?
Solved

detect dns server

Posted on 2013-01-06
2
Medium Priority
?
311 Views
Last Modified: 2013-01-10
sounds like a strange question, but is there a way to detect all dns servers on our internal network?
0
Comment
Question by:al4629740
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 9

Accepted Solution

by:
gt2847c earned 1600 total points
ID: 38749548
Several possible ways to discover active servers, not necessarily all of them (especially if someone is attempting to conceal them)...

Cisco and other enterprise class network equipment support netflow collection.  Using netflow data you can look for traffic on TCP and UDP port 53.  Any internal network address answering traffic on 53 will likely be a DNS server or doing something it isn't supposed to which is still interesting.

Placing a sniffer (Wireshark, TCPDump, etc) in a central network traffic location and mirroring traffic to it can also be used to scan for the same traffic as above.

Actively scanning for systems answering on TCP and/or UDP 53.  NMAP is a free port scan utility that can do this.  There are plenty of commercial offerings as well.  Anything listening (and answering) on 53 is either a DNS server or again doing something it probably shouldn't be...
0
 
LVL 23

Assisted Solution

by:Suliman Abu Kharroub
Suliman Abu Kharroub earned 400 total points
ID: 38752878
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question