dig response

Question

dig response

is this good?

ENT$ dig dns.papakilo.net

; <<>> DiG 9.6.0-APPLE-P2 <<>> dns.papakilo.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;dns.papakilo.net. IN A

;; AUTHORITY SECTION:
papakilo.net. 10800 IN SOA ns1.secure.net. hostmaster.secure.net. 2006091708 86400 7200 2592000 86400

;; Query time: 673 msec
;; SERVER: 213.221.144.240#53(213.221.144.240)
;; WHEN: Wed Mar 17 20:18:23 2010
;; MSG SIZE rcvd: 92

Anthony

server, Mac OS X (10.6)

Posted on Mar 17, 2010 12:19 PM

Reply

Answer 1

Mar 17, 2010 12:41 PM in response to Anthony Mellor

or is this better:

ENT$ dig @10.0.1.2 -x 10.0.1.2

; <<>> DiG 9.6.0-APPLE-P2 <<>> @10.0.1.2 -x 10.0.1.2
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47499
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;2.1.0.10.in-addr.arpa. IN PTR

;; ANSWER SECTION:
2.1.0.10.in-addr.arpa. 10800 IN PTR news.papakilo.net.

;; AUTHORITY SECTION:
1.0.10.in-addr.arpa. 10800 IN NS news.papakilo.net.

;; ADDITIONAL SECTION:
news.papakilo.net. 10800 IN A 10.0.1.2

;; Query time: 2 msec
;; SERVER: 10.0.1.2#53(10.0.1.2)
;; WHEN: Wed Mar 17 20:30:55 2010
;; MSG SIZE rcvd: 100

strikes me my first attempt was querying the WAN whereas the test was supposed to be querying the LAN.

?
with thanks to MrHoffman for the dig dig.

Anthony

Reply

Answer 2

MrHoffman

Level 10

146,461 points

Mar 17, 2010 1:10 PM in response to Anthony Mellor

Anthony Mellor wrote:
is this good?

ENT$ dig dns.papakilo.net

Philosophically, that depends highly on what you're looking for.

The NXDOMAIN and the lack of a matching record returned means that there's no matching translation.

Reply

Answer 3

MrHoffman

Level 10

146,461 points

Mar 17, 2010 1:11 PM in response to Anthony Mellor

Anthony Mellor wrote:
or is this better:

ENT$ dig @10.0.1.2 -x 10.0.1.2

That reverse-translation indicates that the DNS server at 10.0.1.2 thinks its name is news.papakilo.net.

Reply

Answer 4

Mar 17, 2010 1:14 PM in response to MrHoffman

excellent - it is!

something went right 🙂

Reply

Answer 5

MrHoffman

Level 10

146,461 points

Mar 17, 2010 1:20 PM in response to Anthony Mellor

Here's what a DNS forward translation for an A record (machine record) would look like with dig:


$ dig hostname.example.net
; <<>> DiG 9.6.0-APPLE-P2 <<>> hostname.example.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35339
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;hostname.example.net. IN A
;; ANSWER SECTION:
hostname.example.net. 10800 IN A 192.168.21.9
;; AUTHORITY SECTION:
example.net. 10800 IN NS hostname.example.net.
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Mar 17 16:12:21 2010
;; MSG SIZE rcvd: 68
$

This example case shows a query for a host that also happens to be the DNS server.

Paraphrasing and simplifying the sections slightly, this dig shows some details from the response, the question you asked of DNS, the answer that you have received (if any), and the DNS server that returned the information, and the timing of the response.

Reply

Answer 6

Mar 17, 2010 1:18 PM in response to MrHoffman

I imagine we are not surprised that our dynamic WAN i.p came back to our isp's main i.p. - or something like that.

what I was looking for was to test the reverse lookup; on the LAN, but in the above I hit the WAN by not specifying the dns to test. I think.

hence post below which works .. at last.

Message was edited by: Anthony Mellor

Reply

Answer 7

Mar 17, 2010 1:23 PM in response to MrHoffman

so this:
dig @10.0.1.2 news.papakilo.net

; <<>> DiG 9.6.0-APPLE-P2 <<>> @10.0.1.2 news.papakilo.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42160
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;news.papakilo.net. IN A

;; ANSWER SECTION:
news.papakilo.net. 10800 IN A 10.0.1.2

;; AUTHORITY SECTION:
papakilo.net. 10800 IN NS news.papakilo.net.

;; Query time: 9 msec
;; SERVER: 10.0.1.2#53(10.0.1.2)
;; WHEN: Wed Mar 17 21:22:41 2010
;; MSG SIZE rcvd: 65

Reply

Answer 8

Mar 17, 2010 1:29 PM in response to Anthony Mellor

I have: ;; SERVER: 10.0.1.2#53(10.0.1.2)

U have ;; SERVER: 127.0.0.1#53(127.0.0.1)

does that mean you were actually at the console of the DNS you were testing, whereas I am at a different machine (albeit on the same desk).

Reply

Answer 9

MrHoffman

Level 10

146,461 points

Mar 17, 2010 1:29 PM in response to Anthony Mellor

Guessing at the question...
That's a successful forward translation for a host name via a DNS server at 10.0.1.2.

Reply

Answer 10

MrHoffman

Level 10

146,461 points

Mar 17, 2010 1:48 PM in response to Anthony Mellor

Sharp eye.

Yes, I was connected on the DNS server. (Helps if I remember which host I was logged into. Ah, well.)

Never worked at papa kilo but visited, did work at mike lima and zebra kilo. Ah, long story. Another era. Nevermind. 🙂

Reply

Answer 11

Mar 17, 2010 1:39 PM in response to MrHoffman

brill.

http://news.papakilo.net will find my working server... the word "working" needs to be used with caution. Log in as user2 and password " a "

my version of Hello World in MACOSX Server world - only three days non stop.

all with many thanks to your writings for inspiration.

Reply

Answer 12

Mar 17, 2010 1:45 PM in response to MrHoffman

"Never worked at papa kilo but visited, did work at mike lima and zebra kilo. Ah, long story. Another era. Nevermind. 🙂 "

sounds interesting - in my world papa kilo was a fishing boat (aside from nato alphabet) - it was a beautiful day and I never forgot her, must be 35 years ago now... yes .. another era.

Reply

Answer 13

Mar 17, 2010 2:00 PM in response to MrHoffman

in fact, now looking at my original post with fresh eyes, I recognise all the information: things like ns1.namerserver (in USA) and the DNS pair lower down are my isp (in CH); and dns.papakilo.net is not an existing canonical, so I was surprised to get any response.

edit: and here's the thing: ANSWER: 0

I guess that means the canonical requested does not exist and the rest means the domain does.

Edit 2
SOA means Start of Authority - data about the domain.
http://rscott.org/dns/soa.html

so another guess is that's the dig default when a canonical fails.

Message was edited by: Anthony Mellor

Reply