http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5790





------- Additional Comments From [EMAIL PROTECTED]  2008-01-17 13:22 -------
> when I look at the tcpdump output it looks to me that there are
> exactly the same number of responses as there are queries.

You are right. I was comparing both files side by side in parallel
windows and this was my impression (the NXDomain in chunks on one
side but not on the other), but I was wrong.

The first file has 105 queries and as many replies,
the second dump has 89 queries and 89 replies.

A diff on the sorted list of queries from both files seems interesting,
although I can't see what it tells us:

$ pcregrep '> .*\.domain:' 0.lis | \
  perl -ne 'print "$1\n" if /\b([A-Z]+\?\s+\S+)/' | sort >00.lis
$ pcregrep '> .*\.domain:' 1.lis | \
  perl -ne 'print "$1\n" if /\b([A-Z]+\?\s+\S+)/' | sort >11.lis
$ diff -U1 00.lis 11.lis
-A? angler.adi.com.
-A? bluegill.adi.com.
-A? bluegill.adi.com.
-A? crayfish.adi.com.
-A? dolphin.adi.com.
-A? dolphin.adi.com.
+A? bluefish.adi.com.
-A? od-in-f164.google.com.
-A? od-in-f165.google.com.
+A? mackerel.adi.com.
-A? od-in-f167.google.com.
-A? pagead2.googlesyndication.com.
-A? seahorse.adi.com.
...
-NS? ebay.com.
+NS? comcast.net.
+NS? sourceforge.net.
...
-NS? w3.org.
-PTR? 101.2.168.192.in-addr.arpa.
-PTR? 126.2.168.192.in-addr.arpa.
-PTR? 131.2.168.192.in-addr.arpa.
-PTR? 134.2.168.192.in-addr.arpa.
-PTR? 164.161.233.64.in-addr.arpa.
-PTR? 165.161.233.64.in-addr.arpa.
+PTR? 144.2.168.192.in-addr.arpa.
-PTR? 167.161.233.64.in-addr.arpa.
-PTR? 95.2.168.192.in-addr.arpa.

and here is a list of timed-out queries from your log:

timing: 31.761 X dns:A:14.35.17.212.iadb.isipp.com.
timing: 31.768 X dns:A:226.149.120.193.zen.spamhaus.org.
timing: 31.771 X dns:A:18.13.119.61.zen.spamhaus.org.
timing: 31.774 X dns:A:134.88.73.210.zen.spamhaus.org.
timing: 31.777 X dns:A:98.3.137.144.zen.spamhaus.org.
timing: 31.792 X dns:TXT:14.35.17.212.sb.dnsbltest.spamassassin.org.
timing: 31.796 X dns:TXT:226.149.120.193.sb.dnsbltest.spamassassin.org.
timing: 31.799 X dns:TXT:18.13.119.61.sb.dnsbltest.spamassassin.org.
timing: 31.802 X dns:TXT:134.88.73.210.sb.dnsbltest.spamassassin.org.
timing: 31.806 X dns:TXT:98.3.137.144.sb.dnsbltest.spamassassin.org.
timing: 31.811 X dns:TXT:14.35.17.212.dnsbltest.spamassassin.org.
timing: 31.814 X dns:TXT:226.149.120.193.dnsbltest.spamassassin.org.
timing: 31.817 X dns:TXT:18.13.119.61.dnsbltest.spamassassin.org.
timing: 31.820 X dns:TXT:134.88.73.210.dnsbltest.spamassassin.org.
timing: 31.824 X dns:TXT:98.3.137.144.dnsbltest.spamassassin.org.
timing: 31.829 X dns:A:226.149.120.193.dnsbltest.spamassassin.org.
timing: 31.832 X dns:A:18.13.119.61.dnsbltest.spamassassin.org.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to