Monitoring DNS

  • Thread starter Thread starter Hernan s
  • Start date Start date
H

Hernan s

Hi! I have a DNS server and I want to know what IP ask what direccion...
I want to know what user ask what internet page.
Exist a program that do that?
 
In Hernan s <[email protected]> posted a question
Then Kevin replied below:
: Hi! I have a DNS server and I want to know what IP ask what
: direccion... I want to know what user ask what internet page.
: Exist a program that do that?

It is possible to enable logging on DNS to log all queries and what IP they
come from but it causes DNS to slow down considerably.
Get a Proxy Server. This is standard in most proxy servers.
 
In Hernan s <[email protected]> posted a question
Then Kevin replied below:
: How Can I enable this option?
:
Use the DNS console, right Click on The DNS server object, choose
properties, Logging Tab.
 
I think you need to use the right tool for the right job. This is not DNS'
job. The log you will get from DNS is NOT what you are looking for for this
project. for one, this log is not intelligent or intuitive enough to make
any meaningful interpretation possible. As Kevin said, get a Proxy (ISA
server is recommended). however, if you still insist on using DNS, what you
want to enableis the "Debug logging". Check off everything, specify the
location where you want the log file written to, then increase the Maximum
Size to the largest numerical number you can think of (my Lab server is
currently set to 999000000). The log is very chatty. It is meant for
debugging, but it is the only thing close to what you are looking for in
DNS.

--
Sincerely,

Dèjì Akómöláfé, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
 
Hs> I want to know what user ask what internet page.

Install a proxy HTTP server and make its use mandatory. Then read its log.
Be aware of the ramifications of doing these.

This is not a DNS matter.
 
I think you need to use the right tool for the right job. This is not
DNS' job. The log you will get from DNS is NOT what you are looking
for for this project. for one, this log is not intelligent or
intuitive enough to make any meaningful interpretation possible. As
Kevin said, get a Proxy (ISA server is recommended). however, if you
still insist on using DNS, what you want to enableis the "Debug
logging". Check off everything, specify the location where you want
the log file written to, then increase the Maximum Size to the
largest numerical number you can think of (my Lab server is currently
set to 999000000). The log is very chatty. It is meant for debugging,
but it is the only thing close to what you are looking for in DNS.


Dèjì Akómöláfé, MCSE MCSA MCP+I
Click to expand...

I agree about Proxy or ISA.
In addition, you can increase the DNS logging level sent to the Event
viewer...

198408 - Microsoft DNS Server Registry Parameters, Part 1 of 3 (scroll down
towards the bottom of the article):
http://support.microsoft.com/?id=198408


--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Back
Top