[rescue] Odd DNS problem with Solaris 8

[Greg A. Woods]

[ On Monday, November 12, 2001 at 15:17:56 (-0500), Steve Sandau wrote: ]
> Subject: Re: [rescue] Odd DNS problem with Solaris 8
>
> In other words... For troubleshooting the Solaris DNS oddities, I have
> picked a bad example! I'll run tcpdump with the flags you mention and
> see what a missed connection looks like.
> 
> No, I wasn't capturing the contents of all the packets. I had to run
> this for several hours before actually getting an error. (Hrm. Seemed to
> error out much more often when I wasn't looking.)

You can catch just DNS lookups (udp & tcp!) with something like:

	# tcpdump -vvv -s 1500 -n port 53

(don't forget the '-n'!  :-)

Or first write them to a file instead with:

	# tcpdump -s 1500 -n -w dns-queries.tcp port 53

and then you can analyse them off-line with something more capable of
sorting out the details, such as ethereal....

-- 
							Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods at acm.org>     <woods at robohack.ca>
Planix, Inc. <woods at planix.com>;   Secrets of the Weird <woods at weird.com>