djbdnscurve6:(tinydns-log.5)

NAME
tinydns-log - Format of the tinydns log

LOG ENTRIES
During operation, tinydns writes the following log entry types:

o   starting tinydns

o   ip:port:id + type name

o   ip:port:id - type name

o   ip:port:id I type name

o   ip:port:id C type name

o   ip:port:0000 / 0000
IP addresses, ports, ids, and query types are given in hexadecimal format.

DESCRIPTIONS

->  starting tinydns listening on ip ...
tinydns logs this entry immediately before entering its receive/process/respond loop while telling on which IP it is bound.

->  ip:port:id + type name
tinydns attempted to respond to a request. The attempt may have failed due to a network error, but such errors are not logged.
    	Field	Meaning
    	ip		The IP address from which the request was received,
    			and to which the response was sent.
    	port		The port number from which the request was received,
    			and to which the response was sent.
    	id		The request id, which the client picks
    			and the server includes in the response.
    	type		The type of records requested.
    	name		The domain name for which records were requested.

->  ip:port:id - type name
tinydns dropped a request because it did not have the authority to answer. It only has the authority to answer if it has an SOA record for name or a suffix of name.
 Note that if it is unable to open the data.cdb file, it will have no authority for any domain. The fields have the same meanings as in the + log entry.

->  ip:port:id I type name
tinydns received a request that it does not implement, or that had invalid bits set in the header, so it responded with an rcode of 4 (NOTIMP). For example, if the client asks tinydns to perform a recursive query, or any type of query except a standard query, then tinydns creates this type of log entry and responds with a NOTIMP answer. The fields have the same meanings as in the + log entry.

->  ip:port:id C type name
tinydns received a query for a class other than IN (Internet) or 255, so it responded with an rcode of 1 (FORMERR). Class 255 means "any class". The fields have the same meanings as in the + log entry. Note that the actual class in the query is not logged, so there is no reliable way to decode the meaning of the type field.

->  ip:port:0000 / 0000 .
tinydns received a request packet that either contained no query, contained more than one query, or otherwise could not be parsed. tinydns dropped the request. The ip and port fields have the same meanings as in the + log entry. The other field values are hardcoded.

DNSCURVE MODE
In case tinydns is DNSCurve enabled while providing the required public and private key, prior upon start, it shows up with the message tinydns: info: DNSCurve support enabled. DNSCurve responses are now logged via

->  ip:port:id * type name
Reversely, dropped requests are given as

->  ip:port:id ~ type name

SEE ALSO
tinydns(8), tinydns-conf(8)

REFERENCE
http://www.dqd.com/~mayoff/notes/djbdns/tinydns-log.html (used by permission)