log results - What is this?

Mark.Andrews at iengines.com Mark.Andrews at iengines.com
Sat Jan 1 22:00:40 UTC 2000


	It is a series of non-recursive requests for the A records
	for advit.com from acssun.mpei.ac.ru.  MYSERVER.com responds
	with a referral to the root servers.

	Now the listed servers for advit.com are all lame/down.  As
	you have choosen to hide the real name of MYSERVER.com and
	its IP address it is hard to go further as the correct advice
	at this point depends upon whether MYSERVER.com is supposed
	to be a server for advit.com or not. 

	Mark

; <<>> DiG 8.2 <<>> ns advit.com 
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4
;; QUERY SECTION:
;;	advit.com, type = NS, class = IN

;; ANSWER SECTION:
advit.com.		1d23h50m33s IN NS  NS1.REALNS.com.
advit.com.		1d23h50m33s IN NS  PHANTOM.REALSHELL.com.
advit.com.		1d23h50m33s IN NS  MENACE.REALSHELL.com.
advit.com.		1d23h50m33s IN NS  NS.ALPHAMECH.com.

;; ADDITIONAL SECTION:
NS1.REALNS.com.		1d23h50m33s IN A  216.42.104.2
PHANTOM.REALSHELL.com.	1d23h50m33s IN A  216.42.104.5
MENACE.REALSHELL.com.	1d23h50m33s IN A  216.42.104.170
NS.ALPHAMECH.com.	1d23h50m33s IN A  209.245.55.10

;; Total query time: 13 msec
;; FROM: bsdi.dv.isc.org to SERVER: default -- 130.155.191.233
;; WHEN: Sun Jan  2 08:51:14 2000
;; MSG SIZE  sent: 27  rcvd: 196

> Hi All,
> 
> Very new to DNS and BIND, so forgive my ignorance.  My server started
> getting this in the logs about 4 days ago.  What is it?
> 
> 19:11:20.099534 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 4857
> A? advit.com. (27) (DF) (ttl 241, id 54957)
> 19:11:20.100879 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 4857
> 0/12/12 (443) (ttl 64, id 29470)
> 19:11:24.780672 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36076
> A? advit.com. (27) (DF) (ttl 242, id 13705)
> 19:11:24.781765 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36076
> 0/12/12 (443) (ttl 64, id 29472)
> 19:11:30.131838 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42319
> A? advit.com. (27) (DF) (ttl 241, id 35743)
> 19:11:30.132950 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42319
> 0/12/12 (443) (ttl 64, id 29474)
> 19:11:35.178611 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 4858
> A? advit.com. (27) (DF) (ttl 241, id 54958)
> 19:11:35.179664 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 4858
> 0/12/12 (443) (ttl 64, id 29476)
> 19:11:38.525830 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36077
> A? advit.com. (27) (DF) (ttl 242, id 13706)
> 19:11:38.526899 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36077
> 0/12/12 (443) (ttl 64, id 29478)
> 19:11:41.041672 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42320
> A? advit.com. (27) (DF) (ttl 241, id 35744)
> 19:11:41.042722 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42320
> 0/12/12 (443) (ttl 64, id 29480)
> 19:11:44.007814 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 4859
> A? advit.com. (27) (DF) (ttl 241, id 54959)
> 19:11:44.008858 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 4859
> 0/12/12 (443) (ttl 64, id 29482)
> 19:11:49.839456 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36078
> A? advit.com. (27) (DF) (ttl 242, id 13707)
> 19:11:49.840538 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36078
> 0/12/12 (443) (ttl 64, id 29484)
> 19:11:56.020134 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42321
> A? advit.com. (27) (DF) (ttl 241, id 35745)
> 19:11:56.021224 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42321
> 0/12/12 (443) (ttl 64, id 29486)
> 19:12:02.040414 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 4861
> A? advit.com. (27) (DF) (ttl 241, id 54960)
> 19:12:02.041475 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 4861
> 0/12/12 (443) (ttl 64, id 29488)
> 19:12:15.542032 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36087
> A? advit.com. (27) (DF) (ttl 242, id 13708)
> 19:12:15.543116 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36087
> 0/12/12 (443) (ttl 64, id 29490)
> 19:12:28.047842 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42325
> A? advit.com. (27) (DF) (ttl 241, id 35746)
> 19:12:28.048945 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42325
> 0/12/12 (443) (ttl 64, id 29492)
> 19:26:19.300080 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5052
> A? advit.com. (27) (DF) (ttl 241, id 36623)
> 19:26:19.301346 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5052
> 0/12/12 (443) (ttl 64, id 29497)
> 19:26:24.075024 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36239
> A? advit.com. (27) (DF) (ttl 242, id 60977)
> 19:26:24.075668 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36239
> 0/12/12 (443) (ttl 64, id 29499)
> 19:26:29.517023 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42474
> A? advit.com. (27) (DF) (ttl 241, id 17579)
> 19:26:29.517558 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42474
> 0/12/12 (443) (ttl 64, id 29501)
> 19:26:34.270245 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5057
> A? advit.com. (27) (DF) (ttl 241, id 36624)
> 19:26:34.270771 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5057
> 0/12/12 (443) (ttl 64, id 29503)
> 19:26:37.473787 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36242
> A? advit.com. (27) (DF) (ttl 242, id 60978)
> 19:26:37.474299 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36242
> 0/12/12 (443) (ttl 64, id 29505)
> 19:26:40.331175 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42475
> A? advit.com. (27) (DF) (ttl 241, id 17580)
> 19:26:40.331682 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42475
> 0/12/12 (443) (ttl 64, id 29507)
> 19:26:43.490935 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5062
> A? advit.com. (27) (DF) (ttl 241, id 36625)
> 19:26:43.491443 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5062
> 0/12/12 (443) (ttl 64, id 29509)
> 19:26:49.130327 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36243
> A? advit.com. (27) (DF) (ttl 242, id 60979)
> 19:26:49.130840 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36243
> 0/12/12 (443) (ttl 64, id 29511)
> 19:26:55.330950 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42478
> A? advit.com. (27) (DF) (ttl 241, id 17581)
> 19:26:55.331472 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42478
> 0/12/12 (443) (ttl 64, id 29513)
> 19:27:01.409532 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5067
> A? advit.com. (27) (DF) (ttl 241, id 36626)
> 19:27:01.410045 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5067
> 0/12/12 (443) (ttl 64, id 29515)
> 19:27:14.547443 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36248
> A? advit.com. (27) (DF) (ttl 242, id 60980)
> 19:27:14.547960 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36248
> 0/12/12 (443) (ttl 64, id 29517)
> 19:27:27.340369 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42481
> A? advit.com. (27) (DF) (ttl 241, id 17582)
> 19:27:27.340969 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42481
> 0/12/12 (443) (ttl 64, id 29519)
> 19:41:22.173539 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5314
> A? advit.com. (27) (DF) (ttl 241, id 21979)
> 19:41:22.174162 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5314
> 0/12/12 (443) (ttl 64, id 29524)
> 19:41:26.878324 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36443
> A? advit.com. (27) (DF) (ttl 242, id 46223)
> 19:41:26.878839 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36443
> 0/12/12 (443) (ttl 64, id 29526)
> 19:41:32.201364 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42640
> A? advit.com. (27) (DF) (ttl 241, id 2705)
> 19:41:32.201865 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42640
> 0/12/12 (443) (ttl 64, id 29528)
> 19:41:37.075680 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5322
> A? advit.com. (27) (DF) (ttl 241, id 21980)
> 19:41:37.076176 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5322
> 0/12/12 (443) (ttl 64, id 29531)
> 19:41:40.315646 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36447
> A? advit.com. (27) (DF) (ttl 242, id 46224)
> 19:41:40.316278 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36447
> 0/12/12 (443) (ttl 64, id 29533)
> 19:41:43.094095 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42644
> A? advit.com. (27) (DF) (ttl 241, id 2706)
> 19:41:43.094605 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42644
> 0/12/12 (443) (ttl 64, id 29535)
> 19:41:46.174829 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5323
> A? advit.com. (27) (DF) (ttl 241, id 21981)
> 19:41:46.175339 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5323
> 0/12/12 (443) (ttl 64, id 29537)
> 19:41:51.933998 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36450
> A? advit.com. (27) (DF) (ttl 242, id 46225)
> 19:41:51.934515 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36450
> 0/12/12 (443) (ttl 64, id 29539)
> 19:41:58.133920 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42645
> A? advit.com. (27) (DF) (ttl 241, id 2707)
> 19:41:58.134432 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42645
> 0/12/12 (443) (ttl 64, id 29541)
> 19:42:04.314700 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5327
> A? advit.com. (27) (DF) (ttl 241, id 21982)
> 19:42:04.315217 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5327
> 0/12/12 (443) (ttl 64, id 29543)
> 19:42:17.362421 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36453
> A? advit.com. (27) (DF) (ttl 242, id 46226)
> 19:42:17.362935 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36453
> 0/12/12 (443) (ttl 64, id 29545)
> 19:42:30.408722 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42646
> A? advit.com. (27) (DF) (ttl 241, id 2708)
> 19:42:30.409254 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42646
> 0/12/12 (443) (ttl 64, id 29548)
> 19:56:21.755016 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5603
> A? advit.com. (27) (DF) (ttl 241, id 3975)
> 19:56:21.755628 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5603
> 0/12/12 (443) (ttl 64, id 29581)
> 19:56:26.586280 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36542
> A? advit.com. (27) (DF) (ttl 242, id 28159)
> 19:56:26.586835 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36542
> 0/12/12 (443) (ttl 64, id 29583)
> 19:56:31.731369 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42703
> A? advit.com. (27) (DF) (ttl 241, id 50207)
> 19:56:31.731915 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42703
> 0/12/12 (443) (ttl 64, id 29585)
> 19:56:36.767237 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5606
> A? advit.com. (27) (DF) (ttl 241, id 3976)
> 19:56:36.767754 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5606
> 0/12/12 (443) (ttl 64, id 29587)
> 19:56:40.228678 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36543
> A? advit.com. (27) (DF) (ttl 242, id 28160)
> 19:56:40.229187 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36543
> 0/12/12 (443) (ttl 64, id 29589)
> 19:56:42.898157 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42704
> A? advit.com. (27) (DF) (ttl 241, id 50208)
> 19:56:42.898662 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42704
> 0/12/12 (443) (ttl 64, id 29591)
> 19:56:45.946322 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5607
> A? advit.com. (27) (DF) (ttl 241, id 3977)
> 19:56:45.946836 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5607
> 0/12/12 (443) (ttl 64, id 29593)
