How to track DNS resolution sources

Wed Dec 3 16:32:08 UTC 2014

On the command line:

host spoofed.host.name.com

On Dec 3, 2014, at 11:22 AM, Notify Me <notify.sina at gmail.com> wrote:

> Hi!
> 
> I hope I'm wording this correctly. I had a incident at a client site where
> a DNS record was being spoofed. How does one track down the IP address
> that's returning the false records ? What tool can one use?
> 
> Thanks!
> 
> 
> 
> 
> -- 
> Sent from MetroMail