random dns queries with random sources

Dobbins, Roland rdobbins at arbor.net
Wed Feb 19 16:28:17 UTC 2014

On Feb 19, 2014, at 10:57 PM, Beeman, Davis <Davis.Beeman at integratelecom.com> wrote:

> I am late to this train, but it appears no one else has brought this up.  It is a DNS tunneling setup, not an attack. 

This makes a lot of sense - good insight, will look into this further!

Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton

More information about the NANOG mailing list