网络协议分析课件Chapter19.ppt

Resource Record Domain name Domain type Domain class Time-to-live: the number of seconds the answer is valid. Resource data length Resource data: containing the answer to the query (in the answer section) or the domain name of the authoritative server (in the authoritative section) or additional information (in the additional information section). depend on the value of the type field. A number A domain name An offset pointer A character string COMPRESSION DNS requires that a domain name be replaced by an offset pointer if it is repeated. For efficiency, DNS defines a 2-byte offset pointer that points to a previous occurrence of the domain or part of it. ENCAPSULATION DNS can use either UDP or TCP. In both cases the well-known port used by the server is port 53. UDP is used when the size of the response message is less than 512 bytes. If the size of the response message is more than 512 bytes, a TCP connection is used. If the resolver has prior knowledge that the size of the response message is more than 512 bytes, it uses the TCP connection. For example, if a secondary name server (acting as a client) needs a zone transfer from a primary server, it uses the TCP connection because the size of the information being transferred usually exceeds 512 bytes. If the resolver does not know the size of the response message, it can use the UDP port. However, if the size of the response message is more than 512 bytes, the server truncates the message and turns on the TC bit. The resolver now opens a TCP connection and repeats the request to get a full response from the server. REGISTRARS(注册机构) How are new domains added to DNS? This is done through a registrar, a commercial entity accredited by ICANN. To register, the organization needs to give the name of its server and the IP address of the server. For example: Domain name: IP address: A registrar first verifies that the requested domain name is unique and then enters it into the DNS database. Ping: Nslookup: to