Lot of traffic after installing bind 8.4.3 on sparc

Mark_Andrews at isc.org Mark_Andrews at isc.org
Thu Dec 4 03:18:51 UTC 2003


> snooping the traffic without the -4 option given shows huge amounts of
> apparently legitimate UDP DNS traffic, but all the same set of
> queries, sourced by the cache. Most of them are AAAA queries for
> NS2.BARGINHOSTS.CO.UK, sometimes 20 or 30 queries in a row (and
> thousands in a period of a few seconds) and then later a set of
> server failure responses. This would explain the CPU usage and network
> traffic.

	NS2.BARGINHOSTS.CO.UK doesn't exist.

	Could you dump the cache and see what references you have
	for NS2.BARGINHOSTS.CO.UK?

> P.
> 
> -- 
> pir
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org


More information about the bind-users mailing list