On 10. 07. 20 12:10, Daniel Salzman wrote: > On 7/10/20 12:01 PM, Smile TV wrote: >> Hi Daniel, >> >> My purpose is to want to collect dns query logs using dns knot software. >> But when I use the "log" command in the knot.conf file, it only gives me >> information related to log debug, log transfer, log >> update. >> So I want to ask is there a way for the system to issue DNS query logs such >> as log debug, log transfer. > > It's not possible out-of-the-box. If you are able to compile Knot DNS, we > could try to implement a simple patch or module.
Let me stress that first we need specification what should be logged. - client IP address? - client port? - client protocol? - query name and type? - query flags? EDNS flags? - EDNS options? - what to do with malformed packets? - what are performance expectations? ... Simple "collect dns query logs" is too vague for a proper implementation. Petr Špaček @ CZ.NIC > > Daniel > >> >> Regards, >> Chinhlk. >> >> Vào Th 6, 10 thg 7, 2020 lúc 16:48 Daniel Salzman <[email protected] >> <mailto:[email protected]>> đã viết: >> >> Hi Chinhlk, >> >> Could you describe in more detail what you expect? Logging to >> syslog/systemd-journal? Which items would you need to log? And so on. >> Maybe a simple patch would help. However, such a solution will probably >> suffer from high system resources consumption. >> >> Regards, >> Daniel >> >> On 7/10/20 11:26 AM, Smile TV wrote: >> > Hi Anand, >> > >> > Dnstap is a module that has to be set up to generate dns query log. >> But I want to ask if the knot software itself can generate dns query log >> itself? >> > >> > Regards, >> > Chinhlk. >> > >> > Vào Th 6, 10 thg 7, 2020 lúc 15:45 Anand Buddhdev <[email protected] >> <mailto:[email protected]> <mailto:[email protected] <mailto:[email protected]>>> >> đã viết: >> > >> > On 10/07/2020 04:16, Smile TV wrote: >> > >> > Hi Chinhlk, >> > >> > > I am deploying a DNS system using the Knot DNS software. >> > > I have read in the document and I did not see any DNS query log. >> > > So let me ask DNS Knot software can collect DNS query log? If >> possible, >> > > what is the configuration? >> > >> > Look at the "dnstap" section in the documentation. >> > >> > Regards, >> > Anand >> > >> > >> -- >> https://lists.nic.cz/mailman/listinfo/knot-dns-users -- https://lists.nic.cz/mailman/listinfo/knot-dns-users
