I am troubleshooting a DNS issue and looking at logs I have never seen before. Some examples of what I find in the DNS Client Operational log....

DNS query is completed for the name mydomain.net, type 1, query options 1073766400 with status 87 Results 
Cache lookup called for name mydomain.net, type 1, options 2251800887582720 and interface index 0
Cache lookup for name mydomain.net, type 1 and option 2251800887582720 returned 9701 with results 

I am currently inferring results and was trying to find a way to lookup what the option, status and return code actually mean. I don't think they are proprietary and very little on the net directly references those numbers exclusively and I have failed to find a TechNet article that describes those values.

What do those values mean and is there a native windows utility that I can use to "decode" them>

  • docs.microsoft.com/en-us/windows/win32/dns/… lists a set of values for DNS Query Options. But they don't go high enough to parse your example of 1073766400 (dec), which is 40006000 (hex). And certainly not high enough to parse 2251800887582720 (dec). But maybe this tidbit will lead to something. – Doug Deden 2 days ago
  • Why not running dig? It will properly parse and diplay the packets. – Patrick Mevzek 2 days ago
  • @PatrickMevzek Because I have never used dig before so its not something I think about. That and it oddly didnt come up when I was looking for this information. – Matt 2 days ago

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.