[dns-operations] why use different dig version return different result?

[Mark Andrews]

Because the newer version does EDNS version negotiation and the older version
doesn’t.  Use +noednsnegotiation to disable EDNS version negotiation.

> ./dig xn--j1amh. @212.1.66.247  +edns=1
> ;; BADVERS, retrying with EDNS version 0.

Which is logged as a comment.

% dig . @a.root-servers.net +edns=1 +noednsneg

; <<>> DiG 9.13.1+hotspot+add-prefetch+marka <<>> . @a.root-servers.net +edns=1 +noednsneg
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: BADVERS, id: 52931
;; flags: qr rd ad; QUERY: 0, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; Query time: 254 msec
;; SERVER: 198.41.0.4#53(198.41.0.4)
;; WHEN: Mon Sep 10 14:15:31 AEST 2018
;; MSG SIZE  rcvd: 23

% dig . @a.root-servers.net +edns=1 
;; BADVERS, retrying with EDNS version 0.

; <<>> DiG 9.13.1+hotspot+add-prefetch+marka <<>> . @a.root-servers.net +edns=1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25775
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1472
;; QUESTION SECTION:
;.				IN	A

;; AUTHORITY SECTION:
.			86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2018090902 1800 900 604800 86400

;; Query time: 229 msec
;; SERVER: 198.41.0.4#53(198.41.0.4)
;; WHEN: Mon Sep 10 14:15:37 AEST 2018
;; MSG SIZE  rcvd: 103

% 

Mark


> On 10 Sep 2018, at 1:27 pm, Champion Xie <xiejieling at gmail.com> wrote:
> 
> 
> why  use different dig version return different result?    Request to reach a different server?
> 
> the traceroute info :
>  1  211.144.10.97 (211.144.10.97)  1.908 ms  1.905 ms  1.901 ms
>  2  211.144.10.33 (211.144.10.33)  0.993 ms  1.120 ms  1.454 ms
>  3  211.144.10.1 (211.144.10.1)  1.139 ms  1.279 ms  1.596 ms
>  4  61.135.112.65 (61.135.112.65)  0.343 ms  0.406 ms  0.472 ms
>  5  61.51.113.17 (61.51.113.17)  3.496 ms  3.522 ms  3.520 ms
>  6  61.148.4.237 (61.148.4.237)  3.206 ms  2.811 ms  2.782 ms
>  7  202.96.12.77 (202.96.12.77)  1.894 ms  2.172 ms  2.069 ms
>  8  219.158.8.242 (219.158.8.242)  23.836 ms  23.808 ms 219.158.7.234 (219.158.7.234)  22.405 ms
>  9  219.158.19.70 (219.158.19.70)  28.845 ms 219.158.113.110 (219.158.113.110)  30.756 ms 219.158.19.70 (219.158.19.70)  27.648 ms
> 10  219.158.113.125 (219.158.113.125)  29.928 ms  29.931 ms  29.590 ms
> 11  219.158.116.242 (219.158.116.242)  145.527 ms  145.485 ms  149.499 ms
> 12  xe-7-1-3.edge1.SanJose3.Level3.net (4.53.209.77)  218.086 ms  218.021 ms  219.575 ms
> 13  * * *
> 14  BR2.Amsterdam1.surf.net (213.244.164.2)  336.048 ms  330.278 ms  328.464 ms
> 15  ae1-8.RT.BMB.KIV.UA.retn.net (87.245.232.202)  390.253 ms  383.984 ms  390.243 ms
> 16  GW-InfoCom.retn.net (87.245.247.154)  395.526 ms  391.990 ms  391.962 ms
> 17  h109.195-230-151.ukrpack.net (195.230.151.109)  339.435 ms  344.937 ms  337.602 ms
> 18  ic.della.ua (212.1.66.247)  382.397 ms  390.303 ms  384.523 ms
> 
> 
> 
> 
> ./dig xn--j1amh. @212.1.66.247  +edns=1
> ;; BADVERS, retrying with EDNS version 0.
> 
> ; <<>> DiG 9.11.1cn1-P3 <<>> xn--j1amh. @212.1.66.247 +edns=1
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41568
> ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; QUESTION SECTION:
> ;xn--j1amh.			IN	A
> 
> ;; Query time: 3249 msec
> ;; SERVER: 212.1.66.247#53(212.1.66.247)
> ;; WHEN: Mon Sep 10 11:15:29 CST 2018
> ;; MSG SIZE  rcvd: 38
> 
> dig xn--j1amh. @212.1.66.247  +edns=1
> 
> ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6 <<>> xn--j1amh. @212.1.66.247 +edns=1
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: BADVERS, id: 53766
> ;; flags: qr rd; QUERY: 0, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
> ;; WARNING: recursion requested but not available
> 
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 4096
> ;; Query time: 819 msec
> ;; SERVER: 212.1.66.247#53(212.1.66.247)
> ;; WHEN: Mon Sep 10 11:16:08 2018
> ;; MSG SIZE  rcvd: 23
> 
> -- 
> Best Regards!!
> champion_xie
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka at isc.org