* Jason Dixon <[EMAIL PROTECTED]> [2003-09-02 13:42]:
> On Tue, 2003-09-02 at 19:35, Marc Adler wrote:
> > * NfoCipher <[EMAIL PROTECTED]> [2003-09-02 12:59]:
> > > On Tue, 2003-09-02 at 17:42, Marc Adler wrote:
> > > > I took a look at /etc/resolv.conf and there were a few entries in it,
> > > > but how do I know if they are valid?
> > > > 
> > > Well, your isp is sending those to you via dhcp, so you can assume
> > > they're valid but they may not respond very fast - causing a delay.
> > > You can try running your own caching dns server.
> > > /etc/rc.d/init.d/named start
> > > 
> > > edit /etc/resolv.conf
> > > > ; generated by /sbin/dhclient-script
> > > search your.local.domain.here
> > 
> > I'm not sure what my localdomain is - I've named my LAN kapakipika and
> > my two computers nui and iki (nui.kapakipika and iki.kapakipika), so
> > should I just enter kapakipika? Or kapakipika.hawaii.rr.com? I went
> > ahead and entered kapakipika by itself, and it seems to work, but would
> > it be better to enter kapakipika.hawaii.rr.com?
> > 
> > > nameserver 127.0.0.1
> > > > nameserver 24.25.227.32
> > > > nameserver 24.25.227.34
> > > > nameserver 24.25.227.36
> 
> I'm happy that your postfix is temporarily fixed, but I hope you
> reconsider running named to do it.  It sounds like you're having DNS
> resolution problems with your provider.  The commands I sent in my
> previous mail should give a better idea of the problem.  Ideally,
> tcpdumps should be gathered to see what is causing the delays. 
> Something like "tcpdump -ni eth0 port 53" should be very revealing.
> 

Ok. Your message came just a few seconds after I responded. I want to
try the commands you suggested. Should I just type time host yahoo.com
etc. at the command line? (Hey, why don't I just try it and find out?)
Ok. It hangs, but upon pressing ctrl-c, I get:

[EMAIL PROTECTED] ~]$ time host yahoo.com 24.25.227.32

real    0m5.123s
user    0m0.010s
sys     0m0.000s

But! The following did not hang, and returned the following immediately.

[EMAIL PROTECTED] ~]$ time host yahoo.com 24.25.227.34
Using domain server:
Name: 24.25.227.34
Address: 24.25.227.34#53
Aliases: 

yahoo.com has address 66.218.71.198

real    0m0.027s
user    0m0.010s
sys     0m0.000s

And...

[EMAIL PROTECTED] ~]$ time host yahoo.com 24.25.227.36
Using domain server:
Name: 24.25.227.36
Address: 24.25.227.36#53
Aliases: 

yahoo.com has address 66.218.71.198

real    0m0.100s
user    0m0.010s
sys     0m0.000s


(By the way, I don't think it has anything to do with my provider,
because the other box I've got is a dual-boot running Windows (for my
wife, for my wife), and it isn't experiencing any slowdown, although it
did for only one day, the first day that my linux box started
experiencing the slowdown.)

Ok, and here is the output from tcpdump.

[EMAIL PROTECTED] ~]# tcpdump -ni eth0 port 53
tcpdump: listening on eth0
13:51:17.331399 192.168.1.100.33681 > 24.25.227.32.domain:  21775+ AAAA?
mail.adlerpacific.com. (39) (DF)
13:51:22.341077 192.168.1.100.33682 > 24.25.227.34.domain:  21775+ AAAA?
mail.adlerpacific.com. (39) (DF)
13:51:22.604839 24.25.227.34.domain > 192.168.1.100.33682:  21775 0/0/0
(39)
13:51:22.605078 192.168.1.100.33682 > 24.25.227.32.domain:  21776+ AAAA?
mail.adlerpacific.com.hawaii.rr.com. (53) (DF)
13:51:27.611047 192.168.1.100.33683 > 24.25.227.34.domain:  21776+ AAAA?
mail.adlerpacific.com.hawaii.rr.com. (53) (DF)
13:51:27.942323 24.25.227.34.domain > 192.168.1.100.33683:  21776
NXDomain* 0/1/0 (111)
13:51:27.942556 192.168.1.100.33683 > 24.25.227.32.domain:  21777+ A?
mail.adlerpacific.com. (39) (DF)
13:51:32.951065 192.168.1.100.33684 > 24.25.227.34.domain:  21777+ A?
mail.adlerpacific.com. (39) (DF)
13:51:33.003947 24.25.227.34.domain > 192.168.1.100.33684:  21777 1/2/2
A[|domain]
13:51:36.361209 192.168.1.100.33684 > 24.25.227.32.domain:  21778+ AAAA?
mail.adlerpacific.com. (39) (DF)
13:51:41.371081 192.168.1.100.33685 > 24.25.227.34.domain:  21778+ AAAA?
mail.adlerpacific.com. (39) (DF)
13:51:41.659254 24.25.227.34.domain > 192.168.1.100.33685:  21778 0/0/0
(39)
13:51:41.659504 192.168.1.100.33685 > 24.25.227.32.domain:  21779+ AAAA?
mail.adlerpacific.com.hawaii.rr.com. (53) (DF)
13:51:46.661070 192.168.1.100.33686 > 24.25.227.34.domain:  21779+ AAAA?
mail.adlerpacific.com.hawaii.rr.com. (53) (DF)
13:51:46.917129 24.25.227.34.domain > 192.168.1.100.33686:  21779
NXDomain* 0/1/0 (111)
13:51:46.917365 192.168.1.100.33686 > 24.25.227.32.domain:  21780+ A?
mail.adlerpacific.com. (39) (DF)
13:51:51.921080 192.168.1.100.33687 > 24.25.227.34.domain:  21780+ A?
mail.adlerpacific.com. (39) (DF)
13:51:51.989282 24.25.227.34.domain > 192.168.1.100.33687:  21780 1/2/2
A[|domain]

18 packets received by filter
0 packets dropped by kernel

I just ctrl-c'ed it after it paused for a while.

I hope that's as revealing as you hoped,
-- 
Marc Adler


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to