Re: Need to improve named performance

2012-11-12 Thread Jeremy C. Reed
On Mon, 12 Nov 2012, Ed LaFrance wrote: > Currently I'm not using query logging, it's not in my options at all. I think "rndc querylog" was used to enable it (even if no corresponding logging configuration). You can use it again to toggle it off. "rndc status" will show if query logging is on

Re: Need to improve named performance

2012-11-12 Thread Ed LaFrance
The developer of some software we use has come up with this and it appears to work: logging{ channel error_log { file "/var/log/bind.log" versions 3 size 5m; severity error; print-time yes; print-severity yes; print-category yes; }; category default{ error_log; }; }; On 11/12/2012 8:49 AM, Davi

Re: Need to improve named performance

2012-11-12 Thread David Forrest
On Mon, 12 Nov 2012, Ed LaFrance wrote: Hello Alan - Of course you are right, my bad. Here's the entirety of my named.conf - there's nothing pertaining to logging in here, so I guess that means that 'log everything' is the default. I would only want to log critical named errors, so if anyone

Re: Need to improve named performance

2012-11-12 Thread Ed LaFrance
Hello Alan - Of course you are right, my bad. Here's the entirety of my named.conf - there's nothing pertaining to logging in here, so I guess that means that 'log everything' is the default. I would only want to log critical named errors, so if anyone has syntax they have my gratitude: opt

Re: Need to improve named performance

2012-11-12 Thread Barry Margolin
In article , Ed LaFrance wrote: > Hello Alan - > > Currently I'm not using query logging, it's not in my options at all. > Are you saying that named logging by syslog into /var/log/messages is > controlled by named.conf? Seems unlikely, I'd think it would be a > function of syslog.conf. I'm

Re: Need to improve named performance

2012-11-12 Thread Alan Clegg
On Nov 12, 2012, at 10:58 AM, Ed LaFrance wrote: > Currently I'm not using query logging, it's not in my options at all. Are you > saying that named logging by syslog into /var/log/messages is controlled by > named.conf? Seems unlikely, I'd think it would be a function of syslog.conf. > I'm t

Re: Need to improve named performance

2012-11-12 Thread Eliezer Croitoru
On 11/12/2012 5:58 PM, Ed LaFrance wrote: Hello Alan - Currently I'm not using query logging, it's not in my options at all. Are you saying that named logging by syslog into /var/log/messages is controlled by named.conf? Seems unlikely, I'd think it would be a function of syslog.conf. I'm trying

Re: Need to improve named performance

2012-11-12 Thread Ed LaFrance
Hello Alan - Currently I'm not using query logging, it's not in my options at all. Are you saying that named logging by syslog into /var/log/messages is controlled by named.conf? Seems unlikely, I'd think it would be a function of syslog.conf. I'm trying to learn more about it but I'm swamped

Re: Need to improve named performance

2012-11-12 Thread Alan Clegg
On Nov 12, 2012, at 10:23 AM, Ed LaFrance wrote: > I've been corresponding with several people on this issue but no one had > questioned that when I pointed it out. I don't think I'd seen the logging stanza, but yes, logging to syslog is a bad thing, and logging queries to syslog is even wors

Re: Need to improve named performance

2012-11-12 Thread Phil Mayers
On 12/11/12 15:23, Ed LaFrance wrote: I really don't need this kind of logging in the messages log. I can turn on query logging in the named.conf if I need more detail on named. I think the simplest thing would just be to have an exclusion in the syslog config for named. I confess some general i

Re: Need to improve named performance

2012-11-12 Thread Ed LaFrance
Hello Florian - You are my hero and new best friend. I stopped syslog: [root@ns1 lisinc]# /sbin/service syslog stop Shutting down kernel logger: [ OK ] Shutting down system logger: [ OK ] ...and all the problems cleared up instantl

Re: Need to improve named performance

2012-11-12 Thread G.W. Haywood
Hi there, On Mon, 12 Nov 2012, Ed LaFrance wrote: ... No idea on ip_conntrack. How do I check and if so, what setting should I try and how do I do it? Look for something like /proc/sys/net/netfilter/ip_conntrack_tcp_timeout_established and cat it to the terminal. It will just be a number (