Unbound reply with an empty A record, can it be converted to SERVFAIL?

Wed Jan 23 03:42:36 UTC 2019

This is a dig + TCPDUMP + jourlanctl of what happens when there is a network issue.
It appears that the network issue is maby a DNS interception of some sort :\
So it's a DNSSEC issue and you see that there is a SERVFAIL but...
The issue is probably with the downstream Dnsmasq handling of SERVFAIL.

root at dns2-main:~# dig walla.co.il @127.0.0.1

; <<>> DiG 9.10.3-P4-Ubuntu <<>> walla.co.il @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 60826
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;walla.co.il.                   IN      A

;; Query time: 109 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Jan 23 05:33:33 IST 2019
;; MSG SIZE  rcvd: 40

root at dns2-main:~# fg
tcpdump -n -i any port 53 -nn
..
05:33:22.897304 IP 127.0.0.1.34769 > 127.0.0.1.53: 60826+ [1au] A? walla.co.il. (40)
05:33:22.897388 IP 10.0.0.153.20169 > 198.41.0.4.53: 26956% [1au] NS? . (28)
05:33:22.905118 IP 198.41.0.4.53 > 10.0.0.153.20169: 26956 13/13/26 NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net. (1472)
05:33:22.905266 IP 10.0.0.153.43765 > 199.7.91.13.53: 2896% [1au] NS? . (28)
05:33:22.911221 IP 199.7.91.13.53 > 10.0.0.153.43765: 2896 13/13/26 NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net. (1472)
05:33:22.911366 IP 10.0.0.153.35944 > 192.228.79.201.53: 16609% [1au] NS? . (28)
05:33:22.918586 IP 192.228.79.201.53 > 10.0.0.153.35944: 16609 13/13/26 NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net. (1472)
05:33:22.918757 IP 10.0.0.153.8587 > 193.0.14.129.53: 6434% [1au] NS? . (28)
05:33:22.925972 IP 193.0.14.129.53 > 10.0.0.153.8587: 6434 13/13/26 NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net. (1472)
05:33:22.926100 IP 10.0.0.153.51021 > 199.7.83.42.53: 53981% [1au] NS? . (28)
05:33:22.932906 IP 199.7.83.42.53 > 10.0.0.153.51021: 53981 13/13/26 NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net. (1472)
05:33:22.933133 IP 10.0.0.153.37387 > 192.33.4.12.53: 51427% [1au] NS? . (28)
05:33:22.943008 IP 192.33.4.12.53 > 10.0.0.153.37387: 51427 13/13/26 NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net. (1472)
05:33:22.943134 IP 10.0.0.153.30777 > 192.58.128.30.53: 1928% [1au] NS? . (28)
05:33:22.957770 IP 192.58.128.30.53 > 10.0.0.153.30777: 1928 13/13/26 NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net. (1472)
05:33:22.958032 IP 10.0.0.153.19683 > 192.36.148.17.53: 33130% [1au] NS? . (28)
05:33:22.964409 IP 192.36.148.17.53 > 10.0.0.153.19683: 33130 13/13/26 NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net. (1472)
05:33:22.964609 IP 10.0.0.153.36323 > 192.203.230.10.53: 39044% [1au] NS? . (28)
05:33:22.974938 IP 192.203.230.10.53 > 10.0.0.153.36323: 39044 13/13/26 NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net. (1472)
05:33:22.975145 IP 10.0.0.153.34147 > 198.97.190.53.53: 37221% [1au] NS? . (28)
05:33:22.981807 IP 198.97.190.53.53 > 10.0.0.153.34147: 37221 13/13/26 NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net. (1472)
05:33:22.982070 IP 10.0.0.153.19154 > 192.112.36.4.53: 44241% [1au] NS? . (28)
05:33:22.991900 IP 192.112.36.4.53 > 10.0.0.153.19154: 44241 13/13/26 NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net. (1472)
05:33:22.992125 IP 10.0.0.153.31020 > 192.5.5.241.53: 10047% [1au] NS? . (28)
05:33:22.998401 IP 192.5.5.241.53 > 10.0.0.153.31020: 10047 13/13/26 NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net. (1472)
05:33:22.998799 IP 10.0.0.153.62033 > 202.12.27.33.53: 44684% [1au] NS? . (28)
05:33:23.005250 IP 202.12.27.33.53 > 10.0.0.153.62033: 44684 13/13/26 NS b.root-servers.net., NS c.root-servers.net., NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net. (1472)
05:33:23.005649 IP 10.0.0.153.32091 > 192.203.230.10.53: 16715+% [1au] NS? . (28)
05:33:23.012533 IP 192.203.230.10.53 > 10.0.0.153.32091: 16715 13/13/26 NS d.root-servers.net., NS e.root-servers.net., NS f.root-servers.net., NS g.root-servers.net., NS h.root-servers.net., NS i.root-servers.net., NS j.root-servers.net., NS a.root-servers.net., NS k.root-servers.net., NS l.root-servers.net., NS m.root-servers.net., NS b.root-servers.net., NS c.root-servers.net. (1472)
05:33:23.012771 IP 10.0.0.153.7577 > 199.9.14.201.53: 53931% [1au] A? g.root-servers.net. (47)
05:33:23.012819 IP 10.0.0.153.36448 > 199.9.14.201.53: 40776% [1au] A? h.root-servers.net. (47)
05:33:23.012855 IP 10.0.0.153.25538 > 199.9.14.201.53: 1181% [1au] A? i.root-servers.net. (47)
05:33:23.012901 IP 10.0.0.153.44482 > 199.9.14.201.53: 42562% [1au] A? j.root-servers.net. (47)
05:33:23.012934 IP 10.0.0.153.33545 > 199.9.14.201.53: 49625% [1au] A? k.root-servers.net. (47)
05:33:23.012986 IP 10.0.0.153.47939 > 199.9.14.201.53: 24043% [1au] A? l.root-servers.net. (47)
05:33:23.021991 IP 199.9.14.201.53 > 10.0.0.153.54392: 7114 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:23.389634 IP 10.0.0.153.23945 > 199.9.14.201.53: 63175% [1au] A? g.root-servers.net. (47)
05:33:23.389700 IP 10.0.0.153.47685 > 199.9.14.201.53: 16783% [1au] AAAA? c.root-servers.net. (47)
05:33:23.389732 IP 10.0.0.153.37498 > 199.9.14.201.53: 22695% [1au] AAAA? j.root-servers.net. (47)
05:33:23.389751 IP 10.0.0.153.15333 > 199.9.14.201.53: 37043% [1au] AAAA? i.root-servers.net. (47)
05:33:23.389780 IP 10.0.0.153.52616 > 199.9.14.201.53: 56341% [1au] AAAA? g.root-servers.net. (47)
05:33:23.389796 IP 10.0.0.153.51929 > 199.9.14.201.53: 13370% [1au] AAAA? f.root-servers.net. (47)
05:33:23.389811 IP 10.0.0.153.39605 > 199.9.14.201.53: 45582% [1au] A? walla.co.il. (40)
05:33:23.407969 IP 199.9.14.201.53 > 10.0.0.153.54147: 46522 1/13/12 A 199.7.91.13 (1102)
05:33:23.414674 IP 199.9.14.201.53 > 10.0.0.153.12183: 48377 1/13/12 A 199.9.14.201 (1102)
05:33:23.417818 IP 199.9.14.201.53 > 10.0.0.153.44482: 42562 1/13/12 A 192.58.128.30 (1102)
05:33:23.423304 IP 199.9.14.201.53 > 10.0.0.153.7577: 53931 1/13/12 A 192.112.36.4 (1102)
05:33:23.427182 IP 199.9.14.201.53 > 10.0.0.153.33545: 49625 1/13/12 A 193.0.14.129 (1102)
05:33:23.431634 IP 199.9.14.201.53 > 10.0.0.153.36448: 40776 1/13/12 A 198.97.190.53 (1102)
05:33:23.436049 IP 199.9.14.201.53 > 10.0.0.153.59557: 35665 1/13/12 A 192.5.5.241 (1102)
05:33:23.439590 IP 199.9.14.201.53 > 10.0.0.153.25538: 1181 1/13/12 A 192.36.148.17 (1102)
05:33:23.443784 IP 199.9.14.201.53 > 10.0.0.153.47939: 24043 1/13/12 A 199.7.83.42 (1102)
