monitoring DNS, want list of sites being accessed 1

[josephwalter]

I'm setting up content filtering with DNS (the same method commonly used to filter out ad servers). I know this isn't the best way to control access to the Internet, but I'm doing it more as a deterrent.

I'd like to monitor what domain names the DNS server has been dealing with. Windows Event Viewer is only logging when the server is started.

Is there a way to log or monitor the domain names the DNS server resolves, in order to create a monthly list of sites I can manually review (for potentional redirection via the HOSTS file)?

 

[Seaspray0]

You can open the DNS server and select view, advanced. Now you should see a folder called cached lookups. Unfortunately, these entries expire before a month's time and you do not have control over their expiration.


A+/MCP/MCSE/MCDBA

 

[josephwalter]

that was what i was looking for, thank you seaspray0. (i can even export the list of domain names.) what a clever hiding place.

unfortunately, i have to export .com, .net, etc separately; and the export doesn't include the IP addresses. do you know of a way to export the IP addresses?