Find incoming DNS queries by source ip address/hostname
Posted on 2011-02-20
I am planning to migrate my domain controller from windows 2003 to 2008 R2. I installed a new 2008 DC with AD integrated DNS and moved FSMO roles to the new server. I want to decommision the old win 2003 domain controller now. I already configured DHCP scopes to look for the new 2008 server for the DNS lookup. Still i bellive that there are some static devices point back to my old win 2003 DC. How do i find out the incoming requests from these static devices to the old 2003 server so that i can make changes accordingly.
My thoughts are using wireshark (similar tools) to log the incoming DNS requests? or i can use windows DNS server logging?
Is there a better way to deal with this issue?