nanog mailing list archives

Re: random dns queries with random sources


From: "Dobbins, Roland" <rdobbins () arbor net>
Date: Wed, 19 Feb 2014 16:28:17 +0000


On Feb 19, 2014, at 10:57 PM, Beeman, Davis <Davis.Beeman () integratelecom com> wrote:

I am late to this train, but it appears no one else has brought this up.  It is a DNS tunneling setup, not an attack. 

This makes a lot of sense - good insight, will look into this further!

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

          Luck is the residue of opportunity and design.

                       -- John Milton



Current thread: