mirror of
https://github.com/fergalmoran/DnsServer.git
synced 2025-12-22 09:29:50 +00:00
QueryLogsMySql: added app implementation with default sample config.
This commit is contained in:
Shreyas Zare
766
Apps/QueryLogsMySql/App.cs
Normal file
766
Apps/QueryLogsMySql/App.cs
Normal file
@@ -0,0 +1,766 @@
|
||||
/*
|
||||
Technitium DNS Server
|
||||
Copyright (C) 2025 Shreyas Zare (shreyas@technitium.com)
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
*/
|
||||
|
||||
using DnsServerCore.ApplicationCommon;
|
||||
using MySql.Data.MySqlClient;
|
||||
using System;
|
||||
using System.Collections.Concurrent;
|
||||
using System.Collections.Generic;
|
||||
using System.Data.Common;
|
||||
using System.Net;
|
||||
using System.Text;
|
||||
using System.Text.Json;
|
||||
using System.Threading;
|
||||
using System.Threading.Tasks;
|
||||
using TechnitiumLibrary;
|
||||
using TechnitiumLibrary.Net.Dns;
|
||||
using TechnitiumLibrary.Net.Dns.ResourceRecords;
|
||||
|
||||
namespace QueryLogsMySql
|
||||
{
|
||||
public sealed class App : IDnsApplication, IDnsQueryLogger, IDnsQueryLogs
|
||||
{
|
||||
#region variables
|
||||
|
||||
IDnsServer? _dnsServer;
|
||||
|
||||
bool _enableLogging;
|
||||
int _maxQueueSize;
|
||||
int _maxLogDays;
|
||||
int _maxLogRecords;
|
||||
string? _databaseName;
|
||||
string? _connectionString;
|
||||
|
||||
readonly ConcurrentQueue<LogEntry> _queuedLogs = new ConcurrentQueue<LogEntry>();
|
||||
readonly Timer _queueTimer;
|
||||
const int QUEUE_TIMER_INTERVAL = 10000;
|
||||
const int BULK_INSERT_COUNT = 1000;
|
||||
|
||||
readonly Timer _cleanupTimer;
|
||||
const int CLEAN_UP_TIMER_INITIAL_INTERVAL = 5 * 1000;
|
||||
const int CLEAN_UP_TIMER_PERIODIC_INTERVAL = 15 * 60 * 1000;
|
||||
|
||||
#endregion
|
||||
|
||||
#region constructor
|
||||
|
||||
public App()
|
||||
{
|
||||
_queueTimer = new Timer(async delegate (object? state)
|
||||
{
|
||||
try
|
||||
{
|
||||
await BulkInsertLogsAsync();
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_dnsServer?.WriteLog(ex);
|
||||
}
|
||||
finally
|
||||
{
|
||||
try
|
||||
{
|
||||
_queueTimer?.Change(QUEUE_TIMER_INTERVAL, Timeout.Infinite);
|
||||
}
|
||||
catch (ObjectDisposedException)
|
||||
{ }
|
||||
}
|
||||
});
|
||||
|
||||
_cleanupTimer = new Timer(async delegate (object? state)
|
||||
{
|
||||
try
|
||||
{
|
||||
await using (MySqlConnection connection = new MySqlConnection(_connectionString + $" Database={_databaseName};"))
|
||||
{
|
||||
await connection.OpenAsync();
|
||||
|
||||
if (_maxLogRecords > 0)
|
||||
{
|
||||
int totalRecords;
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "SELECT Count(*) FROM dns_logs;";
|
||||
|
||||
totalRecords = Convert.ToInt32(await command.ExecuteScalarAsync() ?? 0);
|
||||
}
|
||||
|
||||
int recordsToRemove = totalRecords - _maxLogRecords;
|
||||
if (recordsToRemove > 0)
|
||||
{
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = $"DELETE FROM dns_logs WHERE dlid IN (SELECT * FROM (SELECT dlid FROM dns_logs ORDER BY dlid LIMIT {recordsToRemove}) AS T1);";
|
||||
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if (_maxLogDays > 0)
|
||||
{
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "DELETE FROM dns_logs WHERE timestamp < @timestamp;";
|
||||
|
||||
command.Parameters.AddWithValue("@timestamp", DateTime.UtcNow.AddDays(_maxLogDays * -1));
|
||||
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_dnsServer?.WriteLog(ex);
|
||||
}
|
||||
finally
|
||||
{
|
||||
try
|
||||
{
|
||||
_cleanupTimer?.Change(CLEAN_UP_TIMER_PERIODIC_INTERVAL, Timeout.Infinite);
|
||||
}
|
||||
catch (ObjectDisposedException)
|
||||
{ }
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
#endregion
|
||||
|
||||
#region IDisposable
|
||||
|
||||
public void Dispose()
|
||||
{
|
||||
_enableLogging = false; //turn off logging
|
||||
|
||||
_queueTimer?.Dispose();
|
||||
|
||||
BulkInsertLogsAsync().Sync(); //flush any pending logs
|
||||
}
|
||||
|
||||
#endregion
|
||||
|
||||
#region private
|
||||
|
||||
private async Task BulkInsertLogsAsync()
|
||||
{
|
||||
try
|
||||
{
|
||||
List<LogEntry> logs = new List<LogEntry>(BULK_INSERT_COUNT);
|
||||
StringBuilder sb = new StringBuilder(4096);
|
||||
|
||||
while (true)
|
||||
{
|
||||
while ((logs.Count < BULK_INSERT_COUNT) && _queuedLogs.TryDequeue(out LogEntry? log))
|
||||
{
|
||||
logs.Add(log);
|
||||
}
|
||||
|
||||
if (logs.Count < 1)
|
||||
break;
|
||||
|
||||
await using (MySqlConnection connection = new MySqlConnection(_connectionString + $" Database={_databaseName};"))
|
||||
{
|
||||
await connection.OpenAsync();
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
sb.Length = 0;
|
||||
sb.Append("INSERT INTO dns_logs (timestamp, client_ip, protocol, response_type, response_rtt, rcode, qname, qtype, qclass, answer) VALUES ");
|
||||
|
||||
for (int i = 0; i < logs.Count; i++)
|
||||
{
|
||||
if (i == 0)
|
||||
sb.Append($"(@timestamp{i}, @client_ip{i}, @protocol{i}, @response_type{i}, @response_rtt{i}, @rcode{i}, @qname{i}, @qtype{i}, @qclass{i}, @answer{i})");
|
||||
else
|
||||
sb.Append($", (@timestamp{i}, @client_ip{i}, @protocol{i}, @response_type{i}, @response_rtt{i}, @rcode{i}, @qname{i}, @qtype{i}, @qclass{i}, @answer{i})");
|
||||
}
|
||||
command.CommandText = sb.ToString();
|
||||
|
||||
for (int i = 0; i < logs.Count; i++)
|
||||
{
|
||||
LogEntry log = logs[i];
|
||||
|
||||
MySqlParameter paramTimestamp = command.Parameters.Add("@timestamp" + i, MySqlDbType.DateTime);
|
||||
MySqlParameter paramClientIp = command.Parameters.Add("@client_ip" + i, MySqlDbType.VarChar);
|
||||
MySqlParameter paramProtocol = command.Parameters.Add("@protocol" + i, MySqlDbType.Byte);
|
||||
MySqlParameter paramResponseType = command.Parameters.Add("@response_type" + i, MySqlDbType.Byte);
|
||||
MySqlParameter paramResponseRtt = command.Parameters.Add("@response_rtt" + i, MySqlDbType.Double);
|
||||
MySqlParameter paramRcode = command.Parameters.Add("@rcode" + i, MySqlDbType.Byte);
|
||||
MySqlParameter paramQname = command.Parameters.Add("@qname" + i, MySqlDbType.VarChar);
|
||||
MySqlParameter paramQtype = command.Parameters.Add("@qtype" + i, MySqlDbType.Int16);
|
||||
MySqlParameter paramQclass = command.Parameters.Add("@qclass" + i, MySqlDbType.Int16);
|
||||
MySqlParameter paramAnswer = command.Parameters.Add("@answer" + i, MySqlDbType.VarChar);
|
||||
|
||||
paramTimestamp.Value = log.Timestamp;
|
||||
paramClientIp.Value = log.RemoteEP.Address.ToString();
|
||||
paramProtocol.Value = (byte)log.Protocol;
|
||||
|
||||
DnsServerResponseType responseType;
|
||||
|
||||
if (log.Response.Tag == null)
|
||||
responseType = DnsServerResponseType.Recursive;
|
||||
else
|
||||
responseType = (DnsServerResponseType)log.Response.Tag;
|
||||
|
||||
paramResponseType.Value = (byte)responseType;
|
||||
|
||||
if ((responseType == DnsServerResponseType.Recursive) && (log.Response.Metadata is not null))
