[23824] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Non-existing domain

daemon@ATHENA.MIT.EDU (David Shaw)
Sun Apr 25 23:51:12 1999

Date: Sun, 25 Apr 1999 17:07:58 -0400
From: David Shaw <dshaw@jabberwocky.com>
To: nanog@merit.edu
Mail-Followup-To: nanog@merit.edu
In-Reply-To: <4.1.19990424082221.00c03500@gleim.gleim.com>; from Mark Moore on Sat, Apr 24, 1999 at 08:45:35AM -0400
Errors-To: owner-nanog-outgoing@merit.edu


On Sat, Apr 24, 1999 at 08:45:35AM -0400, Mark Moore wrote:
> 
> Is there any way to see if people have tried to get to non-existing
> domains?  I mean, if someone requests doda.org and it does not exist, is
> the request logged anywhere?

If you really wanted to, you can rig their local nameserver to log it.
That will only tell you who looked up a non-existant name using that
particular nameserver though.

There is no, and due to the way DNS is designed, can be no one repository
for such logs.

There was (and I hope someone who recalls this better than I do jumps in
with more info) an experiment a while back where someone rigged one of the
root servers to log NXDOMAINs.. it turned out that the majority of the bad
requests were for stuff like "WORKGROUP."  Sigh.

David

-- 
   David Shaw  |  dshaw@jabberwocky.com  |  WWW http://www.jabberwocky.com/
+---------------------------------------------------------------------------+
   "There are two major products that come out of Berkeley: LSD and UNIX.
      We don't believe this to be a coincidence." - Jeremy S. Anderson


home help back first fref pref prev next nref lref last post