<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 11/09/2019 09:42, seddik alaoui
ismaili wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAGxt3+pfgm+grnHY39PPduWCJCE17Dw_a4NivvxAkDxGt8cDMg@mail.gmail.com">I'd
like to track domain requests on both NS, just to see if queries
still arrive on both DNS servers.<br>
An idea about a tool ? I've seen rec_control can do it, except
there's not enough documentation on it, have you already installed
it? </blockquote>
<p>rec_control is for the powerdns recursor, but you're talking
about powerdns authoritative.<br>
</p>
<p>There is the <a moz-do-not-send="true"
href="https://doc.powerdns.com/authoritative/settings.html#log-dns-queries">log_all_queries</a>
option, but I would rather not run that on a production server.<br>
</p>
<p>Therefore, if your DNS traffic is not too high, I would be
inclined to use either <a moz-do-not-send="true"
href="https://www.elastic.co/products/beats/packetbeat">packetbeat</a>
or just tcpdump/wireshark to capture and decode the DNS traffic -
then grep it for what you're looking for. It's the least invasive
way of doing it.</p>
<p>Regards,</p>
<p>Brian.</p>
<p>P.S. If you wanted to build a scalable, permanent way of doing
this then you could look at dnsdist with protobuf or dnstap export
- but I think that's overkill here.<br>
</p>
</body>
</html>