On Fri, Jun 26, 2026 at 05:57:15PM -0700, Fred Morris wrote: ! Apologies in advance, I realize you're trying to run on BSD, and I only run ! / test on Linux so it may not work. -- FWM
That wouldn't normally be a problem. But it doesn't fit on disk. I gave up when it started to compile rust (the machine has 500m ram and 10g disk) ! ! On Fri, 26 Jun 2026, Fred Morris wrote: ! > ! > How's your python? Download ! > ! > https://github.com/m3047/shodohflo/blob/master/examples/dnstap2json.py ! > ! > and see if you can make that go. Well really, download the entire repo. ! > The framestreams implementation is here: ! > ! > https://github.com/m3047/shodohflo/blob/master/shodohflo/fstrm.py ! > ! > I make no apologies for framestreams, I think think they could have done ! > better borrowing from how DNS does TCP but that's just my opinion. In ! > any case, it requires a "notary sojack" (handshake) from the "server"... ! > yes your client is the server. Is whatever you're using as a sink ! > sending the handshake? ! > ! > (There is a complete pure python implementation of framestreams / ! > protobuf in there.) ! > ! > -- ! > ! > Fred Morris, internet plumber ! > ! > On Sat, 27 Jun 2026, Peter 'PMc' Much wrote: ! > > ! > > A while back I upgraded an internal server from 9.18 to 9.20. ! > > Everything works fine there. ! > > ! > > Now I upgraded a public server (rented KVM). Same config, same ! > > infrastructure. It probably works, but there is no dnstap output, so I ! > > am blind. ! > > ! > > I put a hexdump on the socket like so (before starting named): ! > > ! > > root@wand:/tmp # /usr/bin/stdbuf -o 0 /usr/local/bin/fstrm_capture \ ! > > -t protobuf:dnstap.Dnstap -u /var/named//var/run/dnstap.sock -w - | hd ! > > fstrm_capture: opening Unix socket path /var/named//var/run/dnstap.sock ! > > fstrm_capture: opened output file - ! > > 00000000 00 00 00 00 00 00 00 22 00 00 00 02 00 00 00 01 ! > > |......."........| ! > > 00000010 00 00 00 16 70 72 6f 74 6f 62 75 66 3a 64 6e 73 ! > > |....protobuf:dns| ! > > ! > > And that is all that appears. ! > > [...] ! > ! > -- ! > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe ! > from this list. ! > ! -- ! Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list. -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.