|
||||
paramResponseRtt.Value = log.Response.Metadata.RoundTripTime;
|
||||
else
|
||||
paramResponseRtt.Value = DBNull.Value;
|
||||
|
||||
paramRcode.Value = (byte)log.Response.RCODE;
|
||||
|
||||
if (log.Request.Question.Count > 0)
|
||||
{
|
||||
DnsQuestionRecord query = log.Request.Question[0];
|
||||
|
||||
paramQname.Value = query.Name.ToLowerInvariant();
|
||||
paramQtype.Value = (short)query.Type;
|
||||
paramQclass.Value = (short)query.Class;
|
||||
}
|
||||
else
|
||||
{
|
||||
paramQname.Value = DBNull.Value;
|
||||
paramQtype.Value = DBNull.Value;
|
||||
paramQclass.Value = DBNull.Value;
|
||||
}
|
||||
|
||||
if (log.Response.Answer.Count == 0)
|
||||
{
|
||||
paramAnswer.Value = DBNull.Value;
|
||||
}
|
||||
else if ((log.Response.Answer.Count > 2) && log.Response.IsZoneTransfer)
|
||||
{
|
||||
paramAnswer.Value = "[ZONE TRANSFER]";
|
||||
}
|
||||
else
|
||||
{
|
||||
string? answer = null;
|
||||
|
||||
foreach (DnsResourceRecord record in log.Response.Answer)
|
||||
{
|
||||
if (answer is null)
|
||||
answer = record.Type.ToString() + " " + record.RDATA.ToString();
|
||||
else
|
||||
answer += ", " + record.Type.ToString() + " " + record.RDATA.ToString();
|
||||
}
|
||||
|
||||
if (answer?.Length > 4000)
|
||||
answer = answer.Substring(0, 4000);
|
||||
|
||||
paramAnswer.Value = answer;
|
||||
}
|
||||
}
|
||||
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
}
|
||||
|
||||
logs.Clear();
|
||||
}
|
||||
}
|
||||
catch (Exception ex)
|
||||
{
|
||||
_dnsServer?.WriteLog(ex);
|
||||
}
|
||||
}
|
||||
|
||||
#endregion
|
||||
|
||||
#region public
|
||||
|
||||
public async Task InitializeAsync(IDnsServer dnsServer, string config)
|
||||
{
|
||||
_dnsServer = dnsServer;
|
||||
|
||||
using JsonDocument jsonDocument = JsonDocument.Parse(config);
|
||||
JsonElement jsonConfig = jsonDocument.RootElement;
|
||||
|
||||
_enableLogging = jsonConfig.GetPropertyValue("enableLogging", false);
|
||||
_maxQueueSize = jsonConfig.GetPropertyValue("maxQueueSize", 1000000);
|
||||
_maxLogDays = jsonConfig.GetPropertyValue("maxLogDays", 0);
|
||||
_maxLogRecords = jsonConfig.GetPropertyValue("maxLogRecords", 0);
|
||||
_databaseName = jsonConfig.GetPropertyValue("databaseName", "DnsQueryLogs");
|
||||
_connectionString = jsonConfig.GetPropertyValue("connectionString", null);
|
||||
|
||||
if (_connectionString is null)
|
||||
throw new Exception("Please specify a valid connection string in 'connectionString' parameter.");
|
||||
|
||||
if (_connectionString.Replace(" ", "").Contains("Database=", StringComparison.OrdinalIgnoreCase))
|
||||
throw new Exception("The 'connectionString' parameter must not define 'Database'. Configure the 'databaseName' parameter above instead.");
|
||||
|
||||
if (!_connectionString.TrimEnd().EndsWith(';'))
|
||||
_connectionString += ";";
|
||||
|
||||
if (_enableLogging)
|
||||
{
|
||||
await using (MySqlConnection connection = new MySqlConnection(_connectionString))
|
||||
{
|
||||
await connection.OpenAsync();
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = @$"
|
||||
USE mysql;
|
||||
|
||||
CREATE DATABASE IF NOT EXISTS {_databaseName};
|
||||
|
||||
USE {_databaseName};
|
||||
|
||||
CREATE TABLE IF NOT EXISTS dns_logs
|
||||
(
|
||||
dlid INT PRIMARY KEY AUTO_INCREMENT,
|
||||
timestamp DATETIME NOT NULL,
|
||||
client_ip VARCHAR(39) NOT NULL,
|
||||
protocol TINYINT NOT NULL,
|
||||
