BIND 8.4.3 query logging

Peter Koch pk at TechFak.Uni-Bielefeld.DE
Fri Nov 28 21:10:29 UTC 2003


There are two changes in the query logging for BIND 8.4.3. Both are
going to break my and maybe other's scripts.

1) The '/' preceding the IP address in the XX log line is gone. I guess
   that's an accident, so I've sent in a bug report ([#10033]).

2) TSIG and EDNS are now logged with 'S' and 'E', respectively. This is a
   nice improvement. However, the number of fields now is variable, because
   /S, /E or /SE is appended to the line.

Now, adding more info is welcome, but postprocessing would be easier if we
had fixed positions (and even more if we had a field separator that
didn't occur in the queries). Anyone else?

-Peter


More information about the bind-workers mailing list