Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Tuesday, July 11, 2017 3:39 PM
So i see the following entries in debug log (IP and names changed for security), I assume that above this in the log are the requests received from Internal machines 1-3. We then have the first entry which if I understand correctly (at this point i don't think that i do) would indicate that the Internal dns server got a valid response from the forwarder that it was able to resolve services.example.com. But then replied to Internal machines 1-3 with "I was unable to resolve this record". Could someone explain how my understanding is wrong and what the below entries really mean.
7/11/2017 6:14:44 AM 0598 PACKET 0000007029866CF0 UDP Snd (external forwarder IP) 6973 Q [0001 D NOERROR] A (8)services(9)example(3)com(0)
7/11/2017 6:14:44 AM 0598 PACKET 000000702141E170 UDP Snd (Internal Machine 1) 428c R Q [8281 DR SERVFAIL] A (8)services(9)example(3)com(0)
7/11/2017 6:14:44 AM 0598 PACKET 000000702141E170 UDP Snd (internal Machine 2) 86f3 R Q [8281 DR SERVFAIL] A (8)services(9)example(3)com(0)
7/11/2017 6:14:44 AM 0598 PACKET 000000702141E170 UDP Snd (Internal Machine 3) 3250 R Q [8281 DR SERVFAIL] A (8)services(9)example(3)com(0)
All replies (3)
Wednesday, July 12, 2017 6:20 AM
Hi BowenCVP，
>>the Internal dns server got a valid response from the forwarder that it was able to resolve services.example.com. But then replied to Internal machines 1-3 with "I was unable to resolve this record".
Yes, your understanding is right."R Q" means reply and " Q" means query.
The following is the header printed at the top of a dns trace log:
For more details, you could refer to the following link:
Parsing Microsoft DNS Server Logs
https://www.rsreese.com/parsing-microsoft-dns-server-logs/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice.
Microsoft does not guarantee the accuracy of this information.
Best Regards,
Candy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, July 18, 2017 8:50 AM
Hi BowenCVP，
Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.
Best Regards,
Candy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, August 1, 2017 9:34 AM
Hi BowenCVP，
Was your issue resolved?
If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.
If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.
If no, please reply and tell us the current situation in order to provide further help.
Best Regards,
Candy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].