[Noisebridge-discuss] WiFi down again last night.

[Jonathan Lassoff]

Yeah... so something is horked with the dnsmasq instance on Minotaur. I
think it's gone braindead.
It's firing off queries to refresh a root hints cache against its upstream
resolvers, only it's doing so in a tight-ish (snug?) loop.

This capture ran for ~10 seconds:

`--> sudo tshark -ni eth0 -q -z conv,ip ip src 75.101.62.92 and udp port 53
or tcp port 53
Running as user "root" and group "root". This could be dangerous.
Capturing on eth0
^C2985 packets dropped
15706 packets captured
================================================================================
IPv4 Conversations
Filter:<No Filter>
                                               |       <-      | |       ->
     | |     Total     |
                                               | Frames  Bytes | | Frames
 Bytes | | Frames  Bytes |
75.101.62.92         <-> 4.2.2.2                    0         0    7748
 542360    7748    542360
75.101.62.92         <-> 8.8.8.8                    0         0    7616
 533120    7616    533120
77.98.80.86          <-> 75.101.62.92             342    516344       0
    0     342    516344
================================================================================



I'm going to restart dnsmasq and setup resolver paths that take both
Monkeybrains and Sonic.net.
However, I think we really ought to replace it with BIND or a more heavily
battle-tested recurser. It's just too bad that nothing reads in shim
entries in /etc/hosts as well as dnsmasq does.

Cheers,
jof

On Thu, Oct 4, 2012 at 11:02 AM, Jonathan Lassoff <jof at thejof.com> wrote:

> Whoa.
> Whatever started on the Sonic.net line last weekend is causing some minor
> congestion pretty regularly:
>
> [image: Inline image 1]
>
>
> On Thu, Oct 4, 2012 at 10:53 AM, Jonathan Lassoff <jof at thejof.com> wrote:
>
>> The bits, they are a' flowin'
>>
>> Monkeybrains:
>> [image: Inline image 1]
>>
>> Sonic.net:
>>
>> [image: Inline image 2]
>>
>>
>> Strangely, something caused a failover onto Sonic.net, or there's a lot
>> more traffic flowing as of last Saturday:
>>
>> [image: Inline image 3]
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20121004/6c9739ac/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 62817 bytes
Desc: not available
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20121004/6c9739ac/attachment-0012.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 110849 bytes
Desc: not available
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20121004/6c9739ac/attachment-0013.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 148647 bytes
Desc: not available
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20121004/6c9739ac/attachment-0014.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 178239 bytes
Desc: not available
URL: <http://lists.noisebridge.net/pipermail/noisebridge-discuss/attachments/20121004/6c9739ac/attachment-0015.png>