\fBrndc modzone\fR\&.
.RE
.PP
-\fBdnstap\-reopen\fR
-.RS 4
-Close and re\-open DNSTAP output files\&. This allows the files to be renamed externally then to be re\-opened\&.
+\fBdnstap ( \-reopen | \-roll \fR\fB[\fInumber\fR]\fR\fB )\fR
+.RS 4
+Close and re\-open DNSTAP output files\&.
+\fBrndc dnstap \-reopen\fR
+allows the output file to be renamed externally, then re\-opened\&.
+\fBrndc dnstap \-roll\fR
+causes the output file to be rolled automatically, similar to log files; the most recent output file has "\&.0" appended to its name; the previous most recent output file is moved to "\&.1", and so on\&. If
+\fInumber\fR
+is specified, then the number of backup log files is limited to that number\&.
.RE
.PP
\fBdumpdb \fR\fB[\-all|\-cache|\-zone|\-adb|\-bad|\-fail]\fR\fB \fR\fB[\fIview \&.\&.\&.\fR]\fR
See also <span class="command"><strong>rndc addzone</strong></span> and <span class="command"><strong>rndc modzone</strong></span>.
</p>
</dd>
-<dt><span class="term"><strong class="userinput"><code>dnstap-reopen</code></strong></span></dt>
+<dt><span class="term"><strong class="userinput"><code>dnstap ( -reopen | -roll [<span class="optional"><em class="replaceable"><code>number</code></em></span>] )</code></strong></span></dt>
<dd><p>
- Close and re-open DNSTAP output files. This allows the files
- to be renamed externally then to be re-opened.
+ Close and re-open DNSTAP output files.
+ <span class="command"><strong>rndc dnstap -reopen</strong></span> allows the output
+ file to be renamed externally, then re-opened.
+ <span class="command"><strong>rndc dnstap -roll</strong></span> causes the output file
+ to be rolled automatically, similar to log files; the most
+ recent output file has ".0" appended to its name; the
+ previous most recent output file is moved to ".1", and so on.
+ If <em class="replaceable"><code>number</code></em> is specified, then the
+ number of backup log files is limited to that number.
</p></dd>
<dt><span class="term"><strong class="userinput"><code>dumpdb [<span class="optional">-all|-cache|-zone|-adb|-bad|-fail</span>] [<span class="optional"><em class="replaceable"><code>view ...</code></em></span>]</code></strong></span></dt>
<dd><p>
</p></dd>
<dt><span class="term"><strong class="userinput"><code>recursing</code></strong></span></dt>
<dd><p>
- Dump the list of queries <span class="command"><strong>named</strong></span> is currently
- recursing on, and the list of domains to which iterative
- queries are currently being sent. (The second list includes
- the number of fetches currently active for the given domain,
- and how many have been passed or dropped because of the
- <code class="option">fetches-per-zone</code> option.)
- </p></dd>
+ Dump the list of queries <span class="command"><strong>named</strong></span> is currently
+ recursing on, and the list of domains to which iterative
+ queries are currently being sent. (The second list includes
+ the number of fetches currently active for the given domain,
+ and how many have been passed or dropped because of the
+ <code class="option">fetches-per-zone</code> option.)
+ </p></dd>
<dt><span class="term"><strong class="userinput"><code>refresh <em class="replaceable"><code>zone</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em> [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</code></strong></span></dt>
<dd><p>
Schedule zone maintenance for the given zone.
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
- getrrsetbyname with a non absolute name could trigger a
+ getrrsetbyname with a non absolute name could trigger an
infinite recursion bug in lwresd and named with lwres
configured if when combined with a search list entry the
resulting name is too long. This flaw is disclosed in
a human-readable format.
</p>
<p>
- <span class="command"><strong>rndc dnstap-reopen</strong></span> can be used reopen
- dnstap output files after renaming them.
+ <span class="command"><strong>rndc dnstap -roll</strong></span> causes <span class="command"><strong>dnstap</strong></span>
+ output files to be rolled like log files -- the most recent output
+ file is renamed with a <code class="filename">.0</code> suffix, the next
+ most recent with <code class="filename">.1</code>, etc. (Note that this
+ only works when <span class="command"><strong>dnstap</strong></span> output is being written
+ to a file, not to a UNIX domain socket.) An optional numerical
+ argument specifies how many backup log files to retain; if not
+ specified or set to 0, there is no limit.
