Meaning of "info: generate keytag query..."

Matthias Fischer matthias.fischer at ipfire.org
Wed Mar 21 19:25:34 UTC 2018


Hi,

On 19.03.2018 19:54, A. Schulze via Unbound-users wrote:
> 
> 
> Am 19.03.2018 um 18:49 schrieb Matthias Fischer via Unbound-users:
>> Hi,
>> 
>> I run 'unbound 1.7.0' on an IPFire 2.19 / Core 119 firewall router for a
>> few days. Today I found some messages I never saw before:
>> 
>> ...
>> 02:47:12 unbound: [22034:0] info: generate keytag query _ta-4a5c-4f66. NULL IN
>> 14:46:54 unbound: [22034:0] info: generate keytag query _ta-4a5c-4f66. NULL IN
>> 18:38:41 unbound: [22034:0] info: generate keytag query _ta-4a5c-4f66. NULL IN
>> ...
>> 
>> I'd like to know what this means - any hints?
> 
> Hello,
> 
> I initially patched unbound to log this stuff. Wouter included the trivial patch in 1.7.0.
> ( in fact I only changed the loglevel )
> 
> My intention to get this logged was the ability to find these log entries 
> in our central log aggregation. There I really found miss-configured resolvers in my network.
> Seeing this in my log today proof I configured my resolver well :-) I'm ready for KSK roll...
> 
> That may be useful elsewhere, too.
> 
> Andreas
> 

Thanks for all answers - it seems I have to read a lot... ;-)

Best,
Matthias



More information about the Unbound-users mailing list