Attachment 311485 Details for Bug 454206 – wireshark capture showing "successful" 'getent ahosts mirrors.fedoraproject.org'

wireshark capture showing "successful" 'getent ahosts mirrors.fedoraproject.org'

getent-wireshark-good.txt (text/plain), 19.13 KB, created by Tom London on 2008-07-10 14:54:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tom London

Created: 2008-07-10 14:54:13 UTC

Size: 19.13 KB

patch

obsolete

>No.     Time        Source                Destination           Protocol Info
>      1 0.000000    192.168.1.100         224.0.0.251           MDNS     Standard query response A, cache flush 192.168.1.100 PTR, cache flush Device-001EC2CDDF98.local
>
>Frame 1 (135 bytes on wire, 135 bytes captured)
>    Arrival Time: Jul 10, 2008 07:14:35.272011000
>    [Time delta from previous captured frame: 0.000000000 seconds]
>    [Time delta from previous displayed frame: 0.000000000 seconds]
>    [Time since reference or first frame: 0.000000000 seconds]
>    Frame Number: 1
>    Frame Length: 135 bytes
>    Capture Length: 135 bytes
>    [Frame is marked: False]
>    [Protocols in frame: eth:ip:udp:dns]
>    [Coloring Rule Name: TTL low or unexpected]
>    [Coloring Rule String: ( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5) || (ip.dst == 224.0.0.0/24 && ip.ttl != 1)]
>Ethernet II, Src: Apple_cd:df:98 (00:1e:c2:cd:df:98), Dst: IPv4mcast_00:00:fb (01:00:5e:00:00:fb)
>    Destination: IPv4mcast_00:00:fb (01:00:5e:00:00:fb)
>        Address: IPv4mcast_00:00:fb (01:00:5e:00:00:fb)
>        .... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Source: Apple_cd:df:98 (00:1e:c2:cd:df:98)
>        Address: Apple_cd:df:98 (00:1e:c2:cd:df:98)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Type: IP (0x0800)
>Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: 224.0.0.251 (224.0.0.251)
>    Version: 4
>    Header length: 20 bytes
>    Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
>        0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
>        .... ..0. = ECN-Capable Transport (ECT): 0
>        .... ...0 = ECN-CE: 0
>    Total Length: 121
>    Identification: 0x0488 (1160)
>    Flags: 0x00
>        0... = Reserved bit: Not set
>        .0.. = Don't fragment: Not set
>        ..0. = More fragments: Not set
>    Fragment offset: 0
>    Time to live: 255
>    Protocol: UDP (0x11)
>    Header checksum: 0x13cc [correct]
>        [Good: True]
>        [Bad : False]
>    Source: 192.168.1.100 (192.168.1.100)
>    Destination: 224.0.0.251 (224.0.0.251)
>User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)
>    Source port: mdns (5353)
>    Destination port: mdns (5353)
>    Length: 101
>    Checksum: 0x6e15 [correct]
>        [Good Checksum: True]
>        [Bad Checksum: False]
>Domain Name System (response)
>    Transaction ID: 0x0000
>    Flags: 0x8400 (Standard query response, No error)
>        1... .... .... .... = Response: Message is a response
>        .000 0... .... .... = Opcode: Standard query (0)
>        .... .1.. .... .... = Authoritative: Server is an authority for domain
>        .... ..0. .... .... = Truncated: Message is not truncated
>        .... ...0 .... .... = Recursion desired: Don't do query recursively
>        .... .... 0... .... = Recursion available: Server can't do recursive queries
>        .... .... .0.. .... = Z: reserved (0)
>        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
>        .... .... .... 0000 = Reply code: No error (0)
>    Questions: 0
>    Answer RRs: 2
>    Authority RRs: 0
>    Additional RRs: 0
>    Answers
>        Device-001EC2CDDF98.local: type A, class IN, cache flush, addr 192.168.1.100
>            Name: Device-001EC2CDDF98.local
>            Type: A (Host address)
>            .000 0000 0000 0001 = Class: IN (0x0001)
