DNS loop, >5,000 queries per second for minutes at a time
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
dnsmasq (Ubuntu) |
Incomplete
|
Low
|
Mathieu Trudel-Lapierre |
Bug Description
Since upgrading a desktop to 17.04, several times a day a DNS storm occurs. The same A or AAAA record is requested over and over again. The storm lasts 10 to 15 minutes and can clog name resolution entirely, making the computer unusable for that time.
Mar 12 08:55:12 hostname systemd-
Mar 12 08:55:13 hostname systemd-
Mar 12 08:55:13 hostname dnsmasq[1227]: Maximum number of concurrent DNS queries reached (max: 150)
Mar 12 08:55:13 hostname systemd-
Mar 12 08:55:14 hostname kernel: [185434.365153] proc_thermal 0000:00:04.0: Unsupported event [0x84]
Mar 12 08:55:19 hostname systemd-
Mar 12 08:55:19 hostname dnsmasq[1227]: Maximum number of concurrent DNS queries reached (max: 150)
Mar 12 08:55:19 hostname systemd-
Mar 12 08:55:25 hostname systemd-
Mar 12 08:55:25 hostname dnsmasq[1227]: Maximum number of concurrent DNS queries reached (max: 150)
Mar 12 08:55:25 hostname systemd-
Mar 12 08:55:31 hostname systemd-
Both Firefox and Transmission originated hostnames have appeared in the storms, so it does not seem like an individual application is causing the problem.
There are so many requests that running tcpdump on a random port (port 29381 is used below) soon catches part of the storm. Example output below. Note that throughout the duration of these captures, identical DNS requests were being sent from pretty much every other port as well.
=======
= Transmission looking up mgtracker.org, got stuck on this single hostname for =
= about 15 minutes (this is just the tail end of yesterday morning's storm). =
=======
08:40:24.667302 IP localhost.29381 > 127.0.0.53.domain: 60802+% [1au] AAAA? mgtracker.org. (42)
E..F..@
08:40:24.685708 IP 127.0.0.53.domain > localhost.29381: 60802 0/0/1 (42)
E..Fdd@
08:40:33.580735 IP localhost.29381 > 127.0.0.53.domain: 53746+% [1au] A? mgtracker.org. (42)
E..F.+@
08:40:33.594830 IP 127.0.0.53.domain > localhost.29381: 53746 6/0/1 A 92.241.171.245, A 37.19.5.139, A 77.91.229.218, A 5.79.83.194, A 5.79.83.193, A 37.19.5.155 (138)
E.....@
08:41:30.717640 IP localhost.29381 > 127.0.0.53.domain: 63667+% [1au] AAAA? mgtracker.org. (42)
E..F\.@
08:41:30.733855 IP 127.0.0.53.domain > localhost.29381: 63667 0/0/1 (42)
E..F .@.@...
08:42:35.768840 IP localhost.29381 > 127.0.0.53.domain: 18342+% [1au] AAAA? mgtracker.org. (42)
E..FeH@
08:42:35.786098 IP 127.0.0.53.domain > localhost.29381: 18342 0/0/1 (42)
E..F)N@
08:42:38.568885 IP localhost.29381 > 127.0.0.53.domain: 43765+% [1au] AAAA? mgtracker.org. (42)
E..F..@
08:42:38.587299 IP 127.0.0.53.domain > localhost.29381: 43765 0/0/1 (42)
E..F..@
08:42:41.348249 IP localhost.29381 > 127.0.0.53.domain: 39157+% [1au] A? mgtracker.org. (42)
E..F)Z@
08:42:41.362068 IP 127.0.0.53.domain > localhost.29381: 39157 6/0/1 A 92.241.171.245, A 37.19.5.139, A 77.91.229.218, A 5.79.83.194, A 5.79.83.193, A 37.19.5.155 (138)
E....\@
08:42:47.230064 IP localhost.29381 > 127.0.0.53.domain: 2625+% [1au] AAAA? mgtracker.org. (42)
E..F T@.@.3.
A.......... mgtracker.
08:42:47.246635 IP 127.0.0.53.domain > localhost.29381: 2625 0/0/1 (42)
E..F.Q@
A.......... mgtracker.
