[cs615asa] DNS query
Jan Schaumann
jschauma at stevens.edu
Fri Mar 22 15:22:21 EDT 2019
Devesh Jain <djain5 at stevens.edu> wrote:
> After a time interval, the client queries the DNS again for yahoo.com.
> I don?t seem to understand why is this happening. Is it something to
> do with the DNS refresh interval?
No. A separate query should only happen if something else is performing
a lookup.
One thing that can lead to a large number of DNS lookups is if you are
running your tcpdump without '-n', thus asking the tool to perform
reverse lookups for every IP it sees. I can't tell whether this is what
you're seeing, though.
-Jan
More information about the cs615asa
mailing list