We updated to the latest 1.2.0-RC3 and it seems that the log category “answering” still does not provide any details on queries to syslog. Any feedback on what I might be doing wrong? Thanks! Jonathan From: knot-dns-users-bounces(a)lists.nic.cz [mailto:knot-dns-users-bounces@lists.nic.cz] On Behalf Of jh(a)netriplex.com Sent: Wednesday, March 13, 2013 8:34 PM To: knot-dns-users(a)lists.nic.cz Subject: [knot-dns-users] Query logging Hello, Is there any existing functionality to log queries? I’ve enabled all existing logging for the “answer” category and do not see any. But maybe it is unsupported in version 1.1.0? log { syslog { answering all; } } Thanks, Jonathan _______________________________________________ knot-dns-users mailing list knot-dns-users(a)lists.nic.cz https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users

While debugging may be handy, we actually need to log all DNS queries to domains for statistical reporting purposes. If not to syslog, at least to a flat file we can parse for inserting into a database. I can use snmp to see bandwidth on the server interface, but we have no idea even about queries per second the server is handling let alone which domains are getting hit the most. For us, more data is better than less. Best, Jonathan From: Ondřej Surý [mailto:ondrej.sury@nic.cz] Sent: Monday, March 18, 2013 3:32 PM To: <jh(a)netriplex.com> Cc: <knot-dns-users(a)lists.nic.cz> Subject: Re: [knot-dns-users] Query logging There's nothing wrong you are doing, there's only a limited information we are logging in this category. We are having an internal discussion that it might be better to just kill this category. I have one question though, do you feel it's valuable to log all the queries as opposed to using a network dump tool? E.g. I see this option merely as a useful tool to check if the query was parsed correctly, but not as a general debugging tool since it can consume quite a lot of resources. Ondřej Surý On 18. 3. 2013, at 18:58, <jh(a)netriplex.com> wrote: We updated to the latest 1.2.0-RC3 and it seems that the log category “answering” still does not provide any details on queries to syslog. Any feedback on what I might be doing wrong? Thanks! Jonathan From: knot-dns-users-bounces(a)lists.nic.cz [mailto:knot-dns-users-bounces@lists.nic.cz] On Behalf Of jh(a)netriplex.com Sent: Wednesday, March 13, 2013 8:34 PM To: knot-dns-users(a)lists.nic.cz Subject: [knot-dns-users] Query logging Hello, Is there any existing functionality to log queries? I’ve enabled all existing logging for the “answer” category and do not see any. But maybe it is unsupported in version 1.1.0? log { syslog { answering all; } } Thanks, Jonathan _______________________________________________ knot-dns-users mailing list knot-dns-users(a)lists.nic.cz https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users

Hi, On Mar 18, 2013, at 20:32 , Ondřej Surý wrote: Here's one vote for NOT doing query logging in an authoritative server. Some of us are very performance sensitive and even more complexity sensitive. I want a lean and mean server with as much performance as possible. There are oodles of alternatives for query logging outside the nameserver itself. Apart from more specialized tools like dnscap / dscng / packetq / PF_RING, etc, you really get your query log from basically just a plain tcpdump -i eth0 port 53 i.e. there's just no need (other than "convenience"). In our case, we will not even do the packet capturing on the server host(s), we do that on other hardware in front.

Regards, Johan PS. BTW, this debate has been a regular feature regarding NSD (and Unbound). Unbound caved in a couple of years ago but NSD still does not provide query logging. Because there's no need to provide that in the nameserver. Knot is exactly the same. _______________________________________________ knot-dns-users mailing list knot-dns-users(a)lists.nic.cz https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users