給阿骁兄的賀禮二: DNS 流量統計~超強版[1]

其實也稱不上超強版,不過一般人可能較不會往這邊想而以... :mrgreen: 
透過修改 bind 的 source code, 利用 rndc 從遠端直接抓出
dns 的query/response 次數,再利用 mrtg 或 rrdtool 來繪圖而以
(註:rndc 不懂的人自己去看,非本處主題)
這是我做的 bind-9.3.0 的 patch file, 有興趣的可拿去看看,如果懂程式
的話,你就會知道不同的版本如何改,如果不懂的話,你就將就用囉!
[code:1:f7a85c68b4]diff -cr bind-9.3.0/bin/named/query.c bind-9.3.0_abel/bin/named/query.c
*** bind-9.3.0/bin/named/query.c Wed Jun 30 22:;13:;05 2004
--- bind-9.3.0_abel/bin/named/query.c Wed Oct 13 00:;45:;07 2004
***************
*** 95,100 ****
--- 95,103 ----
  static void
  query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype);
  
+ static int querycount=0;
+ static int replycount=0;
+ 
  /*
   * Increment query statistics counters.
   */
***************
*** 112,121 ****
--- 115,132 ----
  zonestats[counter]++;
  }
  }
+ int get_query_count(void) {
+ return(querycount);
+ }
+ 
+ int get_reply_count(void) {
+ return(replycount);
+ }
  
  static void
  query_send(ns_client_t *client) {
  dns_statscounter_t counter;
+ replycount++;
  if (client->message->rcode == dns_rcode_noerror) {
  if (ISC_LIST_EMPTY(client->message->sections[DNS_SECTION_ANSWER])) {
  if (client->query.isreferral) {
***************
*** 3447,3453 ****
  query_error(client, result);
  return;
  }
! 
  if (ns_g_server->log_queries)
  log_query(client);
  
--- 3458,3464 ----
  query_error(client, result);
  return;
  }
! querycount++;
  if (ns_g_server->log_queries)
  log_query(client);
  
diff -cr bind-9.3.0/bin/named/server.c bind-9.3.0_abel/bin/named/server.c
*** bind-9.3.0/bin/named/server.c Fri Jun 18 12:;39:;48 2004
--- bind-9.3.0_abel/bin/named/server.c Wed Oct 13 00:;47:;47 2004
***************
*** 3998,4003 ****
--- 3998,4005 ----
  n = snprintf((char *)isc_buffer_used(text),
       isc_buffer_availablelength(text),
       "number of zones:; %u\n"
+      "number of query:; %u\n"
+      "number of reply:; %u\n"
       "debug level:; %d\n"
       "xfers running:; %u\n"
       "xfers deferred:; %u\n"
***************
*** 4006,4012 ****
       "recursive clients:; %d/%d\n"
       "tcp clients:; %d/%d\n"
       "server is up and running",
!      zonecount, ns_g_debuglevel, xferrunning, xferdeferred,
       soaqueries, server->log_queries ? "ON" :; "OFF",
       server->recursionquota.used, server->recursionquota.max,
       server->tcpquota.used, server->tcpquota.max);
--- 4008,4014 ----
       "recursive clients:; %d/%d\n"
       "tcp clients:; %d/%d\n"
       "server is up and running",