When you create any DNSSEC trace test, you get access to the DNS DNSSEC Trace view. The DNSSEC Trace view leverages the ThousandEyes standard layout, documented here .
This article highlights specifics shown in the DNSSEC Trace view.
Example
This example shows the result of a globally distributed DNSSEC trace test, targeting fbi.gov A :
View Specifics
The DNSSEC trace test measures worldwide validity by validating the keychain for the target DNS record from the bottom up. This view is simple and purposeful: a DNSSEC query has a binary response - either it works, or it doesn't.
Without an Agent Selected
For the DNSSEC view, results are shown under two tabs:
The timeline plots the graph of the average validity of the target domain and record type calculated from all agents assigned to the test.
With an Agent Selected
For the DNSSEC view, results are shown under two tabs:
The timeline plots the validity percentage (0 or 100) results from the agent as a line graph over the average validity measurements, calculated from all agents, for the selected date and time.
Whether an agent is selected or not, if you click the View Details link, a dialog opens with two tabs related to the trace data, showing detailed information about the trust tree and data chain for the query. Examples of this detailed information can be found below:
Trust Tree Detailed Information for fbi.gov:A
Copy fbi.gov. (A)
|---fbi.gov. (DNSKEY keytag: 32497 alg: 7 flags: 256)
|---fbi.gov. (DNSKEY keytag: 24840 alg: 7 flags: 257)
|---fbi.gov. (DS keytag: 24840 digest type: 1)
| |---gov. (DNSKEY keytag: 343 alg: 7 flags: 256)
| |---gov. (DNSKEY keytag: 53138 alg: 7 flags: 257)
| |---gov. (DS keytag: 53138 digest type: 1)
| | |---. (DNSKEY keytag: 40323 alg: 8 flags: 256)
| | |---. (DNSKEY keytag: 19036 alg: 8 flags: 257)
| |---gov. (DS keytag: 53138 digest type: 2)
| |---. (DNSKEY keytag: 40323 alg: 8 flags: 256)
| |---. (DNSKEY keytag: 19036 alg: 8 flags: 257)
|---fbi.gov. (DS keytag: 24840 digest type: 2)
|---gov. (DNSKEY keytag: 343 alg: 7 flags: 256)
|---gov. (DNSKEY keytag: 53138 alg: 7 flags: 257)
