[nsd-users] Basic Logging Support Via Syslog

[Lew Payne]

Ondrej - The reason I can't use dnscap is because, until you made
mention of it, I didn't know it existed.  I've been out of the loop of
daily technical life for many years now, and in "maintenance" mode.
That's why there are conversations like this one, where someone more
current on open source tools ends up teaching an old dog like me new
tricks (I hope the gist of the expression isn't lost in translation).

Thank you for bringing this to our collective attention.  I see dnscap
uses bpf, which should be compatible with FreeBSD.  I'll have to give
it a try.

-Lew Payne

On Wed, Sep 2, 2009 at 3:25 AM, Ondřej Surý<ondrej at sury.org> wrote:
> You don't have to use tcpdump.
>
> There are tools like dnscap:
>
> https://www.dns-oarc.net/tools/dnscap
>
> There will be always "something" you need to add to logging and I am
> perfectly fine with nsd not having complicated logging capabilities,
> if there are other tools which can be used, without any problems.
> Whole DITL (http://www.caida.org/projects/ditl/) was accomplished by
> using dnscap, so I don't see why it couldn't be used for what you ask
> for.
>
> Ondrej.