>            1... .... .... .... = Cache flush: True
>            Time to live: 2 minutes
>            Data length: 4
>            Addr: 192.168.1.100
>        100.1.168.192.in-addr.arpa: type PTR, class IN, cache flush, Device-001EC2CDDF98.local
>            Name: 100.1.168.192.in-addr.arpa
>            Type: PTR (Domain name pointer)
>            .000 0000 0000 0001 = Class: IN (0x0001)
>            1... .... .... .... = Cache flush: True
>            Time to live: 2 minutes
>            Data length: 2
>            Domain name: Device-001EC2CDDF98.local
>
>No.     Time        Source                Destination           Protocol Info
>      2 0.899981    192.168.1.101         68.87.78.130          DNS      Standard query A mirrors.fedoraproject.org
>
>Frame 2 (85 bytes on wire, 85 bytes captured)
>    Arrival Time: Jul 10, 2008 07:14:36.171992000
>    [Time delta from previous captured frame: 0.899981000 seconds]
>    [Time delta from previous displayed frame: 0.899981000 seconds]
>    [Time since reference or first frame: 0.899981000 seconds]
>    Frame Number: 2
>    Frame Length: 85 bytes
>    Capture Length: 85 bytes
>    [Frame is marked: False]
>    [Protocols in frame: eth:ip:udp:dns]
>    [Coloring Rule Name: Checksum Errors]
>    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1]
>Ethernet II, Src: Wistron_26:85:6f (00:16:d3:26:85:6f), Dst: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>    Destination: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        Address: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Source: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        Address: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Type: IP (0x0800)
>Internet Protocol, Src: 192.168.1.101 (192.168.1.101), Dst: 68.87.78.130 (68.87.78.130)
>    Version: 4
>    Header length: 20 bytes
>    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
>        0000 00.. = Differentiated Services Codepoint: Default (0x00)
>        .... ..0. = ECN-Capable Transport (ECT): 0
>        .... ...0 = ECN-CE: 0
>    Total Length: 71
>    Identification: 0xb916 (47382)
>    Flags: 0x04 (Don't Fragment)
>        0... = Reserved bit: Not set
>        .1.. = Don't fragment: Set
>        ..0. = More fragments: Not set
>    Fragment offset: 0
>    Time to live: 64
>    Protocol: UDP (0x11)
>    Header checksum: 0x2ca9 [correct]
>        [Good: True]
>        [Bad : False]
>    Source: 192.168.1.101 (192.168.1.101)
>    Destination: 68.87.78.130 (68.87.78.130)
>User Datagram Protocol, Src Port: 48076 (48076), Dst Port: domain (53)
>    Source port: 48076 (48076)
>    Destination port: domain (53)
>    Length: 51
>    Checksum: 0x552b [incorrect, should be 0x2950 (maybe caused by "UDP checksum offload"?)]
>        [Good Checksum: False]
>        [Bad Checksum: True]
>Domain Name System (query)
>    [Response In: 5]
>    Transaction ID: 0x72bf
>    Flags: 0x0100 (Standard query)
>        0... .... .... .... = Response: Message is a query
>        .000 0... .... .... = Opcode: Standard query (0)
>        .... ..0. .... .... = Truncated: Message is not truncated
>        .... ...1 .... .... = Recursion desired: Do query recursively
>        .... .... .0.. .... = Z: reserved (0)
>        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
>    Questions: 1
>    Answer RRs: 0
>    Authority RRs: 0
>    Additional RRs: 0
>    Queries
>        mirrors.fedoraproject.org: type A, class IN
>            Name: mirrors.fedoraproject.org
>            Type: A (Host address)
>            Class: IN (0x0001)
>
>No.     Time        Source                Destination           Protocol Info
>      3 0.900758    192.168.1.101         68.87.78.130          DNS      Standard query AAAA mirrors.fedoraproject.org
>
