[evla-sw-discuss] Deranged name lookups

[Boyd Waters]

Could it be someone behind SDC?



On May 24, 2006, at 4:10 PM, James Robnett wrote:

>
>    We're seeing about 11,000 DNS lookups per hour coming from one
> of Qwests name servers for evla-mib address/host pairs.    Since
> these are on a private network the best guess is somebody is looking
> at the data from home and converting hostnames to IP's (the inverse
> won't work since 10.x.y.z doesn't map to the NRAO from the outside
> worlds view).
>
>    Any idea why somebody (probably in Albuquerque) needs to
> do addr/host pair matching ?
>
>    If I had to guess I'd say somebody in Albuquerque has some big
> chunk of EVLA archive on a laptop and are trying to do hostname
> to ip conversion.
>
>    We really need to either get comfortable working with IP addresses
> or load the IP addr/hostname pairs into software.   Handling 10's of
> thousands of DNS lookups/hour * more antennas * more employees
> isn't going to scale real well .... well it would I guess but it just
> seems like a waste.
>
> James
> ps:  If nothing else it's forcing our logs to rotate by size several
> times a day.
>
> _______________________________________________
> evla-sw-discuss mailing list
> evla-sw-discuss at listmgr.cv.nrao.edu
> http://listmgr.cv.nrao.edu/mailman/listinfo/evla-sw-discuss

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2361 bytes
Desc: not available
URL: <http://listmgr.nrao.edu/pipermail/evla-sw-discuss/attachments/20060524/1f71ec32/attachment.p7s>