statistics file and views
Mark Andrews
marka at isc.org
Tue Sep 24 22:35:40 UTC 2013
In message <6b2bb1e5900044db85cb787fae7931bc at SWSEXCH02.sw-servers.local>, =?iso
-8859-1?Q?S=E9bastien_WENSKE?= writes:
> Some logs:
>
> root at dns01:/var/log/bind# grep "view external" named.log
> 21-Sep-2013 21:25:50.252 queries: client 107.20.81.55#32861: view
> external: query: th2rdns01.at-inf
> 21-Sep-2013 21:25:50.253 queries: client 107.20.81.55#48727: view
> external: query: dns01.hq0.fo.at-
> 21-Sep-2013 21:26:08.589 queries: client 80.12.204.180#11187: view
> external: query: nestle-babynes.
> 21-Sep-2013 21:26:39.183 queries: client 128.121.247.232#18632: view
> external: query: www.blognfc.c
> 21-Sep-2013 21:26:39.705 queries: client 80.10.201.37#39283: view
> external: query: dns01.hq0.fo.at-
> 21-Sep-2013 21:26:39.814 queries: client 80.10.201.37#53462: view
> external: query: dns01.th2.at-inf
> 21-Sep-2013 21:26:41.886 queries: client 80.10.202.7#29186: view
> external: query: dns01.th2.at-infr
> 21-Sep-2013 21:26:41.980 queries: client 80.10.202.7#9327: view external:
> query: airpad.airtag.com
> 21-Sep-2013 21:26:41.985 queries: client 213.228.58.147#46206: view
> external: query: airpad.airtag.
> 21-Sep-2013 21:26:42.001 queries: client 213.228.58.147#30362: view
> external: query: dns01.th2.at-i
> 21-Sep-2013 21:26:42.096 queries: client 213.228.58.147#32638: view
> external: query: dns01.hq0.fo.a
> 21-Sep-2013 21:26:48.592 queries: client 109.0.65.13#26877: view
> external: query: wap.airtag.com IN
> 21-Sep-2013 21:26:50.825 queries: client 193.189.143.225#38025: view
> external: query: dns01.th2.at-
> 21-Sep-2013 21:26:50.825 queries: client 193.189.143.225#57215: view
> external: query: dns01.hq0.fo.
> 21-Sep-2013 21:26:50.825 queries: client 193.189.143.225#50047: view
> external: query: dns01.hq0.fo.
> 21-Sep-2013 21:26:50.825 queries: client 193.189.143.225#42630: view
> external: query: dns01.th2.at-
> 21-Sep-2013 21:26:50.874 queries: client 78.109.81.239#15370: view
> external: query: www.blognfc.com
> 21-Sep-2013 21:26:50.874 queries: client 78.109.81.239#10403: view
> external: query: www.blognfc.com
> 21-Sep-2013 21:26:50.883 queries: client 78.109.81.239#30851: view
> external: query: www01.th2.at-in
> 21-Sep-2013 21:26:50.883 queries: client 78.109.81.239#52957: view
> external: query: www01.th2.at-in
> 21-Sep-2013 21:26:50.886 queries: client 193.189.143.225#29896: view
> external: query: www01.th2.at-
> 21-Sep-2013 21:26:50.887 queries: client 193.189.143.225#59309: view
> external: query: www01.th2.at-
> 21-Sep-2013 21:26:52.421 queries: client 212.99.74.170#37510: view
> external: query: dns01.th2.at-in
> 21-Sep-2013 21:27:11.209 queries: client 157.56.73.233#8002: view
> external: query: dns01.th2.at-inf
> 21-Sep-2013 21:27:11.585 queries: client 157.56.73.225#5110: view
> external: query: ol0router01.airt
> 21-Sep-2013 21:27:26.699 queries: client 80.10.202.8#38458: view
> external: query: dns01.hq0.fo.at-i
> 21-Sep-2013 21:27:26.769 queries: client 80.10.202.8#31602: view
> external: query: airpad.airtag.com
> 21-Sep-2013 21:27:29.853 queries: client 54.253.20.192#17586: view
> external: query: dns01.hq0.fo.at
> 21-Sep-2013 21:27:29.862 queries: client 54.253.20.192#50701: view