08:42:47.538067 IP localhost.29381 > 127.0.0.53.domain: 36249+% [1au] AAAA? mgtracker.org. (42)
E..F..@
08:42:47.550399 IP 127.0.0.53.domain > localhost.29381: 36249 0/0/1 (42)
E..F..@
08:42:47.658926 IP localhost.29381 > 127.0.0.53.domain: 15443+% [1au] A? mgtracker.org. (42)
E..F..@
08:42:47.670848 IP 127.0.0.53.domain > localhost.29381: 15443 6/0/1 A 92.241.171.245, A 37.19.5.139, A 77.91.229.218, A 5.79.83.194, A 5.79.83.193, A 37.19.5.155 (138)
E.....@
=======
= Firefox looking up some domains during another storm this morning. =
=======
08:55:13.567426 IP localhost.29381 > localhost.domain: 52018+% [1au] A? aviationweather
E..Y.G@
08:55:13.591351 IP localhost.domain > localhost.29381: 52018 1/0/1 A 140.90.101.207 (77)
E..i.E@
08:56:04.754953 IP localhost.29381 > localhost.domain: 21979+% [1au] A? aviationweather
E..Y5.@
08:56:04.776098 IP localhost.domain > localhost.29381: 21979 1/0/1 A 140.90.101.207 (77)
E..ia.@
08:56:10.980068 IP localhost.29381 > localhost.domain: 17884+% [1au] A? aviationweather
E..Y..@
08:56:11.005673 IP localhost.domain > localhost.29381: 17884 1/0/1 A 140.90.101.207 (77)
E..i.]@
08:56:15.449304 IP localhost.29381 > localhost.domain: 21310+% [1au] A? aviationweather
E..YZO@
08:56:15.471077 IP localhost.domain > localhost.29381: 21310 1/0/1 A 140.90.101.207 (77)
E..i..@
08:56:29.442977 IP localhost.29381 > localhost.domain: 64194+% [1au] A? aviationweather
E..Y..@
08:56:29.464671 IP localhost.domain > localhost.29381: 64194 1/0/1 A 140.90.101.207 (77)
E..i.b@
08:56:32.390547 IP localhost.29381 > localhost.domain: 29586+% [1au] A? aviationweather
E..Y..@
08:56:32.408757 IP localhost.domain > localhost.29381: 29586 1/0/1 A 140.90.101.207 (77)
E..iA.@
08:57:19.830164 IP localhost.29381 > localhost.domain: 16537+% [1au] A? aviationweather
E..Yt.@
08:57:19.850795 IP localhost.domain > localhost.29381: 16537 1/0/1 A 140.90.101.207 (77)
E..i..@
08:57:32.355881 IP localhost.29381 > localhost.domain: 12311+% [1au] A? aviationweather
E..Y..@
08:57:32.375506 IP localhost.domain > localhost.29381: 12311 1/0/1 A 140.90.101.207 (77)
E..i.u@
08:57:37.705655 IP localhost.29381 > localhost.domain: 62772+% [1au] A? aviationweather
E..Y{.@
08:57:37.730938 IP localhost.domain > localhost.29381: 62772 1/0/1 A 140.90.101.207 (77)
E..i..@
08:57:39.953843 IP localhost.29381 > localhost.domain: 36938+% [1au] A? aviationweather
E..Y..@
08:57:39.974394 IP localhost.domain > localhost.29381: 36938 1/0/1 A 140.90.101.207 (77)
E..i.c@
08:58:41.947124 IP localhost.29381 > localhost.domain: 23753+% [1au] A? sanfrancisco.
E..\..@
08:58:41.966164 IP localhost.domain > localhost.29381: 23753 1/0/1 A 64.62.205.202 (80)
E..lC.@
08:58:48.859735 IP localhost.29381 > localhost.domain: 30950+% [1au] A? sanfrancisco.
E..\.
@.@.=P.
08:58:48.875436 IP localhost.domain > localhost.29381: 30950 1/0/1 A 64.62.205.202 (80)
E..l*D@
08:59:04.399981 IP localhost.29381 > localhost.domain: 42722+% [1au] A? sanfrancisco.
E..\.R@.@." .......
08:59:04.422187 IP localhost.domain > localhost.29381: 42722 1/0/1 A 64.62.205.202 (80)
E..lE.@
08:59:58.680607 IP localhost.29381 > localhost.domain: 62516+% [1au] A? sanfrancisco.
E..\3<@.@. .......
08:59:58.700674 IP localhost.domain > localhost.29381: 62516 1/0/1 A 64.62.205.202 (80)
E..l^.@
09:00:26.116063 IP localhost.29381 > localhost.domain: 19376+% [1au] A? sanfrancisco.
