[c-nsp] Cisco 1811 DNS Server overload

[John Kougoulos]

Hello,

I had a similar situation on a 1812 running 12.4(11)T with dns spoofing 
enabled and while I was searching at the release notes I saw that a lot 
of new functionalities where added in the DNS process on 12.4(11)T. eg. 
dns views. I disabled spoofing, downgraded to 12.6T6 and everything 
looks normal.

I think I had seen also a few bugs in the bugtool about the DNS process.
look for example: CSCsg64586

--koug

Skeeve Stevens wrote:
> Can you please tell me if there is a specific reason/bug for this?
> 
> The router was running 12.4(6)Tyy and was still doing this, before I
> upgraded it to 12.4(11)Txx to try to fix it.
> 
> ...Skeeve
> 
> -----Original Message-----
> From: John Kougoulos [mailto:koug at intracom.gr] 
> Sent: Tuesday, 17 April 2007 2:19 AM
> To: skeeve at skeeve.org
> Cc: 'Cisco-nsp'
> Subject: Re: [c-nsp] Cisco 1811 DNS Server overload
> 
> also if you are using 12.4(11)Txx, consider moving back to 12.4(6)Tyy.
> 
> 
> Skeeve Stevens wrote:
>> I have an 1811 temporarily doing NAT for about 200 clients and at the
> moment
>> and while it generally is working ok, the DNS facility of the router is
>> freaking out.
>>
>> Some show logging:
>>
>> *Apr 16 11:55:53.425: %SYS-3-CPUHOG: Task is running for (2000)msecs, more
>> than (2000)msecs (13/0),process = DNS Server.
>> -Traceback= 0x8099C694 0x80AB26B0 0x80AB5DB0 0x80AB6834 0x80AB7ACC
>> 0x800D7ACC 0x800DB410 
>> *Apr 16 11:59:59.721: %SYS-3-CPUHOG: Task is running for (2000)msecs, more
>> than (2000)msecs (30/0),process = DNS Server.
>> -Traceback= 0x822F21DC 0x8099C78C 0x80AB6508 0x80AB7ACC 0x800D7ACC
>> 0x800DB410
>>
>> And yesterday it crashed:
>>
>> Router uptime is 1 day, 2 hours, 42 minutes
>> System returned to ROM by error - an Illegal Opcode exception, PC
> 0x83B1A8E4
>> at 20:17:29 AEST Sun Apr 15 2007
>>
>> I would like to actually stop the 1811 caching DNS queries but I can't
>> figure out how to.  I would just prefer it relay every request or some
> other
>> solutions perhaps that could be suggested here. This would at least keep
> the
>> router up and running.
>>
>> Any help would be muchly appreciated.
>>
>> .Skeeve
>>
>>
>> _______________________________________________________
>> Skeeve Stevens, RHCE     Email: skeeve at skeeve.org
>> Website: www.skeeve.org  - Telephone: (0414) 753 383
>> skype://skeeve
>> Address: P.O Box 1035, Epping, NSW, 1710, Australia
>>
>> eIntellego - skeeve at eintellego.net - www.eintellego.net
>> _______________________________________________________
>> I'm a groove licked love child king of the verse
>> Si vis pacem, para bellum
>>
>>
>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/