dig printout doesn't appear to match reality

Mark Andrews Mark_Andrews at isc.org
Sat May 16 21:52:21 UTC 2009


In message <!&!AAAAAAAAAAAuAAAAAAAAAKTyXRN5/+lGvU59a+P7CFMBAN6gY+ZG84BMpVQcAbDh
1IQAAAATbSgAABAAAAA4S92p8rHuQbWoH1A8YNv/AQAAAAA=@iname.com>, "Frank Bulk" write
s:
> Wow, I wasn't aware of that nuance.  I have been making incorrect
> assumptions.
> 
> It doesn't make sense to me how DNS3.UIOWA.EDU can return the correct cached
> result for the NS records of sioux-center.k12.ia.us but an incorrect "norec"
> result.  Doesn't specifying "no recursion" mean that it has to be either
> authoritative for that domain or have the entry cached in order to return
> any result at all?

	No.  It is a server for a parent domain so it returns a referral
	to where the real information is.

> But the 'aa' bit is not set, which seems to me that it
> must have obtained the result from its cache.

	Note there is nothing in the answer section to set "aa=1"
	against.

; <<>> DiG 9.3.6-P1 <<>> +norec sioux-center.k12.ia.us ns @DNS3.UIOWA.EDU
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8795
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1

;; QUESTION SECTION:
;sioux-center.k12.ia.us.		IN	NS

;; AUTHORITY SECTION:
sioux-center.k12.ia.us.	28800	IN	NS	dns.mtcnet.net.
sioux-center.k12.ia.us.	28800	IN	NS	ns1.netins.net.

;; ADDITIONAL SECTION:
ns1.netins.net.		61323	IN	A	167.142.225.5

;; Query time: 223 msec
;; SERVER: 128.255.1.8#53(128.255.1.8)
;; WHEN: Sun May 17 07:48:51 2009
;; MSG SIZE  rcvd: 109

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list