[Comm] Very strange DNS working

Pavel S. Khmelinsky =?iso-8859-1?q?hmepas_=CE=C1_yauza=2Eru?=
Вт Янв 21 00:45:29 MSK 2003


Всем привет!

Интересная вещь у меня на компе творится.
Стоит Junior 2.0 некотрыми пакетами обновленными из сизифа (в т.ч. 
glibc). Машина подключена к интернет по DLS (Точка.ру). Поверх DSL 
работает pppoe (PPP over Ethernet), т.е. соединение и аунтификация 
происходит по PPP.

Жил не тужил, горя не знал. И тут у прова днсы забарахлили ( в принципе 
бывает у них иногда такое, хотя редко очень и не на долго), т.е. то 
резолвятся хосты, то нет. Ну думаю пора ДНС поставить, тем более что 
давно собирался это сделать, да руки не доходили, а тут такой повод.

Поставил. Взял тот что из дистрибутива джуниора.  Все поначалу работало 
(первые минут 5) а потом перестало. Т.е. хосты что в кэше резолвятся, а 
остальные нет. Потом опять заработало, потом опять перестало и т.д. При 
этом если использовать внешний ДНС то все ок. Т.е. пишу "host 
www.yauza.ru 127.0.0.1" получаю "Host not found, try again.", пишу host 
www.yauza.ru 195.34.32.10 (ДНС прова) все ок. При этом провайдер божится 
что никакой фильтрации трафика у него нет и он в этом никак виноват быть 
не может. Для пробы взял 100% работающий на др. машине ДНС, собранный 
статически (т.е. никаких .so-шек не требующий) -- абсолютно таже 
история, то работает, то нет. Причем, на мой взгляд бессистемно.

root.hints взял с рабочего серва.

В тот момент когда ничего не работает ДНС орет в лог  lame server 
resolving на попытку резолва любого хоста. Версия ДНС в дистре -- 8.3.1, 
версия бинда собранная ручками со --static -- 9.2.1.

Сижу под динамическим ИП'ом, имеющим отображение в доменное имя. Т.е. 
весь диапазон динамических айпи имеет как прямое так и обратное отображение.

Хотелось бы попробовать притащить домой машину с нормально работающим 
ДНС и посмотреть как она себя поведет, но, к сожалению, не имею сейчас 
такой технической возможности :(*

Может у кого есть идеи по поводу дальнейшей диагностики проблемы?

Далее шлю кусок лога tcpdump'а в момент попытки резолва:

[hmepas на localhost hmepas]$ host irc.yauza.ru
Host not found, try again.

при этом

[hmepas на localhost hmepas]$ host irc.yauza.ru 195.34.32.10
Using domain server 195.34.32.10:
irc.yauza.ru is a nickname for ns.yauza.ru
ns.yauza.ru has address 217.150.60.1

[hmepas на localhost hmepas]$ sudo tcpdump -i ppp0 &> log
User level filter, protocol ALL, datagram packet socket
tcpdump: listening on ppp0
00:26:56.403572 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 19766 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:26:56.405574 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 42651 [b2&3=0x10] [1au] PTR? 
18.62.59.213.in-addr.arpa. (54) (DF)
00:26:58.410932 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.23.134.194.domain: 42489 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:26:58.410991 > ppp172-101.pppoe.mtu-net.ru.32814 > 
202.12.27.33.domain: 36630 [b2&3=0x10] [1au] PTR? 
18.62.59.213.in-addr.arpa. (54) (DF)
00:26:58.480653 < 202.12.27.33.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 42489 0/3/4 (153)
00:26:58.496591 < 202.12.27.33.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 36630 0/2/3 (129)
00:26:58.496991 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.19.domain: 51083 [b2&3=0x10] [1au] PTR? 
18.62.59.213.in-addr.arpa. (54) (DF)
00:26:58.552524 < 213.59.62.19.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 51083 0/2/3 (129)
00:26:58.552700 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 47156 [b2&3=0x10] [1au] PTR? 
18.62.59.213.in-addr.arpa. (54) (DF)
00:26:58.602507 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 47156 0/2/3 (129)
00:26:58.603427 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.19.domain: 11874 [b2&3=0x10] [1au] PTR? 
18.62.59.213.in-addr.arpa. (54) (DF)
00:26:58.658523 < 213.59.62.19.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 11874 0/2/3 (129)
00:26:58.658710 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 2966 [b2&3=0x10] [1au] PTR? 
18.62.59.213.in-addr.arpa. (54) (DF)
00:26:58.712366 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 2966 0/2/3 (129)
00:26:58.714132 > ppp172-101.pppoe.mtu-net.ru.32814 > 
128.250.22.2.domain: 1483 [b2&3=0x10] [1au] PTR? 
194.134.23.217.in-addr.arpa. (56) (DF)
00:26:58.772348 < 128.250.22.2.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 1483 0/2/3 (133)
00:26:58.772656 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.caravan.ru.domain: 44933 [b2&3=0x10] [1au] PTR? 
194.134.23.217.in-addr.arpa. (56) (DF)
00:26:58.828405 < ns.caravan.ru.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 44933 0/2/3 (133)
00:26:58.828574 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns2.caravan.ru.domain: 48267 [b2&3=0x10] [1au] PTR? 
194.134.23.217.in-addr.arpa. (56) (DF)
00:26:58.890217 < ns2.caravan.ru.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 48267 0/2/3 (133)
00:26:58.890885 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.caravan.ru.domain: 50391 [b2&3=0x10] [1au] PTR? 
194.134.23.217.in-addr.arpa. (56) (DF)
00:26:58.950159 < ns.caravan.ru.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 50391 0/2/3 (133)
00:26:58.950332 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns2.caravan.ru.domain: 17599 [b2&3=0x10] [1au] PTR? 
194.134.23.217.in-addr.arpa. (56) (DF)
00:26:59.006126 < ns2.caravan.ru.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 17599 0/2/3 (133)
00:26:59.007358 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.tokyo.wide.ad.jp.domain: 19451 [b2&3=0x10] [1au] PTR? 
33.27.12.202.in-addr.arpa. (54) (DF)
00:26:59.066181 < ns.tokyo.wide.ad.jp.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 19451 0/2/3 (145)
00:26:59.066383 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.fujisawa.wide.ad.jp.domain: 35031 [b2&3=0x10] [1au] PTR? 
33.27.12.202.in-addr.arpa. (54) (DF)
