[dns-operations] EDNS1 tests in the ednscomp tool
Mark Andrews
marka at isc.org
Thu May 31 12:21:59 UTC 2018
> On 31 May 2018, at 9:01 pm, Chris Thompson <cet1 at cam.ac.uk> wrote:
>
> There seems to be something a bit amiss in the results reported for the
> EDNS1 tests. See, for example this test on ui-dns.biz:
>
> https://ednscomp.isc.org/ednscomp/0d84de4b75
>
> The edns1 and edsn1opt tests for some servers report a failure as "status,soa",
> i.e. status wrong and SOA unexpectedly present. But doing the dig's by hand,
> it seems to me that the servers do give BADVERS as they should, and the only
> thing wrong is that they also copy the query section in the response.
The testing does several of queries in parallel. This causes full answer
caches to return wrong answers when the cache doesn’t look at all of the
properties of the request. This may or may not be the cause in this case but
is one possible explanation.
The packet trace show the error.
ui-dns.biz. @217.160.81.195 (ns-biz.ui-dns.biz.): dns=ok edns=ok edns1=noerror,badversion,soa edns at 512=ok ednsopt=ok edns1opt=noerror,badversion,soa do=ok ednsflags=ok optlist=ok,nsid signed=ok ednstcp=ok
% tcpdump -nX host 217.160.81.195
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on en0, link-type EN10MB (Ethernet), capture size 262144 bytes
22:04:45.215785 IP 172.30.42.91.58741 > 217.160.81.195.53: 12715 SOA? ui-dns.biz. (28)
0x0000: 4500 0038 7e4d 0000 4011 fa8a ac1e 2a5b E..8~M.. at .....*[
0x0010: d9a0 51c3 e575 0035 0024 c2ec 31ab 0000 ..Q..u.5.$..1...
0x0020: 0001 0000 0000 0000 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 biz.....
22:04:45.215936 IP 172.30.42.91.58741 > 217.160.81.195.53: 5390 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 4308 0000 4011 35c5 ac1e 2a5b E..CC... at .5...*[
0x0010: d9a0 51c3 e575 0035 002f b662 150e 0000 ..Q..u.5./.b....
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 0000 00 ...
22:04:45.216020 IP 172.30.42.91.58741 > 217.160.81.195.53: 11775 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 4e43 0000 4011 2a8a ac1e 2a5b E..CNC.. at .*...*[
0x0010: d9a0 51c3 e575 0035 002f 9c71 2dff 0000 ..Q..u.5./.q-...
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0100 biz.......).....
0x0040: 0000 00 ...
22:04:45.216111 IP 172.30.42.91.58741 > 217.160.81.195.53: 53230 [1au] DNSKEY? ui-dns.biz. (39)
0x0000: 4500 0043 e936 0000 4011 8f96 ac1e 2a5b E..C.6.. at .....*[
0x0010: d9a0 51c3 e575 0035 002f fb65 cfee 0000 ..Q..u.5./.e....
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0030 0001 0000 2902 0000 0000 biz..0....).....
0x0040: 0000 00 ...
22:04:45.216190 IP 172.30.42.91.58741 > 217.160.81.195.53: 46482 [1au] SOA? ui-dns.biz. (43)
0x0000: 4500 0047 09d7 0000 4011 6ef2 ac1e 2a5b E..G.... at .n...*[
0x0010: d9a0 51c3 e575 0035 0033 add5 b592 0000 ..Q..u.5.3......
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 0000 0400 6400 00 ....d..
22:04:45.216269 IP 172.30.42.91.58741 > 217.160.81.195.53: 25824 [1au] SOA? ui-dns.biz. (43)
0x0000: 4500 0047 f3f4 0000 4011 84d4 ac1e 2a5b E..G.... at .....*[
0x0010: d9a0 51c3 e575 0035 0033 fd87 64e0 0000 ..Q..u.5.3..d...
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0100 biz.......).....
0x0040: 0000 0400 6400 00 ....d..
22:04:45.216350 IP 172.30.42.91.58741 > 217.160.81.195.53: 17979 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 ad15 0000 4011 cbb7 ac1e 2a5b E..C.... at .....*[
0x0010: d9a0 51c3 e575 0035 002f 84b5 463b 0000 ..Q..u.5./..F;..
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0080 biz.......).....
0x0040: 0000 00 ...
22:04:45.216407 IP 172.30.42.91.58741 > 217.160.81.195.53: 17380 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 1b50 0000 4011 5d7d ac1e 2a5b E..C.P.. at .]}..*[
0x0010: d9a0 51c3 e575 0035 002f 078c 43e4 0000 ..Q..u.5./..C...
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 8000 00 ...
22:04:45.216495 IP 172.30.42.91.58741 > 217.160.81.195.53: 15173 [1au] SOA? ui-dns.biz. (67)
0x0000: 4500 005f 7df6 0000 4011 faba ac1e 2a5b E.._}... at .....*[
0x0010: d9a0 51c3 e575 0035 004b 34e3 3b45 0000 ..Q..u.5.K4.;E..
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 0000 1c00 0300 0000 0800 0400 0100 0000 ................
0x0050: 0900 0000 0a00 0801 0203 0405 0607 08 ...............
22:04:45.216653 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [SEW], seq 696818314, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216614694 ecr 0,sackOK,eol], length 0
0x0000: 4500 0040 d0b7 4000 4006 6823 ac1e 2a5b E.. at ..@. at .h#..*[
0x0010: d9a0 51c3 f30d 0035 2988 9a8a 0000 0000 ..Q....5).......
0x0020: b0c2 ffff 28fb 0000 0204 05b4 0103 0305 ....(...........
0x0030: 0101 080a 0ce9 4726 0000 0000 0402 0000 ......G&........
22:04:46.217929 IP 172.30.42.91.58741 > 217.160.81.195.53: 12715 SOA? ui-dns.biz. (28)
0x0000: 4500 0038 bc2f 0000 4011 bca8 ac1e 2a5b E..8./.. at .....*[
0x0010: d9a0 51c3 e575 0035 0024 c2ec 31ab 0000 ..Q..u.5.$..1...
0x0020: 0001 0000 0000 0000 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 biz.....
22:04:46.217939 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [S], seq 696818314, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216615695 ecr 0,sackOK,eol], length 0
0x0000: 4500 0040 200f 4000 4006 18cc ac1e 2a5b E.. at ..@. at .....*[
0x0010: d9a0 51c3 f30d 0035 2988 9a8a 0000 0000 ..Q....5).......
0x0020: b002 ffff 25d2 0000 0204 05b4 0103 0305 ....%...........
0x0030: 0101 080a 0ce9 4b0f 0000 0000 0402 0000 ......K.........
22:04:46.217940 IP 172.30.42.91.58741 > 217.160.81.195.53: 5390 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 a168 0000 4011 d764 ac1e 2a5b E..C.h.. at ..d..*[
0x0010: d9a0 51c3 e575 0035 002f b662 150e 0000 ..Q..u.5./.b....
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 0000 00 ...
22:04:46.218145 IP 172.30.42.91.58741 > 217.160.81.195.53: 11775 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 8000 0000 4011 f8cc ac1e 2a5b E..C.... at .....*[
0x0010: d9a0 51c3 e575 0035 002f 9c71 2dff 0000 ..Q..u.5./.q-...
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0100 biz.......).....
0x0040: 0000 00 ...
22:04:46.218146 IP 172.30.42.91.58741 > 217.160.81.195.53: 53230 [1au] DNSKEY? ui-dns.biz. (39)
0x0000: 4500 0043 edb5 0000 4011 8b17 ac1e 2a5b E..C.... at .....*[
0x0010: d9a0 51c3 e575 0035 002f fb65 cfee 0000 ..Q..u.5./.e....
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0030 0001 0000 2902 0000 0000 biz..0....).....
0x0040: 0000 00 ...
22:04:46.218148 IP 172.30.42.91.58741 > 217.160.81.195.53: 46482 [1au] SOA? ui-dns.biz. (43)
0x0000: 4500 0047 cef2 0000 4011 a9d6 ac1e 2a5b E..G.... at .....*[
0x0010: d9a0 51c3 e575 0035 0033 add5 b592 0000 ..Q..u.5.3......
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 0000 0400 6400 00 ....d..
