repetative queries

[Kevin Darcy]

This is not really a BIND problem, or for that matter even a nameserver
problem. Something on the box is expecting the hostname to be resolvable
in DNS. Unfortunately, even with tools like "lsof", it's hard to track a
local query back to a particular Unix process, because of the
connectionless nature of UDP and the speed with which the query is
initiated and completed.

My usual approach has been to start shutting down subsystems until the
queries stop. Another, less intrusive approach, which in theory might
work but I've never tried, is to make the query get "stuck" (e.g. set up
a "type forward" zone pointing to machines which aren't running
nameservers), and then maybe you could use something like "lsof" to
track the source of the query back to a particular process. Another
hit-or-miss method might be to have that name resolve to something bogus
(e.g. 1.2.3.4) and see if any of the subsystems start squawking with "No
route to network").


- Kevin
Michael McQuarrie wrote:

> Another config issue i'm sure...
> I am running 8.2.3-REL on AIX 4.3.3. I keep getting
> these queries coming from the server querying itself
> in every form.  The odd part is that the server is not
> defined anywhere as ilxdns01 except in the hostname of
> the server.  None of the db files have ilxdns01 in
> them.  The host file identifies the server as dns1.
> When I do a nslookup the server is recognized as dns1.
>  The server name is ilxdns01/dns1 and the internal ip
> is 192.0.0.15.  Is this normal? How can I make this
> stop?  Any help is greatly appreciated.
>
> 08-May-2001 08:05:16.475
> XX+/192.0.0.15/ilxdns01.metriscompanies.com/A/IN
> 08-May-2001 08:05:16.482 XX+/192.0.0.15/ilxdns01/A/IN
> 08-May-2001 08:05:21.492 XX+/192.0.0.15/ilxdns01/A/IN
> 08-May-2001 08:05:31.493 XX+/192.0.0.15/ilxdns01/A/IN
> 08-May-2001 08:05:51.493 XX+/192.0.0.15/ilxdns01/A/IN
> 08-May-2001 08:06:31.499
> XX+/192.0.0.15/15.0.0.192.in-addr.arpa/PTR/IN
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/