PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Haufenweise Schlund DNS Abfragen?



Darklord
03.03.2005, 11:51
Hallo,


tcpdump meldet mir eine flut von Anfragen seitens Schlund.

Der Grund ist mir nicht bekannt und ich werde eifnach nicht schlau was da los ist.

Hier ein kleiner Ausschnitt:
-----------------------------------------------------
12:45:14.832229 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31672 NXDomain 0/1/0 (101)
12:45:51.098419 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:51.098703 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:53.079832 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:53.080257 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:54.225452 arp who-has ns2.std-service.de tell strohhalm-r4-a.bs.ka.schlund.net
12:45:57.090067 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:57.090103 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:46:41.886048 arp who-has 217.160.105.114 tell 10.255.255.253
12:46:41.886492 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31673+ PTR? 114.105.160.217.in-addr.arpa. (46)
12:46:41.890169 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31673 NXDomain 0/1/0 (107)
12:46:41.913845 arp who-has 217.160.105.115 tell 10.255.255.253
12:46:42.014819 arp who-has 217.160.105.117 tell 10.255.255.253
12:46:42.121847 arp who-has 217.160.105.119 tell 10.255.255.253
12:46:42.121970 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31674+ PTR? 119.105.160.217.in-addr.arpa. (46)
12:46:42.124760 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31674 NXDomain 0/1/0 (107)
12:46:42.270819 arp who-has 217.160.105.122 tell 10.255.255.253
12:46:42.270910 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31675+ PTR? 122.105.160.217.in-addr.arpa. (46)
12:46:42.272304 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31675 NXDomain 0/1/0 (107)
12:46:42.313840 arp who-has 217.160.105.123 tell 10.255.255.253
12:46:42.313932 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31676+ PTR? 123.105.160.217.in-addr.arpa. (46)
12:46:42.314509 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31676 NXDomain 0/1/0 (107)
12:46:42.470050 arp who-has 217.160.105.126 tell 10.255.255.253
12:46:42.517838 arp who-has 217.160.105.127 tell 10.255.255.253
12:46:42.517915 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31677+ PTR? 127.105.160.217.in-addr.arpa. (46)
12:46:42.520407 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31677 NXDomain 0/1/0 (107)
12:46:42.569839 arp who-has scapego.at tell 10.255.255.253
12:46:42.617846 arp who-has 217.160.105.129 tell 10.255.255.253
12:46:42.617914 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31678+ PTR? 129.105.160.217.in-addr.arpa. (46)
12:46:42.620662 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31678 NXDomain 0/1/0 (107)
12:46:42.684425 arp who-has 217.160.105.130 tell 10.255.255.253
12:46:42.684495 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31679+ PTR? 130.105.160.217.in-addr.arpa. (46)
12:46:42.685636 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31679 NXDomain 0/1/0 (107)
12:46:45.193440 arp who-has 217.160.105.114 tell 10.255.255.253
12:46:45.194150 arp who-has 217.160.105.117 tell 10.255.255.253
12:46:45.194663 arp who-has 217.160.105.119 tell 10.255.255.253
12:46:45.477802 arp who-has 217.160.105.122 tell 10.255.255.253
12:46:45.478525 arp who-has 217.160.105.126 tell 10.255.255.253
12:46:45.673946 arp who-has 217.160.105.130 tell 10.255.255.253
12:46:50.914508 arp who-has 217.160.105.115 tell 10.255.255.253
12:46:50.914963 arp who-has 217.160.105.114 tell 10.255.255.253
12:46:50.981831 arp who-has 217.160.105.117 tell 10.255.255.253
12:46:51.081832 arp who-has 217.160.105.119 tell 10.255.255.253
12:46:51.486135 arp who-has 217.160.105.127 tell 10.255.255.253
12:46:51.585887 arp who-has 217.160.105.129 tell 10.255.255.253
12:46:51.681817 arp who-has 217.160.105.130 tell 10.255.255.253
12:47:24.034055 arp who-has 217.160.105.123 tell 10.255.255.253
12:47:26.993624 arp who-has 217.160.105.123 tell 10.255.255.253
12:47:55.339942 arp who-has 10.1.2.16 tell 10.1.0.252
12:47:55.340314 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31680+ PTR? 16.2.1.10.in-addr.arpa. (40)
12:47:55.369907 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31680 NXDomain 0/1/0 (117)
12:47:56.338148 arp who-has 10.1.2.16 tell 10.1.0.252
12:47:57.338109 arp who-has 10.1.2.16 tell 10.1.0.252
12:47:57.650208 arp who-has 217.160.105.117 tell 10.255.255.253
12:48:14.366262 arp who-has 10.1.2.16 tell 10.1.0.252
12:48:15.357278 arp who-has 10.1.2.16 tell 10.1.0.252
12:48:16.357228 arp who-has 10.1.2.16 tell 10.1.0.252
12:48:33.858403 arp who-has 217.160.105.129 tell 10.255.255.253
12:48:36.302345 arp who-has 217.160.105.129 tell 10.255.255.253
12:48:55.087468 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:48:55.087654 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:48:57.065286 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:48:57.065881 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:01.073957 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:01.075572 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:27.366668 IP 10.1.128.252.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:27.366721 IP 10.1.0.252.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:36.061359 arp who-has 217.160.105.119 tell 10.255.255.253
12:50:00.993564 arp who-has dns2.dnsalias.org tell strohhalm-r4-a.bs.ka.schlund.net
12:50:00.994151 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31681+ PTR? 218.14.165.82.in-addr.arpa. (44)
12:50:00.996806 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31681 1/0/0 (75)
12:50:11.859650 arp who-has hosting-reserve.co.uk tell strohhalm-r4-a.bs.ka.schlund.net
12:50:11.860079 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31682+ PTR? 3.14.165.82.in-addr.arpa. (42)
12:50:11.861370 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31682 1/0/0 PTR[|domain]
-----------------------------------------------



Das geht endlos so weiter.


Hat jemand eine Idee? :(

Darklord
03.03.2005, 18:55
Hm?