Security Basics mailing list archives

Re: traceroute-like tool for UDP or TCP packet


From: "James Fields" <jvfields () tds net>
Date: Fri, 22 Aug 2003 01:08:42 -0400

The previous poster was correct - there are extremely rare cases where a
client can detect that it got a truncated reply from a DNS server due to the
size, and can re-connect TCP to issue the query.

----- Original Message -----
From: "Brian Austin" <baustin () ableinc com>
To: <security-basics () securityfocus com>
Sent: Thursday, August 21, 2003 6:23 PM
Subject: RE: traceroute-like tool for UDP or TCP packet


All DNS client requests/replies are UDP, regardless of size (they're
rarely, if ever, big).  DNS zone transfers, however, are TCP
communications.




---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: