Question about URL being logged by resolver

[Nick Tait]

Hi J.

I'm not sure what the cause of the URLs is, but I can confirm I'm seeing 
the same URLs in my own logs. The queries originate from multiple 
devices on my internal network - all Apple devices I think.

My advice: I wouldn't waste too much effort trying to solve this one, as 
it is almost certainly something that you will have no control over. 
E.g. It could be something bogus on a web page that these devices have 
all accessed?

Nick.


On 4/11/23 11:30, J Doe wrote:
> Hello,
>
> On a Bind 9.18.19 server configured as a recursive resolver, I 
> sometimes see URL's being noted in the log files.
>
> One such example is:
>
> 02-Nov-2023 23:32:19.435 lame-servers: info: success resolving 
> 'https://app-measurement.com/sdk-exp/A' after disabling qname 
> minimization due to 'ncache nxdomain'
>
> This seems unusual to me because Bind usually notes the domain name it 
> is attempting to resolve, not an URL.  In this particular case, I 
> would expect to see a notation about "app-measurement.com" and not 
> "http://etc".
>
> What is the significance of logging the URL and why does this happen 
> in only some cases ?
>
> Thanks,
>
> - J