DNS Resolver (Unbound) startet und stoppt ständig
-
Hallo!
Ich nutze den DNS Resolver mit ziemlichen Standardsettings und alles läuft soweit auch. Doch in den Logs tauchen ständig Meldungen auf dass Unbound stoppt und wieder startet. Normal?
Jun 11 16:40:40 unbound 63269:0 info: lower(secs) upper(secs) recursions Jun 11 16:40:40 unbound 63269:0 info: [25%]=0.016288 median[50%]=0.0326163 [75%]=0.105366 Jun 11 16:40:40 unbound 63269:0 info: histogram of recursion processing times Jun 11 16:40:40 unbound 63269:0 info: average recursion processing time 3.818630 sec Jun 11 16:40:40 unbound 63269:0 info: server stats for thread 0: requestlist max 42 avg 4.0954 exceeded 0 jostled 0 Jun 11 16:40:40 unbound 63269:0 info: server stats for thread 0: 984 queries, 122 answers from cache, 862 recursions, 8 prefetch, 0 rejected by ip ratelimiting Jun 11 16:40:40 unbound 63269:0 info: service stopped (unbound 1.6.8). Jun 11 15:50:03 unbound 63269:0 info: start of service (unbound 1.6.8). Jun 11 15:50:03 unbound 63269:0 notice: init module 1: iterator Jun 11 15:50:03 unbound 63269:0 notice: init module 0: validator Jun 11 15:50:03 unbound 63269:0 notice: Restart of unbound 1.6.8. Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:03 unbound 63269:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:03 unbound 63269:0 info: service stopped (unbound 1.6.8). Jun 11 15:50:03 unbound 63269:0 info: start of service (unbound 1.6.8). Jun 11 15:50:03 unbound 63269:0 notice: init module 1: iterator Jun 11 15:50:03 unbound 63269:0 notice: init module 0: validator Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:01 unbound 39769:0 info: 0.131072 0.262144 1 Jun 11 15:50:01 unbound 39769:0 info: lower(secs) upper(secs) recursions Jun 11 15:50:01 unbound 39769:0 info: [25%]=0 median[50%]=0 [75%]=0 Jun 11 15:50:01 unbound 39769:0 info: histogram of recursion processing times Jun 11 15:50:01 unbound 39769:0 info: average recursion processing time 0.140867 sec Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 1: 1 queries, 0 answers from cache, 1 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:01 unbound 39769:0 info: 0.016384 0.032768 1 Jun 11 15:50:01 unbound 39769:0 info: 0.008192 0.016384 1 Jun 11 15:50:01 unbound 39769:0 info: lower(secs) upper(secs) recursions Jun 11 15:50:01 unbound 39769:0 info: [25%]=0 median[50%]=0 [75%]=0 Jun 11 15:50:01 unbound 39769:0 info: histogram of recursion processing times Jun 11 15:50:01 unbound 39769:0 info: average recursion processing time 0.018267 sec Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:01 unbound 39769:0 info: server stats for thread 0: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:01 unbound 39769:0 info: service stopped (unbound 1.6.8). Jun 11 15:50:00 unbound 39769:0 info: start of service (unbound 1.6.8). Jun 11 15:50:00 unbound 39769:0 notice: init module 1: iterator Jun 11 15:50:00 unbound 39769:0 notice: init module 0: validator Jun 11 15:50:00 unbound 39769:0 notice: Restart of unbound 1.6.8. Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:50:00 unbound 39769:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:50:00 unbound 39769:0 info: service stopped (unbound 1.6.8). Jun 11 15:50:00 unbound 39769:0 info: start of service (unbound 1.6.8). Jun 11 15:50:00 unbound 39769:0 notice: init module 1: iterator Jun 11 15:50:00 unbound 39769:0 notice: init module 0: validator Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:57 unbound 10152:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:57 unbound 10152:0 info: service stopped (unbound 1.6.8). Jun 11 15:49:56 unbound 10152:0 info: start of service (unbound 1.6.8). Jun 11 15:49:56 unbound 10152:0 notice: init module 1: iterator Jun 11 15:49:56 unbound 10152:0 notice: init module 0: validator Jun 11 15:49:56 unbound 10152:0 notice: Restart of unbound 1.6.8. Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:56 unbound 10152:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:56 unbound 10152:0 info: service stopped (unbound 1.6.8). Jun 11 15:49:56 unbound 10152:0 info: start of service (unbound 1.6.8). Jun 11 15:49:56 unbound 10152:0 notice: init module 1: iterator Jun 11 15:49:56 unbound 10152:0 notice: init module 0: validator Jun 11 15:49:54 unbound 65489:0 info: 0.032768 0.065536 1 Jun 11 15:49:54 unbound 65489:0 info: 0.000000 0.000001 1 Jun 11 15:49:54 unbound 65489:0 info: lower(secs) upper(secs) recursions Jun 11 15:49:54 unbound 65489:0 info: [25%]=0 median[50%]=0 [75%]=0 Jun 11 15:49:54 unbound 65489:0 info: histogram of recursion processing times Jun 11 15:49:54 unbound 65489:0 info: average recursion processing time 0.026520 sec Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 3: requestlist max 19 avg 13 exceeded 0 jostled 0 Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 3: 7 queries, 2 answers from cache, 5 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:54 unbound 65489:0 info: 16.000000 32.000000 8 Jun 11 15:49:54 unbound 65489:0 info: 8.000000 16.000000 1 Jun 11 15:49:54 unbound 65489:0 info: 4.000000 8.000000 2 Jun 11 15:49:54 unbound 65489:0 info: lower(secs) upper(secs) recursions Jun 11 15:49:54 unbound 65489:0 info: [25%]=14 median[50%]=21 [75%]=26.5 Jun 11 15:49:54 unbound 65489:0 info: histogram of recursion processing times Jun 11 15:49:54 unbound 65489:0 info: average recursion processing time 18.434097 sec Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 2: requestlist max 33 avg 18.4762 exceeded 0 jostled 0 Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 2: 23 queries, 2 answers from cache, 21 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:54 unbound 65489:0 info: 16.000000 32.000000 1 Jun 11 15:49:54 unbound 65489:0 info: 4.000000 8.000000 1 Jun 11 15:49:54 unbound 65489:0 info: lower(secs) upper(secs) recursions Jun 11 15:49:54 unbound 65489:0 info: [25%]=0 median[50%]=0 [75%]=0 Jun 11 15:49:54 unbound 65489:0 info: histogram of recursion processing times Jun 11 15:49:54 unbound 65489:0 info: average recursion processing time 16.296249 sec Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 1: requestlist max 8 avg 4 exceeded 0 jostled 0 Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 1: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:54 unbound 65489:0 info: 8.000000 16.000000 2 Jun 11 15:49:54 unbound 65489:0 info: 2.000000 4.000000 2 Jun 11 15:49:54 unbound 65489:0 info: 1.000000 2.000000 1 Jun 11 15:49:54 unbound 65489:0 info: 0.016384 0.032768 1 Jun 11 15:49:54 unbound 65489:0 info: lower(secs) upper(secs) recursions Jun 11 15:49:54 unbound 65489:0 info: [25%]=1.5 median[50%]=3 [75%]=10 Jun 11 15:49:54 unbound 65489:0 info: histogram of recursion processing times Jun 11 15:49:54 unbound 65489:0 info: average recursion processing time 5.421695 sec Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 0: requestlist max 33 avg 19.1429 exceeded 0 jostled 0 Jun 11 15:49:54 unbound 65489:0 info: server stats for thread 0: 25 queries, 4 answers from cache, 21 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:54 unbound 65489:0 info: service stopped (unbound 1.6.8). Jun 11 15:49:02 unbound 65489:0 info: start of service (unbound 1.6.8). Jun 11 15:49:02 unbound 65489:0 notice: init module 1: iterator Jun 11 15:49:02 unbound 65489:0 notice: init module 0: validator Jun 11 15:49:02 unbound 65489:0 notice: Restart of unbound 1.6.8. Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:02 unbound 65489:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:02 unbound 65489:0 info: service stopped (unbound 1.6.8). Jun 11 15:49:02 unbound 65489:0 info: start of service (unbound 1.6.8). Jun 11 15:49:02 unbound 65489:0 notice: init module 1: iterator Jun 11 15:49:02 unbound 65489:0 notice: init module 0: validator Jun 11 15:49:02 unbound 65489:0 notice: Restart of unbound 1.6.8. Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 2: requestlist max 3 avg 1.5 exceeded 0 jostled 0 Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 2: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:01 unbound 65489:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:01 unbound 65489:0 info: service stopped (unbound 1.6.8). Jun 11 15:49:01 unbound 65489:0 info: start of service (unbound 1.6.8). Jun 11 15:49:00 unbound 65489:0 notice: init module 1: iterator Jun 11 15:49:00 unbound 65489:0 notice: init module 0: validator Jun 11 15:49:00 unbound 65489:0 notice: Restart of unbound 1.6.8. Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:49:00 unbound 65489:0 info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:49:00 unbound 65489:0 info: service stopped (unbound 1.6.8). Jun 11 15:49:00 unbound 65489:0 info: start of service (unbound 1.6.8). Jun 11 15:49:00 unbound 65489:0 notice: init module 1: iterator Jun 11 15:49:00 unbound 65489:0 notice: init module 0: validator Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 3: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 3: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 2: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 2: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 1: requestlist max 0 avg 0 exceeded 0 jostled 0 Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 1: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 0: requestlist max 2 avg 1 exceeded 0 jostled 0 Jun 11 15:48:54 unbound 26104:0 info: server stats for thread 0: 2 queries, 0 answers from cache, 2 recursions, 0 prefetch, 0 rejected by ip ratelimiting Jun 11 15:48:54 unbound 26104:0 info: service stopped (unbound 1.6.8). Jun 11 15:48:53 unbound 26104:0 info: start of service (unbound 1.6.8). Jun 11 15:48:53 unbound 26104:0 notice: init module 1: iterator Jun 11 15:48:53 unbound 26104:0 notice: init module 0: validator Jun 11 15:48:53 unbound 26104:0 notice: Restart of unbound 1.6.8.
-
Mal mit dem General Syslog vergleichen ob da am Interface ständig was getriggert wird. Wenn er alle zu den Zeitpunkten jedes Mal ein GW Failure, neue IP etc. feststellt wird natürlich auch der DNS neu gestartet.
-
Nö, eigentlich nicht. Das waren die letzten Meldungen:
Jun 11 15:50:38 ntopng [HTTPserver.cpp:904] ERROR: Unable to start HTTP server (IPv4) on ports 3000s Jun 11 15:50:38 ntopng [mongoose.c:4527] ERROR: set_ports_option: cannot bind to 3000s: Address already in use Jun 11 15:50:38 snmpd 77988 SIOCGIFDESCR (usbus1): Device not configured Jun 11 15:50:38 snmpd 77988 SIOCGIFDESCR (usbus0): Device not configured
-
Mir fällt gerade auf, dass das immer exakt jede Stunde passiert, dazwischen ist nichts.
-
Nutzt du so was wie pfblockerng? Wie ist das das Update Intervall?
-
Nein, gar nichts in die art. Lediglich Suricata. Aber das war auch schon bevor Suricata aktiv war.
-
Evtl. schon in die Crontab geschaut was da getriggert wird?
-
Wo genau findet ich das? Unter Cron habe ich kein Eintrag bzgl. des Resolvers.
-
Kann es sein, dass Du den DHCP Server aktiviert hast und dort die Registrierung der DNS Namen im Unbound aktiviert hast?
-
Ja, habe ich.
-
Das sorgt für den Neustart.
Bei jeder Lease-Vergabe wird unbound restartet. Stell die Lease Time hoch oder deaktiviere es und pflege die Clients bzw Server IPs als static IPs im DHCP.