Overview
This script converts each line in a bind8 querylog to a dns dlf record.
BIND generates these logs when something like
logging {
channel query_logging {
file "/var/log/named_querylog"
versions 3 size 100M;
print-time yes; // timestamp log entries
};
category queries {
query_logging;
};
};
is in bind's named.conf. This will save up to three logfiles of maximum 100 megabytes in the directory /var/log.
These logfiles look like:
10-Apr-2000 00:01:20.307 XX /10.2.3.4/1.2.3.in-addr.arpa/SOA/IN
10-Apr-2000 00:01:20.308 XX+/10.4.3.2/host.foo.com/A/IN
Version
$Id: bind8-query2dlf.in,v 1.17 2002/01/16 21:26:14 flacoste Exp $