named - syslog entries

[Fred Martin_1]

About 5 times per day, an entries like these appear in my syslog:

named[441]: ns_forw: query(mlhu5.ody.ca) NS points to CNAME (CA03.CIRA.ca:) learnt (CNAME=216.41.101.15:NS=216.41.101.15)

named[441]: sysquery: query(z3.eastlink.ca) NS points to CNAME (CA03.CIRA.ca:) learnt (CNAME=216.41.101.15:NS=216.41.101.15)

Can someone tell me exactly what this means? If it was simply a response to a DNS forward I would think it would occur a lot more than 5 times a day.

[Steven E. Protter]

Is your statment saying that this information is requested more than five times a day.

This is different than the repeating messgages I get on my BIND 4.9.7 server, so I'm assuming this is version 8.x or 9.2.0

My messages were caused by inconsistencies with other Microsoft DNS servers.

Two threads with similar messages:
http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0x7236c4c76f92d611abdb0090277a778c,00.html&qt=%22sysquery%3A+query%22&hit=1

http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0xe79f663ce855d511abcd0090277a778c,00.html&qt=%22sysquery%3A+query%22&hit=2

SEP

[Fred Martin_1]

No, they're not repeating messages. I get 5 or so, spread out during each day.

I should say that no other DNS/BIND messages appear in my syslogs, unless I do a restart, etc.

The CNAME= and NS= that you see happens to be the address of one of the forwarders that I use.

[Zigor Buruaga · Accepted solution]

Hi,

"ns_forw: query(INFOSUN.KOTEL.CO.KR) NS points to CNAME (daiduk.kaist.ac.kr:)
CATEGORY: default
SEVERITY: info
PAGE:
FURTHER INFO:

Indicates that, while resolving the domain name INFOSUN.KOTEL.CO.KR, your name server was referred to the name server daiduk.kaist.ac.kr, but that the name daidukkaist.ac.kr is an alias, which is illegal. "


Extracted from http://www.menandmice.com/docs/named_messages.htm

Hope this helps.
Kind regards,
Zigor