Hi folks
We have been seeing a lot of large ICMP traffic with or without fragment
options after or before a DNS query between my DNS(s) servers and anothers
(outsiders) DNS servers.
Out trace issued that the traffic is generated from the outsiders. No matter
if our DNS servers are older or newer, we always receive large ICMP
echo-request.
Has anybody here seen the same in his network?
or
Is that a normal behavior (described by any RFC) to DNS servers?
The packets have a average size of 1024.
NOTE: We have checked the content of each packet in order to look for
commands, but those don't content any strange but only padding.
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
