[Pdns-users] Re: dnsreplay "mostly correct"?

[Augie Schwer]

Never mind, sorry for the spam, they are different. :)

On 7/20/07, Augie Schwer <augie.schwer at gmail.com> wrote:
> I am not sure how to interpret this result from dnsreplay (out of svn):
>
> 'nwinsure.com.|#15', with id 41614 from 0.0.8.7:33321 to
> 209.204.159.20:53, orig rcode: 0, ours: 0, 2 vs 2, perfect: no
>         * original nameserver did not provide recursion for this question *
>         * mostly correct *
> orig:
>         nwinsure.com.   #15     '\# 13 0014087365727665723935c035'
>         nwinsure.com.   #15     '\# 22
> 000a087365727665723934086170707269766572c015'
> new:
>         nwinsure.com.   #15     '\# 13 000a087365727665723934c035'
>         nwinsure.com.   #15     '\# 22
> 0014087365727665723935086170707269766572c015'
>
> They look exactly the same, so I'm not sure why dnsreplay returns
> "mostly correct".
>
> Also, dnsreplay is not replaying the entire packet capture. In a
> capture of 26k queries it only replayed 2k; anyone know why that would
> be?
>
> I am going to try the dnsreplay out of the release tar ball, but was
> wondering what was up with this tool.
>
>
> --
> Augie Schwer    -    Augie at Schwer.us    -    http://schwer.us
> Key fingerprint = 9815 AE19 AFD1 1FE7 5DEE 2AC3 CB99 2784 27B0 C072
>


-- 
Augie Schwer    -    Augie at Schwer.us    -    http://schwer.us
Key fingerprint = 9815 AE19 AFD1 1FE7 5DEE 2AC3 CB99 2784 27B0 C072