any idea what this is?

[Ron Wickersham]

hi Jake,

you're seeing domain services (DNS packets) note port 53 on UDP looking
at ns1.sonic.net for some name resolution.    

what's in /etc/resolv.conf?     are u running bind?  if so, what's in
named.boot or named.conf (if a later version)?     

i'm not sure this is really a problem, unless it's consuming way too
much bandwidth.

-ron

On Mon, 12 Nov 2001, Jake wrote:

> /var/log/messages is filled with this:
> 
> Nov 12 22:28:52 invictus kernel: IN=eth0 OUT=eth0 SRC=192.168.254.50
> DST=208.201.224.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=65437 DF PROTO=UDP
> SPT=1024 DPT=53 LEN=40
> Nov 12 22:28:57 invictus kernel: IN=eth0 OUT=eth0 SRC=192.168.254.50
> DST=208.201.224.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=65438 DF PROTO=UDP
> SPT=1024 DPT=53 LEN=40
> Nov 12 22:28:57 invictus kernel: IN=eth0 OUT=eth0 SRC=192.168.254.50
> DST=208.201.224.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=65438 DF PROTO=UDP
> SPT=1024 DPT=53 LEN=40
> Nov 12 22:29:02 invictus kernel: IN=eth0 OUT=eth0 SRC=192.168.254.50
> DST=208.201.224.11 LEN=72 TOS=0x00 PREC=0x00 TTL=63 ID=903 DF PROTO=UDP
> SPT=1024 DPT=53 LEN=52
> 
> It happens for all my network devices and if i bring them down (on the
> client side) they seem to work again for a while. Then they have this
> problem again.
> 
> Anyone have any ideas whats happening?
> 
> This is a box doing NAT for my network eth0 is the dsl and eth1 and eth2 are
> the clients side.
> 
> I should also mention that when trying to transfer a file with sftp to the
> server I get 0.69Mb (according to this running on the box
> http://216.210.171.162/stats/bandwidth/index.php)
> 
> Then it kicks me out of the server (if I have a shell account open on the
> remote machine i am transfering from)
> 
> I have no idea what would cause this.
> 
> Any ideas?
> 
> -
> Jake
> 
> 
> 
>