Re: named entries in /var/log/messages

[Keith Morse <kgmorse mpcu com>]

On Sat, 30 Oct 1999, Todd A. Jacobs wrote:

> My log is being absolutely flooded with these kinds of messages. In
> addition, I get lots of errors saying things about "lame servers" and
> "wrong ans. name."  What does this stuff mean?
> 
> Oct 28 01:44:06 cyrix named[490]: wrong ans. name (m.doubleclick.net !=
> ny450ld1avip.doubleclick.net)
> Oct 28 01:44:06 cyrix last message repeated 11 times
> Oct 28 02:05:43 cyrix named[490]: wrong ans. name (m.doubleclick.net !=
> uuvald2avip.doubleclick.net)
> Oct 28 02:05:43 cyrix last message repeated 11 times
> Oct 28 02:05:43 cyrix named[490]: wrong ans. name
> (ny450ld1avip.doubleclick.net != uuvald2avip.doubleclick.net)
> Oct 28 02:05:43 cyrix named[490]: wrong ans. name
> (ny450ld1vip.doubleclick.net != uuvald2avip.doubleclick.net)
> Oct 28 02:05:43 cyrix named[490]: dangling CNAME pointer
> (uuvald2avip.doubleclick.net)
> Oct 28 02:19:56 cyrix named[490]: Cleaned cache of 149 RRs
> 

Looks like doubleclick.net has some bad rr's.  I've seen this before with
other "large" institutions.  Check  out www.isc.org for the documentation
to bind.  You can limit what entries get put into your log files from
bind.  Look at "options" in named.conf.


> [plenty of snipping]
> 
> Oct 29 17:19:56 cyrix named[490]: Cleaned cache of 54 RRs
> Oct 29 17:19:56 cyrix named[490]: USAGE 941242796 940164099
> CPU=10.29u/4.8s CHILDCPU=0u/0s
> Oct 29 17:19:56 cyrix named[490]: NSTATS 941242796
> 940164099A=6602NS=9PTR=309MX=335ANY=290
> Oct 29 17:19:56 cyrix named[490]: XSTATS 941242796 940164099 RR=5874
> RNXD=245 RFwdR=4521 RDupR=4 RFail=27 RFErr=0 RErr=0 RAXFR=0 RLame=39
> ROpts=0 SSysQ=861 SAns=3517 SFwdQ=4159 SDupQ=1570 SErr=2 RQ=7545 RIQ=0
> RFwdQ=0 RDupQ=201 RTCP=2 SFwdR=4521 SFail=0 SFErr=0 SNaAns=3476 SNXD=96
> Oct 29 18:19:56 cyrix named[490]: Cleaned cache of 12 RRs
> Oct 29 18:19:56 cyrix named[490]: USAGE 941246396 940164099 CPU=10.3u/4.8s
> CHILDCPU=0u/0s
> Oct 29 18:19:56 cyrix named[490]: NSTATS 941246396
> 940164099A=6614NS=9PTR=309MX=335ANY=290
> Oct 29 18:19:56 cyrix named[490]: XSTATS 941246396 940164099 RR=5881
> RNXD=245 RFwdR=4523 RDupR=4 RFail=27 RFErr=0 RErr=0 RAXFR=0 RLame=39
> ROpts=0 SSysQ=862 SAns=3528 SFwdQ=4164 SDupQ=1570 SErr=2 RQ=7557 RIQ=0
> RFwdQ=0 RDupQ=201 RTCP=2 SFwdR=4523 SFail=0 SFErr=0 SNaAns=3487 SNXD=96
> 

Don't know if you're asking about these or not.  If so, bind purges it's
resource record lookups once an hour. The above are stats from the purge.
It is normal operations for bind.


> -- 
> Todd A. Jacobs
> Network Systems Engineer
> 
> 
> 
> -- 
> To unsubscribe: mail redhat-list-request redhat com with "unsubscribe"
> as the Subject.
>