Hi Peter,<br><br>In the out put of your dig result , you can see the following section. This section is counted as RR and count will be updated in additional section.<br>;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags: do; udp: 4096<br><br><br><br>Thanks,<br>ramesh<br><br><div class="gmail_quote">On Sun, May 9, 2010 at 11:02 PM, <span dir="ltr"><<a href="mailto:bind-users-request@lists.isc.org">bind-users-request@lists.isc.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Send bind-users mailing list submissions to<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:bind-users-request@lists.isc.org">bind-users-request@lists.isc.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:bind-users-owner@lists.isc.org">bind-users-owner@lists.isc.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of bind-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. RE: Dig 9.7 DNSSEC output (Peter Janssen)<br>
2. Re: Dig 9.7 DNSSEC output (R Dicaire)<br>
3. RE: Dig 9.7 DNSSEC output (Peter Janssen)<br>
4. Re: Dig 9.7 DNSSEC output (Shumon Huque)<br>
5. RE: Dig 9.7 DNSSEC output (Chris Thompson)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 9 May 2010 17:48:34 +0200<br>
From: "Peter Janssen" <<a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a>><br>
Subject: RE: Dig 9.7 DNSSEC output<br>
To: "'R Dicaire'" <<a href="mailto:dicairer@gmail.com">dicairer@gmail.com</a>><br>
Cc: <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
Message-ID: <024201caef8f$150177e0$3f0467a0$@<a href="mailto:janssen@eurid.eu">janssen@eurid.eu</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Hi Rick,<br>
<br>
as per the header of Dig output?<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9<br>
<br>
a part from that, I'm glad that my counting is still up to par :-)<br>
<br>
R.<br>
--Pj.<br>
<br>
Peter Janssen<br>
Technical Manager<br>
<br>
Join us in June! EURid hosts ICANN?s 38th meeting in Brussels.? Find out<br>
more at <a href="http://brussels38.icann.org" target="_blank">brussels38.icann.org</a>.<br>
<br>
??? EURid<br>
??? Woluwelaan 150????<br>
??? 1831 Diegem - Belgium<br>
??? TEL.: +32 (0) 2 401 2750<br>
??? <a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a><br>
??? <a href="http://www.eurid.eu" target="_blank">http://www.eurid.eu</a><br>
???<br>
<br>
<br>
<br>
From: R Dicaire [mailto:<a href="mailto:dicairer@gmail.com">dicairer@gmail.com</a>]<br>
Sent: Sunday, May 09, 2010 17:42<br>
To: Peter Janssen<br>
Cc: <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
Subject: Re: Dig 9.7 DNSSEC output<br>
<br>
On Sun, May 9, 2010 at 11:24 AM, Peter Janssen <<a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a>><br>
wrote:<br>
;; ADDITIONAL SECTION:<br>
<a href="http://ns.nic.se" target="_blank">ns.nic.se</a>. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?A ? ? ? 212.247.7.228<br>
<a href="http://ns.nic.se" target="_blank">ns.nic.se</a>. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?AAAA ? ?2a00:801:f0:53::53<br>
<a href="http://ns2.nic.se" target="_blank">ns2.nic.se</a>. ? ? ? ? ? ? 3600 ? ?IN ? ? ?A ? ? ? 194.17.45.54<br>
<a href="http://ns3.nic.se" target="_blank">ns3.nic.se</a>. ? ? ? ? ? ? 60 ? ? ?IN ? ? ?A ? ? ? 212.247.3.83<br>
<a href="http://ns.nic.se" target="_blank">ns.nic.se</a>. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?RRSIG ? A 5 3 3600 20100517132001<br>
20100507132001 20273 <a href="http://nic.se" target="_blank">nic.se</a>.<br>
