VisiCore AI — Extending X10
X10 DividendLog Samples

Infoblox DNS

Infoblox NIOS DNS query and response log lines.

Source: DNS Response Message Format and Examples. BIND named text over syslog. One record per resolution, so volume tracks lookups rather than bandwidth.

Query

30-Apr-2020 13:35:02.187 client 10.120.20.32#42386: query: foo.com IN A + (100.90.80.102)

Query with response

07-Apr-2013 20:16:49.083 client 10.120.20.198#57398 UDP: query: a2.foo.com IN A response: NOERROR +AED a2.foo.com. 28800 IN A 1.1.1.2;
07-Apr-2013 20:16:49.083 client 10.120.20.198#57398 UDP: query: a4.foo.com IN AAAA response: NOERROR +AED a4.foo.com. 28800 IN AAAA ab::a;
07-Apr-2013 20:16:49.083 client 10.120.20.198#57398 TCP: query: a2.foo.com IN A response: NOERROR +ED a2.foo.com. 28800 IN A 1.1.1.2;

The line is prose rather than a field format: client, query:, response:, and IN are literal words on every record, and the queried name repeats in the response section. The timestamp runs about 24 characters against 10 for an epoch integer.

On this page