--- title: "DNS - OR ALSO: WHY IS MY INTERNET NOT WORKING?" description: Why does a visit to a website fail? Why can't I send my e-mail? DNS, the mother of all Internet services, is often the cause of the problem. image: https://insights.profitap.com/hubfs/Blog-Cover%20(1).png --- [![Profitap](https://insights.profitap.com/hubfs/profitap-logo-white-rev1.png "Profitap")](https://www.profitap.com) - [Solutions](https://www.profitap.com/solutions/) - Products - Resources - Company - - - - # Profitap Blog ### Recent Posts ### Categories - [Network Monitoring (75)](https://insights.profitap.com/topic/network-monitoring) - [Insights (38)](https://insights.profitap.com/topic/insights) - [IOTA (32)](https://insights.profitap.com/topic/iota) - [Copper TAPs (31)](https://insights.profitap.com/topic/copper-taps) - [ProfiShark (24)](https://insights.profitap.com/topic/profishark) - [Fiber TAPs (23)](https://insights.profitap.com/topic/fiber-taps) - [Data Center (17)](https://insights.profitap.com/topic/data-center) - [Network Packet Brokers (14)](https://insights.profitap.com/topic/network-packet-brokers) - [Network Visibility and Cybersecurity (14)](https://insights.profitap.com/topic/network-visibility-and-cybersecurity) - [Network Security (13)](https://insights.profitap.com/topic/network-security) - [News (13)](https://insights.profitap.com/topic/news) - [Product Update (11)](https://insights.profitap.com/topic/product-update) - [Field Service (10)](https://insights.profitap.com/topic/field-service) - [Case Study (3)](https://insights.profitap.com/topic/case-study) - [OIDA (3)](https://insights.profitap.com/topic/oida) - [Events (2)](https://insights.profitap.com/topic/events) - [Heroes of Packet Analysis (2)](https://insights.profitap.com/topic/heroes-of-packet-analysis) - [Solutions for Government and Defense (2)](https://insights.profitap.com/topic/solutions-for-government-and-defense) - [Power and Utilities Solutions (1)](https://insights.profitap.com/topic/power-and-utilities-solutions) - [Solutions for Logistics (1)](https://insights.profitap.com/topic/solutions-for-logistics) - [cloud (1)](https://insights.profitap.com/topic/cloud) see all ### Archives - [July 2026 (1)](https://insights.profitap.com/archive/2026/07) - [June 2026 (1)](https://insights.profitap.com/archive/2026/06) - [May 2026 (3)](https://insights.profitap.com/archive/2026/05) - [April 2026 (2)](https://insights.profitap.com/archive/2026/04) - [March 2026 (3)](https://insights.profitap.com/archive/2026/03) - [February 2026 (3)](https://insights.profitap.com/archive/2026/02) - [January 2026 (3)](https://insights.profitap.com/archive/2026/01) - [November 2025 (1)](https://insights.profitap.com/archive/2025/11) - [October 2025 (4)](https://insights.profitap.com/archive/2025/10) - [September 2025 (1)](https://insights.profitap.com/archive/2025/09) - [August 2025 (2)](https://insights.profitap.com/archive/2025/08) - [July 2025 (3)](https://insights.profitap.com/archive/2025/07) - [May 2025 (1)](https://insights.profitap.com/archive/2025/05) - [March 2025 (2)](https://insights.profitap.com/archive/2025/03) - [February 2025 (3)](https://insights.profitap.com/archive/2025/02) - [January 2025 (2)](https://insights.profitap.com/archive/2025/01) - [December 2024 (1)](https://insights.profitap.com/archive/2024/12) - [November 2024 (2)](https://insights.profitap.com/archive/2024/11) - [October 2024 (1)](https://insights.profitap.com/archive/2024/10) - [September 2024 (3)](https://insights.profitap.com/archive/2024/09) - [August 2024 (8)](https://insights.profitap.com/archive/2024/08) - [July 2024 (7)](https://insights.profitap.com/archive/2024/07) - [June 2024 (1)](https://insights.profitap.com/archive/2024/06) - [May 2024 (6)](https://insights.profitap.com/archive/2024/05) - [April 2024 (1)](https://insights.profitap.com/archive/2024/04) - [March 2024 (3)](https://insights.profitap.com/archive/2024/03) - [February 2024 (2)](https://insights.profitap.com/archive/2024/02) - [January 