Re: Same Transaction ID queries
What is BIND internal logic when such a series of queries are received, and why it would not answer to all requests. Regards, Samer Khattab On Sun, Feb 5, 2012 at 9:42 AM, Mark Andrews wrote: > > In message oky1lepdf...@mail.gmail.com> > , Samer Khattab writes: > > Hi all, > > > > We have an observation for some queries where BIND caching server > receives > > multiple queries (three or four, A or ) for a domain name, with the > > same transaction ID in the DNS header in all query packets, and one > > response packet is sent back from the server only for these queries. > > > > The client IP,source port and Server IP is the same in these queries. > > > > Is this the right BIND behavior in this case or it is an issue. > > It is expected behavior. > > > Regards, > > Samer Khattab > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Same Transaction ID queries
Hi all, We have an observation for some queries where BIND caching server receives multiple queries (three or four, A or ) for a domain name, with the same transaction ID in the DNS header in all query packets, and one response packet is sent back from the server only for these queries. The client IP,source port and Server IP is the same in these queries. Is this the right BIND behavior in this case or it is an issue. Regards, Samer Khattab ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.7.3-P3 crash on multiple cashing servers
This is from an ISC compiled source. On Wed, Nov 16, 2011 at 2:39 PM, Florian Weimer wrote: > * Samer Khattab: > > > I found the following in the logs: > > > > 16-Nov-2011 08:26:58.724 query.c:1781: INSIST(! > > dns_rdataset_isassociated(sigrdataset)) failed, back trace > > Is this from a version which was compiled from sources provided by ISC, > or some distribution version? > > -- > Florian Weimer > BFK edv-consulting GmbH http://www.bfk.de/ > Kriegsstraße 100 tel: +49-721-96201-1 > D-76133 Karlsruhe fax: +49-721-96201-99 > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.7.3-P3 crash on multiple cashing servers
I found the following in the logs: 16-Nov-2011 08:26:58.724 query.c:1781: INSIST(! dns_rdataset_isassociated(sigrdataset)) failed, back trace 16-Nov-2011 08:26:58.738 #0 0x41130b in assertion_failed()+0x4b 16-Nov-2011 08:26:58.738 #1 0x5560da in isc_assertion_failed()+0xa 16-Nov-2011 08:26:58.738 #2 0x418181 in query_addadditional2()+0x1181 16-Nov-2011 08:26:58.738 #3 0x4b841f in dns_rdata_additionaldata()+0xcf 16-Nov-2011 08:26:58.738 #4 0x4e58fb in dns_rdataset_additionaldata()+0xdb 16-Nov-2011 08:26:58.738 #5 0x414d23 in query_addrrset()+0x253 16-Nov-2011 08:26:58.738 #6 0x419e9d in query_find()+0x1ccd 16-Nov-2011 08:26:58.738 #7 0x41be9b in ns_query_start()+0x36b 16-Nov-2011 08:26:58.738 #8 0x4096a6 in client_request()+0x1046 16-Nov-2011 08:26:58.738 #9 0x57039c in run()+0x1dc 16-Nov-2011 08:26:58.738 #10 0x3ab6c0673d in _fini()+0x3ab6683b45 16-Nov-2011 08:26:58.738 #11 0x3ab60d3d1d in _fini()+0x3ab5b51125 16-Nov-2011 08:26:58.738 exiting (due to assertion failure) On Wed, Nov 16, 2011 at 1:01 PM, Stephane Bortzmeyer wrote: > On Wed, Nov 16, 2011 at 12:08:59PM +0400, > Samer Khattab wrote > a message of 38 lines which said: > > > 8 of our cashing-only name servers crashed in a random sequence, and > > the crash happened in a 10 minutes time. The servers are running > > BIND 9.7.3-P3. > > Not the only report, it seems. What's in the logs? > > > The crash produced a core dump for the named process. > > Send it to ISC ASAP <http://www.isc.org/security/reporting-issues>. > > > Does anybody has a similar case recently? Is this a security issue ? > > It seems so. > > ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
BIND 9.7.3-P3 crash on multiple cashing servers
8 of our cashing-only name servers crashed in a random sequence, and the crash happened in a 10 minutes time. The servers are running BIND 9.7.3-P3. The crash produced a core dump for the named process. Does anybody has a similar case recently? Is this a security issue ? Regards, Samer ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: maximum number of FD events (64) received
Thanks Sergey, I want to know one more thing, if you can help me. Will this error cause timeouts ? does it have impact on performance ? On Mon, Sep 27, 2010 at 3:42 PM, Sergey V. Lobanov wrote: > Reconfigure Bind thus: > > STD_CDEFINES='-DISC_SOCKET_MAXEVENTS=256' ./configure --your-options > > then recompile > > > On 09/27/2010 01:27 PM, Samer Khattab wrote: > >> Hi all, >> >> I'm using Bind as a caching name server and serving around 2000 req per >> second, and recently have the following messages showing up from time to >> time in the general.log. >> >> >> 27-Sep-2010 10:45:47.639 sockmgr 0x2ad7af2f5010: maximum number of FD >> events (64) received >> 27-Sep-2010 10:45:47.872 sockmgr 0x2ad7af2f5010: maximum number of FD >> events (64) received >> >> BIND BIND 9.7.1-P2 >> RHEL 5.5 kernel 2.6.18-194.11.3.el5 >> >> What is the meaning of these messages ? Are they related to the system >> file descriptors ? >> >> >> >> ___ >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users >> > > > -- > wbr, > Sergey V. Lobanov > > > ___ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users > ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
maximum number of FD events (64) received
Hi all, I'm using Bind as a caching name server and serving around 2000 req per second, and recently have the following messages showing up from time to time in the general.log. 27-Sep-2010 10:45:47.639 sockmgr 0x2ad7af2f5010: maximum number of FD events (64) received 27-Sep-2010 10:45:47.872 sockmgr 0x2ad7af2f5010: maximum number of FD events (64) received BIND BIND 9.7.1-P2 RHEL 5.5 kernel 2.6.18-194.11.3.el5 What is the meaning of these messages ? Are they related to the system file descriptors ? ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
BIND 9.7.1-P2 caching name server crash
Bind suffered from a crash on one of our caching servers, a core dumb for named was generated. We are running BIND 9.7.1-P2, on rhel 5.5, kernel 2.6.18-194.el5. The only useful log lines found at the crash time are from "general.log", following are the lines: 27-Aug-2010 16:43:04.901 query.c:1784: INSIST(! dns_rdataset_isassociated(sigrdataset)) failed, back trace 27-Aug-2010 16:43:04.907 #0 0x41128b in assertion_failed()+0x4b 27-Aug-2010 16:43:04.907 #1 0x552e6a in isc_assertion_failed()+0xa 27-Aug-2010 16:43:04.907 #2 0x4180d1 in query_addadditional2()+0x1181 27-Aug-2010 16:43:04.907 #3 0x4b64df in dns_rdata_additionaldata()+0x12f 27-Aug-2010 16:43:04.907 #4 0x4e3a9b in dns_rdataset_additionaldata()+0xdb 27-Aug-2010 16:43:04.907 #5 0x414c73 in query_addrrset()+0x253 27-Aug-2010 16:43:04.907 #6 0x418ef5 in query_find()+0xdd5 27-Aug-2010 16:43:04.907 #7 0x41c23b in query_resume()+0x1fb 27-Aug-2010 16:43:04.907 #8 0x56cfcc in run()+0x1dc 27-Aug-2010 16:43:04.907 #9 0x3951a0673d in _fini()+0x3951486f75 27-Aug-2010 16:43:04.913 #10 0x39512d3d1d in _fini()+0x3950d54555 27-Aug-2010 16:43:04.913 exiting (due to assertion failure) Any advice on this fault ? Thanks in advance ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