22:04:46.218148 IP 172.30.42.91.58741 > 217.160.81.195.53: 25824 [1au] SOA? ui-dns.biz. (43)
0x0000: 4500 0047 9fb8 0000 4011 d910 ac1e 2a5b E..G.... at .....*[
0x0010: d9a0 51c3 e575 0035 0033 fd87 64e0 0000 ..Q..u.5.3..d...
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0100 biz.......).....
0x0040: 0000 0400 6400 00 ....d..
22:04:46.218149 IP 172.30.42.91.58741 > 217.160.81.195.53: 17979 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 1c1d 0000 4011 5cb0 ac1e 2a5b E..C.... at .\...*[
0x0010: d9a0 51c3 e575 0035 002f 84b5 463b 0000 ..Q..u.5./..F;..
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0080 biz.......).....
0x0040: 0000 00 ...
22:04:46.218149 IP 172.30.42.91.58741 > 217.160.81.195.53: 17380 [1au] SOA? ui-dns.biz. (39)
0x0000: 4500 0043 be16 0000 4011 bab6 ac1e 2a5b E..C.... at .....*[
0x0010: d9a0 51c3 e575 0035 002f 078c 43e4 0000 ..Q..u.5./..C...
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 8000 00 ...
22:04:46.218149 IP 172.30.42.91.58741 > 217.160.81.195.53: 15173 [1au] SOA? ui-dns.biz. (67)
0x0000: 4500 005f dfd7 0000 4011 98d9 ac1e 2a5b E.._.... at .....*[
0x0010: d9a0 51c3 e575 0035 004b 34e3 3b45 0000 ..Q..u.5.K4.;E..
0x0020: 0001 0000 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 0000 2910 0000 0000 biz.......).....
0x0040: 0000 1c00 0300 0000 0800 0400 0100 0000 ................
0x0050: 0900 0000 0a00 0801 0203 0405 0607 08 ...............
22:04:46.563967 IP 217.160.81.195.53 > 172.30.42.91.58741: 12715*- 1/0/0 SOA (88)
0x0000: 4500 0074 678b 4000 3211 df10 d9a0 51c3 E..tg. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 0060 1d7e 31ab 8400 ..*[.5.u.`.~1...
0x0020: 0001 0001 0000 0000 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 ...X
22:04:46.563975 IP 217.160.81.195.53 > 172.30.42.91.58741: 53230*- 0/1/1 (99)
0x0000: 4500 007f 678c 4000 3211 df04 d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b d1aa cfee 8400 ..*[.5.u.k......
0x0020: 0001 0000 0001 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0030 0001 c00c 0006 0001 0000 biz..0..........
0x0040: 0258 0030 066e 732d 6269 7ac0 0c08 646e .X.0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 00 ...X..)........
22:04:46.563977 IP 217.160.81.195.53 > 172.30.42.91.58741: 25824*- 1/0/1 SOA (99)
0x0000: 4500 007f 678f 4000 3211 df01 d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b 312b 64e0 8400 ..*[.5.u.k1+d...
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 00 ...X..)........
22:04:46.564015 IP 217.160.81.195.53 > 172.30.42.91.58741: 11775*- 1/0/1 SOA (99)
0x0000: 4500 007f 678e 4000 3211 df02 d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b 680c 2dff 8400 ..*[.5.u.kh.-...
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 00 ...X..)........
22:04:46.564501 IP 217.160.81.195.53 > 172.30.42.91.58741: 17380*- 1/0/1 SOA (99)
0x0000: 4500 007f 6790 4000 3211 df00 d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b 5227 43e4 8400 ..*[.5.u.kR'C...
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 00 ...X..)........
22:04:46.564953 IP 217.160.81.195.53 > 172.30.42.91.58741: 46482*- 1/0/1 SOA (99)
0x0000: 4500 007f 6791 4000 3211 deff d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b e078 b592 8400 ..*[.5.u.k.x....
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 00 ...X..)........
22:04:46.564957 IP 217.160.81.195.53 > 172.30.42.91.58741: 17979*- 1/0/1 SOA (99)
0x0000: 4500 007f 6792 4000 3211 defe d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b 4f50 463b 8400 ..*[.5.u.kOPF;..
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0080 0000 00 ...X..)........
22:04:46.564992 IP 217.160.81.195.53 > 172.30.42.91.58741: 5390*- 1/0/1 SOA (99)
0x0000: 4500 007f 678d 4000 3211 df03 d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 006b 80fd 150e 8400 ..*[.5.u.k......
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 00 ...X..)........
22:04:46.565001 IP 217.160.81.195.53 > 172.30.42.91.58741: 15173*- 1/0/1 SOA (133)
0x0000: 4500 00a1 6793 4000 3211 dedb d9a0 51c3 E...g. at .2.....Q.
0x0010: ac1e 2a5b 0035 e575 008d b720 3b45 8400 ..*[.5.u....;E..
0x0020: 0001 0001 0000 0001 0675 692d 646e 7303 .........ui-dns.
0x0030: 6269 7a00 0006 0001 c00c 0006 0001 0000 biz.............
0x0040: 0e10 0030 066e 732d 6269 7ac0 0c08 646e ...0.ns-biz...dn
0x0050: 7361 646d 696e 0531 756e 6431 0264 6500 sadmin.1und1.de.
0x0060: 77dd c293 0000 7080 0000 1c20 0009 3a80 w.....p.......:.
0x0070: 0000 0258 0000 2906 9000 0000 0000 2200 ...X..).......".
0x0080: 0300 1e64 6e73 2d70 7562 2d66 722d 6372 ...dns-pub-fr-cr
0x0090: 622d 6276 3032 2e73 6572 7665 722e 6c61 b-bv02.server.la
0x00a0: 6e n
22:04:46.565002 IP 217.160.81.195.53 > 172.30.42.91.62221: Flags [S.E], seq 1807717416, ack 696818315, win 28960, options [mss 1460,sackOK,TS val 1157881528 ecr 216614694,nop,wscale 7], length 0
0x0000: 4500 003c 0000 4000 3006 48df d9a0 51c3 E..<.. at .0.H...Q.
0x0010: ac1e 2a5b 0035 f30d 6bbf 9428 2988 9a8b ..*[.5..k..()...
0x0020: a052 7120 a5a8 0000 0204 05b4 0402 080a .Rq.............
0x0030: 4503 deb8 0ce9 4726 0103 0307 E.....G&....
22:04:46.565060 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [.], ack 1, win 4117, options [nop,nop,TS val 216616041 ecr 1157881528], length 0
0x0000: 4500 0034 e745 4000 4006 51a1 ac1e 2a5b E..4.E at .@.Q...*[
0x0010: d9a0 51c3 f30d 0035 2988 9a8b 6bbf 9429 ..Q....5)...k..)
0x0020: 8010 1015 307d 0000 0101 080a 0ce9 4c69 ....0}........Li
0x0030: 4503 deb8 E...
22:04:46.565088 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [P.], seq 1:42, ack 1, win 4117, options [nop,nop,TS val 216616041 ecr 1157881528], length 4124293 [1au] DNSKEY? ui-dns.biz. (39)
0x0000: 4500 005d 545a 4000 4006 e463 ac1e 2a5b E..]TZ at .@..c..*[
0x0010: d9a0 51c3 f30d 0035 2988 9a8b 6bbf 9429 ..Q....5)...k..)
0x0020: 8018 1015 840c 0000 0101 080a 0ce9 4c69 ..............Li
0x0030: 4503 deb8 0027 5ee5 0000 0001 0000 0000 E....'^.........
0x0040: 0001 0675 692d 646e 7303 6269 7a00 0030 ...ui-dns.biz..0
0x0050: 0001 0000 2902 0000 0080 0000 00 ....)........
22:04:46.985111 IP 217.160.81.195.53 > 172.30.42.91.62221: Flags [.], ack 42, win 227, options [nop,nop,TS val 1157881868 ecr 216616041], length 0
0x0000: 4500 0034 5872 4000 3006 f074 d9a0 51c3 E..4Xr at .0..t..Q.
0x0010: ac1e 2a5b 0035 f30d 6bbf 9429 2988 9ab4 ..*[.5..k..))...
0x0020: 8010 00e3 3e32 0000 0101 080a 4503 e00c ....>2......E...
