Test forward query/response counts

diff --git a/bin/tests/system/dnstap/ns5/named.conf.j2 b/bin/tests/system/dnstap/ns5/named.conf.j2
new file mode 100644 (file)
index 0000000..b353676
--- /dev/null
+++ b/bin/tests/system/dnstap/ns5/named.conf.j2
@@ -0,0 +1,44 @@
+/*
+ * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+ *
+ * SPDX-License-Identifier: MPL-2.0
+ *
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0.  If a copy of the MPL was not distributed with this
+ * file, you can obtain one at https://mozilla.org/MPL/2.0/.
+ *
+ * See the COPYRIGHT file distributed with this work for additional
+ * information regarding copyright ownership.
+ */
+
+options {
+       query-source address 10.53.0.5;
+       notify-source 10.53.0.5;
+       transfer-source 10.53.0.5;
+       port @PORT@;
+       directory ".";
+       pid-file "named.pid";
+       listen-on { 10.53.0.5; };
+       listen-on-v6 { none; };
+       recursion yes;
+       notify yes;
+       dnstap-identity "ns5";
+       dnstap-version "xxx";
+       dnstap-output file "dnstap.out";
+       dnstap { all; };
+       send-cookie no;
+       require-server-cookie no;
+       dnssec-validation no;
+       qname-minimization disabled;
+       forwarders { 10.53.0.3; };
+       forward only;
+};
+
+key rndc_key {
+       secret "1234abcd8765";
+       algorithm @DEFAULT_HMAC@;
+};
+
+controls {
+       inet 10.53.0.5 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
+};

diff --git a/bin/tests/system/dnstap/tests.sh b/bin/tests/system/dnstap/tests.sh
index c311e49ef014fb57ec7240dfd26c3930ade308d4..b40069c46b603454c562fb47f45b5fbb7a95aa6e 100644 (file)
--- a/bin/tests/system/dnstap/tests.sh
+++ b/bin/tests/system/dnstap/tests.sh
@@ -15,7 +15,7 @@ set -e
 
 . ../conf.sh
 
-DIGOPTS="+short -p ${PORT}"
+DIGOPTS="-p ${PORT}"
 RNDCCMD="$RNDC -p ${CONTROLPORT} -c ../_common/rndc.conf"
 
 status=0
@@ -37,6 +37,13 @@ dnstap_data_ready() {
   fi
 }
 
+check_count() {
+  [ $2 -eq $3 ] || {
+    echo_i "$1 $2 expected $3"
+    ret=1
+  }
+}
+
 for bad in bad-*.conf; do
   ret=0
   echo_i "checking that named-checkconf detects error in $bad"
@@ -71,6 +78,7 @@ wait_for_log 20 "all zones loaded" ns1/named.run || ret=1
 wait_for_log 20 "all zones loaded" ns2/named.run || ret=1
 wait_for_log 20 "all zones loaded" ns3/named.run || ret=1
 wait_for_log 20 "all zones loaded" ns4/named.run || ret=1
+wait_for_log 20 "all zones loaded" ns5/named.run || ret=1
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -89,6 +97,7 @@ status=$((status + ret))
 # ns1: dnstap-reopen; ns2: dnstap -reopen; ns3: dnstap -roll
 mv ns1/dnstap.out ns1/dnstap.out.save
 mv ns2/dnstap.out ns2/dnstap.out.save
+mv ns5/dnstap.out ns5/dnstap.out.save
 
 if [ -n "$FSTRM_CAPTURE" ]; then
   ret=0
@@ -107,10 +116,11 @@ $RNDCCMD -s 10.53.0.1 dnstap-reopen | sed 's/^/ns1 /' | cat_i
 $RNDCCMD -s 10.53.0.2 dnstap -reopen | sed 's/^/ns2 /' | cat_i
 $RNDCCMD -s 10.53.0.3 dnstap -roll | sed 's/^/ns3 /' | cat_i
 $RNDCCMD -s 10.53.0.4 dnstap -reopen | sed 's/^/ns4 /' | cat_i
+$RNDCCMD -s 10.53.0.5 dnstap -reopen | sed 's/^/ns5 /' | cat_i
 
 echo_i "send test traffic"
 ret=0
-$DIG $DIGOPTS @10.53.0.3 a.example >dig.out || ret=1
+$DIG $DIGOPTS @10.53.0.5 a.example >dig.out || ret=1
 
 # send an UPDATE to ns2
 $NSUPDATE <<-EOF
@@ -128,6 +138,7 @@ EOF
 $RNDCCMD -s 10.53.0.1 stop | sed 's/^/ns1 /' | cat_i
 $RNDCCMD -s 10.53.0.2 stop | sed 's/^/ns2 /' | cat_i
 $RNDCCMD -s 10.53.0.3 stop | sed 's/^/ns3 /' | cat_i
+$RNDCCMD -s 10.53.0.5 stop | sed 's/^/ns5 /' | cat_i
 
 sleep 1
 
@@ -139,6 +150,8 @@ aq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "AQ " | wc -l)
 ar1=$($DNSTAPREAD ns1/dnstap.out.save | grep "AR " | wc -l)
 cq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "CQ " | wc -l)
 cr1=$($DNSTAPREAD ns1/dnstap.out.save | grep "CR " | wc -l)
+fq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "FQ " | wc -l)
+fr1=$($DNSTAPREAD ns1/dnstap.out.save | grep "FR " | wc -l)
 rq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "RQ " | wc -l)
 rr1=$($DNSTAPREAD ns1/dnstap.out.save | grep "RR " | wc -l)
 uq1=$($DNSTAPREAD ns1/dnstap.out.save | grep "UQ " | wc -l)
@@ -150,6 +163,8 @@ aq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "AQ " | wc -l)
 ar2=$($DNSTAPREAD ns2/dnstap.out.save | grep "AR " | wc -l)
 cq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "CQ " | wc -l)
 cr2=$($DNSTAPREAD ns2/dnstap.out.save | grep "CR " | wc -l)
+fq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "FQ " | wc -l)
+fr2=$($DNSTAPREAD ns2/dnstap.out.save | grep "FR " | wc -l)
 rq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "RQ " | wc -l)
 rr2=$($DNSTAPREAD ns2/dnstap.out.save | grep "RR " | wc -l)
 uq2=$($DNSTAPREAD ns2/dnstap.out.save | grep "UQ " | wc -l)
@@ -162,11 +177,26 @@ aq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "AQ " | wc -l)
 ar3=$($DNSTAPREAD ns3/dnstap.out.save | grep "AR " | wc -l)
 cq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "CQ " | wc -l)
 cr3=$($DNSTAPREAD ns3/dnstap.out.save | grep "CR " | wc -l)
+fq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "FQ " | wc -l)
+fr3=$($DNSTAPREAD ns3/dnstap.out.save | grep "FR " | wc -l)
 rq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "RQ " | wc -l)
 rr3=$($DNSTAPREAD ns3/dnstap.out.save | grep "RR " | wc -l)
 uq3=$($DNSTAPREAD ns3/dnstap.out.save | grep "UQ " | wc -l)
 ur3=$($DNSTAPREAD ns3/dnstap.out.save | grep "UR " | wc -l)
 