05:33:23.448525 IP 199.9.14.201.53 > 10.0.0.153.23613: 39215 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:23.452227 IP 199.9.14.201.53 > 10.0.0.153.40897: 22177 1/13/13 AAAA 2001:500:9f::42 (1148)
05:33:23.456532 IP 199.9.14.201.53 > 10.0.0.153.39867: 24753 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:23.460749 IP 199.9.14.201.53 > 10.0.0.153.46361: 36542 1/13/12 A 202.12.27.33 (1102)
05:33:23.465330 IP 199.9.14.201.53 > 10.0.0.153.23945: 33996 1/13/12 A 192.203.230.10 (1102)
05:33:23.470442 IP 199.9.14.201.53 > 10.0.0.153.37286: 43804 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:23.474486 IP 199.9.14.201.53 > 10.0.0.153.60991: 24984 1/13/13 AAAA 2001:dc3::35 (1148)
05:33:23.478757 IP 199.9.14.201.53 > 10.0.0.153.63371: 26876 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:23.487884 IP 199.9.14.201.53 > 10.0.0.153.27593: 21912 1/13/13 AAAA 2001:500:12::d0d (1148)
05:33:23.493893 IP 199.9.14.201.53 > 10.0.0.153.17296: 15202 1/13/12 A 192.33.4.12 (1102)
05:33:23.497762 IP 199.9.14.201.53 > 10.0.0.153.13513: 51451 1/13/13 AAAA 2001:500:2::c (1148)
05:33:23.506083 IP 199.9.14.201.53 > 10.0.0.153.37402: 886 1/13/12 A 198.41.0.4 (1102)
05:33:23.506136 IP 199.9.14.201.53 > 10.0.0.153.26221: 8331 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:23.620534 IP 199.9.14.201.53 > 10.0.0.153.53716: 22178 Refused- [0q] 0/0/0 (12)
05:33:23.684133 IP 10.0.0.153.64571 > 198.97.190.53.53: 50649+% [1au] AAAA? j.root-servers.net. (47)
05:33:23.743038 IP 199.9.14.201.53 > 10.0.0.153.23945: 63175 1/13/12 A 192.112.36.4 (1102)
05:33:23.752747 IP 199.9.14.201.53 > 10.0.0.153.51929: 13370 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:23.754569 IP 199.9.14.201.53 > 10.0.0.153.37498: 22695 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:23.766395 IP 199.9.14.201.53 > 10.0.0.153.15333: 37043 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:23.775023 IP 199.9.14.201.53 > 10.0.0.153.62011: 20233 1/13/12 A 199.7.83.42 (1102)
05:33:23.776859 IP 199.9.14.201.53 > 10.0.0.153.26807: 20985 1/13/12 A 198.97.190.53 (1102)
05:33:23.783777 IP 199.9.14.201.53 > 10.0.0.153.64944: 23090 1/13/12 A 199.7.91.13 (1102)
05:33:23.787193 IP 199.9.14.201.53 > 10.0.0.153.52021: 21416 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:23.791265 IP 199.9.14.201.53 > 10.0.0.153.22961: 34949 1/13/12 A 193.0.14.129 (1102)
05:33:23.798098 IP 199.9.14.201.53 > 10.0.0.153.24558: 41287 1/13/12 A 202.12.27.33 (1102)
05:33:23.800653 IP 199.9.14.201.53 > 10.0.0.153.56454: 9933 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:23.804601 IP 199.9.14.201.53 > 10.0.0.153.47685: 16783 1/13/13 AAAA 2001:500:2::c (1148)
05:33:23.809732 IP 199.9.14.201.53 > 10.0.0.153.37103: 16250 1/13/12 A 192.5.5.241 (1102)
05:33:23.814505 IP 199.9.14.201.53 > 10.0.0.153.52616: 56341 1/13/13 AAAA 2001:500:12::d0d (1148)
05:33:23.821453 IP 199.9.14.201.53 > 10.0.0.153.39824: 1238 1/13/12 A 198.41.0.4 (1102)
05:33:23.823942 IP 199.9.14.201.53 > 10.0.0.153.18872: 42067 1/13/12 A 192.33.4.12 (1102)
05:33:23.828003 IP 199.9.14.201.53 > 10.0.0.153.34696: 62909 1/13/12 A 192.203.230.10 (1102)
05:33:23.831762 IP 199.9.14.201.53 > 10.0.0.153.32863: 4236 1/13/12 A 199.9.14.201 (1102)
05:33:23.841046 IP 199.9.14.201.53 > 10.0.0.153.12715: 42854 1/13/13 AAAA 2001:500:9f::42 (1148)
05:33:23.841070 IP 199.9.14.201.53 > 10.0.0.153.22937: 47160 1/13/12 A 192.58.128.30 (1102)
05:33:23.844521 IP 199.9.14.201.53 > 10.0.0.153.22176: 65292 1/13/12 A 192.36.148.17 (1102)
05:33:23.953075 IP 199.9.14.201.53 > 10.0.0.153.47966: 15591 Refused- [0q] 0/0/0 (12)
05:33:23.953686 IP 199.9.14.201.53 > 10.0.0.153.39605: 45582 Refused- [0q] 0/0/0 (12)
05:33:23.972547 IP 10.0.0.153.27569 > 198.97.190.53.53: 51653+% [1au] AAAA? j.root-servers.net. (47)
05:33:24.060082 IP 198.97.190.53.53 > 10.0.0.153.64571: 50649 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:24.261008 IP 10.0.0.153.8859 > 199.7.83.42.53: 10775+% [1au] AAAA? j.root-servers.net. (47)
05:33:24.321329 IP 198.97.190.53.53 > 10.0.0.153.27569: 51653 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:24.549433 IP 10.0.0.153.28813 > 199.7.83.42.53: 50736+% [1au] AAAA? j.root-servers.net. (47)
05:33:24.600010 IP 199.7.83.42.53 > 10.0.0.153.8859: 10775 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:24.837905 IP 10.0.0.153.14006 > 198.97.190.53.53: 56560+% [1au] AAAA? j.root-servers.net. (47)
05:33:24.912728 IP 199.7.83.42.53 > 10.0.0.153.28813: 50736 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:25.176098 IP 198.97.190.53.53 > 10.0.0.153.14006: 56560 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:25.176312 IP 10.0.0.153.57101 > 192.203.230.10.53: 16041% [1au] AAAA? j.root-servers.net. (47)
05:33:25.534363 IP 192.203.230.10.53 > 10.0.0.153.57101: 16041 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:25.534483 IP 10.0.0.153.50072 > 192.36.148.17.53: 51362% [1au] AAAA? j.root-servers.net. (47)
05:33:25.874405 IP 192.36.148.17.53 > 10.0.0.153.50072: 51362 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:25.874521 IP 10.0.0.153.5734 > 199.7.83.42.53: 9749% [1au] AAAA? j.root-servers.net. (47)
05:33:26.207831 IP 199.7.83.42.53 > 10.0.0.153.5734: 9749 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:26.207970 IP 10.0.0.153.19001 > 198.41.0.4.53: 3081% [1au] AAAA? j.root-servers.net. (47)
05:33:26.539736 IP 198.41.0.4.53 > 10.0.0.153.19001: 3081 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:26.539918 IP 10.0.0.153.20647 > 192.112.36.4.53: 52851% [1au] AAAA? j.root-servers.net. (47)
05:33:26.895543 IP 192.112.36.4.53 > 10.0.0.153.20647: 52851 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:26.895689 IP 10.0.0.153.55245 > 192.5.5.241.53: 17320% [1au] AAAA? j.root-servers.net. (47)
05:33:27.234720 IP 192.5.5.241.53 > 10.0.0.153.55245: 17320 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:27.234843 IP 10.0.0.153.45400 > 199.7.91.13.53: 18582% [1au] AAAA? j.root-servers.net. (47)
05:33:27.565932 IP 199.7.91.13.53 > 10.0.0.153.45400: 18582 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:27.566161 IP 10.0.0.153.39123 > 193.0.14.129.53: 36298% [1au] AAAA? j.root-servers.net. (47)
05:33:27.897052 IP 193.0.14.129.53 > 10.0.0.153.39123: 36298 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:27.897165 IP 127.0.0.1.34769 > 127.0.0.1.53: 60826+ [1au] A? walla.co.il. (40)
05:33:27.897282 IP 10.0.0.153.46719 > 202.12.27.33.53: 9910% [1au] AAAA? j.root-servers.net. (47)
