[28272] in North American Network Operators' Group
Re: Question about strain on the A root server
daemon@ATHENA.MIT.EDU (Andrew Brown)
Sun Apr 23 13:29:38 2000
Date: Sun, 23 Apr 2000 13:27:34 -0400
From: Andrew Brown <twofsonet@graffiti.com>
To: John Fraizer <nanog@EnterZone.Net>
Cc: nanog@merit.edu
Message-ID: <20000423132734.A27050@noc.untraceable.net>
Reply-To: Andrew Brown <atatat@atatdot.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <Pine.LNX.3.96.1000423020256.10537A-100000@Overkill.EnterZone.Net>; from nanog@EnterZone.Net on Sun, Apr 23, 2000 at 02:07:03AM -0400
Errors-To: owner-nanog-outgoing@merit.edu
>Update! Just talked to the client and he found the following code in:
>
>/dev/.cas/
>
>It was named binfo.c
>
>I'm willing to bet that this may have something to do with the thrashing
>on A as well as on various nameservers around the net.
i doubt it. i, completely coincidentally, heard about binfo five days
ago.
binfo.c = Bind Version Checker
'binfo' is a quick little script to pull back the version
of named running on a remote nameserver. This is handy
for
comparing it to a list of known vulnerable versions of
named/bind. Previous to this, it took a few commands to
extract out the version.
http://www.attrition.org/tools/other/binfo.c
it also tries to determine if the given server supports iquery.
--
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org * "ah! i see you have the internet
twofsonet@graffiti.com (Andrew Brown) that goes *ping*!"
andrew@crossbar.com * "information is power -- share the wealth."
