Truncated packets.

Mark.Andrews at nominum.com Mark.Andrews at nominum.com
Mon Apr 9 23:07:21 UTC 2001


> 
> 
> Hi,
> 
> I've recieved some strange packets on a secondary server
> about truncated packets. I'm running 8.2.3 on FreeBSD 3.2.
> Should I be concerned?

	No.  The administrators of the domain in question
	have put too many PTR records at the name to fit into
	a DNS/TCP message (64k).  It's most probably a virtual
	http server and they have added every virtual site they
	are serving.

	In practice you only need one PTR record, that of the real
	name of the http server, not all its virtual sites.

	Mark
> 
> Apr  5 13:15:11 naas2 named[136]: ns_resp: TCP truncated: 
> "4.3.2.1.in-addr.arpa" IN PTR from [1.2.3.15].53
> Apr  5 13:15:11 naas2 named[136]: ns_resp: TCP truncated: 
> "4.3.2.1.in-addr.arpa" IN PTR from [1.2.3.16].53
> Apr  5 13:15:13 naas2 named[136]: ns_resp: TCP truncated: 
> "4.3.2.1.in-addr.arpa" IN PTR from [1.2.3.16].53
> Apr  5 13:15:17 naas2 named[136]: ns_resp: TCP truncated: 
> "4.3.2.1.in-addr.arpa" IN PTR from [1.2.3.15].53
> 
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com


More information about the bind-users mailing list