05:33:27.897687 IP 10.0.0.153.56172 > 199.7.83.42.53: 6655+% [1au] AAAA? d.root-servers.net. (47)
05:33:28.223974 IP 202.12.27.33.53 > 10.0.0.153.46719: 9910 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:28.224139 IP 10.0.0.153.10384 > 198.97.190.53.53: 19503% [1au] AAAA? j.root-servers.net. (47)
05:33:28.229497 IP 199.7.83.42.53 > 10.0.0.153.56172: 6655 1/13/13 AAAA 2001:500:2d::d (1148)
05:33:28.229693 IP 10.0.0.153.48391 > 199.9.14.201.53: 62035% [1au] AAAA? d.root-servers.net. (47)
05:33:28.600981 IP 198.97.190.53.53 > 10.0.0.153.10384: 19503 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:28.601095 IP 10.0.0.153.61316 > 192.33.4.12.53: 20668% [1au] AAAA? j.root-servers.net. (47)
05:33:28.604919 IP 199.9.14.201.53 > 10.0.0.153.48391: 62035 1/13/13 AAAA 2001:500:2d::d (1148)
05:33:28.605157 IP 10.0.0.153.6647 > 192.58.128.30.53: 61011% [1au] AAAA? d.root-servers.net. (47)
05:33:28.956544 IP 192.58.128.30.53 > 10.0.0.153.6647: 61011 1/13/13 AAAA 2001:500:2d::d (1148)
05:33:28.956747 IP 10.0.0.153.23795 > 192.33.4.12.53: 59071% [1au] AAAA? d.root-servers.net. (47)
05:33:28.961023 IP 192.33.4.12.53 > 10.0.0.153.61316: 20668 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:28.961198 IP 10.0.0.153.49922 > 198.97.190.53.53: 59797+% [1au] AAAA? j.root-servers.net. (47)
05:33:29.284906 IP 192.33.4.12.53 > 10.0.0.153.23795: 59071 1/13/13 AAAA 2001:500:2d::d (1148)
05:33:29.286255 IP 10.0.0.153.29858 > 202.12.27.33.53: 28242+% [1au] AAAA? d.root-servers.net. (47)
05:33:29.290490 IP 198.97.190.53.53 > 10.0.0.153.49922: 59797 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:29.291009 IP 10.0.0.153.49629 > 192.5.5.241.53: 32556+% [1au] AAAA? b.root-servers.net. (47)
05:33:29.579436 IP 10.0.0.153.64891 > 192.5.5.241.53: 876+% [1au] AAAA? b.root-servers.net. (47)
05:33:29.622396 IP 202.12.27.33.53 > 10.0.0.153.29858: 28242 1/13/13 AAAA 2001:500:2d::d (1148)
05:33:29.622991 IP 10.0.0.153.41271 > 202.12.27.33.53: 24833+% [1au] AAAA? l.root-servers.net. (47)
05:33:29.630083 IP 192.5.5.241.53 > 10.0.0.153.49629: 32556 1/13/13 AAAA 2001:500:200::b (1148)
05:33:29.867893 IP 10.0.0.153.6375 > 192.58.128.30.53: 45667+% [1au] AAAA? b.root-servers.net. (47)
05:33:29.908770 IP 192.5.5.241.53 > 10.0.0.153.64891: 876 1/13/13 AAAA 2001:500:200::b (1148)
05:33:29.973856 IP 202.12.27.33.53 > 10.0.0.153.41271: 24833 1/13/13 AAAA 2001:500:9f::42 (1148)
05:33:29.974159 IP 10.0.0.153.24153 > 198.41.0.4.53: 64085+% [1au] AAAA? h.root-servers.net. (47)
05:33:30.165374 IP 10.0.0.153.36953 > 192.58.128.30.53: 37768+% [1au] AAAA? b.root-servers.net. (47)
05:33:30.220596 IP 192.58.128.30.53 > 10.0.0.153.6375: 45667 1/13/13 AAAA 2001:500:200::b (1148)
05:33:30.308306 IP 198.41.0.4.53 > 10.0.0.153.24153: 64085 1/13/13 AAAA 2001:500:1::53 (1148)
05:33:30.308688 IP 10.0.0.153.29756 > 199.9.14.201.53: 20989+% [1au] AAAA? i.root-servers.net. (47)
05:33:30.462840 IP 10.0.0.153.29626 > 202.12.27.33.53: 56013+% [1au] AAAA? b.root-servers.net. (47)
05:33:30.507340 IP 192.58.128.30.53 > 10.0.0.153.36953: 37768 1/13/13 AAAA 2001:500:200::b (1148)
05:33:30.667484 IP 199.9.14.201.53 > 10.0.0.153.29756: 20989 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:30.668136 IP 10.0.0.153.51058 > 198.97.190.53.53: 14318+% [1au] AAAA? i.root-servers.net. (47)
05:33:30.755275 IP 10.0.0.153.33642 > 202.12.27.33.53: 35630+% [1au] AAAA? b.root-servers.net. (47)
05:33:30.835450 IP 202.12.27.33.53 > 10.0.0.153.29626: 56013 1/13/13 AAAA 2001:500:200::b (1148)
05:33:31.006524 IP 198.97.190.53.53 > 10.0.0.153.51058: 14318 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:31.007372 IP 10.0.0.153.23020 > 192.112.36.4.53: 37953+% [1au] AAAA? j.root-servers.net. (47)
05:33:31.047725 IP 10.0.0.153.11870 > 192.5.5.241.53: 48472+% [1au] AAAA? b.root-servers.net. (47)
05:33:31.088567 IP 202.12.27.33.53 > 10.0.0.153.33642: 35630 1/13/13 AAAA 2001:500:200::b (1148)
05:33:31.300885 IP 10.0.0.153.9509 > 192.112.36.4.53: 53739+% [1au] AAAA? j.root-servers.net. (47)
05:33:31.341147 IP 192.112.36.4.53 > 10.0.0.153.23020: 37953 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:31.386303 IP 192.5.5.241.53 > 10.0.0.153.11870: 48472 1/13/13 AAAA 2001:500:200::b (1148)
05:33:31.386848 IP 10.0.0.153.6716 > 199.7.91.13.53: 16670+% [1au] AAAA? b.root-servers.net. (47)
05:33:31.594339 IP 10.0.0.153.62030 > 199.7.91.13.53: 57913+% [1au] AAAA? j.root-servers.net. (47)
05:33:31.653550 IP 192.112.36.4.53 > 10.0.0.153.9509: 53739 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:31.752986 IP 199.7.91.13.53 > 10.0.0.153.6716: 16670 1/13/13 AAAA 2001:500:200::b (1148)
05:33:31.754362 IP 10.0.0.153.24605 > 192.203.230.10.53: 1270+% [1au] AAAA? i.root-servers.net. (47)
05:33:31.883051 IP 10.0.0.153.36784 > 199.7.91.13.53: 49784+% [1au] AAAA? j.root-servers.net. (47)
05:33:31.936968 IP 199.7.91.13.53 > 10.0.0.153.62030: 57913 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:31.983780 IP 10.0.0.153.26276 > 192.203.230.10.53: 27691+% [1au] AAAA? i.root-servers.net. (47)
05:33:32.086348 IP 192.203.230.10.53 > 10.0.0.153.24605: 1270 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:32.171698 IP 10.0.0.153.30654 > 192.5.5.241.53: 21259+% [1au] AAAA? j.root-servers.net. (47)
05:33:32.213196 IP 10.0.0.153.37895 > 199.9.14.201.53: 63573+% [1au] AAAA? i.root-servers.net. (47)
05:33:32.232919 IP 199.7.91.13.53 > 10.0.0.153.36784: 49784 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:32.313702 IP 192.203.230.10.53 > 10.0.0.153.26276: 27691 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:32.553469 IP 192.5.5.241.53 > 10.0.0.153.30654: 21259 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:32.554060 IP 10.0.0.153.64440 > 202.12.27.33.53: 39958+% [1au] AAAA? j.root-servers.net. (47)
05:33:32.606066 IP 199.9.14.201.53 > 10.0.0.153.37895: 63573 1/13/13 AAAA 2001:7fe::53 (1148)
05:33:32.616325 IP 10.0.0.153.17142 > 192.112.36.4.53: 21617+% [1au] A? walla.co.il. (40)
05:33:32.620529 IP 10.0.0.153.17300 > 192.5.5.241.53: 39444+% [1au] AAAA? a.root-servers.net. (47)
05:33:32.897381 IP 127.0.0.1.34769 > 127.0.0.1.53: 60826+ [1au] A? walla.co.il. (40)
05:33:32.898638 IP 202.12.27.33.53 > 10.0.0.153.64440: 39958 1/13/13 AAAA 2001:503:c27::2:30 (1148)
05:33:32.899274 IP 10.0.0.153.4771 > 199.7.83.42.53: 50080+% [1au] AAAA? m.root-servers.net. (47)
