nanog mailing list archives
Re: random dns queries with random sources
From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Wed, 19 Feb 2014 16:28:17 +0000
On Feb 19, 2014, at 10:57 PM, Beeman, Davis <Davis.Beeman () integratelecom com> wrote:
I am late to this train, but it appears no one else has brought this up. It is a DNS tunneling setup, not an attack.
This makes a lot of sense - good insight, will look into this further! ----------------------------------------------------------------------- Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com> Luck is the residue of opportunity and design. -- John Milton
Current thread:
- Re: random dns queries with random sources, (continued)
- Re: random dns queries with random sources Dobbins, Roland (Feb 18)
- Re: random dns queries with random sources George Herbert (Feb 18)
- Re: random dns queries with random sources Joe Maimon (Feb 18)
- Re: random dns queries with random sources Dobbins, Roland (Feb 18)
- Re: random dns queries with random sources Joe Maimon (Feb 18)
- Re: random dns queries with random sources Owen DeLong (Feb 18)
- Re: random dns queries with random sources Joe Maimon (Feb 18)
- Re: random dns queries with random sources sthaug (Feb 19)
- Re: random dns queries with random sources Dobbins, Roland (Feb 19)
- Re: random dns queries with random sources Simon Perreault (Feb 19)
- Re: random dns queries with random sources Tempest (Feb 19)
- RE: random dns queries with random sources Beeman, Davis (Feb 19)
- Re: random dns queries with random sources Pavel Zeleny (Feb 20)
- Re: random dns queries with random sources Steve Clark (Feb 20)