On 25/06/2012, at 09.40, Klaus Darilion <[email protected]> wrote:

> I would expect that outgoing traffic is constant. Maybe, in this case also 
> legitimate queries are blocked (false positive)

That's assuming all other clients are behaving properly in the first place, 
could be a non negligible number of malware generating this background noise. 
Their existence might be revealed by rate limitation. 

But yes, it's worth digging. 
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations
dns-jobs mailing list
https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

Reply via email to