下次修改 | 前次修改
|
dns:bind_log [2010/08/26 08:54] – 建立 jal | dns:bind_log [2018/05/16 07:21] (目前版本) – jal |
---|
== BIND Log == | ====== BIND Log ====== |
這二天,因為學校的 DNS 主機流量突然暴增, | 這二天,因為學校的 DNS 主機流量突然暴增, |
所以為了找出兇手是誰,到處翻 bind 的紀錄方法 | 所以為了找出兇手是誰,到處翻 bind 的紀錄方法 |
logging { | logging { |
channel default_log { | channel default_log { |
file "/var/log/dns-default.log" versions 10 size 20m; | file "/var/log/named/dns-default.log" versions 10 size 20m; |
severity info; | print-time yes; |
}; | severity info; |
| }; |
| |
channel lamer_log { | channel lamer_log { |
file "/var/log/dns-lamer.log" versions 3 size 10m; | file "/var/log/named/dns-lamer.log" versions 3 size 10m; |
severity info; | severity info; |
print-severity yes; | print-severity yes; |
print-time yes; | print-time yes; |
print-category yes; | print-category yes; |
}; | }; |
| |
channel query_log { | channel query_log { |
file "/var/log/dns-query.log" versions 10 size 10m; | file "/var/log/named/dns-query.log" versions 10 size 10m; |
severity info; | severity info; |
}; | print-time yes; |
| }; |
| |
channel security_log { | channel security_log { |
file "/var/log/dns-security.log" versions 3 size 1m; | file "/var/log/named/dns-security.log" versions 3 size 1m; |
severity info; | severity info; |
print-severity yes; | print-severity yes; |
print-time yes; | print-time yes; |
print-category yes; | print-category yes; |
}; | }; |
| |
category lame-servers { lamer_log; }; | channel config_file { |
category security{ security_log;}; | file "/var/log/named/dns-config.log" versions 3 size 5m; |
category queries { query_log;}; | severity dynamic; |
category default {default_log;}; | print-time yes; |
}; | }; |
| |
| channel dnssec_log { |
| file "/var/log/named/dns-dnssec.log" versions 3 size 20m; |
| print-time yes; |
| print-category yes; |
| print-severity yes; |
| severity debug 3; |
| }; |
| |
| category dnssec { dnssec_log; }; |
| category lame-servers { lamer_log; }; |
| category security{ security_log;}; |
| category config { config_file; }; |
| category queries { query_log;}; |
| category default { default_log;}; |
| }; |
</code> | </code> |
| |
| |
| \\ |
| <fbl> |