00:26:59.122080 < ns.fujisawa.wide.ad.jp.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 35031 0/2/3 (145)
00:26:59.122956 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.tokyo.wide.ad.jp.domain: 20301 [b2&3=0x10] [1au] PTR? 
33.27.12.202.in-addr.arpa. (54) (DF)
00:26:59.176015 < ns.tokyo.wide.ad.jp.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 20301 0/2/3 (145)
00:26:59.176226 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.fujisawa.wide.ad.jp.domain: 12585 [b2&3=0x10] [1au] PTR? 
33.27.12.202.in-addr.arpa. (54) (DF)
00:26:59.235908 < ns.fujisawa.wide.ad.jp.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 12585 0/2/3 (145)
00:26:59.237098 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.19.domain: 32022 [b2&3=0x10] [1au] PTR? 
19.62.59.213.in-addr.arpa. (54) (DF)
00:26:59.305816 < 213.59.62.19.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 32022 0/2/3 (129)
00:26:59.306002 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 57163 [b2&3=0x10] [1au] PTR? 
19.62.59.213.in-addr.arpa. (54) (DF)
00:26:59.383729 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 57163 0/2/3 (129)
00:26:59.384351 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.19.domain: 57814 [b2&3=0x10] [1au] PTR? 
19.62.59.213.in-addr.arpa. (54) (DF)
00:26:59.437680 < 213.59.62.19.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 57814 0/2/3 (129)
00:26:59.437850 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 63537 [b2&3=0x10] [1au] PTR? 
19.62.59.213.in-addr.arpa. (54) (DF)
00:26:59.493786 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 63537 0/2/3 (129)
00:26:59.495537 > ppp172-101.pppoe.mtu-net.ru.32814 > 
198.133.199.110.domain: 54988 [b2&3=0x10] [1au] PTR? 
2.22.250.128.in-addr.arpa. (54) (DF)
00:26:59.495815 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 30172 [b2&3=0x10] [1au] A? CHIA.ARIN.NET. 
(42) (DF)
00:26:59.495968 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 15086 [b2&3=0x10] [1au] A? DILL.ARIN.NET. 
(42) (DF)
00:26:59.496098 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 40311 [b2&3=0x10] [1au] A? HENNA.ARIN.NET. 
(43) (DF)
00:26:59.496281 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 57267 [b2&3=0x10] [1au] A? INDIGO.ARIN.NET. 
(44) (DF)
00:26:59.496437 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 3036 [b2&3=0x10] [1au] A? EPAZOTE.ARIN.NET. 
(45) (DF)
00:26:59.496592 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 664 [b2&3=0x10] [1au] A? FIGWORT.ARIN.NET. 
(45) (DF)
00:26:59.496723 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 332 [b2&3=0x10] [1au] A? GINSENG.ARIN.NET. 
(45) (DF)
00:26:59.565887 < 198.133.199.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 54988 0/9/10 (395)
00:26:59.566284 > ppp172-101.pppoe.mtu-net.ru.32814 > 
192.100.59.110.domain: 32828 [b2&3=0x10] [1au] PTR? 
2.22.250.128.in-addr.arpa. (54) (DF)
00:26:59.653749 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 30172 1/10/11 A 192.5.6.32 (407)
00:26:59.685766 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 15086 1/10/11 A f3.NSTLD.COM (407)
00:26:59.719668 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 40311 1/10/11 A jerk.arin.net (408)
00:26:59.751632 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 57267 1/10/11 A d3.NSTLD.COM (409)
00:26:59.785591 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 3036 1/10/11 A epazote.arin.net (410)
00:26:59.817634 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 664 1/10/11 A figwort.arin.net (410)
00:26:59.851648 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 332 1/10/11 A b3.NSTLD.COM (410)
00:26:59.885515 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 32828 0/9/10 (395)
00:27:00.420927 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.150.60.1.domain: 57440 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:27:00.556617 < 217.150.60.1.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 57440 0/3/4 (153)
00:27:00.556986 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 61488 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:27:00.610517 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 61488 0/3/4 (153)
00:27:00.610688 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.23.134.194.domain: 30744 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:27:00.662482 < 217.23.134.194.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 30744 0/3/4 (153)
00:27:00.663373 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.150.60.1.domain: 15372 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:27:00.718428 < 217.150.60.1.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 15372 0/3/4 (153)
00:27:00.718613 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 36716 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:27:00.772423 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 36716 0/3/4 (153)
00:27:00.772551 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.23.134.194.domain: 51126 [b2&3=0x10] [1au] A? irc.yauza.ru. (41) (DF)
00:27:00.826311 < 217.23.134.194.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 51126 0/3/4 (153)
00:27:00.826952 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.150.60.1.domain: 45539 [b2&3=0x10] [1au] MX? irc.yauza.ru. (41) (DF)
00:27:00.878273 < 217.150.60.1.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 45539 0/3/4 (153)
00:27:00.878448 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 26490 [b2&3=0x10] [1au] MX? irc.yauza.ru. (41) (DF)
00:27:00.934192 < 213.59.62.18.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 26490 0/3/4 (153)
00:27:00.934309 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.23.134.194.domain: 22938 [b2&3=0x10] [1au] MX? irc.yauza.ru. (41) (DF)
00:27:00.984146 < 217.23.134.194.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 22938 0/3/4 (153)
00:27:00.984763 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.150.60.1.domain: 22050 [b2&3=0x10] [1au] MX? irc.yauza.ru. (41) (DF)
00:27:01.040129 < 217.150.60.1.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 22050 0/3/4 (153)
00:27:01.040437 > ppp172-101.pppoe.mtu-net.ru.32814 > 
217.23.134.194.domain: 38278 [b2&3=0x10] [1au] MX? irc.yauza.ru. (41) (DF)
00:27:01.094070 < 217.23.134.194.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 38278 0/3/4 (153)
00:27:01.094218 > ppp172-101.pppoe.mtu-net.ru.32814 > 
213.59.62.18.domain: 25893 [b2&3=0x10] [1au] MX? irc.yauza.ru. (41) (DF)
00:27:01.147003 > ppp172-101.pppoe.mtu-net.ru.32814 > 
i.root-servers.net.domain: 27596 [b2&3=0x10] [1au] A? 
irc.yauza.ru.localdomain. (53) (DF)
00:27:01.231052 > ppp172-101.pppoe.mtu-net.ru.32814 > 
192.5.5.241.domain: 39638 [b2&3=0x10] [1au] A? irc.yauza.ru.localdomain. 
(53) (DF)
00:27:01.332453 > ppp172-101.pppoe.mtu-net.ru.32814 > 
l.root-servers.net.domain: 19819 [b2&3=0x10] [1au] A? 
irc.yauza.ru.localdomain. (53) (DF)
00:27:01.408254 > ppp172-101.pppoe.mtu-net.ru.32814 > 
k.root-servers.net.domain: 26686 [b2&3=0x10] [1au] A? 
irc.yauza.ru.localdomain. (53) (DF)
00:27:09.511522 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.caravan.ru.domain: 29818 [b2&3=0x10] [1au] PTR? 
1.130.23.217.in-addr.arpa. (54) (DF)
00:27:09.567737 < ns.caravan.ru.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 29818 1/2/3 PTR ns.caravan.ru. (145)
