Is there any way to see if people have tried to get to non-existing domains? I mean, if someone requests doda.org and it does not exist, is the request logged anywhere? ~mark ---------------------------- Mark Moore <mark@gleim.com> Network Administrator Gleim Publications, Inc. http://www.gleim.com (352) 375-0772 ext. 116 (800) 87-GLEIM ext. 116 FAX: (352) 375-6940 -----------------------------
On Sat, Apr 24, 1999 at 08:45:35AM -0400, Mark Moore wrote:
Is there any way to see if people have tried to get to non-existing domains? I mean, if someone requests doda.org and it does not exist, is the request logged anywhere?
If you really wanted to, you can rig their local nameserver to log it. That will only tell you who looked up a non-existant name using that particular nameserver though. There is no, and due to the way DNS is designed, can be no one repository for such logs. There was (and I hope someone who recalls this better than I do jumps in with more info) an experiment a while back where someone rigged one of the root servers to log NXDOMAINs.. it turned out that the majority of the bad requests were for stuff like "WORKGROUP." Sigh. David -- David Shaw | dshaw@jabberwocky.com | WWW http://www.jabberwocky.com/ +---------------------------------------------------------------------------+ "There are two major products that come out of Berkeley: LSD and UNIX. We don't believe this to be a coincidence." - Jeremy S. Anderson
On Sun, 25 Apr 1999, David Shaw wrote:
There was (and I hope someone who recalls this better than I do jumps in with more info) an experiment a while back where someone rigged one of the root servers to log NXDOMAINs.. it turned out that the majority of the bad requests were for stuff like "WORKGROUP." Sigh.
I did this with some of the RIPE folks when I worked at the LINX. The results (from K, which remember is _only_ authoritative for .) roughly looked like this: 25% of queries were for '.' 65% of queries were for 'foo.' where foo is NOT a valid TLD The remaining 10% or so were for GTLD domains, valid TLDs etc. Also of interest given the RFC1918 debate currently going on was the fact that 5% of queries originated from 1918 address space. -- Paul
participants (3)
-
David Shaw -
Mark Moore -
Paul Thornton