In upgrading from BIND 9.10 to 9.11, it looks as if the query log file format has changed slightly:
Previously (9.10 variant) the entry looked something like this: 04-Nov-2016 10:34:03.991 queries: info: client 172.20.10.48#38997 (36.2.20.172.in-addr.arpa): query: 36.2.20.172.in-addr.arpa IN PTR + (172.20.4.2) Now (9.11.0-P2) it looks similar to this: 24-Jan-2017 15:49:00.999 queries: info: client @0x7f6450002ef0 172.20.10.48# 60418 (61.2.20.172.in-addr.arpa): query: 61.2.20.172.in-addr.arpa IN PTR + ( 172.20.2.2) I can discern what almost all of the fields signify except for the part "@0x7f6450002ef0". I'm pretty sure its not the hex value for the client IP address because I have many of these types of entries where the client IP address remains the same but the "@0x" value changes. Also, I can't seem to find anything in the ARM about this (but I may be looking in the wrong section (I was looking at the text on page 60). Thanks for any assistance, Mike
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
