ODD - high mem usage and 100% CPU after a few hours with BIND8+BIND9

Simon Waters Simon at wretched.demon.co.uk
Sun Aug 12 19:26:57 UTC 2001


Lord Apollyon wrote:
> 
> System logs are completely unrevealing [lots of "lame servers" for
> various Korean and other infected Code Red servers, but that's nothing
> unusual].

High PTR count, lots of lame servers, hmmm

Is your webserver reverse looking up the Code Red infected
connection attempts?

Can't see why you'd hit such a high number, but maybe you've got
statistically a bad IP address, or share a class A/B prefix with
a badly infected PC.

Be brave switch on query logging for a second or two.


More information about the bind-users mailing list