On Sunday 28 April 2002 06:08 am, martin f krafft wrote: > every now and then, my bind logs are filled with hundreds and > thousands of the following: > > general: info: loading configuration from '/etc/bind/named.conf' > > one every second, producing 200kb of logging data or more.
It's been a while since I did any serious work with bind, but it sounds like something is killing named. If that were my box, I would be very curious about how much traffic it had on port 53 during those times, and where it was coming from. I would also be curious about what else was going on on the box during those times. There is probably an innocent explanation, but I would be looking for evidence of a DOS attack or crack attempt. -- Bud Rogers <[EMAIL PROTECTED]> http://www.sirinet.net/~budr All things in moderation. And not too much moderation either. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
