Refining log output...getting closer ...

linda w bind at tlinx.org
Mon Feb 24 18:34:29 UTC 2003


I'm working on a FW log processing script to make my life easier.
First thing this morning, I decided to take a look at what was happening
on the FW...of course, typical of Heizenberg's uncertainty principle,
the act of observing affects the results (looking at log causes name
lookups which in turn are recorded and cause more name lookups...:-))

The below is a snippet of about 2 minutes of log traffic, almost all of
which is DOMAIN traffic.

The items of note are the ones marked with "|<", representing =
blocked-incoming.
Notice there is a bunch!  In fact out of the 285 lines below, 108 of =
them
are *blocked* incoming DNS traffic.  So what's the "scoopage"?  Is my
firewall being lame and closing off the window of of an acceptable
reply too soon?  Should I just expect to receive random DNS updates from
servers purporting to be 'special'?

Looking at the first batch, b3.NSTLD.COM...seem to come out of nowhere,
but look at that bunch from "j.gtld", A Bunch!  And so it continues...
I ignore a bunch of incoming (I would presume) 'good' tld info packets =
--
though it doesn't appear that any where "asked" for...(?)=20

Is there other info I should be looking at to find out why I'm getting
these _seemingly_ unsolicited name requests (I'm guessing that I've
solicited them by inference, somewhere along the line, but dunno).

Ideas on what I may be "missing" with these dropped packets?

The "->" means permitted-outgoing, R/S are bytes received/sent.

As an /unrelated/ side note -- I noticed tons of NETBIOS scans from
random hosts throughout the day -- seemingly hundreds....any idea why
that is?....I finally just filtered them out of the logs into the
bit bucket -- as my boxes aren't sending and have no NETBIOS open ports.
Seems like such a 'clutter' with all those wasted packets coming in.

