Hi, I have seen opposite (same?) situation with BIND9 nameserver -- many UDP queries and almost unresponsible both for UDP and TCP query. That was not due to BIND9's issue, but firewall (iptables) state table was full.