Seeing some strange DNS queries?
Seeing some DNS queries in my work network that I cannot explain. Would anyone have any insight for me? Thank you. https://i.imgur.com/1WZ9wra.jpg
1 Answer
- Sort by
oldest newest most voted
0
Looks like the .67 node is looking for Windows shares that don't exist.
If there is nothing obvious in the system config, you can dig deeper with Windows sysinternals.
Here are examples of using sysinternals tools to look at network traffic on Windows:
Get IP/host informations of an app.
UDP Port 889 Broadcast (ip.ttl "Time to Live" only 1)
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments