Log DNS resolutions

This option enables or disables (default setting) the sending of SYSLOG messages in the case of DNS requests.

Note: This switch is independent of the global switch in the SYSLOG module under Setup > SYSLOG > Operating. If you enable this option to log DNS requests, the DNS server in the device sends the corresponding SYSLOG messages to a SYSLOG server even if the global SYSLOG module is disabled.

Each DNS resolution (ANSWER record or ADDITIONAL record) generates a SYSLOG message with the following structure PACKET_INFO: DNS for IP-Address, TID {Hostname}: Resource-Record.

The parameters have the following meanings:
  • The TID (transaction ID) contains a 4-character hexadecimal code.
  • The {host name} is only part of the message if the DNS server cannot resolve it without a DNS request (as in the firewall log, as well).
  • The resource record consists of three parts: The request, the type or class, and the IP resolution (for example www.mydomain.com STD A resolved to 193.99.144.32)
SNMP ID:
2.17.20.1 
Console path:
Setup > DNS > Syslog
Possible values:
No
Disables the logging of DNS requests and responses.
Yes
Enables the logging of DNS requests and responses.
Default:
No

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo