trace-a-dns-resolution
Trace DNS resolution from client search and cache through recursive and authoritative answers, DNSSEC, delegation, and address selection. Use when names resolve differently across clients, networks, or time.
ソース情報
- リポジトリ
- protosphinx/sphinxstack
- ソースの最終更新活動
- 2026年7月29日 13:55
- 検出された SKILL.md の言語
- 英語
- スター
- 3
- フォーク
- 0
インストール方法
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
ソースファイルを確認
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
ファイルエクスプローラー
2 ファイルSKILL.md を表示中
SKILL.md
ソースの指示 · 読み取り専用プレビュー- name
- trace-a-dns-resolution
- category
- code
- description
- Trace DNS resolution from client search and cache through recursive and authoritative answers, DNSSEC, delegation, and address selection. Use when names resolve differently across clients, networks, or time.
# trace-a-dns-resolution
## When to use
- Use for an authorized domain, resolver, or client path.
- Do not change production DNS while diagnosis is still ambiguous.
## Preconditions
- Record name, type, client, network, resolver, time, search domains, address family, and expected authority.
## Procedure
1. Capture the client’s actual query, search expansion, hosts file, and cache state.
2. Query the configured recursive resolver and record answer, authority, additional data, flags, and TTL.
3. Trace delegation from root to authoritative servers.
4. Check glue, lame delegation, DNSSEC chain, CNAME or alias, negative caching, and split horizon.
5. Compare resolvers, regions, IPv4 and IPv6, and cached versus uncached paths.
6. Order observations by time and identify the first divergent layer.
## Failure plan
- If DNSSEC or delegation is broken, preserve evidence before emergency correction.
## Worked example
One office resolver retains a negative answer after a restored record because the SOA negative TTL has not expired.
## Done
- A DNS trace report records client, recursive, delegation, authoritative, DNSSEC, cache, TTL, and divergence evidence
- Search-domain, hosts, resolver, region, address-family, negative-cache, clock, and authority checks verify diagnosis
GitHubで見る