Re: stop zone transfers from coming in

2009-04-28 Thread Jonathan Petersson
I would honestly look for a typo since you're saying that it does work for some. Either way unless the admin turn it off you will get zone-transfers, the question lies in wether your name-server accepts them and propagates them down. Check in the log for transfer or notification refusals and make

stop zone transfers from coming in

2009-04-28 Thread Chris Henderson
My server works as a secondary for a zone. I asked the master server's admin to stop the zone transfer; I didn't get any reply and thus commented out the zone's section in my named.conf. But I'm still getting zone files coming in to my server. Here is what I have commented out: # zone "example.c

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
After feedback and running some tests today I've found that the most "cost-effective" approach as far as performance goes is to use the native querylog and rotate it often enough to have as "live" data as possible. Some quick notes (all tests done with perl): - Parse the querylog 500 000k queries:

Re: approach on parsing the query-log file

2009-04-28 Thread Scott Haneda
I have read the other posts here, and it looks like you are setting on tail, or a pipe, but that log rotation is causing you headaches. I have had to deal with things like this in the past, and took a different approach. Here are some ideas to think about. Since you mentioned below you wan

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
Ah i.e. I'm using an incorrect logfacility... that would explain things. Either way, I did try to parse tcpdump for queries, the problem I'm getting is that perl isn't the best option for this so I'm going to look into wether things could get sped up with python or something. /Jonathan 2009/4/28

Re: approach on parsing the query-log file

2009-04-28 Thread Jeremy C. Reed
On Tue, 28 Apr 2009, Jonathan Petersson wrote: > I did try to run the following option: > syslog named; syslog should define a "syslog facility". Look in the openlog, syslog and/or syslog.conf manual pages to see lists of facilities. The ARM says: " The syslog destination clause directs the c

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
I did try to run the following option: syslog named; but when matching on named.* in syslog.conf there's no output. /Jonathan 2009/4/28 JINMEI Tatuya / 神明達哉 : > At Tue, 28 Apr 2009 10:01:02 -0700, > Jonathan Petersson wrote: > >> So I gave tail a try in perl both via File::Tail and by putting t

Re: approach on parsing the query-log file

2009-04-28 Thread JINMEI Tatuya / 神明達哉
At Tue, 28 Apr 2009 10:01:02 -0700, Jonathan Petersson wrote: > So I gave tail a try in perl both via File::Tail and by putting tail > -f in a pipe. Neither seems to be handling the logrotation well. In my > case I'm running a test sending 1 million queries, of those half is > picked up by File::

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
Just realized something else, since I'm using perl in this case it's going to be a permament bottleneck regardless of wether I use syslog/tcpdump/querylog, it just isn't quick enough for that kind of data-flow... Back to the drawing-board /Jonathan On Tue, Apr 28, 2009 at 10:49 AM, Jonathan Pete

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
I don't think the cost is that great having querylogging enabled, running the same test using dnsperf there's a 43% performance-increase but 70 000 queries per second is still acceptable with query-logging enabled. /Jonathan On Tue, Apr 28, 2009 at 10:05 AM, Alan Clegg wrote: > Jonathan Petersso

Re: approach on parsing the query-log file

2009-04-28 Thread Alan Clegg
Jonathan Petersson wrote: > So I gave tail a try in perl both via File::Tail and by putting tail > -f in a pipe. As was stated previously in this thread, you are going down a bad path by using query-log for any purpose beyond short debugging sessions. The loss in performance is rather painful. T

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
So I gave tail a try in perl both via File::Tail and by putting tail -f in a pipe. Neither seems to be handling the logrotation well. In my case I'm running a test sending 1 million queries, of those half is picked up by File::Tail if you define how often it should re-read the file but using tail -

Re: approach on parsing the query-log file

2009-04-28 Thread David Forrest
On Tue, 28 Apr 2009, Gregory Hicks wrote: From: Jonathan Petersson Date: Tue, 28 Apr 2009 08:13:25 -0700 Subject: Re: approach on parsing the query-log file To: niall.orei...@ucd.ie Cc: Bind Mailing Yeah I've thought about using tail but I'm not sure how locking would be managed when logrot

Re: approach on parsing the query-log file

2009-04-28 Thread Gregory Hicks
> From: Jonathan Petersson > Date: Tue, 28 Apr 2009 08:13:25 -0700 > Subject: Re: approach on parsing the query-log file > To: niall.orei...@ucd.ie > Cc: Bind Mailing > > Yeah I've thought about using tail but I'm not sure how locking would > be managed when logrotate kicks in, does anyone know

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
Yeah I've thought about using tail but I'm not sure how locking would be managed when logrotate kicks in, does anyone know? On Tue, Apr 28, 2009 at 3:41 AM, Niall O'Reilly wrote: > On Mon, 2009-04-27 at 22:26 -0700, Jonathan Petersson wrote: >> The obvious question that occurs is; What would be w

Re: approach on parsing the query-log file

2009-04-28 Thread Jonathan Petersson
The problem I'm seeing with this is that we'll get data that may be inconsistent. Just because a query is sent to a server doesn't mean that there's a name-server there to answer, I believe querying the log-file one way or another would give a more accurate picture of load etc. On Tue, Apr 28, 200

Re: How to forward domain totally not using CNAME?

2009-04-28 Thread Halassy Zoltán
I would like to CNAME like below. example.com. IN CNAMEexample2.com. But I know that this is wrong. then, is there any way or solution to solve this problem? I searched and found that below is a similar solution. * IN CNAMEexample2.com.

Re: How to forward domain totally not using CNAME?

2009-04-28 Thread Chris Buxton
On Apr 28, 2009, at 2:39 AM, Larry wrote: MontyRee wrote: Hello, all. I would like to CNAME like below. example.com. IN CNAMEexample2.com. But I know that this is wrong. then, is there any way or solution to solve this problem? I searched and found that below is a si

Re: about DNAME question

2009-04-28 Thread Niall O'Reilly
On Tue, 2009-04-28 at 04:46 +, MontyRee wrote: > If I set like below, > > example.com. IN DNAMEexample2.com > > IP addreess of example.com is 192.168.1.2 > > > 1. if client resolver use bind 8 or below old version. >What would be happen? >Can recognize DNAM

Re: approach on parsing the query-log file

2009-04-28 Thread Niall O'Reilly
On Mon, 2009-04-27 at 22:26 -0700, Jonathan Petersson wrote: > The obvious question that occurs is; What would be what's the best > approach to do this? I've not used it, but a colleague is very keen on File::Tail (http://search.cpan.org/~mgrabnar/File-Tail-0.99.3/Tail.pm).

Re: approach on parsing the query-log file

2009-04-28 Thread Chris Buxton
On Apr 28, 2009, at 5:26 AM, Jonathan Petersson wrote: Hi all, I'm thinking of writing a quick tool to archive the query-log in a database to allow for easier reports. If it were me, I would turn off query logging and use a packet sniffer. Chris Buxton Professional Services Men & Mice __

Re: request timeout

2009-04-28 Thread Jonathan Petersson
IIRC it's 3 seconds. On Tue, Apr 28, 2009 at 12:42 AM, Jeff Pang wrote: > When a Bind requests another Bind for a name resolving, what's the > timeout value for this resuest? > I mean, within how many seconds peer Bind doesn't answer it, this Bind > will give up the query? > > Thanks. > Regards.

request timeout

2009-04-28 Thread Jeff Pang
When a Bind requests another Bind for a name resolving, what's the timeout value for this resuest? I mean, within how many seconds peer Bind doesn't answer it, this Bind will give up the query? Thanks. Regards. ___ bind-users mailing list bind-users@lis