>Frame 3 (85 bytes on wire, 85 bytes captured)
>    Arrival Time: Jul 10, 2008 07:14:36.172769000
>    [Time delta from previous captured frame: 0.000777000 seconds]
>    [Time delta from previous displayed frame: 0.000777000 seconds]
>    [Time since reference or first frame: 0.900758000 seconds]
>    Frame Number: 3
>    Frame Length: 85 bytes
>    Capture Length: 85 bytes
>    [Frame is marked: False]
>    [Protocols in frame: eth:ip:udp:dns]
>    [Coloring Rule Name: Checksum Errors]
>    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1]
>Ethernet II, Src: Wistron_26:85:6f (00:16:d3:26:85:6f), Dst: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>    Destination: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        Address: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Source: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        Address: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Type: IP (0x0800)
>Internet Protocol, Src: 192.168.1.101 (192.168.1.101), Dst: 68.87.78.130 (68.87.78.130)
>    Version: 4
>    Header length: 20 bytes
>    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
>        0000 00.. = Differentiated Services Codepoint: Default (0x00)
>        .... ..0. = ECN-Capable Transport (ECT): 0
>        .... ...0 = ECN-CE: 0
>    Total Length: 71
>    Identification: 0xb917 (47383)
>    Flags: 0x04 (Don't Fragment)
>        0... = Reserved bit: Not set
>        .1.. = Don't fragment: Set
>        ..0. = More fragments: Not set
>    Fragment offset: 0
>    Time to live: 64
>    Protocol: UDP (0x11)
>    Header checksum: 0x2ca8 [correct]
>        [Good: True]
>        [Bad : False]
>    Source: 192.168.1.101 (192.168.1.101)
>    Destination: 68.87.78.130 (68.87.78.130)
>User Datagram Protocol, Src Port: 48076 (48076), Dst Port: domain (53)
>    Source port: 48076 (48076)
>    Destination port: domain (53)
>    Length: 51
>    Checksum: 0x552b [incorrect, should be 0x075b (maybe caused by "UDP checksum offload"?)]
>        [Good Checksum: False]
>        [Bad Checksum: True]
>Domain Name System (query)
>    [Response In: 4]
>    Transaction ID: 0x79b4
>    Flags: 0x0100 (Standard query)
>        0... .... .... .... = Response: Message is a query
>        .000 0... .... .... = Opcode: Standard query (0)
>        .... ..0. .... .... = Truncated: Message is not truncated
>        .... ...1 .... .... = Recursion desired: Do query recursively
>        .... .... .0.. .... = Z: reserved (0)
>        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
>    Questions: 1
>    Answer RRs: 0
>    Authority RRs: 0
>    Additional RRs: 0
>    Queries
>        mirrors.fedoraproject.org: type AAAA, class IN
>            Name: mirrors.fedoraproject.org
>            Type: AAAA (IPv6 address)
>            Class: IN (0x0001)
>
>No.     Time        Source                Destination           Protocol Info
>      4 0.951433    68.87.78.130          192.168.1.101         DNS      Standard query response CNAME fedoraproject.org
>
>Frame 4 (146 bytes on wire, 146 bytes captured)
>    Arrival Time: Jul 10, 2008 07:14:36.223444000
>    [Time delta from previous captured frame: 0.050675000 seconds]
>    [Time delta from previous displayed frame: 0.050675000 seconds]
>    [Time since reference or first frame: 0.951433000 seconds]
>    Frame Number: 4
>    Frame Length: 146 bytes
>    Capture Length: 146 bytes
>    [Frame is marked: False]
>    [Protocols in frame: eth:ip:udp:dns]
>    [Coloring Rule Name: UDP]
>    [Coloring Rule String: udp]
>Ethernet II, Src: Cisco-Li_46:42:4f (00:12:17:46:42:4f), Dst: Wistron_26:85:6f (00:16:d3:26:85:6f)
>    Destination: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        Address: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Source: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        Address: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Type: IP (0x0800)
>Internet Protocol, Src: 68.87.78.130 (68.87.78.130), Dst: 192.168.1.101 (192.168.1.101)
>    Version: 4
>    Header length: 20 bytes
>    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
>        0000 00.. = Differentiated Services Codepoint: Default (0x00)
>        .... ..0. = ECN-Capable Transport (ECT): 0
>        .... ...0 = ECN-CE: 0
>    Total Length: 132
>    Identification: 0x0000 (0)
>    Flags: 0x04 (Don't Fragment)
>        0... = Reserved bit: Not set
>        .1.. = Don't fragment: Set
>        ..0. = More fragments: Not set
>    Fragment offset: 0
>    Time to live: 51
>    Protocol: UDP (0x11)
>    Header checksum: 0xf282 [correct]
>        [Good: True]
>        [Bad : False]
>    Source: 68.87.78.130 (68.87.78.130)
>    Destination: 192.168.1.101 (192.168.1.101)
>User Datagram Protocol, Src Port: domain (53), Dst Port: 48076 (48076)
>    Source port: domain (53)
>    Destination port: 48076 (48076)
>    Length: 112
>    Checksum: 0x3729 [correct]
>        [Good Checksum: True]
>        [Bad Checksum: False]
>Domain Name System (response)
>    [Request In: 3]
>    [Time: 0.050675000 seconds]
>    Transaction ID: 0x79b4
>    Flags: 0x8180 (Standard query response, No error)
>        1... .... .... .... = Response: Message is a response
>        .000 0... .... .... = Opcode: Standard query (0)
>        .... .0.. .... .... = Authoritative: Server is not an authority for domain
>        .... ..0. .... .... = Truncated: Message is not truncated
>        .... ...1 .... .... = Recursion desired: Do query recursively
>        .... .... 1... .... = Recursion available: Server can do recursive queries
>        .... .... .0.. .... = Z: reserved (0)
>        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
>        .... .... .... 0000 = Reply code: No error (0)
>    Questions: 1
>    Answer RRs: 1
>    Authority RRs: 1
>    Additional RRs: 0
>    Queries
>        mirrors.fedoraproject.org: type AAAA, class IN
>            Name: mirrors.fedoraproject.org
>            Type: AAAA (IPv6 address)
>            Class: IN (0x0001)
>    Answers
>        mirrors.fedoraproject.org: type CNAME, class IN, cname fedoraproject.org
>            Name: mirrors.fedoraproject.org
>            Type: CNAME (Canonical name for an alias)
>            Class: IN (0x0001)
>            Time to live: 17 minutes, 40 seconds
>            Data length: 2
>            Primary name: fedoraproject.org
>    Authoritative nameservers
>        fedoraproject.org: type SOA, class IN, mname fedoraproject.org
>            Name: fedoraproject.org
>            Type: SOA (Start of zone of authority)
>            Class: IN (0x0001)
>            Time to live: 4 minutes, 1 second
>            Data length: 35
>            Primary name server: fedoraproject.org
>            Responsible authority's mailbox: hostmaster.fedoraproject.org
>            Serial number: 2008062701
>            Refresh interval: 8 hours
>            Retry interval: 2 hours
>            Expiration limit: 28 days
>            Minimum TTL: 1 day
>
>No.     Time        Source                Destination           Protocol Info
>      5 1.007441    68.87.78.130          192.168.1.101         DNS      Standard query response CNAME fedoraproject.org A 66.35.62.162 A 209.132.176.122
>
>Frame 5 (131 bytes on wire, 131 bytes captured)
>    Arrival Time: Jul 10, 2008 07:14:36.279452000
>    [Time delta from previous captured frame: 0.056008000 seconds]
>    [Time delta from previous displayed frame: 0.056008000 seconds]
>    [Time since reference or first frame: 1.007441000 seconds]
>    Frame Number: 5
>    Frame Length: 131 bytes
>    Capture Length: 131 bytes
