Unknown reply type in Query Log

After visiting http://en.conn.internet.nl/connection/ the Reply column has some unknown types

I'm unable to reproduce this it seems...

EDIT I have seen this now once as well, but after reloading the Query Log page, the ? entries have turned into IP. This happens when very many queries happen at once and your upstream DNS provider isn't fast enough in replying to all of them:

Example for one of the domains they query on this website (edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl):

[2018-03-25 13:12:11.197] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 527)
[2018-03-25 13:12:11.213] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 527)
[2018-03-25 13:12:11.269] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 528)
[2018-03-25 13:12:11.285] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 528)
[2018-03-25 13:12:11.413] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 528)
[2018-03-25 13:12:11.438] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 527)
[2018-03-25 13:12:11.475] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 531)
[2018-03-25 13:12:11.492] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 531)
[2018-03-25 13:12:11.543] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 532)
[2018-03-25 13:12:11.559] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 532)
[2018-03-25 13:12:11.585] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 531)
[2018-03-25 13:12:11.628] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 532)
[2018-03-25 13:12:11.671] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 535)
[2018-03-25 13:12:11.687] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 535)
[2018-03-25 13:12:11.714] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 536)
[2018-03-25 13:12:11.730] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 536)
[2018-03-25 13:12:11.756] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 535)
[2018-03-25 13:12:11.799] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 536)
[2018-03-25 13:12:11.842] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 539)
[2018-03-25 13:12:11.858] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 539)
[2018-03-25 13:12:11.885] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 540)
[2018-03-25 13:12:11.901] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 540)
[2018-03-25 13:12:11.927] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 539)
[2018-03-25 13:12:11.970] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 540)
[2018-03-25 13:12:12.013] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 543)
[2018-03-25 13:12:12.030] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 543)
[2018-03-25 13:12:12.057] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 544)
[2018-03-25 13:12:12.073] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 544)
[2018-03-25 13:12:12.099] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 543)
[2018-03-25 13:12:12.142] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 544)
[2018-03-25 13:12:12.186] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 547)
[2018-03-25 13:12:12.202] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 547)
[2018-03-25 13:12:12.229] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 548)
[2018-03-25 13:12:12.245] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 548)
[2018-03-25 13:12:12.271] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 547)
[2018-03-25 13:12:12.314] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 548)
[2018-03-25 13:12:12.358] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 551)
[2018-03-25 13:12:12.374] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 551)
[2018-03-25 13:12:12.401] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 552)
[2018-03-25 13:12:12.417] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 552)
[2018-03-25 13:12:12.443] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 551)
[2018-03-25 13:12:12.486] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 552)
[2018-03-25 13:12:12.530] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 555)
[2018-03-25 13:12:12.546] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 555)
[2018-03-25 13:12:12.573] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 556)
[2018-03-25 13:12:12.589] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 556)
[2018-03-25 13:12:12.615] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 555)
[2018-03-25 13:12:12.657] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 556)
[2018-03-25 13:12:12.701] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 559)
[2018-03-25 13:12:12.717] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 559)
[2018-03-25 13:12:12.744] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 560)
[2018-03-25 13:12:12.760] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 560)
[2018-03-25 13:12:12.786] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 559)
[2018-03-25 13:12:12.829] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 560)
[2018-03-25 13:12:12.873] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 563)
[2018-03-25 13:12:12.889] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 563)
[2018-03-25 13:12:12.915] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 564)
[2018-03-25 13:12:12.932] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 564)
[2018-03-25 13:12:12.957] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 563)
[2018-03-25 13:12:13.000] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 564)
[2018-03-25 13:12:13.044] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 567)
