On Fri, Dec 4, 2020 at 11:22 AM Adam Xu <adam_xu(a)adagene.com.cn&gt; wrote: > Hi ovirt > > Recently, my samba internal dns has been getting a lot of errors, like: > > [2020/12/02 15:24:31.484073, 1] ../../source4/dns_server/dns_query.c:1141(dns_server_process_query_got_auth) > dns_server_process_query_got_auth: Failed to add SOA record: WERR_DNS_ERROR_RCODE_FORMAT_ERROR > > I found that my ovirt nodes was sending a lot of strange requests, I use tcpdump and got some like: > > tcpdump -i ovirtmgmt udp port 53 > > 17:00:23.875038 IP ovirt1.adagene.cn.53862 > dc1.mydomain.com.domain: 35727+ [1au] NS? . (40) > > 17:00:24.436466 IP 192.168.49.195.domain > ovirt1.mydomain.com.33625: 8887 FormErr-$ 0/0/1 (40) > > about one request in a second. > > And I noticed that some nodes which version is 4.4.2 did't send dns requests like above. therefore no error occured. > > Were there any recent changes to ovirt node that caused these errors? Any chance you can try to provide some more information? Perhaps a tcpdump dump (something like 'tcpdump -i any -w /root/dump1', or '-i NIC' if you know which NIC, perhaps also 'port 53' if it's just that)? From both hosts and the dns server?

Perhaps /var/log/vdsm/* and /var/log/ovirt-hosted-engine-ha/* from hosts? Thanks and best regards,