E..\.9@
09:00:26.130413 IP localhost.domain > localhost.29381: 19376 1/0/1 A 64.62.205.202 (80)
E..l..@
09:00:40.524692 IP localhost.29381 > localhost.domain: 45764+% [1au] A? sanfrancisco.
E..\..@
09:00:40.542471 IP localhost.domain > localhost.29381: 45764 1/0/1 A 64.62.205.202 (80)
E..l.y@
09:01:08.932316 IP localhost.29381 > localhost.domain: 52440+% [1au] A? sanfrancisco.
E..\z
@.@..P.
09:01:08.952420 IP localhost.domain > localhost.29381: 52440 1/0/1 A 64.62.205.202 (80)
E..l..@
09:01:31.526697 IP localhost.29381 > localhost.domain: 9148+% [1au] A? sanfrancisco.
E..\..@
09:01:31.543163 IP localhost.domain > localhost.29381: 9148 1/0/1 A 64.62.205.202 (80)
E..l.a@
09:01:44.111992 IP localhost.29381 > localhost.domain: 23334+% [1au] A? sanfrancisco.
E..\1.@.@.
c......
09:01:44.130461 IP localhost.domain > localhost.29381: 23334 1/0/1 A 64.62.205.202 (80)
E..l\e@
09:01:57.386374 IP localhost.29381 > localhost.domain: 16506+% [1au] A? sanfrancisco.
E..\.i@
09:01:57.400469 IP localhost.domain > localhost.29381: 16506 1/0/1 A 64.62.205.202 (80)
E..l..@
09:02:00.813958 IP localhost.29381 > localhost.domain: 23044+% [1au] A? sanfrancisco.
E..\k.@
09:02:00.828533 IP localhost.domain > localhost.29381: 23044 1/0/1 A 64.62.205.202 (80)
E..l.K@
09:02:57.705977 IP localhost.29381 > localhost.domain: 21566+% [1au] A? sanfrancisco.
E..\.J@
09:02:57.728736 IP localhost.domain > localhost.29381: 21566 1/0/1 A 64.62.205.202 (80)
E..l.f@
09:03:04.441183 IP localhost.29381 > localhost.domain: 38929+% [1au] A? sanfrancisco.
E..\.}@
09:03:04.454171 IP localhost.domain > localhost.29381: 38929 1/0/1 A 64.62.205.202 (80)
E..l.~@
09:03:06.707936 IP localhost.29381 > localhost.domain: 10488+% [1au] A? sanfrancisco.
E..\..@
09:03:06.728850 IP localhost.domain > localhost.29381: 10488 1/0/1 A 64.62.205.202 (80)
E..l..@
09:03:31.070106 IP localhost.29381 > localhost.domain: 14688+% [1au] A? sanfrancisco.
E..\5.@
09:03:31.085980 IP localhost.domain > localhost.29381: 14688 1/0/1 A 64.62.205.202 (80)
E..l_.@
09:03:32.041339 IP localhost.29381 > localhost.domain: 45179+% [1au] A? sanfrancisco.
E..\W @.@..:.
09:03:32.060103 IP localhost.domain > localhost.29381: 45179 1/0/1 A 64.62.205.202 (80)
E..l..@
09:03:37.686102 IP localhost.29381 > localhost.domain: 31210+% [1au] A? sanfrancisco.
E..\..@
09:03:37.700049 IP localhost.domain > localhost.29381: 31210 1/0/1 A 64.62.205.202 (80)
E..lD.@
09:03:42.473236 IP localhost.29381 > localhost.domain: 54061+% [1au] A? sanfrancisco.
E..\.r@
09:03:42.489891 IP localhost.domain > localhost.29381: 54061 1/0/1 A 64.62.205.202 (80)
E..l.H@
09:03:42.908138 IP localhost.29381 > localhost.domain: 55861+% [1au] A? sanfrancisco.
E..\.p@
09:03:42.923952 IP localhost.domain > localhost.29381: 55861 1/0/1 A 64.62.205.202 (80)
E..l.F@
09:03:44.660896 IP localhost.29381 > localhost.domain: 12799+% [1au] A? sanfrancisco.
E..\..@
09:03:44.678664 IP localhost.domain > localhost.29381: 12799 1/0/1 A 64.62.205.202 (80)
E..l1Y@.@.
....5..