Thanks....
Linda


HostA:logs> tail -f /var/log/traff.log|p
20030224.0821,13 6 HostA:50567 -> b.root-servers.net:53;R: 617; S: 451
.0821,13 6 HostA:50568 -> c.root-servers.net   :53   ;R:1086; S: 544
.0821,12 6 HostA:50571 -> f.root-servers.net   :53   ;R: 617; S: 451
.0821,12 6 HostA:50569 -> d.root-servers.net   :53   ;R: 617; S: 451
.0821,12 6 HostA:50570 -> E.ROOT-SERVERS.NET   :53   ;R: 617; S: 451
.0821,13 6 HostA:50566 -> a.root-servers.net   :53   ;R: 617; S: 451
.0821,11 6 HostA:50573 -> h.root-servers.net   :53   ;R: 667; S: 415
.0821,11 6 HostA:50574 -> i.root-servers.net   :53   ;R: 581; S: 415
.0821,16 6 HostA:50572 -> G.ROOT-SERVERS.NET   :53   ;R: 773; S: 529
.0821,11 6 HostA:50575 -> j.root-servers.net   :53   ;R: 617; S: 451
.0821,15 6 HostA:50576 -> k.root-servers.net   :53   ;R: 765; S: 599
.0821,11 6 HostA:50577 -> l.root-servers.net   :53   ;R: 617; S: 451
.0822   99 HostA:34118 |< b3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0750,1877 6 HostA:50489 -> m.root-servers.net :53   ;R:  74; S:  78
.0822,3  6 HostA:34118 -> j.gtld-servers.net   :53   ;R: 247; S: 711
.0822,3  6 HostA:34118 -> m5.NSTLD.COM         :53   ;R: 162; S:  75
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 229; S: 152
.0822,3  6 HostA:34118 -> ns2.psi.net          :53   ;R: 172; S:  75
.0822,3  6 HostA:34118 -> f3.NSTLD.COM         :53   ;R: 442; S:  77
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< l.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822,3  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 442; S: 474
.0822,3  6 HostA:34118 -> a3.NSTLD.COM         :53   ;R: 139; S:  88
.0822,4  6 HostA:34118 -> l.gtld-servers.net   :53   ;R: 258; S: 634
.0822,2  6 HostA:34118 -> ;;Got bad packet: bad compression =
pointe:53;R:231;S:88
.0822,4  6 HostA:34118 -> ns.psi.net           :53   ;R: 188; S:  75
.0822,4  6 HostA:34118 -> f3.NSTLD.COM         :53   ;R: 229; S:  74
.0822   99 HostA:34118 |< g.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< g.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< g.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< g.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< g.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< g.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822,3  6 HostA:34118 -> j.gtld-servers.net   :53   ;R: 226; S:  82
.0822,5  6 HostA:34118 -> g.gtld-servers.net   :53   ;R: 247; S: 552
.0822,3  6 HostA:34118 -> a3.NSTLD.COM         :53   ;R: 445; S: 784
.0822,3  6 HostA:34118 -> ns-ext.vix.com       :53   ;R: 231; S:  88
.0822,3  6 HostA:34118 -> buchu.arin.net       :53   ;R: 329; S: 488
.0822   99 HostA:34118 |< i.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< i.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< i.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< i.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< i.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< buchu.arin.net       :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< l3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< l3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< j.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< m.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< m.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< m.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< m.gtld-servers.net   :53  =20
.0822,2  6 HostA:34118 -> arrowroot.arin.net   :53   ;R: 152; S:  91
.0822,2  6 HostA:34118 -> j.gtld-servers.net   :53   ;R: 251; S:  80
.0822,2  6 HostA:34118 -> j.gtld-servers.net   :53   ;R: 151; S: 233
.0822,2  6 HostA:34118 -> d3.NSTLD.COM         :53   ;R: 239; S:  79
.0822,2  6 HostA:34118 -> ns.asml.com          :53   ;R: 161; S:  72
.0822,2  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 239; S: 387
.0822,2  6 HostA:34118 -> E.ROOT-SERVERS.NET   :53   ;R: 198; S:  91
.0822,2  6 HostA:34118 -> a3.NSTLD.COM         :53   ;R: 445; S: 319
.0822,2  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 145; S:  87
.0822,2  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 444; S: 239
.0822,3  6 HostA:34118 -> i.gtld-servers.net   :53   ;R: 250; S: 475
.0822,2  6 HostA:34118 -> buchu.arin.net       :53   ;R: 329; S: 317
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< arrowroot.arin.net   :53  =20
.0822   99 HostA:34118 |< d3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< d3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< d3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< m.gtld-servers.net   :53  =20
.0822,3  6 HostA:34118 -> m.gtld-servers.net   :53   ;R: 258; S: 395
.0822   99 HostA:34118 |< b.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< ns2.psi.net          :53  =20
.0822   99 HostA:34118 |< ns2.psi.net          :53  =20
.0822   99 HostA:34118 |< b.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< b.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< b.gtld-servers.net   :53  =20
.0822,5  6 HostA:34118 -> arrowroot.arin.net   :53   ;R: 333; S: 638
.0822,4  6 HostA:34118 -> ns03.army.mil        :53   ;R: 274; S:  88
.0822,5  6 HostA:34118 -> ns2.net.umd.edu      :53   ;R: 177; S:  79
.0822,5  6 HostA:34118 -> d3.NSTLD.COM         :53   ;R: 226; S: 308
.0822,5  6 HostA:34118 -> m.gtld-servers.net   :53   ;R: 164; S: 163
.0822,2  6 HostA:34118 -> ns4.verisign-grs.net :53   ;R: 288; S:  88
.0822,4  6 HostA:34118 -> ns2.nsiregistry.net  :53   ;R: 287; S:  87
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< g3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< d3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< l3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< d3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< l3.NSTLD.COM         :53  =20
.0822,4  6 HostA:34118 -> ns5.psi.net          :53   ;R: 202; S:  86
.0822,4  6 HostA:34118 -> ns.fujisawa.wide.ad.jp:53  ;R: 212; S:  89
.0822,3  6 HostA:34118 -> b.gtld-servers.net   :53   ;R: 250; S: 317
.0822,4  6 HostA:34118 -> b.gtld-servers.net   :53   ;R: 155; S: 149
.0822,4  6 HostA:34118 -> ns2.psi.net          :53   ;R: 197; S: 240
.0822   99 HostA:34118 |< ns5.psi.net          :53  =20
.0822   99 HostA:34118 |< c.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< c.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< c.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< ns.psi.net           :53  =20
.0822,12 15 HostA:50579 -> mailhost            :mail ;R:rrrr; S:ssss
.0822,4  6 HostA:34118 -> d3.NSTLD.COM         :53   ;R: 444; S: 319
.0822,3  6 HostA:34118 -> m.gtld-servers.net   :53   ;R: 155; S:  75
.0822,4  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 445; S: 239
.0822,4  6 HostA:34118 -> b.gtld-servers.net   :53   ;R: 251; S:  83
.0822,4  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 234; S: 229
.0822   99 HostA:34118 |< c.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< d3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< l3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< m3.NSTLD.COM         :53  =20
.0822,3  6 HostA:34118 -> c.gtld-servers.net   :53   ;R: 172; S: 153
.0822,3  6 HostA:34118 -> c.gtld-servers.net   :53   ;R: 248; S: 237
.0822,3  6 HostA:34118 -> pri1.dns.psi.net     :53   ;R: 227; S:  86
.0822,3  6 HostA:34118 -> pri3.dns.psi.net     :53   ;R: 224; S:  86
.0822,4  6 HostA:34118 -> ns5.psi.net          :53   ;R: 197; S: 160
.0822,3  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 445; S:  80
.0822,3  6 HostA:34118 -> ns.psi.net           :53   ;R: 197; S: 160
.0822,3  6 HostA:34118 -> ns.psi.net           :53   ;R: 197; S:  80
.0822   99 HostA:34118 |< b.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< a.gtld-servers.net   :53  =20
.0822,4  6 HostA:34118 -> d3.NSTLD.COM         :53   ;R: 444; S: 159
.0822,4  6 HostA:34118 -> m3.NSTLD.COM         :53   ;R: 239; S: 154
.0822,4  6 HostA:34118 -> c.gtld-servers.net   :53   ;R: 164; S: 160
.0822,4  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 445; S:  80
