nsd users - Jul 2015 - Logging or viewing authoritative queries

Is there any way to log authoritative zone queries from the outside? Or 
otherwise a way to monitor/view them?


  -------------------------------------------------------------------------
  shot through the heart              ooh baby do you know what that's worth
  and you're to blame                         ooh heaven is a place on earth
  darling you give love                  they say in heaven love comes first
  a bad name                              we'll make heaven a place on earth
  ORBITAL                                                     "Halcyon
Live"

On 19/07/15 00:20, nsd at fongaboo.com wrote:
> Is there any way to log authoritative zone queries from the outside? Or
> otherwise a way to monitor/view them?
Hi anonymous fongaboo,

NSD doesn't log queries itself. You have to use tcpdump or dnscap with a
filter like "port 53" to capture all DNS traffic arriving at the
server,
and then parse the generated pcap file, for example.

Regards,
Anand

Trying to run Unbound on FreeBSD 10.1. Following this tutorial:

https://www.linkedin.com/pulse/20140913172910-54816370-how-to-run-master-nsd-on-freebsd-10-0

However that is for 10.0. Don't know if it makes a difference. However I 
did notice that the NSD tutorial I followed made some distinct 
instructions for 10.0 vs. 10.1.

I copied a conf file I had from a previous FreeBSD installation. I believe 
it was 10.0 in that case. However the conf file checks out with 
unbound-checkconf.


However when I run either...


unbound-control start

*or*

unbound -c /etc/unbound/unbound.conf


...I get:


[1437336832] unbound[69115:0] warning: too many file descriptors requested. The
builtin mini-event cannot handle more than 1024. Config for less fds or compile
with libevent
[1437336832] unbound[69115:0] warning: continuing with less udp ports: 211
[1437336832] unbound[69115:0] debug: switching log to syslog



Any suggestions? The only discussion I can find about this error suggests 
compiling differently... But now that Unbound is part of the FreeBSD 
standard install, I would not expect to need to (re)compile anything.


TIA



  -------------------------------------------------------------------------
  shot through the heart              ooh baby do you know what that's worth
  and you're to blame                         ooh heaven is a place on earth
  darling you give love                  they say in heaven love comes first
  a bad name                              we'll make heaven a place on earth
  ORBITAL                                                     "Halcyon
Live"