Excessive DNS Requests
Anyone else seeing excessive DNS requests hammering their local forwarders this evening. We've just taken our residence network off-line owing to the level of port 53 traffic coming from it. Can't see anything in the usual places regarding this.... Cheers Ian -- Ian Anderson Network Support Lancaster University t: 01524 593393 ~ IP: 01524 510101 ~f: 01524 525125 mailto:i.anderson@lancs.ac.uk
On Wed, Oct 13, 2004 at 07:49:03PM +0100, Anderson, Ian wrote:
Anyone else seeing excessive DNS requests hammering their local forwarders this evening. We've just taken our residence network off-line owing to the level of port 53 traffic coming from it. Can't see anything in the usual places regarding this....
I see no abnormal dns requests on our caching aswell authorative servers. -- Cliff Albert <cliff@oisec.net>
<quote who="Anderson, Ian">
Anyone else seeing excessive DNS requests hammering their local forwarders this evening. We've just taken our residence network off-line owing to the level of port 53 traffic coming from it. Can't see anything in the usual places regarding this....
Things seem normal over here... http://fiona.everybox.com/~davidu/dns1-101304-120500pdt.png (authoritative ns) Are the residents actually making legit DNS queries or just spewing down port 53? -davidu ---------------------------------------------------- David A. Ulevitch - Founder, EveryDNS.Net http://david.ulevitch.com -- http://everydns.net ----------------------------------------------------
On Wed, 13 Oct 2004, Anderson, Ian wrote:
Anyone else seeing excessive DNS requests hammering their local forwarders this evening. We've just taken our residence network off-line owing to the level of port 53 traffic coming from it. Can't see anything in the usual places regarding this....
Have you considered zombie / trojan machines being used as spam vectors? For example, here's a presentation at SANOG earlier this year - http://jameslick.com/zombies/Tracking%20A%20Zombie%20Army.pdf srs
participants (4)
-
Anderson, Ian -
Cliff Albert -
David A. Ulevitch -
Suresh Ramasubramanian