TLTnkqESLN7DdoC2urF14ox1JolvUSCySe4oqYfof4ER/ZNNl8DO1P46<br>
mSKpNxf3kNUJWoMkjBjtUgZgiMcVSuD7V6qTHLA2A8tEhnM4pXCeo/yj<br>
kirCEzo3YQzcW56BZVXgVe41K3QT4GpIm0rmTyEy+8ZCe7oeMKFem5PL Ibw=<br>
<a href="http://ns.nic.se" target="_blank">ns.nic.se</a>. ? ? ? ? ? ? ?3600 ? ?IN ? ? ?RRSIG ? AAAA 5 3 3600 20100517132001<br>
20100507132001 20273 <a href="http://nic.se" target="_blank">nic.se</a>.<br>
HcUbk9y1aR9zeHOwNsqTtPL97P+ftyoQVAyTZbuPpr6GEzIsKL8MyQoP<br>
h4qyAkOHFWC2lgZ4xroHemR9OXa3JCLn1UtYE0UbgszUJWSJcQW+2ho3<br>
GIsfEzVfJwMEomhvPuEyVfNxdaP87ITFTfNJcUvEApHCnYHO0RNgeEL0 l/Y=<br>
<a href="http://ns2.nic.se" target="_blank">ns2.nic.se</a>. ? ? ? ? ? ? 3600 ? ?IN ? ? ?RRSIG ? A 5 3 3600 20100517132001<br>
20100507132001 20273 <a href="http://nic.se" target="_blank">nic.se</a>.<br>
fGqc3OIwmaYPFJoRrULGaUIRxGV+i6FJkcSZ4HRJL0x+siwVcTrIb+5t<br>
ER9woGl9sabyXH9H4aHc90ARABer0RodbnQSZDT7SPamDb97UP1ESBs2<br>
Av9N43nr54M/ctLk8EZc1q7GblBK7inf7iY/AQsHTsFv1BWJOAYw+n4N YaM=<br>
<a href="http://ns3.nic.se" target="_blank">ns3.nic.se</a>. ? ? ? ? ? ? 60 ? ? ?IN ? ? ?RRSIG ? A 5 3 60 20100517132001<br>
20100507132001 20273 <a href="http://nic.se" target="_blank">nic.se</a>.<br>
vTil1+1r3dOyV3zHdd53p2O5qnBHfexdwJVjx2E+G5z5FTqa50YRQYfH<br>
JwVHHertJcMo2wek/y2g0GBQJdkFTKwpJZv3IWWp9TYqJ3lCIYzoWxWV<br>
pzc7i+m2Ha3HupVY0e/tOJPKsiJu+LnyH3LJ66WV/xCRDjhZ8N6RONl5 xQU=<br>
<br>
I count 8 RRs. 3 A, 1 AAAA, 4 RRSIG.<br>
<br>
Where are you seeing 9?<br>
<br>
--<br>
aRDy Music/Rick Dicaire<br>
<br>
<a href="http://www.ardynet.com" target="_blank">http://www.ardynet.com</a><br>
<a href="http://linux.ardynet.com" target="_blank">http://linux.ardynet.com</a><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Sun, 9 May 2010 12:00:14 -0400<br>
From: R Dicaire <<a href="mailto:dicairer@gmail.com">dicairer@gmail.com</a>><br>
Subject: Re: Dig 9.7 DNSSEC output<br>
To: Peter Janssen <<a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a>><br>
Cc: <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
Message-ID:<br>
<<a href="mailto:AANLkTilBjeRhDv9kIDa7mS548FaSU_ow6dP85phle1EV@mail.gmail.com">AANLkTilBjeRhDv9kIDa7mS548FaSU_ow6dP85phle1EV@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="windows-1252"<br>
<br>
On Sun, May 9, 2010 at 11:48 AM, Peter Janssen <<a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a>>wrote:<br>
<br>
> as per the header of Dig output?<br>
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9<br>
><br>
<br>
Curious, I too get 9 but only 8 RRs are shown:<br>
<br>
; <<>> DiG 9.7.0-P1 <<>> +dnssec @<a href="http://rdb.ardynet.com" target="_blank">rdb.ardynet.com</a> <a href="http://ardynet.com" target="_blank">ardynet.com</a> ns<br>
; (2 servers found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19752<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 9<br>
;; WARNING: recursion requested but not available<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags: do; udp: 4096<br>
;; QUESTION SECTION:<br>
;<a href="http://ardynet.com" target="_blank">ardynet.com</a>. IN NS<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://ardynet.com" target="_blank">ardynet.com</a>. 10800 IN NS <a href="http://rdb.ardynet.com" target="_blank">rdb.ardynet.com</a>.<br>
<a href="http://ardynet.com" target="_blank">ardynet.com</a>. 10800 IN NS <a href="http://dev.ardynet.com" target="_blank">dev.ardynet.com</a>.<br>
<a href="http://ardynet.com" target="_blank">ardynet.com</a>. 10800 IN RRSIG NS 5 2 10800 20100515100002 20100509100002 60794<br>
<a href="http://ardynet.com" target="_blank">ardynet.com</a>. uEABRGErPScK6zTn8V2aZwWXdC7sc1wh7eFsyGHkwcfGrugsLdFPVSfZ<br>
vetCUVXoOj1OnUNPeO5/cMB8Os0NGg==<br>
<br>
;; ADDITIONAL SECTION:<br>
<a href="http://dev.ardynet.com" target="_blank">dev.ardynet.com</a>. 10800 IN A 74.93.245.186<br>
<a href="http://dev.ardynet.com" target="_blank">dev.ardynet.com</a>. 10800 IN AAAA 2001:470:8:12:def::1000<br>
<a href="http://rdb.ardynet.com" target="_blank">rdb.ardynet.com</a>. 10800 IN A 74.93.245.185<br>
<a href="http://rdb.ardynet.com" target="_blank">rdb.ardynet.com</a>. 10800 IN AAAA 2001:470:e006::1000<br>
<a href="http://dev.ardynet.com" target="_blank">dev.ardynet.com</a>. 10800 IN RRSIG A 5 3 10800 20100515100002 20100509100002<br>
60794 <a href="http://ardynet.com" target="_blank">ardynet.com</a>. OdH4FDSkj8daSKw0ooNX2ZJpjQVtTXI0ev5pblGM0+M/IYccu1fW9Tkk<br>
h9N0PPI7/4C2fpitdBbFGCq14hxocg==<br>
<a href="http://dev.ardynet.com" target="_blank">dev.ardynet.com</a>. 10800 IN RRSIG AAAA 5 3 10800 20100515100002 20100509100002<br>
60794 <a href="http://ardynet.com" target="_blank">ardynet.com</a>. ou2/+po9rUY1l8TYy4u23z0GWBuasEib5U1E1f//MJCQ1XRqOKX9h8y2<br>
Gk6R3+lxXlDdoLtww8E2GpVpEK+U1A==<br>
<a href="http://rdb.ardynet.com" target="_blank">rdb.ardynet.com</a>. 10800 IN RRSIG A 5 3 10800 20100515100002 20100509100002<br>
60794 <a href="http://ardynet.com" target="_blank">ardynet.com</a>. jUJ/1Miq+Y3RwFW8AyfCs6vJ+alynM/gzVIBFdn3SoIFzg3AiV4R8zHl<br>
sOX5xzP2eVEuQwtq6cDWhFqma3cr/A==<br>
<a href="http://rdb.ardynet.com" target="_blank">rdb.ardynet.com</a>. 10800 IN RRSIG AAAA 5 3 10800 20100515100002 20100509100002<br>
60794 <a href="http://ardynet.com" target="_blank">ardynet.com</a>. M9NcSwlhg50H5zRXeB8iKZLFdm1dGmwEg/PIHYgTn9gyoXOcLUWRjK5Q<br>
RnPlqRyHoVdkkHyCFumEkMZVyneu1g==<br>
<br>
<br>
--<br>
aRDy Music/Rick Dicaire<br>
<br>
<a href="http://www.ardynet.com" target="_blank">http://www.ardynet.com</a><br>
<a href="http://linux.ardynet.com" target="_blank">http://linux.ardynet.com</a><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.isc.org/pipermail/bind-users/attachments/20100509/aae95b92/attachment-0001.html" target="_blank">https://lists.isc.org/pipermail/bind-users/attachments/20100509/aae95b92/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Sun, 9 May 2010 18:56:56 +0200<br>
From: "Peter Janssen" <<a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a>><br>
Subject: RE: Dig 9.7 DNSSEC output<br>
To: "'Sten Carlsen'" <<a href="mailto:stenc@s-carlsen.dk">stenc@s-carlsen.dk</a>>, <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>><br>
Message-ID: <024c01caef98$a24ccc90$e6e665b0$@<a href="mailto:janssen@eurid.eu">janssen@eurid.eu</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
Or this one :<br>
# dig @<a href="http://j.ns.se" target="_blank">j.ns.se</a> se. dnskey +dnssec<br>
<br>
; <<>> DiG 9.7.0-P1 <<>> @<a href="http://j.ns.se" target="_blank">j.ns.se</a> se. dnskey +dnssec<br>
; (2 servers found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24743<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1<br>
;; WARNING: recursion requested but not available<br>
<br>
;; OPT PSEUDOSECTION:<br>
; EDNS: version: 0, flags: do; udp: 4096<br>
;; QUESTION SECTION:<br>
;se. IN DNSKEY<br>
<br>
;; ANSWER SECTION:<br>
se. 3600 IN DNSKEY 257 3 5 A....snip...<br>