|---gov. (DS keytag: 53138 digest type: 1)
| |---. (DNSKEY keytag: 40323 alg: 8 flags: 256)
| |---. (DNSKEY keytag: 19036 alg: 8 flags: 257)
|---gov. (DS keytag: 53138 digest type: 2)
|---. (DNSKEY keytag: 40323 alg: 8 flags: 256)
|---. (DNSKEY keytag: 19036 alg: 8 flags: 257) Data Chain Detailed Information for fbi.gov:A
Copy ;; rcode: NOERROR
;; qtype: DNSKEY
rrset:
. 172800 IN DNSKEY 256 3 8 AwEAAaYCmqKPwuX/gckHK0xh0oPMzbLAR9BhlOOfvxG537GKKs0subofzyzNjsXZLefCeagHfjT6HKzkV6Pzs31LtgJRFDn9lsZeOXtFIP4t2SpQkxl1Sw8L0VhNFLb6BwKhD1yz7wKh96wpErLHilwDSL9ScwlfTvRwCAscwh5vQtcd ;{id = 40323 (zsk), size = 1024b}
. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
sigs:
. 172799 IN RRSIG DNSKEY 8 0 172800 20130316235959 20130302000000 19036 . Aax0kYQWK9WaKmeCUT5wwrMtpqWTEiW+YBk60HvdyZ+/Ajg2dth/MubrjWyKGsG+KR1qwDBQE9jupbpjyRn/x54SBxrDWYIcbChhrrm1sVicWfjIdMPCAV0ZcCTl5Lj+9Nchq5UGGS1Qrf8yHnMCHxHXQM2iL84NDVyWk0OYTR2tPdK1TMneQkAo4v26zRKikuJKMImxRYmCUrQdLNqldDE7s8Hxy1j5b+tj95qUgW0pf95RwEFygMBzYvb0ESafpPFBTFsdTFBB1V/vYWQTdy5i+nD3e7OU6msU3sH63M7O63Um5Xi0eSvxhQqrOjK/i6Q9b0MPTe+Sp3IPdly9jg==
---
;; rcode: NOERROR
;; qtype: DS
rrset:
gov. 86400 IN DS 53138 7 1 35d81501cc594683875872282fe73054cfe619de
gov. 86400 IN DS 53138 7 2 5aec256412bc1fec92b8fddb4493b585e9406541cf8c952bfe6e27acb3a20766
sigs:
gov. 86400 IN RRSIG DS 8 1 86400 20130312000000 20130304230000 40323 . BhxfK1XTuBzk21N19fF6Xd/EHriWnKSJi+C76gkADm/B4nkg06JKJE0r4Azxh11tU3f2cvurRQXPZpyoFH0/Pyrp36eke0uJYAC+06nACkbnPelexGmiRbQXW6inCQ+qmKkb9S0secB5PJhO9Xx2ukh0MEZmd4WOwLEHZyvgPMw=
---
;; rcode: NOERROR
;; qtype: DNSKEY
rrset:
gov. 86400 IN DNSKEY 256 3 7 AQPldT85ootQcdAmTd6MgGU2r8dO0dXU+UlqUIkzzenFK55ZOr7eP3BqAcBCfljgK0zrIU4axiqniK8W3C6X9JlX3V/CB0dtjOEBfHRQEtT/JQGqVfVipLpBAqqiDSUH9gMIbC2Isl8aGm/tTNX0vxaFdipr+yTQAbrwHkmRazYJ4q6d7AgYOH2NxxFIauxo1PzU0f/yoZW3+oxOHITx19/9eBAzXjyZzy0UZIXN7nxMSu5WTR9tEl9GGA0pEf3cBOsaI2zEF3QldU6bPdgKn0RJHuVfowJJaEhxaOEzGApEfFPiLOYW3bkqGXx7C2cvMb2urdw6FqBSZuUh+k2DmWml ;{id = 32416 (zsk), size = 2048b}
gov. 86400 IN DNSKEY 257 3 7 AQO7tpGcHVEdeAwk47cj6Tuc3dvAUktIQ1vMu8mGtGYQ8F6vSOgViE0tmzPtVFrV9E6kY1jLYCh+oKPWn7efpQVMkqc+2b9ECYk/81fA4Vb0BfyYKKhiW7T1uNX4rC03JZa2u8iOHwqq4BRVplksFXCGn47i2Sosa5KuqCNBqUA0oyPTEbxkyNo3Q6l8ZcscILqbvWZ0BJKaLCTtj08Nj35LTqd/XVoEObp48A21Pqyi6Kiblh9H6NoLtqhlvP5+8AujtINJ+sTUQZYgqt9iFQp2AH4HvyJdw8Vkr1QRhhshq6RgRidnOvTIWZKoe4QHQrvmOfW245zv+22Iuu5rYpcl ;{id = 53138 (ksk), size = 2048b}
gov. 86400 IN DNSKEY 256 3 7 AQPCyrIcWu8PlnjEudjIIXHpefxjhkEHKel2I7CVrunY0/CkSBi+MTF+EbY8rsO0MxCcikdj2R6utTDj1l5noWnDmZIB0gJsW4xjUsRWGYrau/wRaVj2U8Je8nZs3KpduJj6aK2wTC+h0ggGqF+ucuPTOc0j3wIVX8P0PU3bQy48dKCHGd2YS+1rnQ5FQqlpJ9AXhVkAj3Y1vF6mW7GLrWnBryUbvl0uamrunB5888CfKMBsQgxQZHxeRhS/3PcaXUxHFE5XZDTx3qzuvHz3/3cdwpXfla6GRN8MfjFDRHMjFNrXu3PbVsjQqHXIzRBd8sS5RI5McJJcnprGEFdvj6Uv ;{id = 343 (zsk), size = 2048b}
sigs:
gov. 86399 IN RRSIG DNSKEY 7 1 86400 20130310220022 20130305220022 53138 gov. MHVmayoZ3dqYPF6JA9SxvJigw/opi8zTC+FDBVdPVpd3tB72DfNAozT2wIKuB6MI7p5RHRxKmzA+Jtc5yGBaFXU1A+3ybf24pgK4ZPnNERTs28xLm+mwc+FRaFPA9ArpFFUOKh4g7lFnLQb3ysexF+dGoyikL6kl5PiYwM6DBRRMzOR5P8bcQ2dKSd9G/DVxHWqWe4knun6glLg6wjA+0g4d4CLEcfHyzBSNc/4UMQ4ubC/2UDQDYezh4ufcPP3TGE2yUFcuD6aAdQ+KQNSA2lw3hxjX35sZJ5/uovnt7MoMKl0MSAUw3xtazGyxb3cu7yk/2rEPhW7Nq8d8tQmyyg==
---
;; rcode: NOERROR
;; qtype: DS
rrset:
fbi.gov. 86400 IN DS 24840 7 1 1a587e6ffaf669448d6cef00403e3b91a9b33916
fbi.gov. 86400 IN DS 24840 7 2 0c31ebaed7f6a22619eadd082417ab38fa4b4af871fd6507f040cd916b098d18
sigs:
fbi.gov. 86400 IN RRSIG DS 7 2 86400 20130310220022 20130305220022 343 gov. CIviEGPF2cTo/DxRK1oDIVae2hoUWQf22MYh7qh5GHSuHcBzbSAqzDuviVgdK/hz6DVV5ufIbx2ScyMKHJ6zHzzsGpBuSCuLo88kn7Gx+OYQzW1rpy7P1wImocCmCe53Kh5W38rxwFUoZNynUki+Io4B9MLqScUGbcvD6aqcKL6k9Mmx2z219nynqcbJWV1uSiemAf0EzcIOB69deTbIU5XVlqEuGf/CQjIBgmhkYNWsWv9d7b63OX5e6ZbjyDiDHteFtivVvAecwU3BIjKMpAXrkYIchZyMmzDPnaVYSYqppbD4u8FWgaQg6IGUaBUEyMeIfAURwjbUzR+R/g9+uQ==
---
;; rcode: NOERROR
;; qtype: DNSKEY
rrset:
fbi.gov. 600 IN DNSKEY 256 3 7 BQEAAAABo4psWp89WZYhcyU1e7HiJgURDcNSPRJigtcKjUZq+zm3smS++eQyjVDZQOWsQxyyCw/HF1sT/goY2VO7Nm6uQ7y/kxgGeTkTiQAkcJ9GEI30RHaWrdMlmFuMLHV0Hdf9OxuXqAxLdEjq4UcVz0C/L5y6KECIlrFwFA/PPsdbpZc= ;{id = 32497 (zsk), size = 1024b}
