From: Malek Shabou (Malek.Shabou@nic.fr)
Date: Wed Dec 24 2003 - 07:33:41 EST
Hi,
I have a couple of servers running Tru64 5.1a and 5.1b, IPv6 is enable.
when i send an UDP dns query on IPv6 it does not work, where as the TCP DNS querys work. a tcpdump shows that the DNS server respond and that the client (tru64) does not handle the response.
this probleme occure only on Tru64 5.1a, on the Tru64 5.1b it works.
here is some exemples:
#### here is my network config:
bash-2.04# ifconfig -a
lo0: flags=100c89<UP,LOOPBACK,NOARP,MULTICAST,SIMPLEX,NOCHECKSUM>
inet 127.0.0.1 netmask ff000000 ipmtu 4096
inet6 ::1
sl0: flags=10<POINTOPOINT>
tu0: flags=c63<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST,SIMPLEX>
inet 192.134.4.82 netmask ffffff00 broadcast 192.134.4.255 ipmtu 1500
inet6 fe80::200:f8ff:fe75:96b8
inet6 2001:660:3003:8:200:f8ff:fe75:96b8
inet6 2001:660:3003:8::4:82
tun0: flags=80<NOARP>
#### a TCP dns query work:
bash-2.04# ./dig @2001:610:240:0:53::193 ripe.net soa +vc
; <<>> DiG 9.2.3 <<>> @2001:610:240:0:53::193 ripe.net soa +vc
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49597
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 5, ADDITIONAL: 3
;; QUESTION SECTION:
;ripe.net. IN SOA
;; ANSWER SECTION:
ripe.net. 172800 IN SOA ns.ripe.net. ops.ripe.net. 2003121903 43200 7200 1209600 7200
;; AUTHORITY SECTION:
ripe.net. 172800 IN NS ns2.nic.fr.
ripe.net. 172800 IN NS sunic.sunet.se.
ripe.net. 172800 IN NS auth03.ns.uu.net.
ripe.net. 172800 IN NS munnari.OZ.AU.
ripe.net. 172800 IN NS ns.ripe.net.
;; ADDITIONAL SECTION:
ns.ripe.net. 172800 IN A 193.0.0.193
ns.ripe.net. 172800 IN AAAA 2001:610:240:0:53::193
ns2.nic.fr. 345600 IN A 192.93.0.4
;; Query time: 26 msec
;; SERVER: 2001:610:240:0:53::193#53(2001:610:240:0:53::193)
;; WHEN: Wed Dec 24 13:20:08 2003
;; MSG SIZE rcvd: 249
here is the result of tcpdump of the query
bash-2.04# tcpdump -n port 53
tcpdump: listening on tu0
Using kernel BPF filter
13:26:23.555171 2001:660:3003:8:200:f8ff:fe75:96b8 > 2001:610:240:0:53::193: [|tcp]
13:26:23.577632 2001:610:240:0:53::193 > 2001:660:3003:8:200:f8ff:fe75:96b8: [|tcp]
13:26:23.578609 2001:660:3003:8:200:f8ff:fe75:96b8 > 2001:610:240:0:53::193: [|tcp]
13:26:23.579586 2001:660:3003:8:200:f8ff:fe75:96b8 > 2001:610:240:0:53::193: [|tcp]
13:26:23.602047 2001:610:240:0:53::193 > 2001:660:3003:8:200:f8ff:fe75:96b8: [|tcp]
13:26:23.603023 2001:610:240:0:53::193 > 2001:660:3003:8:200:f8ff:fe75:96b8: [|tcp]
13:26:23.607906 2001:660:3003:8:200:f8ff:fe75:96b8 > 2001:610:240:0:53::193: [|tcp]
13:26:23.630368 2001:610:240:0:53::193 > 2001:660:3003:8:200:f8ff:fe75:96b8: [|tcp]
13:26:23.631344 2001:660:3003:8:200:f8ff:fe75:96b8 > 2001:610:240:0:53::193: [|tcp]
### here is the result on an UDP DNS query:
bash-2.04# ./dig @2001:610:240:0:53::193 ripe.net soa
; <<>> DiG 9.2.3 <<>> @2001:610:240:0:53::193 ripe.net soa
;; global options: printcmd
;; connection timed out; no servers could be reached
and here is the tcpdump:
13:28:58.121030 2001:660:3003:8:200:f8ff:fe75:96b8.1063 > 2001:610:240:0:53::193.53: 49597+ (26)
13:28:58.145444 2001:610:240:0:53::193.53 > 2001:660:3003:8:200:f8ff:fe75:96b8.1063: 49597*- 0/0/0 (249)
13:29:03.121107 2001:660:3003:8:200:f8ff:fe75:96b8.1063 > 2001:610:240:0:53::193.53: 49597+ (26)
13:29:03.144545 2001:610:240:0:53::193.53 > 2001:660:3003:8:200:f8ff:fe75:96b8.1063: 49597*- 0/0/0 (249)
the client send a 26 byte UDP packet (dns query) and recive a response (249 byte), but the system (tru64 5.1a) does not handle it, and the process dig recive nothing that way it resend a other query.
is it a bug of the IPv6 implementation on 5.1a ??
-- Malek Shabou E-mail: nic@nic.fr AFNIC Tel: +33 1 39 30 83 00 Immeuble international, 2 rue Stephenson Fax: +33 1 39 30 83 01 Saint-Quentin-En-Yvelines 78180 Montigny-Le-Bretonneux ### Utiliser http://www.nic.fr/zonecheck/ pour verifier vos domaines ###
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:47 EDT