[Dnsmasq-discuss] selecting log queries

John Pearson johnpearson555 at gmail.com
Fri Mar 9 05:28:41 GMT 2018


Yeah all the requests came from the browser. I can't immediately think of
how parse out an implicit request versus the page itself querying more
domains.

On Thu, Mar 8, 2018 at 12:09 PM, Geert Stappers <stappers at stappers.nl>
wrote:

> On Thu, Mar 08, 2018 at 11:03:53AM -0800, John Pearson wrote:
> > On Thu, Mar 8, 2018 at 12:55 AM, Geert Stappers wrote:
> > > On Wed, Mar 07, 2018 at 06:09:21PM -0800, John Pearson wrote:
> > > >
> > > > What I'm trying to do: grep log files for domains intentionally asked
> > > > for.
> > >
> > > Mar  7 18:06:04 dnsmasq[29158]: query[A] github.com from 10.1.0.163
> > > Mar  7 18:06:04 dnsmasq[29158]: query[A] github.com from 127.0.0.1
> > > Mar  7 18:06:07 dnsmasq[29158]: query[A] collector.githubapp.com from
> 10.1.0.163
> > > Mar  7 18:06:07 dnsmasq[29158]: query[A] api.github.com from
> 10.1.0.163
> > >
> >
> > Thanks Geert. I meant that in this case collector.githubapp.com &
> > api.github.com are also domains that I didn't directly request. They
> were
> > requested by the page when I went to github.com if that makes sense.
>
> So all requests came from the same webbrowser.
> Try to understand why the requests should be marked different.
> Then try to understand why a name server should log them differently.
>
>
> Groeten
> Geert Stappers
> --
> Leven en laten leven
>
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20180308/5d8e7265/attachment.html>


More information about the Dnsmasq-discuss mailing list