[cs615asa] DNS query

Jan Schaumann jschauma at stevens.edu
Fri Mar 22 15:22:21 EDT 2019


Devesh Jain <djain5 at stevens.edu> wrote:
 
> After a time interval, the client queries the DNS again for yahoo.com.
> I don?t seem to understand why is this happening. Is it something to
> do with the DNS refresh interval?

No.  A separate query should only happen if something else is performing
a lookup.

One thing that can lead to a large number of DNS lookups is if you are
running your tcpdump without '-n', thus asking the tool to perform
reverse lookups for every IP it sees.  I can't tell whether this is what
you're seeing, though.

-Jan


More information about the cs615asa mailing list