09:03:56.294391 IP localhost.29381 > localhost.domain: 53591+% [1au] A? sanfrancisco.
E..\.e@
09:03:56.313080 IP localhost.domain > localhost.29381: 53591 1/0/1 A 64.62.205.202 (80)
E..l.-@
09:04:32.624420 IP localhost.29381 > localhost.domain: 59514+% [1au] A? sanfrancisco.
E..\~.@
09:04:32.642294 IP localhost.domain > localhost.29381: 59514 1/0/1 A 64.62.205.202 (80)
E..l..@
09:05:05.429955 IP localhost.29381 > localhost.domain: 22509+% [1au] A? sanfrancisco.
E..\..@
09:05:05.443735 IP localhost.domain > localhost.29381: 22509 1/0/1 A 64.62.205.202 (80)
E..l..@
09:05:22.123273 IP localhost.29381 > localhost.domain: 32521+% [1au] A? sanfrancisco.
E..\..@
09:05:22.137798 IP localhost.domain > localhost.29381: 32521 1/0/1 A 64.62.205.202 (80)
E..l9G@
09:05:48.950874 IP localhost.29381 > localhost.domain: 16613+% [1au] A? sanfrancisco.
E..\..@
09:05:48.967800 IP localhost.domain > localhost.29381: 16613 1/0/1 A 64.62.205.202 (80)
E..l..@
09:05:49.420645 IP localhost.29381 > localhost.domain: 27506+% [1au] A? sanfrancisco.
E..\..@
09:05:49.434688 IP localhost.domain > localhost.29381: 27506 1/0/1 A 64.62.205.202 (80)
E..l..@
09:06:03.379766 IP localhost.29381 > localhost.domain: 373+% [1au] A? sanfrancisco.
E..\..@
09:06:03.399737 IP localhost.domain > localhost.29381: 373 1/0/1 A 64.62.205.202 (80)
E..l..@
09:06:47.955097 IP localhost.29381 > localhost.domain: 53692+% [1au] A? sanfrancisco.
E..\e?@
09:06:47.969567 IP localhost.domain > localhost.29381: 53692 1/0/1 A 64.62.205.202 (80)
E..l.Y@
09:06:48.806333 IP localhost.29381 > localhost.domain: 28298+% [1au] A? sanfrancisco.
E..\.d@
09:06:48.825068 IP localhost.domain > localhost.29381: 28298 1/0/1 A 64.62.205.202 (80)
E..l.~@
09:07:08.821857 IP localhost.29381 > localhost.domain: 13512+% [1au] A? sanfrancisco.
E..\$.@
09:07:08.837695 IP localhost.domain > localhost.29381: 13512 1/0/1 A 64.62.205.202 (80)
E..lM.@
09:07:11.109391 IP localhost.29381 > localhost.domain: 58386+% [1au] A? sanfrancisco.
E..\p.@
09:07:11.123844 IP localhost.domain > localhost.29381: 58386 1/0/1 A 64.62.205.202 (80)
E..l..@
09:07:22.878949 IP localhost.29381 > localhost.domain: 62206+% [1au] A? sanfrancisco.
E..\..@
09:07:22.886164 IP localhost.domain > localhost.29381: 62206 1/0/1 A 64.62.205.202 (80)
E..l-.@
09:07:25.775497 IP localhost.29381 > localhost.domain: 28687+% [1au] A? sanfrancisco.
E..\c!@
09:07:25.782854 IP localhost.domain > localhost.29381: 28687 1/0/1 A 64.62.205.202 (80)
E..l..@
09:07:27.175548 IP localhost.29381 > localhost.domain: 52270+% [1au] A? sanfrancisco.
E..\.t@
09:07:27.184556 IP localhost.domain > localhost.29381: 52270 1/0/1 A 64.62.205.202 (80)
E..l.d@
09:07:38.128008 IP localhost.29381 > localhost.domain: 51468+% [1au] A? sanfrancisco.
E..\..@
09:07:38.136841 IP localhost.domain > localhost.29381: 51468 1/0/1 A 64.62.205.202 (80)
E..l..@
09:07:42.760834 IP localhost.29381 > localhost.domain: 20397+% [1au] A? sanfrancisco.
E..\[.@
09:07:42.769813 IP localhost.domain > localhost.29381: 20397 1/0/1 A 64.62.205.202 (80)
E..l..@
09:07:44.234479 IP localhost.29381 > localhost.domain: 27850+% [1au] A? sanfrancisco.
