BIND 8.4.3 query logging
Peter Koch
pk at TechFak.Uni-Bielefeld.DE
Fri Nov 28 21:10:29 UTC 2003
There are two changes in the query logging for BIND 8.4.3. Both are
going to break my and maybe other's scripts.
1) The '/' preceding the IP address in the XX log line is gone. I guess
that's an accident, so I've sent in a bug report ([#10033]).
2) TSIG and EDNS are now logged with 'S' and 'E', respectively. This is a
nice improvement. However, the number of fields now is variable, because
/S, /E or /SE is appended to the line.
Now, adding more info is welcome, but postprocessing would be easier if we
had fixed positions (and even more if we had a field separator that
didn't occur in the queries). Anyone else?
-Peter
More information about the bind-workers
mailing list