Re: Random nx name queries, anyone see this before?

2008-12-16 Thread Dave Sparro
Alan Clegg wrote: ponga2...@gmail.com wrote: I'm seeing name queries from a couple clients on the network that occur around every two minutes - the queries are evidently random and are looking for A IN records of this form, as an example: ungzbvyf.lzghmccim They always look like this, 8

Re: Random nx name queries, anyone see this before?

2008-12-16 Thread Ian Sampson
Do you get an injected response at the same time not from the relevant root server? The only way would be to gather a tetheral dump to see if that is the case? On 16 Dec 2008, at 14:20, Alan Clegg wrote: Frank Behrens wrote: ponga2...@gmail.com ponga2...@gmail.com wrote on 15 Dec 2008

Re: Random nx name queries, anyone see this before?

2008-12-16 Thread Alan Clegg
Frank Behrens wrote: ponga2...@gmail.com ponga2...@gmail.com wrote on 15 Dec 2008 16:34: I'd be very interested in what others find. I do have an update and correction to my original post: The format is 9chars.8chars - as an example: qjnqrtfun.wxsifmgj Sometimes a colon appears, so the char

Re: Random nx name queries, anyone see this before?

2008-12-15 Thread Alan Clegg
ponga2...@gmail.com wrote: I'm seeing name queries from a couple clients on the network that occur around every two minutes - the queries are evidently random and are looking for A IN records of this form, as an example: ungzbvyf.lzghmccim They always look like this, 8 lowercase chars,