Skip to content

dnstap module mislabels message type

The DNSTAP module in Knot 2.1.1 enters the wrong message type in the protobuf for messages of type AQ. They are mislabeled as AR messages.

To repeat:

matt@centosdns.conundrum.com:~/etc/knot
12:40:54 (567) % rm capture.tap 

matt@centosdns.conundrum.com:~/etc/knot
12:40:56 (568) % knotd -c /home/matt/etc/knot/knot.conf -d

matt@centosdns.conundrum.com:~/etc/knot
12:41:03 (569) % kdig -p 5353 IN SOA myzone.test. @127.0.0.1   
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 40336
;; Flags: qr aa rd; QUERY: 1; ANSWER: 1; AUTHORITY: 0; ADDITIONAL: 0

;; QUESTION SECTION:
;; myzone.test.        		IN	SOA

;; ANSWER SECTION:
myzone.test.        	3600	IN	SOA	ns1.conundrum.com. hostmaster.conundrum.com. 2016022209 3600 900 1814400 3600

;; Received 93 B
;; Time 2016-02-24 12:41:16 UTC
;; From 127.0.0.1@5353(UDP) in 0.3 ms

matt@centosdns.conundrum.com:~/etc/knot
12:41:16 (570) % knotc -c /home/matt/etc/knot/knot.conf stop
stopping server

matt@centosdns.conundrum.com:~/etc/knot
12:41:24 (571) % dnstap-ldns -r capture.tap
2016-02-24 12:41:16.640673 AR 127.0.0.1 UDP 29b "myzone.test." IN SOA
2016-02-24 12:41:16.640731 AR 127.0.0.1 UDP 93b "myzone.test." IN SOA

Config for above test:

server:
  rundir: /home/matt/etc/knot
  user: matt:staff
  listen: 0.0.0.0@5353

log:
  - target: /home/matt/etc/knot/logfile
    server: debug
    zone: debug
    any: debug

mod-dnstap:
  - id: capture_all
    sink: /home/matt/etc/knot/capture.tap

template:
  - id: default
    storage: /home/matt/etc/knot/zones
    kasp-db: /home/matt/etc/knot/kasp
    module: mod-dnstap/capture_all

zone:
  - domain: myzone.test
    dnssec-signing: on