+udp5=$($DNSTAPREAD ns5/dnstap.out.save | grep "UDP " | wc -l)
+tcp5=$($DNSTAPREAD ns5/dnstap.out.save | grep "TCP " | wc -l)
+aq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "AQ " | wc -l)
+ar5=$($DNSTAPREAD ns5/dnstap.out.save | grep "AR " | wc -l)
+cq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "CQ " | wc -l)
+cr5=$($DNSTAPREAD ns5/dnstap.out.save | grep "CR " | wc -l)
+fq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "FQ " | wc -l)
+fr5=$($DNSTAPREAD ns5/dnstap.out.save | grep "FR " | wc -l)
+rq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "RQ " | wc -l)
+rr5=$($DNSTAPREAD ns5/dnstap.out.save | grep "RR " | wc -l)
+uq5=$($DNSTAPREAD ns5/dnstap.out.save | grep "UQ " | wc -l)
+ur5=$($DNSTAPREAD ns5/dnstap.out.save | grep "UR " | wc -l)
+
 echo_i "checking UDP message counts"
 ret=0
 [ $udp1 -eq 0 ] || {
@@ -181,6 +211,10 @@ ret=0
   echo_i "ns3 $udp3 expected 4"
   ret=1
 }
+[ $udp5 -eq 0 ] || {
+  echo_i "ns5 $udp5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -198,6 +232,10 @@ ret=0
   echo_i "ns3 $tcp3 expected 6"
   ret=1
 }
+[ $tcp5 -eq 2 ] || {
+  echo_i "ns5 $tcp5 expected 2"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -215,6 +253,10 @@ ret=0
   echo_i "ns3 $aq3 expected 1"
   ret=1
 }
+[ $aq5 -eq 1 ] || {
+  echo_i "ns5 $aq5 expected 1"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -232,6 +274,10 @@ ret=0
   echo_i "ns3 $ar3 expected 0"
   ret=1
 }
+[ $ar5 -eq 0 ] || {
+  echo_i "ns5 $ar5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -249,6 +295,10 @@ ret=0
   echo_i "ns3 $cq3 expected 1"
   ret=1
 }
+[ $cq5 -eq 0 ] || {
+  echo_i "ns5 $cq5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -266,6 +316,10 @@ ret=0
   echo_i "ns3 $cr3 expected 2"
   ret=1
 }
+[ $cr5 -eq 1 ] || {
+  echo_i "ns5 $cr5 expected 1"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -283,6 +337,10 @@ ret=0
   echo_i "ns3 $rq3 expected 3"
   ret=1
 }
+[ $rq5 -eq 0 ] || {
+  echo_i "ns5 $rq5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -300,6 +358,52 @@ ret=0
   echo_i "ns3 $rr3 expected 3"
   ret=1
 }
+[ $rr5 -eq 0 ] || {
+  echo_i "ns5 $rr5 expected 0"
+  ret=1
+}
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+echo_i "checking FORWARD_QUERY message counts"
+ret=0
+[ $fq1 -eq 0 ] || {
+  echo_i "ns1 $fq1 expected 0"
+  ret=1
+}
+[ $fq2 -eq 0 ] || {
+  echo_i "ns2 $fq2 expected 0"
+  ret=1
+}
+[ $fq3 -eq 0 ] || {
+  echo_i "ns3 $fq3 expected 0"
+  ret=1
+}
+[ $fq5 -eq 0 ] || {
+  echo_i "ns5 $fq5 expected 0"
+  ret=1
+}
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+echo_i "checking FORWARD_RESPONSE message counts"
+ret=0
+[ $fr1 -eq 0 ] || {
+  echo_i "ns1 $fr1 expected 0"
+  ret=1
+}
+[ $fr2 -eq 0 ] || {
+  echo_i "ns2 $fr2 expected 0"
+  ret=1
+}
+[ $fr3 -eq 0 ] || {
+  echo_i "ns3 $fr3 expected 0"
+  ret=1
+}
+[ $fr5 -eq 0 ] || {
+  echo_i "ns5 $fr5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -317,6 +421,10 @@ ret=0
   echo_i "ns3 $uq3 expected 0"
   ret=1
 }
+[ $uq5 -eq 0 ] || {
+  echo_i "ns5 $uq5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -334,6 +442,10 @@ ret=0
   echo_i "ns3 $ur3 expected 0"
   ret=1
 }
+[ $ur5 -eq 0 ] || {
+  echo_i "ns5 $ur5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -345,6 +457,8 @@ aq1=$($DNSTAPREAD ns1/dnstap.out | grep "AQ " | wc -l)
 ar1=$($DNSTAPREAD ns1/dnstap.out | grep "AR " | wc -l)
 cq1=$($DNSTAPREAD ns1/dnstap.out | grep "CQ " | wc -l)
 cr1=$($DNSTAPREAD ns1/dnstap.out | grep "CR " | wc -l)
+fq1=$($DNSTAPREAD ns1/dnstap.out | grep "FQ " | wc -l)
+fr1=$($DNSTAPREAD ns1/dnstap.out | grep "FR " | wc -l)
 rq1=$($DNSTAPREAD ns1/dnstap.out | grep "RQ " | wc -l)
 rr1=$($DNSTAPREAD ns1/dnstap.out | grep "RR " | wc -l)
 uq1=$($DNSTAPREAD ns1/dnstap.out | grep "UQ " | wc -l)
@@ -356,6 +470,8 @@ aq2=$($DNSTAPREAD ns2/dnstap.out | grep "AQ " | wc -l)
 ar2=$($DNSTAPREAD ns2/dnstap.out | grep "AR " | wc -l)
 cq2=$($DNSTAPREAD ns2/dnstap.out | grep "CQ " | wc -l)
 cr2=$($DNSTAPREAD ns2/dnstap.out | grep "CR " | wc -l)
+fq2=$($DNSTAPREAD ns2/dnstap.out | grep "FQ " | wc -l)
+fr2=$($DNSTAPREAD ns2/dnstap.out | grep "FR " | wc -l)
 rq2=$($DNSTAPREAD ns2/dnstap.out | grep "RQ " | wc -l)
 rr2=$($DNSTAPREAD ns2/dnstap.out | grep "RR " | wc -l)
 uq2=$($DNSTAPREAD ns2/dnstap.out | grep "UQ " | wc -l)
@@ -367,11 +483,26 @@ aq3=$($DNSTAPREAD ns3/dnstap.out | grep "AQ " | wc -l)
 ar3=$($DNSTAPREAD ns3/dnstap.out | grep "AR " | wc -l)
 cq3=$($DNSTAPREAD ns3/dnstap.out | grep "CQ " | wc -l)
 cr3=$($DNSTAPREAD ns3/dnstap.out | grep "CR " | wc -l)
+fq3=$($DNSTAPREAD ns3/dnstap.out | grep "FQ " | wc -l)
+fr3=$($DNSTAPREAD ns3/dnstap.out | grep "FR " | wc -l)
 rq3=$($DNSTAPREAD ns3/dnstap.out | grep "RQ " | wc -l)
 rr3=$($DNSTAPREAD ns3/dnstap.out | grep "RR " | wc -l)
 uq3=$($DNSTAPREAD ns3/dnstap.out | grep "UQ " | wc -l)
 ur3=$($DNSTAPREAD ns3/dnstap.out | grep "UR " | wc -l)
 
