Skip to content

Instantly share code, notes, and snippets.

@sporkman
Created August 3, 2017 19:33
Show Gist options
  • Save sporkman/1b1b01a3b33ca3e2029728cb90a1eee8 to your computer and use it in GitHub Desktop.
Save sporkman/1b1b01a3b33ca3e2029728cb90a1eee8 to your computer and use it in GitHub Desktop.
Aug 1 16:28:29 util-b pdns_recursor[62430]: 1 [8/3] question for 'dot.nyc.gov|A' from 216.220.96.10
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Looking for CNAME cache hit of 'dot.nyc.gov|CNAME'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: No CNAME cache hit of 'dot.nyc.gov|CNAME' found
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: No cache hit for 'dot.nyc.gov|A', trying to find an appropriate NS record
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Checking if we have NS in cache for 'dot.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: no valid/useful NS in cache for 'dot.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Checking if we have NS in cache for 'nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: no valid/useful NS in cache for 'nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Checking if we have NS in cache for 'gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: no valid/useful NS in cache for 'gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Checking if we have NS in cache for '.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'a.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'b.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'c.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'd.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'e.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'f.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'g.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'h.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'i.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'j.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'k.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'l.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: NS (with ip, or non-glue) in cache for '.' -> 'm.root-servers.net'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86397
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: We have NS in cache for '.' (flawedNSSet=0)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Cache consultations done, have 13 NS to contact
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: Nameservers: c.root-servers.net.(0.00ms), k.root-servers.net.(0.00ms), d.root-servers.net.(0.00ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: b.root-servers.net.(0.00ms), h.root-servers.net.(0.00ms), f.root-servers.net.(0.00ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: a.root-servers.net.(0.00ms), l.root-servers.net.(5.69ms), i.root-servers.net.(5.77ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: e.root-servers.net.(6.15ms), j.root-servers.net.(19.85ms), g.root-servers.net.(45.22ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: m.root-servers.net.(76.00ms)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Trying to resolve NS 'c.root-servers.net' (1/13)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] c.root-servers.net: Wants DNSSEC processing in query for A
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] c.root-servers.net: Looking for CNAME cache hit of 'c.root-servers.net|CNAME'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] c.root-servers.net: No CNAME cache hit of 'c.root-servers.net|CNAME' found
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] c.root-servers.net: Found cache hit for A: 192.33.4.12[ttl=86397]
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Resolved '.' NS c.root-servers.net to: 192.33.4.12, 2001:500:2::c
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Trying IP 192.33.4.12:53, asking 'dot.nyc.gov|A'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Got 16 answers from c.root-servers.net (192.33.4.12), rcode=0 (No Error), aa=0, in 0ms
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|NS|d.gov-servers.net.' from '.' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|NS|c.gov-servers.net.' from '.' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|NS|b.gov-servers.net.' from '.' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|NS|a.gov-servers.net.' from '.' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|DS|7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe' from '.' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|DS|7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0' from '.' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'gov|RRSIG|DS 8 1 86400 20170814050000 20170801040000 15768 . EoiIxrLL+plMUA0ztuIZJoMKOcH+zTJLpnvrXFeEFOcVx3jygCIEA5z05nwNESvppgJpSwc0/06WqehW22rYOloOCuf7bho+LoBAPRL+YcmOdXhCVlhoo83Gx5bBYYcOaGxTZU11iwfaxAb+yw8LqGJSkxP3+rUgDZnwwEkj0o4KtiZZr+4tOLlELrUm5IniRT32ZL/C6I5sTU3N0RljLmnSYYbUQ3PN2I5sxIOz/b6yHLPFlfGif47//YlJElEk1MUK9bt1SCKCNSwpsy2oSE5ii6Y9vEm/XhitGH4+NoFj4YKrknPS4VmGB+HBDU5JOrhqaR1V0+q8VADDLZtECg==' from '.' nameservers? 2 RRSIG - separate
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'a.gov-servers.net|A|69.36.157.30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'b.gov-servers.net|A|209.112.123.30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'c.gov-servers.net|A|69.36.153.30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'd.gov-servers.net|A|81.19.194.30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'a.gov-servers.net|AAAA|2001:500:4431::2:30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'b.gov-servers.net|AAAA|2620:74:27::2:30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'c.gov-servers.net|AAAA|2620:74:28::2:30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'd.gov-servers.net|AAAA|2620:74:29::2:30' from '.' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: OPT answer '.' from '.' nameservers
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: determining status after receiving this packet
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'gov' -> 'd.gov-servers.net.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'gov' -> 'c.gov-servers.net.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'gov' -> 'b.gov-servers.net.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'gov' -> 'a.gov-servers.net.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got DS record 'gov' -> '7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got DS record 'gov' -> '7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: status=did not resolve, got 4 NS, looping to them
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: Nameservers: d.gov-servers.net.(0.00ms), c.gov-servers.net.(0.00ms), b.gov-servers.net.(0.00ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: a.gov-servers.net.(0.00ms)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Trying to resolve NS 'd.gov-servers.net' (1/4)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] d.gov-servers.net: Wants DNSSEC processing in query for A
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] d.gov-servers.net: Looking for CNAME cache hit of 'd.gov-servers.net|CNAME'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] d.gov-servers.net: No CNAME cache hit of 'd.gov-servers.net|CNAME' found
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] d.gov-servers.net: Found cache hit for A: 81.19.194.30[ttl=86400]
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Resolved 'gov' NS d.gov-servers.net to: 81.19.194.30, 2620:74:29::2:30
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Trying IP 81.19.194.30:53, asking 'dot.nyc.gov|A'
skipping...
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Got 12 answers from d.gov-servers.net (81.19.194.30), rcode=0 (No Error), aa=0, in 11ms
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|NS|vwall1a.nyc.gov.' from 'gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|NS|vwall2a.nyc.gov.' from 'gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|NS|vwall3a.nyc.gov.' from 'gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|NS|vwall4a.nyc.gov.' from 'gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|DS|22277 8 1 f4849af9f817a8cdb379f2fdc7aacdcf8aceabcb' from 'gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|DS|22277 8 2 10294fa4c6b8bc25aec9765e2c3b449c58027eedbe1e129b7793996ee4a0d7a0' from 'gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|RRSIG|DS 8 2 3600 20170808161014 20170801161014 21428 gov. FHjqGqNhZarkxCv6j45xN7lNbIM6MmsIzwkyqyOK8qAazbn8w05USvXx1/srBxR6vrnNpr66Jn/KWzaCaxDl+8x79icQOnxFUO6L+ZfcFIaylijMYTfNTqIHhrFKg29LMTkXXn21fhh5BsQla6x33B18w0QIyJnGQkYZP1HZ8mM=' from 'gov' nameservers? 2 RRSIG - separate
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'vwall1a.nyc.gov|A|161.185.1.3' from 'gov' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'vwall2a.nyc.gov|A|161.185.1.12' from 'gov' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'vwall3a.nyc.gov|A|167.153.130.12' from 'gov' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'vwall4a.nyc.gov|A|167.153.130.13' from 'gov' nameservers? 3 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: OPT answer '.' from 'gov' nameservers
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: determining status after receiving this packet
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'nyc.gov' -> 'vwall1a.nyc.gov.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'nyc.gov' -> 'vwall2a.nyc.gov.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'nyc.gov' -> 'vwall3a.nyc.gov.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got NS record 'nyc.gov' -> 'vwall4a.nyc.gov.'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got DS record 'nyc.gov' -> '22277 8 1 f4849af9f817a8cdb379f2fdc7aacdcf8aceabcb'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got DS record 'nyc.gov' -> '22277 8 2 10294fa4c6b8bc25aec9765e2c3b449c58027eedbe1e129b7793996ee4a0d7a0'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: status=did not resolve, got 4 NS, looping to them
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: Nameservers: vwall1a.nyc.gov.(0.00ms), vwall2a.nyc.gov.(0.00ms), vwall4a.nyc.gov.(0.00ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov.: vwall3a.nyc.gov.(0.00ms)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Trying to resolve NS 'vwall1a.nyc.gov' (1/4)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] vwall1a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] vwall1a.nyc.gov: Looking for CNAME cache hit of 'vwall1a.nyc.gov|CNAME'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] vwall1a.nyc.gov: No CNAME cache hit of 'vwall1a.nyc.gov|CNAME' found
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] vwall1a.nyc.gov: Found cache hit for A: 161.185.1.3[ttl=86400]
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Resolved 'nyc.gov' NS vwall1a.nyc.gov to: 161.185.1.3
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Trying IP 161.185.1.3:53, asking 'dot.nyc.gov|A'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: Got 5 answers from vwall1a.nyc.gov (161.185.1.3), rcode=0 (No Error), aa=1, in 3ms
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|SOA|vwall0.nyc.gov. hostmaster.nyc.gov. 2017073102 14400 3600 2419200 600' from 'nyc.gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'nyc.gov|RRSIG|SOA 8 2 900 20170808070005 20170801060005 9853 nyc.gov. FJqCP9HqCGQTvhROwxV2CnBKlyCcwhdm0clM2QH9F6d1LRzycF89mJ1c+nquxoc498kzDNZM/fmQHjn/cvnT2c2YoJZE7RxwZhX0QOTA3aHmvIccClaNQvlY53BhY5LHydbLpRBK2P5qv2ZZgB8jX0OR+TlbXz1mziLt64AYxr8=' from 'nyc.gov' nameservers? 2 RRSIG - separate
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'p549r67pcjr85o12sr867cokcdp3q587.nyc.gov|NSEC3|1 0 12 aabbccdd P557R30K61EGHVDI3NKAJ35RFLOEMV83 MX TXT RRSIG' from 'nyc.gov' nameservers? 2 YES!
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: accept answer 'p549r67pcjr85o12sr867cokcdp3q587.nyc.gov|RRSIG|NSEC3 8 3 600 20170808070005 20170801060005 9853 nyc.gov. fdfIHL2QtAfK0ilL5fuZUR4ovcFOVB+uNNAgF7C0tF1OsfW7YY6LNUrn+ZrPfIo7fMR279Y2t0k7kcvuQSHBGeYPtoPG/cL3Zs49c2fV931/0h2UIS7Ch/hIFR4wYYWpHRJTXx9bKsC/ityycuDvNnwoa95JDy5ahF9QsSpvsmw=' from 'nyc.gov' nameservers? 2 RRSIG - separate
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: OPT answer '.' from 'nyc.gov' nameservers
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: determining status after receiving this packet
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: got negative caching indication for 'dot.nyc.gov|A'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [8] dot.nyc.gov: status=noerror, other types may exist, but we are done (have negative SOA) (have aa bit)
Aug 1 16:28:29 util-b pdns_recursor[62430]: 1 [8/3] answer to question 'dot.nyc.gov|A': 0 answers, 0 additional, took 3 packets, 15.264 ms, 0 throttled, 0 timeouts, 0 tcp connections, rcode=0
skipping...
Aug 1 16:28:29 util-b pdns_recursor[62430]: 1 [11/2] question for 'dot.nyc.gov|MX' from 216.220.96.10
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Wants DNSSEC processing in query for MX
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Looking for CNAME cache hit of 'dot.nyc.gov|CNAME'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: No CNAME cache hit of 'dot.nyc.gov|CNAME' found
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: No cache hit for 'dot.nyc.gov|MX', trying to find an appropriate NS record
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Checking if we have NS in cache for 'dot.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: no valid/useful NS in cache for 'dot.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Checking if we have NS in cache for 'nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall1a.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86400
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall2a.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86400
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall3a.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86400
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall4a.nyc.gov'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86400
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: We have NS in cache for 'nyc.gov' (flawedNSSet=0)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Cache consultations done, have 4 NS to contact
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov.: Nameservers: vwall2a.nyc.gov.(0.00ms), vwall4a.nyc.gov.(0.00ms), vwall1a.nyc.gov.(3.10ms),
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov.: vwall3a.nyc.gov.(5.16ms)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying to resolve NS 'vwall2a.nyc.gov' (1/4)
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] vwall2a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] vwall2a.nyc.gov: Looking for CNAME cache hit of 'vwall2a.nyc.gov|CNAME'
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] vwall2a.nyc.gov: No CNAME cache hit of 'vwall2a.nyc.gov|CNAME' found
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] vwall2a.nyc.gov: Found cache hit for A: 161.185.1.12[ttl=86400]
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Resolved 'nyc.gov' NS vwall2a.nyc.gov to: 161.185.1.12
Aug 1 16:28:29 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying IP 161.185.1.12:53, asking 'dot.nyc.gov|MX'
skipping...
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] dot.nyc.gov: timeout resolving after 1543.45msec
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying to resolve NS 'vwall4a.nyc.gov' (2/4)
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] vwall4a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] vwall4a.nyc.gov: Looking for CNAME cache hit of 'vwall4a.nyc.gov|CNAME'
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] vwall4a.nyc.gov: No CNAME cache hit of 'vwall4a.nyc.gov|CNAME' found
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] vwall4a.nyc.gov: Found cache hit for A: 167.153.130.13[ttl=86398]
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Resolved 'nyc.gov' NS vwall4a.nyc.gov to: 167.153.130.13
Aug 1 16:28:31 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying IP 167.153.130.13:53, asking 'dot.nyc.gov|MX'
skipping...