.0822,4  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 140; S:  91
.0822,4  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 445; S: 160
.0822   99 HostA:34118 |< f3.NSTLD.COM         :53  =20
.0822   99 HostA:34118 |< a.gtld-servers.net   :53  =20
.0822,3  6 HostA:34118 -> a.gtld-servers.net   :53   ;R: 249; S: 159
.0822,3  6 HostA:34118 -> b.gtld-servers.net   :53   ;R: 164; S: 156
.0822,4  6 HostA:34118 -> ns.psi.net           :53   ;R: 197; S:  80
.0822,4  6 HostA:34118 -> gns1.nominum.com     :53   ;R: 168; S:  91
.0822,3  6 HostA:34118 -> a.gtld-servers.net   :53   ;R: 193; S: 159
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 138; S:  91
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 141; S:  92
.0822,3  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 142; S:  91
.0822,4  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 445; S:  80
.0822,3  6 HostA:34118 -> =
166.160-175.44.124.64.in-addr.arpa:53;R:281;S:91
.0822,4  6 HostA:34118 -> f3.NSTLD.COM         :53   ;R: 234; S: 155
.0822,3  6 HostA:34118 -> gns2.nominum.com     :53   ;R: 173; S:  92
.0822,4  6 HostA:34118 -> buchu.arin.net       :53   ;R: 333; S:  80
.0822,3  6 HostA:34118 -> d.gtld-servers.net   :53   ;R: 250; S:  80
.0822,3  6 HostA:34118 -> a.gtld-servers.net   :53   ;R: 171; S:  76
.0822,2  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 445; S:  80
.0822   99 HostA:34118 |< macu.ma.mt.np.els-gms.att.net:53  =20
.0822,3  6 HostA:34118 -> c.gtld-servers.net   :53   ;R: 193; S:  79
.0822   99 HostA:34118 |< wycu.wy.br.np.els-gms.att.net:53  =20
.0822,3  6 HostA:34118 -> ns03.army.mil        :53   ;R: 237; S:  90
.0822,3  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 149; S:  91
.0822,4  6 HostA:34118 -> ns.netscape.com      :53   ;R: 206; S:  91
.0822,3  6 HostA:34118 -> ns1.crsnic.net       :53   ;R: 276; S:  91
.0822,3  6 HostA:34118 -> ns2.nsiregistry.net  :53   ;R: 274; S:  89
.0822,3  6 HostA:34118 -> noc.net.umd.edu      :53   ;R: 261; S:  87
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 147; S:  89
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 155; S:  90
.0822,4  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 190; S:  90
.0822,4  6 HostA:34118 -> dmtu.mt.ns.els-gms.att.net:53;R:208;S:  90
.0822,4  6 HostA:34118 -> macu.ma.mt.np.els-gms.att.net:53;R:285;S:180
.0822   99 HostA:34118 |< d.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< d.gtld-servers.net   :53  =20
.0822,4  6 HostA:34118 -> wycu.wy.br.np.els-gms.att.net:53;R:285;S:180
.0822   99 HostA:34118 |< ohcu.oh.mt.np.els-gms.att.net:53  =20
.0822,4  6 HostA:34118 -> d.gtld-servers.net   :53   ;R: 262; S: 234
.0822   99 HostA:34118 |< d.gtld-servers.net   :53  =20
.0822   99 HostA:34118 |< d.gtld-servers.net   :53  =20
.0822,4  6 HostA:34118 -> pri2.dns.psi.net     :53   ;R: 227; S:  85
.0822,4  6 HostA:34118 -> ns.ripe.net          :53   ;R: 232; S:  91
.0822,4  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 441; S:  76
.0822   99 HostA:34118 |< a.gtld-servers.net   :53  =20
.0822,3  6 HostA:34118 -> gns1.nominum.com     :53   ;R: 153; S:  90
.0822,2  6 HostA:34118 -> d.gtld-servers.net   :53   ;R: 218; S: 234
.0822,3  6 HostA:34118 -> d.gtld-servers.net   :53   ;R: 209; S:  76
.0822,3  6 HostA:34118 -> d3.NSTLD.COM         :53   ;R: 204; S:  92
.0822,3  6 HostA:34118 -> c3.NSTLD.COM         :53   ;R: 160; S:  90
.0822,4  6 HostA:34118 -> sec2.dns.psi.net     :53   ;R: 221; S:  86
.0822,4  6 HostA:34118 -> e5.NSTLD.COM         :53   ;R: 232; S:  80
.0822,4  6 HostA:34118 -> pri3.dns.psi.net     :53   ;R: 224; S:  86
.0822,3  6 HostA:34118 -> ns.above.net         :53   ;R: 188; S:  98
.0822,6  6 HostA:34118 -> rs1.arin.net         :53   ;R: 244; S:  77
.0822,4  6 HostA:34118 -> fraggle.speakeasy.net:53   ;R: 190; S:  90
.0822,3  6 HostA:34118 -> orcu.or.br.np.els-gms.att.net:53;R:305;S:91
.0822,4  6 HostA:34118 -> ns-wide.wide.ad.jp   :53   ;R: 334; S:  91
.0822,3  6 HostA:34118 -> ohcu.oh.mt.np.els-gms.att.net:53;R:306;S:182
