Differences
This shows you the differences between two versions of the page.
opennic:tier2security [2017-06-29T04:28:38Z] – created fusl | opennic:tier2security [2017-07-04T23:43:07Z] (current) – fusl | ||
---|---|---|---|
Line 43: | Line 43: | ||
# tcpdump -c10 -pntxi eth0 not udp src port 53 and udp dst port 53 | # tcpdump -c10 -pntxi eth0 not udp src port 53 and udp dst port 53 | ||
- | The option | + | The option '' |
If your server is being attacked, you will probably see several instances of the particular query within those 10 packets. For example, while being flooded with ANY queries for the root zone, I captured the following: | If your server is being attacked, you will probably see several instances of the particular query within those 10 packets. For example, while being flooded with ANY queries for the root zone, I captured the following: |