Re: Track DNS Requests

"Chris Cairns" <ccairns@xxxxxxxxxxxxxxxxxxx> wrote in message
news:eZ#xJDkYFHA.252@xxxxxxxxxxxxxxxxxxxxxxx
> I think I recall quite some time ago the MS DNS server would allow you to
> look at a cache of requests. It would list them by domain. I could not
> find this anywhere in Windows Server 2003 DNS.

Kevin has already mentioned turning on the Advanced View to
see the cache.

Technically this is more a cache of responses than requests since
no information is save about what caused the info to enter the cache.
(But you didn't want that anyway.)

> I would like to be able to just have a list of domains being accessed. I
> really don't care who accessed them but just want to know what type of
sites
> our users are requesting. How would I accomplish this. I noticed I
could
> switch on diagnostics logging, however that looked like way too much
> information. I would just like a simple list.

You could switch on just the INCOMING RESPONSES to
REQUESTS using UDP (or even UDP/TCP).

This would amount to just the responses to questions that the
DNS server had to ask other servers.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>
>


.

Relevant Pages

  • Track DNS Requests
    ... I think I recall quite some time ago the MS DNS server would allow you to ... look at a cache of requests. ...
    (microsoft.public.windows.server.dns)
  • Re: DNS Spoofing
    ... We can rely on the DNS to build a cache of requests from all ... All DNS servers are caching servers, whether they have a zone or not. ... DNS server has no zones, it is a caching only DNS server. ...
    (microsoft.public.windows.server.dns)
  • [PATCH] Documentation: move rpc-cache.txt to filesystems/
    ... - allowing an EXPIRED time on cache items, ... - making requests to user-space to fill in cache entries ... +This will be passed to ->match to identify the target entry. ... +This directory contains a file called 'channel' which is a channel ...
    (Linux-Kernel)
  • Re: Overlapped IO with error 0x800705AD
    ... In cached mode, cache manager would preload the data ahead of requested. ... could also get cached data without an access to an actual disk. ... The bad return of ReadFile and WriteFile was effectively due to the ... And I have best perfs by queueing more requests by thread (best ...
    (microsoft.public.win32.programmer.kernel)
  • Re: if-modified-since question (protocol problem?)
    ... A refresh action using F5, an equivalent key combination, or the Refresh GUI control, is not navigation in the sense of activating a link, loading a bookmark, or typing a URL. ... Memory cache: Automatic ... A total of five requests will be made in each run, with Ethereal capturing all inbound and outbound HTTP traffic over my WAN interface. ... The first run using the initial settings: ...
    (comp.infosystems.www.authoring.html)