[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: 20030820: Weather2.admin.niu.edu Trouble



On Wed, 20 Aug 2003, Kevin W. Thomas wrote:

> Gilbert...
> 
> I'm showing "winkie" now getting data.  "Munchkin", our other LDM system
> still can't connect.  I've talked to other people running LDM systems here
> at OU.  They report the same problem.
> 
> "Traceroute" still shows 131.156.168.1 as the stopping point.

Funny, because I got this message:

----- Transcript of session follows -----
451 wizard.caps.ou.edu: Name server timeout
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

    [ Part 2: "Delivery Status" ]

Reporting-MTA: dns; weather.admin.niu.edu
Arrival-Date: Wed, 20 Aug 2003 16:14:05 -0500

Final-Recipient: RFC822; address@hidden
Action: delayed
Status: 4.4.3
Last-Attempt-Date: Wed, 20 Aug 2003 20:31:48 -0500
Will-Retry-Until: Mon, 25 Aug 2003 16:14:05 -0500


I'll check to see if our nameserver is messed up here. It's possible
with the worms and viruses, certainly.

*******************************************************************************
Gilbert Sebenste                                                     ********
(My opinions only!)                                                  ******
Staff Meteorologist, Northern Illinois University                      ****
E-mail: address@hidden                                               ***
web: http://weather.admin.niu.edu                                      **
Work phone: 815-753-5492                                                *
*******************************************************************************

From address@hidden Wed Aug 20 21:44:58 2003
Received: from pangaea.ems.psu.edu (pangaea.ems.psu.edu [128.118.52.83])
        by unidata.ucar.edu (UCAR/Unidata) with ESMTP id h7L3ivLd027178
        for <address@hidden>; Wed, 20 Aug 2003 21:44:57 -0600 (MDT)
Keywords: 200308210344.h7L3ivLd027178
Received: from dalton.wolfe.cc (vpn53-3.ems.psu.edu [128.118.53.3])
        by pangaea.ems.psu.edu (Postfix) with ESMTP
        id 24D5F1FC3; Wed, 20 Aug 2003 23:44:56 -0400 (EDT)
Subject: Re: 20030820: Weather2.admin.niu.edu Trouble
From: Jeff Wolfe <address@hidden>
To: address@hidden
Cc: address@hidden, address@hidden
In-Reply-To: <address@hidden>
References: <address@hidden>
Content-Type: text/plain
Organization: College of Earth and Mineral Sciences - Penn State
Message-Id: <1061437495.2841.60.camel@dalton>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.2.2 (1.2.2-5) 
Date: 20 Aug 2003 23:44:55 -0400
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, hits=-1.8 required=5.0
        tests=IN_REP_TO,NOSPAM_INC,QUOTED_EMAIL_TEXT,REFERENCES,
              SPAM_PHRASE_01_02
        version=2.43
X-Spam-Level: 


I missed the start of this discussion, but at least part of the problem
is likely to be the fact that gcn.ou.edu only has one nameserver:

pangaea:wolfe[50]% dig ns caps.ou.edu
                                                                                
                    
; <<>> DiG 9.1.3 <<>> ns caps.ou.edu
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51925
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
 
;; QUESTION SECTION:
;caps.ou.edu.                   IN      NS
 
;; ANSWER SECTION:
caps.ou.edu.            86388   IN      NS      hoth.gcn.ou.edu.
 
;; Query time: 3 msec
;; SERVER: 128.118.52.83#53(128.118.52.83)
;; WHEN: Wed Aug 20 23:40:36 2003
;; MSG SIZE  rcvd: 52


I speculate that this is a Windows machine and that it's unstable, due
to the current spate of windows worms n stuff..

