Problem with some domains and some domain resolved
Nayeem
nayeem at ksa.zajil.com
Tue Jul 10 15:58:30 UTC 2007
Dear Sir,
After execute command I got result like this
[root at ns1 ~]# dig @twdns-01.ns.aol.com. ANY cnn.com
; <<>> DiG 9.3.2 <<>> @twdns-01.ns.aol.com. ANY cnn.com
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
[root at ns1 ~]#
00:30:27.863562 IP 212.24.224.35.domain > 64.12.51.132.domain: 26942 [1au]
A? ats.byoa.aol.com. (45)
00:30:27.866035 IP 192.35.51.30.domain > 212.24.224.35.domain: 63735- 0/2/3
(110)
00:30:27.866041 IP 192.35.51.30.domain > 212.24.224.35.domain: 45041- 0/2/3
(110)
00:30:27.866301 IP 212.24.224.151.34661 > 212.24.224.35.domain: 31206+ PTR?
66.241.3.83.in-addr.arpa. (42)
00:30:27.866464 IP 212.24.224.35.domain > 72.52.150.40.domain: 13471% [1au]
AAAA? dns2.samatek.com. (45)
00:30:27.866509 IP 212.24.224.35.domain > 72.52.150.40.domain: 14612% [1au]
AAAA? dns1.samatek.com. (45)
00:30:27.866655 IP 212.24.224.35.domain > 192.134.0.49.domain: 36413 [1au]
PTR? 66.241.3.83.in-addr.arpa. (53)
00:30:27.866879 IP 212.24.255.72.1061 > 212.24.224.35.domain: 11768+ A?
webcam.yahoo.com. (34)
00:30:27.867046 IP 212.24.224.35.domain > 212.24.255.72.1061: 11768 2/5/1
CNAME[|domain]
00:30:27.867412 IP 212.24.245.121.11362 > 212.24.224.35.domain: 43163+ A?
us.i1.yimg.com. (32)
00:30:27.867553 IP 212.24.224.35.domain > 212.24.245.121.11362: 43163
ServFail 0/0/0 (32)
00:30:27.867569 IP 212.24.224.35.domain > 82.147.196.163.1033: 51319
ServFail 0/0/0 (33)
00:30:27.868565 IP 85.194.67.122.54612 > 212.24.224.35.domain: 40483+ A?
dnl-us3.kaspersky-labs.com. (44)
00:30:27.871361 IP 172.17.4.30.2048 > 212.24.224.35.domain: 40365+[|domain]
00:30:27.871467 IP 212.24.224.35.domain > 172.17.4.30.2048: 40365
NXDomain[|domain]
00:30:27.878816 IP 172.18.52.57.2979 > 212.24.224.35.domain: 27344+ A?
169.79.121.16.multi.uribl.com:. (48)
00:30:27.878935 IP 212.24.224.35.domain > 172.18.52.57.2979: 27344 ServFail
0/0/0 (48)
00:30:27.878945 IP 212.24.224.35.domain > 212.24.224.135.1727: 1 ServFail
0/0/0 (30)
00:30:27.882560 IP 172.18.52.57.2980 > 212.24.224.35.domain: 40656+ A?
184.224.145.109.multi.surbl.org:. (50)
00:30:27.888464 IP 89.237.160.51.1063 > 212.24.224.35.domain: 10747+ A?
mx3.sinopac.com. (33)
00:30:27.888578 IP 212.24.224.35.domain > 89.237.160.51.1063: 10747
ServFail 0/0/0 (33)
00:30:27.888595 IP 212.24.224.35.domain > 212.24.245.122.10005: 15036
ServFail 0/0/0 (30)
00:30:27.895672 IP 212.24.224.38.43953 > 212.24.224.35.domain: 36363+ PTR?
81.26.175.71.in-addr.arpa. (43)
00:30:27.895950 IP 212.24.224.35.domain > 151.203.0.86.domain: 42282 [1au]
PTR? 81.26.175.71.in-addr.arpa. (54)
00:30:27.896043 IP 81.21.58.10.52340 > 212.24.224.35.domain: 7606+ A?
gmail-smtp-in.l.google.com. (44)
00:30:27.896216 IP 212.24.224.35.domain > 81.21.58.10.52340: 7606- 0/7/0
(156)
00:30:27.897231 IP 212.24.224.151.34662 > 212.24.224.35.domain: 13810+ PTR?
111.213.131.86.in-addr.arpa. (45)
00:30:27.897343 IP 212.24.224.35.domain > 212.24.224.151.34662: 13810
ServFail 0/0/0 (45)
00:30:27.897361 IP 212.24.224.35.domain > 82.147.209.117.1044: 38801
ServFail 0/0/0 (39)
00:30:27.898095 IP 85.194.122.250.3006 > 212.24.224.35.domain: 22325+ A?
livecamgirls.streamray.com. (44)
00:30:27.900599 IP 87.109.168.101.13124 > 212.24.224.35.domain: 11632+ A?
dnl-eu6.kaspersky-labs.com. (44)
00:30:27.900735 IP 212.24.224.35.domain > 87.109.168.101.13124: 11632-
0/3/3 (163)
00:30:27.904676 IP 212.24.224.35.domain > 8.4.80.22.domain: 21141 A?
images.divx.com. (33)
00:30:27.904758 IP 212.24.224.35.domain > 8.4.80.22.domain: 30867% [1au]
AAAA? utility.divxnetworks.com. (53)
00:30:27.904782 IP 212.24.224.35.domain > 8.4.80.22.domain: 43647% [1au]
AAAA? ns3.divxnetworks.com. (49)
00:30:27.905053 IP 212.24.224.35.domain > 192.228.79.201.domain: 28865%
[1au] AAAA? utility.divxnetworks.com. (53)
00:30:27.905095 IP 212.24.224.35.domain > 192.228.79.201.domain: 38255%
[1au] AAAA? ns3.divxnetworks.com. (49)
00:30:27.906820 IP 172.18.52.57.2982 > 212.24.224.35.domain: 58578+ A?
169.79.121.16.multi.uribl.com:. (48)
00:30:27.906923 IP 212.24.224.35.domain > 172.18.52.57.2982: 58578 ServFail
0/0/0 (48)
00:30:27.906936 IP 212.24.224.35.domain > 212.24.224.151.34420: 6323
ServFail 0/0/0 (44)
00:30:27.907517 IP 172.18.52.57.2981 > 212.24.224.35.domain: 18130+ A?
197.90.95.12.multi.surbl.org:. (47)
00:30:27.907621 IP 212.24.224.35.domain > 24.25.4.103.domain: 41458 [1au]
A? cpe-024-025-060-246.ec.res.rr.com. (62)
00:30:27.907705 IP 212.24.224.35.domain > 206.196.106.2.domain: 53497 AAAA?
dns2.cyberusa.com. (35)
00:30:27.907737 IP 212.24.224.35.domain > 206.196.106.2.domain: 25967 AAAA?
dns1.cyberusa.com. (35)
00:30:27.908039 IP 212.24.225.18.1029 > 212.24.224.35.domain: 40519+ A?
gits.net. (26)
00:30:27.908119 IP 212.24.224.35.domain > 212.24.225.18.1029: 40519
ServFail 0/0/0 (26)
00:30:27.908136 IP 212.24.224.35.domain > 212.24.224.38.43628: 33134
ServFail 0/0/0 (43)
00:30:27.919587 IP 212.24.224.35.domain > 194.0.0.53.domain: 14928 A?
ns1.weltregierung.de. (38)
00:30:27.919605 IP 212.24.224.35.domain > 194.0.0.53.domain: 7464 A?
ns.srv1.gsmk.de. (33)
00:30:27.919621 IP 212.24.224.35.domain > 194.0.0.53.domain: 36500 AAAA?
ns1.weltregierung.de. (38)
00:30:27.919642 IP 212.24.224.35.domain > 194.0.0.53.domain: 51018 AAAA?
ns.srv1.gsmk.de. (33)
00:30:27.920386 IP 85.194.67.122.54614 > 212.24.224.35.domain: 14849+ A?
dnl-us4.kaspersky-labs.com. (44)
00:30:27.922820 IP 212.24.224.151.34663 > 212.24.224.35.domain: 33166+ PTR?
197.219.180.87.in-addr.arpa. (45)
00:30:27.922931 IP 212.24.224.35.domain > 212.24.224.151.34663: 33166
ServFail 0/0/0 (45)
00:30:27.922943 IP 212.24.224.35.domain > 85.194.67.122.54602: 5617
ServFail 0/0/0 (44)
00:30:27.923597 IP 212.24.224.151.34663 > 212.24.224.35.domain: 57205+ A?
p57B4DBC5.dip.t-dialin.net. (44)
00:30:27.923775 IP 212.24.224.35.domain > 194.25.2.130.domain: 58277 [1au]
A? p57B4DBC5.dip.t-dialin.net. (55)
00:30:27.927423 IP 172.18.52.57.2983 > 212.24.224.35.domain: 61660+ A?
197.90.95.12.multi.surbl.org:. (47)
00:30:27.927533 IP 212.24.224.35.domain > 172.18.52.57.2983: 61660 ServFail
0/0/0 (47)
00:30:27.927552 IP 212.24.224.35.domain > 212.24.224.38.43782: 17713
ServFail 0/0/0 (42)
00:30:27.928664 IP 212.24.224.38.43954 > 212.24.224.35.domain:
11941+[|domain]
00:30:27.928963 IP 212.24.224.35.domain > 150.188.228.4.domain: 19113
[1au][|domain]
00:30:27.931024 IP 89.5.50.225.1050 > 212.24.224.35.domain: 63893+ A?
www.compteur-gratuit.org. (42)
00:30:27.931187 IP 212.24.224.35.domain > 89.5.50.225.1050: 63893- 0/6/0
(204)
00:30:27.936618 IP 212.24.224.35.domain > 202.109.129.6.domain: 56409 AAAA?
ns.zeronews.com. (33)
00:30:27.937516 IP 172.17.5.229.51374 > 212.24.224.35.domain: 31873+ A?
static.doulike.us. (35)
00:30:27.937623 IP 212.24.224.35.domain > 172.17.5.229.51374: 31873
ServFail 0/0/0 (35)
00:30:27.937638 IP 212.24.224.35.domain > 212.24.224.38.43784: 24605
ServFail 0/0/0 (42)
00:30:27.937772 IP 81.21.58.146.18270 > 212.24.224.35.domain: 15949+ A?
realnetworks.112.2o7.net. (42)
00:30:27.937897 IP 212.24.224.35.domain > 81.21.58.146.18270: 15949- 0/3/3
(168)
00:30:27.941557 IP 212.24.224.35.domain > 213.244.181.32.domain: 51475
[1au] A? a1794.l.akamai.net. (47)
00:30:27.947848 IP 172.18.52.57.2984 > 212.24.224.35.domain: 12767+ A?
184.224.145.109.multi.surbl.org:. (50)
00:30:27.950318 IP 212.24.255.83.1065 > 212.24.224.35.domain: 22002+ A?
dnl-ru2.kaspersky-labs.com. (44)
00:30:27.950398 IP 212.24.224.35.domain > 212.24.255.83.1065: 22002
ServFail 0/0/0 (44)
00:30:27.950413 IP 212.24.224.35.domain > 212.24.224.38.43783: 39132
ServFail 0/0/0 (42)
00:30:27.955547 IP 212.24.224.35.domain > 213.46.243.88.domain: 39876 [1au]
A? chello213047207175.tirol.chello.at. (63)
00:30:27.956187 IP 82.147.200.206.1032 > 212.24.224.35.domain: 62619+ A?
dnl-eu8.kaspersky-labs.com. (44)
00:30:27.956267 IP 82.147.213.128.1217 > 212.24.224.35.domain: 30941+ A?
qp1.search.vip.scd.yahoo.com. (46)
00:30:27.956435 IP 212.24.224.35.domain > 82.147.213.128.1217: 30941 1/7/3
(236)
00:30:27.957547 IP 212.24.224.35.domain > 69.25.165.229.domain: 52706 [1au]
A? cm1.castlesmithmarket.com. (54)
00:30:27.960455 IP 82.147.200.38.1032 > 212.24.224.35.domain: 13141+ A?
urs.microsoft.com. (35)
00:30:27.960559 IP 212.24.224.35.domain > 82.147.200.38.1032: 13141
ServFail 0/0/0 (35)
00:30:27.960571 IP 212.24.224.35.domain > 85.194.123.78.1527: 48647
ServFail 0/0/0 (44)
00:30:27.961691 IP 172.18.52.57.2985 > 212.24.224.35.domain: 14814+ A?
184.224.145.109.multi.surbl.org:. (50)
00:30:27.961945 IP 212.100.212.174.22396 > 212.24.224.35.domain: 3356+ SOA?
24.80.20.10.in-addr.arpa. (42)
00:30:27.962045 IP 212.24.224.35.domain > 212.100.212.174.22396: 3356-
0/2/0 (102)
00:30:27.964814 IP 212.24.245.122.10005 > 212.24.224.35.domain: 27874+ A?
g-ec2.images-amazon.com. (41)
00:30:27.964945 IP 212.24.224.35.domain > 212.24.245.122.10005: 27874
ServFail 0/0/0 (41)
00:30:27.964957 IP 212.24.224.35.domain > 82.147.202.39.49697: 27322
ServFail 0/0/0 (44)
00:30:27.965559 IP 212.24.224.35.domain > 216.201.112.4.domain: 13143 AAAA?
lin1.main1.net. (32)
00:30:27.965575 IP 212.24.224.35.domain > 216.201.112.4.domain: 42789 AAAA?
