error -- unrelated additional info

Barry Finkel b19141 at achilles.ctd.anl.gov
Mon Nov 13 16:40:10 UTC 2000


umukk at my-deja.com posted a query about this message:

>response-checks: info: bad referral (mil !< ARMY.MIL)
>response-checks: info: bad referral (mil !< ARMY.MIL)
>response-checks: info: bad referral (mil !< ARMY.MIL)
>response-checks: info: unrelated additional info 'ns01.army.mil' type A from [192.82.113.7].53
>response-checks: info: unrelated additional info 'ns03.army.mil' type A from [192.82.113.7].53
>response-checks: info: unrelated additional info 'ns02.army.mil' type A from [192.82.113.7].53

I have not yet finished reading all of the digests, so I do not know if
what I am posting below has been posted already.

I have seen this specific "bad referral" message numerous times.  After
a number of e-mail messages, I finally got a response from someone in 
the US Army who said that they were working on their DNS problems.
IIRC, this response was about a month ago.  I wrote this quick shell
script, which I named malf.exec:

     grep Malf /var/adm/messages | \
          sort +8 -9 | \
          awk -f malf.awk | \
          more

And here is the malf.awk script:

titania.ctd.anl.gov% cat malf.awk
# awk script to process "Malformed response" lines in var/adm/messages
# Aug 31 13:27:26 titania.ctd.anl.gov named[5304]: Malformed response from [170.210.2.65].53 (out of data in final pass)
# CURRENTLY will not print single occurrences.
# 01Sep00 1006AM  Barry Finkel
# 22Sep00 0130PM  Print the correct record.

BEGIN {oldip="";count=0;old1="";old2="";old3="";}
{
     newip = $9;
     if (oldip==newip)
     {
          count++;
     }
     else
     {
          if (count>0)
          {
               print old1 " " old2 " " old3 " count=" count;
          }
          oldip = newip;
          count=0;
          print $0
     }
     old1 = $1;
     old2 = $2;
     old3 = $3;
}
titania.ctd.anl.gov% 
This looks for all "Malformed response" messages in /var/adm/messages.
We cut a new messages file each Sunday, and whenever I run this script,
I always see multiple occurrences from each of the three army.mil name
servers.  I currently have three messages from each of the three
name servers since yesterday; by the end of the week the number will
probably exceed 30 for each.
----------------------------------------------------------------------
Barry S. Finkel
Electronics and Computing Technologies Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-9689
Building 221, Room B236              Internet: BSFinkel at anl.gov
Argonne, IL   60439-4844             IBMMAIL:  I1004994




More information about the bind-users mailing list