Message parser reports malformed message packet
Mark Andrews
marka at isc.org
Tue Nov 5 13:05:15 UTC 2013
In message <20131105121905.GA22673 at fantomas.sk>, Matus UHLAR - fantomas writes:
> On 05.11.13 10:02, F=E1bio Gomes wrote:
> >I'm gonna try to contact the domain owners as well, but I noticed my
> > enterprise DNS can get a correct answer for that domain. Is there any way
> > I can force different response from localweb servers until I got this
> > permanently fixed? Like force UDP packet sizes or disable EDNS for that
> > domain? Could you also, please, share the tcpdump line you used to get
> > that package details?
>
> seems their nameservers are working correctly now, with or without TCP (even
> with EDNS0)
No they are not. EDNS hides the problem. If you use plain DNS the
problem is still visible.
Mark
;; Warning: Message parser reports malformed message packet.
;; Truncated, retrying in TCP mode.
; <<>> DiG 9.10.0a1 <<>> www.sondait.tasker.com.br +noedns @201.76.40.2 +norec
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45899
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 13
;; QUESTION SECTION:
;www.sondait.tasker.com.br. IN A
;; ANSWER SECTION:
www.sondait.tasker.com.br. 3600 IN CNAME trial-1910070769.sa-east-1.elb.amazonaws.com.
;; AUTHORITY SECTION:
. 518400 IN NS a.root-servers.net.
. 518400 IN NS b.root-servers.net.
. 518400 IN NS c.root-servers.net.
. 518400 IN NS d.root-servers.net.
. 518400 IN NS e.root-servers.net.
. 518400 IN NS f.root-servers.net.
. 518400 IN NS g.root-servers.net.
. 518400 IN NS h.root-servers.net.
. 518400 IN NS i.root-servers.net.
. 518400 IN NS j.root-servers.net.
. 518400 IN NS k.root-servers.net.
. 518400 IN NS l.root-servers.net.
. 518400 IN NS m.root-servers.net.
;; ADDITIONAL SECTION:
a.root-servers.net. 3600000 IN A 198.41.0.4
b.root-servers.net. 3600000 IN A 192.228.79.201
c.root-servers.net. 3600000 IN A 192.33.4.12
d.root-servers.net. 3600000 IN A 128.8.10.90
e.root-servers.net. 3600000 IN A 192.203.230.10
f.root-servers.net. 3600000 IN A 192.5.5.241
g.root-servers.net. 3600000 IN A 192.112.36.4
h.root-servers.net. 3600000 IN A 128.63.2.53
i.root-servers.net. 3600000 IN A 192.36.148.17
j.root-servers.net. 3600000 IN A 192.58.128.30
k.root-servers.net. 3600000 IN A 193.0.14.129
l.root-servers.net. 3600000 IN A 198.32.64.12
m.root-servers.net. 3600000 IN A 202.12.27.33
;; Query time: 819 msec
;; SERVER: 201.76.40.2#53(201.76.40.2)
;; WHEN: Wed Nov 06 00:03:39 EST 2013
;; MSG SIZE rcvd: 520
> -- =
>
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> I'm not interested in your website anymore.
> If you need cookies, bake them yourself.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscri=
> be from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list