The text e5504e602174, as Debian 3.1 (Sarge) shipped it.
convert BIND9 querylogs to dlf
bind9_query2dlf(1) on Linux now