logging of desination ip-address ?

5 msg	add chinese domaine ton bind ?
1 msg	[Fwd: view function of Bind 9]
2 msg	LISA '07 Call For Papers
1 msg	Bind and ipfilter
5 msg	F5 and DNS
2 msg	Slave refresh error on zone segmented configura...
4 msg	DNSSEC support in libbind
23 msg	Virtual Hosts don't work with 'www'
19 msg	Public DNS - recursion no - Access to the Internet
2 msg	Syncing Multiple (like, 10) Views using TSIG.. ...
3 msg	DNS request timed out
1 msg	Re: bind performance guideline
2 msg	Re: ISC Bulletin #1
2 msg	expected view behavior
5 msg	Weird problem.

logging of desination ip-address ?
\ Danny Thomas (11 Feb 2007)
. \ Barry Margolin (12 Feb 2007)

7 msg	Zone file x'fer between two masters
1 msg	obtaining query source IP from an sdb driver?
4 msg	Serious bind issue
3 msg	BIND Log Analyzer

Subject:	logging of desination ip-address ?
Group:	Bind-users
From:	Danny Thomas
Date:	11 Feb 2007

While bind9 allows fine-grained control of ip-address usage
listen-on
query-source
transfer-source
and so forth, the destination address is not logged.

For example I recently wanted to find out whether
cisco boomerang dns
spurious ./NS (mainly from China)
spurious A.ROOT-SERVERS.NET/A (from China & Japan)
queries were arriving at the resolving or authoritative ip-address
of our name-servers, and I ended up using tcpdump. Luckily there
was at least one well-known source address for each of these types.

I think it could be useful to have a compile-time option enabling
whether query/update logging included destination ip/port.

Danny

--
d.thomas Danny Thomas,
+61-7-3365-8221 Software Infrastructure,
http://www.its.uq.edu.au ITS, The University of Queensland