Steffen Kluge: >> The cache is kept in memory, but you dump it's contents to file with >> "rndc dumpdb". The file will be named named_dump.db, and >> lives /var/named/var/named. Here, it ended up at: /var/named/chroot/var/named/data/cache_dump.db Bob Goodwin: > Interesting, an ascii file, it certainly contains a lot more addresses > than I imagined it would! Every website that you visited will have left some data in the cache (up until it's expiry time), likewise for any external information that they referenced (off-site adverts, etc.), same again for mail you've received, even more so if you have anti-spam software that checks upon the headers and content of mail. > How to interpret the data it provides is the question? Well, you can see DNS addresses and associated IP addresses, the type of record (NS - name server, A - a record, etc.). I'm guessing the number left of the type would be a time to live (expires/expunged afterwards), as it tallies with some TTL figures for same domain names later on. Other stuff would require more research to work out. > I guess all those addresses are available via "caching-nameserver?" That depends on what you mean. If you meant that installing the caching-nameserver included those details, no. If you meant that your nameserver, now, had those details in memory, yes (that's where they cam from). -- (Currently running FC4, occasionally trying FC5.) Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
