Haufenweise Schlund DNS Abfragen?

D

Darklord

Grünschnabel
Hallo,


tcpdump meldet mir eine flut von Anfragen seitens Schlund.

Der Grund ist mir nicht bekannt und ich werde eifnach nicht schlau was da los ist.

Hier ein kleiner Ausschnitt:
-----------------------------------------------------
12:45:14.832229 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31672 NXDomain 0/1/0 (101)
12:45:51.098419 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:51.098703 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:53.079832 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:53.080257 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:54.225452 arp who-has ns2.std-service.de tell strohhalm-r4-a.bs.ka.schlund.net
12:45:57.090067 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:45:57.090103 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:46:41.886048 arp who-has 217.160.105.114 tell 10.255.255.253
12:46:41.886492 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31673+ PTR? 114.105.160.217.in-addr.arpa. (46)
12:46:41.890169 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31673 NXDomain 0/1/0 (107)
12:46:41.913845 arp who-has 217.160.105.115 tell 10.255.255.253
12:46:42.014819 arp who-has 217.160.105.117 tell 10.255.255.253
12:46:42.121847 arp who-has 217.160.105.119 tell 10.255.255.253
12:46:42.121970 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31674+ PTR? 119.105.160.217.in-addr.arpa. (46)
12:46:42.124760 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31674 NXDomain 0/1/0 (107)
12:46:42.270819 arp who-has 217.160.105.122 tell 10.255.255.253
12:46:42.270910 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31675+ PTR? 122.105.160.217.in-addr.arpa. (46)
12:46:42.272304 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31675 NXDomain 0/1/0 (107)
12:46:42.313840 arp who-has 217.160.105.123 tell 10.255.255.253
12:46:42.313932 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31676+ PTR? 123.105.160.217.in-addr.arpa. (46)
12:46:42.314509 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31676 NXDomain 0/1/0 (107)
12:46:42.470050 arp who-has 217.160.105.126 tell 10.255.255.253
12:46:42.517838 arp who-has 217.160.105.127 tell 10.255.255.253
12:46:42.517915 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31677+ PTR? 127.105.160.217.in-addr.arpa. (46)
12:46:42.520407 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31677 NXDomain 0/1/0 (107)
12:46:42.569839 arp who-has scapego.at tell 10.255.255.253
12:46:42.617846 arp who-has 217.160.105.129 tell 10.255.255.253
12:46:42.617914 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31678+ PTR? 129.105.160.217.in-addr.arpa. (46)
12:46:42.620662 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31678 NXDomain 0/1/0 (107)
12:46:42.684425 arp who-has 217.160.105.130 tell 10.255.255.253
12:46:42.684495 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31679+ PTR? 130.105.160.217.in-addr.arpa. (46)
12:46:42.685636 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31679 NXDomain 0/1/0 (107)
12:46:45.193440 arp who-has 217.160.105.114 tell 10.255.255.253
12:46:45.194150 arp who-has 217.160.105.117 tell 10.255.255.253
12:46:45.194663 arp who-has 217.160.105.119 tell 10.255.255.253
12:46:45.477802 arp who-has 217.160.105.122 tell 10.255.255.253
12:46:45.478525 arp who-has 217.160.105.126 tell 10.255.255.253
12:46:45.673946 arp who-has 217.160.105.130 tell 10.255.255.253
12:46:50.914508 arp who-has 217.160.105.115 tell 10.255.255.253
12:46:50.914963 arp who-has 217.160.105.114 tell 10.255.255.253
12:46:50.981831 arp who-has 217.160.105.117 tell 10.255.255.253
12:46:51.081832 arp who-has 217.160.105.119 tell 10.255.255.253
12:46:51.486135 arp who-has 217.160.105.127 tell 10.255.255.253
12:46:51.585887 arp who-has 217.160.105.129 tell 10.255.255.253
12:46:51.681817 arp who-has 217.160.105.130 tell 10.255.255.253
12:47:24.034055 arp who-has 217.160.105.123 tell 10.255.255.253
12:47:26.993624 arp who-has 217.160.105.123 tell 10.255.255.253
12:47:55.339942 arp who-has 10.1.2.16 tell 10.1.0.252
12:47:55.340314 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31680+ PTR? 16.2.1.10.in-addr.arpa. (40)
12:47:55.369907 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31680 NXDomain 0/1/0 (117)
12:47:56.338148 arp who-has 10.1.2.16 tell 10.1.0.252
12:47:57.338109 arp who-has 10.1.2.16 tell 10.1.0.252
12:47:57.650208 arp who-has 217.160.105.117 tell 10.255.255.253
12:48:14.366262 arp who-has 10.1.2.16 tell 10.1.0.252
12:48:15.357278 arp who-has 10.1.2.16 tell 10.1.0.252
12:48:16.357228 arp who-has 10.1.2.16 tell 10.1.0.252
12:48:33.858403 arp who-has 217.160.105.129 tell 10.255.255.253
12:48:36.302345 arp who-has 217.160.105.129 tell 10.255.255.253
12:48:55.087468 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:48:55.087654 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:48:57.065286 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:48:57.065881 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:01.073957 IP strohhalm-r4-b.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:01.075572 IP strohhalm-r4-a.bs.ka.schlund.net.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:27.366668 IP 10.1.128.252.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:27.366721 IP 10.1.0.252.bootps > 255.255.255.255.bootpc: BOOTP/DHCP, Reply, length: 300
12:49:36.061359 arp who-has 217.160.105.119 tell 10.255.255.253
12:50:00.993564 arp who-has dns2.dnsalias.org tell strohhalm-r4-a.bs.ka.schlund.net
12:50:00.994151 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31681+ PTR? 218.14.165.82.in-addr.arpa. (44)
12:50:00.996806 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31681 1/0/0 (75)
12:50:11.859650 arp who-has hosting-reserve.co.uk tell strohhalm-r4-a.bs.ka.schlund.net
12:50:11.860079 IP a15162939.alturo-server.de.32801 > cns34.schlund.net.domain: 31682+ PTR? 3.14.165.82.in-addr.arpa. (42)
12:50:11.861370 IP cns34.schlund.net.domain > a15162939.alturo-server.de.32801: 31682 1/0/0 PTR[|domain]
-----------------------------------------------



Das geht endlos so weiter.


Hat jemand eine Idee? :(
 
Hm?
 

Ähnliche Themen

Mysteriöser 11.4 Absturz - Maschine läuft, SSH und vor Ort Login unmöglich

Problem mit Squid-Proxy Transparent + ASA 5505

[Ubuntu 10.04] Netzwerk läuft nicht mehr richtig

NetworkManager soll WLAN beim Booten Starten

Statistikprogramm R

Zurück
Oben