13 Čec
2020
13 Čec
'20
9:51
On 10. 07. 20 12:10, Daniel Salzman wrote:
On 7/10/20 12:01 PM, Smile TV wrote:
Let me stress that first we need specification what should be logged.
- client IP address?
- client port?
- client protocol?
- query name and type?
- query flags? EDNS flags?
- EDNS options?
- what to do with malformed packets?
- what are performance expectations?
...
Simple "collect dns query logs" is too vague for a proper implementation.
Petr Špaček @ CZ.NIC
Hi Daniel,
My purpose is to want to collect dns query logs using dns knot software. But when I use
the "log" command in the knot.conf file, it only gives me information related to
log debug, log transfer, log
update.
So I want to ask is there a way for the system to issue DNS query logs such as log debug,
log transfer.
It's not possible out-of-the-box. If you are able to compile Knot DNS, we could try
to implement a simple patch or module.
Daniel
>
> Regards,
> Chinhlk.
>
> Vào Th 6, 10 thg 7, 2020 lúc 16:48 Daniel Salzman <daniel.salzman(a)nic.cz
<mailto:daniel.salzman@nic.cz>> đã viết:
>
> Hi Chinhlk,
>
> Could you describe in more detail what you expect? Logging to
syslog/systemd-journal? Which items would you need to log? And so on.
> Maybe a simple patch would help. However, such a solution will probably suffer
from high system resources consumption.
>
> Regards,
> Daniel
>
> On 7/10/20 11:26 AM, Smile TV wrote:
> > Hi Anand,
> >
> > Dnstap is a module that has to be set up to generate dns query log. But I
want to ask if the knot software itself can generate dns query log itself?
> >
> > Regards,
> > Chinhlk.
> >
> > Vào Th 6, 10 thg 7, 2020 lúc 15:45 Anand Buddhdev <anandb(a)ripe.net
<mailto:anandb@ripe.net> <mailto:anandb@ripe.net
<mailto:anandb@ripe.net>>> đã viết:
> >
> > On 10/07/2020 04:16, Smile TV wrote:
> >
> > Hi Chinhlk,
> >
> > > I am deploying a DNS system using the Knot DNS software.
> > > I have read in the document and I did not see any DNS query log.
> > > So let me ask DNS Knot software can collect DNS query log? If
possible,
> > > what is the configuration?
> >
> > Look at the "dnstap" section in the documentation.
> >
> > Regards,
> > Anand
> >
> >
> --
> https://lists.nic.cz/mailman/listinfo/knot-dns-users