dnstap is better, faster, transaction logging. it can be compared to syslog or querylog. how you postprocess the results isn't covered. the contents of the resource records you look up *is* present in the output, according to the unbound config you gave. -- P Vixie