From owner-freebsd-questions@FreeBSD.ORG Wed Mar 21 20:23:41 2007 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 3D2D416A527 for ; Wed, 21 Mar 2007 20:23:41 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from mail-out4.apple.com (mail-out4.apple.com [17.254.13.23]) by mx1.freebsd.org (Postfix) with ESMTP id 24E0313C43E for ; Wed, 21 Mar 2007 20:23:41 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from relay7.apple.com (a17-128-113-37.apple.com [17.128.113.37]) by mail-out4.apple.com (8.13.8/8.13.8) with ESMTP id l2LKNeRC002776; Wed, 21 Mar 2007 13:23:40 -0700 (PDT) Received: from relay7.apple.com (unknown [127.0.0.1]) by relay7.apple.com (Symantec Mail Security) with ESMTP id B1A943051F; Wed, 21 Mar 2007 13:23:40 -0700 (PDT) X-AuditID: 11807125-b0e66bb00000538d-d5-4601944c4105 Received: from [17.214.13.96] (cswiger1.apple.com [17.214.13.96]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by relay7.apple.com (Apple SCV relay) with ESMTP id 9F1F730513; Wed, 21 Mar 2007 13:23:40 -0700 (PDT) In-Reply-To: <56280.69.129.174.18.1174501043.squirrel@email.polands.org> References: <56280.69.129.174.18.1174501043.squirrel@email.polands.org> Mime-Version: 1.0 (Apple Message framework v752.2) X-Priority: 3 (Normal) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Chuck Swiger Date: Wed, 21 Mar 2007 13:23:39 -0700 To: Doug Poland X-Mailer: Apple Mail (2.752.2) X-Brightmail-Tracker: AAAAAA== Cc: questions@freebsd.org Subject: Re: OT: how to read BIND's debug file (named.run) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Mar 2007 20:23:41 -0000 Hi, Doug-- On Mar 21, 2007, at 11:17 AM, Doug Poland wrote: [ ...named logs... ] > I trimmed out date/time stamp and it's obvious what the client, > IP#port, query: name are for. Also, I get what the: IN A MX SOA > PTR flags are. But what do the following characters mean? > > - > + > AAAA - > AAAA + > -E > > I googled and did a little experimenting with dig but sure would be > nice if there's a document out there that describes all these. Using the source (/usr/src/contrib/bind9/bin/named/query.c) suggests: ns_client_log(client, NS_LOGCATEGORY_QUERIES, NS_LOGMODULE_QUERY, level, "query: %s %s %s %s%s%s", namebuf, classname, typename, WANTRECURSION(client) ? "+" : "-", (client->signer != NULL) ? "S": "", (client->opt != NULL) ? "E" : ""); AAAA refers to an IPv6 address lookup, similar to an IPv4 "A" lookup. "+" or "-" indicates whether the client requested recursion, and perhaps suggests whether it infers whether it should be talking to a nameserver which is authoritative for a given zone. "S" would indicate the response was cryptographically signed using TSIG or whatever BIND's nickname for PKI is, and "E" seems to indicate whether one of the following two options is set: /* * This option is deprecated since we now only consider nibbles. #define DNS_BYADDROPT_IPV6NIBBLE 0x0001 */ #define DNS_BYADDROPT_IPV6INT 0x0002 -- -Chuck