[00:00] are you using an upstream parent? [00:00] you mean like a forwarder? [00:00] yeah [00:00] if so you can use forward first the nfail [00:00] err then direct [00:01] forward-first: yes [00:03] how can I test prefetch performance? [00:03] you can't [00:03] dns performance is pretty difficult to test. [00:04] bsaically if you go to google and get ttl of 60 msec [00:04] then you retrieve it again in 55 seconds [00:04] it will go and refresh the answer for you [00:04] to live another 60 seconds. [00:04] but it means if you do any kind of benchmarking it's hard to test [00:05] you can look at your mean service time [00:05] or median [00:05] and see if that improves [00:05] baut that can be complicated by lots of other factors too [00:06] do you know how to hide AUTHORITY SECTION: [00:06] in dig responses [00:06] you can type unbound-control stats_noreset [00:06] and it'll show you how many queries were prefetched [00:06] i enable minimal responses :/ [00:06] but no [00:06] i use host normally [00:07] you can find out the ttl from host using -v [00:07] then that shows authority section too [01:06] here is an odd dig response, duplicate AUTHORITY records with different TTLs: [01:07] http://pastebin.com/ptdx65ij [01:07] ADDITIONAL rather [01:38] *** acf_ has quit IRC (Ping timeout: 250 seconds) [02:12] *** acf_ has joined #arpnetworks [02:56] the ttl is different because that's the ttl of the a records on nameservers rather than the nameserver records. [02:56] i dunno why it's doubling up though [03:26] *** fink has joined #arpnetworks [04:54] *** tehfink has joined #arpnetworks [04:55] *** fink has quit IRC (Ping timeout: 264 seconds) [04:56] *** tehfink is now known as fink [05:25] *** staticsafe has quit IRC (Ping timeout: 265 seconds) [05:25] *** neish has quit IRC (Ping timeout: 265 seconds) [05:29] *** staticsafe has joined #arpnetworks [05:32] *** neish has joined #arpnetworks [07:47] *** j3ss1ca has joined #arpnetworks [08:20] *** j3ss1ca has quit IRC (Remote host closed the connection) [08:24] *** j3ss1ca has joined #arpnetworks [08:24] *** j3ss1ca has quit IRC (K-Lined) [10:14] I Googled'd my ARP VPS' hostname and found mentions of it as an NTP server :D [10:14] Sorry to say, only mentions of zeit or irclogger and pool.ntp.org listings [10:15] (and the ARP kb article) [10:40] *** fink has quit IRC (Ping timeout: 244 seconds) [10:44] *** brycec is now known as failcone [10:44] *** failcone is now known as brycec [10:46] *** fink has joined #arpnetworks [12:28] *** jessika_ has joined #arpnetworks [12:29] *** jessika_ has quit IRC (Remote host closed the connection) [12:31] *** erotic has joined #arpnetworks [12:31] *** erotic has quit IRC (Remote host closed the connection) [12:33] *** jessika_ has joined #arpnetworks [12:38] *** jessika_ has quit IRC (K-Lined) [12:46] *** erotic has joined #arpnetworks [12:48] *** erotic has quit IRC (Remote host closed the connection) [13:18] *** jessika_ has joined #arpnetworks [13:27] *** jessika_ has quit IRC (Remote host closed the connection) [13:32] *** jessika_ has joined #arpnetworks [13:37] *** erotic has joined #arpnetworks [13:47] *** jessika_ has quit IRC (Remote host closed the connection) [13:47] *** erotic has quit IRC (Remote host closed the connection) [13:53] *** jessika_ has joined #arpnetworks [14:03] *** erotic has joined #arpnetworks [15:59] *** fink has quit IRC (Quit: fink) [16:14] *** erotic is now known as gingiter [16:44] *** gingiter has quit IRC (Remote host closed the connection) [16:44] *** jessika_ has quit IRC (Remote host closed the connection) [16:47] *** jessika_ has joined #arpnetworks [16:48] *** jessika_ has quit IRC (K-Lined) [16:54] *** jessika_ has joined #arpnetworks [16:54] *** jessika_ has quit IRC (K-Lined) [16:54] *** gingiter has joined #arpnetworks [16:54] *** gingiter has quit IRC (K-Lined) [17:23] Can my mikrotik router somehow provide netflow statistics? [17:25] yes [17:25] it can [17:27] Mikrotik RouterBOARD RB2011UiAS-2HnD-IN [17:27] That's the model [17:28] *** jessika_ has joined #arpnetworks [17:29] Do I need to provide some kind of collector? [17:29] Can cacti integrate with the flow data? [17:31] Looks like it http://forums.cacti.net/viewtopic.php?f=14&t=50994 [17:31] (for loose meanings of "integrate") [17:39] mnathani: yes you need some kind of collector, something like ntop [17:40] er not ntop [17:41] yep ntop, nfsen, prtg etc. [17:50] *** gingiter has joined #arpnetworks [17:58] *** gingiter has quit IRC (Ping timeout: 258 seconds) [18:01] *** jessika_ has quit IRC (Remote host closed the connection) [18:49] *** gingiter has joined #arpnetworks [18:53] *** gingiter has quit IRC (Remote host closed the connection) [19:46] *** jessika_ has joined #arpnetworks [20:08] *** neish_ has joined #arpnetworks [20:09] *** neish has quit IRC (Ping timeout: 272 seconds) [20:32] *** jessika_ has quit IRC (Read error: Connection reset by peer) [21:05] The default is to store all NetFlow data (perform no addregation). [21:05] in the web interface, I found a typo [21:05] s/addregation/aggregation [21:05] The default is to store all NetFlow data (perform no aggregation). [21:10] can aggregation be done after the flow data is recorded? [21:48] *** jessika_ has joined #arpnetworks [21:52] *** jessika_ has quit IRC (Remote host closed the connection) [22:06] thanks staticsafe, I managed to get ntop working with netflow data from my Mikrotik Router [22:32] *** tellnes has quit IRC (Quit: ZNC - http://znc.sourceforge.net) [23:08] useful? [23:31] over time I think it will be [23:32] splits up bandwidth usage into destination addresses / AS as well as which host on my local net used the bandwidth [23:32] so I should be able to determine what % of traffic is netflix, facebook, youtube etc [23:37] ahh ok [23:50] yeah i think it'd be less useful for me