mirror of
https://github.com/isc-projects/bind9.git
synced 2026-04-21 22:28:34 -04:00
[master] store local and remote addresses in dnstap
4569. [func] Store both local and remote addresses in dnstap logging, and modify dnstap-read output format to print them. [RT #43595]
This commit is contained in:
Evan Hunt
parent
adcdff94d9
commit
650b5e7592
9 changed files with 207 additions and 157 deletions
4
CHANGES
4
CHANGES
|
|
@ -1,3 +1,7 @@
|
|||
4569. [func] Store both local and remote addresses in dnstap
|
||||
logging, and modify dnstap-read output format to
|
||||
print them. [RT #43595]
|
||||
|
||||
4568. [contrib] Added a --with-bind option to the dnsperf configure
|
||||
script to specify BIND prefix path.
|
||||
|
||||
|
|
|
|||
|
|
@ -1217,12 +1217,12 @@ client_send(ns_client_t *client) {
|
|||
isc_buffer_usedregion(&buffer, &r);
|
||||
isc_buffer_putuint16(&tcpbuffer, (isc_uint16_t) r.length);
|
||||
isc_buffer_add(&tcpbuffer, r.length);
|
||||
|
||||
#ifdef HAVE_DNSTAP
|
||||
if (client->view != NULL) {
|
||||
dns_dt_send(client->view, dtmsgtype,
|
||||
&client->peeraddr, ISC_TRUE, &zr,
|
||||
&client->requesttime, NULL, &buffer);
|
||||
&client->peeraddr, &client->interface->addr,
|
||||
ISC_TRUE, &zr, &client->requesttime, NULL,
|
||||
&buffer);
|
||||
}
|
||||
#endif /* HAVE_DNSTAP */
|
||||
|
||||
|
|
@ -1246,11 +1246,12 @@ client_send(ns_client_t *client) {
|
|||
} else {
|
||||
respsize = isc_buffer_usedlength(&buffer);
|
||||
result = client_sendpkg(client, &buffer);
|
||||
|
||||
#ifdef HAVE_DNSTAP
|
||||
if (client->view != NULL) {
|
||||
dns_dt_send(client->view, dtmsgtype,
|
||||
&client->peeraddr, ISC_FALSE, &zr,
|
||||
&client->peeraddr,
|
||||
&client->interface->addr,
|
||||
ISC_FALSE, &zr,
|
||||
&client->requesttime, NULL, &buffer);
|
||||
}
|
||||
#endif /* HAVE_DNSTAP */
|
||||
|
|
@ -2867,7 +2868,7 @@ client_request(isc_task_t *task, isc_event_t *event) {
|
|||
dtmsgtype = DNS_DTTYPE_AQ;
|
||||
|
||||
dns_dt_send(view, dtmsgtype, &client->peeraddr,
|
||||
TCP_CLIENT(client), NULL,
|
||||
&client->interface->addr, TCP_CLIENT(client), NULL,
|
||||
&client->requesttime, NULL, buffer);
|
||||
#endif /* HAVE_DNSTAP */
|
||||
|
||||
|
|
|
|||
|
|
@ -199,6 +199,17 @@
|
|||
|
||||
<section xml:id="relnotes_changes"><info><title>Feature Changes</title></info>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>
|
||||
<command>dnstap</command> now stores both the local and remote
|
||||
addresses for all messages, instead of only the remote address.
