[q] curious packets
Barry Margolin
barmar at alum.mit.edu
Tue Apr 27 10:51:23 UTC 2004
In article <c6knnq$1vto$1 at sf1.isc.org>,
Hyo-Jeong Shin <shinhj at hana.ne.kr> wrote:
> Thanks for your response.
> While I investigate the DNS traffic on serveral DNS servers, I found
> "[1] repeated ServFail", "[2] repeated SYN-ACK" patterns so many.
> Those clients may be unusual things with virus or wrong configuration.
> "[1] repeated ServFail " pattern's durations are so long and I want to
> know how to reduce "repeated ServFail".
> Interval between ServFail is 2 minutes. What makes these intervals, bind
> or TCP?
TCP performs retransmissions automatically.
>
> In case of [2], why servers can't see "RST"? OS of servers are linux 2.4.18.
Like I said, I think there's a communications problem, and certain types
of packets are being lost.
--
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
More information about the bind-users
mailing list