time-b.netgear.com/time-c.netgear.com dns queries

Sat Sep 8 00:46:44 UTC 2012

On Sep 7, 2012, at 7:44 PM, Basil Baby wrote:

> Hmm... Even though similar issue was identified in 2003, looks like still
> there are devices in market with those old firmwares or similar
> behavior. sheesh !! :(
> 
> -Basil

While NETGEAR does have a history of issues like this, the UofW issue is likely not related to what you are seeing - that issue stemmed from them not using DNS and hardcoding the university's NTP server.  

The issue you are seeing seems to stem from their NTP code doing the Wrong Thing nonetheless...

> 
> 
> On Fri, Sep 7, 2012 at 8:30 PM, Gary E. Miller <gem at rellim.com> wrote:
> 
>> Yo Basil!
>> 
>> On Fri, 7 Sep 2012 20:22:29 -0400
>> Basil Baby <basilbaby at gmail.com> wrote:
>> 
>>> Noticed lot of "A" record queries for
>>> time-b.netgear.com/time-c.netgear.comon dns servers.
>>> Has anyone noticed similar behavior on any of your dns servers? Anyone
>>> aware about a known issue with netgear home routers which can create
>>> bulk dns queries?
>> 
>> 
>> https://en.wikipedia.org/wiki/NTP_server_misuse_and_abuse#NETGEAR_and_the_University_of_Wisconsin.E2.80.93Madison
>> 
>> 
>> RGDS
>> GARY
>> ---------------------------------------------------------------------------
>> Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97701
>>        gem at rellim.com  Tel:+1(541)382-8588
>> 