I have checked the with test engineer and confirmed that the query packet is the same for both successful and unsuccessful query (we dit the packet capture). The server was serving some client at the time of testing therefore invalid packet may come from these clients. I will isolate the server and run the test again.
The packet capture of this test is uploaded here for further investigation: https://dl.dropboxusercontent.com/u/1932762/test-pdns-recursor.pcap (350KB) Vu. On Fri, Jul 25, 2014 at 5:30 PM, abang <ab...@t-ipnet.net> wrote: > Am 25.07.2014 02:06, schrieb Vu Le: > > #tail /var/log/messages > Jul 24 17:59:50 SERVER pdns_recursor[13859]: Error processing or aging > answer packet: out of bounds: 16 >= 16 > > This is an exception in doProcessUDPQuestion: > > https://github.com/PowerDNS/pdns/blob/master/pdns/pdns_recursor.cc#L893 > > May be the Spirent testcenter sends sometimes invalid query packets? > > Winfried On Sat, Jul 26, 2014 at 11:50 AM, Mail Delivery System <mailer-dae...@xs.powerdns.com> wrote: > This message was created automatically by mail delivery software. > > A message that you sent could not be delivered to one or more of its > recipients. This is a permanent error. The following address(es) failed: > > pipe to |/var/lib/mailman/mail/mailman post pdns-users > generated by pdns-us...@xs.powerdns.com > local delivery failed > > The following text was generated during the delivery attempt: > > ------ pipe to |/var/lib/mailman/mail/mailman post pdns-users > generated by pdns-us...@xs.powerdns.com ------ > > Group mismatch error. Mailman expected the mail > wrapper script to be executed as group "daemon", but > the system's mail server executed the mail script as > group "Debian-exim". Try tweaking the mail server to run the > script as group "daemon", or re-run configure, > providing the command line option `--with-mail-gid=Debian-exim'. > > ------ This is a copy of the message, including all the headers. ------ > > Return-path: <lev....@gmail.com> > Received: from mail-ig0-x233.google.com ([2607:f8b0:4001:c05::233]) > by xs.powerdns.com with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16) > (Exim 4.71) > (envelope-from <lev....@gmail.com>) > id 1XAtw7-000836-Uw > for pdns-us...@xs.powerdns.com; Sat, 26 Jul 2014 06:50:27 +0200 > Received: by mail-ig0-f179.google.com with SMTP id h18so1656103igc.12 > for <pdns-us...@xs.powerdns.com>; Fri, 25 Jul 2014 21:50:22 -0700 > (PDT) > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; > d=gmail.com; s=20120113; > h=mime-version:in-reply-to:references:date:message-id:subject:from:to > :cc:content-type; > bh=vHqq30y1d3aAqjB9I7cXfmxIwK5DbL+MtUE6VTH96SI=; > b=DG2Uzb6ZozZfR5jeB9uBvbueNbt8J0mLANor1eRJM4kYq1gWJg4U9VclP8Xox7z89R > Y/Ib+SVpN7kSJet9S1E9EhMNQlhrqDbcia70BJH20C/Ley28Y/ZTWw0Vmfo8F8aUZIII > 9W8N+bwHjy1FpVm89PKzS+/EbFnbAAQgIDaBWTMYzpsI7DBTSR94Fsj0CilCpjHMc7aT > sf4bSu7gJHHG4Kr0l5t+B9C9oB3ej1qbyuebAo2TaZh4ST+i/UNggodNZKEnZJsNADaO > zcMD3gTED0MJ+1+tToE0DoX7YlypbzqLLKKR5P0LM0KX/9YdE1u1oXZ5TLBJ9z4nlpGu > bd7w== > MIME-Version: 1.0 > X-Received: by 10.42.101.77 with SMTP id d13mr26265634ico.53.1406350221857; > Fri, 25 Jul 2014 21:50:21 -0700 (PDT) > Received: by 10.64.73.33 with HTTP; Fri, 25 Jul 2014 21:50:21 -0700 (PDT) > In-Reply-To: <53d231ba.3090...@t-ipnet.net> > References: <20140724140154.ga28...@pi.ip.fi> > <canhmlzxn_lavl41fl8yf-dwp50r+_ey4xekcnyq9ng5tcuj...@mail.gmail.com> > <53d231ba.3090...@t-ipnet.net> > Date: Sat, 26 Jul 2014 11:50:21 +0700 > Message-ID: > <CANHmLzVB=13cW11gYr0YWO1705TJ4=2pqgysntrr_sf9_dl...@mail.gmail.com> > Subject: Re: [Pdns-users] Missing Answers RR in some response > From: Vu Le <lev....@gmail.com> > To: abang <ab...@t-ipnet.net> > Cc: "pdns-us...@xs.powerdns.com" <pdns-us...@xs.powerdns.com> > Content-Type: text/plain; charset=UTF-8 > X-Spam_score: -1.9 > X-Spam_score_int: -18 > X-Spam_bar: - > X-Spam_report: Spam detection software, running on the system > "xs.powerdns.com", has > identified this incoming email as possible spam. The original message > has been attached to this so you can view it (if it isn't spam) or label > similar future email. If you have any questions, see > the administrator of that system for details. > > Content preview: I have checked the with test engineer and confirmed that > the > query packet is the same for both successful and unsuccessful query (we > dit > the packet capture). The server was serving some client at the time of > testing > therefore invalid packet may come from these clients. I will isolate the > server and run the test again. [...] > > Content analysis details: (-1.9 points, 5.0 required) > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail > provider > (lev.fpt[at]gmail.com) > -0.0 SPF_PASS SPF: sender matches SPF record > -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% > [score: 0.0000] > 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid > > I have checked the with test engineer and confirmed that the query > packet is the same for both successful and unsuccessful query (we dit > the packet capture). The server was serving some client at the time of > testing therefore invalid packet may come from these clients. I will > isolate the server and run the test again. > > The packet capture of this test is uploaded here for further investigation: > https://dl.dropboxusercontent.com/u/1932762/test-pdns-recursor.pcap (350KB) > > Vu. > > On Fri, Jul 25, 2014 at 5:30 PM, abang <ab...@t-ipnet.net> wrote: >> Am 25.07.2014 02:06, schrieb Vu Le: >> >> #tail /var/log/messages >> Jul 24 17:59:50 SERVER pdns_recursor[13859]: Error processing or aging >> answer packet: out of bounds: 16 >= 16 >> >> This is an exception in doProcessUDPQuestion: >> >> https://github.com/PowerDNS/pdns/blob/master/pdns/pdns_recursor.cc#L893 >> >> May be the Spirent testcenter sends sometimes invalid query packets? >> >> Winfried _______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
