djbdnscurve6:

Section: Misc. Reference Manual Pages (tinydns-log.5)
Index Return to Main Contents
 

NAME

tinydns-log - Format of the tinydns log  

LOG ENTRIES

During operation, tinydns writes the following log entry types:
o
starting tinydns
o
ip:port:id + type name
o
ip:port:id - type name
o
ip:port:id I type name
o
ip:port:id C type name
o
ip:port:0000 / 0000

IP addresses, ports, ids, and query types are given in hexadecimal format.

 

DESCRIPTIONS

->
starting tinydns listening on ip ...

tinydns logs this entry immediately before entering its receive/process/respond loop while telling on which IP it is bound.

->
ip:port:id + type name

tinydns attempted to respond to a request. The attempt may have failed due to a network error, but such errors are not logged.

       Field   Meaning
        ip              The IP address from which the request was received,
                        and to which the response was sent.
        port            The port number from which the request was received,
                        and to which the response was sent.
        id              The request id, which the client picks
                        and the server includes in the response.
        type            The type of records requested.
        name            The domain name for which records were requested.

->
ip:port:id - type name

tinydns dropped a request because it did not have the authority to answer. It only has the authority to answer if it has an SOA record for name or a suffix of name.
 Note that if it is unable to open the data.cdb file, it will have no authority for any domain. The fields have the same meanings as in the + log entry.

->
ip:port:id I type name

tinydns received a request that it does not implement, or that had invalid bits set in the header, so it responded with an rcode of 4 (NOTIMP). For example, if the client asks tinydns to perform a recursive query, or any type of query except a standard query, then tinydns creates this type of log entry and responds with a NOTIMP answer. The fields have the same meanings as in the + log entry.

->
ip:port:id C type name

tinydns received a query for a class other than IN (Internet) or 255, so it responded with an rcode of 1 (FORMERR). Class 255 means "any class". The fields have the same meanings as in the + log entry. Note that the actual class in the query is not logged, so there is no reliable way to decode the meaning of the type field.

->
ip:port:0000 / 0000 .

tinydns received a request packet that either contained no query, contained more than one query, or otherwise could not be parsed. tinydns dropped the request. The ip and port fields have the same meanings as in the + log entry. The other field values are hardcoded.

 

DNSCURVE MODE

In case tinydns is DNSCurve enabled while providing the required public and private key, prior upon start, it shows up with the message tinydns: info: DNSCurve support enabled. DNSCurve responses are now logged via
->
ip:port:id * type name

Reversely, dropped requests are given as

->
ip:port:id ~ type name
 

SEE ALSO

tinydns(8), tinydns-conf(8)  

REFERENCE

http://www.dqd.com/~mayoff/notes/djbdns/tinydns-log.html (used by permission)


 

Index

NAME
LOG ENTRIES
DESCRIPTIONS
DNSCURVE MODE
SEE ALSO
REFERENCE

This document was created by man2html, using the manual pages.
Time: 15:10:03 GMT, December 15, 2024