Re: regarding dig outputs

12 msg	Re: BIND 9.5.0a5 is now available.
26 msg	DNS queries to blocked countries?
2 msg	xx
9 msg	Question about the ADDITIONAL SECTION
25 msg	allow query / allow recursion confusion
30 msg	WIndows DNS (master) -> BIND (slave)
3 msg	allowing underscores in A/AAAA records
3 msg	named startup script
14 msg	'Empty zones' and BIND 9.4
2 msg	Problems resolving a domain name
1 msg	High mem usage
2 msg	Issue reg changing the existing name server to ...

regarding dig outputs
\ Vishwas (17 Jun 2007)
. \ Mark Andrews (17 Jun 2007)

3 msg	bind-9.2.8 give wrong ip
2 msg	How do I change the resolution timeout?
2 msg	Problems with rndc
3 msg	Problem with rndc.key (invalid key)
5 msg	512 byte limit
2 msg	ftp.isc.org
2 msg	differences between platforms?

Subject:	Re: regarding dig outputs
Group:	Bind-users
From:	Mark Andrews
Date:	17 Jun 2007

> Hi all,
> Am pasting below 3 outputs from 3 dig queries.
> Query 1: dig www.google.com
> Output 1: See the Authority section and Additional section, I was
> expecting entries of google DNS servers in these two sections but
> instead am getting ROOT servers.

Your expectations are incorrect. When returning a cached answer
a nameserver will return the closest enclosing NS RRset

> Then I removed the forwarder entry
> from my DNS and I started getting what I was expecting (See output of
> Query 3, below). What does this mean? Does it mean that the forwarder
> that I was using does not perform recursion for me?
>
> Query 2: dig www.google.com
> Output 2: The Authority section and Additional section did not return
> anything. But on repeating the query, I started getting entries in
> these sections. It happens for any site that I query for the first
> time. What can be the reason?

You are talking to two different servers. 165.21.83.88 and
127.0.0.1

Mark

> ----- Query 1 ----------------------------------------------------------------
> ------
>
> dns@debian:~$ dig www.google.com
>
> ; <<>> DiG 9.3.4 <<>> www.google.com
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6791
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 13, ADDITIONAL: 13
>
> ;; QUESTION SECTION:
> ;www.google.com. IN A
>
> ;; ANSWER SECTION:
> www.google.com. 552253 IN CNAME www.l.google.com.
> www.l.google.com. 283 IN A 64.233.189.104
>
> ;; AUTHORITY SECTION:
> . 362829 IN NS H.ROOT-SERVERS.NET.
> . 362829 IN NS I.ROOT-SERVERS.NET.
> . 362829 IN NS J.ROOT-SERVERS.NET.
> . 362829 IN NS K.ROOT-SERVERS.NET.
> . 362829 IN NS L.ROOT-SERVERS.NET.
> . 362829 IN NS M.ROOT-SERVERS.NET.
> . 362829 IN NS A.ROOT-SERVERS.NET.
> . 362829 IN NS B.ROOT-SERVERS.NET.
> . 362829 IN NS C.ROOT-SERVERS.NET.
> . 362829 IN NS D.ROOT-SERVERS.NET.
> . 362829 IN NS E.ROOT-SERVERS.NET.
> . 362829 IN NS F.ROOT-SERVERS.NET.
> . 362829 IN NS G.ROOT-SERVERS.NET.
>
> ;; ADDITIONAL SECTION:
> A.ROOT-SERVERS.NET. 523479 IN A 198.41.0.4
> B.ROOT-SERVERS.NET. 484289 IN A 192.228.79.201
> C.ROOT-SERVERS.NET. 88759 IN A 192.33.4.12
> D.ROOT-SERVERS.NET. 495704 IN A 128.8.10.90
> E.ROOT-SERVERS.NET. 88759 IN A 192.203.230.10
> F.ROOT-SERVERS.NET. 523479 IN A 192.5.5.241
> G.ROOT-SERVERS.NET. 521969 IN A 192.112.36.4
> H.ROOT-SERVERS.NET. 521968 IN A 128.63.2.53
> I.ROOT-SERVERS.NET. 521969 IN A 192.36.148.17
> J.ROOT-SERVERS.NET. 523479 IN A 192.58.128.30
> K.ROOT-SERVERS.NET. 523479 IN A 193.0.14.129
> L.ROOT-SERVERS.NET. 521968 IN A 198.32.64.12
> M.ROOT-SERVERS.NET. 521968 IN A 202.12.27.33
>
> ;; Query time: 75 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sun Jun 17 18:17:39 2007
> ;; MSG SIZE rcvd: 487
>
>
> ---- Query 2 -----------------------------------------------------------------
> ------
>
>
> debian:~# dig www.google.com
>
> ; <<>> DiG 9.3.4 <<>> www.google.com
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30018
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;www.google.com. IN A
>
> ;; ANSWER SECTION:
> www.google.com. 604131 IN CNAME www.l.google.com.
> www.l.google.com. 86 IN A 64.233.189.104
>
> ;; Query time: 31 msec
> ;; SERVER: 165.21.83.88#53(165.21.83.88)
> ;; WHEN: Sun Jun 17 18:20:56 2007
> ;; MSG SIZE rcvd: 68
>
> debian:~#
>
>
> ---- Query 3 -----------------------------------------------------------------
> ------
>
> debian:~# dig www.google.com
>
> ; <<>> DiG 9.3.4 <<>> www.google.com
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3489
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 7, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;www.google.com. IN A
>
> ;; ANSWER SECTION:
> www.google.com. 604700 IN CNAME www.l.google.com.
> www.l.google.com. 200 IN A 66.249.89.103
> www.l.google.com. 200 IN A 66.249.89.104
> www.l.google.com. 200 IN A 66.249.89.99
>
> ;; AUTHORITY SECTION:
> l.google.com. 86300 IN NS b.l.google.com.
> l.google.com. 86300 IN NS c.l.google.com.
> l.google.com. 86300 IN NS d.l.google.com.
> l.google.com. 86300 IN NS e.l.google.com.
> l.google.com. 86300 IN NS f.l.google.com.
> l.google.com. 86300 IN NS g.l.google.com.
> l.google.com. 86300 IN NS a.l.google.com.
>
> ;; Query time: 25 msec
> ;; SERVER: 127.0.0.1#53(127.0.0.1)
> ;; WHEN: Sun Jun 17 18:22:36 2007
> ;; MSG SIZE rcvd: 212
>
> ----------- End of output -----
>
>
>
> --
> Best Regards,
> Vishwas.
> ivishwas.googlepages.com
>
> I know quite certainly that I myself have no special talent;
> curiosity, obsession and dogged endurance, combined with
> self-criticism have brought me to my ideas. - Albert Einstein
>
>
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark_Andrews