Re: Re: problem transferring zones to win2k slave

Dustin Hoff <dustin+bind-users@dustinhoff.com> wrote:

>Barry,
>Thanks for your reply. On win2k I have dns.exe version 5.00.2195.5390,
>and I have tried full logging but I'm not sure what to look for in
>the dns.log file. the zone transfer starts with:
>
>---------------
>Snd T 146.142.40.229 4000 Q [0000 NOERROR] (3)bls(3)gov(0)
>TCP question info at 00D6482C
> Socket = 624
> Remote addr 146.142.40.229, port 53
> Time Query=0, Queued=0, Expire=0
> Buf length = 0x10000 (65536)
> Msg length = 0x005a (90)
> Message:
> XID 0x4000
> Flags 0x0000
> QR 0 (question)
> OPCODE 0 (QUERY)
> AA 0
> TC 0
> RD 0
> RA 0
> Z 0
> RCODE 0 (NOERROR)
> QCOUNT 0x1
> ACOUNT 0x0
> NSCOUNT 0x1
> ARCOUNT 0x0
> Offset = 0x000c, RR count = 0
> Name "(3)bls(3)gov(0)"
> QTYPE IXFR (251)
> QCLASS 1
> ANSWER SECTION:
> AUTHORITY SECTION:
> Offset = 0x0019, RR count = 0
> Name "[C00C](3)bls(3)gov(0)"
> TYPE SOA (6)
> CLASS 1
> TTL 86400
> DLEN 51
> DATA
> PrimaryServer: (9)localhost(0)
> Administrator: (10)blahusch_p(3)bls(3)gov(0)
> SerialNo = 2004071900
> Refresh = 14400
> Retry = 300
> Expire = 604800
> MinimumTTL = 86400
> ADDITIONAL SECTION:
> TAG: MS
>
>Rcv T 146.142.40.229 4000 R Q [8084 A R NOERROR] (3)bls(3)gov(0)
>TCP response info at 00D6482C
> Socket = 624
> Remote addr 146.142.40.229, port 53
> Time Query=1194793, Queued=0, Expire=0
> Buf length = 0x10000 (65536)
> Msg length = 0x3b57 (15191)
> Message:
> XID 0x4000
> Flags 0x8480
> QR 1 (response)
> OPCODE 0 (QUERY)
> AA 1
> TC 0
> RD 0
> RA 1
> Z 0
> RCODE 0 (NOERROR)
> QCOUNT 0x1
> ACOUNT 0x294
> NSCOUNT 0x0
> ARCOUNT 0x0
> Offset = 0x000c, RR count = 0
> Name "(3)bls(3)gov(0)"
> QTYPE IXFR (251)
> QCLASS 1
> ANSWER SECTION:
> [all RRs in zone]
>---------------
>
>and then ends with:
>
>---------------
> Name "[C00C](3)bls(3)gov(0)"
> TYPE SOA (6)
> CLASS 1
> TTL 86400
> DLEN 24
> DATA
> PrimaryServer: [C025](9)localhost(0)
> Administrator: [C030](10)blahusch_p[C00C](3)bls(3)gov(0)
> SerialNo = 2004081303
> Refresh = 14400
> Retry = 300
> Expire = 604800
> MinimumTTL = 86400
> AUTHORITY SECTION:
> ADDITIONAL SECTION:
>
>The DNS server failed to process a packet from 146.142.40.229. The packet was discarded.
>The DNS server has encountered numerous run-time events. These are usually
>caused by the reception of bad or unexpected packets, or from problems with
>or excessive replication traffic. The data is the number of suppressed events
>encountered in the last 15 minute interval.
>---------------
>
>Is this at all helpful?



First, that dns.exe is old (2002), and I do not have any information as
to the problem that was fixed by that build. My records as to the
exact date for that build do not agree. You should install a higher
build of dns.exe. My records show a newer build:

6715 06/03/2003 822302

I have not done research as to more recent builds. Nothing in my
records shows a fix that describes your problem, but installing a
newer build can not hurt. And if you call MS, they will want a newer
build.

As for the trace, it does not show much. Your W2k server received the
IXFR packet, and it responded with the zone contents. Then your W2k
server discarded a packet. You will probably have to use Netmon
to get a trace of that packet, as MS has decided that the bad discarded
packet was not worth logging. I do not understand the MS logic of not
logging information useful for debugging, such as your problem and
an ongoing problem I have with respect to rejected zone transfers.
----------------------------------------------------------------------
Barry S. Finkel
Computing and Instrumentation Solutions Division
Argonne National Laboratory Phone: +1 (630) 252-7277
9700 South Cass Avenue Facsimile:+1 (630) 252-4601
Building 222, Room D209 Internet: BSFinkel@anl.gov
Argonne, IL 60439-4828 IBMMAIL: I1004994