dns-stats-users

Download

dns-stats-users@icann.org

February 2022

2 participants
2 discussions

DNS-STATS Compactor 1.2.1-rc2 release
by Sara Dickinson Feb. 21, 2022

Feb. 21, 2022

Hi all, We are pleased to announce the release of DNS-STATS Compactor version 1.2.1-rc2. Updates in 1.2.1-rc2 since 1.2.1-rc1 * The behaviour of `compactor` is changed when an interrupt (SIGINT, SIGTERM) is received e.g. when the service is restarted or a user enters ^C. Previously all of the in progress C-DNS compression was aborted and all of the in progress output files (compressed and uncompressed) were removed. Now the `.raw` uncompressed output file is left on disk so it can be manually recovered (i.e. renamed and compressed). Users will now need to choose how to managed these uncompressed files. Behaviour on SIGHUP (re-reading of config file without affecting any in progress compression) is unchanged. * Additional default logging is added of the specific signal received by `compactor`, when file rotation occurs and when compression is aborted. * New `log-file-handing` option to log low level details of file processing on file rotation and compression. This aids with debugging of file processing problems and measurement of C-DNS file compression times. * Text added in the documentation to clarify time patterns are needed in file output patterns for filename based file rotation to occur (based on the `rotation-period` option). * Fix a bug relating to `compactor` start_time handling introduced in rc1. Updates in 1.2.1-rc1 since 1.2.1-beta2 * Modify the format output by the debug option `--debug-qr` to be more human readable (`--debug-dns` output is left unchanged). * Fix 2 minor bugs where an incorrect start time could be written to the CDNS file, resulting in a negative file duration. * Documentation: correct the dependency list. * Fix build issue when using `configure --disable-pseudo-anonymisation`. Thanks Sean Burford for reporting this. * Add example docker image as a submodule in `contrib/dns-stats-docker`. Thanks to Sean Burford for providing this. Updates in 1.2.1-beta2 since 1.2.1-beta1: * Bump the private version because schema extended with new stats. * Add new stats to C-DNS: sniffer drops, matcher drops and sampling discards, and 3 libpcap stats. The libpcap stats should not be considered reliable and provided for information only. * Fix file durations for files with more than one C-DNS block in them so high traffic rates can be correctly calculated from the statistics. * Constrain size of matcher queue to reduce memory consumption when dropping/sampling. * Add `-D` option (--relaxed-mode). With this option a warning (not an error) is issued for unrecognized command line and config file options. Updates in 1.2.1-beta1 since 1.2.0: * Change behaviour of internal sniffer channel when overloaded to better report and manage dropping/sampling of packets * This fixes a bug where the 'Total Packets processed' statistic did not include any packets dropped during overload * Improve `log-interval` statistics and packet drop logging * EXPERIMENTAL: New sampling mode option (disabled by default) * sampling can be enabled at a specified rate for a specified time when packet drops exceed a specified threshold (see config options) *Please note the change of PPA - Bionic packages are available for this release* For more information, please see the project wiki: https://github.com/dns-stats/compactor/wiki. Packages available from: ppa:dns-stats/compactor-unstable-bionic Source code available at: https://github.com/dns-stats/compactor Documentation: https://github.com/dns-stats/compactor/wiki/user-guide-1.2.1-rc2.pdf Sara.

1 0

accept / ignore-rr-type options,
by Thib D Feb. 10, 2022

Feb. 10, 2022

Hello, I am having trouble understanding what these options are accomplishing and how to use them to only capture outgoing AXFR queries Shouldn't either one of these do the job ? accept-rr-types=AXFR or ignore-rr-type=<rrtype> for each rrtype? After using inspector to display all of the logged queries in the cdns file, I am still able to see every other query of any rrtype. What am I using wrong here ? Regards, Thibaud

2 1