unsolicited spam packets from DNS servers?
Mark_Andrews at isc.org
Mark_Andrews at isc.org
Tue Feb 25 05:16:15 UTC 2003
>
>
> > -----Original Message-----
> > From: Mark_Andrews at isc.org
> > I suspect that you are misclassifying reply traffic.,
>
> I use the IP address. How else should I be classifying
> incoming traffic?
You are making queries but not allowing the replies back.
Look at your logs. All the allowed traffic is outgoing.
All the blocked traffic in incoming. The blocked traffic
is heading to the port the allowed traffic comes from.
You are blocking replies and pounding the root servers
with queries that you are ignoring.
> In the first section below, I see 11 queries and 11 valid
> responses to those queries. These are followed by
> 9 "bogus" replies from IP's that I did not query. How
> can I reclassify them such that they are responses to
> queries if I didn't contact the hosts sending me the
> responses?
>
> Also, side issue -- how is the "=20" getting inserted at
> the end of some of those lines? I look at the outgoing
> record of the email in vi under linux and it isn't there --
> if I look under the outgoing email using Outlook, they aren't
> there. But message reflected back through the mailer
> does have them there. Weird.
>
>
>
> HostA:50568 -> c.root-servers.net :53 ;R:1086; S: 544
> HostA:50571 -> f.root-servers.net :53 ;R: 617; S: 451
> HostA:50569 -> d.root-servers.net :53 ;R: 617; S: 451
> HostA:50570 -> E.ROOT-SERVERS.NET :53 ;R: 617; S: 451
> HostA:50566 -> a.root-servers.net :53 ;R: 617; S: 451
> HostA:50573 -> h.root-servers.net :53 ;R: 667; S: 415
> HostA:50574 -> i.root-servers.net :53 ;R: 581; S: 415
> HostA:50572 -> G.ROOT-SERVERS.NET :53 ;R: 773; S: 529
> HostA:50575 -> j.root-servers.net :53 ;R: 617; S: 451
> HostA:50576 -> k.root-servers.net :53 ;R: 765; S: 599
> HostA:50577 -> l.root-servers.net :53 ;R: 617; S: 451
> 99 HostA:34118 |< b3.NSTLD.COM :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
> 99 HostA:34118 |< j.gtld-servers.net :53 =20
>
>
>
> This isn't new behavior. I've been seeing tons of these
> rejected 'incoming' DNS messages since I started trying to
> do log analysis. I still haven't had alot of luck in
> trying to figure out why I'm getting them. They seem to be
> about a spurious as the misconfigured Windows machines that
> keep sending NETBIOS packets....tons of those as well...
>
> thanks,
> -linda
>
>
>
> -------------------------------------------------------------------
> > > > .0750,1877 6 HostA:50489 -> m.root-servers.net :53 ;R:
> > 74; S: 78
> > > > .0822,3 6 HostA:34118 -> j.gtld-servers.net :53 ;R:
> > 247; S: 711
> > > > .0822,3 6 HostA:34118 -> m5.NSTLD.COM :53 ;R:
> > 162; S: 75
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 229; S: 152
> > > > .0822,3 6 HostA:34118 -> ns2.psi.net :53 ;R:
> > 172; S: 75
> > > > .0822,3 6 HostA:34118 -> f3.NSTLD.COM :53 ;R:
> > 442; S: 77
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< l.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822,3 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 442; S: 474
> > > .0822,3 6 HostA:34118 -> a3.NSTLD.COM :53 ;R: 139; S: 88
> > > > .0822,4 6 HostA:34118 -> l.gtld-servers.net :53 ;R:
> > 258; S: 634
> > > > .0822,2 6 HostA:34118 -> ;;Got bad packet: bad compression =
> > > > pointe:53;R:231;S:88
> > > > .0822,4 6 HostA:34118 -> ns.psi.net :53 ;R:
> > 188; S: 75
> > > > .0822,4 6 HostA:34118 -> f3.NSTLD.COM :53 ;R:
> > 229; S: 74
> > > > .0822 99 HostA:34118 |< g.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< g.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< g.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< g.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< g.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< g.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822,3 6 HostA:34118 -> j.gtld-servers.net :53 ;R:
> > 226; S: 82
> > > > .0822,5 6 HostA:34118 -> g.gtld-servers.net :53 ;R:
> > 247; S: 552
> > > > .0822,3 6 HostA:34118 -> a3.NSTLD.COM :53 ;R:
> > 445; S: 784
> > > > .0822,3 6 HostA:34118 -> ns-ext.vix.com :53 ;R:
> > 231; S: 88
> > > > .0822,3 6 HostA:34118 -> buchu.arin.net :53 ;R:
> > 329; S: 488
> > > > .0822 99 HostA:34118 |< i.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< i.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< i.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< i.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< i.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< buchu.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< l3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< l3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< j.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< j.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< m.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< m.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< m.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< m.gtld-servers.net :53 =20
> > > > .0822,2 6 HostA:34118 -> arrowroot.arin.net :53 ;R:
> > 152; S: 91
> > > > .0822,2 6 HostA:34118 -> j.gtld-servers.net :53 ;R:
> > 251; S: 80
> > > > .0822,2 6 HostA:34118 -> j.gtld-servers.net :53 ;R:
> > 151; S: 233
> > > > .0822,2 6 HostA:34118 -> d3.NSTLD.COM :53 ;R:
> > 239; S: 79
> > > > .0822,2 6 HostA:34118 -> ns.asml.com :53 ;R:
> > 161; S: 72
> > > > .0822,2 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 239; S: 387
> > > > .0822,2 6 HostA:34118 -> E.ROOT-SERVERS.NET :53 ;R:
> > 198; S: 91
> > > > .0822,2 6 HostA:34118 -> a3.NSTLD.COM :53 ;R:
> > 445; S: 319
> > > > .0822,2 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 145; S: 87
> > > > .0822,2 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 444; S: 239
> > > > .0822,3 6 HostA:34118 -> i.gtld-servers.net :53 ;R:
> > 250; S: 475
> > > > .0822,2 6 HostA:34118 -> buchu.arin.net :53 ;R:
> > 329; S: 317
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< arrowroot.arin.net :53 =20
> > > > .0822 99 HostA:34118 |< d3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< d3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< d3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< m.gtld-servers.net :53 =20
