How to find which internal hosts still using my DNS service ? Please help

Hello guys,

I am new to AIX .

I have two AIX v5.3 servers running BIND DNS service on them. The plan is to shut down only the DNS service on them, but in order to do that I have to determine which internal hosts are still using the servers to resolve DNS queries.

Can you please advice on how I can do that ??

I have checked /var/adm/messages but I don`t have enough info there: 'RFC 1918 response from Internet for x.x.x.x.in-addr.arpa' - messages only

Thank you in advance !

Tiho

tcpdump -i enX -nnn port 53

thank you !