lin0.main1.net. (32)
00:30:27.970560 IP 212.24.224.35.domain > 210.201.138.58.domain: 42510%
[1au] AAAA? dns.dynamic.lsc.net.tw. (51)
00:30:27.970594 IP 212.24.224.35.domain > 210.201.138.58.domain: 10649%
[1au] AAAA? dns1.dynamic.lsc.net.tw. (52)
00:30:27.974383 IP 172.17.5.229.51374 > 212.24.224.35.domain: 49094+ A?
i44.photobucket.com. (37)
00:30:27.974561 IP 212.24.224.35.domain > 204.74.109.1.domain: 3355 [1au]
A? i44.photobucket.com. (48)
00:30:27.980543 IP 212.24.224.35.domain > 209.160.76.227.domain: 254 [1au]
A? www.dardasha.net. (45)
00:30:27.982569 IP 212.24.224.35.domain > 216.239.123.201.domain: 127 A?
www.gamespot.com. (34)
00:30:27.989920 IP 87.109.168.101.13124 > 212.24.224.35.domain: 52338+ A?
dnl-eu6.kaspersky-labs.com.lan. (48)
00:30:27.990023 IP 89.237.160.51.1063 > 212.24.224.35.domain: 2560+ A?
mx1.sinopac.com. (33)
00:30:27.990121 IP 212.24.224.35.domain > 89.237.160.51.1063: 2560 ServFail
0/0/0 (33)
00:30:27.990135 IP 212.24.224.35.domain > 212.24.224.38.43785: 39184
ServFail 0/0/0 (42)
00:30:27.990162 IP 212.24.224.35.domain > 87.109.168.101.13124: 52338-
0/13/5 (339)
00:30:27.992553 IP 212.24.224.35.domain > 209.173.58.66.domain: 57597 A?
It3.alrowad.biz. (33)
00:30:27.992566 IP 212.24.224.35.domain > 210.51.187.81.domain: 18493 MX?
olymsports.com. (32)
00:30:27.993272 IP 85.194.112.194.1033 > 212.24.224.35.domain: 7822+ A?
nltr-e112.com.com.multi.surbl.org. (51)
00:30:27.993874 IP 212.24.224.35.domain > 194.134.35.204.domain: 35404
[1au] A? nltr-e112.com.com.multi.surbl.org. (62)
00:30:27.996549 IP 212.24.224.35.domain > 69.28.143.14.domain: 25323 [1au]
A? metacafe-183.vo.llnwd.net. (54)
00:30:27.996563 IP 212.24.224.35.domain > 202.12.29.59.domain: 35333 [1au]
PTR? 30.85.3.91.in-addr.arpa. (52)
00:30:28.005541 IP 212.24.224.35.domain > 192.42.93.32.domain: 44019 [1au]
PTR? 210.131.18.76.in-addr.arpa. (55)
00:30:28.014529 IP 212.24.224.35.domain > 192.31.80.32.domain: 19988 AAAA?
pendragon.cs.purdue.edu. (41)
00:30:28.016249 IP 172.18.52.57.2986 > 212.24.224.35.domain: 21721+ A?
159.87.183.184.multi.uribl.com:. (49)
0/0/0 (44)
1611 packets captured
2001 packets received by filter
275 packets dropped by kernel
Regards,
Nayeem.
-----Original Message-----
From: bind-users-bounce at isc.org [mailto:bind-users-bounce at isc.org] On Behalf
Of Stephane Bortzmeyer
Sent: Tuesday, July 10, 2007 6:19 PM
To: Nayeem
Cc: bind-users at isc.org
Subject: Re: Problem with some domains and some domain resolved
On Tue, Jul 10, 2007 at 05:29:58PM +0300,
Nayeem <nayeem at ksa.zajil.com> wrote
a message of 63 lines which said:
> Is it really DNS problem or network problem.
I do not know but I can send a few free advices.
> [root at ns1 named]# nslookup
Use dig to debug, nslookup is deprecated and brings its own problems.
> > www.cnn.com
>
> Server: 127.0.0.1
>
> Address: 127.0.0.1#53
>
>
>
> ** server can't find www.cnn.com: SERVFAIL
What software does 127.0.0.1 run? BIND, of course, but which one? Can
you go to CNN's name servers directly:
dig @twdns-01.ns.aol.com. ANY cnn.com
If no, use ping and traceroute to see if it is a network problem.
> > www.google.com
>
> ;; connection timed out; no servers could be reached
Same question.
> So please tell me where to trace this problem.
1) Read the BIND log. This is mandatory.
2) [Much more difficult] Run tcpdump on the name server. Something
like 'tcpdump -n port 53'.
More information about the bind-users
mailing list