What can cause excessive amount of _dns-sd queries?

[Matus UHLAR - fantomas]

On 23.08.12 13:43, Eivind Olsen wrote:
>I haven't seen this before.. I'm currently seeing someone (1 ip address)
>do about 2.1 million queries / hour where a majority of the queries seem
>to be:
>
>b._dns-sd._udp.0.129.16.172.in-addr.arpa IN PTR +
>db._dns-sd._udp.0.129.16.172.in-addr.arpa IN PTR +
>r._dns-sd._udp.0.129.16.172.in-addr.arpa IN PTR +
>talk.l.google.com IN A +
>gmail-pop.l.google.com IN A +
>gmail-imap.l.google.com IN A +
>
>...and similar variations of these.
>
>Have any of you seen something like this before?

I have... a customer was complaining about its clients not able to get to
sites like facebook, youtube, apple store etc. I don't work for the company
anymore so I have no idea if they have fixed it (the only way I could think
of it was to change the company's DNS architecture

https://lists.isc.org/pipermail/bind-users/2012-April/087314.html

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol.