Discussion:
[SCM] Net-SNMP branch master updated. v5.7.3-1973-gf90d891
Bart Van Assche
2016-11-08 02:33:37 UTC
Permalink
commit f90d891c8f98b41cc46345dd27ae73e99afd5258
Date: Mon Nov 7 17:17:38 2016 -0500
Revert "T070com2sec_simple: Fix this test"
This reverts commit 9b617e7b25a6119b20059db941f18f9ef7158bc6.
- dig +short onea.net-snmp.org 8.8.8.8
127.0.0.1
- dig +short twoa.net-snmp.org 75.75.75.75
127.0.0.2
127.0.0.3
- dig +short www.google.com (as of today) returns 6 A records, not 1
testing/fulltests/default/T070com2sec_simple | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
Hello Robert,

The above commit message is not correct. The output I get on my
workstation for the above commands is as follows:

$ dig +short onea.net-snmp.org 8.8.8.8
8.8.8.8
$ dig +short twoa.net-snmp.org 75.75.75.75
75.75.75.75

The result of running the regression tests with your patch applied is as
follows:

We failed these 1 tests:
com2sec directive (
/home/bart/software/net-snmp/master/testing/fulltests/default/T070com2sec_simple
)

Please stop breaking T070com2sec_simple.

Bart.
Robert Story
2016-11-08 03:40:05 UTC
Permalink
On Mon, 7 Nov 2016 18:33:37 -0800 Bart wrote:
BVA> The above commit message is not correct. The output I get on
BVA> my workstation for the above commands is as follows:
BVA>
BVA> $ dig +short onea.net-snmp.org 8.8.8.8
BVA> 8.8.8.8
BVA> $ dig +short twoa.net-snmp.org 75.75.75.75
BVA> 75.75.75.75

Sorry, those should be:

dig +short onea.net-snmp.org @8.8.8.8

and

dig +short twoa.net-snmp.org @75.75.75.75

(missing '@' in front of resolvers).


If you are not getting results from your local server, it is a DNS
issue that needs to be resolved. We can't depend on domain names
under external control containing the right number of records...

If you aren't getting results, please send me the output you get
for

dig onea.net-snmp.org

(which will use your local resolver instead of google/comcast).

You can also try a web service based resolver to verify that they
resolve. e.g.

http://mxtoolbox.com/SuperTool.aspx?action=a%3aonea.net-snmp.org&run=toolpage

Robert
Bart Van Assche
2016-11-08 04:14:42 UTC
Permalink
Post by Robert Story
BVA> The above commit message is not correct. The output I get on
BVA>
BVA> $ dig +short onea.net-snmp.org 8.8.8.8
BVA> 8.8.8.8
BVA> $ dig +short twoa.net-snmp.org 75.75.75.75
BVA> 75.75.75.75
and
If you are not getting results from your local server, it is a DNS
issue that needs to be resolved. We can't depend on domain names
under external control containing the right number of records...
If you aren't getting results, please send me the output you get
for
dig onea.net-snmp.org
(which will use your local resolver instead of google/comcast).
Hello Robert,

My Internet provider (Comcast) does not provide any addresses for these
two DNS names:

$ dig +short twoa.net-snmp.org
$ dig +short onea.net-snmp.org
$ dig onea.net-snmp.org

; <<>> DiG 9.10.3-P4 <<>> onea.net-snmp.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;onea.net-snmp.org. IN A

;; Query time: 532 msec
;; SERVER: 192.168.1.1#53(192.168.1.1)
;; WHEN: Mon Nov 07 20:11:04 PST 2016
;; MSG SIZE rcvd: 46

Bart.
Robert Story
2016-11-08 13:24:36 UTC
Permalink
On Mon, 7 Nov 2016 20:14:42 -0800 Bart wrote:
BVA> My Internet provider (Comcast) does not provide any addresses
BVA> for these two DNS names:
BVA>
BVA> $ dig +short twoa.net-snmp.org
BVA> $ dig +short onea.net-snmp.org
BVA> $ dig onea.net-snmp.org
BVA>
BVA> ; <<>> DiG 9.10.3-P4 <<>> onea.net-snmp.org
BVA> ;; global options: +cmd
BVA> ;; Got answer:
BVA> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59379
BVA> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0,
BVA> ADDITIONAL: 1
BVA>
BVA> ;; OPT PSEUDOSECTION:
BVA> ; EDNS: version: 0, flags:; udp: 512
BVA> ;; QUESTION SECTION:
BVA> ;onea.net-snmp.org. IN A
BVA>
BVA> ;; Query time: 532 msec
BVA> ;; SERVER: 192.168.1.1#53(192.168.1.1)

The last line here shows that dig is using your local router as a
resolver. Can you log in to it and see what it is set to use for
DNS?

I also have Comcast, and my router gets 75.75.75.75 and
75.75.76.76 as DNS servers.

# host 75.75.75.75
75.75.75.75.in-addr.arpa domain name pointer cdns01.comcast.net.

# host 75.75.76.76
76.76.75.75.in-addr.arpa domain name pointer cdns02.comcast.net.


Telling dig to use either of those gets the correct result:

# dig onea.net-snmp.org @75.75.75.75

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.2 <<>> onea.net-snmp.org @75.75.75.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3691
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;onea.net-snmp.org. IN A

;; ANSWER SECTION:
onea.net-snmp.org. 14400 IN A 127.0.0.1

;; Query time: 133 msec
;; SERVER: 75.75.75.75#53(75.75.75.75)
;; WHEN: Tue Nov 8 08:18:59 2016
;; MSG SIZE rcvd: 51


# dig onea.net-snmp.org @75.75.76.76

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.2 <<>> onea.net-snmp.org @75.75.76.76
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57010
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;onea.net-snmp.org. IN A

;; ANSWER SECTION:
onea.net-snmp.org. 14400 IN A 127.0.0.1

;; Query time: 698 msec
;; SERVER: 75.75.76.76#53(75.75.76.76)
;; WHEN: Tue Nov 8 08:19:17 2016
;; MSG SIZE rcvd: 51

I also get the correct answer from google's dns (8.8.8.8, 8.8.4.4),
work, and both my hosting providers.

