Hello, I've encountered two strange things when using Unbound to query your domain nlnetlabs.nl. I was playing with a program that cut off some Additional Records, and was confused to learn that it sometimes happens with Unbound as well.
One is due to dig. Dig sometimes shows a higher Additional Records count than are being printed -- I've used WireShart and learnt that these are OPT records which are not to be handled like normal RR. That's hereby documented. But I also get different results when querying Unbound (running on jip) or your own name server. Listing follows. Where have the missing Additional Records gone I wonder/ These don't show up in WireShark (and no OPT either) and of course I specified -s0 to avoid cutting off the DNS response. TcpDump attached. I use Debian Lenny -> unbound 1.0.2 and dig from dnsutils 1:9.5.0. BTW, I'm new to Debian -- but it already feels like home :-) Best, -Rick bash$ dig @jip nlnetlabs.nl # Ask Unbound ; <<>> DiG 9.3.2-P2.1 <<>> @jip nlnetlabs.nl ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64664 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; QUESTION SECTION: ;nlnetlabs.nl. IN A ;; ANSWER SECTION: nlnetlabs.nl. 2598 IN A 213.154.224.1 ;; AUTHORITY SECTION: nlnetlabs.nl. 8641 IN NS ns7.domain-registry.nl. nlnetlabs.nl. 8641 IN NS omval.tednet.nl. nlnetlabs.nl. 8641 IN NS open.nlnetlabs.nl. ;; ADDITIONAL SECTION: open.nlnetlabs.nl. 8630 IN A 213.154.224.1 open.nlnetlabs.nl. 8835 IN AAAA 2001:7b8:206:1::1 open.nlnetlabs.nl. 8835 IN AAAA 2001:7b8:206:1::53 ;; Query time: 8 msec ;; SERVER: 10.0.0.5#53(10.0.0.5) ;; WHEN: Wed Jan 7 11:03:10 2009 ;; MSG SIZE rcvd: 198 bash$ dig @open.nlnetlabs.nl nlnetlabs.nl # Ask The Source ; <<>> DiG 9.4.2-P1 <<>> @open.nlnetlabs.nl nlnetlabs.nl ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36889 ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 6 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;nlnetlabs.nl. IN A ;; ANSWER SECTION: nlnetlabs.nl. 10200 IN A 213.154.224.1 ;; AUTHORITY SECTION: nlnetlabs.nl. 10200 IN NS open.nlnetlabs.nl. nlnetlabs.nl. 10200 IN NS omval.tednet.nl. nlnetlabs.nl. 10200 IN NS ns7.domain-registry.nl. ;; ADDITIONAL SECTION: open.nlnetlabs.nl. 10200 IN A 213.154.224.1 open.nlnetlabs.nl. 10200 IN AAAA 2001:7b8:206:1::53 open.nlnetlabs.nl. 10200 IN AAAA 2001:7b8:206:1::1 omval.tednet.nl. 28800 IN A 213.154.224.17 omval.tednet.nl. 28800 IN AAAA 2001:7b8:206:1::17 omval.tednet.nl. 28800 IN AAAA 2001:7b8:206:1:200:39ff:fe59:b187 ;; Query time: 15 msec ;; SERVER: 213.154.224.1#53(213.154.224.1) ;; WHEN: Wed Jan 7 12:02:57 2009 ;; MSG SIZE rcvd: 270
unbound2.tcpdump
Description: Binary data
signature.asc
Description: Digital signature
_______________________________________________ Unbound-users mailing list [email protected] http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
