The answers to both questions can probably be answered by logs
(possibly a slightly different config than my example below).  Have a
look at the manual for logging:
https://bind9.readthedocs.io/en/v9_18_9/reference.html#logging-block-definition-and-usage
My guess is that you can gain insite to both of your questions by
printing logs at the appropriate severity.

logging {
  channel primary_log {
    file "/var/log/named/primary.log" versions 3 size 250k;
    severity info;
    print-time local;
  };
  category default {
    primary_log;
  };
};

On Tue, Dec 6, 2022 at 7:48 AM Silva Carlos <scarlos.4...@gmail.com> wrote:
>
> Hello everybody
>
> I am newbie to BIND DNS.
>
> I would like your help to understand a little more about the problem below, 
> please:
>
> ***Problem: Sometimes my DNS reports too many NXDOMAIN responses.
>
> ***Question 1: Is there any way to identify the site/domain that is being 
> consulted and consequently generating NXDOMAIN?
>
> ***Question 2: Is there any way to identify the DNS client that is querying 
> this non-existent website/domain?
>
>  I use DNSTOP, but it doesn't have a lot of information.
>
> Many thanks to whoever helps me.
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
>
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to