lame server resolving - repeats 280 times

[Mark Andrews]

> I am running HPUX 11.11 with Bind 9.2.0, this server is set up as a
> caching only server and has approx 440,000 queries per 15 minutes.  I
> recently started getting about 110,000 failed queries per 15 minutes. 
> Usually they run on average about 10-12,000 per 15 minutes.  The CPU
> has been spiking up to +90%, when it usually runs about 40-50%.  I am
> getting in the log (lame server resolving
> 'chela.tower-hill.pvt.k12.de.us''  MASSIVE amount of times.  How can I
> correct this?

	You find the offending program that keeps looking up addresses
	under tower-hill.pvt.k12.de.us.

	You contact the parent (Bcc'd) to get the delegation removed.
	Note the parent is missing the glue record for
	chela.tower-hill.pvt.k12.de.us.

; <<>> DiG 8.3 <<>> chela.tower-hill.pvt.k12.de.us @I2.STATE.de.us +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37571
;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 1
;; QUERY SECTION:
;;      chela.tower-hill.pvt.k12.de.us, type = A, class = IN

;; AUTHORITY SECTION:
tower-hill.pvt.k12.de.us.  10h40m IN NS  knock.ser.bbnplanet.net.
tower-hill.pvt.k12.de.us.  10h40m IN NS  chela.tower-hill.pvt.k12.de.us.

;; ADDITIONAL SECTION:
knock.ser.bbnplanet.net.  1d7h53m4s IN A  192.239.16.129

;; Total query time: 253 msec
;; FROM: drugs.dv.isc.org to SERVER: 167.21.1.76
;; WHEN: Wed Nov 24 08:36:14 2004
;; MSG SIZE  sent: 48  rcvd: 115

> THANKS!  
> 
> 
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> Nov 23 10:53:38 ns1  above message repeats 85 times
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'vscan.mocaasap.com' (in 'mocaasap.com'?): 216.49.80.74#53
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'www.todoporaventura.com' (in 'todoporaventura.com'?):
> 66.199.248.202#53
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.4#53
> Nov 23 10:53:38 ns1  above message repeats 280 times
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'www.todoporaventura.com' (in 'todoporaventura.com'?):
> 66.199.248.203#53
> Nov 23 10:53:38 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.4#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> '104.210.72.200.in-addr.arpa' (in '210.72.200.in-addr.arpa'?):
> 200.72.1.254#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'tvmedia.co.jp' (in 'tvmedia.co.jp'?): 211.134.181.104#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving 'pow.com' (in
> 'pow.com'?): 212.187.158.3#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'tvmedia.co.jp' (in 'tvmedia.co.jp'?): 211.134.181.105#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> '104.210.72.200.in-addr.arpa' (in '210.72.200.in-addr.arpa'?):
> 200.72.1.253#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving 'pow.com' (in
> 'pow.com'?): 212.100.224.247#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.4#53
> Nov 23 10:53:39 ns1  above message repeats 3 times
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.4#53
> Nov 23 10:53:39 ns1 named[18839]: lame server resolving
> 'chela.tower-hill.pvt.k12.de.us' (in 'tower-hill.pvt.k12.de.us'?):
> 4.2.49.2#53
> 
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org