Bind9 and the Sega Dreamcast.

[Mark.Andrews at nominum.com]

	Please retry with complete packets, truncated packets a no good,
	e.g. -s 1500 on ethernet

	Mark

> 
> Well I got a tcpdump of the conversation between the Dreamcast and BIND9.
> Pretty much one sided.  The DC sends stuff but never gets anything back.
> 
> This is just when you fire up the web browser software and hit the connect
> button, it tries to go to Sega's website (sip3 is the DC and lightning is
> the DNS server):
> 
> 15:46:14.534747 sip3.hereintown.net.2063 >
> lightning.hereintown.net.domain:  0+ (38)
> 0x0000   4500 0042 0061 0000 7611 e4b1 cfc4 600c        E..B.a..v.....`.
> 0x0010   cfc4 6003 080f 0035 002e 923f 0000 0100        ..`....5...?....
> 0x0020   0001 0000 0000 0000 0377 7777 0473 6567        .........www.seg
> 0x0030   6103 636f 6d00                                 a.com.
> 15:46:14.535692 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 0062 0000 7611 e4a7 cfc4 600c        E..K.b..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:16.584692 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 0064 0000 7611 e4a5 cfc4 600c        E..K.d..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:18.575574 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 0066 0000 7611 e4a3 cfc4 600c        E..K.f..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:20.595673 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 0068 0000 7611 e4a1 cfc4 600c        E..K.h..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:22.644610 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 006a 0000 7611 e49f cfc4 600c        E..K.j..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:24.635024 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 006c 0000 7611 e49d cfc4 600c        E..K.l..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:26.664241 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 006e 0000 7611 e49b cfc4 600c        E..K.n..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 15:46:28.665200 sip3.hereintown.net.2064 >
> lightning.hereintown.net.domain:  0+ (47)
> 0x0000   4500 004b 0070 0000 7611 e499 cfc4 600c        E..K.p..v.....`.
> 0x0010   cfc4 6003 0810 0035 0037 02fc 0000 0100        ..`....5.7......
> 0x0020   0001 0000 0000 0000 0776 7365 7276 6572        .........vserver
> 0x0030   0970 6c61 6e65                                 .plane
> 
> Like I said before, I don't know enough about DNS to tell what this is
> doing, can anyone help me out?
> 
> -Chris
> -- 
> Two penguins were walking on an iceberg.  The first penguin said to the
> second, "you look like you are wearing a tuxedo."  The second penguin
> said, "I might be..."                         --David Lynch, Twin Peaks
> 
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com