Syslog translation....

[Kathleen]

What do these types of things mean in my syslog? This is on our L2000 with 11.0 running Openmail.

sysquery: query(66.115.47.86.naviantnetwork.net)
A RR negative cache entry (66.115.47.86.naviantnetwork.net:) learnt (NXDOMAIN=6
4.251.21.206:NS=66.115.47.84)

and another....
Response from unexpected source ([205.188.157.22
9].51)

and then these....
NSTATS 1026403052 1026259052 A=17135 NS=2 CNAME=
136 PTR=2653 MX=2806 AAAA=133 38=71 ANY=7993

Jul 11 10:57:32 named[704]: XSTATS 1026403052 1026259052 RR=12599 RNXD=902 R
FwdR=8244 RDupR=31 RFail=15 RFErr=0 RErr=0 RAXFR=0 RLame=380 ROpts=0 SSysQ=3061
SAns=25907 SFwdQ=6941 SDupQ=1273 SErr=0 RQ=32803 RIQ=0 RFwdQ=6941 RDupQ=66 RTCP=
2 SFwdR=8244 SFail=145 SFErr=0 SNaAns=9316 SNXD=322

Thanks

[Anu Mathew · Accepted solution]

Hi Kathleen,

Looks like the querylog/tracelog of a DNS (named) server.

Are you not running a name server there? (caching-only name server as it looks from the log you mentioned?)

Hope this helps,

Thanks

Anu Mathew

[Kathleen]

The first two options too?

[Anu Mathew]

Hello Kathleen,

Yes. They all relate to the named server logs.

A good source to learn about them in detail would be "DNS and Bind" from O Reilly.


The one from 10:57 looks like from an ndc dump, which shows the stats for a given period of run.

The first two resemble a trace/query log.

Hope this helps,

Thanks

Anu Mathew