Logging All DNS Queries

View: New views
7 Messages — Rating Filter:   Alert me  

Logging All DNS Queries

by Bryan Brannigan :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I would like to configure PowerDNS to log all DNS queries to a text
file or to a MySQL table.  Does anyone know if this is possible?
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: Logging All DNS Queries

by bert hubert-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Wed, Jul 22, 2009 at 7:49 PM, Bryan
Brannigan<bryan@...> wrote:
> I would like to configure PowerDNS to log all DNS queries to a text
> file or to a MySQL table.  Does anyone know if this is possible?

Bryan,

The PowerDNS Authoritative Server does not have this ability, the
PowerDSN Recursor does ('quiet=off').

Another solution that is far less resource intensive is to run a
tcpdump on your UDP port, and use tools like 'ncap' to make reports on
what queries you've seen.

Good luck!
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: Logging All DNS Queries

by Brendan Oakley :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Wed, Jul 22, 2009 at 10:49 AM, Bryan Brannigan wrote:
> I would like to configure PowerDNS to log all DNS queries to a text
> file or to a MySQL table.  Does anyone know if this is possible?

There is the query-logging setting, but given Bert's response I wonder
if it is implemented in any backend. I thought I'd used it once but
it's been a while so maybe I recall incorrectly.

I find that the stats given on the web-server tool answer every
question I want to know about who is querying and for what. For
performance monitoring I have tests that make queries using
'/etc/init.d/pdns mrtg'.

Brendan
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: Logging All DNS Queries

by bert hubert-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Wed, Jul 22, 2009 at 9:36 PM, Brendan Oakley<gentux2@...> wrote:
> On Wed, Jul 22, 2009 at 10:49 AM, Bryan Brannigan wrote:
>> I would like to configure PowerDNS to log all DNS queries to a text
>> file or to a MySQL table.  Does anyone know if this is possible?
>
> There is the query-logging setting, but given Bert's response I wonder
> if it is implemented in any backend. I thought I'd used it once but
> it's been a while so maybe I recall incorrectly.

Not all backends implement it. In addition, they do not log the DNS
query by the Backend query. Most DNS queries lead to ANY-backend
queries, so you won't be able to see the type of the DNS query.

> I find that the stats given on the web-server tool answer every
> question I want to know about who is querying and for what. For
> performance monitoring I have tests that make queries using
> '/etc/init.d/pdns mrtg'.

Indeed, and I should have pointed that out!

    Bert
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: Logging All DNS Queries

by Jeroen Wunnink :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You could just tcpdump / tethereal your port 53 traffic I suppose,
they're generally oneliners that you can easily stick in a logfile to
process.

bert hubert wrote:

> On Wed, Jul 22, 2009 at 7:49 PM, Bryan
> Brannigan<bryan@...> wrote:
>  
>> I would like to configure PowerDNS to log all DNS queries to a text
>> file or to a MySQL table.  Does anyone know if this is possible?
>>    
>
> Bryan,
>
> The PowerDNS Authoritative Server does not have this ability, the
> PowerDSN Recursor does ('quiet=off').
>
> Another solution that is far less resource intensive is to run a
> tcpdump on your UDP port, and use tools like 'ncap' to make reports on
> what queries you've seen.
>
> Good luck!
> _______________________________________________
> Pdns-users mailing list
> Pdns-users@...
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
>  

--

Met vriendelijke groet,

Jeroen Wunnink,
EasyHosting B.V. Systeembeheerder
systeembeheer@...

telefoon:+31 (035) 6285455              Postbus 48
fax: +31 (035) 6838242                  3755 ZG Eemnes

http://www.easyhosting.nl
http://www.easycolocate.nl


_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Parent Message unknown Re: Logging All DNS Queries

by Wayne Beaver-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

There are also other collection and reporting tools "out there",  
including DSC (DNS Stats Collector), dns2db, etc. - a Google on any of  
those terms should send you down the right path. I have used both, in  
addition to home-rolled tools based around tcpdump, wireshark/tshark,  
dnsdump, DNScap, etc. Many options out there...

Wayne Beaver


On Jul 23, 2009, at 6:00 AM, pdns-users-request@...  
wrote:

> From: Jeroen Wunnink <jeroen@...>
> Subject: Re: [Pdns-users] Logging All DNS Queries
> To: Pdns-users <pdns-users@...>
>
> You could just tcpdump / tethereal your port 53 traffic I suppose,
> they're generally oneliners that you can easily stick in a logfile to
> process.
>
> bert hubert wrote:
>> On Wed, Jul 22, 2009 at 7:49 PM, Bryan
>> Brannigan<bryan@...> wrote:
>>
>>> I would like to configure PowerDNS to log all DNS queries to a text
>>> file or to a MySQL table.  Does anyone know if this is possible?
>>
>> Bryan,
>>
>> The PowerDNS Authoritative Server does not have this ability, the
>> PowerDSN Recursor does ('quiet=off').
>>
>> Another solution that is far less resource intensive is to run a
>> tcpdump on your UDP port, and use tools like 'ncap' to make reports  
>> on
>> what queries you've seen.
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Re: Logging All DNS Queries

by Curtis Maurand :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


How about turning up debugging and then gleaning the information from
the syslog?

--C

Wayne Beaver wrote:

> There are also other collection and reporting tools "out there",
> including DSC (DNS Stats Collector), dns2db, etc. - a Google on any of
> those terms should send you down the right path. I have used both, in
> addition to home-rolled tools based around tcpdump, wireshark/tshark,
> dnsdump, DNScap, etc. Many options out there...
>
> Wayne Beaver
>
>
> On Jul 23, 2009, at 6:00 AM, pdns-users-request@...
> wrote:
>
>> From: Jeroen Wunnink <jeroen@...>
>> Subject: Re: [Pdns-users] Logging All DNS Queries
>> To: Pdns-users <pdns-users@...>
>>
>> You could just tcpdump / tethereal your port 53 traffic I suppose,
>> they're generally oneliners that you can easily stick in a logfile to
>> process.
>>
>> bert hubert wrote:
>>> On Wed, Jul 22, 2009 at 7:49 PM, Bryan
>>> Brannigan<bryan@...> wrote:
>>>
>>>> I would like to configure PowerDNS to log all DNS queries to a text
>>>> file or to a MySQL table.  Does anyone know if this is possible?
>>>
>>> Bryan,
>>>
>>> The PowerDNS Authoritative Server does not have this ability, the
>>> PowerDSN Recursor does ('quiet=off').
>>>
>>> Another solution that is far less resource intensive is to run a
>>> tcpdump on your UDP port, and use tools like 'ncap' to make reports on
>>> what queries you've seen.
> _______________________________________________
> Pdns-users mailing list
> Pdns-users@...
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
_______________________________________________
Pdns-users mailing list
Pdns-users@...
http://mailman.powerdns.com/mailman/listinfo/pdns-users