Internet Storm Center

Handler on Duty: Brad Duncan

Threat Level: green

Click HERE to learn more about classes Patrick is teaching for SANS

Recursive DNS Cache Auditing Resource

Published: 2008-07-25. Last Updated: 2008-07-25 19:45:55 UTC
by Patrick Nolan (Version: 1)

For those with a need, research described in Jose Avila's Recursive DNS Cache Auditing presentation is backed by the ONZRA security research tool CacheAudit v.01, see the Research folder at ONZRA for the CacheAudit download.

"CacheAudit is an open source aplication for monitoring the cache of a Recursive DNS server. It allows providers to detect and respond quickly to Cache Poisoning events".

Keywords:

1 comment(s)

Click HERE to learn more about classes Patrick is teaching for SANS

Comments

Most recursive DNS Implementations don't answer queries during dumping the cache to disk and you don't want that to happen to a heavily used caching nameserver at an ISP for it will get kicked out of the working set by the loadbalancer.
So Admins make sure you know what you're doing.

Top of page

Diary Archives