BIND9でキャッシュミスしたクエリだけをログに出す

named.conf

logging {
        channel "resolver-log" {
                file "/tmp/resolver.log" versions 5 size 10M;
                severity debug 1;  # 1より大きくするとキャッシュミスのqname以外のログも大量に出てくる
                print-time yes;
                print-severity yes;
                print-category yes;
        };
        category resolver { "resolver-log"; };
};

resolver.log

www.isc.orgとwww.github.comを名前解決してみる。
ユーザからリクエストされたドメインを解決するのに必要な、
別のドメイン名
(rootや ns.isc.afilias-nst.infoやns1.p16.dynect.net)
もキャッシュになければログに出る。

30-Jan-2016 06:23:53.080 resolver: debug 1: createfetch: www.isc.org A
30-Jan-2016 06:23:53.081 resolver: debug 1: createfetch: . NS
30-Jan-2016 06:23:53.135 resolver: debug 1: createfetch: ns.isc.afilias-nst.info A
30-Jan-2016 06:23:53.135 resolver: debug 1: createfetch: ns.isc.afilias-nst.info AAAA
30-Jan-2016 06:24:05.673 resolver: debug 1: createfetch: www.github.com A
30-Jan-2016 06:24:05.692 resolver: debug 1: createfetch: ns1.p16.dynect.net A
30-Jan-2016 06:24:05.692 resolver: debug 1: createfetch: ns1.p16.dynect.net AAAA
30-Jan-2016 06:24:05.693 resolver: debug 1: createfetch: ns2.p16.dynect.net A
30-Jan-2016 06:24:05.693 resolver: debug 1: createfetch: ns2.p16.dynect.net AAAA
30-Jan-2016 06:24:05.693 resolver: debug 1: createfetch: ns3.p16.dynect.net A
30-Jan-2016 06:24:05.694 resolver: debug 1: createfetch: ns3.p16.dynect.net AAAA
30-Jan-2016 06:24:05.694 resolver: debug 1: createfetch: ns4.p16.dynect.net A
30-Jan-2016 06:24:05.695 resolver: debug 1: createfetch: ns4.p16.dynect.net AAAA
30-Jan-2016 06:24:06.006 resolver: debug 1: createfetch: github.com A