I struggeled with unstable pfdns myself turned out ntp was not working. Im running centos 6.4 and packetfence 4.0.5-2
-----Opprinnelig melding----- Fra: Sallee, Stephen (Jake) [mailto:jake.sal...@umhb.edu] Sendt: 25. august 2013 21:50 Til: packetfence-users@lists.sourceforge.net Emne: Re: [PacketFence-users] PFDNS crashing every few seconds HELP! [UPDATE] Ok! I believe this was caused by a malformed DNS query. I have a few pcaps that show the server working perfectly until a specific query comes in and then pfdns crashes. One of my users has a Blackberry Playbook tablet that is doing some officially strange DNS stuff. The tablet sends a query for: ng="utf-8".umhb.edu The "umhb.edu" bit is being appended via my DHCP scope applying the search domain so we know where that is coming from. But why the tablet would be looking for ng="utf-8" I do not know. However it looks to be 100% repeatable to cause the daemon to crash when it sees this query. For now I have blocked access to the network for the offending client and the daemon is up and stable. I tried to reproduce this in my testbed and could not get pfdns to crash, but this could be caused by the test I am running not wanting to send malformed queries to begin with. Dig, nslookup, even dnsperf could not replicate the behavior, but the instant this query comes in from this client, pfdns stops. Are there any other tools I should try? Could someone verify this? Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________________ From: Sallee, Stephen (Jake) [jake.sal...@umhb.edu] Sent: Sunday, August 25, 2013 12:31 PM To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] PFDNS crashing every few seconds HELP! Sorry, stupid HTML mail clients. > ng="utf-8".umhb.edu<http://umhb.edu> should be: ng="utf-8".umhb.edu Please ignore the extra HTML garbage on the end. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________________ From: Sallee, Stephen (Jake) [jake.sal...@umhb.edu] Sent: Sunday, August 25, 2013 12:26 PM To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] PFDNS crashing every few seconds HELP! I did search the archives. The fix then was to install version 0.65 which is what I have installed. See here: http://sourceforge.net/mailarchive/forum.php?thread_name=51EDCE5F.4010006%40godshell.com&forum_name=packetfence-users I have also searched through the files in the PF repo and I do not see a perl-Net-DNS package. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________ From: Ludovic Marcotte [lmarco...@inverse.ca] Sent: Sunday, August 25, 2013 12:13 PM To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] PFDNS crashing every few seconds HELP! Search the archives this has been answered before. It is a bug in a perl module on which packetfence depends. "Sallee, Stephen (Jake)" <jake.sal...@umhb.edu> wrote: Ludovic! I am so glad to hear from you! Thank you for taking the time to respond. I am getting the dependency issue when I include perl-Net-DNS in my yum update. --------<snip>---------- Error: Package: packetfence-4.0.5-2.el6.noarch (@PacketFence) Requires: perl(Net::DNS) = 0.65-4 Removing: perl-Net-DNS-0.65-4.el6.x86_64 (@base) perl(Net::DNS) = 0.65 Updated By: perl-Net-DNS-0.66-1.of.el6.x86_64 (of) perl(Net::DNS) = 0.66 You could try using --skip-broken to work around the problem You could try running: rpm -Va --nofiles --nodigest --------</snip>--------- So I'm looking into that. However I found something interesting. One of my registration clients is sending a strange DNS query and every time pfdns sees it, it crashes. The query is exactly: ng="utf-8".umhb.edu<http://umhb.edu> I blocked that IP from send ing queries to PF and the service hasn't crashed since. I have tried to send this query to my test server to see if I can replicate the behavior but I need to edit the pcap to make it go to the test server. I can send you a link to DL the pcap if you are interested in looking at it. Also, any idea on the dependency issue is most welcome too : ) Thank you again. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________ From: Ludovic Marcotte [lmarco...@inverse.ca] Sent: Sunday, August 25, 2013 11:38 AM To: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] PFDNS crashing every few seconds HELP! Upgrade perl net dns to the latest version from our repo. "Sallee, Stephen (Jake)" <jake.sal...@umhb.edu> ; wrote: Crap, sorry. Forgot: PF v 4.0.5-2 CentOS 6.4 perl-Net-DNS-0.65-4.el6.x86_64 perl-Net-DNS-Nameserver-0.65-4.el6.x86_64 Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________ From: Sallee, Stephen (Jake) [jake.sal...@umhb.edu] Sent: Sunday, August 25, 2013 11:06 AM To: packetfence-users@lists.sourceforge.net Subject: [PacketFence-users] PFDNS crashing every few seconds HELP! Fellow PF users, I am in need of your assistance! My production PF box is having the pfdns service crash every few seconds. I am working on getting some pcaps to see if it is network based but I cannot find anything on the logs. It seems to be failing completely silently. I would appreciate any assistance yo u ca n offer. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk ________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ________________________________ Introducing Performance Central, a new site from SourceForge a nd AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk ________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Sent from my phone. Please excuse my brevity. ________________________________ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk ________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Sent from my phone. Please excuse my brevity. ------------------------------------------------------------------------------ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
