(no subject)

yiming yiming at db-2.hazzptt.net.cn
Wed Feb 14 05:31:11 UTC 2001


somebody can help me ?   sorry for this long question

 i've install bind 8.2.3 (on sun enterprise 4500,sola
ris2.6,100M bandwidth)
but every time it startup for a few hours or few days, it refused any dns request,
and produced  messages like below:
--
Feb 11 15:10:21 dns named[29505]: send_msg: sendto([1.2.3.4.91].63162): Resource temporarily unavailable
Feb 11 15:10:21 dns named[29505]: send_msg: sendto(1.2.3.35].4892): Resource temporarily unavailable
Feb 11 15:11:21 dns named[29505]: ns_req: sendto([1.2.3.30].4563): Resource temporarily unavailable
--

at this time i use "netstat -I hme0 2" to check the packets,
------
 input   hme0      output           input  (Total)    output
packets errs  packets errs  colls  packets errs  packets errs  colls 
219300388 1     187418019 0     0      219424585 1     187615365 0     0     
4261    0     2100    0     0      4261    0     2103    0     0     
4082    0     2081    0     0      4082    0     2082    0     0     
4146    0     2152    0     0      4146    0     2152    0     0     
4072    1     1833    0     0      4074    1     1835    0     0     
4348    0     2037    0     0      4348    0     2037    0     0     
4425    0     1949    0     0      4425    0     1949    0     0     
4031    0     1749    0     0      4031    0     1751    0     0     
4013    0     1853    0     0      4013    0     1855    0     0    
-------

and find the input packets was increased  as much again(when named can resolve,the input packets is about 2000), is somebody Dos me ?  or anything else?

i use ngrep to check the packets towards me,below are ngrep result of icmp,udp
ngrep "*" icmp
-------------
I 61.136.103.73 -> mydnsserver 3:3
  ....E..xS. at ....N.fàD=.gI.5.à.dr,                                      
#
I 202.110.113.130 -> mydnsserver 8:0
  ....abcdefghijklmnopqrstuvwabcdefghi                                  
#
I mydnsserver -> 202.110.113.130 0:0
  ....abcdefghijklmnopqrstuvwabcdefghi                                  
#
I 61.158.250.24 -> mydnsserver 3:3
  ....E..... at ...àS.fàD=....5....}.                                      
#
I 202.111.132.247 -> mydnsserver 8:0
  ....abcdefghijklmnopqrstuvwabcdefghi....                              
#
I mydnsserver -> 202.111.132.247 0:0
  ....abcdefghijklmnopqrstuvwabcdefghi....                              
#
I 202.97.10.185 -> mydnsserver 3:1
  ....E..|.. at ......fàD..d..5...hò9                                      
#
I 61.136.99.223 -> mydnsserver 3:3
  ....E....u at ....F.fàD=.c..5.2...c                                      
#
I 202.110.75.72 -> mydnsserver 3:3
  ....E...f(@...X..fàD.nKH.5......                                      
#
I 202.104.143.26 -> 202.102.224.46 11:0
  ....E..9.)@....y.fà..hv....5.%c>                                      
#
I 61.158.253.53 -> mydnsserver 4:0
  ....E....@@....x.fàD=..M.5"`...Q                                      
#
I 202.97.10.185 -> mydnsserver 3:1
  ....E..<.. at ....m.fàD..d..5...(.u                                      
#
I 61.158.131.3 -> mydnsserver 3:3
  ....E..r.c at ......fàD=....5. .^\.                        


ngrep "*" udp
U 211.100.1.2:53 -> 202.102.224.46:34770
  .............yilan2.topcool.net.....                                  
#
U 202.102.224.46:34770 -> 211.100.25.85:53
  .............yilan2.topcool.net.....                                  
#
U 61.168.7.216:3781 -> mydnsserver:53
  .............www.cn129.org.....                                       
#
U 61.158.160.215:1053 -> mydnsserver:53
  .............sz5.tencent.com.....                                     
#
U mydnsserver:53 -> 61.168.7.216:3781
  .............www.cn129.org.............I....f..........I....dns1.cnmay
  .com..;...........e..                                                 
#
U mydnsserver:53 -> 61.158.160.215:1053
  .............sz5.tencent.com..............+...`...........*...imok.net
  ..=......2....g.(                                                     
#
U 61.163.135.44:1025 -> mydnsserver:53
  .............www.oicp88.com.....                                      
#
U mydnsserver:53 -> 61.163.135.44:1025
  .............www.oicp88.com.............%..A.A.ROOT-SERVERS.NET..hostm
  aster.nsiregistry.;wE)t..........:...Q.                               
#
U 202.110.108.100:1088 -> mydnsserver:53
  .............sz2.tencent.com.....                                     
#
U mydnsserver:53 -> 202.110.108.100:1088
  .............sz2.tencent.com..............+...`...........*...imok.net




          
          



More information about the bind-users mailing list