> external: query: dns01.hq0.fo.at
> 21-Sep-2013 21:27:29.863 queries: client 54.253.20.192#41475: view
> external: query: th2rdns01.at-in
> 21-Sep-2013 21:27:29.866 queries: client 54.253.20.192#47863: view
> external: query: th2rdns01.at-in
> 21-Sep-2013 21:27:29.991 queries: client 66.249.75.24#33950: view
> external: query: www01.th2.at-inf
> 21-Sep-2013 21:27:30.215 queries: client 54.253.20.192#51176: view
> external: query: 89.75.255.158.i
> 21-Sep-2013 21:27:41.421 queries: client 173.194.97.17#54097: view
> external: query: airtag.com IN M
> 21-Sep-2013 21:27:42.053 queries: client 173.194.97.20#52288: view
> external: query: smtp01.hq0.fo.a
> 21-Sep-2013 21:28:04.895 queries: client 216.105.240.4#35886: view
> external: query: 35.72.255.158.i
> 21-Sep-2013 21:28:13.292 queries: client 213.56.26.139#41566: view
> external: query: dns01.hq0.fo.at
> 21-Sep-2013 21:28:13.292 queries: client 213.56.26.139#33556: view
> external: query: dns01.hq0.fo.at
> 21-Sep-2013 21:28:13.310 queries: client 213.56.26.139#41570: view
> external: query: airtag.com IN M
> 21-Sep-2013 21:28:24.841 queries: client 66.189.0.102#48030: view
> external: query: bonne-journee.ai
> 21-Sep-2013 21:28:29.228 queries: client 66.189.0.104#62679: view
> external: query: dns01.hq0.fo.at-
>
> I use Debian package:
>
> root at dns01:/var/log/bind# dpkg -l | grep bind
> ii bind9 1:9.7.3.dfsg-1~squeeze11
> Internet Domain Name Server
> ii bind9-host 1:9.7.3.dfsg-1~squeeze11
> Version of 'host' bundled with BIND 9.X
> ii bind9utils 1:9.7.3.dfsg-1~squeeze11
> Utilities for BIND
> ii libbind9-60 1:9.7.3.dfsg-1~squeeze11
> BIND9 Shared Library used by BIND
>
> Cheers !
>
> -----Message d'origine-----
> To: bind-users-bounces+sebastien=wenske.fr at lists.isc.org [mailto:bind-=
> users-bounces+sebastien=wenske.fr at lists.isc.org] De la part de Sebastie=
> n WENSKE
> Date: mardi 24 septembre 2013 18:17
> =C0=A0: Warren Kumari
> Cc: bind-users at lists.isc.org
> Subject: Re: statistics file and views
>
> Yes, I can see the queries in the log file.
>
> Warren Kumari <warren at kumari.net> a crit :
>
>
> Probably a stupid question, but are you sure that any queries are matching =
> / hitting your external view?
>
> W
> On Sep 24, 2013, at 9:06 AM, S=E9bastien WENSKE <sebastien at wenske.fr> wrote:
>
> > Hi List,
> >
> > I have the feeling that something is wrong with my stats, external view
> is empty.
> >
> > Do I set something other in addition to "statistics-file
> "/var/cache/bind/named.stats";" ?
> >
> > Many thanks.
> > Sebastien W
> >
> > root at dns01:/var/cache/bind# cat named.stats
> > +++ Statistics Dump +++ (1380038757)
> > ++ Incoming Requests ++
> > 226139 QUERY
> > 1 IQUERY
> > 241 NOTIFY
> > ++ Incoming Queries ++
> > 198153 A
> > 155 NS
> > 7 CNAME
> > 265 SOA
> > 12900 PTR
> > 2146 MX
> > 932 TXT
> > 9741 AAAA
> > 1267 SRV
> > 20 A6
> > 72 DS
> > 417 SPF
> > 64 ANY
> > ++ Outgoing Queries ++
> > [View: internal]
> > 169685 A
> > 3 NS
> > 90 SOA
> > 10516 PTR
> > 560 MX
> > 300 TXT
> > 5312 AAAA
> > 539 SRV
> > 372 SPF
> > [View: external]
These are queries made by the resolver code. The external view never
looked up anything. Any SOA refresh queries made are captured in the
Zone Maintenance Statistics.
