[dns-operations] 回复: Re: All requests are logged by BIND?

[Mike Hoskins (michoski)]

Well if you believe Google, you're comparing Quincy Public Schools and
Portland Public Schools, which have different lunch menus, job openings,
etc.

Sorry, needed to lighten up my day a bit...  8^P

Queries Per Second vs Packets Per Second...obviously PPS should be much
larger.

You should be able to determine what your rrd is actually storing -- all
packets or just DNS queries.  Either is possible, it depends how you've
set it up.  If you don't control the rrd/cacti/whatever config, you might
be able to tell by just looking at the units on the graph.

-----Original Message-----

From: Liu Mingxing <lmxhappy at gmail.com>
Reply-To: lmxhappy <lmxhappy at gmail.com>
Date: Friday, January 25, 2013 2:54 PM
To: Matthew Ghali <mghali at snark.net>
Cc: "dns-operations at lists.dns-oarc.net" <dns-operations at lists.dns-oarc.net>
Subject: [dns-operations] 回复: Re:  All requests are logged by BIND?

>what difference is there between them?which one is bigger?
> 
>________________________________________
>Liu Mingxing
> 
>发件人： Matthew Ghali <mailto:mghali at snark.net>
>发送时间： 2013-01-26 03:33
>收件人： lmxhappy <mailto:lmxhappy at gmail.com>
>抄送： dns-operations at lists.dns-oarc.net
>主题： Re: [dns-operations] All requests are logged by BIND?
>
>
>I'm pretty sure you are comparing qps to pps and being surprised that
>there is not a 1:1 relationship.
>
>
>matto
>
>On Jan 25, 2013, at 11:11 AM, Liu Mingxing <lmxhappy at gmail.com> wrote:
>
>
>By a
> rrdtool, I found that DNS traffic of router before an authoritative
>nameserver is larger than those seen from querylog. For example, cacti
>tells us qps is 2k while querylog shows a smaller qps.
>
>
>
>
>
>