[dns-operations] DDoS attack data collection

Brian Keefer chort at smtps.net
Sat Jan 31 07:28:44 UTC 2009

BTW they're getting smarter.

Jan 30 19:25:02 imhotep named[32762]: client view  
ext: query
(cache) './NS/IN' denied

That's the only one from port 53 I've seen so far, but it looks like  
they're adapting their tactics.


On Jan 27, 2009, at 4:47 PM, Duane Wessels wrote:

> OARC is cooardinating collection of data that could help security
> researchers better understand this attack.  If you are willing to
> help out by sending us some packet captures, please consider running
> the shell script found on our web page:  https://www.dns-oarc.net/node/171
> Duane W.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

More information about the dns-operations mailing list