|
||||
The default output format for <command>dnstap-read</command> has
|
||||
been updated to include these addresses, with the initiating
|
||||
address first and the responding address second, separated by
|
||||
"-%gt;" or "%lt;-" to indicate in which direction the message
|
||||
was sent. [RT #43595]
|
||||
</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>
|
||||
The built in mangaged keys for the global root zone have been
|
||||
|
|
|
|||
|
|
@ -674,8 +674,9 @@ setaddr(dns_dtmsg_t *dm, isc_sockaddr_t *sa, isc_boolean_t tcp,
|
|||
|
||||
void
|
||||
dns_dt_send(dns_view_t *view, dns_dtmsgtype_t msgtype,
|
||||
isc_sockaddr_t *sa, isc_boolean_t tcp, isc_region_t *zone,
|
||||
isc_time_t *qtime, isc_time_t *rtime, isc_buffer_t *buf)
|
||||
isc_sockaddr_t *qaddr, isc_sockaddr_t *raddr,
|
||||
isc_boolean_t tcp, isc_region_t *zone, isc_time_t *qtime,
|
||||
isc_time_t *rtime, isc_buffer_t *buf)
|
||||
{
|
||||
isc_time_t now, *t;
|
||||
dns_dtmsg_t dm;
|
||||
|
|
@ -758,20 +759,16 @@ dns_dt_send(dns_view_t *view, dns_dtmsgtype_t msgtype,
|
|||
break;
|
||||
}
|
||||
|
||||
switch (msgtype) {
|
||||
case DNS_DTTYPE_RQ:
|
||||
case DNS_DTTYPE_RR:
|
||||
case DNS_DTTYPE_FQ:
|
||||
case DNS_DTTYPE_FR:
|
||||
setaddr(&dm, sa, tcp,
|
||||
&dm.m.response_address, &dm.m.has_response_address,
|
||||
&dm.m.response_port, &dm.m.has_response_port);
|
||||
break;
|
||||
default:
|
||||
setaddr(&dm, sa, tcp,
|
||||
if (qaddr != NULL) {
|
||||
setaddr(&dm, qaddr, tcp,
|
||||
&dm.m.query_address, &dm.m.has_query_address,
|
||||
&dm.m.query_port, &dm.m.has_query_port);
|
||||
}
|
||||
if (raddr != NULL) {
|
||||
setaddr(&dm, raddr, tcp,
|
||||
&dm.m.response_address, &dm.m.has_response_address,
|
||||
&dm.m.response_port, &dm.m.has_response_port);
|
||||
}
|
||||
|
||||
if (pack_dt(&dm.d, &dm.buf, &dm.len) == ISC_R_SUCCESS)
|
||||
send_dt(view->dtenv, dm.buf, dm.len);
|
||||
|
|
@ -1052,11 +1049,17 @@ dns_dt_parse(isc_mem_t *mctx, isc_region_t *src, dns_dtdata_t **destp) {
|
|||
d->qaddr.base = m->query_address.data;
|
||||
d->qaddr.length = m->query_address.len;
|
||||
}
|
||||
if (m->has_query_port) {
|
||||
d->qport = m->query_port;
|
||||
}
|
||||
|
||||
if (m->has_response_address) {
|
||||
d->raddr.base = m->response_address.data;
|
||||
d->raddr.length = m->response_address.len;
|
||||
}
|
||||
if (m->has_response_port) {
|
||||
d->rport = m->response_port;
|
||||
}
|
||||
|
||||
/* Socket protocol */
|
||||
if (m->has_socket_protocol) {
|
||||
|
|
@ -1161,25 +1164,27 @@ dns_dt_datatotext(dns_dtdata_t *d, isc_buffer_t **dest) {
|
|||
return (DNS_R_BADDNSTAP);
|
||||
}
|
||||
|
||||
/* Peer address */
|
||||
switch (d->type) {
|
||||
case DNS_DTTYPE_RQ:
|
||||
case DNS_DTTYPE_RR:
|
||||
case DNS_DTTYPE_FQ:
