9.10.2-P2 not receiving/logging inbound queries.

[Neil]

Hi binders,

 

What would cause a query to not show in any logs on BIND 9.10.2-p2, seems
9.10.2-p2 is not receiving

Queries tcpdump shows the query's getting in but bind does not show the same
incoming query in its

logs, Therefore no response is returned ID8 shows this. 

 

Load on dns server is low with ~600 r-clients. The dummyrecordtest is a
local hosted (test/canary)

record on the recursive server. 122.150.6.5 is a recursive server with a
virtual eth1:1 nic in CeonOS64bit

on VMware with setting of responses-per-second 0;

 

Running bind 9.9.7 does not show the same issues of missed inbound query's
not being received

by bind. Could this be some sort of socket/binding issue in bind9.10.2?, Is
there something I need

to do in the bind config?

 

 

Sequence of bind logs and tcpdump were matched on time and clients source
port.

 

#Tcpdump log

#

ID1 13:07:39.567250 IP 122.150.6.3.7397 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID1 13:07:39.567542 IP 122.150.6.5.53 > 122.150.6.3.7397: 26437* 1/0/0 A
254.254.254.254 (66)

 

ID2 13:07:50.633388 IP 122.150.6.2.46493 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID2 13:07:50.633554 IP 122.150.6.5.53 > 122.150.6.2.46493: 26437* 1/0/0 A
254.254.254.254 (66)

 

ID3 13:07:54.496787 IP 122.150.6.3.55067 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID3 13:07:54.497113 IP 122.150.6.5.53 > 122.150.6.3.55067: 26437* 1/0/0 A
254.254.254.254 (66)

 

ID4 13:08:05.562151 IP 122.150.6.2.43627 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID4 13:08:05.562309 IP 122.150.6.5.53 > 122.150.6.2.43627: 26437* 1/0/0 A
254.254.254.254 (66)

 

ID5 13:08:09.523669 IP 122.150.6.3.42231 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID5 13:08:09.523787 IP 122.150.6.5.53 > 122.150.6.3.42231: 26437* 1/0/0 A
254.254.254.254 (66)

 

ID6 13:08:20.588682 IP 122.150.6.2.45139 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID6 13:08:20.589284 IP 122.150.6.5.53 > 122.150.6.2.45139: 26437* 1/0/0 A
254.254.254.254 (66)

 

ID7 13:08:24.545489 IP 122.150.6.3.45318 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID7 13:08:24.548876 IP 122.150.6.5.53 > 122.150.6.3.45318: 26437* 1/0/0 A
254.254.254.254 (66)

 

>> We get the packet coming in to the host but nothing logged into bind as
show in queylog below

>> ID8 13:08:35.620586 IP 122.150.6.2.59437 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

 

ID9 13:08:39.577113 IP 122.150.6.3.43186 > 122.150.6.5.53: 26437+ A?
dummyrecordtest. (50)

ID9 13:08:39.589492 IP 122.150.6.5.53 > 122.150.6.3.43186: 26437* 1/0/0 A
254.254.254.254 (66)

 

#Bind query log

#

ID1 09-Jul-2015 13:07:39.567 queries: info: client 122.150.6.3#7397
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

ID2 09-Jul-2015 13:07:50.633 queries: info: client 122.150.6.2#46493
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

ID3 09-Jul-2015 13:07:54.496 queries: info: client 122.150.6.3#55067
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

ID4 09-Jul-2015 13:08:05.562 queries: info: client 122.150.6.2#43627
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

ID5 09-Jul-2015 13:08:09.523 queries: info: client 122.150.6.3#42231
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

ID6 09-Jul-2015 13:08:20.588 queries: info: client 122.150.6.2#45139
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

ID7 09-Jul-2015 13:08:24.548 queries: info: client 122.150.6.3#45318
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

>> ID8 No query received into bind.???

ID9 09-Jul-2015 13:08:39.589 queries: info: client 122.150.6.3#43186
(dummyrecordtest): view resolver: query: dummyrecordtest IN A +
(122.150.6.5)

 

 

Thanks

Neil

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20150709/f7664e06/attachment-0001.html>