[2018-03-25 13:12:13.060] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 567)
[2018-03-25 13:12:13.087] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 568)
[2018-03-25 13:12:13.103] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 568)
[2018-03-25 13:12:13.129] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 567)
[2018-03-25 13:12:13.171] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 568)
[2018-03-25 13:12:13.215] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 571)
[2018-03-25 13:12:13.231] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 571)
[2018-03-25 13:12:13.258] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 572)
[2018-03-25 13:12:13.287] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::9249:d69b (ID 572)
[2018-03-25 13:12:13.289] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2001:1608:10:25::1c04:b12f (ID 572)
[2018-03-25 13:12:13.291] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 572)
[2018-03-25 13:12:13.294] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccc::2 (ID 572)
[2018-03-25 13:12:13.320] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 571)
[2018-03-25 13:12:13.527] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 572)
[2018-03-25 13:12:13.528] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 2a04:b900:0:100::1:28 (TTL 3600, ID 572)
[2018-03-25 13:12:13.530] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 572
[2018-03-25 13:12:13.627] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 577)
[2018-03-25 13:12:13.644] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 577)
[2018-03-25 13:12:13.680] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 578)
[2018-03-25 13:12:13.696] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 578)
[2018-03-25 13:12:13.868] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 577)
[2018-03-25 13:12:13.868] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 185.49.141.28 (TTL 3600, ID 577)
[2018-03-25 13:12:13.870] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 577
[2018-03-25 13:12:13.913] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 578)
[2018-03-25 13:12:13.913] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 2a04:b900:0:100::1:28 (TTL 3600, ID 578)
[2018-03-25 13:12:13.915] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 578
[2018-03-25 13:12:14.005] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 582)
[2018-03-25 13:12:14.021] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 582)
[2018-03-25 13:12:14.050] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 583)
[2018-03-25 13:12:14.066] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 583)
[2018-03-25 13:12:14.208] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 582)
[2018-03-25 13:12:14.209] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 185.49.141.28 (TTL 3600, ID 582)
[2018-03-25 13:12:14.210] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 582
[2018-03-25 13:12:14.254] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 583)
[2018-03-25 13:12:14.254] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 2a04:b900:0:100::1:28 (TTL 3599, ID 583)
[2018-03-25 13:12:14.256] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 583
[2018-03-25 13:12:14.335] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 588)
[2018-03-25 13:12:14.351] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 588)
[2018-03-25 13:12:14.380] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 589)
[2018-03-25 13:12:14.396] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 589)
[2018-03-25 13:12:14.518] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 588)
[2018-03-25 13:12:14.518] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 185.49.141.28 (TTL 3600, ID 588)
[2018-03-25 13:12:14.520] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 588
[2018-03-25 13:12:14.545] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 589)
[2018-03-25 13:12:14.545] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 2a04:b900:0:100::1:28 (TTL 3600, ID 589)
[2018-03-25 13:12:14.547] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 589
[2018-03-25 13:12:14.548] **** new query query[A] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 590)
[2018-03-25 13:12:14.564] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 590)
[2018-03-25 13:12:14.567] **** new query query[AAAA] edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl 192.168.2.209 (ID 591)
[2018-03-25 13:12:14.583] **** forwarded edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl to 2620:0:ccd::2 (ID 591)
[2018-03-25 13:12:14.678] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 590)
[2018-03-25 13:12:14.679] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 185.49.141.28 (TTL 3599, ID 590)
[2018-03-25 13:12:14.681] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 590
[2018-03-25 13:12:14.705] **** got DNSSEC details for edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl: 3 (ID 591)
[2018-03-25 13:12:14.706] **** got reply edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl is 2a04:b900:0:100::1:28 (TTL 3598, ID 591)
[2018-03-25 13:12:14.707] Saving reply type for "edf245cf36d242cda8848a1af171636f.test-ns6.internet.nl" 591

As we save the reply type per domain and not per individual query (due to memory efficiency, as the reply type should always be the same for the same query of the same domain (not suddenly turn from an exact IP reply into a CNAME)). Hence, if a domain is queried often, its reply type is often reset to unknown (shown as ? (0) in the Query Log) as the most recent answer of your upstream server has not yet reached your Pi-hole.

1 Like

@mibere See also

1 Like