Comments on: Logfile format for BIND queries

By: RichT

RichT — Tue, 10 Apr 2012 13:34:36 +0000

The code has been updated to include a few more. This is an extract from Bind 9.7.5:
ns_client_log(client, NS_LOGCATEGORY_QUERIES, NS_LOGMODULE_QUERY,
level, “query: %s %s %s %s%s%s%s%s%s (%s)”, namebuf,
classname, typename, WANTRECURSION(client) ? “+” : “-”,
(client->signer != NULL) ? “S”: “”,
(client->opt != NULL) ? “E” : “”,
((client->attributes & NS_CLIENTATTR_TCP) != 0) ?
“T” : “”,
((extflags & DNS_MESSAGEEXTFLAG_DO) != 0) ? “D” : “”,
((flags & DNS_MESSAGEFLAG_CD) != 0) ? “C” : “”,
onbuf);

By: Janson

Janson — Wed, 19 Oct 2011 08:43:38 +0000

what ‘s about -E and -C

(client->opt != NULL) ? “E” : “”,
((extflags & DNS_MESSAGEEXTFLAG_DO) != 0) ? “D” : “”,
((flags & DNS_MESSAGEFLAG_CD) != 0) ? “C” : “”);

By: matty

matty — Wed, 13 Jul 2011 17:55:01 +0000

@ardya – you are correct.

By: ardya

ardya — Sat, 23 Aug 2008 22:29:17 +0000

So to be clear, + means wants recursion, – means no recursion?

By: matty

matty — Sat, 01 Sep 2007 13:16:37 +0000

Hi Knobee,

Thanks for the clarification. I fixed the original post.

Thanks again,
- Ryan

By: Knobee

Knobee — Mon, 27 Aug 2007 19:12:01 +0000

Actually, the “E” means that the query requested EDNS0

http://tools.ietf.org/html/rfc2671

By: Mark

Mark — Tue, 17 Jul 2007 01:13:53 +0000

Finally, somebody went through the trouble to figure this out. I could not find it documented anywhere in the Bind documentation.

Thanks