Infoblox Exchange Cybersecurity Roadshow 2020 – Join us!
North America | Europe | Middle East/Africa | Asia-Pacific

DNS DHCP IPAM

Reply

8.4 Syslog - unknown field

Authority
Posts: 37
342     0

With version 8.4 we're seeing that the Message field now contains a hexadecimal value.
What is that hexadecimal field?

ie.

client @0x012345abcdef 10.10.10.10.#12345 (a.domain.com): query ........

 

 

Highlighted

Re: 8.4 Syslog - unknown field

Moderator bkoshy
Moderator
Posts: 130
342     0

That's a change introduced by ISC for BIND 9.11 and it is applicable to DNS queries and Zone change notifications.

Though it is considered to be working as designed, if you are concerned that it conflicts with standard DNS query logging format as documented in the Administrator Guide, kindly open a case with Infoblox Support.


Best Regards,
Bibin Thomas

Re: 8.4 Syslog - unknown field

Authority
Posts: 12
343     0

I believe what you are referring to is the DNS Cookie, which is enabled by default in BIND 9.11.  Here is a bit of information from ISC on DNS Cookies:

 

https://kb.isc.org/docs/aa-01387

Showing results for 
Search instead for 
Do you mean 

Recommended for You