05:33:32.962419 IP 192.5.5.241.53 > 10.0.0.153.17300: 39444 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:32.963135 IP 10.0.0.153.21473 > 198.97.190.53.53: 37869+% [1au] AAAA? m.root-servers.net. (47)
05:33:32.998684 IP 192.112.36.4.53 > 10.0.0.153.17142: 21617 3/4/0 A 34.249.67.46, A 54.171.127.39, A 52.213.51.240 (294)
05:33:33.006356 IP 127.0.0.1.53 > 127.0.0.1.34769: 60826 ServFail 0/0/1 (40)
05:33:33.240970 IP 199.7.83.42.53 > 10.0.0.153.4771: 50080 1/13/13 AAAA 2001:dc3::35 (1148)
05:33:33.241657 IP 10.0.0.153.45587 > 198.97.190.53.53: 8586+% [1au] AAAA? m.root-servers.net. (47)
05:33:33.308312 IP 198.97.190.53.53 > 10.0.0.153.21473: 37869 1/13/13 AAAA 2001:dc3::35 (1148)
05:33:33.308967 IP 10.0.0.153.24166 > 198.97.190.53.53: 59823+% [1au] AAAA? c.root-servers.net. (47)
05:33:33.678028 IP 198.97.190.53.53 > 10.0.0.153.24166: 59823 1/13/13 AAAA 2001:500:2::c (1148)
05:33:33.678466 IP 10.0.0.153.42413 > 202.12.27.33.53: 53961+% [1au] AAAA? k.root-servers.net. (47)
05:33:34.052014 IP 202.12.27.33.53 > 10.0.0.153.42413: 53961 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:34.052402 IP 10.0.0.153.51704 > 202.12.27.33.53: 50538+% [1au] AAAA? g.root-servers.net. (47)
05:33:34.192762 IP 10.0.0.153.48618 > 198.97.190.53.53: 9463+% [1au] AAAA? m.root-servers.net. (47)
05:33:34.390987 IP 202.12.27.33.53 > 10.0.0.153.51704: 50538 1/13/13 AAAA 2001:500:12::d0d (1148)
05:33:34.391399 IP 10.0.0.153.37768 > 192.203.230.10.53: 39722+% [1au] AAAA? f.root-servers.net. (47)
05:33:34.545975 IP 198.97.190.53.53 > 10.0.0.153.48618: 9463 1/13/13 AAAA 2001:dc3::35 (1148)
05:33:34.546316 IP 10.0.0.153.57972 > 198.41.0.4.53: 62610+% [1au] AAAA? a.root-servers.net. (47)
05:33:34.721569 IP 192.203.230.10.53 > 10.0.0.153.37768: 39722 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:34.722062 IP 10.0.0.153.24104 > 193.0.14.129.53: 22353+% [1au] AAAA? e.root-servers.net. (47)
05:33:34.838812 IP 10.0.0.153.61869 > 198.41.0.4.53: 16268+% [1au] AAAA? a.root-servers.net. (47)
05:33:34.904505 IP 198.41.0.4.53 > 10.0.0.153.57972: 62610 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:35.092080 IP 193.0.14.129.53 > 10.0.0.153.24104: 22353 1/13/13 AAAA 2001:500:a8::e (1148)
05:33:35.092521 IP 10.0.0.153.14232 > 199.7.91.13.53: 63978+% [1au] DNSKEY? . (28)
05:33:35.097675 IP 199.7.91.13.53 > 10.0.0.153.14232: 63978 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:35.102504 IP 10.0.0.153.51314 > 202.12.27.33.53: 64783+% [1au] DNSKEY? . (28)
05:33:35.107165 IP 202.12.27.33.53 > 10.0.0.153.51314: 64783 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:35.113048 IP 10.0.0.153.36461 > 198.97.190.53.53: 21167+% [1au] DNSKEY? . (28)
05:33:35.117618 IP 198.97.190.53.53 > 10.0.0.153.36461: 21167 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:35.121770 IP 10.0.0.153.57271 > 192.112.36.4.53: 64932+% [1au] DNSKEY? . (28)
05:33:35.127048 IP 192.112.36.4.53 > 10.0.0.153.57271: 64932 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:35.130644 IP 10.0.0.153.26889 > 192.58.128.30.53: 55481+% [1au] DNSKEY? . (28)
05:33:35.131198 IP 10.0.0.153.30726 > 198.41.0.4.53: 25614+% [1au] AAAA? a.root-servers.net. (47)
05:33:35.135673 IP 192.58.128.30.53 > 10.0.0.153.26889: 55481 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:35.177063 IP 198.41.0.4.53 > 10.0.0.153.61869: 16268 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:35.460077 IP 198.41.0.4.53 > 10.0.0.153.30726: 25614 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:35.461122 IP 10.0.0.153.23756 > 193.0.14.129.53: 57540+% [1au] AAAA? a.root-servers.net. (47)
05:33:35.610343 IP 198.97.190.53.53 > 10.0.0.153.45587: 8586 1/13/13 AAAA 2001:dc3::35 (1148)
05:33:35.845370 IP 193.0.14.129.53 > 10.0.0.153.23756: 57540 1/13/13 AAAA 2001:503:ba3e::2:30 (1148)
05:33:35.848676 IP 10.0.0.153.12378 > 202.12.27.33.53: 14921+% [1au] AAAA? k.root-servers.net. (47)
05:33:35.850405 IP 10.0.0.153.25237 > 192.36.148.17.53: 36983+% [1au] AAAA? c.root-servers.net. (47)
05:33:36.079812 IP 10.0.0.153.64354 > 202.12.27.33.53: 65087+% [1au] AAAA? k.root-servers.net. (47)
05:33:36.134110 IP 10.0.0.153.43386 > 192.36.148.17.53: 17626+% [1au] AAAA? c.root-servers.net. (47)
05:33:36.194059 IP 202.12.27.33.53 > 10.0.0.153.12378: 14921 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:36.197991 IP 192.36.148.17.53 > 10.0.0.153.25237: 36983 1/13/13 AAAA 2001:500:2::c (1148)
05:33:36.309477 IP 10.0.0.153.47245 > 193.0.14.129.53: 22355+% [1au] AAAA? k.root-servers.net. (47)
05:33:36.413721 IP 202.12.27.33.53 > 10.0.0.153.64354: 65087 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:36.422832 IP 10.0.0.153.39009 > 192.112.36.4.53: 43001+% [1au] AAAA? c.root-servers.net. (47)
05:33:36.469970 IP 192.36.148.17.53 > 10.0.0.153.43386: 17626 1/13/13 AAAA 2001:500:2::c (1148)
05:33:36.602300 IP 10.0.0.153.52432 > 193.0.14.129.53: 61662+% [1au] AAAA? k.root-servers.net. (47)
05:33:36.643987 IP 193.0.14.129.53 > 10.0.0.153.47245: 22355 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:36.780208 IP 192.112.36.4.53 > 10.0.0.153.39009: 43001 1/13/13 AAAA 2001:500:2::c (1148)
05:33:36.781359 IP 10.0.0.153.59309 > 199.7.83.42.53: 16949+% [1au] AAAA? c.root-servers.net. (47)
05:33:36.895665 IP 10.0.0.153.14102 > 198.97.190.53.53: 5188+% [1au] AAAA? k.root-servers.net. (47)
05:33:36.946112 IP 193.0.14.129.53 > 10.0.0.153.52432: 61662 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:37.110090 IP 199.7.83.42.53 > 10.0.0.153.59309: 16949 1/13/13 AAAA 2001:500:2::c (1148)
05:33:37.234289 IP 198.97.190.53.53 > 10.0.0.153.14102: 5188 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:37.235555 IP 10.0.0.153.19973 > 192.33.4.12.53: 44634+% [1au] AAAA? k.root-servers.net. (47)
05:33:37.569237 IP 192.33.4.12.53 > 10.0.0.153.19973: 44634 1/13/13 AAAA 2001:7fd::1 (1148)
05:33:37.569561 IP 10.0.0.153.59525 > 199.7.91.13.53: 16500+% [1au] AAAA? f.root-servers.net. (47)
05:33:37.794093 IP 10.0.0.153.52649 > 199.7.91.13.53: 9654+% [1au] AAAA? f.root-servers.net. (47)
05:33:37.912838 IP 199.7.91.13.53 > 10.0.0.153.59525: 16500 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:38.018614 IP 10.0.0.153.42595 > 192.36.148.17.53: 35158+% [1au] AAAA? f.root-servers.net. (47)
05:33:38.154972 IP 199.7.91.13.53 > 10.0.0.153.52649: 9654 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:38.391958 IP 192.36.148.17.53 > 10.0.0.153.42595: 35158 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:38.393125 IP 10.0.0.153.9929 > 199.9.14.201.53: 22247+% [1au] AAAA? f.root-servers.net. (47)