-JEff


On Wed, 2003-08-20 at 23:01, Gilbert Sebenste wrote:
> On Wed, 20 Aug 2003, Kevin W. Thomas wrote:
> 
> > Gilbert...
> > 
> > I'm showing "winkie" now getting data.  "Munchkin", our other LDM system
> > still can't connect.  I've talked to other people running LDM systems here
> > at OU.  They report the same problem.
> > 
> > "Traceroute" still shows 131.156.168.1 as the stopping point.
> 
> Funny, because I got this message:
> 
> ----- Transcript of session follows -----
> 451 wizard.caps.ou.edu: Name server timeout
> Warning: message still undelivered after 4 hours
> Will keep trying until message is 5 days old
> 
>     [ Part 2: "Delivery Status" ]
> 
> Reporting-MTA: dns; weather.admin.niu.edu
> Arrival-Date: Wed, 20 Aug 2003 16:14:05 -0500
> 
> Final-Recipient: RFC822; address@hidden
> Action: delayed
> Status: 4.4.3
> Last-Attempt-Date: Wed, 20 Aug 2003 20:31:48 -0500
> Will-Retry-Until: Mon, 25 Aug 2003 16:14:05 -0500
> 
> 
> I'll check to see if our nameserver is messed up here. It's possible
> with the worms and viruses, certainly.
> 
> *******************************************************************************
> Gilbert Sebenste                                                     ********
> (My opinions only!)                                                  ******
> Staff Meteorologist, Northern Illinois University                      ****
> E-mail: address@hidden                                               ***
> web: http://weather.admin.niu.edu                                      **
> Work phone: 815-753-5492                                                *
> *******************************************************************************
> 

From address@hidden Wed Aug 20 22:12:41 2003
Received: from cdnet.cod.edu (cdnet.cod.edu [192.203.136.11])
        by unidata.ucar.edu (UCAR/Unidata) with ESMTP id h7L4CfLd024148
        for <address@hidden>; Wed, 20 Aug 2003 22:12:41 -0600 (MDT)
Organization: UCAR/Unidata
Keywords: 200308210412.h7L4CfLd024148
Received: from weather.cod.edu (weather.cod.edu [10.11.0.64])
        by cdnet.cod.edu  with ESMTP id h7L4Ce1l006585;
        Wed, 20 Aug 2003 23:12:40 -0500
Received: from weather.cod.edu (localhost [127.0.0.1])
        by weather.cod.edu (8.12.3/8.12.3/Debian-6.4) with ESMTP id 
h7L4Ce64003200;
        Wed, 20 Aug 2003 23:12:40 -0500
Received: from localhost (davebb@localhost)
        by weather.cod.edu (8.12.3/8.12.3/Debian-6.4) with ESMTP id 
h7L4CdlG003192;
        Wed, 20 Aug 2003 23:12:39 -0500
Date: Wed, 20 Aug 2003 23:12:39 -0500 (CDT)
From: "David B. Bukowski" <address@hidden>
To: Gilbert Sebenste <address@hidden>
cc: "Kevin W. Thomas" <address@hidden>, address@hidden
Subject: Re: 20030820: Weather2.admin.niu.edu Trouble
In-Reply-To: <address@hidden>
Message-ID: <address@hidden>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Spam-Status: No, hits=-3.2 required=5.0
        tests=AWL,EMAIL_ATTRIBUTION,IN_REP_TO,NOSPAM_INC,
              QUOTED_EMAIL_TEXT,SPAM_PHRASE_01_02,USER_AGENT_PINE
        version=2.43
X-Spam-Level: 

yep sounds like the nameserver from NIU isn't getting updates from
ou.edu's name server at all
and the cache'd time has run out.  so thta seems to be the problem
-dave


On Wed, 20 Aug 2003, Gilbert Sebenste wrote:

On Wed, 20 Aug 2003, Kevin W. Thomas wrote:

> Gilbert...
> 
> I'm showing "winkie" now getting data.  "Munchkin", our other LDM system
> still can't connect.  I've talked to other people running LDM systems here
> at OU.  They report the same problem.
> 
> "Traceroute" still shows 131.156.168.1 as the stopping point.

Funny, because I got this message:

----- Transcript of session follows -----
451 wizard.caps.ou.edu: Name server timeout
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

    [ Part 2: "Delivery Status" ]

Reporting-MTA: dns; weather.admin.niu.edu
Arrival-Date: Wed, 20 Aug 2003 16:14:05 -0500

Final-Recipient: RFC822; address@hidden
Action: delayed
Status: 4.4.3
Last-Attempt-Date: Wed, 20 Aug 2003 20:31:48 -0500
Will-Retry-Until: Mon, 25 Aug 2003 16:14:05 -0500


I'll check to see if our nameserver is messed up here. It's possible
with the worms and viruses, certainly.

*******************************************************************************
Gilbert Sebenste                                                     ********
(My opinions only!)                                                  ******
Staff Meteorologist, Northern Illinois University                      ****
E-mail: address@hidden                                               ***
web: http://weather.admin.niu.edu                                      **
Work phone: 815-753-5492                                                *
*******************************************************************************



-------------------------------------------------------------------------------
David B. Bukowski       |email (work):          address@hidden
Network Analyst III     |email (personal):      address@hidden
College of Dupage       |webpage:       http://www.cshschess.org/davebb/        
Glen Ellyn, Illinois    |pager:                 (708) 241-7655 
http://www.cod.edu/     |work phone:            (630) 942-2591
-------------------------------------------------------------------------------

From address@hidden Wed Aug 20 22:17:14 2003
Received: from wizard.caps.ou.edu (wizard.caps.ou.edu [129.15.192.252])
        by unidata.ucar.edu (UCAR/Unidata) with ESMTP id h7L4HDLd027858
        for <address@hidden>; Wed, 20 Aug 2003 22:17:13 -0600 (MDT)
Organization: UCAR/Unidata
Keywords: 200308210417.h7L4HDLd027858
Received: (from kwthomas@localhost)
        by wizard.caps.ou.edu (8.11.6+Sun/8.11.6) id h7L47oe17253;
        Wed, 20 Aug 2003 23:07:50 -0500 (CDT)
Date: Wed, 20 Aug 2003 23:07:50 -0500 (CDT)
From: "Kevin W. Thomas" <address@hidden>
Message-Id: <address@hidden>
To: address@hidden, address@hidden
Subject: Re: 20030820: Weather2.admin.niu.edu Trouble
Cc: address@hidden
X-Spam-Status: No, hits=0.1 required=5.0
        tests=AWL,NOSPAM_INC,QUOTED_EMAIL_TEXT,SPAM_PHRASE_03_05
        version=2.43
X-Spam-Level: 

>I missed the start of this discussion, but at least part of the problem
>is likely to be the fact that gcn.ou.edu only has one nameserver:
>
>pangaea:wolfe[50]% dig ns caps.ou.edu
>                                                                               
>                      
>; <<>> DiG 9.1.3 <<>> ns caps.ou.edu
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51925
>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> 
>;; QUESTION SECTION:
>;caps.ou.edu.                   IN      NS
> 
>;; ANSWER SECTION:
>caps.ou.edu.            86388   IN      NS      hoth.gcn.ou.edu.
> 
>;; Query time: 3 msec
>;; SERVER: 128.118.52.83#53(128.118.52.83)
>;; WHEN: Wed Aug 20 23:40:36 2003
>;; MSG SIZE  rcvd: 52
>
>
>I speculate that this is a Windows machine and that it's unstable, due
>to the current spate of windows worms n stuff..
>
>-JEff

Jeff...

You haven't looked far enough.  HOTH serves the College of Geosciences.  If
you wish to see the OU nameservers, you need to look up "ou.edu".

I do notice that HOTH is having troubles resolving some "niu.edu" names.
Instead of doing something useful, it hangs.

I can't tell you what OS it is running, as I don't have an account on the
computer, however, I'd guess that it is Linux.

