[dns-operations] annoying DDoS attack on ns0.rfc1035.com

Wessels, Duane dwessels at verisign.com
Mon Jun 11 20:30:55 UTC 2012


In case anyone wants a little help finding out if their name servers are being hit
with ANY queries, a new version of dnstop has been released with a filter to show only the ANY queries.

You can get the source code at http://dns.measurement-factory.com/tools/dnstop/src/dnstop-20120611.tar.gz

example usage:  dnstop -f qtype-any eth0

DW


More information about the dns-operations mailing list