BIND 9.3.1rc1 Query Log Format

[Martin Lie]

Alan Shackelford wrote:
> These are from my external DNS server(s), and I am curious what the -E
> represents. I also have quite a few ending in - and a few ending in
> +. What is being said here?


Quoting Jim Reid's mail from Feb 22nd, explaining the query log format:

> The entries should be clear enough: the date and time the query was
> received; the source IP address and port number used by the client;
> and the name, class and qtype. The final field shows if the query had
> the rd (recursion desired) bit set (+) or not (-) -- typically showing
> if the query came from a name server or stub resolver -- or if EDNS0
> (E) was used.

EDNS0 is explained in RFC2671:
http://www.faqs.org/rfcs/rfc2671.html


-- 
Martin Lie