Hey Folks..
> What about going down to the packet level on both machines? A good
> combination of traces and netstats may find the problem.
Well I fired up a copy of tcpdump and did some work with my cut and paste
skills with netstat..
It appears that this problem only happens when the DNS servers return a
Server Failed message as illustrated in the included logs.
I tried to replicate the DNS requests being sent to the servers using
nslookup in interactive mode, but it didn't leave any lingering
connections after the Server Failed reply was sent to it.
In the following example output I waited 10+ seconds before checking
netstat for open connections just to make sure that they were infact
remaining and not just open at the time.
13:23:11.170307 eth0 > web.efni.com.3819 > rhymes.efni.com.domain: 61420+ PTR?
113.138.210.207.in-addr.arpa. (46)
13:23:11.172139 eth0 < rhymes.efni.com.domain > web.efni.com.3819: 61420 ServFail
0/0/0 (46) (DF)
udp 0 0 207.61.147.42:3819 207.61.147.20:53 ESTABLISHED
14:03:40.085211 eth0 > web.efni.com.2640 > rhymes.efni.com.domain: 31440+ PTR?
3.138.210.207.in-addr.arpa. (44)
14:03:40.086942 eth0 < rhymes.efni.com.domain > web.efni.com.2640: 31440 ServFail
0/0/0 (44) (DF)
udp 0 0 207.61.147.42:2640 207.61.147.10:53 ESTABLISHED
15:11:07.482324 eth0 > web.efni.com.2168 > rhymes.efni.com.domain: 54530+ PTR?
251.146.3.209.in-addr.arpa. (44)
15:11:07.484169 eth0 < rhymes.efni.com.domain > web.efni.com.2168: 54530 ServFail
0/0/0 (44) (DF)
udp 0 0 207.61.147.42:2168 207.61.147.10:53 ESTABLISHED
15:20:14.530419 eth0 > web.efni.com.2755 > rhythm.efni.com.domain: 7530+ PTR?
28.243.94.216.in-addr.arpa. (44)
15:20:14.532002 eth0 < rhythm.efni.com.domain > web.efni.com.2755: 7530 ServFail 0/0/0
(44) (DF)
udp 0 0 207.61.147.42:2755 207.61.147.20:53 ESTABLISHED
Thanks,
Joshua Hirsh
efni CONNECT
UNIX Systems Administration
[EMAIL PROTECTED]
Tel: (705) 474-3364 ext. 2557
Fax: (705) 472-9202
PGP KEY: http://users.efni.com/admin/pgp/
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
