Re: How to track DNS resolution sources

[TR Shaw <tshaw () oitc com>]

On the command line:

host spoofed.host.name.com


On Dec 3, 2014, at 11:22 AM, Notify Me <notify.sina () gmail com> wrote:

> Hi!
>
> I hope I'm wording this correctly. I had a incident at a client site where
> a DNS record was being spoofed. How does one track down the IP address
> that's returning the false records ? What tool can one use?
>
> Thanks!
>
>
>
>
> -- 
> Sent from MetroMail