EaRlZigUCp8=<br>
se. 3600 IN DNSKEY 257 3 5 A....snip....<br>
7TKYyQgsTlc=<br>
se. 3600 IN DNSKEY 256 3 5 A....snip....<br>
2oXgSod9<br>
se. 3600 IN RRSIG DNSKEY 5 1 3600<br>
20100515203911 20100509131031 39547 se. g....snip.... uAYDHw==<br>
se. 3600 IN RRSIG DNSKEY 5 1 3600<br>
20100517001830 20100509131031 8779 se. v....snip.... NRwr1A==<br>
<br>
;; Query time: 17 msec<br>
;; SERVER: 199.254.63.1#53(199.254.63.1)<br>
;; WHEN: Sun May 9 18:54:10 2010<br>
;; MSG SIZE rcvd: 1311<br>
<br>
One (1) additional announced, while there is not even an additional section.<br>
Maybe this is related to the EDNS0 stuff?<br>
<br>
--Pj.<br>
<br>
<br>
Peter Janssen<br>
Technical Manager<br>
<br>
Join us in June! EURid hosts ICANN?s 38th meeting in Brussels.? Find out<br>
more at <a href="http://brussels38.icann.org" target="_blank">brussels38.icann.org</a>.<br>
<br>
??? EURid<br>
??? Woluwelaan 150????<br>
??? 1831 Diegem - Belgium<br>
??? TEL.: +32 (0) 2 401 2750<br>
??? <a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a><br>
??? <a href="http://www.eurid.eu" target="_blank">http://www.eurid.eu</a><br>
???<br>
<br>
<br>
<br>
From: bind-users-bounces+peter.janssen=<a href="http://eurid.eu" target="_blank">eurid.eu</a>@<a href="http://lists.isc.org" target="_blank">lists.isc.org</a><br>
[mailto:<a href="mailto:bind-users-bounces%2Bpeter.janssen">bind-users-bounces+peter.janssen</a>=<a href="http://eurid.eu" target="_blank">eurid.eu</a>@<a href="http://lists.isc.org" target="_blank">lists.isc.org</a>] On Behalf<br>
Of Sten Carlsen<br>
Sent: Sunday, May 09, 2010 17:48<br>
To: <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
Subject: Re: Dig 9.7 DNSSEC output<br>
<br>
<br>
<br>
On 09/05/10 17:24, Peter Janssen wrote:<br>
Hi,<br>
<br>
might be me, but I don't get it.<br>
<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9<br>
<br>
ADDITIONAL: 9<br>
<br>
But as you count to 8, where is number 9.<br>
<br>
I seem to be counting as Peter here.<br>
<br>
<br>
<br>
The issue I have with this is, dig announces 9 additional section entries,<br>
while 3 A, 1 AAAA and 4 RRSIG, in my book sums up to 8.<br>
<br>
Without DNSSEC, it seems to be able to count correctly...<br>
# dig @<a href="http://ns.nic.se" target="_blank">ns.nic.se</a> <a href="http://nic.se" target="_blank">nic.se</a> ns<br>
<br>
; <<>> DiG 9.7.0-P1 <<>> @<a href="http://ns.nic.se" target="_blank">ns.nic.se</a> <a href="http://nic.se" target="_blank">nic.se</a> ns<br>
; (2 servers found)<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4920<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 4<br>
;; WARNING: recursion requested but not available<br>
<br>
;; QUESTION SECTION:<br>
;<a href="http://nic.se" target="_blank">nic.se</a>. IN NS<br>
<br>
;; ANSWER SECTION:<br>
<a href="http://nic.se" target="_blank">nic.se</a>. 3600 IN NS <a href="http://ns2.nic.se" target="_blank">ns2.nic.se</a>.<br>
<a href="http://nic.se" target="_blank">nic.se</a>. 3600 IN NS <a href="http://ns.nic.se" target="_blank">ns.nic.se</a>.<br>
<a href="http://nic.se" target="_blank">nic.se</a>. 3600 IN NS <a href="http://ns3.nic.se" target="_blank">ns3.nic.se</a>.<br>
<br>
;; ADDITIONAL SECTION:<br>
<a href="http://ns.nic.se" target="_blank">ns.nic.se</a>. 3600 IN A 212.247.7.228<br>
<a href="http://ns.nic.se" target="_blank">ns.nic.se</a>. 3600 IN AAAA 2a00:801:f0:53::53<br>