|
||||
case DNS_DTTYPE_FR:
|
||||
if (d->raddr.length != 0)
|
||||
CHECK(putaddr(dest, &d->raddr));
|
||||
else
|
||||
CHECK(putstr(dest, "?"));
|
||||
break;
|
||||
default:
|
||||
if (d->qaddr.length != 0)
|
||||
CHECK(putaddr(dest, &d->qaddr));
|
||||
else
|
||||
CHECK(putstr(dest, "?"));
|
||||
break;
|
||||
/* Query and response addresses */
|
||||
if (d->qaddr.length != 0) {
|
||||
CHECK(putaddr(dest, &d->qaddr));
|
||||
snprintf(buf, sizeof(buf), ":%u", d->qport);
|
||||
CHECK(putstr(dest, buf));
|
||||
} else {
|
||||
CHECK(putstr(dest, "?"));
|
||||
}
|
||||
|
||||
if ((d->type & DNS_DTTYPE_QUERY) != 0) {
|
||||
CHECK(putstr(dest, " -> "));
|
||||
} else {
|
||||
CHECK(putstr(dest, " <- "));
|
||||
}
|
||||
if (d->raddr.length != 0) {
|
||||
CHECK(putaddr(dest, &d->raddr));
|
||||
snprintf(buf, sizeof(buf), ":%u", d->rport);
|
||||
CHECK(putstr(dest, buf));
|
||||
} else {
|
||||
CHECK(putstr(dest, "?"));
|
||||
}
|
||||
|
||||
CHECK(putstr(dest, " "));
|
||||
|
||||
/* Protocol */
|
||||
|
|
|
|||
|
|
@ -100,6 +100,9 @@ struct dns_dtdata {
|
|||
isc_region_t qaddr;
|
||||
isc_region_t raddr;
|
||||
|
||||
isc_uint32_t qport;
|
||||
isc_uint32_t rport;
|
||||
|
||||
isc_region_t msgdata;
|
||||
dns_message_t *msg;
|
||||
|
||||
|
|
@ -235,18 +238,20 @@ dns_dt_shutdown(void);
|
|||
|
||||
void
|
||||
dns_dt_send(dns_view_t *view, dns_dtmsgtype_t msgtype,
|
||||
isc_sockaddr_t *sa, isc_boolean_t tcp, isc_region_t *zone,
|
||||
isc_time_t *qtime, isc_time_t *rtime, isc_buffer_t *buf);
|
||||
isc_sockaddr_t *qaddr, isc_sockaddr_t *dstaddr,
|
||||
isc_boolean_t tcp, isc_region_t *zone, isc_time_t *qtime,
|
||||
isc_time_t *rtime, isc_buffer_t *buf);
|
||||
/*%<
|
||||
* Sends a dnstap message to the log, if 'msgtype' is one of the message
|
||||
* types represented in 'view->dttypes'.
|
||||
*
|
||||
* Parameters are: 'sa' (address of the peer in the DNS transaction being
|
||||
* logged); 'tcp' (boolean indicating whether the transaction was over
|
||||
* TCP); 'zone' (the authoritative zone or bailiwick, in uncompressed
|
||||
* wire format), 'qtime' and 'rtime' (query and response times; if
|
||||
* NULL, they are set to the current time); and 'buf' (the DNS message
|
||||
* being logged, in wire format).
|
||||
* Parameters are: 'qaddr' (query address, i.e, the address of the
|
||||
* query initiator); 'raddr' (response address, i.e., the address of
|
||||
* the query responder); 'tcp' (boolean indicating whether the transaction
|
||||
* was over TCP); 'zone' (the authoritative zone or bailiwick, in
|
||||
* uncompressed wire format), 'qtime' and 'rtime' (query and response
|
||||
* times; if NULL, they are set to the current time); and 'buf' (the
|
||||
* DNS message being logged, in wire format).
