Sorry, I was editing the mail and forgot to correct it with the real domain name.

=============================================================================
Summary output        : NovaPhone DNS Alert

Group                 : dns
Service               : dns
Time noticed          : Fri Sep 10 19:00:51 2004
Secs until next alert :
Members               : 200.229.121.10

Detailed text (if any) follows:
-------------------------------
Zone 'novaphone.net': failed servers: 64.80.70.13
Diagnostics:
SOA query for novaphone.net from 64.80.70.13 failed question section incomplete
==============================================================================


What is really strange is that this check runs every 30 minutes and it is not always that I get the error.

I've captured the traffic between the servers (tethereal) to check the messages and it seems that the answers are always OK (even when DNS.monitor fails). I'm attaching the packets captured related to the alarm above.


============================================================================== [EMAIL PROTECTED] dalpi]$ dig soa novaphone.net @64.80.70.13

; <<>> DiG 9.2.2 <<>> soa novaphone.net @64.80.70.13
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48363
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;novaphone.net.                 IN      SOA

;; ANSWER SECTION:
novaphone.net. 3600 IN SOA novaphone.net. dalpi.telenova.net. 43 3600 600 86400 3600

;; AUTHORITY SECTION:
novaphone.net.          3600    IN      NS      ns2.novaphone.net.
novaphone.net.          3600    IN      NS      ns1.novaphone.net.

;; ADDITIONAL SECTION:
ns1.novaphone.net.      3600    IN      A       64.80.70.13
ns2.novaphone.net.      3600    IN      A       200.229.121.10
==============================================================================


Best regards and sorry for any confusion,

Guilherme.


Stephane Bortzmeyer wrote:
On Mon, Sep 13, 2004 at 10:26:49AM -0300,
Dalpi <[EMAIL PROTECTED]> wrote a message of 20 lines which said:


Zone 'nova.net': failed servers: x.x.x.x
Diagnostics:
    SOA query for nova.net from x.x.x.x failed question section incomplete


The sure thing is that the zone is badly broken.

~ % check_soa nova.net
ns1.national-net.com is not authoritative for nova.net
ns2.national-net.com is not authoritative for nova.net


Attachment: dns_problem.pcap
Description: Binary data

_______________________________________________
mon mailing list
[EMAIL PROTECTED]
http://linux.kernel.org/mailman/listinfo/mon

Reply via email to