Re: DNS help

From: Matt Zimmerman (mdzat_private)
Date: Sun Dec 15 2002 - 14:47:52 PST

  • Next message: Eric Chien: "Re: IRC -> smtp worm?"

    On Thu, Dec 12, 2002 at 02:54:29PM -0500, larosa, vjay wrote:
    
    > That is exactly what I am trying to figure out. What is the meaning
    > of '[1au][|domain]'. 56162 is the DNS transaction ID. When a DNS server
    > makes a request a number is tagged to it, that way when the reply comes
    > back it can match it up with the request. I just don't know what the meaning
    > of 1au is.
    
    [|domain] means that only part of the packet was captured, and that it was
    truncated while the DNS protocol information was being decoded.
    
    -- 
     - mdz
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Dec 18 2002 - 19:38:31 PST