNS query is refused or answered? Is it in the log files?<br class=""></blockquote><br class="">Not the latest version of BIND (9.12), but here's what I get in the log:<br class=""><br class="">25-Apr-2022 06:54:33.353 debug 2: fetch completed at resolver.c:4176 for <a href="http://time.nist.gov/A" class="">time.nist.gov/A</a> in 10.000446: timed out/success [domain:<a href="http://nist.gov" class="">nist.gov</a>,referral:0,restart:1,qrysent:4,timeout:0,lame:0,quota:0,neterr:0,badresp:0,adberr:0,findfail:0,valfail:0]<br class="">25-Apr-2022 06:56:21.593 debug 2: fetch completed at resolver.c:4176 for <a href="http://time.nist.gov/A" class="">time.nist.gov/A</a> in 10.000430: timed out/success [domain:<a href="http://nist.gov" class="">nist.gov</a>,referral:0,restart:2,qrysent:10,timeout:0,lame:0,quota:0,neterr:0,badresp:0,adberr:0,findfail:0,valfail:0]<br class=""><br class="">Here's the config for that:<br class=""><br class=""> // Must start named with -d 2 for this to be activated,<br class=""> // otherwise it's just silent.<br class=""> channel queryerrors {<br class=""> file "bind-query-errors.log" versions 2 size 20m;<br class=""> severity debug 2;<br class=""> print-category no;<br class=""> print-severity yes;<br class=""> print-time yes;<br class=""> };<br class=""><br class="">I would expect the information you seek to be available via Dnstap.<br class=""><br class="">--<br class=""><br class="">Fred Morris, internet plumber<br class=""><br class="">-- <br class="">Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" class="">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br class=""><br class="">ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" class="">https://www.isc.org/contact/</a> for more information.<br class=""><br class=""><br class="">bind-users mailing list<br class=""><a href="mailto:bind-users@lists.isc.org" class="">bind-users@lists.isc.org</a><br class="">https://lists.isc.org/mailman/listinfo/bind-users<br class=""></div></div></blockquote></div><br class=""></div>
<br><html><head></head><body>
<p><a href="https://amritmahotsav.nic.in/" target="_blank"><img style="width: 450px; height: 113px;" src='https://email.gov.in/videos/images/75.jpg'/></a></p>
</body></html>
<br></body></html>