Sorry, Shiva I have confused you. Mark is absolutely right and I was wrong. Another way is to capture responses with tcpdump or dnscap.
2012/1/30 Mark Andrews <ma...@isc.org> > > In message < > canbtt6nxwb4fqygev4x8_jl+m5ho7wfenirxzg3pgvc-kzc...@mail.gmail.com> > , Shiva Raman writes: > > Hi Peter > > > > Thanks a lot for your reply. I had enabled query-errors with debug level > 2 > > in my bind logging, now i am able to log all SERVFAIL related error logs > in > > query-errors.log. But i am unable to log the NXDOMAIN error logs . > > NXDOMAIN is not a error. It is a *normal* response code in a well > running system. Asking to log NXDOMAIN is like asking to log every > positive answer. > > > Referring to Bind documentation, i enabled delegation-only > option(which > > Logs queries that have returned NXDOMAIN as the result of a > delegation-only > > zone or a delegation-only statement in a hint or stub zone declaration) , > > but this also not logging the NXDOMAIN errors. Kindly guide me whether > any > > additional parameters to be enabled in query-errors to log NXDOMAIN also. > > delegation-only does *not* log normal NXDOMAIN responses. It logs > answers that are *forced* to NXDOMAIN. > > > Regards > > > > Shiva Raman > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > -- -- AP
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users