Keep it simple. We use syslog-ng and named logging set to default. We get entries like this so it is easy to see who is talking to who and how long it is taking. Sample from one of our external servers. Redacted where necessary:
Nov 27 09:42:44 local@mercury named[17686]: [ID 873579 daemon.info] client x.x.x.x#39474/key zzz (house.gov): view yyyyyyyy: transfer of 'house.gov/IN': AXFR-style IXFR started: TSIG zzz Nov 27 09:42:44 local@mercury named[17686]: [ID 873579 daemon.info] client x.x.x.x#39474/key zzz (house.gov): view yyyyyyyy: transfer of 'house.gov/IN': AXFR-style IXFR ended John Manson US House of Representatives CAO/HIR/NAF/Data-Communications Senior Network Communications Specialist Desk: 202-226-4244 TCC: 202-226-6430
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users