Knowledge Base ISC Main Website Ask a Question/Contact ISC
What do +EDC and other letters I see in my query log mean?
Author: ISC Support Reference Number: AA-00434 Views: 27261 Created: 2011-08-11 07:49 Last Updated: 2017-04-12 03:46 0 Rating/ Voters

This is documented in the BIND Administrator Reference Manual (which you'll find both on our website and in the BIND source code tarball):

Look for the section that deals with logging categories, and specifically at category queries:

The query log entry first reports a client object identifier in @0x<hexadecimal-number> format. Next, it reports the client's IP address and port number, and the query name, class and type.  Next, it reports whether the Recursion Desired flag was set (+ if set, - if not set), if the query was signed (S), EDNS was in used along with the EDNS version number (E(#)), if TCP was used (T), if DO(DNSSEC Ok) was set (D), if CD (Checking Disabled) was set (C), if a valid DNS Server COOKIE was received (V), or if a DNS COOKIE option without a valid Server COOKIE was present (K).  After this the destination address the query was sent to is reported.

Note: This reflects BIND 9.11.0 behaviour.

+EDC on a query indicates that it is:

  • Recursive (+) - it has come from a client or a server that is forwarding queries to your server
  • The sender is using EDNS0 (using larger UDP packet sizes and signalling the size that can be accepted)
  • The sender understands DNSSEC (D) - this is a request to your server to include any DNSSEC material associated with answer in the query reply.
  • DNSSEC validation checking is disabled (C) - the sender wants the answer anyway, even if the validation checks fail.

© 2001-2018 Internet Systems Consortium

For assistance with problems and questions for which you have not been able to find an answer in our Knowledge Base, we recommend searching our community mailing list archives and/or posting your question there (you will need to register there first for your posts to be accepted). The bind-users and the dhcp-users lists particularly have a long-standing and active membership.

ISC relies on the financial support of the community to fund the development of its open source software products. If you would like to support future product evolution and maintenance as well having peace of mind knowing that our team of experts are poised to provide you with individual technical assistance whenever you call upon them, then please consider our Professional Subscription Support services - details can be found on our main website.

  • There is no feedback for this article
Quick Jump Menu