<a href="http://ns2.nic.se" target="_blank">ns2.nic.se</a>. 3600 IN A 194.17.45.54<br>
<a href="http://ns3.nic.se" target="_blank">ns3.nic.se</a>. 60 IN A 212.247.3.83<br>
<br>
;; Query time: 34 msec<br>
;; SERVER: 212.247.7.228#53(212.247.7.228)<br>
;; WHEN: Sun May 9 17:23:51 2010<br>
;; MSG SIZE rcvd: 153<br>
<br>
Am I missing something?<br>
Or is this already reported? If so, what would be the correct channel?<br>
<br>
<br>
R.<br>
--Pj.<br>
<br>
Peter Janssen<br>
Technical Manager<br>
<br>
Join us in June! EURid hosts ICANN?s 38th meeting in Brussels.? Find out<br>
more at <a href="http://brussels38.icann.org" target="_blank">brussels38.icann.org</a>.<br>
<br>
??? EURid<br>
??? Woluwelaan 150????<br>
??? 1831 Diegem - Belgium<br>
??? TEL.: +32 (0) 2 401 2750<br>
??? <a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a><br>
??? <a href="http://www.eurid.eu" target="_blank">http://www.eurid.eu</a><br>
???<br>
<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
<br>
<br>
<br>
--<br>
Best regards<br>
<br>
Sten Carlsen<br>
<br>
No improvements come from shouting:<br>
<br>
"MALE BOVINE MANURE!!!"<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Sun, 9 May 2010 13:23:37 -0400<br>
From: Shumon Huque <<a href="mailto:shuque@isc.upenn.edu">shuque@isc.upenn.edu</a>><br>
Subject: Re: Dig 9.7 DNSSEC output<br>
To: Peter Janssen <<a href="mailto:peter.janssen@eurid.eu">peter.janssen@eurid.eu</a>><br>
Cc: <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
Message-ID: <<a href="mailto:20100509172337.GA3333@isc.upenn.edu">20100509172337.GA3333@isc.upenn.edu</a>><br>
Content-Type: text/plain; charset=unknown-8bit<br>
<br>
On Sun, May 09, 2010 at 05:48:34PM +0200, Peter Janssen wrote:<br>
> Hi Rick,<br>
><br>
> as per the header of Dig output?<br>
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9<br>
><br>
> a part from that, I'm glad that my counting is still up to par :-)<br>
><br>
> R.<br>
> --Pj.<br>
><br>
> Peter Janssen<br>
> Technical Manager<br>
<br>
The EDNS0 record is a pseudo RR that appears in the additional<br>
section. dig reports that separately rather than in the additional<br>
section, but the count of records in the header is correct.<br>
<br>
--<br>
Shumon Huque<br>
University of Pennsylvania.<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: 09 May 2010 18:32:18 +0100<br>
From: Chris Thompson <<a href="mailto:cet1@cam.ac.uk">cet1@cam.ac.uk</a>><br>
Subject: RE: Dig 9.7 DNSSEC output<br>
To: Bind Users Mailing List <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>><br>
Message-ID: <<a href="mailto:Prayer.1.3.2.1005091832180.19986@hermes-2.csi.cam.ac.uk">Prayer.1.3.2.1005091832180.19986@hermes-2.csi.cam.ac.uk</a>><br>
Content-Type: text/plain; format=flowed; charset=ISO-8859-1<br>
<br>
On May 9 2010, Peter Janssen wrote:<br>
<br>
>Maybe this is related to the EDNS0 stuff?<br>
<br>
Precisely so. dig does not display the OPT RR in the reply (or that<br>
in the question if you use +qr, for that matter), but it's there<br>
in the additional section as you can see from the count. You don't<br>
have to use +dnssec to get this apparent-mismatch effect: +buf=...<br>
or +edns=... are enough.<br>
<br>
--<br>
Chris Thompson<br>
Email: <a href="mailto:cet1@cam.ac.uk">cet1@cam.ac.uk</a><br>
<br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
<br>
End of bind-users Digest, Vol 512, Issue 3<br>
******************************************<br>
</blockquote></div><br>