response_type TINYINT NOT NULL,
|
||||
response_rtt REAL,
|
||||
rcode TINYINT NOT NULL,
|
||||
qname VARCHAR(255),
|
||||
qtype SMALLINT,
|
||||
qclass SMALLINT,
|
||||
answer VARCHAR(4000)
|
||||
);
|
||||
";
|
||||
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_timestamp ON dns_logs (timestamp);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_client_ip ON dns_logs (client_ip);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_protocol ON dns_logs (protocol);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_response_type ON dns_logs (response_type);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_rcode ON dns_logs (rcode);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_qname ON dns_logs (qname)";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_qtype ON dns_logs (qtype);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_qclass ON dns_logs (qclass);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_timestamp_client_ip ON dns_logs (timestamp, client_ip);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_timestamp_qname ON dns_logs (timestamp, qname);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_client_qname ON dns_logs (client_ip, qname);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_query ON dns_logs (qname, qtype);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "CREATE INDEX index_all ON dns_logs (timestamp, client_ip, protocol, response_type, rcode, qname, qtype, qclass);";
|
||||
|
||||
try
|
||||
{
|
||||
await command.ExecuteNonQueryAsync();
|
||||
}
|
||||
catch
|
||||
{ }
|
||||
}
|
||||
}
|
||||
|
||||
_queueTimer.Change(QUEUE_TIMER_INTERVAL, Timeout.Infinite);
|
||||
}
|
||||
else
|
||||
{
|
||||
_queueTimer.Change(Timeout.Infinite, Timeout.Infinite);
|
||||
}
|
||||
|
||||
if ((_maxLogDays > 0) || (_maxLogRecords > 0))
|
||||
_cleanupTimer.Change(CLEAN_UP_TIMER_INITIAL_INTERVAL, Timeout.Infinite);
|
||||
else
|
||||
_cleanupTimer.Change(Timeout.Infinite, Timeout.Infinite);
|
||||
}
|
||||
|
||||
public Task InsertLogAsync(DateTime timestamp, DnsDatagram request, IPEndPoint remoteEP, DnsTransportProtocol protocol, DnsDatagram response)
|
||||
{
|
||||
if (_enableLogging)
|
||||
{
|
||||
if (_queuedLogs.Count < _maxQueueSize)
|
||||
_queuedLogs.Enqueue(new LogEntry(timestamp, request, remoteEP, protocol, response));
|
||||
}
|
||||
|
||||
return Task.CompletedTask;
|
||||
}
|
||||
|
||||
public async Task<DnsLogPage> QueryLogsAsync(long pageNumber, int entriesPerPage, bool descendingOrder, DateTime? start, DateTime? end, IPAddress clientIpAddress, DnsTransportProtocol? protocol, DnsServerResponseType? responseType, DnsResponseCode? rcode, string qname, DnsResourceRecordType? qtype, DnsClass? qclass)
|
||||
{
|
||||
if (pageNumber == 0)
|
||||
pageNumber = 1;
|
||||
|
||||
if (qname is not null)
|
||||
qname = qname.ToLowerInvariant();
|
||||
|
||||
string whereClause = string.Empty;
|
||||
|
||||
if (start is not null)
|
||||
whereClause += "timestamp >= @start AND ";
|
||||
|
||||
if (end is not null)
|
||||
whereClause += "timestamp <= @end AND ";
|
||||
|
||||
if (clientIpAddress is not null)
|
||||
whereClause += "client_ip = @client_ip AND ";
|
||||
|
||||
if (protocol is not null)
|
||||
whereClause += "protocol = @protocol AND ";
|
||||
|
||||
if (responseType is not null)
|
||||
whereClause += "response_type = @response_type AND ";
|
||||
|
||||
if (rcode is not null)
|
||||
whereClause += "rcode = @rcode AND ";
|