0x0030: 0ce9 4c69 ..Li
22:04:46.985118 IP 217.160.81.195.53 > 172.30.42.91.62221: Flags [P.], seq 1:102, ack 42, win 227, options [nop,nop,TS val 1157881870 ecr 216616041], length 10124293*- 0/1/1 (99)
0x0000: 4502 0099 5873 4000 3206 ee0c d9a0 51c3 E...Xs at .2.....Q.
0x0010: ac1e 2a5b 0035 f30d 6bbf 9429 2988 9ab4 ..*[.5..k..))...
0x0020: 8018 00e3 6804 0000 0101 080a 4503 e00e ....h.......E...
0x0030: 0ce9 4c69 0063 5ee5 8400 0001 0000 0001 ..Li.c^.........
0x0040: 0001 0675 692d 646e 7303 6269 7a00 0030 ...ui-dns.biz..0
0x0050: 0001 c00c 0006 0001 0000 0258 0030 066e ...........X.0.n
0x0060: 732d 6269 7ac0 0c08 646e 7361 646d 696e s-biz...dnsadmin
0x0070: 0531 756e 6431 0264 6500 77dd c293 0000 .1und1.de.w.....
0x0080: 7080 0000 1c20 0009 3a80 0000 0258 0000 p.......:....X..
0x0090: 2906 9000 0080 0000 00 )........
22:04:46.985210 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [.], ack 102, win 4114, options [nop,nop,TS val 216616460 ecr 1157881870], length 0
0x0000: 4500 0034 3ba3 4000 4006 fd43 ac1e 2a5b E..4;. at .@..C..*[
0x0010: d9a0 51c3 f30d 0035 2988 9ab4 6bbf 948e ..Q....5)...k...
0x0020: 8010 1012 2cf9 0000 0101 080a 0ce9 4e0c ....,.........N.
0x0030: 4503 e00e E...
22:04:46.985338 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [F.], seq 42, ack 102, win 4114, options [nop,nop,TS val 216616460 ecr 1157881870], length 0
0x0000: 4500 0034 05bd 4000 4006 332a ac1e 2a5b E..4.. at .@.3*..*[
0x0010: d9a0 51c3 f30d 0035 2988 9ab4 6bbf 948e ..Q....5)...k...
0x0020: 8011 1012 2cf8 0000 0101 080a 0ce9 4e0c ....,.........N.
0x0030: 4503 e00e E...
22:04:47.305187 IP 217.160.81.195.53 > 172.30.42.91.62221: Flags [F.], seq 102, ack 43, win 227, options [nop,nop,TS val 1157882298 ecr 216616460], length 0
0x0000: 4500 0034 5874 4000 3006 f072 d9a0 51c3 E..4Xt at .0..r..Q.
0x0010: ac1e 2a5b 0035 f30d 6bbf 948e 2988 9ab5 ..*[.5..k...)...
0x0020: 8011 00e3 3a7a 0000 0101 080a 4503 e1ba ....:z......E...
0x0030: 0ce9 4e0c ..N.
22:04:47.305377 IP 172.30.42.91.62221 > 217.160.81.195.53: Flags [.], ack 103, win 4114, options [nop,nop,TS val 216616778 ecr 1157882298], length 0
0x0000: 4500 0034 6e8e 4000 4006 ca58 ac1e 2a5b E..4n. at .@..X..*[
0x0010: d9a0 51c3 f30d 0035 2988 9ab5 6bbf 948f ..Q....5)...k...
0x0020: 8010 1012 2a0d 0000 0101 080a 0ce9 4f4a ....*.........OJ
0x0030: 4503 e1ba E...
> Is this even categorically wrong? I couldn't find anything by casual inspection
> of RFC 2671 or RFC 6891. Even if it is technically wrong, I don't see how
> any resolver is going to take the wrong action as a result of receiving such
> a response.
Yes, it is categorically wrong. The server is supposed to return BADVERS
when it doesn't support the requested EDNS version. A server that does this
should be flagged as not supporting EDNS.
> --
> Chris Thompson
> Email: cet1 at cam.ac.uk
>
>
>
>
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the dns-operations
mailing list