> 19:56:51.426917 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36545
> A? advit.com. (27) (DF) (ttl 242, id 28161)
> 19:56:51.427433 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36545
> 0/12/12 (443) (ttl 64, id 29595)
> 19:56:57.789474 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42734
> A? advit.com. (27) (DF) (ttl 241, id 50209)
> 19:56:57.789988 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42734
> 0/12/12 (443) (ttl 64, id 29597)
> 19:57:03.776764 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5611
> A? advit.com. (27) (DF) (ttl 241, id 3978)
> 19:57:03.777274 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5611
> 0/12/12 (443) (ttl 64, id 29599)
> 19:57:17.172882 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36546
> A? advit.com. (27) (DF) (ttl 242, id 28162)
> 19:57:17.173399 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36546
> 0/12/12 (443) (ttl 64, id 29601)
> 19:57:29.870801 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42746
> A? advit.com. (27) (DF) (ttl 241, id 50210)
> 19:57:29.871336 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42746
> 0/12/12 (443) (ttl 64, id 29603)
> 19:57:35.167087 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36546
> A? advit.com. (27) (DF) (ttl 242, id 28163)
> 19:57:35.167597 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36546
> 0/12/12 (443) (ttl 64, id 29605)
> 20:12:42.034973 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5893
> A? advit.com. (27) (DF) (ttl 241, id 1255)
> 20:12:42.035601 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5893
> 0/12/12 (443) (ttl 64, id 29610)
> 20:12:42.561752 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36658
> A? advit.com. (27) (DF) (ttl 242, id 21249)
> 20:12:42.562248 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36658
> 0/12/12 (443) (ttl 64, id 29612)
> 20:12:51.568436 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42849
> A? advit.com. (27) (DF) (ttl 241, id 46947)
> 20:12:51.568943 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42849
> 0/12/12 (443) (ttl 64, id 29614)
> 20:12:52.576039 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5896
> A? advit.com. (27) (DF) (ttl 241, id 1256)
> 20:12:52.576514 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5896
> 0/12/12 (443) (ttl 64, id 29616)
> 20:12:55.586131 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36660
> A? advit.com. (27) (DF) (ttl 242, id 21250)
> 20:12:55.586613 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36660
> 0/12/12 (443) (ttl 64, id 29618)
> 20:12:58.594174 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42850
> A? advit.com. (27) (DF) (ttl 241, id 46948)
> 20:12:58.594652 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42850
> 0/12/12 (443) (ttl 64, id 29620)
> 20:13:07.947513 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36663
> A? advit.com. (27) (DF) (ttl 242, id 21251)
> 20:13:07.947998 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36663
> 0/12/12 (443) (ttl 64, id 29622)
> 20:13:22.549791 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42853
> A? advit.com. (27) (DF) (ttl 241, id 46949)
> 20:13:22.550291 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42853
> 0/12/12 (443) (ttl 64, id 29624)
> 20:13:23.874707 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5897
> A? advit.com. (27) (DF) (ttl 241, id 43085)
> 20:13:23.875187 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5897
> 0/12/12 (443) (ttl 64, id 29626)
> 20:13:33.415930 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5896
> A? advit.com. (27) (DF) (ttl 241, id 43086)
> 20:13:33.416410 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5896
> 0/12/12 (443) (ttl 64, id 29628)
> 20:13:38.782087 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36668
> A? advit.com. (27) (DF) (ttl 242, id 21252)
> 20:13:38.782568 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36668
> 0/12/12 (443) (ttl 64, id 29630)
> 20:13:44.586012 acssun.mpei.ac.ru.domain > MYSERVER.com.domain: 5905
> A? advit.com. (27) (DF) (ttl 241, id 43087)
> 20:13:44.586491 MYSERVER.com.domain > acssun.mpei.ac.ru.domain: 5905
> 0/12/12 (443) (ttl 64, id 29632)
> 20:13:45.647284 srv-14.mpei.ac.ru.domain > MYSERVER.com.domain: 42856
> A? advit.com. (27) (DF) (ttl 241, id 46950)
> 20:13:45.647759 MYSERVER.com.domain > srv-14.mpei.ac.ru.domain: 42856
> 0/12/12 (443) (ttl 64, id 29634)
> 20:13:53.252948 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36663
> A? advit.com. (27) (DF) (ttl 242, id 21253)
> 20:13:53.253426 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36663
> 0/12/12 (443) (ttl 64, id 29636)
> 20:14:44.027021 apmsun.mpei.ac.ru.domain > MYSERVER.com.domain: 36668
> A? advit.com. (27) (DF) (ttl 242, id 11647)
> 20:14:44.027531 MYSERVER.com.domain > apmsun.mpei.ac.ru.domain: 36668
> 0/12/12 (443) (ttl 64, id 29638)
> 
> is it bad?  Can I stop it?  Thanks in advance.
> 
> Chris Ehly
> Network Admin./CAD
> 
> 
--
Mark Andrews, Internet Engines Inc. / Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at iengines.com



More information about the bind-users mailing list