05:33:38.772655 IP 199.9.14.201.53 > 10.0.0.153.9929: 22247 1/13/13 AAAA 2001:500:2f::f (1148)
05:33:38.772990 IP 10.0.0.153.23714 > 199.7.91.13.53: 50672+% [1au] AAAA? g.root-servers.net. (47)
05:33:39.108535 IP 199.7.91.13.53 > 10.0.0.153.23714: 50672 1/13/13 AAAA 2001:500:12::d0d (1148)
05:33:39.109936 IP 10.0.0.153.54412 > 192.58.128.30.53: 38420+% [1au] AAAA? g.root-servers.net. (47)
05:33:39.439624 IP 192.58.128.30.53 > 10.0.0.153.54412: 38420 1/13/13 AAAA 2001:500:12::d0d (1148)
05:33:39.439911 IP 10.0.0.153.45545 > 192.203.230.10.53: 41131+% [1au] A? walla.co.il. (40)
05:33:39.440086 IP 10.0.0.153.64381 > 202.12.27.33.53: 56138+% [1au] DNSKEY? . (28)
05:33:39.445196 IP 202.12.27.33.53 > 10.0.0.153.64381: 56138 3/13/13 DNSKEY, DNSKEY, DNSKEY (1472)
05:33:39.783711 IP 192.203.230.10.53 > 10.0.0.153.45545: 41131 3/4/0 A 54.171.127.39, A 52.213.51.240, A 34.249.67.46 (294)
05:33:39.784820 IP 10.0.0.153.47467 > 192.33.4.12.53: 21928+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:39.785846 IP 10.0.0.153.31937 > 202.12.27.33.53: 8914+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:39.786831 IP 10.0.0.153.55102 > 202.12.27.33.53: 4656+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:39.787780 IP 10.0.0.153.4503 > 192.203.230.10.53: 31046+% [1au] AAAA? ns-992.awsdns-60.net. (49)
05:33:39.788840 IP 10.0.0.153.29973 > 202.12.27.33.53: 19607+% [1au] A? ns-992.awsdns-60.net. (49)
05:33:39.789749 IP 10.0.0.153.14101 > 192.33.4.12.53: 19974+% [1au] NS? walla.co.il. (40)
05:33:39.790707 IP 10.0.0.153.19148 > 192.203.230.10.53: 28713+% [1au] A? ns-104.awsdns-13.com. (49)
05:33:39.794786 IP 192.33.4.12.53 > 10.0.0.153.14101: 19974 4/4/0 NS ns-104.awsdns-13.com., NS ns-1086.awsdns-07.org., NS ns-1595.awsdns-07.co.uk., NS ns-992.awsdns-60.net. (397)
05:33:39.961438 IP 10.0.0.153.54385 > 202.12.27.33.53: 39165+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:39.961656 IP 10.0.0.153.46723 > 202.12.27.33.53: 62248+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:39.961721 IP 10.0.0.153.47897 > 202.12.27.33.53: 44814+% [1au] A? ns-992.awsdns-60.net. (49)
05:33:40.078043 IP 10.0.0.153.59894 > 192.33.4.12.53: 65375+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:40.126835 IP 202.12.27.33.53 > 10.0.0.153.29973: 19607 1/4/4 A 205.251.195.224 (426)
05:33:40.131079 IP 192.203.230.10.53 > 10.0.0.153.19148: 28713 1/4/4 A 205.251.192.104 (424)
05:33:40.131434 IP 10.0.0.153.11924 > 205.251.196.141.53: 53675% [1au] A? ns-104.awsdns-13.com. (49)
05:33:40.132606 IP 10.0.0.153.53350 > 202.12.27.33.53: 19994+% [1au] NS? awsdns-13.com. (42)
05:33:40.136304 IP 202.12.27.33.53 > 10.0.0.153.53350: 19994 4/4/8 NS g-ns-14.awsdns-13.com., NS g-ns-1741.awsdns-13.com., NS g-ns-589.awsdns-13.com., NS g-ns-1165.awsdns-13.com. (731)
05:33:40.136489 IP 10.0.0.153.52043 > 205.251.196.141.53: 27473% [1au] NS? awsdns-13.com. (42)
05:33:40.136620 IP 10.0.0.153.50292 > 205.251.192.14.53: 9588% [1au] A? g-ns-589.awsdns-13.com. (51)
05:33:40.136715 IP 10.0.0.153.30534 > 205.251.192.14.53: 5305% [1au] A? g-ns-1165.awsdns-13.com. (52)
05:33:40.136821 IP 10.0.0.153.17976 > 205.251.198.205.53: 23124% [1au] A? g-ns-1741.awsdns-13.com. (52)
05:33:40.136928 IP 10.0.0.153.17993 > 205.251.196.141.53: 49813% [1au] A? g-ns-14.awsdns-13.com. (50)
05:33:40.139129 IP 10.0.0.153.13457 > 192.58.128.30.53: 27000+% [1au] A? ns-992.awsdns-60.net. (49)
05:33:40.139310 IP 10.0.0.153.52502 > 192.33.4.12.53: 47368+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:40.139451 IP 10.0.0.153.31091 > 202.12.27.33.53: 53464+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:40.141337 IP 205.251.196.141.53 > 10.0.0.153.52043: 27473 4/4/8 NS g-ns-589.awsdns-13.com., NS g-ns-1165.awsdns-13.com., NS g-ns-14.awsdns-13.com., NS g-ns-1741.awsdns-13.com. (731)
05:33:40.141523 IP 10.0.0.153.36906 > 205.251.198.205.53: 26204% [1au] NS? awsdns-13.com. (42)
05:33:40.145411 IP 205.251.198.205.53 > 10.0.0.153.36906: 26204 4/4/8 NS g-ns-14.awsdns-13.com., NS g-ns-1741.awsdns-13.com., NS g-ns-589.awsdns-13.com., NS g-ns-1165.awsdns-13.com. (731)
05:33:40.145592 IP 10.0.0.153.16064 > 205.251.192.14.53: 65398% [1au] NS? awsdns-13.com. (42)
05:33:40.148792 IP 205.251.192.14.53 > 10.0.0.153.16064: 65398 4/4/8 NS g-ns-589.awsdns-13.com., NS g-ns-1165.awsdns-13.com., NS g-ns-14.awsdns-13.com., NS g-ns-1741.awsdns-13.com. (731)
05:33:40.148964 IP 10.0.0.153.55943 > 205.251.194.77.53: 64571% [1au] NS? awsdns-13.com. (42)
05:33:40.152095 IP 205.251.194.77.53 > 10.0.0.153.55943: 64571 4/4/8 NS g-ns-14.awsdns-13.com., NS g-ns-1741.awsdns-13.com., NS g-ns-589.awsdns-13.com., NS g-ns-1165.awsdns-13.com. (731)
05:33:40.192280 IP 192.203.230.10.53 > 10.0.0.153.4503: 31046 1/4/4 AAAA 2600:9000:5303:e000::1 (438)
05:33:40.192538 IP 10.0.0.153.19821 > 205.251.193.253.53: 1279% [1au] AAAA? ns-992.awsdns-60.net. (49)
05:33:40.193655 IP 10.0.0.153.64116 > 192.33.4.12.53: 34914+% [1au] NS? awsdns-60.net. (42)
05:33:40.198175 IP 192.33.4.12.53 > 10.0.0.153.64116: 34914 4/4/8 NS g-ns-1404.awsdns-60.net., NS g-ns-1980.awsdns-60.net., NS g-ns-509.awsdns-60.net., NS g-ns-830.awsdns-60.net. (735)
05:33:40.198444 IP 10.0.0.153.48446 > 205.251.197.124.53: 9422% [1au] NS? awsdns-60.net. (42)
05:33:40.198553 IP 10.0.0.153.18215 > 205.251.195.62.53: 42557% [1au] A? g-ns-1404.awsdns-60.net. (52)
05:33:40.198678 IP 10.0.0.153.40252 > 205.251.199.188.53: 39549% [1au] A? g-ns-830.awsdns-60.net. (51)
05:33:40.198834 IP 10.0.0.153.63180 > 205.251.195.62.53: 44571% [1au] A? g-ns-1980.awsdns-60.net. (52)
05:33:40.198944 IP 10.0.0.153.49573 > 205.251.197.124.53: 3924% [1au] A? g-ns-509.awsdns-60.net. (51)
05:33:40.202589 IP 202.12.27.33.53 > 10.0.0.153.55102: 4656 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:40.207324 IP 205.251.197.124.53 > 10.0.0.153.48446: 9422 4/4/8 NS g-ns-509.awsdns-60.net., NS g-ns-830.awsdns-60.net., NS g-ns-1404.awsdns-60.net., NS g-ns-1980.awsdns-60.net. (735)
05:33:40.207525 IP 10.0.0.153.33640 > 205.251.195.62.53: 63191% [1au] NS? awsdns-60.net. (42)
05:33:40.211695 IP 205.251.195.62.53 > 10.0.0.153.33640: 63191 4/4/8 NS g-ns-1404.awsdns-60.net., NS g-ns-1980.awsdns-60.net., NS g-ns-509.awsdns-60.net., NS g-ns-830.awsdns-60.net. (735)
05:33:40.211902 IP 10.0.0.153.48726 > 205.251.193.253.53: 48638% [1au] NS? awsdns-60.net. (42)