> > > > .0822,3 6 HostA:34118 -> m.gtld-servers.net :53 ;R:
> > 258; S: 395
> > > > .0822 99 HostA:34118 |< b.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< ns2.psi.net :53 =20
> > > > .0822 99 HostA:34118 |< ns2.psi.net :53 =20
> > > > .0822 99 HostA:34118 |< b.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< b.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< b.gtld-servers.net :53 =20
> > > > .0822,5 6 HostA:34118 -> arrowroot.arin.net :53 ;R:
> > 333; S: 638
> > > > .0822,4 6 HostA:34118 -> ns03.army.mil :53 ;R:
> > 274; S: 88
> > > > .0822,5 6 HostA:34118 -> ns2.net.umd.edu :53 ;R:
> > 177; S: 79
> > > > .0822,5 6 HostA:34118 -> d3.NSTLD.COM :53 ;R:
> > 226; S: 308
> > > > .0822,5 6 HostA:34118 -> m.gtld-servers.net :53 ;R:
> > 164; S: 163
> > > > .0822,2 6 HostA:34118 -> ns4.verisign-grs.net :53 ;R:
> > 288; S: 88
> > > > .0822,4 6 HostA:34118 -> ns2.nsiregistry.net :53 ;R:
> > 287; S: 87
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< g3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< d3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< l3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< d3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< l3.NSTLD.COM :53 =20
> > > > .0822,4 6 HostA:34118 -> ns5.psi.net :53 ;R:
> > 202; S: 86
> > > > .0822,4 6 HostA:34118 -> ns.fujisawa.wide.ad.jp:53 ;R:
> > 212; S: 89
> > > > .0822,3 6 HostA:34118 -> b.gtld-servers.net :53 ;R:
> > 250; S: 317
> > > > .0822,4 6 HostA:34118 -> b.gtld-servers.net :53 ;R:
> > 155; S: 149
> > > > .0822,4 6 HostA:34118 -> ns2.psi.net :53 ;R:
> > 197; S: 240
> > > > .0822 99 HostA:34118 |< ns5.psi.net :53 =20
> > > > .0822 99 HostA:34118 |< c.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< c.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< c.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< ns.psi.net :53 =20
> > > > .0822,12 15 HostA:50579 -> mailhost :mail
> > ;R:rrrr; S:ssss
> > > > .0822,4 6 HostA:34118 -> d3.NSTLD.COM :53 ;R:
> > 444; S: 319
> > > > .0822,3 6 HostA:34118 -> m.gtld-servers.net :53 ;R:
> > 155; S: 75
> > > > .0822,4 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 445; S: 239
> > > > .0822,4 6 HostA:34118 -> b.gtld-servers.net :53 ;R:
> > 251; S: 83
> > > > .0822,4 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 234; S: 229
> > > > .0822 99 HostA:34118 |< c.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< d3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< l3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< m3.NSTLD.COM :53 =20
> > > > .0822,3 6 HostA:34118 -> c.gtld-servers.net :53 ;R:
> > 172; S: 153
> > > > .0822,3 6 HostA:34118 -> c.gtld-servers.net :53 ;R:
> > 248; S: 237
> > > > .0822,3 6 HostA:34118 -> pri1.dns.psi.net :53 ;R:
> > 227; S: 86
> > > > .0822,3 6 HostA:34118 -> pri3.dns.psi.net :53 ;R:
> > 224; S: 86
> > > > .0822,4 6 HostA:34118 -> ns5.psi.net :53 ;R:
> > 197; S: 160
> > > > .0822,3 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 445; S: 80
> > > > .0822,3 6 HostA:34118 -> ns.psi.net :53 ;R:
> > 197; S: 160
