[Pdns-users] packet smalller than DNS header

Mark Watts m.watts at eris.qinetiq.com
Thu Aug 23 09:41:27 UTC 2007


On Thursday 23 August 2007 10:10:52 martin f krafft wrote:
> Hi, I am receiving messages such as
>
>   Unable to parse packet from remote UDP server 194.141.66.2: packet
>   smalller than DNS header

My guess would be someone is UDP scanning your dns server maybe?
Comparing a valid UDP query packet to the ones you're seeing may shed some 
light on it.

> from pdns_recursor. Apart from the triple l, which you may want to
> correct in a future version, is this a message I need to care about,
> or can I tell logcheck to ignore this? I am assuming I can ignore it
> but would like to get some feedback.

Mark

-- 
Mark Watts BSc RHCE MBCS
Senior Systems Engineer
QinetiQ Trusted Information Management
Trusted Solutions and Services Group
GPG Key: http://keyserver.veridis.com:11371/search?q=0x455420ED
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20070823/24ca4e50/attachment-0001.sig>


More information about the Pdns-users mailing list