Actually it appears like this..in one line like this:
10-Jan-2011 12:30:42.462 client 188.8.131.52#12345: view 1: UDP: query: abc.com IN A response: NOERROR +E abc.com 300 IN CNAME xyz.com; xyz.com 300 IN CNAME dgh.com; dgh.com 300 IN CNAME jkl.com; kl.com 300 IN A 184.108.40.206
I am trying to parse the individual components so that I can reconstruct this to a different format using ruby. In the 'query' above, I need to extract "abc.com" and the query type (A) and in the 'response' NOERROR, and then the series of fields broken down by . I guess this will go into an array so that I can extract them and mutate appropriately.