> > > > .0822,3 6 HostA:34118 -> ns.psi.net :53 ;R:
> > 197; S: 80
> > > > .0822 99 HostA:34118 |< b.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< a.gtld-servers.net :53 =20
> > > > .0822,4 6 HostA:34118 -> d3.NSTLD.COM :53 ;R:
> > 444; S: 159
> > > > .0822,4 6 HostA:34118 -> m3.NSTLD.COM :53 ;R:
> > 239; S: 154
> > > > .0822,4 6 HostA:34118 -> c.gtld-servers.net :53 ;R:
> > 164; S: 160
> > > > .0822,4 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 445; S: 80
> > > > .0822,4 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 140; S: 91
> > > > .0822,4 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 445; S: 160
> > > > .0822 99 HostA:34118 |< f3.NSTLD.COM :53 =20
> > > > .0822 99 HostA:34118 |< a.gtld-servers.net :53 =20
> > > > .0822,3 6 HostA:34118 -> a.gtld-servers.net :53 ;R:
> > 249; S: 159
> > > > .0822,3 6 HostA:34118 -> b.gtld-servers.net :53 ;R:
> > 164; S: 156
> > > > .0822,4 6 HostA:34118 -> ns.psi.net :53 ;R:
> > 197; S: 80
> > > > .0822,4 6 HostA:34118 -> gns1.nominum.com :53 ;R:
> > 168; S: 91
> > > > .0822,3 6 HostA:34118 -> a.gtld-servers.net :53 ;R:
> > 193; S: 159
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 138; S: 91
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 141; S: 92
> > > > .0822,3 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 142; S: 91
> > > > .0822,4 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 445; S: 80
> > > > .0822,3 6 HostA:34118 -> =
> > > > 166.160-175.44.124.64.in-addr.arpa:53;R:281;S:91
> > > > .0822,4 6 HostA:34118 -> f3.NSTLD.COM :53 ;R:
> > 234; S: 155
> > > > .0822,3 6 HostA:34118 -> gns2.nominum.com :53 ;R:
> > 173; S: 92
> > > > .0822,4 6 HostA:34118 -> buchu.arin.net :53 ;R:
> > 333; S: 80
> > > > .0822,3 6 HostA:34118 -> d.gtld-servers.net :53 ;R:
> > 250; S: 80
> > > > .0822,3 6 HostA:34118 -> a.gtld-servers.net :53 ;R:
> > 171; S: 76
> > > > .0822,2 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 445; S: 80
> > > > .0822 99 HostA:34118 |< macu.ma.mt.np.els-gms.att.net:53 =20
> > > > .0822,3 6 HostA:34118 -> c.gtld-servers.net :53 ;R:
> > 193; S: 79
> > > > .0822 99 HostA:34118 |< wycu.wy.br.np.els-gms.att.net:53 =20
> > > > .0822,3 6 HostA:34118 -> ns03.army.mil :53 ;R:
> > 237; S: 90
> > > > .0822,3 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 149; S: 91
> > > > .0822,4 6 HostA:34118 -> ns.netscape.com :53 ;R:
> > 206; S: 91
> > > > .0822,3 6 HostA:34118 -> ns1.crsnic.net :53 ;R:
> > 276; S: 91
> > > > .0822,3 6 HostA:34118 -> ns2.nsiregistry.net :53 ;R:
> > 274; S: 89
> > > > .0822,3 6 HostA:34118 -> noc.net.umd.edu :53 ;R:
> > 261; S: 87
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 147; S: 89
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 155; S: 90
> > > > .0822,4 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 190; S: 90
> > > > .0822,4 6 HostA:34118 ->
> > dmtu.mt.ns.els-gms.att.net:53;R:208;S: 90
> > > > .0822,4 6 HostA:34118 ->
> > macu.ma.mt.np.els-gms.att.net:53;R:285;S:180
> > > > .0822 99 HostA:34118 |< d.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< d.gtld-servers.net :53 =20
> > > > .0822,4 6 HostA:34118 ->
> > wycu.wy.br.np.els-gms.att.net:53;R:285;S:180
> > > > .0822 99 HostA:34118 |< ohcu.oh.mt.np.els-gms.att.net:53 =20
> > > > .0822,4 6 HostA:34118 -> d.gtld-servers.net :53 ;R:
> > 262; S: 234
> > > > .0822 99 HostA:34118 |< d.gtld-servers.net :53 =20
> > > > .0822 99 HostA:34118 |< d.gtld-servers.net :53 =20
> > > > .0822,4 6 HostA:34118 -> pri2.dns.psi.net :53 ;R:
> > 227; S: 85
> > > > .0822,4 6 HostA:34118 -> ns.ripe.net :53 ;R:
> > 232; S: 91
> > > > .0822,4 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 441; S: 76
> > > > .0822 99 HostA:34118 |< a.gtld-servers.net :53 =20
> > > > .0822,3 6 HostA:34118 -> gns1.nominum.com :53 ;R:
> > 153; S: 90
> > > > .0822,2 6 HostA:34118 -> d.gtld-servers.net :53 ;R:
> > 218; S: 234
> > > > .0822,3 6 HostA:34118 -> d.gtld-servers.net :53 ;R:
> > 209; S: 76
> > > > .0822,3 6 HostA:34118 -> d3.NSTLD.COM :53 ;R:
> > 204; S: 92
> > > > .0822,3 6 HostA:34118 -> c3.NSTLD.COM :53 ;R:
> > 160; S: 90
> > > > .0822,4 6 HostA:34118 -> sec2.dns.psi.net :53 ;R:
> > 221; S: 86
> > > > .0822,4 6 HostA:34118 -> e5.NSTLD.COM :53 ;R:
> > 232; S: 80
> > > > .0822,4 6 HostA:34118 -> pri3.dns.psi.net :53 ;R:
> > 224; S: 86
> > > > .0822,3 6 HostA:34118 -> ns.above.net :53 ;R:
> > 188; S: 98
> > > > .0822,6 6 HostA:34118 -> rs1.arin.net :53 ;R:
> > 244; S: 77
> > > > .0822,4 6 HostA:34118 -> fraggle.speakeasy.net:53 ;R:
> > 190; S: 90
> > > > .0822,3 6 HostA:34118 ->
> > orcu.or.br.np.els-gms.att.net:53;R:305;S:91
> > > > .0822,4 6 HostA:34118 -> ns-wide.wide.ad.jp :53 ;R:
> > 334; S: 91
> > > > .0822,3 6 HostA:34118 ->
> > ohcu.oh.mt.np.els-gms.att.net:53;R:306;S:182
> > > > .0822,4 6 HostA:34118 -> =
> > > > 100.64/26.151.120.61.in-addr.arpa:53;R:208;S:91
> > > > .0822,3 6 HostA:34118 -> f3.NSTLD.COM :53 ;R:
> > 203; S: 91
> > > > .0822,3 6 HostA:34118 -> gns2.nominum.com :53 ;R:
> > 152; S: 89
> > > > .0822 99 HostA:34118 |< a.gtld-servers.net :53 =20
> > > > .0822,3 6 HostA:34118 -> a.gtld-servers.net :53 ;R:
> > 237; S: 157
> > > > .0822,3 6 HostA:34118 ->
> > orcu.or.br.np.els-gms.att.net:53;R:285;S:90
> > > > .0822,3 6 HostA:34118 -> a.gtld-servers.net :53 ;R:
> > 205; S: 158
> > > > .0822,3 6 HostA:34118 -> dnsauth2.sys.gtei.net:53 ;R:
> > 253; S: 79
> > > > .0822,3 6 HostA:34118 -> sec2.dns.psi.net :53 ;R:
> > 226; S: 86
> > > > .0822,3 6 HostA:34118 -> pri1.dns.psi.net :53 ;R:
> > 224; S: 86
> > > > .0822,3 6 HostA:34118 -> ns.above.net :53 ;R:
> > 181; S: 91
> > > > .0822,3 6 HostA:34118 -> h.gtld-servers.net :53 ;R:
> > 262; S: 77
> > > > .0822,4 6 HostA:34118 -> h.gtld-servers.net :53 ;R:
> > 180; S: 74
> > > > .0822,4 6 HostA:34118 -> ns3.verisign-grs.net :53 ;R:
> > 273; S: 88
> > > > .0822,4 6 HostA:34118 -> ns.netscape.com :53 ;R:
> > 183; S: 90
> > > > .0822,4 6 HostA:34118 -> ns.vbns.net :53 ;R:
> > 271; S: 74
> > > > .0822,3 6 HostA:34118 ->
> > cbru.br.ns.els-gms.att.net:53;R:224;S: 89
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 182; S: 91
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 135; S: 91
> > > > .0822,4 6 HostA:34118 -> mx.arc.nasa.gov :53 ;R:
> > 258; S: 86
> > > > .0822,3 6 HostA:34118 -> ns3.apnic.net :53 ;R:
> > 92; S: 76
> > > > .0822,4 6 HostA:34118 -> dnsauth1.sys.gtei.net:53 ;R:
> > 143; S: 90
> > > > .0822,4 6 HostA:34118 -> dnsauth2.sys.gtei.net:53 ;R:
> > 221; S: 79
> > > > .0822,3 6 HostA:34118 -> h.gtld-servers.net :53 ;R:
> > 221; S: 79
> > > > .0822,3 6 HostA:34118 -> g3.NSTLD.COM :53 ;R:
> > 182; S: 91
> > > > .0822,3 6 HostA:34118 -> ns3.netsol.com :53 ;R:
> > 195; S: 77
> > > > .0822,3 6 HostA:34118 -> rs2.arin.net :53 ;R:
> > 232; S: 91
> > > > .0822,3 6 HostA:34118 -> fraggle.speakeasy.net:53 ;R:
> > 191; S: 88
> > > > .0822,3 6 HostA:34118 -> rip.psg.com :53 ;R:
> > 233; S: 91
> > > > .0822,3 6 HostA:34118 ->
> > orcu.or.br.np.els-gms.att.net:53;R:306;S:92
> > > > .0822,3 6 HostA:34118 -> mango.itojun.org :53 ;R:
> > 322; S: 91
> > > > .0822,3 6 HostA:34118 -> b3.NSTLD.COM :53 ;R:
> > 441; S: 76
> > > > .0822,3 6 HostA:34118 -> f3.NSTLD.COM :53 ;R:
> > 204; S: 92
> > > > .0823,3 6 HostA:34118 -> e.gtld-servers.net :53 ;R:
> > 221; S: 79
> > > > .0823,3 6 HostA:34118 -> h.gtld-servers.net :53 ;R:
> > 195; S: 150
> > > > .0823,3 6 HostA:34118 -> dns0.spin.ad.jp :53 ;R:
> > 134; S: 91
> > > > .0823,3 6 HostA:34118 -> ns1.apnic.net :53 ;R:
> > 232; S: 91
> > > > .0823 99 HostA:34118 |< m3.NSTLD.COM :53 =20
> > > > .0823,3 6 HostA:34118 -> ns1.netsol.com :53 ;R:
> > 218; S: 92
> > > > .0823,4 6 HostA:34118 -> ns4.verisign-grs.net :53 ;R:
> > 276; S: 91
> > > > .0823,3 6 HostA:34118 -> ns4.vbns.net :53 ;R:
> > 180; S: 91
> > > > .0823,3 6 HostA:34118 ->
> > orcu.or.br.np.els-gms.att.net:53;R:317;S:92
> > > > .0823,3 6 HostA:34118 -> dns0.telstra.net :53 ;R:
> > 208; S: 78
> > > > .0823,3 6 HostA:34118 -> dns1.telstra.net :53 ;R:
> > 203; S: 90
> > > > .0823,3 6 HostA:34118 -> a3.NSTLD.COM :53 ;R:
> > 156; S: 92
> > > > .0823,3 6 HostA:34118 -> nasans4.nasa.gov :53 ;R:
> > 331; S: 79
> > > > .0823,3 6 HostA:34118 -> mx.arc.nasa.gov :53 ;R:
> > 355; S: 90
> > > > .0823,3 6 HostA:34118 -> tinnie.apnic.net :53 ;R:
> > 276; S: 90
> > > > .0823,4 6 HostA:34118 -> ns.ntt.net :53 ;R:
> > 212; S: 91
> > > > .0823,3 6 HostA:34118 -> l3.NSTLD.COM :53 ;R:
> > 156; S: 91
> > > > .0823,3 6 HostA:34118 -> dnsauth2.sys.gtei.net:53 ;R:
> > 228; S: 85
> > > > .0823,4 6 HostA:34118 -> dnsauth2.sys.gtei.net:53 ;R:
> > 228; S: 85
> > > > .0823,3 6 HostA:34118 -> f3.NSTLD.COM :53 ;R:
> > 172; S: 90
> > > > .0823,4 6 HostA:34118 -> c.gtld-servers.net :53 ;R:
> > 195; S: 76
> > > > .0823,4 6 HostA:34118 -> h.gtld-servers.net :53 ;R:
> > 178; S: 76
> > > > .0823,4 6 HostA:34118 -> rs1.arin.net :53 ;R:
> > 237; S: 91
> > > > 12345678901234567890123456789012345678901234567890123456789012
> > > > 34567890123=
> > > > 4567890
> > > >
> > > >
> > > >
> > >
> > >
> > --
> > Mark Andrews, Internet Software Consortium
> > 1 Seymour St., Dundas Valley, NSW 2117, Australia
> > PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at isc.org
> >
> >
>
>
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at isc.org
More information about the bind-users
mailing list