Re: BIND listen backlog too small

2014-10-17 Thread Shawn Zhou
Thanks Cathy. The link you provided is very useful. On Friday, October 17, 2014 12:36 AM, Cathy Almond wrote: On 16/10/2014 23:52, Shawn Zhou wrote: > Thanks Mark. That's what I was looking for! > > > On Thursday, October 16, 2014 3:36 PM, Mark Andrews wrote: > > > > 2fd63cf5 (M

Re: BIND listen backlog too small

2014-10-17 Thread Cathy Almond
On 16/10/2014 23:52, Shawn Zhou wrote: > Thanks Mark. That's what I was looking for! > > > On Thursday, October 16, 2014 3:36 PM, Mark Andrews wrote: > > > > 2fd63cf5 (Mark Andrews 2003-04-10 02:16:11 + 279) > tcp-listen-queue ; > More info here too: https://kb.isc.org/artic

Re: BIND listen backlog too small

2014-10-16 Thread Shawn Zhou
Thanks Mark. That's what I was looking for! On Thursday, October 16, 2014 3:36 PM, Mark Andrews wrote: 2fd63cf5 (Mark Andrews      2003-04-10 02:16:11 + 279)        tcp-listen-queue ; -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: BIND listen backlog too small

2014-10-16 Thread Mark Andrews
2fd63cf5 (Mark Andrews 2003-04-10 02:16:11 + 279) tcp-listen-queue ; -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ Please visit https://lists

RE: BIND listen backlog too small

2014-10-16 Thread Darcy Kevin (FCA)
: Barry Margolin; comp-protocols-dns-b...@isc.org Subject: Re: BIND listen backlog too small This is for one of our masters which has about 20K zones and handles zone transfer traffic from few hundred of our slaves. On Thursday, October 16, 2014 2:27 PM, Barry Margolin mailto:bar...@alum.mit.edu

Re: BIND listen backlog too small

2014-10-16 Thread Shawn Zhou
This is for one of our masters which has about 20K zones and handles zone transfer traffic from few hundred of our slaves. On Thursday, October 16, 2014 2:27 PM, Barry Margolin wrote: In article , Shawn Zhou wrote: > Hello, > While I was investigating potential SYN flooding warn

Re: BIND listen backlog too small

2014-10-16 Thread Barry Margolin
In article , Shawn Zhou wrote: > Hello, > While I was investigating potential SYN flooding warning messages on my Linux > box for our DNS traffic,I was very surprised to see the backlog was set to > very small numbers for BIND tcp sockets. > strace showed backlog was '10' for listening socket

BIND listen backlog too small

2014-10-16 Thread Shawn Zhou
Hello, While I was investigating potential SYN flooding warning messages on my Linux box for our DNS traffic,I was very surprised to see the backlog was set to very small numbers for BIND tcp sockets. strace showed backlog was '10' for listening socket for port 53 and '128' for listening socket