Dig 9.7 DNSSEC output

[Peter Janssen]

Or this one :
# dig @j.ns.se se. dnskey +dnssec

; <<>> DiG 9.7.0-P1 <<>> @j.ns.se se. dnskey +dnssec
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24743
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;se.                            IN      DNSKEY

;; ANSWER SECTION:
se.                     3600    IN      DNSKEY  257 3 5 A....snip...
EaRlZigUCp8=
se.                     3600    IN      DNSKEY  257 3 5 A....snip....
7TKYyQgsTlc=
se.                     3600    IN      DNSKEY  256 3 5 A....snip....
2oXgSod9
se.                     3600    IN      RRSIG   DNSKEY 5 1 3600
20100515203911 20100509131031 39547 se. g....snip.... uAYDHw==
se.                     3600    IN      RRSIG   DNSKEY 5 1 3600
20100517001830 20100509131031 8779 se. v....snip.... NRwr1A==

;; Query time: 17 msec
;; SERVER: 199.254.63.1#53(199.254.63.1)
;; WHEN: Sun May  9 18:54:10 2010
;; MSG SIZE  rcvd: 1311

One (1) additional announced, while there is not even an additional section.
Maybe this is related to the EDNS0 stuff?

--Pj.


Peter Janssen
Technical Manager

Join us in June! EURid hosts ICANN’s 38th meeting in Brussels.  Find out
more at brussels38.icann.org.

    EURid
    Woluwelaan 150     
    1831 Diegem - Belgium
    TEL.: +32 (0) 2 401 2750
    peter.janssen at eurid.eu 
    http://www.eurid.eu
    



From: bind-users-bounces+peter.janssen=eurid.eu at lists.isc.org
[mailto:bind-users-bounces+peter.janssen=eurid.eu at lists.isc.org] On Behalf
Of Sten Carlsen
Sent: Sunday, May 09, 2010 17:48
To: bind-users at lists.isc.org
Subject: Re: Dig 9.7 DNSSEC output



On 09/05/10 17:24, Peter Janssen wrote: 
Hi,

might be me, but I don't get it.

;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9
  
ADDITIONAL: 9

But as you count to 8, where is number 9.

I seem to be counting as Peter here.



The issue I have with this is, dig announces 9 additional section entries,
while 3 A, 1 AAAA and 4 RRSIG, in my book sums up to 8.

Without DNSSEC, it seems to be able to count correctly...
# dig @ns.nic.se nic.se ns 

; <<>> DiG 9.7.0-P1 <<>> @ns.nic.se nic.se ns
; (2 servers found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4920
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 4
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;nic.se.                                IN      NS

;; ANSWER SECTION:
nic.se.                 3600    IN      NS      ns2.nic.se.
nic.se.                 3600    IN      NS      ns.nic.se.
nic.se.                 3600    IN      NS      ns3.nic.se.

;; ADDITIONAL SECTION:
ns.nic.se.              3600    IN      A       212.247.7.228
ns.nic.se.              3600    IN      AAAA    2a00:801:f0:53::53
ns2.nic.se.             3600    IN      A       194.17.45.54
ns3.nic.se.             60      IN      A       212.247.3.83

;; Query time: 34 msec
;; SERVER: 212.247.7.228#53(212.247.7.228)
;; WHEN: Sun May  9 17:23:51 2010
;; MSG SIZE  rcvd: 153

Am I missing something?
Or is this already reported?  If so, what would be the correct channel?


R.
--Pj.

Peter Janssen
Technical Manager

Join us in June! EURid hosts ICANN’s 38th meeting in Brussels.  Find out
more at brussels38.icann.org.

    EURid
    Woluwelaan 150     
    1831 Diegem - Belgium
    TEL.: +32 (0) 2 401 2750
    peter.janssen at eurid.eu 
    http://www.eurid.eu
    





_______________________________________________
bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
  


-- 
Best regards

Sten Carlsen

No improvements come from shouting:

       "MALE BOVINE MANURE!!!"