E..\{.@
09:07:44.244694 IP localhost.domain > localhost.29381: 27850 1/0/1 A 64.62.205.202 (80)
E..l.j@
09:07:49.091319 IP localhost.29381 > localhost.domain: 23804+% [1au] A? sanfrancisco.
E..\..@
09:07:49.101446 IP localhost.domain > localhost.29381: 23804 1/0/1 A 64.62.205.202 (80)
E..l#v@
09:08:29.309149 IP localhost.29381 > localhost.domain: 39759+% [1au] A? sanfrancisco.
E..\.O@
09:08:29.344659 IP localhost.domain > localhost.29381: 39759 1/0/1 A 64.62.205.202 (80)
E..l..@
09:08:41.407525 IP localhost.29381 > localhost.domain: 1015+% [1au] A? sanfrancisco.
E..\..@
09:08:41.428300 IP localhost.domain > localhost.29381: 1015 1/0/1 A 64.62.205.202 (80)
E..l; @.@..B.
09:08:58.485782 IP localhost.29381 > localhost.domain: 49447+% [1au] A? sanfrancisco.
E..\..@
09:08:58.503912 IP localhost.domain > localhost.29381: 49447 1/0/1 A 64.62.205.202 (80)
E..l%.@
09:09:01.636611 IP localhost.29381 > localhost.domain: 10346+% [1au] A? sanfrancisco.
E..\JU@
09:09:01.672173 IP localhost.domain > localhost.29381: 10346 1/0/1 A 64.62.205.202 (80)
E..lr.@
09:09:15.308277 IP localhost.29381 > localhost.domain: 56260+% [1au] A? sanfrancisco.
E..\.3@
09:09:15.325246 IP localhost.domain > localhost.29381: 56260 1/0/1 A 64.62.205.202 (80)
E..l.]@
09:09:18.492612 IP localhost.29381 > localhost.domain: 60634+% [1au] A? sanfrancisco.
E..\.\@
09:09:18.512739 IP localhost.domain > localhost.29381: 60634 1/0/1 A 64.62.205.202 (80)
E..l..@
09:09:27.528824 IP localhost.29381 > localhost.domain: 64525+% [1au] A? sanfrancisco.
E..\..@
09:09:27.558032 IP localhost.domain > localhost.29381: 64525 1/0/1 A 64.62.205.202 (80)
E..l..@
09:10:27.693593 IP localhost.29381 > localhost.domain: 21058+% [1au] A? sanfrancisco.
E..\"x@
09:10:27.713255 IP localhost.domain > localhost.29381: 21058 1/0/1 A 64.62.205.202 (80)
E..lJ/@
09:10:36.734357 IP localhost.29381 > localhost.domain: 42425+% [1au] A? sanfrancisco.
E..\Lt@
09:10:36.752909 IP localhost.domain > localhost.29381: 42425 1/0/1 A 64.62.205.202 (80)
E..lt.@
09:10:40.697269 IP localhost.29381 > localhost.domain: 19295+% [1au] A? sanfrancisco.
E..\..@
09:10:40.713775 IP localhost.domain > localhost.29381: 19295 1/0/1 A 64.62.205.202 (80)
E..l."@
09:11:51.961509 IP localhost.29381 > localhost.domain: 49988+% [1au] A? sanfrancisco.
E..\E.@
09:11:51.977236 IP localhost.domain > localhost.29381: 49988 1/0/1 A 64.62.205.202 (80)
E..lm.@
ProblemType: Bug
DistroRelease: Ubuntu 17.04
Package: dnsmasq 2.76-5
ProcVersionSign
Uname: Linux 4.10.0-11-generic x86_64
ApportVersion: 2.20.4-0ubuntu2
Architecture: amd64
Date: Sun Mar 12 09:23:38 2017
InstallationDate: Installed on 2016-12-02 (98 days ago)
InstallationMedia: Ubuntu-GNOME 16.10 "Yakkety Yak" - Release amd64 (20161012.1)
PackageArchitec
ProcEnviron:
LANGUAGE=en_AU:en
TERM=xterm-
PATH=(custom, no user)
LANG=en_AU.UTF-8
SHELL=/bin/bash
SourcePackage: dnsmasq
UpgradeStatus: No upgrade log present (probably fresh install)
Restarting dnsmasq immediately stops an ongoing DNS storm.