XSTAT-SNaAns from auth. NS

[Kevin Darcy]

Marc Lampo wrote:

> Hello,
>
> looking at the XSTAT  of an authoritative server (no fetch-glue and no
> recurse) I am
> still puzzled by the amount of non-authoritative answers it gives.
> Here an extract of relevant numbers :
> RR=5301 .. SSysQ=5325 SAns=11321054 .. SFwdQ=0 RQ=11437731
> .. SNaAns=594874
> (numbers cover 10+ days)
> Given this server answers only from local data, SFwdQ=0, how comes half
> of
> the answers are non-authoritative ?

Oops, math error! Only about 5% of the answers are non-authoritative.

Do you delegate any zones for which you are not yourself authoritative?
That could explain the 5% non-authoritative answers: whenever another
nameserver asks you about a name in that delegated zone, you'll respond
with a (non-authoritative) delegation. Zone cuts are funny that way.

> By the way, I understand System Queries are unsollicited by incoming
> queries but
> come from the internal operation of the name server.  It was my
> understanding the
> querying for the updated list of root servers are such system
> queries.  But what
> others fall in this category that can explain the amount of 5000+ ?

NOTIFYs are sysqueries. SOA serial number checks are sysqueries. The list
goes on...


- Kevin