05:33:40.216151 IP 205.251.193.253.53 > 10.0.0.153.48726: 48638 4/4/8 NS g-ns-509.awsdns-60.net., NS g-ns-830.awsdns-60.net., NS g-ns-1404.awsdns-60.net., NS g-ns-1980.awsdns-60.net. (735)
05:33:40.216328 IP 10.0.0.153.5693 > 205.251.199.188.53: 45886% [1au] NS? awsdns-60.net. (42)
05:33:40.220167 IP 205.251.199.188.53 > 10.0.0.153.5693: 45886 4/4/8 NS g-ns-1404.awsdns-60.net., NS g-ns-1980.awsdns-60.net., NS g-ns-509.awsdns-60.net., NS g-ns-830.awsdns-60.net. (735)
05:33:40.276648 IP 10.0.0.153.21410 > 202.12.27.33.53: 25795+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:40.293333 IP 202.12.27.33.53 > 10.0.0.153.47897: 44814 1/4/4 A 205.251.195.224 (426)
05:33:40.297648 IP 202.12.27.33.53 > 10.0.0.153.46723: 62248 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:40.311295 IP 202.12.27.33.53 > 10.0.0.153.31937: 8914 1/4/9 A 205.251.198.59 (677)
05:33:40.312989 IP 10.0.0.153.9078 > 192.33.4.12.53: 10557+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:40.346811 IP 192.33.4.12.53 > 10.0.0.153.47467: 21928 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:40.351456 IP 202.12.27.33.53 > 10.0.0.153.54385: 39165 1/4/4 A 205.251.198.59 (456)
05:33:40.373290 IP 10.0.0.153.51939 > 192.58.128.30.53: 36277+% [1au] A? ns-992.awsdns-60.net. (49)
05:33:40.373442 IP 10.0.0.153.64490 > 192.33.4.12.53: 15048+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:40.414738 IP 10.0.0.153.40258 > 202.12.27.33.53: 7710+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:40.434204 IP 192.33.4.12.53 > 10.0.0.153.59894: 65375 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:40.459300 IP 205.251.196.141.53 > 10.0.0.153.11924: 53675 1/4/4 A 205.251.192.104 (424)
05:33:40.460491 IP 10.0.0.153.12450 > 202.12.27.33.53: 37314+% [1au] AAAA? ns-1086.awsdns-07.org. (50)
05:33:40.461486 IP 10.0.0.153.22579 > 192.33.4.12.53: 59405+% [1au] A? ns-1086.awsdns-07.org. (50)
05:33:40.465685 IP 205.251.198.205.53 > 10.0.0.153.17976: 23124 1/4/3 A 205.251.198.205 (391)
05:33:40.474700 IP 192.33.4.12.53 > 10.0.0.153.52502: 47368 1/4/4 A 205.251.198.59 (456)
05:33:40.477004 IP 192.58.128.30.53 > 10.0.0.153.13457: 27000 1/4/4 A 205.251.195.224 (426)
05:33:40.480032 IP 202.12.27.33.53 > 10.0.0.153.31091: 53464 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:40.482099 IP 205.251.192.14.53 > 10.0.0.153.30534: 5305 1/4/3 A 205.251.196.141 (391)
05:33:40.484469 IP 205.251.196.141.53 > 10.0.0.153.17993: 49813 1/4/3 A 205.251.192.14 (389)
05:33:40.487506 IP 205.251.192.14.53 > 10.0.0.153.50292: 9588 1/4/3 A 205.251.194.77 (390)
05:33:40.495852 IP 10.0.0.153.44319 > 192.33.4.12.53: 47553+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:40.517160 IP 205.251.193.253.53 > 10.0.0.153.19821: 1279 1/4/4 AAAA 2600:9000:5303:e000::1 (438)
05:33:40.544523 IP 205.251.197.124.53 > 10.0.0.153.49573: 3924 1/4/3 A 205.251.193.253 (392)
05:33:40.546653 IP 205.251.195.62.53 > 10.0.0.153.18215: 42557 1/4/3 A 205.251.197.124 (393)
05:33:40.549372 IP 205.251.199.188.53 > 10.0.0.153.40252: 39549 1/4/3 A 205.251.195.62 (392)
05:33:40.550606 IP 205.251.195.62.53 > 10.0.0.153.63180: 44571 1/4/3 A 205.251.199.188 (393)
05:33:40.555896 IP 10.0.0.153.44014 > 192.33.4.12.53: 48475+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:40.607229 IP 10.0.0.153.33109 > 193.0.14.129.53: 18625+% [1au] A? ns-992.awsdns-60.net. (49)
05:33:40.616955 IP 202.12.27.33.53 > 10.0.0.153.21410: 25795 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:40.642544 IP 10.0.0.153.49903 > 192.33.4.12.53: 53609+% [1au] A? ns-1086.awsdns-07.org. (50)
05:33:40.643599 IP 192.33.4.12.53 > 10.0.0.153.9078: 10557 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:40.678860 IP 10.0.0.153.34357 > 202.12.27.33.53: 12652+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:40.689196 IP 10.0.0.153.60371 > 202.12.27.33.53: 12676+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:40.741010 IP 10.0.0.153.46877 > 202.12.27.33.53: 24143+% [1au] AAAA? ns-1086.awsdns-07.org. (50)
05:33:40.749815 IP 192.33.4.12.53 > 10.0.0.153.64490: 15048 1/4/4 A 205.251.198.59 (456)
05:33:40.769276 IP 192.58.128.30.53 > 10.0.0.153.51939: 36277 1/4/4 A 205.251.195.224 (426)
05:33:40.789705 IP 202.12.27.33.53 > 10.0.0.153.40258: 7710 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:40.857902 IP 192.33.4.12.53 > 10.0.0.153.22579: 59405 1/4/4 A 205.251.196.62 (428)
05:33:40.860430 IP 192.33.4.12.53 > 10.0.0.153.44319: 47553 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:40.920450 IP 10.0.0.153.8408 > 192.33.4.12.53: 52358+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:40.930872 IP 202.12.27.33.53 > 10.0.0.153.12450: 37314 1/4/4 AAAA 2600:9000:5304:3e00::1 (440)
05:33:40.936146 IP 192.33.4.12.53 > 10.0.0.153.44014: 48475 1/4/4 A 205.251.198.59 (456)
05:33:40.953779 IP 10.0.0.153.14679 > 202.12.27.33.53: 16665+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:40.964152 IP 10.0.0.153.42225 > 199.7.91.13.53: 23198+% [1au] AAAA? ns-104.awsdns-13.com. (49)
05:33:40.986524 IP 193.0.14.129.53 > 10.0.0.153.33109: 18625 1/4/4 A 205.251.195.224 (426)
05:33:40.987610 IP 10.0.0.153.54341 > 192.58.128.30.53: 43624+% [1au] NS? awsdns-60.net. (42)
05:33:40.990870 IP 192.58.128.30.53 > 10.0.0.153.54341: 43624 4/4/8 NS g-ns-830.awsdns-60.net., NS g-ns-1404.awsdns-60.net., NS g-ns-1980.awsdns-60.net., NS g-ns-509.awsdns-60.net. (735)
05:33:41.007244 IP 10.0.0.153.32434 > 199.7.91.13.53: 33604+% [1au] A? ns-1086.awsdns-07.org. (50)
05:33:41.015542 IP 10.0.0.153.18247 > 199.7.91.13.53: 18830+% [1au] AAAA? ns-1086.awsdns-07.org. (50)
05:33:41.030492 IP 192.33.4.12.53 > 10.0.0.153.49903: 53609 1/4/4 A 205.251.196.62 (428)
05:33:41.041177 IP 202.12.27.33.53 > 10.0.0.153.34357: 12652 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:41.051106 IP 202.12.27.33.53 > 10.0.0.153.60371: 12676 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:41.082837 IP 202.12.27.33.53 > 10.0.0.153.46877: 24143 1/4/4 AAAA 2600:9000:5304:3e00::1 (440)
05:33:41.229074 IP 10.0.0.153.9495 > 199.7.91.13.53: 13734+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:41.285421 IP 10.0.0.153.46109 > 202.12.27.33.53: 42759+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:41.305028 IP 192.33.4.12.53 > 10.0.0.153.8408: 52358 1/4/4 A 205.251.198.59 (456)
05:33:41.312795 IP 202.12.27.33.53 > 10.0.0.153.14679: 16665 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:41.317109 IP 199.7.91.13.53 > 10.0.0.153.42225: 23198 1/4/4 AAAA 2600:9000:5300:6800::1 (436)
