On 2011-12-16, James Shupe <jsh...@osre.org> wrote: > Reporting shouldn't be done on your production servers. Set up a > centralized syslog server and send your query logs there for analysis.
sending dns query logs via syslog to a remote server? oh man... how about mirror ports & https://www.dns-oarc.net/tools/dsc