Bind DNS server log level 1

[zacca]

Hi there,

Would like to ask, for a Bind DNS server, how do I change the log level to more details?

I got a Sun Cobalt RaQ4 machine which already end of life so no more support from Sun. From the default web console, no such configuration available.

Many thanks!

 

[Claudek]

G'day, You did not specify what version of BIND you were using. Am assuming you are using version 9.x -

http://www.zytrax.com/books/dns/ch7/logging.html

has information to get you going in regards to named.conf which has the logging levels

Claudius (What certifications??)

http://www.iteq.com.au

 

[zacca]

Hi Claudius,

Thx for your prompt response. Just checked that my bind version is 8.2.3-c1. Can it still follow the suggestion on that url which is for bind v9?

Many thanks!

 

[Claudek]

Actually Bind 9 does stuff a bit differently. Have a look at this site :-

http://triton.process.com/bind-docs/config.html

In the logging section, you will see all the info you can configure for, depending on how much you wish to get logged.



Claudius (What certifications??)

http://www.iteq.com.au

 

[zacca]

Hi Claudius,

I added the followings into named.conf

logging{
channel my_file {
file "/var/log/named.log"
severity debug;
print-time yes;
pirnt-severity yes;
print-category yes;
};
category default {my_file;};
category xfer-out {my_file;};
category security {my_file};
};

After I restarted named, I saw nothing logged into /var/log/named.log

Wondering if anything wrong? Million thanks!

 

[Claudek]

Notice some syntax errors there. Also you have not specified the debug level. debug 99 for example is the most detailed debugging and debug 1 gives the least debugging info.
So the 3 lines to change in the config you wrote are:

severity debug; change this to
severity debug 99;
(note for the above, I usually use severity info; )

pirnt-severity yes; change this to
print-severity yes;

category security {my_file}; change this to
category security {my_file;};





Claudius (What certifications??)

http://www.iteq.com.au

 

[zacca]

Hi Claudius,

Thanks so much for your help! Changed to the followings:

logging{
channel my_file {
file "/var/log/named.log"
severity debug 99;
print-time yes;
print-severity yes;
print-category yes;
};
category default {my_file;};
category xfer-out {my_file;};
category security {my_file;};
};

I restarted bind using "/etc/rc.d/init.d/named restart"
it returned "new pid is 34567" to me so I hoped done it correctly.

I'll wait & see how it goes.

Many thanks!

 

[Claudek]

No probs.

Cheers,

Claudius (What certifications??)

http://www.iteq.com.au

 

[zacca]

Hi Claudis,

Would like your help again. It has been a few hours but the log file size still zero....

Wondering what else should I check or do (except to reboot that server)?

Many thanks!

 

[Claudek]

Seems you got debug set in the conf file but havn't turned on tracing yet.
Enter the command:
ndc trace

Should all work now. To turn of tracing the command is :
ndc notrace




Claudius (What certifications??)

http://www.iteq.com.au

 

[zacca]

Hi Claudius,

I really dunno what's wrong with my cobalt machine, I typed ndc trace & it returend debug level:1

Half day passed already & named.log still empty?

Where else should I check? Many thanks!

 

[Claudek]

Is that dns server actually being used? Try using that dns server to do a query. A simple nslookup or ping will do.



Claudius (What certifications??)

http://www.iteq.com.au

 

[zacca]

Hi Claudius,

Yep, it's working now! thanks so much!
A star for you!

Zacca