named using 50% of server resources

RaQ4 with 512Mb ram

Hi,

This problem started about 4 days ago. The problem is that named is using half of the server resources!! I can't figure out why...

Here is the latest:
named 31500 49.4 26.7 140952 138296 ? S 07:11 97:24 named -u named

Using 50% of the CPU and 30% of memory. It is consistantly doing this, it never releases any resources!! And a restart of named, and a server reboot didn't fix it. The server is a Sun Cobalt RaQ4 with 512Mb ram.

And it is constantly filling up our /var/log/messages log file with lines like this:

Jul 31 10:30:49 ns3 named[31500]: Lame server on 'fabmaster.com' (in 'fabmaster.com'?): [142.167.5.5].53 'ns1.prexar.com'
Jul 31 10:30:49 ns3 named[31500]: Lame server on 'fabmaster.com' (in 'fabmaster.com'?): [142.167.5.67].53 'ns2.prexar.com'
Jul 31 10:30:50 ns3 named[31500]: Lame server on 'fmc.ne.jp' (in 'fmc.ne.jp'?): [210.238.212.3].53 'ns3.japan-net.ne.jp'
Jul 31 10:30:50 ns3 named[31500]: Lame server on 'flyingbaby.com' (in 'flyingbaby.com'?): [65.125.225.170].53 'ns9.hostony.com'
Jul 31 10:30:50 ns3 named[31500]: Lame server on 'flyingbaby.com' (in 'flyingbaby.com'?): [216.180.242.186].53 'ns8.hostony.com'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'albacore.ffa.int' (in 'ffa.int'?): [147.28.0.39].53 'rip.psg.com'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'foniks.com' (in 'foniks.com'?): [216.157.79.246].53 'ns2.web2010.com'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'smtp.3va.net' (in '3va.net'?): [65.214.160.201].53 'ns1.3va.net'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'foniks.com' (in 'foniks.com'?): [216.157.47.6].53 'ns3.web2010.com'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'foniks.com' (in 'foniks.com'?): [216.65.3.100].53 'ns.web2010.com'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'fginet.net' (in 'fginet.net'?): [65.168.106.2].53 'ns2.warpnet.net'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'foniks.com' (in 'foniks.com'?): [216.157.55.6].53 'ns4.web2010.com'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'flip.com' (in 'flip.com'?): [198.6.1.83].53 'auth03.ns.uu.net'
Jul 31 10:30:51 ns3 named[31500]: Lame server on 'fginet.net' (in 'fginet.net'?): [65.168.106.1].53 'ns1.warpnet.net'
Jul 31 10:30:52 ns3 named[31500]: Lame server on 'eyecatcher.com' (in 'eyecatcher.com'?): [207.218.223.162].53 'ns2.rackshack.net'
Jul 31 10:30:52 ns3 named[31500]: Lame server on 'fadadesign.com' (in 'fadadesign.com'?): [207.69.188.200].53 'speakeasy.eart*****.net'
Jul 31 10:30:52 ns3 named[31500]: "fly.net IN MX" points to a CNAME (noc.not.org)
Jul 31 10:30:52 ns3 named[31500]: Lame server on 'fadadesign.com' (in 'fadadesign.com'?): [207.69.188.202].53 'rumor.eart*****.net'
Jul 31 10:30:52 ns3 named[31500]: "bahiatours.com IN MX" points to a CNAME (mail.bahiatours.com)
Jul 31 10:30:53 ns3 named[31500]: Lame server on 'fadadesign.com' (in 'fadadesign.com'?): [207.69.188.201].53 'hearsay.eart*****.net'
Jul 31 10:30:53 ns3 named[31500]: Lame server on 'ns1.speedhosts.co.uk' (in 'speedhosts.co.uk'?): [194.73.73.95].53 'dns1.btinternet.com'
Jul 31 10:30:53 ns3 named[31500]: bad referral (. !< flibberteygibbit.com) from [63.151.147.2].53
Jul 31 10:30:53 ns3 named[31500]: Lame server on 'ferco.cl' (in 'ferco.cl'?): [216.241.9.121].53 'ns.netup.cl'
Jul 31 10:30:53 ns3 named[31500]: "cyber-west.com IN MX" points to a CNAME (mail2.fiber.net)
Jul 31 10:30:53 ns3 named[31500]: Lame server on 'fliss.com' (in 'fliss.com'?): [195.188.8.68].53 'dns0.realise.com'
Jul 31 10:30:54 ns3 named[31500]: Lame server on 'fliss.com' (in 'fliss.com'?): [195.188.8.90].53 'dns1.realise.com'
Jul 31 10:30:54 ns3 named[31500]: Lame server on 'flsa.fls.dk' (in 'flsa.fls.dk'?): [192.92.224.121].53 'ns.data.fls.dk'
Jul 31 10:30:54 ns3 named[31500]: Lame server on 'flsa.fls.dk' (in 'flsa.fls.dk'?): [194.255.56.69].53 'dns101.telia.com'
Jul 31 10:30:54 ns3 named[31500]: Lame server on 'fortunecity.com' (in 'fortunecity.com'?): [216.27.95.7].53 'ns-2.ampira.com'
Jul 31 10:30:55 ns3 named[31500]: bad referral (. !< finmar.com) from [208.62.23.141].53

Any help would be appreciated!!

Thanks!

 

 

 

 

Top