dalf/dnssecaudit

dnssecaudit's Issues

very long delay to scan search.jigsaw-security.com

Logs:

Analyzing jigsaw-security.com
Querying jigsaw-security.com/NS (referral)...
Querying jigsaw-security.com/NS (auth, detecting cookies)...
Querying jigsaw-security.com/NS (auth, detecting cookies)...
Preparing query jigsaw-security.com/DNSKEY...
Preparing query jigsaw-security.com/DS...
Executing queries...
Analyzing search.jigsaw-security.com
Querying search.jigsaw-security.com/NS (referral)...
Preparing query search.jigsaw-security.com/A...
Preparing query search.jigsaw-security.com/AAAA...
Executing queries...
  search.jigsaw-security.com check
Assessing status of ....
Assessing RRSIG status of ....
Assessing NODATA response status of ....
Assessing NXDOMAIN response status of ....

The delay is after Querying jigsaw-security.com/NS (referral)...

dns.exception.TooBig: The DNS message is too big.

After about 40 requests, each new request ends up with a dns.exception.TooBig exception.

Callstack:

Traceback (most recent call last):
  File "../ dnssecaudit/probe.py", line 188, in _probe
    return a.analyze()
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1513, in analyze
    return self._analyze(self.name)
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1636, in _analyze
    self._analyze_ancestry(name)
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1601, in _analyze_ancestry
    parent_obj = self._analyze(name.parent())
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1636, in _analyze
    self._analyze_ancestry(name)
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1601, in _analyze_ancestry
    parent_obj = self._analyze(name.parent())
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1652, in _analyze
    self._analyze_name(name_obj)
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1694, in _analyze_name
    self._analyze_queries(name_obj)
  File "../ ve/lib/python3.7/site-packages/dnsviz/analysis/online.py", line 1849, in _analyze_queries
    Q.ExecutableDNSQuery.execute_queries(*list(queries.values()), tm=self.transport_manager, th_factories=self.th_factories)
  File "../ ve/lib/python3.7/site-packages/dnsviz/query.py", line 1432, in execute_queries
    qtm = qh.get_query_transport_meta()
  File "../ ve/lib/python3.7/site-packages/dnsviz/query.py", line 789, in get_query_transport_meta
    return transport.DNSQueryTransportMeta(self.request.to_wire(), self._server, self.params['tcp'], self.get_timeout(), \
  File "../ ve/lib/python3.7/site-packages/dns/message.py", line 428, in to_wire
    r.add_edns(self.edns, self.ednsflags, self.payload, self.options)
  File "../ ve/lib/python3.7/site-packages/dns/renderer.py", line 203, in add_edns
    raise dns.exception.TooBig
dns.exception.TooBig: The DNS message is too big.