[SPAM] ISC bind9 compile error

Tue Sep 30 06:30:12 UTC 2008

Hi. I download ISC bind-9.5.0,  and install ActivePerl, openssl. After execute buildsetup.bat, I open win32utils\BINDBuild.dsw in MSVC 7.1 and start to build it. But in building, it prompt some error, all of them are releted to a line in inclue/isc/event.h(81):
#define ISC_EVENT_COMMON(ltype)		\
	size_t				ev_size; \
	unsigned int			ev_attributes; \
	void *				ev_tag; \
	isc_eventtype_t			ev_type; \
	isc_taskaction_t		ev_action; \
	void *				ev_arg; \
	void *				ev_sender; \
	isc_eventdestructor_t		ev_destroy; \
	void *				ev_destroy_arg; \
	ISC_LINK(ltype)			ev_link
the "size_t" is defined as "typedef _W64 unsigned int size_t". 

My project option is win32. Anyone could tell me how to solve it? 

Another problem:
I can use nsupdate command to change DNS record successfully. But when I use it to open a script file, all reply message is NOERROR, but nslookup didn't return the right IPs.
Commands input by user interactively and in the script file are identical:
Server 127.0.0.1
zone mydomain.com
update add test1.mydomain.com 100 IN A 192.168.0.1
update del 192.168.0.2
send

Is there some difference between script file mode and interactive mode? 

Thansk a lot.

-------------------------------------------------------------------
新浪空间——与朋友开心分享网络新生活！(http://space.sina.com.cn/ )From alanzoysa at gmail.com  Tue Sep 30 10:16:35 2008
Received: with ECARTIS (v1.0.0; list bind-users); Tue, 30 Sep 2008 10:16:35 +0000 (UTC)
Return-Path: <alanzoysa at gmail.com>
X-Original-To: bind-users at webster.isc.org
Received: from mx.isc.org (mx.isc.org [IPv6:2001:4f8:0:2::1c])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "mx.isc.org", Issuer "ISC CA" (verified OK))
	by webster.isc.org (Postfix) with ESMTPS id 9CBF210E42F
	for <bind-users at webster.isc.org>; Tue, 30 Sep 2008 10:16:35 +0000 (UTC)
	(envelope-from alanzoysa at gmail.com)
Received: from po-out-1718.google.com (po-out-1718.google.com [72.14.252.157])
	by mx.isc.org (Postfix) with ESMTP id 9BA25114083
	for <bind-users at isc.org>; Tue, 30 Sep 2008 10:12:52 +0000 (UTC)
	(envelope-from alanzoysa at gmail.com)
Received: by po-out-1718.google.com with SMTP id y22so1739693pof.1
        for <bind-users at isc.org>; Tue, 30 Sep 2008 03:12:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:received:received:message-id:date:from:to
         :subject:mime-version:content-type;
        bh=hOvFhzGK+AhJKM2Q+oOXwZcWp8kEMKBtFaSLdy+fUZw=;
        b=sbF4/7pv+R1CZ4KbsRTzgagEuf6EPYD/LHHekiBrV6YKeB9VPf/OhuhimAARmp5lT9
         o7CQIt4xjOq0rySn/KNUDgK0jUaaHm0SHc8ZFZ3QdUzscIQzm/t6CYX5z4piB8h8zEhi
         G0eR9q2pL96PrKq4xCpWCGdIyEJsPG+ZKwwiM=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type;
        b=Wilv4XsH0wrhxEEtgCeNcB8SQzGlUtZiEm0/zbs3JyTr+yDtOP3BhqyLGHxbyVeD16
         ArkA4ypaN1Lz624SGmu36/04Ct3dDHbJLRU78jywhu5ZsvHKqI+JJ62/jk+tAHf4Zzxv
         H6YMcmhE+0fFT+dvJowviJ0gcQCn5zlhDEo9A=
Received: by 10.140.162.21 with SMTP id k21mr3228576rve.261.1222769569419;
        Tue, 30 Sep 2008 03:12:49 -0700 (PDT)
Received: by 10.141.44.10 with HTTP; Tue, 30 Sep 2008 03:12:49 -0700 (PDT)
Message-ID: <6e79b80b0809300312x40d73f94ibf2a7234144c64b9 at mail.gmail.com>
Date: Tue, 30 Sep 2008 18:12:49 +0800
From: "Alan Zoysa" <alanzoysa at gmail.com>
To: bind-users at isc.org
Subject: DNS query packets being generated by some rough process, can I trace the process?
MIME-Version: 1.0
Content-type: text/plain
X-Spam-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00,HTML_MESSAGE
	autolearn=ham version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx.isc.org
Content-Transfer-Encoding: 8bit
Sender: bind-users-bounce at isc.org
Errors-to: bind-users-bounce at isc.org
Precedence: bulk
List-unsubscribe: <mailto:bind-users-request at isc.org?Subject=unsubscribe>
List-Id: <bind-users.isc.org>
X-List-ID: <bind-users.isc.org>

Hello.
Am running a BIND-9.3.4-P1.1 on Debian stable.

I find a continuous traffic from my machine to my ISP's DNS. Wireshark shows
that the MAC address of the packets being sent have my network card's MAC
address. So, I conclude that this traffic is being generated by some process
on my machine.

I want to know whether there is a way to figure out which
process/application is generating a packet on Linux machine. A crude way can
be to stop the running processes one-by-one and figure out which process was
generating the traffic. But I do not intend to follow this method and want
to know what triggered this scenario.

It might be possible that some other machine on the subnet (served by a
switch and not a hub) is generating these packets. If this is true and if
the switch is sane I should not see the DNS query packets but only the
response packets, right?

I tried to use fuser command [ fuser 34423/udp ] to figure out if I can get
the owner/process of the port number from which DNS queries are being send.
The source port range being used is 34420-25.

In general, is there a way to figure out which packet is generated by which
process? If indeed the packet is generated locally.

Thank you.

-- 

best regards,
Alan.