/usr/share/doc/lire/user-manual/ch07s02.html is in lire-doc 2:2.1.1-2.1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Bind9 Query Log</title><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="Lire User's Manual"><link rel="up" href="ch07.html" title="Chapter 7. DNS Supported Log Format"><link rel="prev" href="ch07.html" title="Chapter 7. DNS Supported Log Format"><link rel="next" href="ch08.html" title="Chapter 8. DNS Zone Supported Log Format"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Bind9 Query Log</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ch07.html">Prev</a> </td><th width="60%" align="center">Chapter 7. DNS Supported Log Format</th><td width="20%" align="right"> <a accesskey="n" href="ch08.html">Next</a></td></tr></table><hr></div><div class="section" title="Bind9 Query Log"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id382964"></a>Bind9 Query Log</h2></div></div></div><p><span class="productname">Bind 9</span>™ logs the same information as <span class="productname">Bind 8</span>™ (except
whether the request was recursive or not) but in a
different format. Bind 9.3 and later versions support
a more elaborate log file format, which includes the
recursive/non-recursive request indicator again.
</p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>We also support the new date format introduced in
<span class="application">Bind9</span>
<span class="productnumber">9.3</span> which also contains
the year (<code class="literal">15-Jul-2002</code>).
</p></div><div class="example"><a name="id383005"></a><p class="title"><b>Example 7.3. Sample <span class="productname">Bind 9</span>™ Query Log</b></p><div class="example-contents"><p><em class="parameter"><code>print-severity</code></em> and
<em class="parameter"><code>print-category</code></em> were set to
<code class="literal">yes</code> to obtain that log. <span class="application">Lire</span> also
accepts logs where those are turned off.
</p><pre class="programlisting">
Feb 25 11:09:43.651 queries: info: client 10.0.0.3#1035: \
query: 3.example.com.nl IN A -
Feb 25 11:09:48.739 queries: info: client 10.0.0.3#1035: \
query: 3.example.com.nl IN A -
Feb 25 12:50:32.476 queries: info: client 10.0.0.3#1035: \
query: 21.example.com.co.uk IN A -
Feb 25 12:50:34.110 queries: info: client 10.0.0.3#1035: \
query: 22.example.com IN A -
</pre></div></div><br class="example-break"><div class="tip" title="Tip" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Tip</h3><p>If you are running a pre-9.3 version of <span class="productname">Bind 9</span>™ and
you are missing the recursive flag from <span class="productname">Bind 8</span>™, it is
possible to add back that feature by patching <span class="productname">Bind 9</span>™.
The following patch by by Wytze van der Raay will add a
<code class="literal">+</code> or <code class="literal">-</code> after the
query type to indicate whether the query was recursive
or not. <span class="application">Lire</span> will detect that the log file was made by
a patched <span class="productname">Bind 9</span>™.
</p><pre class="programlisting">
# patch bin/named/query.c to log recursive/non-recursive query indication
SRC=bin/named/query.c
if [ -f ${SRC}.org ]
then
echo "Patched ${SRC} already in place"
else
echo "Patch ${SRC} for recursive/non-recursive query indication"
cp -p ${SRC} ${SRC}.org
patch -p0 ${SRC} <<\!
--- bin/named/query.c.org Mon Sep 24 22:57:48 2001
+++ bin/named/query.c Tue Sep 25 09:55:21 2001
@@ -3272,7 +3272,8 @@
dns_rdatatype_format(rdataset->type, typename, sizeof(typename));
ns_client_log(client, NS_LOGCATEGORY_QUERIES, NS_LOGMODULE_QUERY,
- level, "query: %s %s %s", namebuf, classname, typename);
+ level, "query: %s %s %s%s", namebuf, classname, typename,
+ WANTRECURSION(client) ? "+" : "-");
}
void
!
fi
</pre></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ch07.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ch07.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ch08.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Chapter 7. DNS Supported Log Format </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> Chapter 8. DNS Zone Supported Log Format</td></tr></table></div></body></html>
|