Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: InfoSec Handlers Diary Blog - Packets wanted, DNS DDOS attacks InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Packets wanted, DNS DDOS attacks

Published: 2012-06-08
Last Updated: 2012-06-08 02:56:31 UTC
by Mark Hofman (Version: 1)
1 comment(s)

Jim posted earlier in the week ( regarding a bind 9 vulnerability.  Whilst possibly unrelated we've had a report regarding a few million DNS responses with static IDs being sent to an organisation.

If you have something similar happening and you are in a position to capture some packets we'd appreciate it if you could upload some for us to have a look at.  Especially of they all have the same ID number.  


1 comment(s)
Diary Archives