[dns-operations] 回复: Re: All requests are logged by BIND?

Mike Hoskins (michoski) michoski at cisco.com
Fri Jan 25 20:05:56 UTC 2013

Well if you believe Google, you're comparing Quincy Public Schools and
Portland Public Schools, which have different lunch menus, job openings,

Sorry, needed to lighten up my day a bit...  8^P

Queries Per Second vs Packets Per Second...obviously PPS should be much

You should be able to determine what your rrd is actually storing -- all
packets or just DNS queries.  Either is possible, it depends how you've
set it up.  If you don't control the rrd/cacti/whatever config, you might
be able to tell by just looking at the units on the graph.

-----Original Message-----

From: Liu Mingxing <lmxhappy at gmail.com>
Reply-To: lmxhappy <lmxhappy at gmail.com>
Date: Friday, January 25, 2013 2:54 PM
To: Matthew Ghali <mghali at snark.net>
Cc: "dns-operations at lists.dns-oarc.net" <dns-operations at lists.dns-oarc.net>
Subject: [dns-operations] 回复: Re:  All requests are logged by BIND?

>what difference is there between them?which one is bigger?
>Liu Mingxing
>发件人: Matthew Ghali <mailto:mghali at snark.net>
>发送时间: 2013-01-26 03:33
>收件人: lmxhappy <mailto:lmxhappy at gmail.com>
>抄送: dns-operations at lists.dns-oarc.net
>主题: Re: [dns-operations] All requests are logged by BIND?
>I'm pretty sure you are comparing qps to pps and being surprised that
>there is not a 1:1 relationship.
>On Jan 25, 2013, at 11:11 AM, Liu Mingxing <lmxhappy at gmail.com> wrote:
>By a
> rrdtool, I found that DNS traffic of router before an authoritative
>nameserver is larger than those seen from querylog. For example, cacti
>tells us qps is 2k while querylog shows a smaller qps.

More information about the dns-operations mailing list