Dig 9.7 DNSSEC output

[Peter Janssen]

Hi,

might be me, but I don't get it.

# dig @ns.nic.se nic.se ns +dnssec

; <<>> DiG 9.7.0-P1 <<>> @ns.nic.se nic.se ns +dnssec
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15071
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;nic.se.                                IN      NS

;; ANSWER SECTION:
nic.se.                 3600    IN      NS      ns2.nic.se.
nic.se.                 3600    IN      NS      ns3.nic.se.
nic.se.                 3600    IN      NS      ns.nic.se.
nic.se.                 3600    IN      RRSIG   NS 5 2 3600 20100517132001
20100507132001 20273 nic.se.
Q9kNPVor5vCyji7XVDQMYAUcbhVTU43a/ftTBi04qXxe/AMkTO1m2C97
aRcSNG2dUWZsZ6TmaiqReMx1fARqjcP9fHHbdEtt3Oolvw9WH5KLd0Jg
TnDql5bN1vUQpULOli86enlCBHCz5FWX5izQ7i+WmLKTI1zC+R9NYd3T G1g=

;; ADDITIONAL SECTION:
ns.nic.se.              3600    IN      A       212.247.7.228
ns.nic.se.              3600    IN      AAAA    2a00:801:f0:53::53
ns2.nic.se.             3600    IN      A       194.17.45.54
ns3.nic.se.             60      IN      A       212.247.3.83
ns.nic.se.              3600    IN      RRSIG   A 5 3 3600 20100517132001
20100507132001 20273 nic.se.
TLTnkqESLN7DdoC2urF14ox1JolvUSCySe4oqYfof4ER/ZNNl8DO1P46
mSKpNxf3kNUJWoMkjBjtUgZgiMcVSuD7V6qTHLA2A8tEhnM4pXCeo/yj
kirCEzo3YQzcW56BZVXgVe41K3QT4GpIm0rmTyEy+8ZCe7oeMKFem5PL Ibw=
ns.nic.se.              3600    IN      RRSIG   AAAA 5 3 3600 20100517132001
20100507132001 20273 nic.se.
HcUbk9y1aR9zeHOwNsqTtPL97P+ftyoQVAyTZbuPpr6GEzIsKL8MyQoP
h4qyAkOHFWC2lgZ4xroHemR9OXa3JCLn1UtYE0UbgszUJWSJcQW+2ho3
GIsfEzVfJwMEomhvPuEyVfNxdaP87ITFTfNJcUvEApHCnYHO0RNgeEL0 l/Y=
ns2.nic.se.             3600    IN      RRSIG   A 5 3 3600 20100517132001
20100507132001 20273 nic.se.
fGqc3OIwmaYPFJoRrULGaUIRxGV+i6FJkcSZ4HRJL0x+siwVcTrIb+5t
ER9woGl9sabyXH9H4aHc90ARABer0RodbnQSZDT7SPamDb97UP1ESBs2
Av9N43nr54M/ctLk8EZc1q7GblBK7inf7iY/AQsHTsFv1BWJOAYw+n4N YaM=
ns3.nic.se.             60      IN      RRSIG   A 5 3 60 20100517132001
20100507132001 20273 nic.se.
vTil1+1r3dOyV3zHdd53p2O5qnBHfexdwJVjx2E+G5z5FTqa50YRQYfH
JwVHHertJcMo2wek/y2g0GBQJdkFTKwpJZv3IWWp9TYqJ3lCIYzoWxWV
pzc7i+m2Ha3HupVY0e/tOJPKsiJu+LnyH3LJ66WV/xCRDjhZ8N6RONl5 xQU=

;; Query time: 35 msec
;; SERVER: 212.247.7.228#53(212.247.7.228)
;; WHEN: Sun May  9 17:22:05 2010
;; MSG SIZE  rcvd: 994



The issue I have with this is, dig announces 9 additional section entries,
while 3 A, 1 AAAA and 4 RRSIG, in my book sums up to 8.

Without DNSSEC, it seems to be able to count correctly...
# dig @ns.nic.se nic.se ns 

; <<>> DiG 9.7.0-P1 <<>> @ns.nic.se nic.se ns
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4920
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;nic.se.                                IN      NS

;; ANSWER SECTION:
nic.se.                 3600    IN      NS      ns2.nic.se.
nic.se.                 3600    IN      NS      ns.nic.se.
nic.se.                 3600    IN      NS      ns3.nic.se.

;; ADDITIONAL SECTION:
ns.nic.se.              3600    IN      A       212.247.7.228
ns.nic.se.              3600    IN      AAAA    2a00:801:f0:53::53
ns2.nic.se.             3600    IN      A       194.17.45.54
ns3.nic.se.             60      IN      A       212.247.3.83

;; Query time: 34 msec
;; SERVER: 212.247.7.228#53(212.247.7.228)
;; WHEN: Sun May  9 17:23:51 2010
;; MSG SIZE  rcvd: 153

Am I missing something?
Or is this already reported?  If so, what would be the correct channel?


R.
--Pj.

Peter Janssen
Technical Manager

Join us in June! EURid hosts ICANN’s 38th meeting in Brussels.  Find out
more at brussels38.icann.org.

    EURid
    Woluwelaan 150     
    1831 Diegem - Belgium
    TEL.: +32 (0) 2 401 2750
    peter.janssen at eurid.eu 
    http://www.eurid.eu