8.4 Syslog - unknown field

[#1]

With version 8.4 we're seeing that the Message field now contains a hexadecimal value.
What is that hexadecimal field?

ie.

client @0x012345abcdef 10.10.10.10.#12345 (a.domain.com): query ........

[#2]

That's a change introduced by ISC for BIND 9.11 and it is applicable to DNS queries and Zone change notifications.

Though it is considered to be working as designed, if you are concerned that it conflicts with standard DNS query logging format as documented in the Administrator Guide, kindly open a case with Infoblox Support.


Best Regards,
Bibin Thomas

[#3]

I believe what you are referring to is the DNS Cookie, which is enabled by default in BIND 9.11.  Here is a bit of information from ISC on DNS Cookies:

https://kb.isc.org/docs/aa-01387