How to get the list of ip using hpux 11.00 DNS Server?

[PSS SYS ADMIN]

Hi everyone,
I want to trace the list of the ip that use the hpux 11.00 DNS server.
What I have to do?

Regards...
PSS

[Patrick Wallek]

Go to the /etc/named.data directory. Have a look at all the db.* files in the directory. Those files contain all of your DNS IP Addresses and names.

You could also look at the /etc/hosts file on your primary DNS server as it *SHOULD* list all hosts as well.

[PSS SYS ADMIN]

I want to know the ip of all the clients using the hpux 11.00 DNS Server for name resolution

[Patrick Wallek]

I am not sure that is possible. I don't think there is a way to trace who does a lookup against a DNS Server.

The only way that I know if to 1) Check the config. of all of your machines or 2) Turn DNS off and see what breaks and who screams.

[PSS SYS ADMIN]

Patrick this is a solution, but the as a subsequent action I'll have to find a new job.

[Patrick Wallek]

The 2nd was given in jest. :) I certainly don't recommend that for a production environment.

[Sundar_7]

Hi,

Install tcpdump or similar sniffer softwares in the DNS server and run it for a couple of days and log only the traffic to port 53 UDP & 53 TCP.

Looking at the source IP address from the LOG file , I guess u should be able to get a fair idea of who is using it ?

Makes sense ?

[Steven E. Protter]

I would think a utility parsing the netstat -an | grep 53 output to a log file could be run regularly to get you this data.

SEP

[Sundar_7]

Small resolver queries from the DNS client uses 53/UDP and 53/TCP is only used in case of zone transfers, so I would really doubt if netstat -an | grep 53 is going to get u something useful.