>    [Frame is marked: False]
>    [Protocols in frame: eth:ip:udp:dns]
>    [Coloring Rule Name: UDP]
>    [Coloring Rule String: udp]
>Ethernet II, Src: Cisco-Li_46:42:4f (00:12:17:46:42:4f), Dst: Wistron_26:85:6f (00:16:d3:26:85:6f)
>    Destination: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        Address: Wistron_26:85:6f (00:16:d3:26:85:6f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Source: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        Address: Cisco-Li_46:42:4f (00:12:17:46:42:4f)
>        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
>        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
>    Type: IP (0x0800)
>Internet Protocol, Src: 68.87.78.130 (68.87.78.130), Dst: 192.168.1.101 (192.168.1.101)
>    Version: 4
>    Header length: 20 bytes
>    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
>        0000 00.. = Differentiated Services Codepoint: Default (0x00)
>        .... ..0. = ECN-Capable Transport (ECT): 0
>        .... ...0 = ECN-CE: 0
>    Total Length: 117
>    Identification: 0x0000 (0)
>    Flags: 0x04 (Don't Fragment)
>        0... = Reserved bit: Not set
>        .1.. = Don't fragment: Set
>        ..0. = More fragments: Not set
>    Fragment offset: 0
>    Time to live: 51
>    Protocol: UDP (0x11)
>    Header checksum: 0xf291 [correct]
>        [Good: True]
>        [Bad : False]
>    Source: 68.87.78.130 (68.87.78.130)
>    Destination: 192.168.1.101 (192.168.1.101)
>User Datagram Protocol, Src Port: domain (53), Dst Port: 48076 (48076)
>    Source port: domain (53)
>    Destination port: 48076 (48076)
>    Length: 97
>    Checksum: 0xe868 [correct]
>        [Good Checksum: True]
>        [Bad Checksum: False]
>Domain Name System (response)
>    [Request In: 2]
>    [Time: 0.107460000 seconds]
>    Transaction ID: 0x72bf
>    Flags: 0x8180 (Standard query response, No error)
>        1... .... .... .... = Response: Message is a response
>        .000 0... .... .... = Opcode: Standard query (0)
>        .... .0.. .... .... = Authoritative: Server is not an authority for domain
>        .... ..0. .... .... = Truncated: Message is not truncated
>        .... ...1 .... .... = Recursion desired: Do query recursively
>        .... .... 1... .... = Recursion available: Server can do recursive queries
>        .... .... .0.. .... = Z: reserved (0)
>        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
>        .... .... .... 0000 = Reply code: No error (0)
>    Questions: 1
>    Answer RRs: 3
>    Authority RRs: 0
>    Additional RRs: 0
>    Queries
>        mirrors.fedoraproject.org: type A, class IN
>            Name: mirrors.fedoraproject.org
>            Type: A (Host address)
>            Class: IN (0x0001)
>    Answers
>        mirrors.fedoraproject.org: type CNAME, class IN, cname fedoraproject.org
>            Name: mirrors.fedoraproject.org
>            Type: CNAME (Canonical name for an alias)
>            Class: IN (0x0001)
>            Time to live: 17 minutes, 40 seconds
>            Data length: 2
>            Primary name: fedoraproject.org
>        fedoraproject.org: type A, class IN, addr 66.35.62.162
>            Name: fedoraproject.org
>            Type: A (Host address)
>            Class: IN (0x0001)
>            Time to live: 1 minute
>            Data length: 4
>            Addr: 66.35.62.162
>        fedoraproject.org: type A, class IN, addr 209.132.176.122
>            Name: fedoraproject.org
>            Type: A (Host address)
>            Class: IN (0x0001)
>            Time to live: 1 minute
>            Data length: 4
>            Addr: 209.132.176.122

Actions: View

Attachments on bug 454206: 311215 | 311265 | 311282 | 311290 | 311291 | 311373 | 311374 | 311485 | 311486 | 311652 | 312482