Debuging BIND 8.3.3

Thu Sep 19 17:08:45 UTC 2002

Hi all,

I=B4m having trouble with my public dns's so I've turned debuging on, but
there are some messages I can't understand well.

The problem is that during the day servers are OK, but at the peak point
(here in Spain it's about 6 p.m) named gets about 80/90 % CPU usage.

These are the main messages I don't understand well, I think it's a
comunications problem so dns's get lots of forward queries, I don't
think it could be a named problem, and neither i see on the messages.

Thanks in advance.

PS: Machines are one SUN Ultra 2, and two Netras T1

Block 1
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D14567 id=3D2 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D24614 id=3D3591=
 7683ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D18564 id=3D6482=
1 7683ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D55934 id=3D101 =
7683ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D43586 id=3D0 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D2377 id=3D0 768=
3ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D19818 id=3D1 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D3451 id=3D2 768=
3ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D59194 id=3D2 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D8814 id=3D25 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D54509 id=3D4543=
 7683ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D56852 id=3D1 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D46386 id=3D4466=
 7683ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D15504 id=3D4 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D59568 id=3D2500=
 7683ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D60740 id=3D0 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D4960 id=3D0 768=
3ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D24671 id=3D3 76=
83ms
reforw(addr=3D0 n=3D1) -> [172.27.192.131].53 ds=3D4 nsid=3D20514 id=3D3819=
 7683ms

End Block 1

Block 2

datagram from [172.27.192.131].53, fd 4, len 235
resp: nlookup(rateyourmusic.com) qtype=3D1
resp: found 'rateyourmusic.com' as 'rateyourmusic.com' (cname=3D0)
finddata(): buflen=3D4061
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D54357 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D4112 id=3D0 retry=3D10=
32454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D62827 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D39918 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D11405 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D33873 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D64282 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D35901 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D37675 id=3D0 retry=3D1=
032454305
sysquery: send -> [172.27.192.131].53 dfd=3D4 nsid=3D5595 id=3D0 retry=3D10=
32454305

End Block 2

Block 3

datagram from [172.27.192.131].53, fd 4, len 154
DUP? dropped (id 29371)

datagram from [172.27.192.131].53, fd 4, len 53
send_msg -> [193.153.205.209].1486 (UDP 28) id=3D1
datagram from [172.27.192.131].53, fd 4, len 36
DUP? dropped (id 57721)
datagram from [172.27.192.131].53, fd 4, len 46
DUP? dropped (id 56216)
datagram from [172.27.192.131].53, fd 4, len 47
DUP? dropped (id 21491)
datagram from [172.27.192.131].53, fd 4, len 42
DUP? dropped (id 33418)
datagram from [172.27.192.131].53, fd 4, len 63
DUP? dropped (id 47386)
datagram from [172.27.192.131].53, fd 4, len 49
DUP? dropped (id 8578)
datagram from [172.27.192.131].53, fd 4, len 47
retry(0x6498b88): expired @ 1032454249 (40 secs before now (1032454289))
send_msg -> [213.96.232.87].61977 (UDP 28) id=3D4660
datagram from [172.27.192.131].53, fd 4, len 35
DUP? dropped (id 17227)

End Block 3

--
--------------------------------------------------
Joaquin J. Domens
=C1rea de Tecnolog=EDa
Departamento de Producci=F3n / Aplicaciones
--------------------------------------------------
Terra Networks Espa=F1a S.A.
Juli=E1n Camarillo, 6
28037 Madrid, Espa=F1a
--------------------------------------------------
Mercado Continuo: TRR |  Nasdaq: TRLY
--------------------------------------------------
http://www.terra.es
--------------------------------------------------