00:27:09.570241 > ppp172-101.pppoe.mtu-net.ru.32814 > 
f3.NSTLD.COM.domain: 23898 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:09.639917 < f3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 23898 0/9/10 (398)
00:27:09.640245 > ppp172-101.pppoe.mtu-net.ru.32814 > 
d3.NSTLD.COM.domain: 44717 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:09.713886 < d3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 44717 0/9/10 (398)
00:27:09.714273 > ppp172-101.p00:27:09.850091 > 
ppp172-101.pppoe.mtu-net.ru.32814 > b3.NSTLD.COM.domain: 64166 
[b2&3=0x10] [1au] PTR? 110.199.133.198.in-addr.arpa. (57) (DF)
00:27:09.921597 < b3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 64166 0/9/10 (398)
00:27:09.921871 > ppp172-101.pppoe.mtu-net.ru.32814 > 
jerk.arin.net.domain: 64851 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:09.997547 < jerk.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 64851 0/9/10 (398)
00:27:09.997810 > ppp172-101.pppoe.mtu-net.ru.32814 > 192.5.6.32.domain: 
51540 [b2&3=0x10] [1au] PTR? 110.199.133.198.in-addr.arpa. (57) (DF)
00:27:10.073584 < 192.5.6.32.domain > ppp172-101.pppoe.mtu-net.ru.32814: 
51540 0/9/10 (398)
00:27:10.073751 > ppp172-101.pppoe.mtu-net.ru.32814 > 
198.133.199.110.domain: 58538 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:10.153359 < 198.133.199.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 58538 0/9/10 (398)
00:27:10.153527 > ppp172-101.pppoe.mtu-net.ru.32814 > 
192.100.59.110.domain: 14702 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:10.325260 < 192.100.59.110.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 14702 0/9/10 (398)
00:27:10.326347 > ppp172-101.pppoe.mtu-net.ru.32814 > 
f3.NSTLD.COM.domain: 52821 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:10.395199 < f3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 52821 0/9/10 (398)
00:27:10.395450 > ppp172-101.pppoe.mtu-net.ru.32814 > 
d3.NSTLD.COM.domain: 9600 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:10.465193 < d3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 9600 0/9/10 (398)
00:27:10.465591 > ppp172-101.pppoe.mtu-net.ru.32814 > 
figwort.arin.net.domain: 51471 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:10.535045 < figwort.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 51471 0/9/10 (398)
00:27:11.105825 > ppp172-101.pppoe.mtu-net.ru.32814 > 
192.100.59.2.domain: 47415 [b2&3=0x10] [1au] PTR? 
110.59.100.192.in-addr.arpa. (56) (DF)
00:27:11.160211 < 192.100.59.2.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 47415 0/2/3 (137)
00:27:11.160567 > ppp172-101.pppoe.mtu-net.ru.32814 > 
198.133.199.1.domain: 60981 [b2&3=0x10] [1au] PTR? 
110.59.100.192.in-addr.arpa. (56) (DF)
00:27:11.216775 > ppp172-101.pppoe.mtu-net.ru.32814 > 
192.100.59.2.domain: 56257 [b2&3=0x10] [1au] PTR? 
110.59.100.192.in-addr.arpa. (56) (DF)
00:27:11.272785 > ppp172-101.pppoe.mtu-net.ru.32814 > 
198.133.199.1.domain: 40349 [b2&3=0x10] [1au] PTR? 
110.59.100.192.in-addr.arpa. (56) (DF)
00:27:11.323261 > ppp172-101.pppoe.mtu-net.ru.32814 > 
a2.NSTLD.COM.domain: 45736 [b2&3=0x10] [1au] PTR? 
32.6.5.192.in-addr.arpa. (52) (DF)
00:27:11.392139 < a2.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 45736 0/8/9 (325)
00:27:11.392560 > ppp172-101.pppoe.mtu-net.ru.32814 > 
d2.NSTLD.COM.domain: 60613 [b2&3=0x10] [1au] PTR? 
32.6.5.192.in-addr.arpa. (52) (DF)
00:27:11.462393 > ppp172-101.pppoe.mtu-net.ru.32814 > 
e2.NSTLD.COM.domain: 58570 [b2&3=0x10] [1au] PTR? 
32.6.5.192.in-addr.arpa. (52) (DF)
00:27:11.542117 > ppp172-101.pppoe.mtu-net.ru.32814 > 
f2.NSTLD.COM.domain: 31094 [b2&3=0x10] [1au] PTR? 