.0822,4  6 HostA:34118 -> =
100.64/26.151.120.61.in-addr.arpa:53;R:208;S:91
.0822,3  6 HostA:34118 -> f3.NSTLD.COM         :53   ;R: 203; S:  91
.0822,3  6 HostA:34118 -> gns2.nominum.com     :53   ;R: 152; S:  89
.0822   99 HostA:34118 |< a.gtld-servers.net   :53  =20
.0822,3  6 HostA:34118 -> a.gtld-servers.net   :53   ;R: 237; S: 157
.0822,3  6 HostA:34118 -> orcu.or.br.np.els-gms.att.net:53;R:285;S:90
.0822,3  6 HostA:34118 -> a.gtld-servers.net   :53   ;R: 205; S: 158
.0822,3  6 HostA:34118 -> dnsauth2.sys.gtei.net:53   ;R: 253; S:  79
.0822,3  6 HostA:34118 -> sec2.dns.psi.net     :53   ;R: 226; S:  86
.0822,3  6 HostA:34118 -> pri1.dns.psi.net     :53   ;R: 224; S:  86
.0822,3  6 HostA:34118 -> ns.above.net         :53   ;R: 181; S:  91
.0822,3  6 HostA:34118 -> h.gtld-servers.net   :53   ;R: 262; S:  77
.0822,4  6 HostA:34118 -> h.gtld-servers.net   :53   ;R: 180; S:  74
.0822,4  6 HostA:34118 -> ns3.verisign-grs.net :53   ;R: 273; S:  88
.0822,4  6 HostA:34118 -> ns.netscape.com      :53   ;R: 183; S:  90
.0822,4  6 HostA:34118 -> ns.vbns.net          :53   ;R: 271; S:  74
.0822,3  6 HostA:34118 -> cbru.br.ns.els-gms.att.net:53;R:224;S:  89
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 182; S:  91
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 135; S:  91
.0822,4  6 HostA:34118 -> mx.arc.nasa.gov      :53   ;R: 258; S:  86
.0822,3  6 HostA:34118 -> ns3.apnic.net        :53   ;R:  92; S:  76
.0822,4  6 HostA:34118 -> dnsauth1.sys.gtei.net:53   ;R: 143; S:  90
.0822,4  6 HostA:34118 -> dnsauth2.sys.gtei.net:53   ;R: 221; S:  79
.0822,3  6 HostA:34118 -> h.gtld-servers.net   :53   ;R: 221; S:  79
.0822,3  6 HostA:34118 -> g3.NSTLD.COM         :53   ;R: 182; S:  91
.0822,3  6 HostA:34118 -> ns3.netsol.com       :53   ;R: 195; S:  77
.0822,3  6 HostA:34118 -> rs2.arin.net         :53   ;R: 232; S:  91
.0822,3  6 HostA:34118 -> fraggle.speakeasy.net:53   ;R: 191; S:  88
.0822,3  6 HostA:34118 -> rip.psg.com          :53   ;R: 233; S:  91
.0822,3  6 HostA:34118 -> orcu.or.br.np.els-gms.att.net:53;R:306;S:92
.0822,3  6 HostA:34118 -> mango.itojun.org     :53   ;R: 322; S:  91
.0822,3  6 HostA:34118 -> b3.NSTLD.COM         :53   ;R: 441; S:  76
.0822,3  6 HostA:34118 -> f3.NSTLD.COM         :53   ;R: 204; S:  92
.0823,3  6 HostA:34118 -> e.gtld-servers.net   :53   ;R: 221; S:  79
.0823,3  6 HostA:34118 -> h.gtld-servers.net   :53   ;R: 195; S: 150
.0823,3  6 HostA:34118 -> dns0.spin.ad.jp      :53   ;R: 134; S:  91
.0823,3  6 HostA:34118 -> ns1.apnic.net        :53   ;R: 232; S:  91
.0823   99 HostA:34118 |< m3.NSTLD.COM         :53  =20
.0823,3  6 HostA:34118 -> ns1.netsol.com       :53   ;R: 218; S:  92
.0823,4  6 HostA:34118 -> ns4.verisign-grs.net :53   ;R: 276; S:  91
.0823,3  6 HostA:34118 -> ns4.vbns.net         :53   ;R: 180; S:  91
.0823,3  6 HostA:34118 -> orcu.or.br.np.els-gms.att.net:53;R:317;S:92
.0823,3  6 HostA:34118 -> dns0.telstra.net     :53   ;R: 208; S:  78
.0823,3  6 HostA:34118 -> dns1.telstra.net     :53   ;R: 203; S:  90
.0823,3  6 HostA:34118 -> a3.NSTLD.COM         :53   ;R: 156; S:  92
.0823,3  6 HostA:34118 -> nasans4.nasa.gov     :53   ;R: 331; S:  79
.0823,3  6 HostA:34118 -> mx.arc.nasa.gov      :53   ;R: 355; S:  90
.0823,3  6 HostA:34118 -> tinnie.apnic.net     :53   ;R: 276; S:  90
.0823,4  6 HostA:34118 -> ns.ntt.net           :53   ;R: 212; S:  91
.0823,3  6 HostA:34118 -> l3.NSTLD.COM         :53   ;R: 156; S:  91
.0823,3  6 HostA:34118 -> dnsauth2.sys.gtei.net:53   ;R: 228; S:  85
.0823,4  6 HostA:34118 -> dnsauth2.sys.gtei.net:53   ;R: 228; S:  85
.0823,3  6 HostA:34118 -> f3.NSTLD.COM         :53   ;R: 172; S:  90
.0823,4  6 HostA:34118 -> c.gtld-servers.net   :53   ;R: 195; S:  76
.0823,4  6 HostA:34118 -> h.gtld-servers.net   :53   ;R: 178; S:  76
.0823,4  6 HostA:34118 -> rs1.arin.net         :53   ;R: 237; S:  91
1234567890123456789012345678901234567890123456789012345678901234567890123=
4567890



More information about the bind-users mailing list