Many reports of this type of problem...

Mark Andrews marka at isc.org
Thu Jun 24 05:21:39 UTC 2010


The nameservers for nourishinteractive.com are BROKEN.

Note the warning message.  It's telling you that dig found a error.
If you count the records printed and compare them to the numbers
in the header section you will see that they don't match.  Additionally
the server set "tc" when it shouldn't.

Mark

;; Warning: Message parser reports malformed message packet.

; <<>> DiG 9.3.6-P1 <<>> www.nourishinteractive.com +norec +ignore @ns3.worldnic.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59756
;; flags: qr aa tc; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 13

;; QUESTION SECTION:
;www.nourishinteractive.com.	IN	A

;; ANSWER SECTION:
www.nourishinteractive.com. 7200 IN	CNAME	ec2-174-129-200-33.compute-1.amazonaws.com.

;; AUTHORITY SECTION:
.			518400	IN	NS	a.root-servers.net.
.			518400	IN	NS	b.root-servers.net.
.			518400	IN	NS	c.root-servers.net.
.			518400	IN	NS	d.root-servers.net.
.			518400	IN	NS	e.root-servers.net.
.			518400	IN	NS	f.root-servers.net.
.			518400	IN	NS	g.root-servers.net.
.			518400	IN	NS	h.root-servers.net.
.			518400	IN	NS	i.root-servers.net.
.			518400	IN	NS	j.root-servers.net.
.			518400	IN	NS	k.root-servers.net.
.			518400	IN	NS	l.root-servers.net.
.			518400	IN	NS	m.root-servers.net.

;; ADDITIONAL SECTION:
a.root-servers.net.	3600000	IN	A	198.41.0.4
b.root-servers.net.	3600000	IN	A	192.228.79.201
c.root-servers.net.	3600000	IN	A	192.33.4.12
d.root-servers.net.	3600000	IN	A	128.8.10.90
e.root-servers.net.	3600000	IN	A	192.203.230.10
f.root-servers.net.	3600000	IN	A	192.5.5.241
g.root-servers.net.	3600000	IN	A	192.112.36.4
h.root-servers.net.	3600000	IN	A	128.63.2.53
i.root-servers.net.	3600000	IN	A	192.36.148.17
j.root-servers.net.	3600000	IN	A	192.58.128.30
k.root-servers.net.	3600000	IN	A	193.0.14.129
l.root-servers.net.	3600000	IN	A	198.32.64.12

;; Query time: 242 msec
;; SERVER: 205.178.190.2#53(205.178.190.2)
;; WHEN: Thu Jun 24 15:12:45 2010
;; MSG SIZE  rcvd: 512


In message <4C22BE55.3050506 at gmail.com>, Gary Wallis writes:
> DNS people,
> 
> CentOS 5 BIND rpm (9.3.6-P1-RedHat-9.3.6-4.P1.el5 ) widespread problem 
> reports for a significant number of domains on amazonaws.com.
> 
> +trace fails but "direct" dig returns "valid" data, please look through 
> the output below since it is shorter than trying to summarize:
> 
> [root at node1vm unxsVZ]# dig @8.8.8.8 www.nourishinteractive.com
> 
> ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> @8.8.8.8 
> www.nourishinteractive.com
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40337
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;www.nourishinteractive.com.    IN      A
> 
> ;; ANSWER SECTION:
> www.nourishinteractive.com. 5753 IN     CNAME 
> ec2-174-129-200-33.compute-1.amazonaws.com.
> ec2-174-129-200-33.compute-1.amazonaws.com. 5754 IN A 174.129.200.33
> 
> ;; Query time: 1623 msec
> ;; SERVER: 8.8.8.8#53(8.8.8.8)
> ;; WHEN: Thu Jun 24 01:53:31 2010
> ;; MSG SIZE  rcvd: 113
> 
> [root at node1vm unxsVZ]# dig @8.8.8.8 www.nourishinteractive.com +short
> ec2-174-129-200-33.compute-1.amazonaws.com.
> 174.129.200.33
> [root at node1vm unxsVZ]# dig @8.8.8.8 www.nourishinteractive.com +trace
> 
> ; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> @8.8.8.8 
> www.nourishinteractive.com +trace
> ; (1 server found)
> ;; global options:  printcmd
> .                       61990   IN      NS      d.root-servers.net.
> .                       61990   IN      NS      m.root-servers.net.
> .                       61990   IN      NS      i.root-servers.net.
> .                       61990   IN      NS      k.root-servers.net.
> .                       61990   IN      NS      a.root-servers.net.
> .                       61990   IN      NS      e.root-servers.net.
> .                       61990   IN      NS      b.root-servers.net.
> .                       61990   IN      NS      j.root-servers.net.
> .                       61990   IN      NS      c.root-servers.net.
> .                       61990   IN      NS      f.root-servers.net.
> .                       61990   IN      NS      h.root-servers.net.
> .                       61990   IN      NS      l.root-servers.net.
> .                       61990   IN      NS      g.root-servers.net.
> ;; Received 228 bytes from 8.8.8.8#53(8.8.8.8) in 1456 ms
> 
> com.                    172800  IN      NS      a.gtld-servers.net.
> com.                    172800  IN      NS      b.gtld-servers.net.
> com.                    172800  IN      NS      c.gtld-servers.net.
> com.                    172800  IN      NS      d.gtld-servers.net.
> com.                    172800  IN      NS      e.gtld-servers.net.
> com.                    172800  IN      NS      f.gtld-servers.net.
> com.                    172800  IN      NS      g.gtld-servers.net.
> com.                    172800  IN      NS      h.gtld-servers.net.
> com.                    172800  IN      NS      i.gtld-servers.net.
> com.                    172800  IN      NS      j.gtld-servers.net.
> com.                    172800  IN      NS      k.gtld-servers.net.
> com.                    172800  IN      NS      l.gtld-servers.net.
> com.                    172800  IN      NS      m.gtld-servers.net.
> ;; Received 507 bytes from 202.12.27.33#53(m.root-servers.net) in 15032 ms
> 
> nourishinteractive.com. 172800  IN      NS      ns3.worldnic.com.
> nourishinteractive.com. 172800  IN      NS      ns4.worldnic.com.
> ;; Received 121 bytes from 192.5.6.30#53(a.gtld-servers.net) in 35649 ms
> 
> ;; Warning: Message parser reports malformed message packet.
> ;; Truncated, retrying in TCP mode.
> ;; communications error to 205.178.190.2#53: end of file
> www.nourishinteractive.com. 7200 IN     CNAME 
> ec2-174-129-200-33.compute-1.amazonaws.com.
> .                       518400  IN      NS      a.root-servers.net.
> .                       518400  IN      NS      b.root-servers.net.
> .                       518400  IN      NS      c.root-servers.net.
> .                       518400  IN      NS      d.root-servers.net.
> .                       518400  IN      NS      e.root-servers.net.
> .                       518400  IN      NS      f.root-servers.net.
> .                       518400  IN      NS      g.root-servers.net.
> .                       518400  IN      NS      h.root-servers.net.
> .                       518400  IN      NS      i.root-servers.net.
> .                       518400  IN      NS      j.root-servers.net.
> .                       518400  IN      NS      k.root-servers.net.
> .                       518400  IN      NS      l.root-servers.net.
> .                       518400  IN      NS      m.root-servers.net.
> ;; Received 516 bytes from 206.188.198.2#53(ns4.worldnic.com) in 6955 ms
> 
> [root at node1vm unxsVZ]#
> 
> 
> Anybody have an explanation for this?
> 
> Cheers!
> Gary
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list