Dale:<br><br> Sorry I emailed you directly. I"m sending my response to the group.<br><br><br>Dale:<br> The limits.conf file will only set the high and low
limit when you log in. Once you log out, the open file limit will go
back to its default vaule. Read the man page for limits.conf. The
below issue has caught all of us.<br>
<br><br><u><b>Excerpt is below</b></u><br><br> In general, individual
limits have priority over group limits, so if<br> you impose no
limits for admin group, but one of the members in this<br> group
have a limits line, the user will have its limits set according<br>
to this line.<br><br> <span style="color: rgb(255, 0, 0);">Also,
please note that all limit settings are set per login. They are</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">
not global, nor are they permanent; existing only for the duration of</span><br style="color: rgb(255, 0, 0);">
<span style="color: rgb(255, 0, 0);"> the session.</span><br><br><br><div class="gmail_quote">On Fri, Apr 30, 2010 at 7:32 PM, Dale Kiefling <span dir="ltr"><<a href="mailto:dale.kiefling@cbs.com">dale.kiefling@cbs.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div style="word-wrap: break-word;"><div>Hey Ezra,</div><div>Thanks for the reply.</div><div>
<br></div>ulimit -Hn and ulimit -Sn report 8192.<div><br></div><div>Wasn't sure if limits.conf would help or not.</div><div><br></div><div>Dale</div><div><div><div></div><div class="h5"><br><div><div>On Apr 30, 2010, at 4:18 PM, Ezra Taylor wrote:</div>
<br><blockquote type="cite">Dale:<br> <br> The limits.conf file is not going to solve your problem. Read the man page for initscript and inittab.<br><br><div class="gmail_quote">On Thu, Apr 29, 2010 at 5:53 PM, Dale Kiefling <span dir="ltr"><<a href="mailto:dale.kiefling@cbs.com" target="_blank">dale.kiefling@cbs.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">We have a Bind 9.7.0-P1 instance that is throwing the following errors:<br> 21-Apr-2010 16:59:00.173 general: error: socket: file descriptor exceeds limit<br>
(1024/1024)<br> 21-Apr-2010 17:00:00.122 general: error: socket: file descriptor exceeds limit<br> (1024/1024)<br> 21-Apr-2010 17:00:00.123 general: error: socket: file descriptor exceeds limit<br> (1024/1024)<br> <br> When we try to increase the socket value we are seeing assertion failures.<br>
<br> Restarted named with the option -S 8192:<br> Apr 26 19:20:54 ha1 named[3891]: socket.c:2781:<br> INSIST(!sock->pending_recv) failed, back trace<br> Apr 26 19:20:54 ha1 named[3891]: #0 0x806525b in ??<br> Apr 26 19:20:54 ha1 named[3891]: #1 0x7b4b57 in ??<br>
Apr 26 19:20:54 ha1 named[3891]: #2 0x7dfc03 in ??<br> Apr 26 19:20:54 ha1 named[3891]: #3 0x7e16f9 in ??<br> Apr 26 19:20:54 ha1 named[3891]: #4 0x7e1979 in ??<br> Apr 26 19:20:54 ha1 named[3891]: #5 0x7e1be7 in ??<br>
Apr 26 19:20:54 ha1 named[3891]: #6 0x61a49b in ??<br>
Apr 26 19:20:54 ha1 named[3891]: #7 0x6fd42e in ??<br> Apr 26 19:20:54 ha1 named[3891]: exiting (due to assertion<br> failure)<br> <br> Any advice given the info provided below? Let me know if I can provide more info.<br>
<br> Dale<br> <br> <br> $ dig +short version.bind chaos txt<br> "9.7.0-P1"<br> <br> $ uname -a<br> Linux <a href="http://ha1.example.com" target="_blank">ha1.example.com</a> 2.6.18-128.1.10.el5PAE #1 SMP Thu May 7 11:14:31 EDT 2009 i686 athlon i386 GNU/Linux<br>
<br> $ cat /etc/redhat-release<br> CentOS release 5.3 (Final)<br> <br> <br> $ cat /etc/security/limits.conf<br> * hard nofile 8192<br> * soft nofile 8192<br> ntp - memlock 32768<br> <br> <br>
cat named.conf<br> ...<br> options {<br> directory "/var/opt/named";<br> pid-file "/etc/named.pid";<br> notify yes;<br> also-notify {<br> };<br> recursion yes;<br>
allow-query { any; };<br> //edns-udp-size 512;<br> };<br> ...<br> <br> <br> unlimit -a reports:<br> open files (-n) 8192<br> <br> <br> recent rndc stats:<br> +++ Statistics Dump +++ (1271794427)<br>
++ Incoming Requests ++<br> 108267159 QUERY<br> 313 NOTIFY<br> ++ Incoming Queries ++<br> 91731351 A<br> 314215 NS<br> 10840 SOA<br> 2704323 PTR<br>
4367570 MX<br> 81 TXT<br> 325 X25<br> 9135705 AAAA<br> 1072 SRV<br> 6 IXFR<br> 1453 AXFR<br> 218 ANY<br>
