caching-namserver

[Tim]

Steffen Kluge:
>> The cache is kept in memory, but you dump it's contents to file with
>> "rndc dumpdb". The file will be named named_dump.db, and
>> lives /var/named/var/named.

Here, it ended up at:  /var/named/chroot/var/named/data/cache_dump.db

Bob Goodwin: 
> Interesting, an ascii file, it certainly contains a lot more addresses
> than I imagined it would!

Every website that you visited will have left some data in the cache (up
until it's expiry time), likewise for any external information that they
referenced (off-site adverts, etc.), same again for mail you've
received, even more so if you have anti-spam software that checks upon
the headers and content of mail.

> How to interpret the data it provides is the question? 

Well, you can see DNS addresses and associated IP addresses, the type of
record (NS - name server, A - a record, etc.).  I'm guessing the number
left of the type would be a time to live (expires/expunged afterwards),
as it tallies with some TTL figures for same domain names later on.
Other stuff would require more research to work out.

> I guess all those addresses are available via "caching-nameserver?"

That depends on what you mean.  If you meant that installing the
caching-nameserver included those details, no.  If you meant that your
nameserver, now, had those details in memory, yes (that's where they cam
from).

-- 
(Currently running FC4, occasionally trying FC5.)

Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.