|
||||
*
|
||||
* Requires:
|
||||
*
|
||||
|
|
|
|||
|
|
@ -2115,6 +2115,7 @@ resquery_send(resquery_t *query) {
|
|||
unsigned ednsopt = 0;
|
||||
isc_uint16_t hint = 0, udpsize = 0; /* No EDNS */
|
||||
#ifdef HAVE_DNSTAP
|
||||
isc_sockaddr_t localaddr, *la = NULL;
|
||||
unsigned char zone[DNS_NAME_MAXWIRE];
|
||||
dns_dtmsgtype_t dtmsgtype;
|
||||
isc_region_t zr;
|
||||
|
|
@ -2610,7 +2611,11 @@ resquery_send(resquery_t *query) {
|
|||
else
|
||||
dtmsgtype = DNS_DTTYPE_RQ;
|
||||
|
||||
dns_dt_send(fctx->res->view, dtmsgtype, &query->addrinfo->sockaddr,
|
||||
result = isc_socket_getsockname(sock, &localaddr);
|
||||
if (result == ISC_R_SUCCESS)
|
||||
la = &localaddr;
|
||||
|
||||
dns_dt_send(fctx->res->view, dtmsgtype, la, &query->addrinfo->sockaddr,
|
||||
ISC_TF((query->options & DNS_FETCHOPT_TCP) != 0),
|
||||
&zr, &query->start, NULL, &query->buffer);
|
||||
#endif /* HAVE_DNSTAP */
|
||||
|
|
@ -7801,6 +7806,8 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
|
|||
dns_resolver_t *res;
|
||||
isc_boolean_t bucket_empty;
|
||||
#ifdef HAVE_DNSTAP
|
||||
isc_socket_t *sock = NULL;
|
||||
isc_sockaddr_t localaddr, *la = NULL;
|
||||
unsigned char zone[DNS_NAME_MAXWIRE];
|
||||
dns_dtmsgtype_t dtmsgtype;
|
||||
dns_compress_t cctx;
|
||||
|
|
@ -8012,12 +8019,26 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
|
|||
dns_compress_invalidate(&cctx);
|
||||
}
|
||||
|
||||
if ((fctx->qmessage->flags & DNS_MESSAGEFLAG_RD) != 0)
|
||||
if ((fctx->qmessage->flags & DNS_MESSAGEFLAG_RD) != 0) {
|
||||
dtmsgtype = DNS_DTTYPE_FR;
|
||||
else
|
||||
} else {
|
||||
dtmsgtype = DNS_DTTYPE_RR;
|
||||
}
|
||||
|
||||
dns_dt_send(res->view, dtmsgtype, &query->addrinfo->sockaddr,
|
||||
if (query->exclusivesocket) {
|
||||
sock = dns_dispatch_getentrysocket(query->dispentry);
|
||||
} else {
|
||||
sock = dns_dispatch_getsocket(query->dispatch);
|
||||
}
|
||||
|
||||
if (sock != NULL) {
|
||||
result = isc_socket_getsockname(sock, &localaddr);
|
||||
if (result == ISC_R_SUCCESS) {
|
||||
la = &localaddr;
|
||||
}
|
||||
}
|
||||
|
||||
dns_dt_send(res->view, dtmsgtype, la, &query->addrinfo->sockaddr,
|
||||
ISC_TF((query->options & DNS_FETCHOPT_TCP) != 0),
|
||||
&zr, &query->start, NULL, &devent->buffer);
|
||||
#endif /* HAVE_DNSTAP */
|
||||
|
|
@ -8810,7 +8831,6 @@ resquery_response(isc_task_t *task, isc_event_t *event) {
|
|||
}
|
||||
}
|
||||
|
||||
|
||||
/***
|
||||
*** Resolver Methods
|
||||
***/
|
||||
|
|
|
|||
|
|
@ -131,7 +131,8 @@ ATF_TC_BODY(send, tc) {
|
|||
dns_view_t *view = NULL;
|
||||
dns_compress_t cctx;
|
||||
isc_region_t zr;
|
||||
isc_sockaddr_t addr;
|
||||
isc_sockaddr_t qaddr;
|
||||
isc_sockaddr_t raddr;
|
||||
struct in_addr in;
|
||||
isc_stdtime_t now;
|
||||
isc_time_t p, f;
|
||||
|
|
@ -176,7 +177,9 @@ ATF_TC_BODY(send, tc) {
|
|||
isc_buffer_usedregion(&zb, &zr);
|
||||
|
||||
in.s_addr = inet_addr("10.53.0.1");
|
||||
isc_sockaddr_fromin(&addr, &in, 2112);
|
||||
isc_sockaddr_fromin(&qaddr, &in, 2112);
|
||||
in.s_addr = inet_addr("10.53.0.2");
|
||||
isc_sockaddr_fromin(&raddr, &in, 2112);
|
||||
|
||||
isc_stdtime_get(&now);
|
||||
isc_time_set(&p, now - 3600, 0); /* past */
|
||||
|
|
@ -208,6 +211,7 @@ ATF_TC_BODY(send, tc) {
|
|||
|
||||
for (dt = DNS_DTTYPE_SQ; dt <= DNS_DTTYPE_TR; dt <<= 1) {
|
||||
isc_buffer_t *m;
|
||||
isc_sockaddr_t *q = &qaddr, *r = &raddr;
|
||||
|
||||
switch (dt) {
|
||||
case DNS_DTTYPE_AQ:
|
||||
|
|
@ -223,14 +227,14 @@ ATF_TC_BODY(send, tc) {
|
|||
break;
|
||||
}
|
||||
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, &p, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, NULL, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, &p, NULL, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_FALSE, &zr, NULL, NULL, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, &p, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, NULL, &f, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, &p, NULL, m);
|
||||