32.6.5.192.in-addr.arpa. (52) (DF)
00:27:12.547997 > ppp172-101.pppoe.mtu-net.ru.32814 > 
128.250.22.2.domain: 52466 [b2&3=0x10] [1au] PTR? 
1.60.150.217.in-addr.arpa. (54) (DF)
00:27:12.619099 < 128.250.22.2.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 52466 0/7/12 (440)
00:27:12.619507 > ppp172-101.pppoe.mtu-net.ru.32814 > 198.6.1.65.domain: 
26233 [b2&3=0x10] [1au] PTR? 1.60.150.217.in-addr.arpa. (54) (DF)
00:27:12.694971 < 198.6.1.65.domain > ppp172-101.pppoe.mtu-net.ru.32814: 
26233 0/7/12 (440)
00:27:12.695265 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.apnic.net.domain: 35089 [b2&3=0x10] [1au] PTR? 
1.60.150.217.in-addr.arpa. (54) (DF)
00:27:12.774921 < ns.apnic.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 35089 0/7/12 (440)
00:27:12.775301 > ppp172-101.pppoe.mtu-net.ru.32814 > ns3.nic.fr.domain: 
60026 [b2&3=0x10] [1au] PTR? 1.60.150.217.in-addr.arpa. (54) (DF)
00:27:12.852791 < ns3.nic.fr.domain > ppp172-101.pppoe.mtu-net.ru.32814: 
60026 0/7/12 (440)
00:27:12.853211 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns3.apnic.net.domain: 64144 [b2&3=0x10] [1au] PTR? 
1.60.150.217.in-addr.arpa. (54) (DF)
00:27:12.926697 < ns3.apnic.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 64144 0/7/12 (440)
00:27:12.926986 > ppp172-101.pppoe.mtu-net.ru.32814 > 
sunic.sunet.se.domain: 64840 [b2&3=0x10] [1au] PTR? 
1.60.150.217.in-addr.arpa. (54) (DF)
00:27:12.998616 < sunic.sunet.se.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 64840 0/7/12 (440)
00:27:12.998794 > ppp172-101.pppoe.mtu-net.ru.32814 > 
ns.ripe.net.domain: 48957 [b2&3=0x10] [1au] PTR? 
1.60.150.217.in-addr.arpa. (54) (DF)
00:27:13.749404 > ppp172-101.pppoe.mtu-net.ru.32814 > 
f3.NSTLD.COM.domain: 63939 [b2&3=0x10] [1au] PTR? 
241.5.5.192.in-addr.arpa. (53) (DF)
00:27:13.817775 < f3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 63939 0/9/10 (394)
00:27:13.818178 > ppp172-101.pppoe.mtu-net.ru.32814 > 
d3.NSTLD.COM.domain: 8364 [b2&3=0x10] [1au] PTR? 
241.5.5.192.in-addr.arpa. (53) (DF)
00:27:13.893748 < d3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 8364 0/9/10 (394)
00:27:13.894057 > ppp172-101.pppoe.mtu-net.ru.32814 > 
figwort.arin.net.domain: 2116 [b2&3=0x10] [1au] PTR? 
241.5.5.192.in-addr.arpa. (53) (DF)
00:27:13.963591 < figwort.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 2116 0/9/10 (394)
00:27:13.963762 > ppp172-101.pppoe.mtu-net.ru.32814 > 
epazote.arin.net.domain: 33826 [b2&3=0x10] [1au] PTR? 
241.5.5.192.in-addr.arpa. (53) (DF)
00:27:14.035591 < epazote.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 33826 0/9/10 (394)
00:27:14.035985 > ppp172-101.pppoe.mtu-net.ru.32814 > 
b3.NSTLD.COM.domain: 49681 [b2&3=0x10] [1au] PTR? 
241.5.5.192.in-addr.arpa. (53) (DF)
00:27:14.109522 < b3.NSTLD.COM.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 49681 0/9/10 (394)
00:27:14.109798 > ppp172-101.pppoe.mtu-net.ru.32814 > 
jerk.arin.net.domain: 56282 [b2&3=0x10] [1au] PTR? 
241.5.5.192.in-addr.arpa. (53) (DF)
00:27:14.179409 < jerk.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 56282 0/9/10 (394)
ppoe.mtu-net.ru.32814 > figwort.arin.net.domain: 5114 [b2&3=0x10] [1au] 
PTR? 110.199.133.198.in-addr.arpa. (57) (DF)
00:27:09.781769 < figwort.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 5114 0/9/10 (398)
00:27:09.782172 > ppp172-101.pppoe.mtu-net.ru.32814 > 
epazote.arin.net.domain: 35325 [b2&3=0x10] [1au] PTR? 
110.199.133.198.in-addr.arpa. (57) (DF)
00:27:09.849694 < epazote.arin.net.domain > 
ppp172-101.pppoe.mtu-net.ru.32814: 35325 0/9/10 (398)
(...........)





Подробная информация о списке рассылки community