topic Re: MS DNS logging in Operating System - Linux

MS DNS logging

David S. Bell — Fri, 18 Mar 2005 09:57:57 GMT

I am running Bind as my primary DNS and have a secondary running microsoft DNS. I am new to the Microsoft DNS and would like to start logging some information. I added the registry entry LogFileMaxSize to 200MB so I can actually get more that 15 minutes of data. I then thought I turned on logging of queries and updates but the winnt\system32\DNS\dns.log remains at 0 in size. The help said stop the DNS server then use wordpad to view the log but I need to keep the service running. Is there any way to view the log while the service is running or will I have to script a stop/move log/start to view the log contents?
Logs are no good unless you can read them.

Re: MS DNS logging

harry d brown jr — Fri, 18 Mar 2005 10:18:44 GMT

I'd have to day that you might want to build a second M$ box (I hate saying that) making it the failover box. That way you can take one down to view the log without severely crippling the users.

Are you running bind 9.2.x on your HP box??

live free or die
harry d brown jr

Re: MS DNS logging

Steven E. Protter — Fri, 18 Mar 2005 10:20:31 GMT

You need to start and stop the DNS service to get that log.

Since its a secondary, there may not be a lot of activity there since BIND on Unix is taking care of most of the DNS requests.

SEP

Re: MS DNS logging

David S. Bell — Fri, 18 Mar 2005 10:32:23 GMT

I am running 9.2 but on a RH Linux box. The secondary is the "Primary" DNS for a that particular location so it is very hard to take it down for any length of time. I guess I will have to script it to move the log at a specified time.

Thanks,
Dave

Re: MS DNS logging

harry d brown jr — Fri, 18 Mar 2005 10:39:09 GMT

yOu could check out the log on the RH box. It should contain the M$ queries, unless the M$ box is a true secondary DNS server.

live free or die
harry d brown jr