||||
|
||||
if (qname is not null)
|
||||
{
|
||||
if (qname.Contains('*'))
|
||||
{
|
||||
whereClause += "qname like @qname AND ";
|
||||
qname = qname.Replace("*", "%");
|
||||
}
|
||||
else
|
||||
{
|
||||
whereClause += "qname = @qname AND ";
|
||||
}
|
||||
}
|
||||
|
||||
if (qtype is not null)
|
||||
whereClause += "qtype = @qtype AND ";
|
||||
|
||||
if (qclass is not null)
|
||||
whereClause += "qclass = @qclass AND ";
|
||||
if (!string.IsNullOrEmpty(whereClause))
|
||||
whereClause = whereClause.Substring(0, whereClause.Length - 5);
|
||||
|
||||
await using (MySqlConnection connection = new MySqlConnection(_connectionString + $" Database={_databaseName};"))
|
||||
{
|
||||
await connection.OpenAsync();
|
||||
|
||||
//find total entries
|
||||
long totalEntries;
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = "SELECT Count(*) FROM dns_logs" + (string.IsNullOrEmpty(whereClause) ? ";" : " WHERE " + whereClause + ";");
|
||||
|
||||
if (start is not null)
|
||||
command.Parameters.AddWithValue("@start", start);
|
||||
|
||||
if (end is not null)
|
||||
command.Parameters.AddWithValue("@end", end);
|
||||
|
||||
if (clientIpAddress is not null)
|
||||
command.Parameters.AddWithValue("@client_ip", clientIpAddress.ToString());
|
||||
|
||||
if (protocol is not null)
|
||||
command.Parameters.AddWithValue("@protocol", (byte)protocol);
|
||||
|
||||
if (responseType is not null)
|
||||
command.Parameters.AddWithValue("@response_type", (byte)responseType);
|
||||
|
||||
if (rcode is not null)
|
||||
command.Parameters.AddWithValue("@rcode", (byte)rcode);
|
||||
|
||||
if (qname is not null)
|
||||
command.Parameters.AddWithValue("@qname", qname);
|
||||
|
||||
if (qtype is not null)
|
||||
command.Parameters.AddWithValue("@qtype", (ushort)qtype);
|
||||
|
||||
if (qclass is not null)
|
||||
command.Parameters.AddWithValue("@qclass", (ushort)qclass);
|
||||
|
||||
totalEntries = Convert.ToInt64(await command.ExecuteScalarAsync() ?? 0L);
|
||||
}
|
||||
|
||||
long totalPages = (totalEntries / entriesPerPage) + (totalEntries % entriesPerPage > 0 ? 1 : 0);
|
||||
|
||||
if ((pageNumber > totalPages) || (pageNumber < 0))
|
||||
pageNumber = totalPages;
|
||||
|
||||
long endRowNum;
|
||||
long startRowNum;
|
||||
|
||||
if (descendingOrder)
|
||||
{
|
||||
endRowNum = totalEntries - ((pageNumber - 1) * entriesPerPage);
|
||||
startRowNum = endRowNum - entriesPerPage;
|
||||
}
|
||||
else
|
||||
{
|
||||
endRowNum = pageNumber * entriesPerPage;
|
||||
startRowNum = endRowNum - entriesPerPage;
|
||||
}
|
||||
|
||||
List<DnsLogEntry> entries = new List<DnsLogEntry>(entriesPerPage);
|
||||
|
||||
await using (MySqlCommand command = connection.CreateCommand())
|
||||
{
|
||||
command.CommandText = @"
|
||||
SELECT * FROM (
|
||||
SELECT
|
||||
ROW_NUMBER() OVER (
|
||||
ORDER BY dlid
|
||||
) row_num,
|
||||
timestamp,
|
||||
client_ip,
|
||||
protocol,
|
||||
response_type,
|
||||
response_rtt,
|
||||
rcode,
|
||||
qname,
|
||||
qtype,
|
||||
qclass,
|
||||
answer
|
||||
FROM
|
||||
dns_logs
|
||||
" + (string.IsNullOrEmpty(whereClause) ? "" : "WHERE " + whereClause) + @"
|
||||
) t
|
||||
WHERE
|
||||
row_num > @start_row_num AND row_num <= @end_row_num
|
||||
ORDER BY row_num" + (descendingOrder ? " DESC" : "");
|
||||
|
||||
command.Parameters.AddWithValue("@start_row_num", startRowNum);
|
||||
command.Parameters.AddWithValue("@end_row_num", endRowNum);
|
||||
|
||||
