Lot of traffic after installing bind 8.4.3 on sparc
Mark_Andrews at isc.org
Mark_Andrews at isc.org
Thu Dec 4 03:18:51 UTC 2003
> snooping the traffic without the -4 option given shows huge amounts of
> apparently legitimate UDP DNS traffic, but all the same set of
> queries, sourced by the cache. Most of them are AAAA queries for
> NS2.BARGINHOSTS.CO.UK, sometimes 20 or 30 queries in a row (and
> thousands in a period of a few seconds) and then later a set of
> server failure responses. This would explain the CPU usage and network
> traffic.
NS2.BARGINHOSTS.CO.UK doesn't exist.
Could you dump the cache and see what references you have
for NS2.BARGINHOSTS.CO.UK?
> P.
>
> --
> pir
>
>
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at isc.org
More information about the bind-users
mailing list