bind-users Digest, Vol 512, Issue 3
rams
bramesh80 at gmail.com
Mon May 10 04:39:11 UTC 2010
Hi Peter,
In the out put of your dig result , you can see the following section. This
section is counted as RR and count will be updated in additional section.
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
Thanks,
ramesh
On Sun, May 9, 2010 at 11:02 PM, <bind-users-request at lists.isc.org> wrote:
> Send bind-users mailing list submissions to
> bind-users at lists.isc.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.isc.org/mailman/listinfo/bind-users
> or, via email, send a message with subject or body 'help' to
> bind-users-request at lists.isc.org
>
> You can reach the person managing the list at
> bind-users-owner at lists.isc.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of bind-users digest..."
>
>
> Today's Topics:
>
> 1. RE: Dig 9.7 DNSSEC output (Peter Janssen)
> 2. Re: Dig 9.7 DNSSEC output (R Dicaire)
> 3. RE: Dig 9.7 DNSSEC output (Peter Janssen)
> 4. Re: Dig 9.7 DNSSEC output (Shumon Huque)
> 5. RE: Dig 9.7 DNSSEC output (Chris Thompson)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sun, 9 May 2010 17:48:34 +0200
> From: "Peter Janssen" <peter.janssen at eurid.eu>
> Subject: RE: Dig 9.7 DNSSEC output
> To: "'R Dicaire'" <dicairer at gmail.com>
> Cc: bind-users at lists.isc.org
> Message-ID: <024201caef8f$150177e0$3f0467a0$@janssen at eurid.eu>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hi Rick,
>
> as per the header of Dig output?
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
>
> a part from that, I'm glad that my counting is still up to par :-)
>
> R.
> --Pj.
>
> Peter Janssen
> Technical Manager
>
> Join us in June! EURid hosts ICANN?s 38th meeting in Brussels.? Find out
> more at brussels38.icann.org.
>
> ??? EURid
> ??? Woluwelaan 150????
> ??? 1831 Diegem - Belgium
> ??? TEL.: +32 (0) 2 401 2750
> ??? peter.janssen at eurid.eu
> ??? http://www.eurid.eu
> ???
>
>
>
> From: R Dicaire [mailto:dicairer at gmail.com]
> Sent: Sunday, May 09, 2010 17:42
> To: Peter Janssen
> Cc: bind-users at lists.isc.org
> Subject: Re: Dig 9.7 DNSSEC output
>
> On Sun, May 9, 2010 at 11:24 AM, Peter Janssen <peter.janssen at eurid.eu>
> wrote:
> ;; ADDITIONAL SECTION:
> ns.nic.se. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?A ? ? ? 212.247.7.228
> ns.nic.se. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?AAAA ? ?2a00:801:f0:53::53
> ns2.nic.se. ? ? ? ? ? ? 3600 ? ?IN ? ? ?A ? ? ? 194.17.45.54
> ns3.nic.se. ? ? ? ? ? ? 60 ? ? ?IN ? ? ?A ? ? ? 212.247.3.83
> ns.nic.se. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?RRSIG ? A 5 3 3600 20100517132001
> 20100507132001 20273 nic.se.
> TLTnkqESLN7DdoC2urF14ox1JolvUSCySe4oqYfof4ER/ZNNl8DO1P46
> mSKpNxf3kNUJWoMkjBjtUgZgiMcVSuD7V6qTHLA2A8tEhnM4pXCeo/yj
> kirCEzo3YQzcW56BZVXgVe41K3QT4GpIm0rmTyEy+8ZCe7oeMKFem5PL Ibw=
> ns.nic.se. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?RRSIG ? AAAA 5 3 3600
> 20100517132001
> 20100507132001 20273 nic.se.
> HcUbk9y1aR9zeHOwNsqTtPL97P+ftyoQVAyTZbuPpr6GEzIsKL8MyQoP
> h4qyAkOHFWC2lgZ4xroHemR9OXa3JCLn1UtYE0UbgszUJWSJcQW+2ho3
> GIsfEzVfJwMEomhvPuEyVfNxdaP87ITFTfNJcUvEApHCnYHO0RNgeEL0 l/Y=
> ns2.nic.se. ? ? ? ? ? ? 3600 ? ?IN ? ? ?RRSIG ? A 5 3 3600 20100517132001
> 20100507132001 20273 nic.se.