So as far as I can tell, the failure point is your router's DNS
resolution.

Robert
Bart Van Assche
2016-11-08 15:12:48 UTC
Permalink
Post by Robert Story
So as far as I can tell, the failure point is your router's DNS
resolution.
Hello Robert,

From the status screen of my router:
DNS 1: 75.75.75.75
DNS 2: 75.75.76.76

The only addresses that are "misresolved by my router" are
onea.net-snmp.org and twoa.net-snmp.org. Since my router is running a
recent version of DD-WRT (Linux), I think it is very unlikely that this
indicates a bug in my router. There must be something wrong with the DNS
records for onea.net-snmp.org and twoa.net-snmp.org. Maybe the DNS
software on my router filters out 127.0.0.* because of security reasons.
What I think that should be done is to fix the DNS records for
onea.net-snmp.org and twoa.net-snmp.org.

Bart.
Robert Story
2016-11-08 16:03:48 UTC
Permalink
On Tue, 8 Nov 2016 07:12:48 -0800 Bart wrote:
BVA> From the status screen of my router:
BVA> DNS 1: 75.75.75.75
BVA> DNS 2: 75.75.76.76
BVA>
BVA> The only addresses that are "misresolved by my router" are
BVA> onea.net-snmp.org and twoa.net-snmp.org. Since my router is
BVA> running a recent version of DD-WRT (Linux), I think it is very
BVA> unlikely that this indicates a bug in my router. There must be
BVA> something wrong with the DNS records for onea.net-snmp.org and
BVA> twoa.net-snmp.org. Maybe the DNS software on my router filters
BVA> out 127.0.0.* because of security reasons.

That does appear to be the case:

http://www.dd-wrt.com/phpBB2/viewtopic.php?p=509683

BVA> What I think that should be done is to fix the DNS records for
BVA> onea.net-snmp.org and twoa.net-snmp.org.

I've updated both records to use the documentation netblock. See if
that works better for you.

Robert
Bart Van Assche
2016-11-09 02:30:57 UTC
Permalink
Post by Robert Story
I've updated both records to use the documentation netblock. See if
that works better for you.
Hello Robert,

T070com2sec_simple passes again on my development system.

Thanks!

Bart.
Magnus Fromreide
2016-11-09 07:59:30 UTC
Permalink
Post by Bart Van Assche
Post by Robert Story
I've updated both records to use the documentation netblock. See if
that works better for you.
Hello Robert,
T070com2sec_simple passes again on my development system.
As the author of those tests I would actually prefer if I had the ability to
run them even if not connected to the internet at all - does any of you have
any idea of how to do that?

/MF
Robert Story
2016-11-09 16:23:31 UTC
Permalink
On Wed, 9 Nov 2016 08:59:30 +0100 Magnus wrote:
MF> On Tue, Nov 08, 2016 at 06:30:57PM -0800, Bart Van Assche wrote:
MF> > T070com2sec_simple passes again on my development system.
MF>
MF> As the author of those tests I would actually prefer if I had
MF> the ability to run them even if not connected to the internet
MF> at all - does any of you have any idea of how to do that?

I can think of two options:

- a configure option to disable network tests. The test could check
the header for the config flag and SKIP the tests if found.

- a command line argument or environmental var when running tests.

Robert
Lee
2016-11-13 15:24:30 UTC
Permalink
Post by Magnus Fromreide
Post by Bart Van Assche
Post by Robert Story
I've updated both records to use the documentation netblock. See if
that works better for you.
Hello Robert,
T070com2sec_simple passes again on my development system.
As the author of those tests I would actually prefer if I had the ability to
run them even if not connected to the internet at all - does any of you have
any idea of how to do that?
add onea.net-snmp.org & twoa.net-snmp.org to your hosts file?

Lee
Magnus Fromreide
2016-11-13 16:49:11 UTC
Permalink
Post by Lee
Post by Magnus Fromreide
Post by Bart Van Assche
Post by Robert Story
I've updated both records to use the documentation netblock. See if
that works better for you.
Hello Robert,
T070com2sec_simple passes again on my development system.
As the author of those tests I would actually prefer if I had the ability to
run them even if not connected to the internet at all - does any of you have
any idea of how to do that?
add onea.net-snmp.org & twoa.net-snmp.org to your hosts file?
Kind of bad form to do from an automated testsuite that I am inflicting on
other people...

/MF
Post by Lee
Lee
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Net-snmp-coders mailing list
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
Lee
2016-11-13 17:49:42 UTC
Permalink
Post by Magnus Fromreide
Post by Lee
Post by Magnus Fromreide
Post by Bart Van Assche
Post by Robert Story
I've updated both records to use the documentation netblock. See if
that works better for you.
Hello Robert,
T070com2sec_simple passes again on my development system.
As the author of those tests I would actually prefer if I had the
ability
to
run them even if not connected to the internet at all - does any of you have
any idea of how to do that?
add onea.net-snmp.org & twoa.net-snmp.org to your hosts file?
Kind of bad form to do from an automated testsuite that I am inflicting on
other people...
Right - it is an icky solution. But how else can you do name ->
address lookups when not connected to the internet at all?

Lee

Loading...