Home page logo
/

nanog logo nanog mailing list archives

Odd DNS responses for www.neopets.com
From: Stephen Milton <milton () isomedia com>
Date: Wed, 5 Feb 2003 16:47:41 -0800


Maybe it's just me, but isn't there something odd about a DNS query
coming back with 78 entries for the same host?  It sends back an UDP
packet that gets truncated and the DNS resolver reverts to TCP to get
the full list.

It seems to cause problems with Windows clients and/or Windows DNS
servers.  Seems like overkill.

Here is a dig on www.neopets.com:

;; Truncated, retrying in TCP mode.

; <<>> DiG 9.2.1 <<>> www.neopets.com @ns2.neopets.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34814
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 78, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.neopets.com.               IN      A

;; ANSWER SECTION:
www.neopets.com.        1582    IN      A       198.172.122.97
www.neopets.com.        1582    IN      A       198.172.122.98
www.neopets.com.        1582    IN      A       198.172.122.101
... many lines deleted ...
www.neopets.com.        1582    IN      A       198.172.122.194
www.neopets.com.        1582    IN      A       198.172.122.196
www.neopets.com.        1582    IN      A       198.172.122.197

;; AUTHORITY SECTION:
neopets.com.            2434    IN      NS      ns1.neopets.com.
neopets.com.            2434    IN      NS      ns2.neopets.com.

;; Query time: 53 msec
;; SERVER: 198.172.121.14#53(ns2.neopets.com)
;; WHEN: Wed Feb  5 16:42:45 2003
;; MSG SIZE  rcvd: 1349


-- 
Stephen Milton - Vice President                (425) 881-8769 x102
ISOMEDIA.COM - Premium Internet Services        (425) 869-9437 Fax
milton () isomedia com                        http://www.isomedia.com


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault