Bind Queries log file format

Michael Dahlberg olgamirth at gmail.com
Tue Jan 24 21:25:31 UTC 2017


In upgrading from BIND 9.10 to 9.11, it looks as if the query log file
format has changed slightly:

Previously (9.10 variant) the entry looked something like this:

04-Nov-2016 10:34:03.991 queries: info: client 172.20.10.48#38997
(36.2.20.172.in-addr.arpa): query: 36.2.20.172.in-addr.arpa IN PTR +
(172.20.4.2)

Now (9.11.0-P2) it looks similar to this:

24-Jan-2017 15:49:00.999 queries: info: client @0x7f6450002ef0 172.20.10.48#
60418 (61.2.20.172.in-addr.arpa): query: 61.2.20.172.in-addr.arpa IN PTR + (
172.20.2.2)

I can discern what almost all of the fields signify except for the
part "@0x7f6450002ef0".
I'm pretty sure its not the hex value for the client IP address because I
have many of these types of entries where the client IP address remains the
same but the "@0x" value changes.

Also, I can't seem to find anything in the ARM about this (but I may be
looking in the wrong section (I was looking at the text on page 60).

Thanks for any assistance,
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170124/a9238ff2/attachment.html>


More information about the bind-users mailing list