05:33:41.318526 IP 10.0.0.153.54260 > 202.12.27.33.53: 21397+% [1au] NS? awsdns-13.com. (42)
05:33:41.322351 IP 202.12.27.33.53 > 10.0.0.153.54260: 21397 4/4/8 NS g-ns-589.awsdns-13.com., NS g-ns-1165.awsdns-13.com., NS g-ns-14.awsdns-13.com., NS g-ns-1741.awsdns-13.com. (731)
05:33:41.337963 IP 199.7.91.13.53 > 10.0.0.153.32434: 33604 1/4/4 A 205.251.196.62 (428)
05:33:41.338211 IP 10.0.0.153.32914 > 205.251.194.201.53: 34336% [1au] A? ns-1086.awsdns-07.org. (50)
05:33:41.339267 IP 10.0.0.153.53369 > 192.58.128.30.53: 28328+% [1au] NS? awsdns-07.org. (42)
05:33:41.342767 IP 192.58.128.30.53 > 10.0.0.153.53369: 28328 4/4/8 NS g-ns-135.awsdns-07.org., NS g-ns-1607.awsdns-07.org., NS g-ns-713.awsdns-07.org., NS g-ns-1034.awsdns-07.org. (735)
05:33:41.343015 IP 10.0.0.153.40170 > 205.251.198.71.53: 20913% [1au] NS? awsdns-07.org. (42)
05:33:41.343135 IP 10.0.0.153.44771 > 205.251.194.201.53: 29100% [1au] A? g-ns-713.awsdns-07.org. (51)
05:33:41.343248 IP 10.0.0.153.53056 > 205.251.194.201.53: 14659% [1au] A? g-ns-1034.awsdns-07.org. (52)
05:33:41.343362 IP 10.0.0.153.64348 > 205.251.198.71.53: 36369% [1au] A? g-ns-1607.awsdns-07.org. (52)
05:33:41.343464 IP 10.0.0.153.34942 > 205.251.192.135.53: 53562% [1au] A? g-ns-135.awsdns-07.org. (51)
05:33:41.350738 IP 205.251.198.71.53 > 10.0.0.153.40170: 20913 4/4/8 NS g-ns-713.awsdns-07.org., NS g-ns-1034.awsdns-07.org., NS g-ns-135.awsdns-07.org., NS g-ns-1607.awsdns-07.org. (735)
05:33:41.350951 IP 10.0.0.153.20787 > 205.251.194.201.53: 20691% [1au] NS? awsdns-07.org. (42)
05:33:41.357703 IP 205.251.194.201.53 > 10.0.0.153.20787: 20691 4/4/8 NS g-ns-135.awsdns-07.org., NS g-ns-1607.awsdns-07.org., NS g-ns-713.awsdns-07.org., NS g-ns-1034.awsdns-07.org. (735)
05:33:41.357893 IP 10.0.0.153.20328 > 205.251.192.135.53: 47794% [1au] NS? awsdns-07.org. (42)
05:33:41.361022 IP 205.251.192.135.53 > 10.0.0.153.20328: 47794 4/4/8 NS g-ns-713.awsdns-07.org., NS g-ns-1034.awsdns-07.org., NS g-ns-135.awsdns-07.org., NS g-ns-1607.awsdns-07.org. (735)
05:33:41.361199 IP 10.0.0.153.51039 > 205.251.196.10.53: 10022% [1au] NS? awsdns-07.org. (42)
05:33:41.364072 IP 205.251.196.10.53 > 10.0.0.153.51039: 10022 4/4/8 NS g-ns-135.awsdns-07.org., NS g-ns-1607.awsdns-07.org., NS g-ns-713.awsdns-07.org., NS g-ns-1034.awsdns-07.org. (735)
05:33:41.377127 IP 199.7.91.13.53 > 10.0.0.153.18247: 18830 1/4/4 AAAA 2600:9000:5304:3e00::1 (440)
05:33:41.378407 IP 10.0.0.153.9657 > 192.58.128.30.53: 37912+% [1au] NS? awsdns-07.org. (42)
05:33:41.381683 IP 192.58.128.30.53 > 10.0.0.153.9657: 37912 4/4/8 NS g-ns-1034.awsdns-07.org., NS g-ns-135.awsdns-07.org., NS g-ns-1607.awsdns-07.org., NS g-ns-713.awsdns-07.org. (735)
05:33:41.565487 IP 199.7.91.13.53 > 10.0.0.153.9495: 13734 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:41.565702 IP 10.0.0.153.28716 > 205.251.197.202.53: 41235% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:41.566744 IP 10.0.0.153.28619 > 192.58.128.30.53: 49981+% [1au] NS? awsdns-07.co.uk. (44)
05:33:41.570896 IP 192.58.128.30.53 > 10.0.0.153.28619: 49981 4/4/8 NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk., NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk. (785)
05:33:41.571116 IP 10.0.0.153.59168 > 205.251.199.11.53: 52257% [1au] NS? awsdns-07.co.uk. (44)
05:33:41.571205 IP 10.0.0.153.35125 > 205.251.195.135.53: 18247% [1au] A? g-ns-1482.awsdns-07.co.uk. (54)
05:33:41.571300 IP 10.0.0.153.10513 > 205.251.195.135.53: 24519% [1au] A? g-ns-903.awsdns-07.co.uk. (53)
05:33:41.571380 IP 10.0.0.153.21315 > 205.251.197.202.53: 20128% [1au] A? g-ns-1803.awsdns-07.co.uk. (54)
05:33:41.571483 IP 10.0.0.153.47532 > 205.251.195.135.53: 13267% [1au] A? g-ns-327.awsdns-07.co.uk. (53)
05:33:41.575367 IP 205.251.199.11.53 > 10.0.0.153.59168: 52257 4/4/8 NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk., NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk. (785)
05:33:41.575561 IP 10.0.0.153.48732 > 205.251.197.202.53: 3964% [1au] NS? awsdns-07.co.uk. (44)
05:33:41.578967 IP 205.251.197.202.53 > 10.0.0.153.48732: 3964 4/4/8 NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk., NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk. (785)
05:33:41.579142 IP 10.0.0.153.53093 > 205.251.195.135.53: 32723% [1au] NS? awsdns-07.co.uk. (44)
05:33:41.582972 IP 205.251.195.135.53 > 10.0.0.153.53093: 32723 4/4/8 NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk., NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk. (785)
05:33:41.583165 IP 10.0.0.153.56525 > 205.251.193.71.53: 40199% [1au] NS? awsdns-07.co.uk. (44)
05:33:41.589669 IP 205.251.193.71.53 > 10.0.0.153.56525: 40199 4/4/8 NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk., NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk. (785)
05:33:41.619276 IP 202.12.27.33.53 > 10.0.0.153.46109: 42759 1/4/4 A 205.251.198.59 (456)
05:33:41.620757 IP 10.0.0.153.17825 > 202.12.27.33.53: 55752+% [1au] NS? awsdns-07.co.uk. (44)
05:33:41.632298 IP 202.12.27.33.53 > 10.0.0.153.17825: 55752 4/4/8 NS g-ns-327.awsdns-07.co.uk., NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk., NS g-ns-1803.awsdns-07.co.uk. (785)
05:33:41.714918 IP 10.0.0.153.21866 > 205.251.194.201.53: 10672% [1au] A? ns-1086.awsdns-07.org. (50)
05:33:41.718140 IP 205.251.192.135.53 > 10.0.0.153.34942: 53562 1/4/3 A 205.251.192.135 (392)
05:33:41.719499 IP 10.0.0.153.57492 > 205.251.194.201.53: 21186% [1au] A? g-ns-713.awsdns-07.org. (51)
05:33:41.719658 IP 10.0.0.153.44301 > 205.251.194.201.53: 1130% [1au] A? g-ns-1034.awsdns-07.org. (52)
05:33:41.719788 IP 10.0.0.153.58979 > 205.251.198.71.53: 18809% [1au] A? g-ns-1607.awsdns-07.org. (52)
05:33:41.720410 IP 205.251.194.201.53 > 10.0.0.153.32914: 34336 1/4/4 A 205.251.196.62 (428)
05:33:41.722787 IP 205.251.194.201.53 > 10.0.0.153.44771: 29100 1/4/3 A 205.251.194.201 (392)
05:33:41.734715 IP 205.251.194.201.53 > 10.0.0.153.53056: 14659 1/4/3 A 205.251.196.10 (393)
05:33:41.736828 IP 205.251.198.71.53 > 10.0.0.153.64348: 36369 1/4/3 A 205.251.198.71 (393)
05:33:41.912593 IP 205.251.197.202.53 > 10.0.0.153.28716: 41235 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:41.924095 IP 205.251.197.202.53 > 10.0.0.153.21315: 20128 1/4/3 A 205.251.199.11 (419)
05:33:41.926750 IP 205.251.195.135.53 > 10.0.0.153.47532: 13267 1/4/3 A 205.251.193.71 (418)
05:33:41.929521 IP 205.251.195.135.53 > 10.0.0.153.35125: 18247 1/4/3 A 205.251.197.202 (419)
