Forum Discussion
Chura_16140
Nov 15, 2012Nimbostratus
DNS Query - reply from unexpected source
Hi Guys,
I'm new to F5, and something annoy me i can't find why it happen.
My topology:
Network (Public IP - Pretend its 100.100.100.0/24) --> Switch Stack --> LAG --> Viprion LTM -->...
Chura_16140
Nov 16, 2012Nimbostratus
I'm not sure why you think that.
22:45:39.033309 IP 100.100.100.40.39945 > 8.8.4.4.53: 8917+ A? google.com. (27)
22:45:39.033315 IP 100.100.100.40.39945 > 8.8.4.4.53: 8917+ A? google.com. (27)
22:45:39.123868 IP 8.8.4.4.53 > 100.100.100.40.39945: 8917 1/0/0 A 173.194.41.69 (43)
22:45:39.123884 IP 8.8.4.4.25965 > 100.100.100.40.39945: UDP, length 43
1. (V) Packet exit server source port 39945 and dst 53
2. (V) Packet exit F5 with same attribute
3. (V) Packet return to F5 with source port 53 and dst port 39945
4. (X) Packet return to server with source port 25965 and dst port 39945
I'm trying to run TCPDUMP again but now i see only the exit (while still same error on the server)
$ host -t A godaddy.com 8.8.8.8
;; reply from unexpected source: 8.8.8.830517, expected 8.8.8.853
15:09:18.865110 IP 100.100.100.40.41093 > 8.8.8.8.53: 12464+ A? godaddy.com. (29)
15:09:18.865128 IP 100.100.100.40.41093 > 8.8.8.8.53: 12464+ A? godaddy.com. (29)
btw, I really appreciate your help here.
I got this device for testing LB/DNS Cache/DNS Express and i'm way far from it, still stuck on basics. :)
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects