logentry_args.md

Types of information in Zonemaster log objects

Aggregate list

Argument	Type of value	Description and formatting
algo_descr	Text	The human readable description of a DNSSEC algorithm.
algo_mnemo	Text	The mnemonic of a DNSSEC algorithm.
algo_num	Non-negative integer	The numeric value for a DNSSEC algorithm.
domain	Domain name	A domain name. If nsname is also applicable, use that one instead.
keytag	Non-negative integer	A keytag for a DNSKEY record or a keytag used in a DS or RRSIG record.
module	A Zonemaster test module, or all	The name of a Zonemaster test module.
module_list	List of Zonemaster test modules	A list of Zonemaster test modules, separated by ":".
nsname	Domain name	The domain name of a name server.
ns_ip	IP address	The IP address of a name server.
ns	Domain name and IP address pair	The name and IP address of a name server, separated by "/".
nsname_list	List of domain names	A list of name servers, as specified by "nsname", separated by ";".
ns_ip_list	List of IP addresses	A list of name servers, as specified by "ns_ip", separated by ";".
ns_list	List of domain name and IP address pairs	A list of name servers, as specified by "ns", separated by ";".
testcase	A Zonemaster test case, or all	A test case identifier.
	AS number	An Autonomous Space number for an IP address.
	Address record type (A or AAAA)	Used to tell the difference between IPv4 and IPv6.
	Count of different SOA RNAMEs.	Total number of different SOA RNAME fields seen.
	Count of different SOA serial numbers	Total number of different SOA serial numbers seen.
	Count of different sets of NS name/IP seen.	Total number of different sets of nameserver information seen.
	Count of different time parameter sets seen	Total number of different sets of SOA time parameters seen.
	Count of domain names	A count of domain names.
	Count of nameservers	A count of nameservers.
	DNS packet size	The size in octets of a DNS packets.
	DNSKEY key length	The key length for a DNSKEY. The interpretation of this value various quite a bit with the algorithm. Be careful when using it for algorithms that aren't RSA-based.
	DNSSEC delegation verification failure reason	A somewhat human-readable reason why the delegation step between the tested zone and its parent is not secure.
	DS digest type	The digest type used in a DS record.
dlabel (?)	Domain name label	A single label from a domain name.
dlength (?)	Domain name label length	The length of a domain name label.
	Duration in seconds	An integer number of seconds.
fqdn (?)	FQDN	A fully qualified domain name (with terminating dot).
fqdnlength (?)	FQDN length	The length of an FQDN.
	IP address	An IPv4 or IPv6 address.
	IP address or nothing	An IPv4 or IPv6 address, or no value.
	IP range	An IP range.
	IP reserved range description	A brief description what an IP range is reserved for.
	Largest SOA serial number seen	The numerically largest SOA serial value seen.
	List of AS numbers	A list of Autonomous Space numbers.
	List of DNSKEY keytags	A list of keytags from DNSKEY records.
	List of DS keytags	A list of keytags from DS records.
	List of DS/DNSKEY/RRSIG keytags	A list of keytags from DS, DNSKEY or RRSIG records.
	List of IP addresses	A list of IP addresses.
	List of MX domain names	A list of domain names from MX records.
	List of RR types	A list of RR types, typically from an NSEC or NSEC3 record.
	List of SOA RNAMEs	A list of RNAME values from SOA records.
	List of SOA serial numbers	A list of serial number values from SOA records.
	List of domain names	A list of domain names.
	NS names from child	A list of nameserver names taken from a zone's child servers.
	NS names from parent	A list of nameserver names taken from a zone's parent servers.
	NSEC3 iteration count	An iteration count from an NSEC3PARAM record.
	Number of DNSKEY RRs in packet	The number of DNSKEY records found in a packet.
	Number of RRSIG RRs in packet	The number of RRSIG records found in a packet.
	Number of SOA RRs in packet	The number of SOA records found in a packet.
	Protocol (UDP or TCP)	The protocol used for a query.
rcode (?)	RCODE	An RCODE from a DNS packet.
	RFC reference	A reference to an RFC.
rrtype (?)	RR type	The type of RR the message pertains to.
	RRSIG Expiration date	The time when a signature expires.
	RRSIG validation error message	The human-readable reason why the cryptographic validation of a signature failed.
	SOA MNAME	The MNAME value from a SOA record.
	SOA RNAME	The RNAME value from a SOA record.
	SOA expire	The expire value from a SOA record.
	SOA expire minimum value	The lowest value considered OK for the SOA expire field.
	SOA minimum	The minimum value from a SOA record.
	SOA minimum maximum value	The highest value considered OK for the SOA minimum field.
	SOA minimum minimum value	The lowest value considered OK for the SOA minimum field.
	SOA refresh	The refresh value from a SOA record.
	SOA refresh minimum value	The lowest value considered OK for the SOA refresh field.
	SOA retry	The retry value from a SOA record.
	SOA retry minimum value	The lowest value considered OK for the SOA retry field.
	SOA serial number	The serial number value from a SOA record.
	Smallest SOA serial number seen	The smallest value seen in a SOA serial field in the tested zone.
	TLD	The name of a top-level domain.
	time_t value when RRSIG validation was attempted	The time when an RRSIG validation was attempted, in Unix time_t format.

Message names maked with a question mark should not be considered stable.

List by test module

Basic

• Domain name

• Domain name label

• Domain name label length

• FQDN

• FQDN length

• Zone name

• Parent zone name

• NS names from parent

• RCODE

• Nameserver name/IP pair

• NS names from child

• RR type

Address

• Nameserver name

• Nameserver IP

• IP reserved range description

• RFC reference

• IP range

• PTR query name

• List of domain names

Connectivity

• Nameserver name/IP pair

• RR type

• Nameserver name

• Nameserver IP

• List of AS numbers

• AS number

Consistency

• Nameserver name/IP pair

• RR type

• Nameserver name

• Nameserver IP

• SOA serial number

• Count of different SOA serial numbers

• List of SOA serial numbers

• Smallest SOA serial number seen

• Largest SOA serial number seen

• SOA RNAME

• Count of different SOA RNAMEs.

• List of SOA RNAMEs.

• SOA refresh

• SOA retry

• SOA expire

• SOA minimum

• Count of different time parameter sets seen

• List of domain names

• List of nameserver name/IP pairs.

• Count of different sets of NS name/IP seen.

Delegation

• Count of nameservers

• List of domain names

• IP address

• List of IP addresses

• DNS packet size

• Nameserver name/IP pair

• RR type

• Domain name

• Protocol (UDP or TCP)

• Address record type (A or AAAA)

• Count of domain names

DNSSEC

• Zone name

• IP address

• DS/DNSKEY/RRSIG keytag

• DS digest type

• List of DS/DNSKEY/RRSIG keytags

• List of DS keytags

• List of DNSKEY keytags

• IP address or nothing

• NSEC3 iteration count

• DNSKEY key length

• RRSIG Expiration date

• List of RR types

• Duration in seconds

• DNSKEY algorithm number

• DNSKEY algorithm name

• Number of DNSKEY RRs in packet

• Number of RRSIG RRs in packet

• time_t value when RRSIG validation was attempted

• RRSIG validation error message

• Number of SOA RRs in packet

• RCODE

• DNSSEC delegation verification failure reason

Nameserver

• Nameserver name

• Nameserver IP

• Domain name

• List of nameserver names

• List of nameserver name/IP pairs

• RR type

• Nameserver name/IP pair

• RCODE

Syntax

• Domain name

• Domain name label

• SOA RNAME

• TLD

Zone

• SOA MNAME

• Nameserver IP

• Nameserver name

• Zone name

• List of nameserver name/IP pairs

• SOA refresh

• SOA refresh minimum value

• SOA retry

• SOA retry minimum value

• SOA expire

• SOA expire minimum value

• SOA minimum

• SOA minimum maximum value

• SOA minimum minimum value

• List of MX domain names