[dnsdist] greqp - how to read?

[Bit World Computing - Michael Mertel]

Hi,

a vendor is complaining about our dnsdist powered resolver. For that reason I tried to figure out if there are any resolving issues.

If I grep for the query in question I’am getting this (shortened) output. Does ist mean it only got once forwarded to 8.8.4.4 and what about the other queries? How can I tell if the query got answered or not? Does ist get answered from the cache and how can I tell?


-42.1   192.168.44.3:59399                                           21448 kas-av-updates.mailfrontier.net. A               RD    Question
-41.5   192.168.44.3:40450                                           45885 kas-av-updates.mailfrontier.net. A               RD    Question
-41.0   192.168.44.3:35357                                           28157 kas-av-updates.mailfrontier.net. A               RD    Question
-40.2   192.168.44.3:37069                                           56087 kas-av-updates.mailfrontier.net. A               RD    Question
-39.7   192.168.44.3:46550                                           18199 kas-av-updates.mailfrontier.net. A               RD    Question
-38.9   192.168.44.3:43979                                           28665 kas-av-updates.mailfrontier.net. A               RD    Question
-38.0   192.168.44.3:40127                                           49118 kas-av-updates.mailfrontier.net. A               RD    Question
-38.0   192.168.44.3:40127                              8.8.4.4:53   49118 kas-av-updates.mailfrontier.net. A     25.1      RD    No Error. 2 answers
-37.6   192.168.44.3:54373                                           15793 kas-av-updates.mailfrontier.net. A               RD    Question
-36.8   192.168.44.3:50603                                           20839 kas-av-updates.mailfrontier.net. A               RD    Question
-35.8   192.168.44.3:59500                                           35732 kas-av-updates.mailfrontier.net. A               RD    Question
-35.1   192.168.44.3:58254                                           9095  kas-av-updates.mailfrontier.net. A               RD    Question
-34.3   192.168.44.3:51857                                           43880 kas-av-updates.mailfrontier.net. A               RD    Question
-33.8   192.168.44.3:44658                                           52531 kas-av-updates.mailfrontier.net. A               RD    Question
-33.4   192.168.44.3:52281                                           9542  kas-av-updates.mailfrontier.net. A               RD    Question
-32.9   192.168.44.3:59384                                           46892 kas-av-updates.mailfrontier.net. A               RD    Question


The machine with the dnsdist installed resolves kas-av-updates.mailfrontier.net just fine.

I wasn’t able to find any RCODE=2 or RCODE=3 responses for that specific dns name.

Help highly appreciated.

—Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2297 bytes
Desc: not available
URL: <http://mailman.powerdns.com/pipermail/dnsdist/attachments/20160714/b8a304f5/attachment.bin>