Introducing SOC Insights for BloxOne Threat Defense: Boost your SOC efficiency with AI-driven insights to eliminate manual work and accelerate investigation and response times. Read the blog announcement here.

NIOS DNS DHCP IPAM

Reply

8.4 Syslog - unknown field

Authority
Posts: 4
3488     0

With version 8.4 we're seeing that the Message field now contains a hexadecimal value.
What is that hexadecimal field?

ie.

client @0x012345abcdef 10.10.10.10.#12345 (a.domain.com): query ........

 

 

Re: 8.4 Syslog - unknown field

Moderator
Moderator
Posts: 72
3489     0

That's a change introduced by ISC for BIND 9.11 and it is applicable to DNS queries and Zone change notifications.

Though it is considered to be working as designed, if you are concerned that it conflicts with standard DNS query logging format as documented in the Administrator Guide, kindly open a case with Infoblox Support.


Best Regards,
Bibin Thomas

Re: 8.4 Syslog - unknown field

Authority
Posts: 15
3489     0

I believe what you are referring to is the DNS Cookie, which is enabled by default in BIND 9.11.  Here is a bit of information from ISC on DNS Cookies:

 

https://kb.isc.org/docs/aa-01387

Showing results for 
Search instead for 
Did you mean: 

Recommended for You