Unknown Query types

Robert Annandale rob_a at unipharm.com
Wed Jan 12 17:33:04 UTC 2000


> The queries are coming from a defective implementation. If you enable
> query logging on your name server, you will find out the IP
> address(es) of the hosts that are sending these broken queries.
>
> If you look at the code in ns_stats.c, you'll see that the name server
> keeps a count of each query type it receives. This is what gets
> prettily printed in the stats dump file. Queries sent with a type code
> of zero are listed as 'Unknown query types'. IIRC, 0 is not defined as
> a valid query type so nothing should be sending DNS queries with the
> QTYPE field set to zero. So some idiot software is asking your name
> server for something that can't be proper query type: ie it's not an
> A, MX, SOA, PTR, CNAME, etc record.

This is exactly what causes my 'unknown query types'.
There are several 0 type queries from hosts logged in syslog.

I have made a list of the 0 type queries and will follow up with the
'querying' site administrator.

Thank you.

Robert Annandale.








More information about the bind-users mailing list