<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">The servers are running Linux with bind-9.11.X. I was able to replicate the issue on a non-production secondary server. Not sure if I mentioned this but using dig to pull a zone transfer works. Very odd.
More to follow. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:"Calibri",sans-serif;color:black">From:
</span></b><span style="font-family:"Calibri",sans-serif;color:black">bind-users <bind-users-bounces@lists.isc.org> on behalf of Ben Scott <bscott@isc.org><br>
<b>Organization: </b>Internet Systems Corporation<br>
<b>Date: </b>Thursday, July 9, 2026 at 1:22 PM<br>
<b>To: </b>"bind-users@lists.isc.org" <bind-users@lists.isc.org><br>
<b>Subject: </b>Re: send: socket is not connected<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">CAUTION: This email originated from outside of Los Rios. Do not click links or open attachments unless you recognize the sender and know the content is safe. To mark the message as SPAM, right click the message, select “Junk” , and then
select “Block Sender”.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[Clerical note: The following message was originally sent 2026 July 08<o:p></o:p></p>
<p class="MsoNormal">at 21:16 UTC. I meant to send this to the list, but accidentally sent a<o:p></o:p></p>
<p class="MsoNormal">direct reply instead. Which Mike's permission, I am returning the<o:p></o:p></p>
<p class="MsoNormal">conversation to the list, so others can contribute and/or benefit.]<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">On 7/8/26 16:52, Muzinich, Mike wrote:<o:p></o:p></p>
<p class="MsoNormal">> The slave shows:<o:p></o:p></p>
<p class="MsoNormal">> failed while receiving responses: connection reset<o:p></o:p></p>
<p class="MsoNormal">> Transfer status: connection reset<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> This means the secondary tried to read data from the socket, and the<o:p></o:p></p>
<p class="MsoNormal">OS returned ECONNRESET. The OS generally does that when TCP gets a<o:p></o:p></p>
<p class="MsoNormal">packet with the RST flag. That generally happens when the remote host<o:p></o:p></p>
<p class="MsoNormal">received a packet after the socket was closed (by either end).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> While the master shows:<o:p></o:p></p>
<p class="MsoNormal">> send: socket is not connected<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> This means the primary tried to send data to the socket, and the OS<o:p></o:p></p>
<p class="MsoNormal">returned ENOTCONN. The OS generally does that when the socket was<o:p></o:p></p>
<p class="MsoNormal">closed by something other than the program, or was never connected in<o:p></o:p></p>
<p class="MsoNormal">the first place. Since the primary is seeing the transfer start<o:p></o:p></p>
<p class="MsoNormal">(otherwise it could not complain about it failing), we know it was<o:p></o:p></p>
<p class="MsoNormal">connected at some point. So most likely something is causing the<o:p></o:p></p>
<p class="MsoNormal">primary to close the socket.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">> Anybody seen this before?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Network transport problems are fairly common. Unfortunately there is<o:p></o:p></p>
<p class="MsoNormal">nowhere near enough information to provide a diagnosis for your specific<o:p></o:p></p>
<p class="MsoNormal">problem.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Things that might help include:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">1. Distribution/OS, OS version, and kernel version, for both servers<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">2. Version identification of BIND from each server (as given by<o:p></o:p></p>
<p class="MsoNormal">"named -v")<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">3. Relevant config file extracts (any options relating to network,<o:p></o:p></p>
<p class="MsoNormal">network access control, and the zone in question)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">4. Log file extracts, from named, for both servers, from during the transfer<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">5. Consider temporarily increasing the logging level to get more detail.<o:p></o:p></p>
<p class="MsoNormal"> Be aware that increasing logging can have a significant performance<o:p></o:p></p>
<p class="MsoNormal">impact.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">6. Check the general system logs for any problems around the same time<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">7. Check the error counters on the network interfaces and switch ports<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">8. Check logs and configuration of all firewalls/etc, both on the<o:p></o:p></p>
<p class="MsoNormal">servers themselves, and any intermediate devices<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">9. If all else fails, perform packet captures of the zone transfer<o:p></o:p></p>
<p class="MsoNormal">attempt, taken from both the primary and secondary, and if possible, an<o:p></o:p></p>
<p class="MsoNormal">intermediate point (router, switch, firewall, etc). Upload the saved<o:p></o:p></p>
<p class="MsoNormal">packet capture somewhere public, and post the URLs.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> -- Ben<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal">Any opinions expressed in this message are those of the author alone.<o:p></o:p></p>
<p class="MsoNormal">All information is provided without warranty of any kind.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal">Visit <a href="https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,b7prjWCRl2Kg1k2ibtOKWF0HqPaHQXSEpwq2abM4XcreUOr3XDqjQJ8Htzdn3GZ-8rmEcRJeIyE_YlKAi-LiN30rwvGD4J9-x2gFMtCLNlIqmu26LA,,&typo=1">
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flists.isc.org%2fmailman%2flistinfo%2fbind-users&c=E,1,b7prjWCRl2Kg1k2ibtOKWF0HqPaHQXSEpwq2abM4XcreUOr3XDqjQJ8Htzdn3GZ-8rmEcRJeIyE_YlKAi-LiN30rwvGD4J9-x2gFMtCLNlIqmu26LA,,&typo=1</a> to unsubscribe from this
list.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>