2024 (1)](https://insights.profitap.com/archive/2024/01) - [December 2023 (2)](https://insights.profitap.com/archive/2023/12) - [November 2023 (1)](https://insights.profitap.com/archive/2023/11) - [July 2023 (1)](https://insights.profitap.com/archive/2023/07) - [June 2023 (1)](https://insights.profitap.com/archive/2023/06) - [April 2023 (1)](https://insights.profitap.com/archive/2023/04) - [February 2023 (1)](https://insights.profitap.com/archive/2023/02) - [January 2023 (1)](https://insights.profitap.com/archive/2023/01) - [December 2022 (1)](https://insights.profitap.com/archive/2022/12) - [October 2022 (1)](https://insights.profitap.com/archive/2022/10) - [April 2022 (1)](https://insights.profitap.com/archive/2022/04) - [March 2022 (1)](https://insights.profitap.com/archive/2022/03) - [February 2022 (2)](https://insights.profitap.com/archive/2022/02) - [January 2022 (1)](https://insights.profitap.com/archive/2022/01) - [December 2021 (2)](https://insights.profitap.com/archive/2021/12) - [October 2021 (2)](https://insights.profitap.com/archive/2021/10) - [September 2021 (1)](https://insights.profitap.com/archive/2021/09) - [August 2021 (1)](https://insights.profitap.com/archive/2021/08) - [June 2021 (1)](https://insights.profitap.com/archive/2021/06) - [May 2021 (1)](https://insights.profitap.com/archive/2021/05) - [March 2021 (2)](https://insights.profitap.com/archive/2021/03) - [February 2021 (1)](https://insights.profitap.com/archive/2021/02) - [January 2021 (2)](https://insights.profitap.com/archive/2021/01) - [November 2020 (1)](https://insights.profitap.com/archive/2020/11) - [September 2020 (1)](https://insights.profitap.com/archive/2020/09) - [August 2020 (1)](https://insights.profitap.com/archive/2020/08) - [July 2020 (2)](https://insights.profitap.com/archive/2020/07) - [June 2020 (2)](https://insights.profitap.com/archive/2020/06) - [April 2020 (2)](https://insights.profitap.com/archive/2020/04) - [March 2020 (2)](https://insights.profitap.com/archive/2020/03) - [February 2020 (4)](https://insights.profitap.com/archive/2020/02) - [September 2019 (1)](https://insights.profitap.com/archive/2019/09) - [August 2019 (1)](https://insights.profitap.com/archive/2019/08) - [May 2019 (2)](https://insights.profitap.com/archive/2019/05) - [April 2019 (1)](https://insights.profitap.com/archive/2019/04) - [March 2019 (1)](https://insights.profitap.com/archive/2019/03) - [February 2019 (1)](https://insights.profitap.com/archive/2019/02) - [December 2018 (2)](https://insights.profitap.com/archive/2018/12) - [October 2018 (2)](https://insights.profitap.com/archive/2018/10) - [August 2018 (1)](https://insights.profitap.com/archive/2018/08) - [July 2018 (2)](https://insights.profitap.com/archive/2018/07) - [June 2018 (1)](https://insights.profitap.com/archive/2018/06) - [May 2018 (4)](https://insights.profitap.com/archive/2018/05) - [April 2018 (1)](https://insights.profitap.com/archive/2018/04) - [March 2018 (2)](https://insights.profitap.com/archive/2018/03) - [February 2018 (1)](https://insights.profitap.com/archive/2018/02) - [January 2018 (1)](https://insights.profitap.com/archive/2018/01) - [December 2017 (1)](https://insights.profitap.com/archive/2017/12) - [November 2017 (2)](https://insights.profitap.com/archive/2017/11) - [October 2017 (1)](https://insights.profitap.com/archive/2017/10) - [July 2017 (1)](https://insights.profitap.com/archive/2017/07) - [May 2017 (2)](https://insights.profitap.com/archive/2017/05) - [February 2016 (1)](https://insights.profitap.com/archive/2016/02) - [December 2015 (2)](https://insights.profitap.com/archive/2015/12) - [June 2015 (2)](https://insights.profitap.com/archive/2015/06) - [May 2015 (3)](https://insights.profitap.com/archive/2015/05) see all ### Stay up to date [Follow @Profitap](https://twitter.com/Profitap?ref_src=twsrc%5Etfw) [Return to Blog](https://insights.profitap.com/) # DNS - OR ALSO: WHY IS MY INTERNET NOT WORKING? - [Tweet](https://twitter.com/share) This blog was written in collaboration with magellan netzwerke GmbH, A Profitap Partner.  **DNS - OR ALSO: WHY IS MY INTERNET NOT WORKING?** Why does a visit to a website fail? Why can't I send my e-mail? DNS, the mother of all Internet services, is often the cause of the problem. Loss of packets or an incorrectly configured firewall has an impact on a wide range of protocols. However, DNS as the basic protocol is the most vulnerable to packet loss and a misconfigured firewall. Knowing these effects supports the troubleshooting process so that any problems that may arise can be solved more quickly.   **FUNCTION OF THE DNS** The main task of the Domain Name Service (DNS) is to answer requests for name resolution. Due to the provision of a worldwide distributed directory service, the Domain Name System has been an essential part of the functionality of the Internet since 1985.   **PACKET LOSS** However, DNS is by design a vulnerable protocol for packet loss. Before an e-mail can be sent, a website visited or a stream started, a domain is first resolved into an IP address via DNS. With the corresponding IP address, the various protocols can establish a connection to the respective server. However, if the DNS name resolution is disturbed by packet loss, all other processes are also affected. DNS is therefore in many cases the cause of errors and inefficiency. DNS primarily uses UDP (User Datagram Protocol) as its transport protocol and thus a non-connection-oriented protocol. ![DNS query with lost packet](https://insights.profitap.com/hubfs/image-png.png) *Figure 1: DNS query with lost packet*   Even one lost packet leads to massive delays. In the example shown above, the client 192.168.2.120 only sends a new request to the DNS server after a five second delay. If connections to and from DNS servers are disturbed to a certain degree and cannot be repaired, check whether DNS requests via TCP are an alternative. Where in figure 1 a lost packet already leads to five seconds delays, the DNS request in figure 2 is handled with 20% packet loss in 846ms. ![DNS request via TCP with packet loss](https://insights.profitap.com/hubfs/image-png-1.png) *Figure 2: DNS request via TCP with packet loss*   **DNS OVER TCP** Primary DNS uses UDP as transport protocol. However, DNS was designed from the beginning to be able to use both UDP and TCP (Transmission Control Protocol). TCP is only used when DNS is not able to communicate over UDP.   **When does DNS change from UDP to TCP?** Typically when the packet size exceeds the maximum length of a single UDP packet of 512 bytes.   **When is the maximum length exceeded?** In fact, this happens quite often in today's environment. When DNS was first implemented, the only application where the maximum length was exceeded was a zone transfer. In today's DNS systems, the maximum length can be exceeded for example with a TXT record and other spam prevention features.   **What happens when TCP is blocked?** If the packet size exceeds 512 bytes, the 'TC' bit (truncation) is set, informing the client that the message length has exceeded the maximum allowed size. In these situations the client must retransmit the request over TCP. However, if TCP is blocked, the client request must be answered via UDP. This results in the packet being either fragmented or discarded. This results in slow DNS resolution or unresolvable domain names. Impact on the user experience: - websites are not or only slowly accessible - non-functioning services in applications   **Why the limitation to 512 bytes?