Security Incidents mailing list archives

Hmmm... named again.

From: bugtraq () HIT INETCOMM NET (Bugtraq List)
Date: Mon, 22 May 2000 12:22:31 +0400


Hi.
There was an incident with our named 8.2.2-P5 running on FreeBSD-2.2.5:
it suddenly started eating up cpu time up to 90%-99%.
tcpdump shows HUGE amount of queries like this to NS03.ARMY.MIL:
10:17:59.039345 ns.4846 > 130.114.200.6.domain: 50085 (42)
10:17:59.040603 ns.4846 > 130.114.200.6.domain: 23201 (42)
10:17:59.041872 ns.4846 > 130.114.200.6.domain: 46688 (42)

And the same for 192.82.113.7 (NS02.ARMY.MIL)

What can be the problem?

Current thread:

udp traffic to port 137 tobias wigand (May 19)
- network.exe -- was -- Re: udp traffic to port 137 Walt (May 20)
- Hmmm... named again. Bugtraq List (May 22)
- Slow scan Jens Hektor (May 22)
  - Re: Slow scan, the rest of the story Jens Hektor (May 24)
- Re: udp traffic to port 137 Robert Saraceno, Jr. (May 22)