[dnsdist] greqp - how to read?

[bert hubert]

On Thu, Jul 14, 2016 at 11:00:45AM +0200, Bit World Computing - Michael Mertel wrote:
> > If you see only this, I think it did not get forwarded.
> greqp returns thousands of lines like this, and every once in a while the line with the answers from 8.8.8.8 or 8.8.4.4.

This is probably because of the cache you use. I think answers from the
cache don't show up in grepq, but not entirely sure.

Can you test without the cache?

> > dumpStats()
> acl-drops              	          0    latency0-1             	      45246
> block-filter           	          0    latency1-10            	         19
> cache-hits             	      45244    latency10-50           	       3448
> cache-misses           	       4084    latency100-1000        	        277
> cpu-sys-msec           	      32576    latency50-100          	        321
> cpu-user-msec          	      53264    no-policy              	          4
> downstream-send-errors 	          0    noncompliant-queries   	          0
> downstream-timeouts    	          8    noncompliant-responses 	          0
> dyn-block-nmg-size     	          0    queries                	      49349
> dyn-blocked            	          0    rdqueries              	      49349
> empty-queries          	          0    real-memory-usage      	   16490496
> fd-usage               	         16    responses              	       4093
> latency-avg100         	       5115.7  rule-drop              	          0
> latency-avg1000        	       4865.1  rule-nxdomain          	          0
> latency-avg10000       	       5421.1  self-answered          	          0
> latency-avg1000000     	        210.5  servfail-responses     	          4
> latency-slow           	         26    trunc-failures         	          0
>                                       uptime                 	      90925

Almost all answers are coming from the cache, so that would match with them
not showing up in grepq most of the time.

What is the output of "dig kas-av-updates.mailfrontier.net
@your-dnsdist-ip"?

	Bert


> 
> > Thanks!
> > 
> > Note that 8.8.4.4 might be rate limiting you, it does that..
> > 
> > 	Bert
> > 
> 
> >> -41.5   192.168.44.3:40450                                           45885 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -41.0   192.168.44.3:35357                                           28157 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -40.2   192.168.44.3:37069                                           56087 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -39.7   192.168.44.3:46550                                           18199 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -38.9   192.168.44.3:43979                                           28665 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -38.0   192.168.44.3:40127                                           49118 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -38.0   192.168.44.3:40127                              8.8.4.4:53   49118 kas-av-updates.mailfrontier.net. A     25.1      RD    No Error. 2 answers
> >> -37.6   192.168.44.3:54373                                           15793 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -36.8   192.168.44.3:50603                                           20839 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -35.8   192.168.44.3:59500                                           35732 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -35.1   192.168.44.3:58254                                           9095  kas-av-updates.mailfrontier.net. A               RD    Question
> >> -34.3   192.168.44.3:51857                                           43880 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -33.8   192.168.44.3:44658                                           52531 kas-av-updates.mailfrontier.net. A               RD    Question
> >> -33.4   192.168.44.3:52281                                           9542  kas-av-updates.mailfrontier.net. A               RD    Question
> >> -32.9   192.168.44.3:59384                                           46892 kas-av-updates.mailfrontier.net. A               RD    Question
> >> 
> >> 
> >> The machine with the dnsdist installed resolves kas-av-updates.mailfrontier.net just fine.
> >> 
> >> I wasn’t able to find any RCODE=2 or RCODE=3 responses for that specific dns name.
> >> 
> >> Help highly appreciated.
> >> 
> >> —Michael
> > 
> > 
> > 
> >> _______________________________________________
> >> dnsdist mailing list
> >> dnsdist at mailman.powerdns.com
> >> https://mailman.powerdns.com/mailman/listinfo/dnsdist
> 
> —Michael
> 



> _______________________________________________
> dnsdist mailing list
> dnsdist at mailman.powerdns.com
> https://mailman.powerdns.com/mailman/listinfo/dnsdist