ODD - high mem usage and 100% CPU after a few hours with BIND8+BIND9

[Mark.Andrews at nominum.com]

	I suggest that you go to BIND 9.2 (currently 9.2.0rc1) and set
	a cache-size in options.

	Mark

> 
> Lord Apollyon wrote:
> > 
> > System logs are completely unrevealing [lots of "lame servers" for
> > various Korean and other infected Code Red servers, but that's nothing
> > unusual].
> 
> High PTR count, lots of lame servers, hmmm
> 
> Is your webserver reverse looking up the Code Red infected
> connection attempts?
> 
> Can't see why you'd hit such a high number, but maybe you've got
> statistically a bad IP address, or share a class A/B prefix with
> a badly infected PC.
> 
> Be brave switch on query logging for a second or two.
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com