> fGqc3OIwmaYPFJoRrULGaUIRxGV+i6FJkcSZ4HRJL0x+siwVcTrIb+5t
> ER9woGl9sabyXH9H4aHc90ARABer0RodbnQSZDT7SPamDb97UP1ESBs2
> Av9N43nr54M/ctLk8EZc1q7GblBK7inf7iY/AQsHTsFv1BWJOAYw+n4N YaM=
> ns3.nic.se. ? ? ? ? ? ? 60 ? ? ?IN ? ? ?RRSIG ? A 5 3 60 20100517132001
> 20100507132001 20273 nic.se.
> vTil1+1r3dOyV3zHdd53p2O5qnBHfexdwJVjx2E+G5z5FTqa50YRQYfH
> JwVHHertJcMo2wek/y2g0GBQJdkFTKwpJZv3IWWp9TYqJ3lCIYzoWxWV
> pzc7i+m2Ha3HupVY0e/tOJPKsiJu+LnyH3LJ66WV/xCRDjhZ8N6RONl5 xQU=
>
> I count 8 RRs. 3 A, 1 AAAA, 4 RRSIG.
>
> Where are you seeing 9?
>
> --
> aRDy Music/Rick Dicaire
>
> http://www.ardynet.com
> http://linux.ardynet.com
>
>
>
> ------------------------------
>
> Message: 2
> Date: Sun, 9 May 2010 12:00:14 -0400
> From: R Dicaire <dicairer at gmail.com>
> Subject: Re: Dig 9.7 DNSSEC output
> To: Peter Janssen <peter.janssen at eurid.eu>
> Cc: bind-users at lists.isc.org
> Message-ID:
> <AANLkTilBjeRhDv9kIDa7mS548FaSU_ow6dP85phle1EV at mail.gmail.com>
> Content-Type: text/plain; charset="windows-1252"
>
> On Sun, May 9, 2010 at 11:48 AM, Peter Janssen <peter.janssen at eurid.eu
> >wrote:
>
> > as per the header of Dig output?
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
> >
>
> Curious, I too get 9 but only 8 RRs are shown:
>
> ; <<>> DiG 9.7.0-P1 <<>> +dnssec @rdb.ardynet.com ardynet.com ns
> ; (2 servers found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19752
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 9
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096
> ;; QUESTION SECTION:
> ;ardynet.com. IN NS
>
> ;; ANSWER SECTION:
> ardynet.com. 10800 IN NS rdb.ardynet.com.
> ardynet.com. 10800 IN NS dev.ardynet.com.
> ardynet.com. 10800 IN RRSIG NS 5 2 10800 20100515100002 20100509100002
> 60794
> ardynet.com. uEABRGErPScK6zTn8V2aZwWXdC7sc1wh7eFsyGHkwcfGrugsLdFPVSfZ
> vetCUVXoOj1OnUNPeO5/cMB8Os0NGg==
>
> ;; ADDITIONAL SECTION:
> dev.ardynet.com. 10800 IN A 74.93.245.186
> dev.ardynet.com. 10800 IN AAAA 2001:470:8:12:def::1000
> rdb.ardynet.com. 10800 IN A 74.93.245.185
> rdb.ardynet.com. 10800 IN AAAA 2001:470:e006::1000
> dev.ardynet.com. 10800 IN RRSIG A 5 3 10800 20100515100002 20100509100002
> 60794 ardynet.com.
> OdH4FDSkj8daSKw0ooNX2ZJpjQVtTXI0ev5pblGM0+M/IYccu1fW9Tkk
> h9N0PPI7/4C2fpitdBbFGCq14hxocg==
> dev.ardynet.com. 10800 IN RRSIG AAAA 5 3 10800 20100515100002
> 20100509100002
> 60794 ardynet.com.
