[dns-operations] k.root-servers.net

[Roy Arends]

On Apr 10, 2007, at 12:17 PM, Simon Waters wrote:

> Probably nothing, but I've had a few message over the last 2 weeks,  
> all
> about "k.root-servers.net" from recursive server running BIND 9.2.4  
> (Debian
> Sarge).
>
> Just me? Known issue?
>
> Apr 10 08:28:04 localhost kernel: UDP: short packet:  
> 193.0.14.129:53 63027/117
> to 212.24.80.26:20
>
> traceroute 193.0.14.129
> traceroute to 193.0.14.129 (193.0.14.129), 30 hops max, 38 byte  
> packets
>  1  h1.zynet2.co.uk (212.24.80.1)  1.991 ms  1.317 ms  3.590 ms
>  2  eb-zynet.gw.eurobell.net (212.24.69.85)  5.997 ms  12.187 ms   
> 12.069 ms
>  3  pc-62-30-132-37-nm.blueyonder.co.uk (62.30.132.37)  12.246 ms   
> 25.029 ms
> 12.474 ms
>  4  195.188.231.6 (195.188.231.6)  11.036 ms  12.274 ms  12.873 ms
>  5  194.117.136.142 (194.117.136.142)  8.205 ms  27.602 ms  24.222 ms
>  6  194.117.148.163 (194.117.148.163)  24.739 ms  26.209 ms  24.595 ms
>  7  so-0-0-0.mpr1.lhr3.uk.above.net (64.125.27.226)  12.245 ms   
> 17.874 ms
> 12.075 ms
>  8  213-161-79-50.lhr.above.net (213.161.79.50)  12.451 ms  12.240  
> ms  12.673
> ms
>  9  k.root-servers.net (193.0.14.129)  12.455 ms  12.589 ms  15.708 ms

Haven't seen this before.

 From the log it appears that the packet received was 117 bytes,  
though 63027 was advertised in the UDP header.

 From 'hostname.bind chaos txt' it appears that the k.root anycast  
node I'm talking to is 'k2.linx'. It appears that this node is an NSD  
2.2.1 instance.

Strange that something has mangled udp size.

Roy