Where can I look to see where dnsmasq is logging queries?

Thaidog · 01-17-2015, 08:32 PM

I just installed/configured dnsmasq and I have also installed syslog-ng. I cannot find where I can validate clients doing lookups against dnsmasq however. Where would this be logged?

veerain · 01-17-2015, 10:32 PM

Read man page of dnsmasq. Logs are usually put in some files in /var/log directory. Usually syslog. Also you can find out about logs by looking how dnsmasq is invoked; your startup scripts.

Thaidog · 01-18-2015, 12:26 AM

Quote:

Originally Posted by veerain

Read man page of dnsmasq. Logs are usually put in some files in /var/log directory. Usually syslog. Also you can find out about logs by looking how dnsmasq is invoked; your startup scripts.

I see no mention of the start up scripts and I am not sure where to look for the systemctl parameters. I did find in the man pages that the -q option is what I need to get the logging to syslog however

Thaidog · 01-18-2015, 12:37 AM

Found it:

/usr/lib/systemd/dnsmasq.service

I added the -q and now I can tail /var/log/messages.log and see results

Code:

[Unit]
Description=A lightweight DHCP and caching DNS server
After=network.target
Documentation=man:dnsmasq(8)

[Service]
Type=dbus
BusName=uk.org.thekelleys.dnsmasq
ExecStartPre=/usr/bin/dnsmasq --test
ExecStart=/usr/bin/dnsmasq -q -k --enable-dbus --user=dnsmasq --pid-file
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target
Alias=dbus-uk.org.thekelleys.dnsmasq

Jan 17 23:33:15 server001 dnsmasq[10708]: query[A] sgi.com from 192.168.0.20
Jan 17 23:33:15 server001 dnsmasq[10708]: forwarded sgi.com to 127.0.0.2
Jan 17 23:33:15 server001 dnsmasq[10708]: query[AAAA] sgi.com from 192.168.0.20
Jan 17 23:33:15 server001 dnsmasq[10708]: forwarded sgi.com to 127.0.0.2
Jan 17 23:33:15 server001 dnsmasq[10708]: dnssec-query[DS] sgi.com to 127.0.0.2
Jan 17 23:33:15 server001 dnsmasq[10708]: dnssec-query[DS] sgi.com to 127.0.0.2
Jan 17 23:33:15 server001 dnsmasq[10708]: validation result is INSECURE
Jan 17 23:33:15 server001 dnsmasq[10708]: reply sgi.com is 192.48.138.174
Jan 17 23:33:15 server001 dnsmasq[10708]: validation result is INSECURE
Jan 17 23:33:15 server001 dnsmasq[10708]: reply sgi.com is NODATA-IPv6