fbi.gov. 600 IN DNSKEY 256 3 7 BQEAAAAB17UX5M/RKhkRgfUM4GYr+wCTTfLpe232895mX0GH/3R2SnYFTTCEPF7hNF5nkt6yW57fs1wt8/FrdQom7lRLZhgaZdXHGNSbLraq8jMAq9CmNvoNzhoiXbOUdwf2Hw2zcrozYgAoEfxeX0cCf5je4DSRkwEHZ7L+t2y15M9WwZk= ;{id = 58969 (zsk), size = 1024b}
fbi.gov. 600 IN DNSKEY 257 3 7 AwEAAcbqigwPaVWRtu5tXoSIHRnjafvgHIKVo/I1nWZpCgCgGEwy6AZ4+OxktFgaVtVEIqNyeeCM9pkjly1isnwZDcWRHbzwmJ3dgKfnml8c5GIJnPp+4NcUHh8YzV+NAurNxaOWp7VDgJRuUejkyKNStia8B4WgcHK26ztGjy6wA/lkVUmea0H/EawqxrolACAD44kYjSpHxTx2dLeoqLfA4BR38aVCT8QTR6jb0Prt2x3v5bGxsW8nv9EvYZOYJHxzhZ6qoPKTCSFpXbPJvJRe/OQpIM+oANQzqPJtnnXNQqa72bJz4xZ4ybZo5tDbqEbY9i/i1KfZxxin01tz1Sk8o8M= ;{id = 24840 (ksk), size = 2048b}
fbi.gov. 600 IN DNSKEY 257 3 7 AwEAAco9GtgN9u27gk77N3mrGDJ/ifCuPjJVba6bNnEqcamqf/Zhz5ysspP2LuQN2Grn1neWPLNZxi/fIzQDw+r3fUw8++W28AXt4nH+7J3vmySBX+kEwCXuzhigxXWHnh6TawVDmKFHAh/VOqFjXVRvOBW18S4PJ+ee+AwOtQh60tNuPNBVQvNkuOrG6q1o1OnLYyP9dKkcEK7FwH6lo11qNhwq8z6VFgQV7Kc1RxPiKEI/22GCFlzzyqTdN3DGbwiwIMcgVeJWvOBhQRRjoF/VPZ0eEDqQAG8mFamTcz7YU7J0fmhRKnJxEnr/dNcDYgibDOpW/ZIDiDD2JX9BzJgPV/U= ;{id = 60816 (ksk), size = 2048b}
sigs:
fbi.gov. 599 IN RRSIG DNSKEY 7 2 600 20130430205214 20130130205214 24840 fbi.gov. SHqan3CAHAn8SBP/XeKGRmS8Bza3W8N8a63IRT+rSxLfQu+XjgOfJ2KW5N6JsN4qoudiVW8zFLlEqlc1qH4kdu+tQYcnLnFILfZ4QijHu5i+E0RfqOSurCmcgdd+b+gNBBgbnjPYjNUnyOgcHg3fsBsgl2594YE0T715xELXspmw7e8UHJmWnDCOY7EMKPwDlJTuHsYr10uKXyCQPnuGG4J4HOI4wAhaxCYUo97pqE0eoi/VCYP6VA1QdkvlbOqHo6C+mrdbSESN3AP0q97ZSgpejBXjqy37vTmrwK0H9ThslqC/LKtKwr8+IsuabqQC8TlCdGZDjMjsfZrOwfEqCQ==
fbi.gov. 599 IN RRSIG DNSKEY 7 2 600 20130430205214 20130130205214 32497 fbi.gov. EY6sw9FCzcBHqfZv67lZgoWu3OEvJlMFCTvuKIi8GcuAI9pU0GwwClD/tYgSpBNQVY56GBQorEkXh2EpKNZMsbLL9U1Pvp+cAS8RlhGuzZWdUsUntxK42iMDDqaSdfOMmnP5QUjQ5+hGY2+scl9Ls/4rLMsG0umGb2oHVOmi6wE=
---
;; rcode: NOERROR
rrset:
fbi.gov. 600 IN A 72.21.81.85
sigs:
fbi.gov. 600 IN RRSIG A 7 2 600 20130430205214 20130130205214 32497 fbi.gov. B/2hm6w2dQH6votIFLWTgGC6G2yJb7NuAfLuaGkIKdqZsTCo2NEYbGm8ugrxrU6cgIInnWlDszL1KTgjR63YE79MMccOtysVkCP5P8fGbIdApNLjmTkSQxusW/XgB+prd4cujpphKjyDQ1F3QIgtjKJOvVzQoTcpdhl8W6OwSUU=
--- 