++ Outgoing Queries ++<br> [View: default]<br> 3077427 A<br> 5991 NS<br> 2113 SOA<br> 44931 PTR<br> 7552045 MX<br> 53 TXT<br> 41 X25<br>
3218008 AAAA<br> 426 SRV<br> 18 ANY<br> [View: _bind]<br> [View: _meta]<br> ++ Name Server Statistics ++<br> 108267472 IPv4 requests received<br> 3342 requests with EDNS(0) received<br>
5600 TCP requests received<br> 108051102 responses sent<br> 4972 truncated responses sent<br> 3342 responses with EDNS(0) sent<br> 98180939 queries resulted in successful answer<br>
101089523 queries resulted in authoritative answer<br> 5075782 queries resulted in non authoritative answer<br> 7 queries resulted in referral answer<br> 3987640 queries resulted in nxrrset<br>
1885481 queries resulted in SERVFAIL<br> 3996719 queries resulted in NXDOMAIN<br> 5660199 queries caused recursion<br> 207266 duplicate queries received<br> 7610 queries dropped<br>
1456 requested transfers completed<br> ++ Zone Maintenance Statistics ++<br> 9833 IPv4 notifies sent<br> 301 IPv4 notifies received<br> 268 notifies rejected<br>
315214 IPv4 SOA queries sent<br> 6 IPv4 AXFR requested<br> 23 IPv4 IXFR requested<br> 29 transfer requests succeeded<br> ++ Resolver Statistics ++<br> [Common]<br>
570 mismatch responses received<br> 151245 failures in opening query sockets<br> [View: default]<br> 13714283 IPv4 queries sent<br> 186770 IPv6 queries sent<br> 10815900 IPv4 responses received<br>
31 IPv6 responses received<br> 123548 NXDOMAIN received<br> 955379 SERVFAIL received<br> 33013 FORMERR received<br> 806336 other errors received<br> 382773 EDNS(0) query failures<br>
442 truncated responses received<br> 751147 lame delegations received<br> 4759160 query retries<br> 3103740 query timeouts<br> 546721 IPv4 NS address fetches<br>
1168510 IPv6 NS address fetches<br> 80562 IPv4 NS address fetch failed<br> 1158909 IPv6 NS address fetch failed<br> 1527841 queries with RTT < 10ms<br> 4509306 queries with RTT 10-100ms<br>
3619163 queries with RTT 100-500ms<br> 518078 queries with RTT 500-800ms<br> 493598 queries with RTT 800-1600ms<br> 147945 queries with RTT > 1600ms<br> [View: _bind]<br>
[View: _meta]<br> ++ Cache DB RRsets ++<br> [View: default]<br> 222004 A<br> 211063 NS<br> 3086 CNAME<br> 3 SOA<br> 1034 PTR<br> 85462 MX<br>
2 TXT<br> 1356 AAAA<br> 3 SRV<br> 1 DNAME<br> 98 DS<br> 4891 RRSIG<br> 3937 NSEC<br> 83 !A<br>
39 !NS<br> 2 !SOA<br> 2158 !MX<br> 1 !X25<br> 8783 !AAAA<br> 1059 NXDOMAIN<br> [View: _bind (Cache: _bind)]<br> [View: _meta (Cache: _meta)]<br>
++ Socket I/O Statistics ++<br> 14046102 UDP/IPv4 sockets opened<br> 187393 UDP/IPv6 sockets opened<br> 476 TCP/IPv4 sockets opened<br> 116026 UDP/IPv4 socket open failures<br>
105 UDP/IPv6 socket open failures<br> 14046054 UDP/IPv4 sockets closed<br> 187393 UDP/IPv6 sockets closed<br> 6083 TCP/IPv4 sockets closed<br> 40871 UDP/IPv4 socket bind failures<br>
611 UDP/IPv6 socket bind failures<br> 186751 UDP/IPv6 socket connect failures<br> 13713840 UDP/IPv4 connections established<br> 31 UDP/IPv6 connections established<br>
423 TCP/IPv4 connections established<br> 5612 TCP/IPv4 connections accepted<br> 186739 UDP/IPv6 send errors<br> 83192 UDP/IPv4 recv errors<br> 31 UDP/IPv6 recv errors<br>
++ Per Zone Query Statistics ++<br> --- Statistics Dump --- (1271794427)<br> _______________________________________________<br> bind-users mailing list<br> <a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br> </blockquote></div><br><br clear="all"><br>-- <br>Ezra Taylor<br> _______________________________________________<br>
bind-users mailing list<br><a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br><a href="https://lists.isc.org/mailman/listinfo/bind-users" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a></blockquote>
</div><br></div></div><div> <div style="word-wrap: break-word;"><div>Dale Kiefling<br>Systems Administrator<br>CBS Interactive<br>415-344-1732 (office)<br>415-867-9919 (cell)<br><a href="mailto:Dale.Kiefling@cbs.com" target="_blank">Dale.Kiefling@cbs.com</a><br>
235 Second Street | San Francisco, CA 94105</div><div><br></div></div><br> </div><br></div></div></blockquote></div><br><br clear="all"><br>-- <br>Ezra Taylor<br>