<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px">Thank you very much Mark for your quick answer<br><div id="yui_3_16_0_ym19_1_1503045475534_61842"><span></span></div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font face="Arial" size="2"> Le Vendredi 18 août 2017 13h46, Mark Andrews <marka@isc.org> a écrit :<br></font></div> <br><br> <div class="y_msg_container"><div dir="ltr"><br clear="none">In message <<a shape="rect" ymailto="mailto:1744062904.346000.1503053675995@mail.yahoo.com" href="mailto:1744062904.346000.1503053675995@mail.yahoo.com">1744062904.346000.1503053675995@mail.yahoo.com</a>>, Mik J via bind-users writes:<br clear="none">> Hello,<br clear="none">> Do you know where I can find the signification of DNS syslog messages ?<br clear="none"><br clear="none">In the Administrators Reference Manual<br clear="none"><br clear="none"><a shape="rect" href="https://ftp.isc.org/isc/bind9/9.11.2/doc/arm/Bv9ARM.pdf" target="_blank">https://ftp.isc.org/isc/bind9/9.11.2/doc/arm/Bv9ARM.pdf</a><br clear="none"><br clear="none">Search for querylog<div class="yqt9435158938" id="yqtfd47957"><br clear="none"><br clear="none">> client x.x.x.x#64111 (webmail.google.NET): query: webmail.google.NET<br clear="none">> IN AAAA + (y.y.y.y)=> I'm looking for the signification of the +<br clear="none">> client z.z.z.z#39953 (www.mydomain.org): query: www.mydomain.org IN<br clear="none">> A -ED (y.y.y.y)=> I'm looking for the signification of the -EC<br clear="none">> Thank you</div><br clear="none"><br clear="none">The query log entry first reports a client object identifier in<br clear="none">@0x<hexadecimal-number> format. Next, it reports the client’s IP<br clear="none">address and port number, and the query name, class and type. Next,<br clear="none">it reports whether the Recursion Desired flag was set (+ if set, -<br clear="none">if not set), if the query was signed (S), EDNS was in used along<br clear="none">with the EDNS version number (E(#)), if TCP was used (T), if DO<br clear="none">(DNSSEC Ok) was set (D), if CD (Checking Disabled) was set (C), if<br clear="none">a valid DNS Server COOKIE was received (V), or if a DNS COOKIE<br clear="none">option without a valid Server COOKIE was present (K). After this<br clear="none">the destination address the query was sent to is reported.<br clear="none"><br clear="none">client 127.0.0.1#62536 (www.example. com):query:www.example.com IN<br clear="none">AAAA +SE client ::1#62537 (www.example.net): query:www.example.net<br clear="none">IN AAAA -SE<br clear="none"><br clear="none">(The first part of this log message, showing the client address/port<br clear="none">number and query name, is repeated in all subsequent log messages<br clear="none">related to the same query.)<br clear="none"><br clear="none">-- <br clear="none">Mark Andrews, ISC<br clear="none">1 Seymour St., Dundas Valley, NSW 2117, Australia<br clear="none">PHONE: +61 2 9871 4742 INTERNET: <a shape="rect" ymailto="mailto:marka@isc.org" href="mailto:marka@isc.org">marka@isc.org</a><div class="yqt9435158938" id="yqtfd89821"><br clear="none"></div></div><br><br></div> </div> </div> </div></div></body></html>