** The size of 512 byte UDP payload is a dependency of IPv4. The IPv4 standard specifies that each network participant must be able to handle packets of 576 bytes or less. If control data (headers) are subtracted, pure 512 byte payload remains. This limitation was recognized as a problem, so the maximum size was increased to 4096 bytes in the Extension Mechanism for DNS (EDNS). Current DNS servers contain the EDNS implementation and are therefore able to answer queries. Although EDNS has been in existence since 1999, not all network components guarantee smooth operation. Firewalls are a source of error, as DNS-UDP packets over a total of 576 bytes can be dropped for various reasons. This behavior may not cause any directly visible problems, but it must be ensured that all network devices support large DNS packets. If the network environment does not fully support large DNS messages, this may cause DNS packets to be fragmented and/or partially dropped. For the end user, this has the same effect as blocked DNS packets via TCP. DNS queries remain unanswered or take a very long time.   **ANALYZING DNS PROBLEMS WITH PROFITAP IOTA** With the DNS protocol and some of the most common DNS issues discussed, it now comes to the next question. How to keep track of this all in an easy way? This is where the Profitap IOTA comes in. IOTA is a complete and secure network analysis and troubleshooting solution. By capturing raw packet data to disk and extracting metadata for use in the dashboards, IOTA can give a fast overview of what is happening on the network, without losing any detail. There are a number of customizable dashboards available to help monitor essential performance metrics, retransmissions, packet loss, latency, throughput, availability, connectivity and more.   **Using IOTA to find DNS issues** ![Profitap IOTA](https://insights.profitap.com/hs-fs/hubfs/image-png-2.png?width=300&name=image-png-2.png) The DNS dashboard gives you several views of your DNS traffic for whatever date and time range you have selected to see of your available traffic. The first section shows the volume of DNS traffic. The pie charts show  TOP DNS SERVERS in use and the MOST QUERIED Servers and their respective bandwidths. The Bottom section shows all the DNS queries, client and server IP addresses of those queries including the DNS REPLY code, transaction ID and date/time seen in the traffic. Under the Details Section, you can see the total number of DNS requests and the most popular DNS queries being used. ![DNS dashboard in Profitap IOTA web interface](https://insights.profitap.com/hubfs/image-png-3.png) *Figure 3: DNS dashboard in IOTA **web interface*   Without IOTA, the 1TB capture disk and the dashboards, troubleshooting these issues would take considerably more time or even become near impossible. Imagine digging through a 500GB trace file with Wireshark and the load times for each time you apply a filter. With IOTA, the dashboards give an instant overview of what is happening to the DNS traffic. For example, in the below screenshot from the DNS dashboard, the Server Fail DNS REPLY is clearly displayed, along with what clients and servers are associated with this traffic. ![Profitap IOTA latest DNS request via TCP with packet loss](https://insights.profitap.com/hubfs/image-png-Jan-20-2021-04-39-11-96-PM.png) *Figure 4: IOTA latest DNS request via TCP with packet loss*   If you want to narrow down your search, it’s possible to filter by selecting the ‘Filter By’ magnifying glass next to the ServFail error. This applies a filter looking for all of these specific errors.  By applying this filter, IOTA drills into the DNS Server responses and metadata for the particular Server.  You can see the client under IP Source that is making the DNS queries and the IP Destination as the Server that is receiving and responding to the DNS queries.  You can see below that the IOTA has identified DNS Reply Codes 0, “OK”,  Reply Code 2, “Server Failure”, and Reply Code 3 “Non-existent domain” occurring in the last 30 minutes of traffic, requested from client 192.168.50.57, and replied  from DNS server 207.91.5.20 ![DNS reply code identification Profitap IOTA dashbboard](https://insights.profitap.com/hubfs/image-png-Jan-20-2021-04-39-25-38-PM.png) *Figure 5: DNS reply code identification*   **What is the latency of the traffic with DNS Server located at 207.91.5.20? ** For this, we’ll Goto Dashboard Server Latency.  By using Goto>>, the active filter we setup from the DNS Dashboard will be preserved, and implemented on the Server Latency Dashboard. As you can see below, the top graph shows latency related in milliseconds.  The Max Application Latency in the last 30 minutes is 163.41ms.  I can further see the exact times of the spikes of the higher latency DNS calls. *![Profitap IOTA server latency dashboard](https://insights.profitap.com/hubfs/image-png-Jan-20-2021-04-39-37-61-PM.png)* *Figure 6: IOTA server latency dashboard*   From here, the underlined server IP address (207.91.5.20) can be selected to export a PCAP of the traffic of interest and analyze it further, as shown below. ![Filtered PCAP export from IOTA shown in Wireshark](https://insights.profitap.com/hubfs/image-png-Jan-20-2021-04-39-56-54-PM.png) *Figure 7: Filtered PCAP export from IOTA shown in Wireshark*   **Secure access and remote analysis** With an integrated TAP and internal storage capabilities, IOTA can be deployed at any key capture points in the network to provide full visibility into the network safely. The monitored network is isolated from the management interface to avoid any risk of injection of MITM attack through the device. IOTA is fully managed over HTTPS and features a built-in VPN, which means that the device can be deployed anywhere and accessed easily from behind your desk. Do you have any questions? Please don´t hesitate to contact us. [![Discover Profitap’s award-winning IOTA: Analyze network data, without impacting your networks’ performance and security](https://no-cache.hubspot.com/cta/default/2954816/0d8296d6-3673-4aa9-9d8e-2e19d21b103b.png)](https://cta-redirect.hubspot.com/cta/redirect/2954816/0d8296d6-3673-4aa9-9d8e-2e19d21b103b)   **Author: ** **Carl Jonathan Schubert** Data Access & Network Telemetry ![magellan netzwerke GmbH](https://www.magellan-net.de/images/mag_logo_RGB_1000px.png) magellan netzwerke GmbH [www.magellan-net.de](http://www.magellan-net.de)   **John Modlin WCNA** Senior Systems Engineer North America ![Profitap](https://insights.profitap.com/hs-fs/hubfs/Profitap-Apr2017/Image/Profitap-logo-175.png?width=175&height=38&name=Profitap-logo-175.png) Profitap [www.profitap.com](http://www.profitap.com)   - [Tweet](https://twitter.com/share) by [Profitap](https://insights.profitap.com/author/profitap) | Jan 27, 2021 | [Network Monitoring](https://insights.profitap.com/topic/network-monitoring), [IOTA](https://insights.profitap.com/topic/iota) [**Packet Capture & Analysis**](https://www.profitap.com/iota/) - [IOTA 1G](https://www.profitap.com/iota-1g/) - [IOTA 1G+](https://www.profitap.com/iota-1g-plus/) - [IOTA 10G](https://www.profitap.com/iota-10g/) - [IOTA 10G+](https://www.profitap.com/iota-10g-plus/) - [IOTA 10 CORE](https://www.profitap.com/iota-10-core/) - [IOTA 10 CORE+](https://www.profitap.com/iota-10-core-plus/) - [IOTA 100 CORE](https://www.profitap.com/iota-100-core/)   [**ProfiShark**](https://www.profitap.com/profishark-network-taps/) - [ProfiShark 100M](https://www.profitap.com/profishark-100m/) - [ProfiShark 1G](https://www.profitap.com/profishark-1g/) - [ProfiShark 1G+](https://www.profitap.com/profishark-1g-plus/) - [ProfiShark 10G](https://www.profitap.com/profishark-10g/) - [ProfiShark 10G+](https://www.profitap.com/profishark-10g-plus/)   [**Accessories**](https://www.profitap.com/accessories/) - [Transceivers](https://www.profitap.com/transceivers/) - [Data Diodes](https://www.profitap.com/data-diodes/) - [Connectivity](https://www.profitap.com/accessories/#connectivity/) [**Network Traffic Aggregators**](https://www.profitap.com/network-traffic-aggregators/) - [XX-720G](https://www.profitap.com/xx-720g-network-packet-broker/) - [XX-1800G](https://www.profitap.com/xx-1800g-network-packet-broker/) - [XX-3200G](https://www.profitap.com/xx-3200g-network-packet-broker/)   [**Network Packet