You can monitor the requests at several points of your infra-structure.
If your intentions are knowing who made the DNS requests, you can configure and activate BIND logs temporarily to log queries requests. At the BIND server, you can also run dnscap
or tcpdump
If you want to know who accessed the site, you can see the web server request logs, or use tcpdump
at the web server side.
In BIND to activate query logs, the syntax is:
logging {
channel querylog{
file "/var/log/querylog";
severity debug 10;
print-category yes;
print-time yes;
print-severity yes;
};
category queries { querylog;};
};
};