My workstation (wizard.caps.ou.edu) uses a different OU nameserver that isn't
having any trouble resolving names.  I'm unable to reach many NIU web pages,
and I can't connect to the NIU mail server to send Gilbert email.  From a
posting to the LDM list, I see that Gilbert has the same problem and same
errors when he tries to send to me.

Based on my LDM logs, the problem is BEFORE the current virus going around
the world, though it may not be before last week's virus.

        Kevin W. Thomas
        Center for Analysis and Prediction of Storms
        University of Oklahoma
        Norman, Oklahoma
        Email:  address@hidden

>On Wed, 2003-08-20 at 23:01, Gilbert Sebenste wrote:
>> On Wed, 20 Aug 2003, Kevin W. Thomas wrote:
>> 
>> > Gilbert...
>> > 
>> > I'm showing "winkie" now getting data.  "Munchkin", our other LDM system
>> > still can't connect.  I've talked to other people running LDM systems here
>> > at OU.  They report the same problem.
>> > 
>> > "Traceroute" still shows 131.156.168.1 as the stopping point.
>> 
>> Funny, because I got this message:
>> 
>> ----- Transcript of session follows -----
>> 451 wizard.caps.ou.edu: Name server timeout
>> Warning: message still undelivered after 4 hours
>> Will keep trying until message is 5 days old
>> 
>>     [ Part 2: "Delivery Status" ]
>> 
>> Reporting-MTA: dns; weather.admin.niu.edu
>> Arrival-Date: Wed, 20 Aug 2003 16:14:05 -0500
>> 
>> Final-Recipient: RFC822; address@hidden
>> Action: delayed
>> Status: 4.4.3
>> Last-Attempt-Date: Wed, 20 Aug 2003 20:31:48 -0500
>> Will-Retry-Until: Mon, 25 Aug 2003 16:14:05 -0500
>> 
>> 
>> I'll check to see if our nameserver is messed up here. It's possible
>> with the worms and viruses, certainly.
>> 
>> *******************************************************************************
>> Gilbert Sebenste                                                     ********
>> (My opinions only!)                                                  ******
>> Staff Meteorologist, Northern Illinois University                      ****
>> E-mail: address@hidden                                               ***
>> web: http://weather.admin.niu.edu                                      **
>> Work phone: 815-753-5492                                                *
>> *******************************************************************************
>> 
>
>

From address@hidden Wed Aug 20 22:51:46 2003
Received: from pangaea.ems.psu.edu (pangaea.ems.psu.edu [128.118.52.83])
        by unidata.ucar.edu (UCAR/Unidata) with ESMTP id h7L4pkLd029621
        for <address@hidden>; Wed, 20 Aug 2003 22:51:46 -0600 (MDT)
Keywords: 200308210451.h7L4pkLd029621
Received: from dalton.wolfe.cc (vpn53-3.ems.psu.edu [128.118.53.3])
        by pangaea.ems.psu.edu (Postfix) with ESMTP
        id 092341FC3; Thu, 21 Aug 2003 00:51:43 -0400 (EDT)
Subject: Re: 20030820: Weather2.admin.niu.edu Trouble
From: Jeff Wolfe <address@hidden>
To: "Kevin W. Thomas" <address@hidden>
Cc: address@hidden, address@hidden
In-Reply-To: <address@hidden>
References: <address@hidden>
Content-Type: text/plain
Organization: College of Earth and Mineral Sciences - Penn State
Message-Id: <1061441503.2841.134.camel@dalton>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.2.2 (1.2.2-5) 
Date: 21 Aug 2003 00:51:43 -0400
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, hits=-1.5 required=5.0
        tests=AWL,IN_REP_TO,NOSPAM_INC,QUOTED_EMAIL_TEXT,REFERENCES,
              SPAM_PHRASE_03_05
        version=2.43
X-Spam-Level: 