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] dot.nyc.gov: timeout resolving after 1546.47msec
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying to resolve NS 'vwall1a.nyc.gov' (3/4)
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] vwall1a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] vwall1a.nyc.gov: Looking for CNAME cache hit of 'vwall1a.nyc.gov|CNAME'
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] vwall1a.nyc.gov: No CNAME cache hit of 'vwall1a.nyc.gov|CNAME' found
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] vwall1a.nyc.gov: Found cache hit for A: 161.185.1.3[ttl=86396]
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Resolved 'nyc.gov' NS vwall1a.nyc.gov to: 161.185.1.3
Aug 1 16:28:33 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying IP 161.185.1.3:53, asking 'dot.nyc.gov|MX'
skipping...
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] dot.nyc.gov: timeout resolving after 1739.18msec
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying to resolve NS 'vwall3a.nyc.gov' (4/4)
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] vwall3a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] vwall3a.nyc.gov: Looking for CNAME cache hit of 'vwall3a.nyc.gov|CNAME'
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] vwall3a.nyc.gov: No CNAME cache hit of 'vwall3a.nyc.gov|CNAME' found
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] vwall3a.nyc.gov: Found cache hit for A: 167.153.130.12[ttl=86395]
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Resolved 'nyc.gov' NS vwall3a.nyc.gov to: 167.153.130.12
Aug 1 16:28:34 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Trying IP 167.153.130.12:53, asking 'dot.nyc.gov|MX'
skipping...
Aug 1 16:28:35 util-b pdns_recursor[62430]: 1 [35/5] question for 'dot.nyc.gov|MX' from 216.220.96.10
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Wants DNSSEC processing in query for MX
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Looking for CNAME cache hit of 'dot.nyc.gov|CNAME'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: No CNAME cache hit of 'dot.nyc.gov|CNAME' found
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: No cache hit for 'dot.nyc.gov|MX', trying to find an appropriate NS record
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Checking if we have NS in cache for 'dot.nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: no valid/useful NS in cache for 'dot.nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Checking if we have NS in cache for 'nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall1a.nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86394
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall2a.nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86394
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall3a.nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86394
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: NS (with ip, or non-glue) in cache for 'nyc.gov' -> 'vwall4a.nyc.gov'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: within bailiwick: 1, in cache, ttl=86394
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: We have NS in cache for 'nyc.gov' (flawedNSSet=0)
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Cache consultations done, have 4 NS to contact
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov.: Nameservers: vwall3a.nyc.gov.(4.74ms), vwall1a.nyc.gov.(916.17ms), vwall2a.nyc.gov.(943.66ms),
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov.: vwall4a.nyc.gov.(968.30ms)
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying to resolve NS 'vwall3a.nyc.gov' (1/4)
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] vwall3a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] vwall3a.nyc.gov: Looking for CNAME cache hit of 'vwall3a.nyc.gov|CNAME'
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] vwall3a.nyc.gov: No CNAME cache hit of 'vwall3a.nyc.gov|CNAME' found
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] vwall3a.nyc.gov: Found cache hit for A: 167.153.130.12[ttl=86394]
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Resolved 'nyc.gov' NS vwall3a.nyc.gov to: 167.153.130.12
Aug 1 16:28:35 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying IP 167.153.130.12:53, asking 'dot.nyc.gov|MX'
skipping...
Aug 1 16:28:36 util-b pdns_recursor[62430]: [11] dot.nyc.gov: timeout resolving after 1533.6msec
Aug 1 16:28:36 util-b pdns_recursor[62430]: [11] dot.nyc.gov: Failed to resolve via any of the 4 offered NS at level 'nyc.gov'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [11] dot.nyc.gov: failed (res=-1)
Aug 1 16:28:36 util-b pdns_recursor[62430]: 1 [11/5] answer to question 'dot.nyc.gov|MX': 0 answers, 0 additional, took 4 packets, 6362.7 ms, 0 throttled, 4 timeouts, 0 tcp connections, rcode=2
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: timeout resolving after 1794.76msec
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying to resolve NS 'vwall1a.nyc.gov' (2/4)
