Re: [Sks-devel] Big amount of updated keys yesterday?

[Jeff Johnson]

On Apr 24, 2011, at 5:04 PM, Andrey Korobkov wrote:

> Good day, all.
> 
> Something really strange now: VERY BIG amount of keys!
> 
> cat recon.log | egrep '[0-9]{4} hashes'
> 
> 2011-04-11 22:03:20 6554 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-11 22:53:14 4857 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-12 00:24:46 2436 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-13 23:28:04 2890 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-14 00:15:15 2166 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 2011-04-18 19:23:57 4920 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 2011-04-21 21:27:14 5110 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-21 21:29:58 5119 hashes recovered from <ADDR_INET 
> [2001:a60:f01c:0:70:1:6:42]:11371>
> 2011-04-21 22:46:06 1339 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 2011-04-24 03:49:08 1027 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 03:52:40 1005 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-24 09:09:55 1802 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-24 09:11:47 1473 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 09:20:53 1802 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-24 09:22:46 1473 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 09:28:28 1802 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-24 09:33:32 1473 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 09:36:35 1802 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-24 09:42:23 1473 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 09:46:17 1802 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-24 09:54:53 1802 hashes recovered from <ADDR_INET 
> [2001:67c:288::2]:11371>
> 2011-04-24 09:57:35 3102 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 2011-04-24 11:47:06 3128 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 11:50:25 3109 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-24 13:16:38 3109 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-24 14:43:54 3133 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 14:55:30 3115 hashes recovered from <ADDR_INET 
> [2001:a60:f01c:0:70:1:6:42]:11371>
> 2011-04-24 16:45:46 3128 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 16:50:36 3110 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 2011-04-24 18:36:54 3117 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 2011-04-24 20:22:13 3131 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-24 21:51:20 3152 hashes recovered from <ADDR_INET 
> [2a01:4f8:110:1283::c401]:11371>
> 2011-04-24 21:54:08 3136 hashes recovered from <ADDR_INET 
> [2a01:4f8:100:2ffe::2]:11371>
> 2011-04-24 23:27:11 3139 hashes recovered from <ADDR_INET 
> [2001:470:a:233:9::29]:11371>
> 
> What do you say about it?
> Does anyone else see something like this on their servers?
> May it be just because of my server was out of sync for some time?

Perhaps. But you also have large numbers of messages like this:

2011-04-24 21:51:26 Error getting missing keys: Unix error: Connection refused 
- connect()

So what's really happening is that you received something abt ~3000 keys
once, not multiple thousands of keys multiple times.

3000 -> 1000 keys on an update isn't much percentage wise or too large.

hth

73 de Jeff

smime.p7s
Description: S/MIME cryptographic signature