DNS uses name to IP and IP to name resolution files. I have seen slow login problems when the IP to name (reverse lookup) file is messed up. Also when a machine is using a bad/broken dns server in the /etc/resolv.conf file or bad /etc/hosts file.
Check here http://www.visi.com/~barr/dnswalk/ -----Original Message----- From: gabriel [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 28, 2002 2:32 PM To: [EMAIL PROTECTED] Subject: RE: spontaneous lag (x3) maybe i should mention that i'm still new at all this, and while i maybe have configured named and have it running, i don't know if i did it right. i only know that it seems to be doing it's job. so when asked "the check my dns" i'm not sure where to start. are you talking about looking at how proftpd uses dns? or named itself? and if either of these are at fault, why does the machine work most of the time and not of these few days? and from what i understand, the probability of a hack on these machines is very unlikely since they're both behind a router that has no open ports (as we're running no services to the world through that router). i'm fresh outta things to check, but think this is due the fact that i'm not sure where i should be checking.... On Thu, 2002-02-28 at 11:17, Paul Hamm wrote: > Sounds like you have a resolver issue. Check your DNS specificaly the > reverse lookup. Or you may have been hacked ;-) > > -----Original Message----- > From: gabriel [mailto:[EMAIL PROTECTED]] > Sent: Thursday, February 28, 2002 12:41 PM > To: [EMAIL PROTECTED] > Subject: spontaneous lag (x3) > > > the oddest thing has been happening to the machines here in my office > for the past few months. most of the time, telnetd/sshd/ftpd all seem to > be working fine, but on three separate days in the last two months, an > odd lag has manifested itself during the login. ie. it takes nearly a > full minute to telnet into a local rh6.2 machine. and about the same > time to ftp between either machines. apache however, which both are > running seems to be working fine. as is named. > > now i've emailed this list before with this question, but the problem > disappeared about 24hours after it started so i gave up on the thread. > but now it's been recurring: the second time ocurring about a month > after the first, and this time, today, about 2weeks after the second > time. > > to rule out the previous suggestions, i can assure you all that i > haven't been playing with the firewall, because i haven't installed one. > (we're behind a firewall on a local network running private ips). the > proftpd, telnetd, and sshd haven't changed since i installed them, so > i'm looking for suggestions as to what exactly is going on... > the dates this has happened in the past are below: > > start stop > 2002.01.16 2002.01.17 > 2002.02.19 2002.02.20 > 2002.02.28 ????.??.?? > > and here's a list of the specs on the two machines: > > sparc64 > rh6.2 > inetd > telnetd > proftpd 1.2.4 > apache 1.3.20 > > pentiumI > rh7.2 > xinetd > sshd > proftpd 1.2.4 > apache 1.3.23 > > > thanks so much to anyone out there who knows what's going on here. > > > > _______________________________________________ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list > > > > _______________________________________________ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list > _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