> > [View: _bind]
> > ++ Name Server Statistics ++
> > 226383 IPv4 requests received
> > 173366 requests with EDNS(0) received
> > 380 TCP requests received
> > 7 recursive queries rejected
> > 224763 responses sent
> > 382 truncated responses sent
> > 172256 responses with EDNS(0) sent
> > 203630 queries resulted in successful answer
> > 30003 queries resulted in authoritative answer
> > 194283 queries resulted in non authoritative answer
> > 2 queries resulted in referral answer
> > 7910 queries resulted in nxrrset
> > 226 queries resulted in SERVFAIL
> > 12744 queries resulted in NXDOMAIN
> > 154080 queries caused recursion
> > 1613 duplicate queries received
> > 7 queries dropped
> > 7 other query failures
> > ++ Zone Maintenance Statistics ++
> > 354 IPv4 notifies sent
> > 240 IPv4 notifies received
> > 111 notifies rejected
> > 890 IPv4 SOA queries sent
> > 2 IPv4 AXFR requested
> > 126 IPv4 IXFR requested
> > 125 transfer requests succeeded
> > 3 transfer requests failed
> > ++ Resolver Statistics ++
> > [Common]
> > [View: internal]
> > 187346 IPv4 queries sent
> > 31 IPv6 queries sent
> > 170546 IPv4 responses received
> > 8886 NXDOMAIN received
> > 283 SERVFAIL received
> > 21 other errors received
> > 11 truncated responses received
> > 9 lame delegations received
> > 17046 query retries
> > 16800 query timeouts
> > 173 IPv4 NS address fetches
> > 212 IPv6 NS address fetches
> > 4 IPv4 NS address fetch failed
> > 130 IPv6 NS address fetch failed
> > 209 queries with RTT < 10ms
> > 165753 queries with RTT 10-100ms
> > 4474 queries with RTT 100-500ms
> > 45 queries with RTT 500-800ms
> > 42 queries with RTT 800-1600ms
> > 19 queries with RTT > 1600ms
> > [View: external]
The external view didn't need to lookup any addresses.
> > [View: _bind]
> > ++ Cache DB RRsets ++
> > [View: internal (Cache: internal)]
> > 2197 A
> > 37 NS
> > 2551 CNAME
> > 128 PTR
> > 52 MX
> > 55 TXT
> > 38 AAAA
> > 4 SRV
> > 3 DS
> > 37 RRSIG
> > 2 NSEC
> > 2 SPF
> > 2 !A
> > 1 !MX
> > 11 !TXT
> > 10 !AAAA
> > 26 !SPF
> > 82 NXDOMAIN
> > [View: external (Cache: external)]
As a result it didn't cache anything.
> > [View: _bind (Cache: _bind)]
> > ++ Socket I/O Statistics ++
> > 188348 UDP/IPv4 sockets opened
> > 31 UDP/IPv6 sockets opened
> > 147 TCP/IPv4 sockets opened
> > 1 TCP/IPv6 sockets opened
> > 188346 UDP/IPv4 sockets closed
> > 31 UDP/IPv6 sockets closed
> > 813 TCP/IPv4 sockets closed
> > 3 UDP/IPv4 socket bind failures
> > 31 UDP/IPv6 socket connect failures
> > 187335 UDP/IPv4 connections established
> > 144 TCP/IPv4 connections established
> > 670 TCP/IPv4 connections accepted
> > 31 UDP/IPv6 send errors
> > 4 UDP/IPv4 recv errors
> > ++ Per Zone Query Statistics ++
> > --- Statistics Dump --- (1380038757)
> > _______________________________________________
> > Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> > unsubscribe from this list
> >
> > bind-users mailing list
> > bind-users at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/bind-users
> >
>
> --
> "Working the ICANN process is like being nibbled to death by ducks, it
> takes forever, it doesn't make sense, and in the end we're still dead in
> the water."
> -- Tom Galvin, VeriSign's vice president for government relations.
>
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list