if (start is not null)
|
||||
command.Parameters.AddWithValue("@start", start);
|
||||
|
||||
if (end is not null)
|
||||
command.Parameters.AddWithValue("@end", end);
|
||||
|
||||
if (clientIpAddress is not null)
|
||||
command.Parameters.AddWithValue("@client_ip", clientIpAddress.ToString());
|
||||
|
||||
if (protocol is not null)
|
||||
command.Parameters.AddWithValue("@protocol", (byte)protocol);
|
||||
|
||||
if (responseType is not null)
|
||||
command.Parameters.AddWithValue("@response_type", (byte)responseType);
|
||||
|
||||
if (rcode is not null)
|
||||
command.Parameters.AddWithValue("@rcode", (byte)rcode);
|
||||
|
||||
if (qname is not null)
|
||||
command.Parameters.AddWithValue("@qname", qname);
|
||||
|
||||
if (qtype is not null)
|
||||
command.Parameters.AddWithValue("@qtype", (ushort)qtype);
|
||||
|
||||
if (qclass is not null)
|
||||
command.Parameters.AddWithValue("@qclass", (ushort)qclass);
|
||||
|
||||
await using (DbDataReader reader = await command.ExecuteReaderAsync())
|
||||
{
|
||||
while (await reader.ReadAsync())
|
||||
{
|
||||
double? responseRtt;
|
||||
|
||||
if (reader.IsDBNull(5))
|
||||
responseRtt = null;
|
||||
else
|
||||
responseRtt = reader.GetFloat(5);
|
||||
|
||||
DnsQuestionRecord? question;
|
||||
|
||||
if (reader.IsDBNull(7))
|
||||
question = null;
|
||||
else
|
||||
question = new DnsQuestionRecord(reader.GetString(7), (DnsResourceRecordType)reader.GetInt16(8), (DnsClass)reader.GetInt16(9), false);
|
||||
|
||||
string? answer;
|
||||
|
||||
if (reader.IsDBNull(10))
|
||||
answer = null;
|
||||
else
|
||||
answer = reader.GetString(10);
|
||||
|
||||
entries.Add(new DnsLogEntry(reader.GetInt64(0), reader.GetDateTime(1), IPAddress.Parse(reader.GetString(2)), (DnsTransportProtocol)reader.GetByte(3), (DnsServerResponseType)reader.GetByte(4), responseRtt, (DnsResponseCode)reader.GetByte(6), question, answer));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return new DnsLogPage(pageNumber, totalPages, totalEntries, entries);
|
||||
}
|
||||
}
|
||||
|
||||
#endregion
|
||||
|
||||
#region properties
|
||||
|
||||
public string Description
|
||||
{ get { return "Logs all incoming DNS requests and their responses in a MySQL database that can be queried from the DNS Server web console."; } }
|
||||
|
||||
#endregion
|
||||
|
||||
class LogEntry
|
||||
{
|
||||
#region variables
|
||||
|
||||
public readonly DateTime Timestamp;
|
||||
public readonly DnsDatagram Request;
|
||||
public readonly IPEndPoint RemoteEP;
|
||||
public readonly DnsTransportProtocol Protocol;
|
||||
public readonly DnsDatagram Response;
|
||||
|
||||
#endregion
|
||||
|
||||
#region constructor
|
||||
|
||||
public LogEntry(DateTime timestamp, DnsDatagram request, IPEndPoint remoteEP, DnsTransportProtocol protocol, DnsDatagram response)
|
||||
{
|
||||
Timestamp = timestamp;
|
||||
Request = request;
|
||||
RemoteEP = remoteEP;
|
||||
Protocol = protocol;
|
||||
Response = response;
|
||||
}
|
||||
|
||||
#endregion
|
||||
}
|
||||
}
|
||||
}
|
||||
8
Apps/QueryLogsMySql/dnsApp.config
Normal file
8
Apps/QueryLogsMySql/dnsApp.config
Normal file
@@ -0,0 +1,8 @@
|
||||
{
|
||||
"enableLogging": false,
|
||||
"maxQueueSize": 1000000,
|
||||
"maxLogDays": 0,
|
||||
"maxLogRecords": 0,
|
||||
"databaseName": "DnsQueryLogs",
|
||||
"connectionString": "Server=192.168.180.128; Port=3306; Uid=username; Pwd=password;"
|
||||
}
|
||||
Reference in New Issue
Block a user