On Thu, 2003-08-21 at 00:07, Kevin W. Thomas wrote:
> >I missed the start of this discussion, but at least part of the problem
> >is likely to be the fact that gcn.ou.edu only has one nameserver:
> >
> >pangaea:wolfe[50]% dig ns caps.ou.edu
> >                                                                             
> >                        
> >; <<>> DiG 9.1.3 <<>> ns caps.ou.edu
> >;; global options:  printcmd
> >;; Got answer:
> >;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51925
> >;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> > 
> >;; QUESTION SECTION:
> >;caps.ou.edu.                   IN      NS
> > 
> >;; ANSWER SECTION:
> >caps.ou.edu.            86388   IN      NS      hoth.gcn.ou.edu.
> > 
> >;; Query time: 3 msec
> >;; SERVER: 128.118.52.83#53(128.118.52.83)
> >;; WHEN: Wed Aug 20 23:40:36 2003
> >;; MSG SIZE  rcvd: 52
> >
> >
> >I speculate that this is a Windows machine and that it's unstable, due
> >to the current spate of windows worms n stuff..
> >
> >-JEff
> 
> Jeff...
> 
> You haven't looked far enough.  HOTH serves the College of Geosciences.  If
> you wish to see the OU nameservers, you need to look up "ou.edu".


Actually, according to DNS delegations, hoth.gcn.ou.edu is the sole
nameserver that is delegated authority for both caps.ou.edu and
192.15.129.in-addr.arpa, which means that any attempt to resolve
wizard.caps.ou.edu or 129.15.192.252 will involve contacting hoth for
resolution, no matter how the resolver client is configured. 

Forgetting about the OS hoth runs for a second, having only one
nameserver is bad network design and against RFC requirements, since the
failure or unavailability of that one machine can cause all sorts of
problems for protocols that rely on DNS. 

> I do notice that HOTH is having troubles resolving some "niu.edu" names.
> Instead of doing something useful, it hangs.

Because hoth is the only authoritative nameserver for the forward and
reverse of your zones, that might explain why Gilbert's systems can't
resolve your site to send mail. Also, if the nameserver is timing out
local DNS queries, it's also likely to be timing out remote queries.

> I can't tell you what OS it is running, as I don't have an account on the
> computer, however, I'd guess that it is Linux.

Well since it's running Postfix, I'd agree that it's definitely not windows.

> My workstation (wizard.caps.ou.edu) uses a different OU nameserver that isn't
> having any trouble resolving names.  I'm unable to reach many NIU web pages,
> and I can't connect to the NIU mail server to send Gilbert email.  From a
> posting to the LDM list, I see that Gilbert has the same problem and same
> errors when he tries to send to me.



> Based on my LDM logs, the problem is BEFORE the current virus going around
> the world, though it may not be before last week's virus.


Maybe the DNS issue is a red herring, but I'd still be concerned about
only having one authoritative DNS server for your domains.

$0.02

-JEff

From address@hidden Wed Aug 20 23:25:47 2003
Received: from wizard.caps.ou.edu (wizard.caps.ou.edu [129.15.192.252])
        by unidata.ucar.edu (UCAR/Unidata) with ESMTP id h7L5PlLd028298
        for <address@hidden>; Wed, 20 Aug 2003 23:25:47 -0600 (MDT)
Organization: UCAR/Unidata
Keywords: 200308210525.h7L5PlLd028298
Received: (from kwthomas@localhost)
        by wizard.caps.ou.edu (8.11.6+Sun/8.11.6) id h7L5GNI17335;
        Thu, 21 Aug 2003 00:16:23 -0500 (CDT)
Date: Thu, 21 Aug 2003 00:16:23 -0500 (CDT)
From: "Kevin W. Thomas" <address@hidden>
Message-Id: <address@hidden>
To: address@hidden
Subject: Re: 20030820: Weather2.admin.niu.edu Trouble
Cc: address@hidden, address@hidden
X-Spam-Status: No, hits=0.0 required=5.0
        tests=AWL,NOSPAM_INC,QUOTED_EMAIL_TEXT,SPAM_PHRASE_02_03
        version=2.43
X-Spam-Level: 

>On Thu, 2003-08-21 at 00:07, Kevin W. Thomas wrote:
>> >I missed the start of this discussion, but at least part of the problem
>> >is likely to be the fact that gcn.ou.edu only has one nameserver:
>> >
>> >pangaea:wolfe[50]% dig ns caps.ou.edu
>> >                                                                            
>> >                         
>> >; <<>> DiG 9.1.3 <<>> ns caps.ou.edu
>> >;; global options:  printcmd
>> >;; Got answer:
>> >;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51925
>> >;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
>> > 
>> >;; QUESTION SECTION:
>> >;caps.ou.edu.                   IN      NS
>> > 
>> >;; ANSWER SECTION:
>> >caps.ou.edu.            86388   IN      NS      hoth.gcn.ou.edu.
>> > 
>> >;; Query time: 3 msec
>> >;; SERVER: 128.118.52.83#53(128.118.52.83)
>> >;; WHEN: Wed Aug 20 23:40:36 2003
>> >;; MSG SIZE  rcvd: 52
>> >
>> >
>> >I speculate that this is a Windows machine and that it's unstable, due
>> >to the current spate of windows worms n stuff..
>> >
>> >-JEff
>> 
>> Jeff...
>> 
>> You haven't looked far enough.  HOTH serves the College of Geosciences.  If
>> you wish to see the OU nameservers, you need to look up "ou.edu".
>
>
>Actually, according to DNS delegations, hoth.gcn.ou.edu is the sole
>nameserver that is delegated authority for both caps.ou.edu and
>192.15.129.in-addr.arpa, which means that any attempt to resolve
>wizard.caps.ou.edu or 129.15.192.252 will involve contacting hoth for
>resolution, no matter how the resolver client is configured. 

I checked, and you are right.  I would have that ZOO (zoo.backbone.ou.edu)
would know about GCN systems.  Apparently, it doesn't, though it does
load in the data, at least until the data expires.  I've had ZOO work fine
for me when HOTH was down.

>Forgetting about the OS hoth runs for a second, having only one
>nameserver is bad network design and against RFC requirements, since the
>failure or unavailability of that one machine can cause all sorts of
>problems for protocols that rely on DNS. 

I don't like single points of failure either.  I'll pester GCN admins
tomorrow.

>> I do notice that HOTH is having troubles resolving some "niu.edu" names.
>> Instead of doing something useful, it hangs.
>
>Because hoth is the only authoritative nameserver for the forward and
>reverse of your zones, that might explain why Gilbert's systems can't
>resolve your site to send mail. Also, if the nameserver is timing out
>local DNS queries, it's also likely to be timing out remote queries.

I think something else is going on.  As you said, you missed the beginning.

The problem is that many machines can't reach "weather2.admin.niu.edu", or
as I later found.  This includes two identically configured machines.  One
can reach fine.  One can't.

I can't reach Gilbert's web page from my computer.  I *can* reach www.niu.edu.
When I try to reach web pages of the various departments, some work, but
many don't.

>> I can't tell you what OS it is running, as I don't have an account on the
>> computer, however, I'd guess that it is Linux.
>
>Well since it's running Postfix, I'd agree that it's definitely not windows.
>
>> My workstation (wizard.caps.ou.edu) uses a different OU nameserver that isn't
>> having any trouble resolving names.  I'm unable to reach many NIU web pages,
>> and I can't connect to the NIU mail server to send Gilbert email.  From a
>> posting to the LDM list, I see that Gilbert has the same problem and same
>> errors when he tries to send to me.
>
>
>
>> Based on my LDM logs, the problem is BEFORE the current virus going around
>> the world, though it may not be before last week's virus.
>
>
>Maybe the DNS issue is a red herring, but I'd still be concerned about
>only having one authoritative DNS server for your domains.
>
>$0.02
>
>-JEff

        Kevin W. Thomas
        Center for Analysis and Prediction of Storms
        University of Oklahoma
        Norman, Oklahoma
        Email:  address@hidden