Your question and problem aren't clearly stated. I think that's because you don't really understand the environment you're working with.

I'm guessing you have systemd resolved running; start there. You probably need to turn it off. Then name resolution will be broken until you get it properly set up with BIND. If you're looking for smoke, look in (the correct) resolv.conf. You should also familiarize yourself with nsswitch.conf to get a kind of "lay of the land".

(You probably want to be more selective on what you have written by Dnstap. You'll also probably find that the information is in different places in the protobuf payload depending on the type of query / response being logged.)

--

Fred Morris

On Tue, 7 Jan 2025, S L, Meghana via bind-users wrote:

We have setup a bind with dnstap enabled and bind is running on channel 127.0.0.1. We want to write all DNS queries resolved by any name servers to dnstap file. But ,it is writing the query logging to dnstap file which resolving only by 127.0.0.1 and localhost name servers. bind version is 9.18.32 and it is running on ubuntu. Please help us with the setup to run it on 127.0.0.53 or logging all DNS queries resolving by all name servers on dnstap file. Thanks.
[...]
From: S L, Meghana
Sent: 07 January 2025 20:00
To: bind-users@lists.isc.org
Subject: Need support setting up bind with dnstap

Hello,

We have setup a bind with dnstap enabled and bind is running on channel 127.0.0.1. We want to write all DNS queries resolved by any name servers to dnstap file. But ,it is writing the query logging to dnstap file which resolving only by 127.0.0.1 and localhost name servers. bind version is 9.18.32 and it is running on ubuntu. Please help us with the setup to run it on 127.0.0.53 or logging all DNS queries resolving by all name servers on dnstap file. Thanks.

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to