The text 4537d2d978d0, as Debian 7 (Wheezy) shipped it.
convert BIND9 querylogs to dlf
bind9_query2dlf(1) on Linux now