The text f521d5438c89, as Debian 7 (Wheezy) shipped it.
convert BIND8 querylogs to dlf
bind8_query2dlf(1) on Linux now