How do you do....it? Thread, Is this even possible - which network client made a dns request? in Technical; The Palo Alto is showing me 4 or 5 connections an hour to a known spyware source (api.a-tu-zi.com) but of ...
19th June 2014, 04:53 PM #1
Is this even possible - which network client made a dns request?
The Palo Alto is showing me 4 or 5 connections an hour to a known spyware source (api.a-tu-zi.com) but of course as we are domain network all queries are showed as coming from the internal DNS server rather than the requesting internal client, is there any logging on the DNS server that might let me find out which internal client made the request to know where/who/what api.a-tu-zi.com was?
LeEdit - it's a 2003 MS server on a DC running built in DNS.
19th June 2014, 05:21 PM #2
I suspect the answer is "not unless you enable it because you're debugging something", yup: Select and enable debug logging options on the DNS server: Domain Name System(DNS)
By ljlbray in forum Netbooks, PDA and Phones
Last Post: 19th September 2011, 10:53 PM
By sidewinder in forum Mac
Last Post: 28th August 2008, 02:19 AM
By browolf in forum Windows
Last Post: 28th July 2008, 02:36 PM
By Gambit in forum Scripts
Last Post: 18th April 2007, 10:36 AM
Last Post: 12th December 2005, 04:01 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)