1

How can i log DNS requests sent by clients to a windows DNS resolver without using the debug log file technique?

It can be a windows 2008+ only solution

edit 1 - some additional background: i already have a complete infrastructure to gather and correlate my event logs, and would like to know if it would be possible to leverage it without needing to setup another system/agent to gather the debug log.

elhoim
  • 157
  • 1
  • 6

1 Answers1

2

The debug log is exactly what you should use for this. You'd do well to explain a little more so that we can understand why don't want to use it.

Having said that, you could probably install a network packet sniffer such as WireShark, set up filters and logging and analyse that some way, but honestly the debug log is really the best way to do this and I'm struggling to think why you wouldn't want to use it.

ThatGraemeGuy
  • 15,314
  • 12
  • 51
  • 78