Closed domderen closed 1 year ago
Thanks for filing this issue. This sounds like an edge case where there are multiple CNAMES that point to the same IP address. I think that we need to add some logic in https://github.com/zmap/zdns/blob/master/pkg/miekg/miekg.go#L811 to dedup IPs before handing them back. I looked at what calls this function, and it's pretty limited, so I think we're safely just always deduping IPv4 and IPv6 addresses in that function before returning.
Hey @zakird thanks for the input, I created a PR to fix this.
Hey,
I ran this command with zdns:
And I got the following result:
It looks like the
zdns alookup
module is returning duplicate ip addresses in some cases. When I try it with thea
module, result looks correct:After some additional tests, I think this issue is somehow related to the fact that Walmart is using Akamai Edge DNS system. When I tried the same test on a CNAME record that doesn't use Akamai, the
alookup
module returned correct result without duplicated IPs.Could someone point me in the right direction, why this might be happening? I'm happy to help fix the issue, but I'm quite new to
zdns
and I could use a helping hand pinning this issue.Thanks in advance for your help!