Knowledge Base ISC Main Website Ask a Question/Contact ISC
What do +EDC and other letters I see in my query log mean?
Author: ISC Support Reference Number: AA-00434 Views: 4334 Created: 2011-08-11 07:49 Last Updated: 2011-08-11 07:50 0 Rating/ Voters

This is documented in the BIND Administrator Reference Manual (which you'll find both on our website and in the BIND source code tarball):

Look for the section that deals with logging categories, and specifically at category queries:

The query log entry reports the client’s IP address and port number, and the query name, class and type. Next it reports whether the Recursion Desired flag was set
(+ if set, - if not set), if the query was signed (S), EDNS was in use (E), if TCP was used (T), if DO (DNSSEC Ok) was set (D), or if CD (Checking Disabled) was set (C).

+EDC on a query indicates that it is:

  • Recursive (+) - it has come from a client or a server that is forwarding queries to your server
  • The sender is using EDNS0 (using larger UDP packet sizes and signalling the size that can be accepted)
  • The sender understands DNSSEC (D) - this is a request to your server to include any DNSSEC material associated with answer in the query reply.
  • DNSSEC validation checking is disabled (C) - the sender wants the answer anyway, even if the validation checks fail.

© 2001-2014 Internet Systems Consortium

  • Please help us to improve the content of our knowledge base by letting us know how we can improve this article or by submitting suggestions for other articles you'd like to see created. Information on how to obtain further help on our products or services can be found on our main website.' If you have a technical question or problem on which you'd like help, we recommend searching our community mailing list archives and/or posting your question there (you will need to register there first for your posts to be accepted). The bind-users and the dhcp-users lists particularly have a long-standing and active membership.
Info Submit Feedback on this Article
Nickname: Your Email: Subject: Comment:
Enter the code below:
Quick Jump Menu