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall1a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall1a.nyc.gov: Looking for CNAME cache hit of 'vwall1a.nyc.gov|CNAME'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall1a.nyc.gov: No CNAME cache hit of 'vwall1a.nyc.gov|CNAME' found
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall1a.nyc.gov: Found cache hit for A: 161.185.1.3[ttl=86393]
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Resolved 'nyc.gov' NS vwall1a.nyc.gov to: 161.185.1.3
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying IP 161.185.1.3:53, asking 'dot.nyc.gov|MX'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: query throttled
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying to resolve NS 'vwall2a.nyc.gov' (3/4)
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall2a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall2a.nyc.gov: Looking for CNAME cache hit of 'vwall2a.nyc.gov|CNAME'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall2a.nyc.gov: No CNAME cache hit of 'vwall2a.nyc.gov|CNAME' found
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall2a.nyc.gov: Found cache hit for A: 161.185.1.12[ttl=86393]
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Resolved 'nyc.gov' NS vwall2a.nyc.gov to: 161.185.1.12
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying IP 161.185.1.12:53, asking 'dot.nyc.gov|MX'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: query throttled
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying to resolve NS 'vwall4a.nyc.gov' (4/4)
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall4a.nyc.gov: Wants DNSSEC processing in query for A
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall4a.nyc.gov: Looking for CNAME cache hit of 'vwall4a.nyc.gov|CNAME'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall4a.nyc.gov: No CNAME cache hit of 'vwall4a.nyc.gov|CNAME' found
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] vwall4a.nyc.gov: Found cache hit for A: 167.153.130.13[ttl=86393]
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Resolved 'nyc.gov' NS vwall4a.nyc.gov to: 167.153.130.13
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Trying IP 167.153.130.13:53, asking 'dot.nyc.gov|MX'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: query throttled
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: Failed to resolve via any of the 4 offered NS at level 'nyc.gov'
Aug 1 16:28:36 util-b pdns_recursor[62430]: [35] dot.nyc.gov: failed (res=-1)
Aug 1 16:28:36 util-b pdns_recursor[62430]: 1 [35/2] answer to question 'dot.nyc.gov|MX': 0 answers, 0 additional, took 1 packets, 1794.76 ms, 3 throttled, 1 timeouts, 0 tcp connections, rcode=2
Leaving startup messages if that's of interest:
Aug 1 16:29:09 util-b pdns_recursor[62448]: PowerDNS Recursor 4.0.6 (C) 2001-2016 PowerDNS.COM BV
Aug 1 16:29:09 util-b pdns_recursor[62448]: Using 64-bits mode. Built using clang 3.4.1 (tags/RELEASE_34/dot1-final 208032) on Jul 20 2017 09:42:23 by root@10amd64-default-util-job-01.
Aug 1 16:29:09 util-b pdns_recursor[62448]: PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
Aug 1 16:29:09 util-b pdns_recursor[62448]: Reading random entropy from '/dev/urandom'
Aug 1 16:29:09 util-b pdns_recursor[62448]: Enabling IPv6 transport for outgoing queries
Aug 1 16:29:09 util-b pdns_recursor[62448]: Done parsing 23 allow-from ranges from file '/usr/local/etc/pdns/allowed.conf' - overriding 'allow-from' setting
Aug 1 16:29:09 util-b pdns_recursor[62448]: Will not send queries to: 127.0.0.0/8, 10.0.0.0/8, 100.64.0.0/10, 169.254.0.0/16, 192.168.0.0/16, 172.16.0.0/12, ::1/128, fc00::/7, fe80::/10, 0.0.0.0/8, 192.0.0.0/24, 192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24, 240.0.0.0/4, ::/96, ::ffff:0:0/96, 100::/64, 2001:db8::/32, 0.0.0.0, ::
Aug 1 16:29:09 util-b pdns_recursor[62448]: PowerDNS Recursor itself will distribute queries over threads
Aug 1 16:29:09 util-b pdns_recursor[62448]: Redirecting queries for zone '77.88.10.in-addr.arpa' to: 216.220.96.18:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Inserting rfc 1918 private space zones
Aug 1 16:29:09 util-b pdns_recursor[62448]: Listening for UDP queries on [2607:d300:1::46]:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Listening for UDP queries on 216.220.96.46:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Listening for UDP queries on 10.88.77.46:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Listening for TCP queries on [2607:d300:1::46]:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Listening for TCP queries on 216.220.96.46:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Listening for TCP queries on 10.88.77.46:53
Aug 1 16:29:09 util-b pdns_recursor[62448]: Calling daemonize, going to background
Aug 1 16:29:09 util-b pdns_recursor[62449]: Set effective group id to 120
Aug 1 16:29:09 util-b pdns_recursor[62449]: Set effective user id to 120
Aug 1 16:29:09 util-b pdns_recursor[62449]: Launching 3 threads
Aug 1 16:29:09 util-b pdns_recursor[62449]: Done priming cache with root hints
Aug 1 16:29:09 util-b pdns_recursor[62449]: Enabled 'kqueue' multiplexer
Aug 1 16:29:09 util-b pdns_recursor[62449]: Done priming cache with root hints
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment