Skip to Content.
Sympa Menu

discuss - Re: [opennic-discuss] Traffic Flood

discuss AT lists.opennicproject.org

Subject: Discuss mailing list

List archive

Re: [opennic-discuss] Traffic Flood


Chronological Thread 
  • From: waqas <waqas281 AT gmail.com>
  • To: discuss AT lists.opennicproject.org
  • Subject: Re: [opennic-discuss] Traffic Flood
  • Date: Mon, 15 Jul 2013 12:45:13 -0500

I see that's a lot of data going through good thing i caught it in time before my ISP did.


On Sun, Jul 14, 2013 at 11:30 PM, Bersl <bersl2 AT bersl2.info> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/14/2013 04:10 PM, Jeff Taylor wrote:
> The log entry doesn't seem to give much detail about what is going
> on. Do you know if this is directed at DNS queries or something
> else?  If it's DNS, can you post an example of the query or packet
> so we can see what is being sent?

Just based off of the available records, it's one of those monstrous
RRsets with no apparent purpose but to generate large answers to short
queries; see attachment.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJR43rzAAoJEKDJEQNczrCUU/UIAIVk+OuNC4IDNHNOPEF6pcMk
0WtqjIAn6k5TijnFEx/tCpLH0qkrgAsdGp71vptOA0kpyKYJJgq+Q7yIA4AIhwra
oljgNHVKS4CxR7aAgUcwu69ueRIIR7+K1PMh/O2JdUGWbHbz14K9LXwwuVzyVE4b
lEAngl0n4D/eexvY4AIhPFcYi9SNi73LFY/k8TWp80Ud/KqnQyZAABoPyeceQs+V
PgwwJ3ndH+tue2f7CsJFIwrwaFhZMqfy+iP6KrgcseVMw6q4P4nmCtfqfnJQ9iY7
zWKNlA/fZnGIDc7Lls9yI9jzpR74BoIAPPS5Tmsn0wDS9OURGNw/JgKgLhlcS78=
=D7I/
-----END PGP SIGNATURE-----


--------
You are a member of the OpenNIC Discuss list.
You may unsubscribe by emailing discuss-unsubscribe AT lists.opennicproject.org




Archive powered by MHonArc 2.6.19.

Top of Page