05:33:41.932988 IP 205.251.195.135.53 > 10.0.0.153.10513: 24519 1/4/3 A 205.251.195.135 (418)
05:33:42.004298 IP 10.0.0.153.39178 > 192.58.128.30.53: 26669+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.005373 IP 10.0.0.153.38018 > 202.12.27.33.53: 37223+% [1au] A? ns-1595.awsdns-07.co.uk. (52)
05:33:42.040280 IP 205.251.194.201.53 > 10.0.0.153.21866: 10672 1/4/4 A 205.251.196.62 (428)
05:33:42.048382 IP 205.251.194.201.53 > 10.0.0.153.44301: 1130 1/4/3 A 205.251.196.10 (393)
05:33:42.054943 IP 205.251.194.201.53 > 10.0.0.153.57492: 21186 1/4/3 A 205.251.194.201 (392)
05:33:42.057892 IP 205.251.198.71.53 > 10.0.0.153.58979: 18809 1/4/3 A 205.251.198.71 (393)
05:33:42.092981 IP 10.0.0.153.57316 > 192.58.128.30.53: 29312+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.182312 IP 10.0.0.153.36348 > 192.58.128.30.53: 30585+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.355971 IP 192.58.128.30.53 > 10.0.0.153.39178: 26669 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:42.358004 IP 202.12.27.33.53 > 10.0.0.153.38018: 37223 1/4/4 A 205.251.198.59 (456)
05:33:42.359137 IP 10.0.0.153.61107 > 192.58.128.30.53: 25779+% [1au] NS? awsdns-07.co.uk. (44)
05:33:42.362443 IP 10.0.0.153.31222 > 192.58.128.30.53: 44097+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.362640 IP 192.58.128.30.53 > 10.0.0.153.61107: 25779 4/4/8 NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk., NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk. (785)
05:33:42.440806 IP 192.58.128.30.53 > 10.0.0.153.57316: 29312 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:42.524825 IP 192.58.128.30.53 > 10.0.0.153.36348: 30585 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:42.541150 IP 10.0.0.153.25117 > 192.58.128.30.53: 11334+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.614456 IP 10.0.0.153.32857 > 192.58.128.30.53: 9253+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.687782 IP 10.0.0.153.45867 > 192.58.128.30.53: 45305+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.690078 IP 192.58.128.30.53 > 10.0.0.153.31222: 44097 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:42.834181 IP 10.0.0.153.21116 > 192.58.128.30.53: 47645+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:42.895018 IP 192.58.128.30.53 > 10.0.0.153.25117: 11334 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:42.968927 IP 192.58.128.30.53 > 10.0.0.153.32857: 9253 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:42.980681 IP 10.0.0.153.14655 > 193.0.14.129.53: 45238+% [1au] AAAA? ns-1595.awsdns-07.co.uk. (52)
05:33:43.061842 IP 192.58.128.30.53 > 10.0.0.153.45867: 45305 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:43.160155 IP 192.58.128.30.53 > 10.0.0.153.21116: 47645 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:43.312380 IP 193.0.14.129.53 > 10.0.0.153.14655: 45238 1/4/4 AAAA 2600:9000:5306:3b00::1 (468)
05:33:43.313709 IP 10.0.0.153.38671 > 202.12.27.33.53: 42693+% [1au] NS? awsdns-07.co.uk. (44)
05:33:43.313851 IP 10.0.0.153.44968 > 205.251.198.59.53: 10338% [1au] A? walla.co.il. (40)
05:33:43.318415 IP 202.12.27.33.53 > 10.0.0.153.38671: 42693 4/4/8 NS g-ns-1803.awsdns-07.co.uk., NS g-ns-327.awsdns-07.co.uk., NS g-ns-903.awsdns-07.co.uk., NS g-ns-1482.awsdns-07.co.uk. (785)
05:33:43.659017 IP 205.251.198.59.53 > 10.0.0.153.44968: 10338 3/4/4 A 52.213.51.240, A 34.249.67.46, A 54.171.127.39 (442)
05:33:43.659407 IP 10.0.0.153.63032 > 205.251.198.59.53: 4984+% [1au] A? walla.co.il. (40)
05:33:44.001591 IP 205.251.198.59.53 > 10.0.0.153.63032: 4984 3/4/4 A 34.249.67.46, A 54.171.127.39, A 52.213.51.240 (442)
05:33:44.001814 IP 127.0.0.1.53 > 127.0.0.1.34769: 60826 ServFail 0/0/1 (40)
05:33:44.001889 IP 127.0.0.1.53 > 127.0.0.1.34769: 60826 ServFail 0/0/1 (40)

root at dns2-main:~# journalctl -lfa -u unbound.service
..
Jan 23 05:33:16 dns2-main unbound[3085]: [3085:0] notice: init module 1: iterator
Jan 23 05:33:16 dns2-main unbound[3085]: [3085:0] info: start of service (unbound 1.5.8).
Jan 23 05:33:16 dns2-main unbound[3070]:    ...done.
Jan 23 05:33:16 dns2-main systemd[1]: Started unbound.service.
Jan 23 05:33:32 dns2-main unbound[3085]: [3085:0] info: failed to prime trust anchor -- could not fetch DNSKEY rrset . DNSKEY IN
Jan 23 05:33:35 dns2-main unbound[3085]: [3085:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN
Jan 23 05:33:35 dns2-main unbound[3085]: [3085:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN
Jan 23 05:33:35 dns2-main unbound[3085]: [3085:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN
Jan 23 05:33:35 dns2-main unbound[3085]: [3085:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN
Jan 23 05:33:35 dns2-main unbound[3085]: [3085:0] info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN

Thanks,
Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il

-----Original Message-----
From: Unbound-users [mailto:unbound-users-bounces at nlnetlabs.nl] On Behalf Of Ralph Dolmans via Unbound-users
Sent: Tuesday, January 22, 2019 15:40
To: unbound-users at nlnetlabs.nl
Subject: Re: Unbound reply with an empty A record, can it be converted to SERVFAIL?

Hi Eliezer,

I am not sure what you mean by empty A records. Unbound will already return a SERVFAIL answer if it is not able to contact upstream, which seems to be your desired behavior.

-- Ralph

On 20-01-19 20:19, Eliezer Croitoru via Unbound-users wrote:
> Hey,
> 
> I have couple DNS servers In my network and I do not know how to 
> handle this specific issue.
> The client server uses Dnsmasq as a DNS proxy and the upstream servers 
> are two unbound servers.
> Last week for some reason the network traffic of one of the unbound 
> recursive servers was severed to the outer world.
> 1 - ...53
> 2 - ...153
> 
> Dnsmasq  - ...51
> 
> In turn dnsmasq ran a query against the second unbound service ...153 
> and for some reason it returned an empty A record for every request.
>>From dnsmasq point of view it's a valid response and there for do not 
>>run
> another query against server 2 ...53 .
> I would prefer that a SERVFAIL or another way Dnsmasq will be notified 
> that this specific unbound instance cannot answer the query.
> If dnsmasq will know that fact it will retry against the next server.
> 
> Any recommendations are more than welcome.
> 
> Thanks,
> Eliezer
> 
> ----
> Eliezer Croitoru
> Linux System Administrator
> Mobile: +972-5-28704261
> Email: eliezer at ngtech.co.il