<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} .ms-cui-menu {background-color:#ffffff;border:1px rgb(171, 171, 171) solid;font-family:"Segoe UI WPC", "Segoe UI", Tahoma, "Microsoft Sans Serif", Verdana, sans-serif;font-size:11pt;color:rgb(51, 51, 51);} .ms-cui-menusection-title {display:none;} .ms-cui-ctl {vertical-align:text-top;text-decoration:none;color:rgb(51, 51, 51);} .ms-cui-ctl-on {background-color:rgb(234, 239, 209);opacity: 0.8;} .ms-cui-img-cont-float {display:inline-block;margin-top:2px} .ms-cui-smenu-inner {padding-top:0px;} .ms-owa-paste-option-icon {margin: 2px 4px 0px 4px;vertical-align:sub;padding-bottom: 2px;display:inline-block;} .ms-rtePasteFlyout-option:hover {background-color:rgb(234, 239, 209) !important;opacity:1 !important;} .ms-rtePasteFlyout-option {padding:8px 4px 8px 4px;outline:none;} .ms-cui-menusection {float:left; width:85px;height:24px;overflow:hidden}--></style>
</head>
<body>
<div style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Can someone give some info if the dnstap-read can be present on Graph like the DSC software . I believe dnstap is much more detail but i just want to know if this is possible ...<br>
</p>
<p>thanks<br>
</p>
<div style="color: #282828;">
<hr tabindex="-1" style="display: inline-block; width: 98%;">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size: 11pt;"><b>From:</b> dnstap <dnstap-bounces@lists.redbarn.org> on behalf of Murray Stokely <murray@stokely.org><br>
<b>Sent:</b> Tuesday, October 25, 2016 6:56 PM<br>
<b>To:</b> dnstap@lists.redbarn.org<br>
<b>Subject:</b> [dnstap] dnstap not writing to unix domain sockets with unbound 1.5.10 on FreeBSD 11-STABLE.</font>
<div> </div>
</div>
<div>
<div dir="ltr">I'm having trouble getting anything out of dnstap with unbound <font face="menlo"><span style="font-size: 11px;">1.5.10 on FreeBSD 11-STABLE with dustup gocode freshly installed.</span></font>
<div><font face="menlo"><span style="font-size: 11px;"><br>
</span></font></div>
<div><font face="menlo"><span style="font-size: 11px;">I've run the fstrm 0.2.0 unit tests on this box to verify that reading/writing to the unix domain sockets is working properly (has anyone evaluated GRPC rather than fstrm now that google has released a
transport for protocol buffers?)</span></font></div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
The dnstap section of my unbound.conf is:</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>dnstap:</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span> dnstap-enable: yes</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span> dnstap-socket-path: "/var/run/unbound/dnstap.sock"</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
dnstap-send-identity: yes<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span> dnstap-send-version: yes</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span> dnstap-log-resolver-response-messages: yes</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span> dnstap-log-client-query-messages: yes</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
I'm running unbound in a chroot, but I can't find the socket either in or out of the chroot :</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>server:</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span> directory: /usr/local/etc/unbound</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
chroot: /usr/local/etc/unbound<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
First I run two dustup listeners (as I'm not sure if its supposed to be inside the chroot or not):</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo; min-height: 13px;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>dnstap -u /var/run/unbound/dnstap.sock -w /root/dnstap.1</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>dnstap -u /usr/local/etc/unbound/var/run/unbound/dnstap.sock -w /root/dnstap.2</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span><br>
</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>Then I start unbound:</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span><br>
</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span># sh /usr/local/etc/rc.d/unbound start</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>Obtaining a trust anchor:.</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>Starting unbound.</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>[1477374748] unbound[10467:0] debug: creating udp4 socket 0.0.0.0 53</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>[1477374748] unbound[10467:0] debug: creating tcp4 socket 0.0.0.0 53</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>[1477374748] unbound[10467:0] debug: switching log to syslog</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span><br>
</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<span>unbound works fine, but I am not seeing anything written out to my /root/dnstap files.</span></p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
I spent a little time playing around with ktrace and dtrace but I haven't yet really figured out what is going on or why it is not writing out logs.</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
Any pointers for debugging why messages don't seem to be getting sent to the domain socket? Thanks,</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<br>
</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
- Murray</p>
<p style="margin: 0px; font-size: 11px; line-height: normal; font-family: menlo;">
<br>
</p>
</div>
</div>
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please
notify the sender by email and delete this email and any attachment. </div>
</div>
</div>
Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please
notify the sender by email and delete this email and any attachment.
</body>
</html>