* Ben Finney: >> Do you know how many UDP flows BIND has generated when this happened? >> >> I've seen similar things as the result of firewall state table >> overflow. > > I'm not familiar with the term “UDP flows”. I have now installed the > ‘flowscan’, ‘flow-tools’, and ‘rrdtool’ packages; can you tell me how > to use any of them to get the information you're requesting?
These tools are unnecessary. Do you use a stateful packet filter (such as Netfilter connection tracking), either on the host or in front of it? Do you monitor the number of state table entries (for netfilter, that would be /proc/sys/net/netfilter/nf_conntrack_count, I think)? -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
