Dig 9.7 DNSSEC output
Peter Janssen
peter.janssen at eurid.eu
Sun May 9 16:56:56 UTC 2010
Or this one :
# dig @j.ns.se se. dnskey +dnssec
; <<>> DiG 9.7.0-P1 <<>> @j.ns.se se. dnskey +dnssec
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24743
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;se. IN DNSKEY
;; ANSWER SECTION:
se. 3600 IN DNSKEY 257 3 5 A....snip...
EaRlZigUCp8=
se. 3600 IN DNSKEY 257 3 5 A....snip....
7TKYyQgsTlc=
se. 3600 IN DNSKEY 256 3 5 A....snip....
2oXgSod9
se. 3600 IN RRSIG DNSKEY 5 1 3600
20100515203911 20100509131031 39547 se. g....snip.... uAYDHw==
se. 3600 IN RRSIG DNSKEY 5 1 3600
20100517001830 20100509131031 8779 se. v....snip.... NRwr1A==
;; Query time: 17 msec
;; SERVER: 199.254.63.1#53(199.254.63.1)
;; WHEN: Sun May 9 18:54:10 2010
;; MSG SIZE rcvd: 1311
One (1) additional announced, while there is not even an additional section.
Maybe this is related to the EDNS0 stuff?
--Pj.
Peter Janssen
Technical Manager
Join us in June! EURid hosts ICANNs 38th meeting in Brussels. Find out
more at brussels38.icann.org.
EURid
Woluwelaan 150
1831 Diegem - Belgium
TEL.: +32 (0) 2 401 2750
peter.janssen at eurid.eu
http://www.eurid.eu
From: bind-users-bounces+peter.janssen=eurid.eu at lists.isc.org
[mailto:bind-users-bounces+peter.janssen=eurid.eu at lists.isc.org] On Behalf
Of Sten Carlsen
Sent: Sunday, May 09, 2010 17:48
To: bind-users at lists.isc.org
Subject: Re: Dig 9.7 DNSSEC output
On 09/05/10 17:24, Peter Janssen wrote:
Hi,
might be me, but I don't get it.
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
ADDITIONAL: 9
But as you count to 8, where is number 9.
I seem to be counting as Peter here.
The issue I have with this is, dig announces 9 additional section entries,
while 3 A, 1 AAAA and 4 RRSIG, in my book sums up to 8.
Without DNSSEC, it seems to be able to count correctly...
# dig @ns.nic.se nic.se ns
; <<>> DiG 9.7.0-P1 <<>> @ns.nic.se nic.se ns
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4920
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 4
;; WARNING: recursion requested but not available
;; QUESTION SECTION:
;nic.se. IN NS
;; ANSWER SECTION:
nic.se. 3600 IN NS ns2.nic.se.
nic.se. 3600 IN NS ns.nic.se.
nic.se. 3600 IN NS ns3.nic.se.
;; ADDITIONAL SECTION:
ns.nic.se. 3600 IN A 212.247.7.228
ns.nic.se. 3600 IN AAAA 2a00:801:f0:53::53
ns2.nic.se. 3600 IN A 194.17.45.54
ns3.nic.se. 60 IN A 212.247.3.83
;; Query time: 34 msec
;; SERVER: 212.247.7.228#53(212.247.7.228)
;; WHEN: Sun May 9 17:23:51 2010
;; MSG SIZE rcvd: 153
Am I missing something?
Or is this already reported? If so, what would be the correct channel?
R.
--Pj.
Peter Janssen
Technical Manager
Join us in June! EURid hosts ICANNs 38th meeting in Brussels. Find out
more at brussels38.icann.org.
EURid
Woluwelaan 150
1831 Diegem - Belgium
TEL.: +32 (0) 2 401 2750
peter.janssen at eurid.eu
http://www.eurid.eu
_______________________________________________
bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
--
Best regards
Sten Carlsen
No improvements come from shouting:
"MALE BOVINE MANURE!!!"
More information about the bind-users
mailing list