Bind Queries log file format
olgamirth at gmail.com
Tue Jan 24 21:25:31 UTC 2017
In upgrading from BIND 9.10 to 9.11, it looks as if the query log file
format has changed slightly:
Previously (9.10 variant) the entry looked something like this:
04-Nov-2016 10:34:03.991 queries: info: client 172.20.10.48#38997
(126.96.36.199.in-addr.arpa): query: 188.8.131.52.in-addr.arpa IN PTR +
Now (9.11.0-P2) it looks similar to this:
24-Jan-2017 15:49:00.999 queries: info: client @0x7f6450002ef0 172.20.10.48#
60418 (184.108.40.206.in-addr.arpa): query: 220.127.116.11.in-addr.arpa IN PTR + (
I can discern what almost all of the fields signify except for the
I'm pretty sure its not the hex value for the client IP address because I
have many of these types of entries where the client IP address remains the
same but the "@0x" value changes.
Also, I can't seem to find anything in the ARM about this (but I may be
looking in the wrong section (I was looking at the text on page 60).
Thanks for any assistance,
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the bind-users