+ </p>
+<p>
+ <span class="command"><strong>rndc dnstap -reopen</strong></span> simply closes and reopens
+ the <span class="command"><strong>dnstap</strong></span> output channel without renaming
+ the output file.
</p>
<p>
For more information on <span class="command"><strong>dnstap</strong></span>, see
See also <span class="command"><strong>rndc addzone</strong></span> and <span class="command"><strong>rndc modzone</strong></span>.
</p>
</dd>
-<dt><span class="term"><strong class="userinput"><code>dnstap-reopen</code></strong></span></dt>
+<dt><span class="term"><strong class="userinput"><code>dnstap ( -reopen | -roll [<span class="optional"><em class="replaceable"><code>number</code></em></span>] )</code></strong></span></dt>
<dd><p>
- Close and re-open DNSTAP output files. This allows the files
- to be renamed externally then to be re-opened.
+ Close and re-open DNSTAP output files.
+ <span class="command"><strong>rndc dnstap -reopen</strong></span> allows the output
+ file to be renamed externally, then re-opened.
+ <span class="command"><strong>rndc dnstap -roll</strong></span> causes the output file
+ to be rolled automatically, similar to log files; the most
+ recent output file has ".0" appended to its name; the
+ previous most recent output file is moved to ".1", and so on.
+ If <em class="replaceable"><code>number</code></em> is specified, then the
+ number of backup log files is limited to that number.
</p></dd>
<dt><span class="term"><strong class="userinput"><code>dumpdb [<span class="optional">-all|-cache|-zone|-adb|-bad|-fail</span>] [<span class="optional"><em class="replaceable"><code>view ...</code></em></span>]</code></strong></span></dt>
<dd><p>
</p></dd>
<dt><span class="term"><strong class="userinput"><code>recursing</code></strong></span></dt>
<dd><p>
- Dump the list of queries <span class="command"><strong>named</strong></span> is currently
- recursing on, and the list of domains to which iterative
- queries are currently being sent. (The second list includes
- the number of fetches currently active for the given domain,
- and how many have been passed or dropped because of the
- <code class="option">fetches-per-zone</code> option.)
- </p></dd>
+ Dump the list of queries <span class="command"><strong>named</strong></span> is currently
+ recursing on, and the list of domains to which iterative
+ queries are currently being sent. (The second list includes
+ the number of fetches currently active for the given domain,
+ and how many have been passed or dropped because of the
+ <code class="option">fetches-per-zone</code> option.)
+ </p></dd>
<dt><span class="term"><strong class="userinput"><code>refresh <em class="replaceable"><code>zone</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em> [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</code></strong></span></dt>
<dd><p>
Schedule zone maintenance for the given zone.
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
- getrrsetbyname with a non absolute name could trigger a
+ getrrsetbyname with a non absolute name could trigger an
infinite recursion bug in lwresd and named with lwres
configured if when combined with a search list entry the
resulting name is too long. This flaw is disclosed in
a human-readable format.
</p>
<p>
- <span class="command"><strong>rndc dnstap-reopen</strong></span> can be used reopen
- dnstap output files after renaming them.
+ <span class="command"><strong>rndc dnstap -roll</strong></span> causes <span class="command"><strong>dnstap</strong></span>
+ output files to be rolled like log files -- the most recent output
+ file is renamed with a <code class="filename">.0</code> suffix, the next
+ most recent with <code class="filename">.1</code>, etc. (Note that this
+ only works when <span class="command"><strong>dnstap</strong></span> output is being written
+ to a file, not to a UNIX domain socket.) An optional numerical
+ argument specifies how many backup log files to retain; if not
+ specified or set to 0, there is no limit.
+ </p>
+<p>
+ <span class="command"><strong>rndc dnstap -reopen</strong></span> simply closes and reopens
+ the <span class="command"><strong>dnstap</strong></span> output channel without renaming
+ the output file.
</p>
<p>
For more information on <span class="command"><strong>dnstap</strong></span>, see