[q] curious packets

Barry Margolin barmar at alum.mit.edu
Tue Apr 27 10:51:23 UTC 2004


In article <c6knnq$1vto$1 at sf1.isc.org>,
 Hyo-Jeong Shin <shinhj at hana.ne.kr> wrote:

> Thanks for your response.
> While I investigate the DNS traffic on serveral DNS servers, I found
> "[1] repeated ServFail", "[2] repeated SYN-ACK" patterns so many.
> Those clients may be unusual things with virus or wrong configuration.
> "[1] repeated ServFail " pattern's durations are so long and I want to
> know how to reduce "repeated ServFail".
> Interval between ServFail is 2 minutes. What makes these intervals, bind
> or TCP?

TCP performs retransmissions automatically.

> 
> In case of [2], why servers can't see "RST"? OS of servers are linux 2.4.18.

Like I said, I think there's a communications problem, and certain types 
of packets are being lost.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***


More information about the bind-users mailing list