DNS malformed
advICE :Intrusions : 2000405

Summary

A incorrectly constructed DNS packet was seen.

Details

This event triggers when a DNS message has been seen that does not follow the protocol specification. Some DNS servers can crash or be broken into from such packets.

There are few reasons why you might see these packets:

• A hacker is trying to break into your systems.
• A hacker is trying to crash your systems.
• A hacker is sending other protocol traffic through the ports reserved by DNS.
• There is a misconfiguration or bug on your network.

parametric information length The length of the DNS packet. data The first 24 bytes of the DNS packet (if there are any).

 
Version appeared: