Message parser reports malformed message packet

Mark Andrews marka at isc.org
Tue Nov 5 13:05:15 UTC 2013


In message <20131105121905.GA22673 at fantomas.sk>, Matus UHLAR - fantomas writes:
> On 05.11.13 10:02, F=E1bio Gomes wrote:
> >I'm gonna try to contact the domain owners as well, but I noticed my
> > enterprise DNS can get a correct answer for that domain.  Is there any way
> > I can force different response from localweb servers until I got this
> > permanently fixed?  Like force UDP packet sizes or disable EDNS for that
> > domain?  Could you also, please, share the tcpdump line you used to get
> > that package details?
> 
> seems their nameservers are working correctly now, with or without TCP (even
> with EDNS0)

No they are not.  EDNS hides the problem.  If you use plain DNS the
problem is still visible.

Mark

;; Warning: Message parser reports malformed message packet.
;; Truncated, retrying in TCP mode.

; <<>> DiG 9.10.0a1 <<>> www.sondait.tasker.com.br +noedns @201.76.40.2 +norec
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45899
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 13

;; QUESTION SECTION:
;www.sondait.tasker.com.br.	IN	A

;; ANSWER SECTION:
www.sondait.tasker.com.br. 3600	IN	CNAME	trial-1910070769.sa-east-1.elb.amazonaws.com.

;; AUTHORITY SECTION:
.			518400	IN	NS	a.root-servers.net.
.			518400	IN	NS	b.root-servers.net.
.			518400	IN	NS	c.root-servers.net.
.			518400	IN	NS	d.root-servers.net.
.			518400	IN	NS	e.root-servers.net.
.			518400	IN	NS	f.root-servers.net.
.			518400	IN	NS	g.root-servers.net.
.			518400	IN	NS	h.root-servers.net.
.			518400	IN	NS	i.root-servers.net.
.			518400	IN	NS	j.root-servers.net.
.			518400	IN	NS	k.root-servers.net.
.			518400	IN	NS	l.root-servers.net.
.			518400	IN	NS	m.root-servers.net.

;; ADDITIONAL SECTION:
a.root-servers.net.	3600000	IN	A	198.41.0.4
b.root-servers.net.	3600000	IN	A	192.228.79.201
c.root-servers.net.	3600000	IN	A	192.33.4.12
d.root-servers.net.	3600000	IN	A	128.8.10.90
e.root-servers.net.	3600000	IN	A	192.203.230.10
f.root-servers.net.	3600000	IN	A	192.5.5.241
g.root-servers.net.	3600000	IN	A	192.112.36.4
h.root-servers.net.	3600000	IN	A	128.63.2.53
i.root-servers.net.	3600000	IN	A	192.36.148.17
j.root-servers.net.	3600000	IN	A	192.58.128.30
k.root-servers.net.	3600000	IN	A	193.0.14.129
l.root-servers.net.	3600000	IN	A	198.32.64.12
m.root-servers.net.	3600000	IN	A	202.12.27.33

;; Query time: 819 msec
;; SERVER: 201.76.40.2#53(201.76.40.2)
;; WHEN: Wed Nov 06 00:03:39 EST 2013
;; MSG SIZE  rcvd: 520


> -- =
> 
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> I'm not interested in your website anymore.
> If you need cookies, bake them yourself.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscri=
> be from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind-users mailing list