Excessive DNS requests
advICE :Intrusions : 2000419

Summary

Possible Denial of Service attempt.

Details

Some DNS servers will become unstable when trying to process large numbers of requests. In particular, the Windows 2000 DNS server is susceptible to this attack. Please check the following link to the relevant Microsoft Knowledge Base article for more information.

parametric information count The number of DNS requests within the last 10 seconds.

configuration for this item dns.request.count 300 The number of DNS requests to trigger this detection. dns.request.interval 10 The time interval (in seconds) over which the DNS requests are measured dns.requestlimits on Specifies whether this feature is enabled - use "off" to deactivate this feature

 
Version appeared: 2.5