Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

UDP issue - queries with udp port 53 / dns #52

Open
nuttysquirrel opened this issue Apr 4, 2019 · 2 comments
Open

UDP issue - queries with udp port 53 / dns #52

nuttysquirrel opened this issue Apr 4, 2019 · 2 comments

Comments

@nuttysquirrel
Copy link

nuttysquirrel commented Apr 4, 2019

hi all,
I'm running into issues with UDP based DNS resolution (getting consistent but 'random' timeouts). I'm using pen from github / compiled source (it says "pen 0.35.0").

I've added basic packet captures. It represents 3 concurrent "nslookup www.cname.myserver.guy" attempts, nothing fancy - just start the pen process and try three times. the first two work fine, the last does not.

In the first transaction, the source port of the udp request 46590 matches in the return packet. The nslookup works fine.

17:52:51.692302 IP dnssource.myserver.guy.46590 > resolver.myserver.guy.domain:  25463+ A? www.cname.myserver.guy. (36)
17:52:51.693977 IP resolver.myserver.guy.domain > dnssource.myserver.guy.46590:  25463* 1/2/2 A www.myserver.guy (120)

The same for the second transaction, the source port 35253 matches in the return packet, and the nslookup works fine..

17:52:57.551415 IP dnssource.myserver.guy.35253 > resolver.myserver.guy.domain:  22653+ A? www.cname.myserver.guy. (36)
17:52:57.552963 IP resolver.myserver.guy.domain > dnssource.myserver.guy.35253:  22653* 1/2/2 A www.myserver.guy (120)

however! in the third request, the source port is 39939 but the return packet has the port of the previous packet 35253. This packet never gets back to the nslookup and so fails with a timeout.

17:53:00.740266 IP dnssource.myserver.guy.39939 > resolver.myserver.guy.domain:  4360+ A? www.cname.myserver.guy. (36)
17:53:00.741555 IP resolver.myserver.guy.domain > dnssource.myserver.guy.35253:  4360* 1/2/2 A www.myserver.guy (120)

For what it's worth... if I change the config to use TCP for DNS requests, it all works wonderfully!

oh, another interesting point is that the exact same configuration with pen 0.25.1 also works with no issues.

@nuttysquirrel nuttysquirrel changed the title UDP issue UDP issue - queries with udp port 53 / dns Apr 4, 2019
@ergo70
Copy link

ergo70 commented Apr 20, 2019

I can confirm that described behavior with UDP packets and pen 0.35. I can also confirm that it does not happen with 0.25.1. I have not checked every subsequent version to find where it broke, though.

@ergo70
Copy link

ergo70 commented Apr 20, 2019

It also happens with 0.34.1. Unfortunately, I could not track it further down the versions because of compilation errors with OpenSSL...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants