Logging/Viewing original DNS query prior to DNS redirection NAT rule?

[TritonB7]

My NAT rule is setup as the following https://docs.netgate.com/pfsense/en/latest/dns/redirecting-all-dns-requests-to-pfsense.html.

I'd like to be able to know the exact DNS address/query being used before redirection takes place so I know the DNS address that triggered the NAT rule. Is there somewhere in pfSense where I can view this?

[Derelict]

You will probably need a mirror port on a switch to a traffic analyzer for data like that.