dns_dt_send(view, dt, &addr, ISC_TRUE, &zr, NULL, NULL, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_FALSE, &zr, &p, &f, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_FALSE, &zr, NULL, &f, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_FALSE, &zr, &p, NULL, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_FALSE, &zr, NULL, NULL, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_TRUE, &zr, &p, &f, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_TRUE, &zr, NULL, &f, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_TRUE, &zr, &p, NULL, m);
|
||||
dns_dt_send(view, dt, q, r, ISC_TRUE, &zr, NULL, NULL, m);
|
||||
}
|
||||
|
||||
dns_dt_detach(&view->dtenv);
|
||||
|
|
@ -300,7 +304,7 @@ ATF_TC_BODY(totext, tc) {
|
|||
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
||||
|
||||
/* make sure text conversion gets the right local time */
|
||||
setenv("TZ", "MST7", 1);
|
||||
setenv("TZ", "PST8", 1);
|
||||
|
||||
while (dns_dt_getframe(handle, &data, &dsize) == ISC_R_SUCCESS) {
|
||||
dns_dtdata_t *dtdata = NULL;
|
||||
|
|
|
|||
BIN
lib/dns/tests/testdata/dnstap/dnstap.saved
vendored
BIN
lib/dns/tests/testdata/dnstap/dnstap.saved
vendored
Binary file not shown.
192
lib/dns/tests/testdata/dnstap/dnstap.text
vendored
192
lib/dns/tests/testdata/dnstap/dnstap.text
vendored
|
|
@ -1,96 +1,96 @@
|
|||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 SR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 CR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 AR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 RR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 FR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 UDP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 12:06:38.000 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TQ 10.53.0.1 TCP 40b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 UDP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 14:06:38.000 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
18-Sep-2015 13:06:38.112 TR 10.53.0.1 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 SR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 SR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 SR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 SR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 SR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 CR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 CR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 CR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 CR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 CR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 AR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 AR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 AR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 AR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 AR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 RR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 RR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 RR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 RR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 RR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 FR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 FR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 FR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 FR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 FR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 UDP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 15:47:16.000 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TQ 10.53.0.1:2112 -> 10.53.0.2:2112 TCP 40b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 TR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 TR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TR 10.53.0.1:2112 <- 10.53.0.2:2112 UDP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 TR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 17:47:16.000 TR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
03-Feb-2017 16:47:16.830 TR 10.53.0.1:2112 <- 10.53.0.2:2112 TCP 287b www.isc.org/IN/A
|
||||
|
|
|
|||
Loading…
Reference in a new issue