querylog message format - XX vs XX+

[Cricket Liu]

Geoff Steer <Geoff.Steer at fujitsu.com.au> wrote in message
news:<37A16E29.78273057 at fujitsu.com.au>...
> I'm preparing to install a new DNS server running BIND 8.2.1 on Redhat
> 6.0 to replace an older server (BIND 8.1.2 )
> In testing the new server, I've turned on query logging. The entries
> that are generated on the new server are of the form:
>
> XX+/137.172.211.9/falgate.fujitsu.com.au/A
>
> Where the same query via the old server produces:
>
> XX /137.172.211.9/falgate.fujitsu.com.au/A
>
> I've stopped the name servers in case it was something cached. Both
> name servers are primary for the fujitsu.com.au zone.
> I've been throught 'DNS and Bind' (even searched the CD version) but I
> can't find anything that tells me the significance of the + after the
> initial XX.

The "XX+" is new to BIND 8.2, hence the absence of documentation of it in
"DNS and BIND."  The "+" indicates a recursive query.

cricket

Acme Byte & Wire
cricket at acmebw.com
www.acmebw.com

Attend our next DNS and BIND class!  See
www.acmebw.com/training.htm for the
schedule and to register for upcoming
classes.