Solved

Logging Query's on a Windows 2000 DNS Server

Posted on 2009-05-15
7
1,092 Views
Last Modified: 2013-12-05
I have a Windows 2000 DNS Server.  I am trying to setup logging so I can track to see what websites clients are accessing.  I have looked at the Logging on the DNS Server and selected query, but when I do some web browsing, nothing shows up in the log.  Is there a way to have this show up?
0
Comment
Question by:supertechhawaii
  • 4
  • 3
7 Comments
 
LVL 8

Expert Comment

by:zoubi77
ID: 24403648
Yes there is a way.

By default debug logging is turned off, because it is high intesitive process and log file can grow oversize very quickly and can seriously degrade DNS server's performance

To select and enable debug logging options on the DNS server

   1. Open DNS
   2. In the console tree, click the applicable DNS server.
   3. On the Action menu, click Properties.
   4. Click the Logging tab.
   5. Select the events that you want the DNS server to record for debug logging, and then click OK.

But be aware! Using debug logging options slows DNS server performance.

Log file is than created an it's located in systemroot\System32\Dns

Good luck ;)

0
 

Author Comment

by:supertechhawaii
ID: 24403692
Aloha Zoubi77,
  Thanks for the reply.  I have enabled the logging, however, I am not sure what log to enabe to see the web query that hit the dns.  What should I enaable.

Thanks,
supertechhawaii
0
 
LVL 8

Expert Comment

by:zoubi77
ID: 24403725
Here are explanations of options

    * Query  Logs queries received by the DNS Server service from clients.
    * Notify  Logs notification messages received by the DNS Server service from other servers.
    * Update  Logs dynamic updates received by the DNS Server service from other computers.
    * Questions  Logs the contents of the question section for each DNS query message processed by the DNS Server service.
    * Answers  Logs the contents of the answer section for each DNS query message processed by the DNS Server service.
    * Send  Logs the number of DNS query messages sent by the DNS Server service.
    * Receive  Logs the number of DNS query messages received by the DNS Server service.
    * UDP  Logs the number of DNS requests received by the DNS Server service over a UDP port.
    * TCP  Logs the number of DNS requests received by the DNS Server service over a TCP port.
    * Full packets  Logs the number of full packets written and sent by the DNS Server service.
    * Write through  Logs the number of packets written through by the DNS Server service and back to the zone.


You should enable QUERY...
0
Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

 

Author Comment

by:supertechhawaii
ID: 24403869
Aloha zoubi77,
  Thanks for the quick response.  On Monday I will try to enable the query log and see if this works.  I will post a reply to an update.

thanks,
supertechhawaii
0
 

Author Comment

by:supertechhawaii
ID: 24415269
Aloha Zoubi77,
   I have enabled the "Query" log file.  I have been surffing the web and nothing is being written to the log file.  Any other thoughts as to what I am doing wrong ;)

Thanks,
Brian
0
 
LVL 8

Expert Comment

by:zoubi77
ID: 24416262
Hm..hard to say..First try to enable ALL of the options and see if it something shows in the log file. Is Ethereal an option for you (it's very-easy-to-use packet sniffer)

Hope it helps,

Grega
0
 

Accepted Solution

by:
supertechhawaii earned 0 total points
ID: 24417488
Aloha zoubi77,
  I have enabled the the options, and yes it does show me info in the log file :)  Is there a way to just show me where the request came from (IP address) and what was being asked (Web site location) ?
0

Featured Post

Promote certifications in your email signature

Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Create desktop shortcuts with GPO 4 54
Retire Active Directory server 3 44
Website Domain Forwarding 1 39
Public DNS 2 31
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now