Thanks Chuck Yes, that would be a solution, but i need logs processed through syslog and stored into database (matching the initial query from query log).
Pharsing tcpdump is not going to be suitable for highly loaded system. I was more looking for a solution to log responses same way queryes are logged. Regards, On Thursday, June 23, 2011 09:44:46 pm Chuck Swiger wrote: > On Jun 23, 2011, at 12:16 PM, Stefan Certic wrote: > > Does anyone have idea on following... Apart from bind9 query log, is it > > possible to log response returned to client? > > Sure: use tcpdump, wireshark, or another network sniffer of your choice and > observe DNS responses to the clients you're interested in. (Whether this > is better than using query logging is another question entirely.) > > Regards, -- Stefan Certic RoutoMessaging 48 Charlotte Street London, W1T 2NS United Kingdom http://www.routomessaging.com GSMA Associate Member Switchboard +44 (0) 870 231 7777 Fax + 44 (0) 870 231 7775 Email : ste...@routotelecom.com MSN ID : ste...@routotelecom.com DISCLAIMER This email contains information provided by Routo Telecommunications Ltd, which may be privileged or confidential. It is meant only for the individual(s) or entity named above. If you are not the intended recipient, note that disclosing, copying, distributing or using this information is prohibited. If you have received this email in error, please let me know immediately on the email address above. Routo Telecommunications Ltd may not be held responsible for the content of this email as it may reflect the personal view of the sender and not that of the company. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. We monitor our email system and may record your emails. Routo Telecommunications Ltd Registration Number 04546322 has its principal place of business at 48 Charlotte Street, London, W1T 2NS, United Kingdom. _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