+udp5=$($DNSTAPREAD ns5/dnstap.out | grep "UDP " | wc -l)
+tcp5=$($DNSTAPREAD ns5/dnstap.out | grep "TCP " | wc -l)
+aq5=$($DNSTAPREAD ns5/dnstap.out | grep "AQ " | wc -l)
+ar5=$($DNSTAPREAD ns5/dnstap.out | grep "AR " | wc -l)
+cq5=$($DNSTAPREAD ns5/dnstap.out | grep "CQ " | wc -l)
+cr5=$($DNSTAPREAD ns5/dnstap.out | grep "CR " | wc -l)
+fq5=$($DNSTAPREAD ns5/dnstap.out | grep "FQ " | wc -l)
+fr5=$($DNSTAPREAD ns5/dnstap.out | grep "FR " | wc -l)
+rq5=$($DNSTAPREAD ns5/dnstap.out | grep "RQ " | wc -l)
+rr5=$($DNSTAPREAD ns5/dnstap.out | grep "RR " | wc -l)
+uq5=$($DNSTAPREAD ns5/dnstap.out | grep "UQ " | wc -l)
+ur5=$($DNSTAPREAD ns5/dnstap.out | grep "UR " | wc -l)
+
 echo_i "checking UDP message counts"
 ret=0
 [ $udp1 -eq 0 ] || {
@@ -386,6 +517,10 @@ ret=0
   echo_i "ns3 $udp3 expected 2"
   ret=1
 }
+[ $udp5 -eq 4 ] || {
+  echo_i "ns5 $udp5 expected 4"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -403,6 +538,10 @@ ret=0
   echo_i "ns3 $tcp3 expected 0"
   ret=1
 }
+[ $tcp5 -eq 0 ] || {
+  echo_i "ns5 $tcp5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -420,6 +559,10 @@ ret=0
   echo_i "ns3 $aq3 expected 0"
   ret=1
 }
+[ $aq5 -eq 0 ] || {
+  echo_i "ns5 $aq5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -437,6 +580,10 @@ ret=0
   echo_i "ns3 $ar3 expected 0"
   ret=1
 }
+[ $ar5 -eq 0 ] || {
+  echo_i "ns5 $ar5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -454,6 +601,10 @@ ret=0
   echo_i "ns3 $cq3 expected 1"
   ret=1
 }
+[ $cq5 -eq 1 ] || {
+  echo_i "ns5 $cq5 expected 1"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -471,6 +622,10 @@ ret=0
   echo_i "ns3 $cr3 expected 1"
   ret=1
 }
+[ $cr5 -eq 1 ] || {
+  echo_i "ns5 $cr5 expected 1"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -488,6 +643,10 @@ ret=0
   echo_i "ns3 $rq3 expected 0"
   ret=1
 }
+[ $rq5 -eq 0 ] || {
+  echo_i "ns5 $rq5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -505,6 +664,52 @@ ret=0
   echo_i "ns3 $rr3 expected 0"
   ret=1
 }
+[ $rr5 -eq 0 ] || {
+  echo_i "ns5 $rr5 expected 0"
+  ret=1
+}
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+echo_i "checking FORWARD_QUERY message counts"
+ret=0
+[ $fq1 -eq 0 ] || {
+  echo_i "ns1 $fq1 expected 0"
+  ret=1
+}
+[ $fq2 -eq 0 ] || {
+  echo_i "ns2 $fq2 expected 0"
+  ret=1
+}
+[ $fq3 -eq 0 ] || {
+  echo_i "ns3 $fq3 expected 0"
+  ret=1
+}
+[ $fq5 -eq 1 ] || {
+  echo_i "ns5 $fq5 expected 1"
+  ret=1
+}
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+echo_i "checking FORWARD_RESPONSE message counts"
+ret=0
+[ $fr1 -eq 0 ] || {
+  echo_i "ns1 $fr1 expected 0"
+  ret=1
+}
+[ $fr2 -eq 0 ] || {
+  echo_i "ns2 $fr2 expected 0"
+  ret=1
+}
+[ $fr3 -eq 0 ] || {
+  echo_i "ns3 $fr3 expected 0"
+  ret=1
+}
+[ $fr5 -eq 1 ] || {
+  echo_i "ns5 $fr5 expected 1"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -522,6 +727,10 @@ ret=0
   echo_i "ns3 $uq3 expected 0"
   ret=1
 }
+[ $uq5 -eq 0 ] || {
+  echo_i "ns5 $uq5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -539,6 +748,10 @@ ret=0
   echo_i "ns3 $ur3 expected 0"
   ret=1
 }
+[ $ur5 -eq 0 ] || {
+  echo_i "ns5 $ur5 expected 0"
+  ret=1
+}
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
@@ -598,6 +811,8 @@ EOF
   ar4=$($DNSTAPREAD dnstap.out | grep "AR " | wc -l)
   cq4=$($DNSTAPREAD dnstap.out | grep "CQ " | wc -l)
   cr4=$($DNSTAPREAD dnstap.out | grep "CR " | wc -l)
+  fq4=$($DNSTAPREAD dnstap.out | grep "FQ " | wc -l)
+  fr4=$($DNSTAPREAD dnstap.out | grep "FR " | wc -l)
   rq4=$($DNSTAPREAD dnstap.out | grep "RQ " | wc -l)
   rr4=$($DNSTAPREAD dnstap.out | grep "RR " | wc -l)
   uq4=$($DNSTAPREAD dnstap.out | grep "UQ " | wc -l)
@@ -675,6 +890,24 @@ EOF
   if [ $ret != 0 ]; then echo_i "failed"; fi
   status=$((status + ret))
 
+  echo_i "checking FORWARDER_QUERY message counts"
+  ret=0
+  [ $fq4 -eq 0 ] || {
+    echo_i "ns4 $fq4 expected 0"
+    ret=1
+  }
+  if [ $ret != 0 ]; then echo_i "failed"; fi
+  status=$((status + ret))
+
+  echo_i "checking FORWARDER_RESPONSE message counts"
+  ret=0
+  [ $fr4 -eq 0 ] || {
+    echo_i "ns4 $fr4 expected 0"
+    ret=1
+  }
+  if [ $ret != 0 ]; then echo_i "failed"; fi
+  status=$((status + ret))
+
   echo_i "checking UPDATE_QUERY message counts"
   ret=0
   [ $uq4 -eq 1 ] || {
@@ -722,6 +955,8 @@ EOF
   ar4=$($DNSTAPREAD dnstap.out | grep "AR " | wc -l)
   cq4=$($DNSTAPREAD dnstap.out | grep "CQ " | wc -l)
   cr4=$($DNSTAPREAD dnstap.out | grep "CR " | wc -l)
+  fq4=$($DNSTAPREAD dnstap.out | grep "FQ " | wc -l)
+  fr4=$($DNSTAPREAD dnstap.out | grep "FR " | wc -l)
   rq4=$($DNSTAPREAD dnstap.out | grep "RQ " | wc -l)
   rr4=$($DNSTAPREAD dnstap.out | grep "RR " | wc -l)
   uq4=$($DNSTAPREAD dnstap.out | grep "UQ " | wc -l)
@@ -799,6 +1034,24 @@ EOF
   if [ $ret != 0 ]; then echo_i "failed"; fi
   status=$((status + ret))
 
+  echo_i "checking FORWARDER_QUERY message counts"
+  ret=0
+  [ $fq4 -eq 0 ] || {
+    echo_i "ns4 $fq4 expected 0"
+    ret=1
+  }
+  if [ $ret != 0 ]; then echo_i "failed"; fi
+  status=$((status + ret))
+
+  echo_i "checking FORWARDER_RESPONSE message counts"
+  ret=0
+  [ $fr4 -eq 0 ] || {
+    echo_i "ns4 $fr4 expected 0"
+    ret=1
+  }
+  if [ $ret != 0 ]; then echo_i "failed"; fi
+  status=$((status + ret))
+
   echo_i "checking UPDATE_QUERY message counts"
   ret=0
   [ $uq4 -eq 0 ] || {