On 10. 07. 20 12:10, Daniel Salzman wrote:
> On 7/10/20 12:01 PM, Smile TV wrote:
>> Hi Daniel,
>>
>> My purpose is to want to collect dns query logs using dns knot software.  
>> But when I use the "log" command in the knot.conf file, it only gives me 
>> information related to log debug, log transfer, log
>> update.  
>> So I want to ask is there a way for the system to issue DNS query logs such 
>> as log debug, log transfer.
> 
> It's not possible out-of-the-box. If you are able to compile Knot DNS, we 
> could try to implement a simple patch or module.

Let me stress that first we need specification what should be logged.
- client IP address?
- client port?
- client protocol?
- query name and type?
- query flags? EDNS flags?
- EDNS options?
- what to do with malformed packets?
- what are performance expectations?
...

Simple "collect dns query logs" is too vague for a proper implementation.

Petr Špaček  @  CZ.NIC

> 
> Daniel
> 
>>
>> Regards,
>> Chinhlk.
>>
>> Vào Th 6, 10 thg 7, 2020 lúc 16:48 Daniel Salzman <[email protected] 
>> <mailto:[email protected]>> đã viết:
>>
>>     Hi Chinhlk,
>>
>>     Could you describe in more detail what you expect? Logging to 
>> syslog/systemd-journal? Which items would you need to log? And so on.
>>     Maybe a simple patch would help. However, such a solution will probably 
>> suffer from high system resources consumption.
>>
>>     Regards,
>>     Daniel
>>
>>     On 7/10/20 11:26 AM, Smile TV wrote:
>>     > Hi Anand,
>>     >
>>     > Dnstap is a module that has to be set up to generate dns query log.  
>> But I want to ask if the knot software itself can generate dns query log 
>> itself?
>>     >
>>     > Regards, 
>>     > Chinhlk.
>>     >
>>     > Vào Th 6, 10 thg 7, 2020 lúc 15:45 Anand Buddhdev <[email protected] 
>> <mailto:[email protected]> <mailto:[email protected] <mailto:[email protected]>>> 
>> đã viết:
>>     >
>>     >     On 10/07/2020 04:16, Smile TV wrote:
>>     >
>>     >     Hi Chinhlk,
>>     >
>>     >     > I am deploying a DNS system using the Knot DNS software.
>>     >     > I have read in the document and I did not see any DNS query log.
>>     >     > So let me ask DNS Knot software can collect DNS query log? If 
>> possible,
>>     >     > what is the configuration?
>>     >
>>     >     Look at the "dnstap" section in the documentation.
>>     >
>>     >     Regards,
>>     >     Anand
>>     >
>>     >
>>     -- 
>>     https://lists.nic.cz/mailman/listinfo/knot-dns-users

-- 
https://lists.nic.cz/mailman/listinfo/knot-dns-users

Reply via email to