Weird recursions...

Paul Roberts proberts at edge.edge.net
Wed Mar 12 13:19:53 EST 1997


I'm seeing something fairly unusual in our logs as to what the rwhois
server is doing when looking up domain names...  I am almost 100% certain
that this is a bug, because it's fairly regular in nature.  Here's an
example...

12-Mar-97 11:59:21 [199.0.68.2     ] PID: 15412   Pass 0 Arg: ercnet.com
12-Mar-97 11:59:21 [199.0.68.2     ] PID: 15412   Ans: 0 data hits
12-Mar-97 11:59:21 [199.0.68.2     ] PID: 15412   Pass 1 Arg: 25QWQXercnet.com
12-Mar-97 11:59:21 [199.0.68.2     ] PID: 15412   Ans: 0 referral hits
12-Mar-97 11:59:21 [199.0.68.2     ] PID: 15412   Pass 2 Arg: 25QWQXcom
12-Mar-97 11:59:21 [199.0.68.2     ] PID: 15412   Ans: 0 referral hits

Now, it's pretty apparent to me that this is a simple recursion attempt,
but I'll be darned if I know where that '25QWQX' is coming from, aside
from inside the server itself.  This sort of thing is also showing up in
netmask recursive searches.

Oh, and... 'SunOS edge 4.1.4 1 sun4m'...  Is anyone else seeing this
problem?  I know we had a heck of a time getting this to compile to begin
with, and I'm guessing it might be time to tweak a few things and try one
more time.







More information about the Rwhois mailing list