On Mon, Jan 06, 2003 at 12:32:57PM +0000, lemon wrote: > Peter Pentchev wrote: > >On Sun, Jan 05, 2003 at 12:55:48PM +0000, lemon wrote: > > > >> > >># tcpdump -ni lo0 > >>tcpdump: listening on lo0 > >> > >>[ 'wrong' listener being contacted ] > >> > >>18:02:38.448117 192.168.1.2.1226 > 192.168.1.2.53: > >> 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) > >>18:02:43.452867 192.168.1.2.1227 > 192.168.1.2.53: > >> 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) > >>18:02:53.462937 192.168.1.2.1228 > 192.168.1.2.53: > >> 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) > >>18:03:13.473076 192.168.1.2.1229 > 192.168.1.2.53: > >> 24805+ PTR? 7.57.192.80.in-addr.arpa. (42) > > > > > >Are you sure those connections are from the SSH daemon, and not from the > >dnscache itself? > > i believe they're from sshd, yes. i'm not seeing any prior activity from > the dnscache before the external tinydns is contacted. > > > > >Can you post the full configuration of the tinydns and dnscache > >services, e.g. using Jonathan de Boyne Pollard's tinydns-showctl and > >dnscache-showctl utilities, available from > >http://homepages.tesco.net/~J.deBoynePollard/Softwares/djbdns.html > >Also, it would be very useful to see the full logfiles generated by > >dnscache and tinydns around the time of the unsuccessful lookups, and > >the exact contents of your /etc/resolv.conf file. > > sure, inline below. if it borks the mailer, it's also at: > <http://www.lemonia.org/732/dns_info.txt>.
Mmm.. it seems that I might need a bit more info to diagnose the problem. Could you also post the output of the following command: grep ^ /var/dnscache/root/servers/* > the two log tails were started at the same time, but the activity was > seen in the tinydns log first, then the dnscache. Well, those log snippets do not seem to cover the same time interval. Running them through the tai64nlocal utility shows that the tinydns log entries are from 13:04:29 to 13:04:59, while the dnscache ones start at 13:05:39. Are there any dnscache log entries for 13:03 or 13:04? G'luck, Peter -- Peter Pentchev [EMAIL PROTECTED] [EMAIL PROTECTED] PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint FDBA FD79 C26F 3C51 C95E DF9E ED18 B68D 1619 4553 This sentence is false.
msg39044/pgp00000.pgp
Description: PGP signature
