gamelinux / passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup
http://gamelinux.org/
1.67k stars 372 forks source link

Logging queries to non-existent domains #93

Closed Hitroscop closed 7 years ago

Hitroscop commented 7 years ago

Hi! It seems like passivedns does not collect queries to unexistent domains - when I make nslookup to such domains there is no log record for this query. Is it unrealized feature or some configuration should be done to capture such queries?

thus commented 7 years ago

Hi, @Hitroscop.

You must specify the server return code errors (and records types) you want to log (e.g. NXDOMAIN) using '-X' when starting passivedns. The output when running passivedns -h gives you all the possible record types and error types (on the bottom).

Hitroscop commented 7 years ago

Thank you, @thus!