Skip to Content.
Sympa Menu

discuss - Re: [opennic-discuss] Sharp increase in DNS traffic.

discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] Sharp increase in DNS traffic.


Chronological Thread 
  • From: mike <mike AT pikeaero.com>
  • To: discuss AT lists.opennicproject.org
  • Subject: Re: [opennic-discuss] Sharp increase in DNS traffic.
  • Date: Sun, 19 Jun 2011 21:11:17 -0400
  • Envelope-to: discuss AT lists.opennicproject.org
  • List-archive: <http://lists.darkdna.net/pipermail/discuss>
  • List-id: <discuss.lists.opennicproject.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Okay....what the heck is going on here? Here'a a small snippet from my
"netstat -n":

0 66.206.229.101:57691 192.41.162.30:53 TIME_WAIT
tcp 1 1 66.206.229.101:41576 192.31.80.30:53
CLOSING
tcp 0 0 66.206.229.101:47285 192.55.83.30:53
TIME_WAIT
tcp 0 0 66.206.229.101:58621 192.5.6.30:53
ESTABLISHED
tcp 1 1 66.206.229.101:58078 192.43.172.30:53
CLOSING
tcp 0 49 66.206.229.101:43677 192.52.178.30:53
LAST_ACK
tcp 0 0 66.206.229.101:47599 192.31.80.30:53
TIME_WAIT

There are hundreds of these 192...bla addresses. They all belong to
VeriSign!!

So what gives here?! Are we under attack by Verisign or what? Is this
just me?

- --Mike

On 11-06-19 08:11 PM, mike wrote:
> Any other ops noticing a sharp increase in DNS traffic since late
> yesterday or so?
>
> I don't keep any logs, so I can't give a detailed report, but 'named'
> CPU usage has climbed significantly along with UDP traffic on port 53.
>
> I'm just trying to estimate if this is a trend or if this is a once-time
> event of some sort. If it's a trend then I probably need to start
> budgeting for some hardware upgrades at some point, my DNS is running
> only on a single core, 32-bit 2GHz CPU @ 1.5 GB RAM. I've got plenty of
> RAM, but 'named' since perhaps around midnight last night has the CPU
> pegged at 45-55%.
>
> --Mike
>
_______________________________________________
discuss mailing list
discuss AT lists.opennicproject.org
http://lists.darkdna.net/mailman/listinfo/discuss

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJN/p4vAAoJEEzVYN3s3Af7zXIH/3M+Ps8or8iif4W23HFskczT
+OmiVbeVog+3MmMURu4kT+TziDtXjWOQVf4hJkMVqN8nMz8de+vkIc47xLjkMJ0N
7o8yzJU0ODoMkEX3OUzzWYnC0J7v02zqncDVRYDh15GjF7KddiEf4XUhK2D3O2zE
VNLiLoVdxANz1jvRnU0wk6SKZxV5tT8c4R9zPAkYwYZf0JYQSETAUzVb0XfZt03K
P5DaHVR5Uz8RIIvNYgHVHV0ErW4E//6O0R27sKOe1nAqm1LFuosIrOghEryM+7bu
QlhtAo0euhQxdQKkEqrtdTqL/KWKGfnyio+8cz19HuL/WXEKmXivMmIOS8limMY=
=ZgSC
-----END PGP SIGNATURE-----




Archive powered by MHonArc 2.6.19.

Top of Page