[dns-operations] DDoS attack data collection

[Brian Keefer]

BTW they're getting smarter.

Jan 30 19:25:02 imhotep named[32762]: client 208.76.253.253#53: view  
ext: query
(cache) './NS/IN' denied

That's the only one from port 53 I've seen so far, but it looks like  
they're adapting their tactics.

--
bk



On Jan 27, 2009, at 4:47 PM, Duane Wessels wrote:

> OARC is cooardinating collection of data that could help security
> researchers better understand this attack.  If you are willing to
> help out by sending us some packet captures, please consider running
> the shell script found on our web page:  https://www.dns-oarc.net/node/171
>
> Duane W.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations