[Pdns-users] dnsreplay "mostly correct"?

[Augie Schwer]

I am not sure how to interpret this result from dnsreplay (out of svn):

'nwinsure.com.|#15', with id 41614 from 0.0.8.7:33321 to
209.204.159.20:53, orig rcode: 0, ours: 0, 2 vs 2, perfect: no
        * original nameserver did not provide recursion for this question *
        * mostly correct *
orig:
        nwinsure.com.   #15     '\# 13 0014087365727665723935c035'
        nwinsure.com.   #15     '\# 22
000a087365727665723934086170707269766572c015'
new:
        nwinsure.com.   #15     '\# 13 000a087365727665723934c035'
        nwinsure.com.   #15     '\# 22
0014087365727665723935086170707269766572c015'

They look exactly the same, so I'm not sure why dnsreplay returns
"mostly correct".

Also, dnsreplay is not replaying the entire packet capture. In a
capture of 26k queries it only replayed 2k; anyone know why that would
be?

I am going to try the dnsreplay out of the release tar ball, but was
wondering what was up with this tool.


-- 
Augie Schwer    -    Augie at Schwer.us    -    http://schwer.us
Key fingerprint = 9815 AE19 AFD1 1FE7 5DEE 2AC3 CB99 2784 27B0 C072