The Domain Name Service as an IDS

Mark Radabaugh mark at
Thu Feb 23 14:56:25 UTC 2006

>> Amongst others, I've developed the following services with it for my
>> internal customers:
> Hi Chris, thanks for your reply. I was just told by the admin team to
> keep DNS operational issues off-list. Would you mind if we take this
> to the DNS operations mailing list run by the ISC OARC?
>     Gadi.

Let's see - a description of an interesting way to use DNS metrics to
detect network abuse - network abuse that routinely causes headaches on
our network and results in customer complaints.   Seems pretty on topic
for a network operations mailing list.

Mark Radabaugh

mark at

More information about the NANOG mailing list