> ou2/+po9rUY1l8TYy4u23z0GWBuasEib5U1E1f//MJCQ1XRqOKX9h8y2
> Gk6R3+lxXlDdoLtww8E2GpVpEK+U1A==
> rdb.ardynet.com. 10800 IN RRSIG A 5 3 10800 20100515100002 20100509100002
> 60794 ardynet.com.
> jUJ/1Miq+Y3RwFW8AyfCs6vJ+alynM/gzVIBFdn3SoIFzg3AiV4R8zHl
> sOX5xzP2eVEuQwtq6cDWhFqma3cr/A==
> rdb.ardynet.com. 10800 IN RRSIG AAAA 5 3 10800 20100515100002
> 20100509100002
> 60794 ardynet.com.
> M9NcSwlhg50H5zRXeB8iKZLFdm1dGmwEg/PIHYgTn9gyoXOcLUWRjK5Q
> RnPlqRyHoVdkkHyCFumEkMZVyneu1g==
>
>
> --
> aRDy Music/Rick Dicaire
>
> http://www.ardynet.com
> http://linux.ardynet.com
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <
> https://lists.isc.org/pipermail/bind-users/attachments/20100509/aae95b92/attachment-0001.html
> >
>
> ------------------------------
>
> Message: 3
> Date: Sun, 9 May 2010 18:56:56 +0200
> From: "Peter Janssen" <peter.janssen at eurid.eu>
> Subject: RE: Dig 9.7 DNSSEC output
> To: "'Sten Carlsen'" <stenc at s-carlsen.dk>, <bind-users at lists.isc.org>
> Message-ID: <024c01caef98$a24ccc90$e6e665b0$@janssen at eurid.eu>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Or this one :
> # dig @j.ns.se se. dnskey +dnssec
>
> ; <<>> DiG 9.7.0-P1 <<>> @j.ns.se se. dnskey +dnssec
> ; (2 servers found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24743
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags: do; udp: 4096
> ;; QUESTION SECTION:
> ;se. IN DNSKEY
>
> ;; ANSWER SECTION:
> se. 3600 IN DNSKEY 257 3 5 A....snip...
> EaRlZigUCp8=
> se. 3600 IN DNSKEY 257 3 5 A....snip....
> 7TKYyQgsTlc=
> se. 3600 IN DNSKEY 256 3 5 A....snip....
> 2oXgSod9
> se. 3600 IN RRSIG DNSKEY 5 1 3600
> 20100515203911 20100509131031 39547 se. g....snip.... uAYDHw==
> se. 3600 IN RRSIG DNSKEY 5 1 3600
> 20100517001830 20100509131031 8779 se. v....snip.... NRwr1A==
>
> ;; Query time: 17 msec
> ;; SERVER: 199.254.63.1#53(199.254.63.1)
> ;; WHEN: Sun May 9 18:54:10 2010
> ;; MSG SIZE rcvd: 1311
>
> One (1) additional announced, while there is not even an additional
> section.
> Maybe this is related to the EDNS0 stuff?
>
> --Pj.
>
>
> Peter Janssen
> Technical Manager
>
> Join us in June! EURid hosts ICANN?s 38th meeting in Brussels.? Find out
> more at brussels38.icann.org.
>
> ??? EURid
> ??? Woluwelaan 150????
> ??? 1831 Diegem - Belgium
> ??? TEL.: +32 (0) 2 401 2750
> ??? peter.janssen at eurid.eu
> ??? http://www.eurid.eu
> ???
>
>
>
> From: bind-users-bounces+peter.janssen=eurid.eu at lists.isc.org
> [mailto:bind-users-bounces+peter.janssen<bind-users-bounces%2Bpeter.janssen>
> =eurid.eu at lists.isc.org] On Behalf
> Of Sten Carlsen
> Sent: Sunday, May 09, 2010 17:48
> To: bind-users at lists.isc.org
> Subject: Re: Dig 9.7 DNSSEC output
>
>
>
> On 09/05/10 17:24, Peter Janssen wrote:
> Hi,
>
> might be me, but I don't get it.
>
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
>
> ADDITIONAL: 9
>
> But as you count to 8, where is number 9.
>
> I seem to be counting as Peter here.
>
>
>
> The issue I have with this is, dig announces 9 additional section entries,
> while 3 A, 1 AAAA and 4 RRSIG, in my book sums up to 8.
