ns_resp: TPC truncated

Tue Oct 16 03:33:49 UTC 2001

> Thank you for your answer, but I still do not understand what is causing  
> those entries in my logs. Perhaps I'm missing the point.
> Thanks,
> Fabiola

	Some client is trying to map an address to a name.  Your
	nameserver tries to get the answers from the nameservers
	for the zone but can't because the answer is too big.
	The nameservers for the zone have set "tc" indicating that
	the answer is incomplete even after falling back from UDP
	to TCP.

	Mark
> 
> On Tue, 16 Oct 2001 Mark_Andrews at isc.org wrote:
> 
> > 
> > > 
> > > Hi all,
> > > I understand that this error means that the query or look up can't fit on
> > > a 512-byte UDP packet (or TCP). I'm trying to find out what event cause
> > > the syslog entry. Was it actually a query, a look up or something else.
> > > None of the IPs logged on my syslog belong to us.
> > > My name server logging this is ns2.infi.net.
> > > 
> > > Here are the entries from my daemon.log:
> > > 
> > > 
> > > Oct 15 02:53:03 ns2.infi.net named[13517]: [ID 295310 daemon.error]
> > > ns_resp: TCP truncated: "209.170.22.207.in-addr.arpa
> > > " IN PTR from [207.22.170.4].53
> > > Oct 15 06:16:00 ns2.infi.net named[13517]: [ID 295310 daemon.error]
> > > ns_resp: TCP truncated: "110.40.176.209.in-addr.arpa
> > > " IN PTR from [63.160.48.1].53
> > > Oct 15 06:16:00 ns2.infi.net named[13517]: [ID 295310 daemon.error]
> > > ns_resp: TCP truncated: "110.40.176.209.in-addr.arpa
> > > " IN PTR from [209.176.40.2].53
> > > Oct 15 12:10:24 ns2.infi.net named[13517]: [ID 295310 daemon.error]
> > > ns_resp: TCP truncated: "6.45.217.209.in-addr.arpa"
> > > IN PTR from [204.215.60.2].53
> > > Oct 15 19:07:17 ns2.infi.net named[13517]: [ID 295310 daemon.error]
> > > ns_resp: TCP truncated: "88.224.148.63.in-addr.arpa"
> > >  IN PTR from [209.54.227.5].53
> > > 
> > > TIA
> > > Fabiola
> > > 
> > > 
> > 
> > 	Stupid web host providers that seem to think that every
> > 	virtual service provided by the box requires a PTR record.
> > 	On top of that they keep adding records past the ability
> > 	of the nameserver implementation / protocol to send the
> > 	records back.  This is a total waste of resources, no
> > 	application looks past the first PTR record.
> > 
> > 	Mark
> > 
> > ; <<>> DiG 8.3 <<>> ptr 88.224.148.63.in-addr.arpa @209.54.227.5 
> > ; (1 server found)
> > ;; res options: init recurs defnam dnsrch
> > ;; got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
> > ;; flags: qr aa tc rd ra; QUERY: 1, ANSWER: 549, AUTHORITY: 0, ADDITIONAL: 
> 0
> > ;; QUERY SECTION:
> > ;;	88.224.148.63.in-addr.arpa, type = PTR, class = IN
> > 
> > ;; ANSWER SECTION:
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  raq5.ndmc.net.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.remoteonline.net.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.remoteonline.net.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.stablesbar.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.stablesbar.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  kimcollins.net.
> > [snipped]
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.journeyseminars.org.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.journeyseminars.org.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  journeyseminars.org.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.alphafirstinc.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  alphafirstinc.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.alphafirstinc.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.africanlifestyle.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.africanlifestyle.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  africanlifestyle.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.icebergconsulting.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.icebergconsulting.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  icebergconsulting.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  www.namoguy.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  mail.namoguy.com.
> > 88.224.148.63.in-addr.arpa.  1H IN PTR  namoguy.com.
> > 
> > ;; Total query time: 3871 msec
> > ;; FROM: drugs.dv.isc.org to SERVER: 209.54.227.5
> > ;; WHEN: Tue Oct 16 11:56:31 2001
> > ;; MSG SIZE  sent: 44  rcvd: 16349
> > 
> > --
> > Mark Andrews, Internet Software Consortium
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org
> > 
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org