Enable query logging or run tcpdump on port 53. A quick Google search should explain exactly how to do either of these very easily.
Josh -----Original Message----- From: bind-users-boun...@lists.isc.org [mailto:bind-users-boun...@lists.isc.org] On Behalf Of Barry S. Finkel Sent: Friday, June 27, 2014 5:02 PM To: bind-users@lists.isc.org Subject: Re: In BIND 8.2 running on Solaris 8, how to start logging On 6/27/2014, Samad Agha <samad.agha2...@gmail.com> wrote: > Hi All, > I have two Solaris 8 servers running BIND 8.2. I'd like to retire them > both and transfer everything to a couple of RHEL 7 boxes. The City (I > work for a mid-size California city) has outsourced different aspects > of our DNS that I even lost track and have no idea what these two DNS > servers serve. I'd like to start logging all queries on these two > boxes to know who queries them. How do I start a comprehensive logging > to capture all transactions going through these two servers? > > Please advise; please be thorough and don't assume anything. Many > thanks in advance. > Regards, > Samad I may be missing something here. The servers are running BIND. What zones do the servers serve? They serve the zones listed in the BIND configuration file(s), and they may be recursive servers for your clients. Look at the config files to see what zones are mastered or slaved on the servers. --Barry Finkel _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