>
> Without DNSSEC, it seems to be able to count correctly...
> # dig @ns.nic.se nic.se ns
>
> ; <<>> DiG 9.7.0-P1 <<>> @ns.nic.se nic.se ns
> ; (2 servers found)
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4920
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 4
> ;; WARNING: recursion requested but not available
>
> ;; QUESTION SECTION:
> ;nic.se. IN NS
>
> ;; ANSWER SECTION:
> nic.se. 3600 IN NS ns2.nic.se.
> nic.se. 3600 IN NS ns.nic.se.
> nic.se. 3600 IN NS ns3.nic.se.
>
> ;; ADDITIONAL SECTION:
> ns.nic.se. 3600 IN A 212.247.7.228
> ns.nic.se. 3600 IN AAAA 2a00:801:f0:53::53
> ns2.nic.se. 3600 IN A 194.17.45.54
> ns3.nic.se. 60 IN A 212.247.3.83
>
> ;; Query time: 34 msec
> ;; SERVER: 212.247.7.228#53(212.247.7.228)
> ;; WHEN: Sun May 9 17:23:51 2010
> ;; MSG SIZE rcvd: 153
>
> Am I missing something?
> Or is this already reported? If so, what would be the correct channel?
>
>
> R.
> --Pj.
>
> Peter Janssen
> Technical Manager
>
> Join us in June! EURid hosts ICANN?s 38th meeting in Brussels.? Find out
> more at brussels38.icann.org.
>
> ??? EURid
> ??? Woluwelaan 150????
> ??? 1831 Diegem - Belgium
> ??? TEL.: +32 (0) 2 401 2750
> ??? peter.janssen at eurid.eu
> ??? http://www.eurid.eu
> ???
>
>
>
>
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
>
>
> --
> Best regards
>
> Sten Carlsen
>
> No improvements come from shouting:
>
> "MALE BOVINE MANURE!!!"
>
>
>
> ------------------------------
>
> Message: 4
> Date: Sun, 9 May 2010 13:23:37 -0400
> From: Shumon Huque <shuque at isc.upenn.edu>
> Subject: Re: Dig 9.7 DNSSEC output
> To: Peter Janssen <peter.janssen at eurid.eu>
> Cc: bind-users at lists.isc.org
> Message-ID: <20100509172337.GA3333 at isc.upenn.edu>
> Content-Type: text/plain; charset=unknown-8bit
>
> On Sun, May 09, 2010 at 05:48:34PM +0200, Peter Janssen wrote:
> > Hi Rick,
> >
> > as per the header of Dig output?
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
> >
> > a part from that, I'm glad that my counting is still up to par :-)
> >
> > R.
> > --Pj.
> >
> > Peter Janssen
> > Technical Manager
>
> The EDNS0 record is a pseudo RR that appears in the additional
> section. dig reports that separately rather than in the additional
> section, but the count of records in the header is correct.
>
> --
> Shumon Huque
> University of Pennsylvania.
>
>
> ------------------------------
>
> Message: 5
> Date: 09 May 2010 18:32:18 +0100
> From: Chris Thompson <cet1 at cam.ac.uk>
> Subject: RE: Dig 9.7 DNSSEC output
> To: Bind Users Mailing List <bind-users at lists.isc.org>
> Message-ID: <Prayer.1.3.2.1005091832180.19986 at hermes-2.csi.cam.ac.uk>
> Content-Type: text/plain; format=flowed; charset=ISO-8859-1
>
> On May 9 2010, Peter Janssen wrote:
>
> >Maybe this is related to the EDNS0 stuff?
>
> Precisely so. dig does not display the OPT RR in the reply (or that
> in the question if you use +qr, for that matter), but it's there
> in the additional section as you can see from the count. You don't
> have to use +dnssec to get this apparent-mismatch effect: +buf=...
> or +edns=... are enough.
>
> --
> Chris Thompson
> Email: cet1 at cam.ac.uk
>
>
> ------------------------------
>
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
> End of bind-users Digest, Vol 512, Issue 3
> ******************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100510/13313225/attachment.html>
More information about the bind-users
mailing list