Alas, it wasn't fixed. I've narrowed it down to the modem - it returns a
malformed response packet. It looks like either a new modem or working
around it are the only options. I can't see any way to hold back the
tide of clients calling the ipv6 resolution functions.

> > tcpdump indicated that the responses to AAAA queries were 1.0.0.0. AAAA
> > queries are ipv6, btw, so it is related. I found a little on firefox and
> 
> Yeah, I had suspicions about ipv6 too, but I don't have ipv6 as a module
> or built into the kernel either, so I gave up on that being the problem.
I took it out of the kernel and it happened less simply because my
testing ground was firefox which seems to only try ipv6 if you have ipv6
interfaces (including localhost) - but other things like wget and lynx
seem to always do it, and this will probably spread like wildfire, which
is a Good ThingTM.

> > Turning off ipv6 in my kernel (by deleting the modules and rebooting)
> > kept firefox from looking up ipv6 and allowed me to browse again, but I
> > still see occasional AAAA queries. I'm not sure that the problem is
> 
> What exactly is an AAAA query?
Like an A query (what is the number for this name), but for ipv6.

Attached is the ethereal output for the malformed packet, for the
curious. If anyone knows how to make an Actiontec GT701-WG behave itself
and not do this, that would be keen.

-- 
 .O.  Hans Fugal            | De gustibus non disputandum est.
 ..O  http://hans.fugal.net | Debian, vim, mutt, ruby, text, gpg
 OOO                        | WindowMaker, gaim, UTF-8, RISC, JS Bach
---------------------------------------------------------------------
GnuPG Fingerprint: 6940 87C5 6610 567F 1E95  CB5E FC98 E8CD E0AA D460
Frame 15 (72 bytes on wire, 72 bytes captured)
    Arrival Time: May 18, 2004 18:13:32.066857000
    Time delta from previous packet: 0.003461000 seconds
    Time since reference or first frame: 13.953880000 seconds
    Frame Number: 15
    Packet Length: 72 bytes
    Capture Length: 72 bytes
Ethernet II, Src: 00:20:e0:1d:b3:6a, Dst: 00:60:97:e4:83:27
    Destination: 00:60:97:e4:83:27 (3com_e4:83:27)
    Source: 00:20:e0:1d:b3:6a (PremaxEl_1d:b3:6a)
    Type: IP (0x0800)
Internet Protocol, Src Addr: 192.168.0.1 (192.168.0.1), Dst Addr: 192.168.0.4 
(192.168.0.4)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 58
    Identification: 0x0000 (0)
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xb95d (correct)
    Source: 192.168.0.1 (192.168.0.1)
    Destination: 192.168.0.4 (192.168.0.4)
User Datagram Protocol, Src Port: domain (53), Dst Port: 33483 (33483)
    Source port: domain (53)
    Destination port: 33483 (33483)
    Length: 38
    Checksum: 0x7e9d (correct)
Domain Name System (response)
    Transaction ID: 0x646c
    Flags: 0x8100 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 0... .... = Recursion available: Server can't do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not 
authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 1
    Authority RRs: 0
    Additional RRs: 0
    Queries
        slashdot.org: type AAAA, class inet
            Name: slashdot.org
            Type: IPv6 address
            Class: inet
    Answers
[Malformed Packet: DNS]

0000  00 60 97 e4 83 27 00 20 e0 1d b3 6a 08 00 45 00   .`...'. ...j..E.
0010  00 3a 00 00 40 00 40 11 b9 5d c0 a8 00 01 c0 a8   .:[EMAIL PROTECTED]@..]......
0020  00 04 00 35 82 cb 00 26 7e 9d 64 6c 81 00 00 01   ...5...&~.dl....
0030  00 01 00 00 00 00 08 73 6c 61 73 68 64 6f 74 03   .......slashdot.
0040  6f 72 67 00 00 1c 00 01                           org.....

Attachment: signature.asc
Description: Digital signature

____________________
BYU Unix Users Group 
http://uug.byu.edu/ 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list

Reply via email to