DNS .US outage

Anyone else having issues with .US right now (~12AM EST)? NSlookup, etc show various .us destinations as unknown domains…

Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation Team
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
cchurch@netcogov.com
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D

nslookup is not the best tool to troubleshoot dns issues

works for me though -

suresh@frodo 10:02:22 [~]$ dig us NS

; <<>> DiG 8.3 <<>> us NS
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; us, type = NS, class = IN

;; ANSWER SECTION:
us. 1d23h59m46s IN NS A.GTLD.BIZ.
us. 1d23h59m46s IN NS B.GTLD.BIZ.
us. 1d23h59m46s IN NS C.GTLD.BIZ.

;; Total query time: 3 msec
;; FROM: frodo.hserus.net to SERVER: default -- 127.0.0.1
;; WHEN: Thu Jul 7 10:02:25 2005
;; MSG SIZE sent: 20 rcvd: 76

and a random .us domain -

suresh@frodo 10:02:25 [~]$ dig help.us

; <<>> DiG 8.3 <<>> help.us
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; help.us, type = A, class = IN

;; ANSWER SECTION:
help.us. 58m46s IN A 66.98.178.79

;; Total query time: 2 msec
;; FROM: frodo.hserus.net to SERVER: default -- 127.0.0.1
;; WHEN: Thu Jul 7 10:03:30 2005
;; MSG SIZE sent: 25 rcvd: 41

Doc-2.2.3: doc -p -w us
Doc-2.2.3: Starting test of us. parent is .
Doc-2.2.3: Test date - Wed Jul 6 18:42:03 HST 2005
Note: Skipping parent domain testing
Found 3 NS and 3 glue records for us. @a.root-servers.net. (non-AUTH)
Using NSlist from parent domain server a.root-servers.net.
NS list summary for us. from parent (.) servers
  == a.gtld.biz. b.gtld.biz. c.gtld.biz.
soa @a.gtld.biz. for us. serial: 2002445162
soa @b.gtld.biz. for us. serial: 2002445163
soa @c.gtld.biz. for us. serial: 2002445163
WARN: Found 2 unique SOA serial #'s for us.
Authoritative domain (us.) servers agree on NS for us.
NS list from us. authoritative servers matches list from
  === first parent (.) nameserver queried
Checking 0 potential addresses for hosts at us.

Not for my site, at least:

; <<>> DiG 9.2.1 <<>> +trace microsys.us
;; global options: printcmd
. 323510 IN NS F.ROOT-SERVERS.NET.
. 323510 IN NS G.ROOT-SERVERS.NET.
. 323510 IN NS H.ROOT-SERVERS.NET.
. 323510 IN NS I.ROOT-SERVERS.NET.
. 323510 IN NS J.ROOT-SERVERS.NET.
. 323510 IN NS K.ROOT-SERVERS.NET.
. 323510 IN NS L.ROOT-SERVERS.NET.
. 323510 IN NS M.ROOT-SERVERS.NET.
. 323510 IN NS A.ROOT-SERVERS.NET.
. 323510 IN NS B.ROOT-SERVERS.NET.
. 323510 IN NS C.ROOT-SERVERS.NET.
. 323510 IN NS D.ROOT-SERVERS.NET.
. 323510 IN NS E.ROOT-SERVERS.NET.
;; Received 244 bytes from 127.0.0.1#53(127.0.0.1) in 33 ms

us. 172800 IN NS A.GTLD.BIZ.
us. 172800 IN NS B.GTLD.BIZ.
us. 172800 IN NS C.GTLD.BIZ.
;; Received 133 bytes from 192.5.5.241#53(F.ROOT-SERVERS.NET) in 87 ms

microsys.us. 7200 IN NS NS2.DOMAINDISCOVER.COM.
microsys.us. 7200 IN NS NS1.DOMAINDISCOVER.COM.
;; Received 83 bytes from 209.173.53.162#53(A.GTLD.BIZ) in 40 ms

microsys.us. 28800 IN SOA ns1.domaindiscover.com.
hostmaster.tierra.net. 3723050 86400 1800 604800 28800
;; Received 108 bytes from 216.104.163.3#53(NS2.DOMAINDISCOVER.COM) in
98 ms

'dig +trace', incidentally, for those of you who haven't tripped over
it yet, is *very* cool. I'm trying to figure out a way to shoehorn the
output into something I can Nagios...

Cheers,
-- jra