Brokers**](https://www.profitap.com/network-packet-brokers/) - [X3-Series](https://www.profitap.com/x3-series-advanced-network-packet-brokers/) - [X2-2010G](https://www.profitap.com/x2-2010g-network-packet-broker/) - [X2-3200G](https://www.profitap.com/x2-3200g-network-packet-broker/) - [X2-6400G](https://www.profitap.com/x2-6400g-network-packet-broker/) - [X2-12800G](https://www.profitap.com/x2-12800g-network-packet-broker/)   **NPB Features** - [Data Masking](https://www.profitap.com/data-masking/) - [Timestamping](https://www.profitap.com/timestamping/) - [Packet Deduplication](https://www.profitap.com/packet-deduplication/) - [Tunneling & De-tunneling](https://www.profitap.com/tunneling-de-tunneling/) - [Packet Slicing](https://www.profitap.com/packet-slicing/) - [GTP IP Filtering](https://www.profitap.com/gtp-ip-filtering/) [**Network TAPs**](https://www.profitap.com/network-taps/) - [Secure TAPs](https://www.profitap.com/secure-data-access/) - [Fiber TAPs](https://www.profitap.com/fiber-taps/) - [Copper TAPs](https://www.profitap.com/copper-taps/) - [Aggregation TAPs](https://www.profitap.com/aggregation-taps/) - [Bypass TAPs](https://www.profitap.com/bypass-taps/) - [Regeneration TAPs](https://www.profitap.com/regeneration-taps/) - [Replication TAPs](https://www.profitap.com/replication-taps/)   **Cloud Visibility** - [VMware](https://www.profitap.com/vtap/) - [Kubernetes](https://www.profitap.com/cloud-tap/) - [AWS EKS](https://www.profitap.com/cloud-tap/) - [Azure VM](https://www.profitap.com/cloud-tap/#azure)   **Centralized Management** - [IOTA CM](https://www.profitap.com/iota-cm/) - [Supervisor](https://www.profitap.com/supervisor/)   [**Solutions**](https://www.profitap.com/solutions/) - [Performance analysis & diagnostics](https://www.profitap.com/performance-analysis-and-diagnostics-solutions/) - [Network troubleshooting](https://www.profitap.com/network-troubleshooting-solutions/) - [Packet forensics](https://www.profitap.com/packet-forensics-solutions/) - [Network security](https://www.profitap.com/network-security-solutions/) - [ICS/OT network monitoring](https://www.profitap.com/ics-ot-network-monitoring-solutions/) [**About Us**](https://www.profitap.com/our-story/) - [Our Story](https://www.profitap.com/our-story/) - [Events](https://www.profitap.com/events/) - [Careers](https://jobs.profitap.com/) - [News](https://news.profitap.com/)   **Resources** - [Knowledge Base](https://kb.profitap.com/) - [Software & Drivers](https://resources.profitap.com/) - [Product Portfolio](https://www.profitap.com/portfolio/) - [Blog](https://insights.profitap.com/) - [Library](https://www.profitap.com/library/) - [Product Updates](https://www.profitap.com/product-updates/) - [Academy](https://www.profitap.com/academy/)   **Partners** - [Partner with Us](https://www.profitap.com/partner-with-us/) - [Our Partners](https://www.profitap.com/our-partners/) - [Locate a Reseller](https://www.profitap.com/locate-a-reseller/)   **Contact** - [Contact Us](https://www.profitap.com/contact-us/) - [Professional Services](https://www.profitap.com/professional-services/) - [Get a Quote](https://www.profitap.com/get-a-quote/) --- © 2026 Profitap HQ B.V. and its licensors. All Rights Reserved — Profitap HQ B.V., High Tech Campus 84, 5656 AG Eindhoven, The Netherlands | [Privacy Policy](https://www.profitap.com/privacy-policy/) | [Terms and Conditions](https://www.profitap.com/terms-and-conditions/) ```json { "@context" : "http://schema.org", "@type" : "Blog", "author" : { "@type" : "Person", "name" : "Profitap" }, "dateModified" : "January 27, 2021, 9:43:03 AM", "datePublished" : "2021-01-27 09:43:03", "description" : "Why does a visit to a website fail? Why can't I send my e-mail? DNS, the mother of all Internet services, is often the cause of the problem.", "headline" : "DNS - OR ALSO: WHY IS MY INTERNET NOT WORKING?", "image" : { "@type" : "ImageObject", "url" : "https://f.hubspotusercontent10.net/hubfs/2954816/Blog-Cover%20%281%29.png" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/2954816/Logos/Profitap-logo-black-orange-whitebg.png" }, "name" : "Profitap HQ B.V." } } ```