Edward Lewis <ed.le...@neustar.biz> wrote:
> At 13:02 +0300 6/2/11, Joe Abley wrote:
>
> > I have realised, however, that I can't tell whether a signature that is
> > (say) going to expire in under three days is a cause for concern, or
> > whether it's normal operations and something I should expect to be
> > replaced as part of normal operations.
>
> So, I would bet that about all you can do is list when signatures are to
> expire (in the future) and list signatures that expire and notify the admins.
> Except for the expired ones, there's not much you can say definitively to the
> admin.  More remote monitoring and reporting symptoms is good, trying to
> diagnose and offer fixes is likely to drive you crazy (unless you like false
> positives).

It's possibly useful to know the ratio of the intervals between the
inception time and now, and now and the expiry time. Also the relation
between the now/expiry interval and the relevant TTLs and zone refresh and
expiry intervals.

Tony.
-- 
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/
Rockall, Malin, Hebrides: South 5 to 7, occasionally gale 8 at first in
Rockall and Malin, veering west or northwest 4 or 5, then backing southwest 5
or 6 later. Rough or very rough. Occasional rain. Moderate or good,
occasionally poor.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to