Bind 9.3.4-P1 Crashing?

9 msg	TTL Question
3 msg	dig
3 msg	Looking for a tool to handle multiple zones usi...
9 msg	DNS Behavior
3 msg	zone file settings question

Bind 9.3.4-P1 Crashing?
\ David Nolan (15 Oct 2007)
. \ David Nolan (15 Oct 2007)
. \ Tony Earnshaw (16 Oct 2007)
. . \ David Nolan (16 Oct 2007)
. . . \ Adam Tkac (16 Oct 2007)
. . . \ Fr34k (16 Oct 2007)

2 msg	bind9.3.1, ANY queries, and recursion
7 msg	New install of 9.4.1-P1 on Windows Server 2003R...
1 msg	DHCP client takes too much time to get IP address
2 msg	unexpected RCODE (SERVFAIL) : who does what ?
2 msg	Re: Geographic map of IPv6 availability
2 msg	ddns update for machines that changed subnet
2 msg	bind not talking to Active Directory (1165 Even...
3 msg	Unable to look up zone sencia.ca.
2 msg	Log rotation on Windows
3 msg	Connecting VPNned namespaces
2 msg	Need bind 9.4.2 RC 2 all right
10 msg	subdomain/split dns question
2 msg	question about forwarding...
2 msg	Questions regarding ipv6 and bind9

Subject:	Bind 9.3.4-P1 Crashing?
Group:	Bind-users
From:	David Nolan
Date:	15 Oct 2007

(sent this earlier, but it hasn't gone through for some reason....)

In the last two weeks I've seen Bind 9.3.4-P1 crash three times on my
recursive DNS servers. In each occasion multiple redundant servers
crashed nearly simultaneously. In each case bind has just apparently
died spontaneously with no errors logged anywhere, the servers
themselves continued to run as normal. The first time occurred two
weeks ago at 5AM on a Saturday on two servers providing identical
virtual server addresses. The same pair of servers died again this
morning around 6AM, and again at 10AM, but a third server providing
different service died as well that time.

These are linux machines, running 2.6.16.29. The kernel hasn't changed
on these machines recently. The last relevant thing that changed on
these machines should be when we upgraded to 9.3.4-P1 when it was
released.

I'm currently doing some packet collection to attempt to track this
down if/when it happens again. I have also upgraded one of the servers to
9.4.1-P1 to see if next time only one fails.

My questions for the list are:

Any one else seeing unexpected bind crashes in the last couple of weeks?

Are there any other debugging steps I should be taking now to provide
maximum useful data when it happens again?

-David Nolan
Network Services
Carnegie Mellon University